compatibility.xml (12859B)
1 <?xml version="1.0"?> 2 <!DOCTYPE compatibility SYSTEM "compatibility.dtd" []> 3 4 <compatibility> 5 <title>compatibility of util-vserver alpha branch</title> 6 7 <program name="capchroot"> 8 <location>LIBDIR</location> 9 <clicompat status="yes"/> 10 <funccompat status="yes"/> 11 </program> 12 13 <program name="distrib-info" status="removed"> 14 <location>LIBDIR</location> 15 <clicompat status="no"> 16 <text>replaced by <pref>vpkg</pref></text> 17 </clicompat> 18 <funccompat status="no"/> 19 </program> 20 21 <program name="fakerunlevel"> 22 <location>LIBDIR</location> 23 <clicompat status="yes"/> 24 <funccompat status="yes"/> 25 </program> 26 27 <program name="filetime"> 28 <location>LIBDIR</location> 29 <clicompat status="yes"/> 30 <funccompat status="yes"/> 31 </program> 32 33 <program name="ifspec"> 34 <location>LIBDIR</location> 35 <clicompat status="yes"/> 36 <funccompat status="yes"/> 37 </program> 38 39 <program name="install-*" status="removed"> 40 <location>LIBDIR</location> 41 <clicompat status="no"> 42 <text>Replaced by more general build-methods which are building vservers from apt-repositories.</text> 43 </clicompat> 44 <funccompat status="no"/> 45 </program> 46 47 <program name="listdevip"> 48 <location>LIBDIR</location> 49 <clicompat status="yes"/> 50 <funccompat status="yes"/> 51 </program> 52 53 <program name="parserpmdump"> 54 <location>LIBDIR</location> 55 <clicompat status="yes"/> 56 <funccompat status="yes"/> 57 </program> 58 59 <program name="readlink"> 60 <location>LIBDIR</location> 61 <clicompat status="yes"/> 62 <funccompat status="yes"/> 63 </program> 64 65 <program name="rootshell"> 66 <location>LIBDIR</location> 67 <clicompat status="yes"/> 68 <funccompat status="yes"/> 69 </program> 70 71 <program name="sample.sh" status="removed"> 72 <location>LIBDIR</location> 73 <clicompat status="no"> 74 <text>incompatible with recent configuration style.</text> 75 </clicompat> 76 <funccompat status="no"/> 77 </program> 78 79 <program name="save_s_context" status="removed"> 80 <location>LIBDIR</location> 81 <clicompat status="no"> 82 <text>incompatible with recent configuration style; partially replaced by <pref>save_ctxinfo</pref>.</text> 83 </clicompat> 84 <funccompat status="yes"/> 85 </program> 86 87 <program name="setattr"> 88 <location>LIBDIR</location> 89 <clicompat status="no"> 90 <text>Has been moved into SBINDIR. Lots of new option were added to support new functionality.</text> 91 </clicompat> 92 <funccompat status="no"> 93 <text>It is possible to recurse directories and it supports 94 all vserver related attributes (admin, hide, watch, barrier, 95 iunlink).</text> 96 </funccompat> 97 </program> 98 99 <program name="showattr"> 100 <location>LIBDIR</location> 101 <clicompat status="no"> 102 <text>Has been moved into SBINDIR. Lots of new option were added to support new functionality.</text> 103 </clicompat> 104 <funccompat status="no"> 105 <text>It is possible to recurse directories and it supports all 106 vserver related attributes (admin, hide, watch, barrier, 107 iunlink). The output has been changed: the flags are now in the 108 first column and they are displayed in a symbolic manner.</text> 109 </funccompat> 110 </program> 111 112 <program name="showperm"> 113 <location>LIBDIR</location> 114 <clicompat status="yes"/> 115 <funccompat status="yes"/> 116 </program> 117 118 <program name="vbuild" status="broken"> 119 <location>LIBDIR</location> 120 <clicompat status="yes"/> 121 <funccompat status="no"> 122 <text>will be removed/rewritten soon.</text> 123 </funccompat> 124 </program> 125 126 <program name="vcheck" status="broken"> 127 <location>LIBDIR</location> 128 <clicompat status="yes"/> 129 <funccompat status="no"> 130 <text>will be removed/rewritten soon.</text> 131 </funccompat> 132 </program> 133 134 <program name="vprofile" status="removed"> 135 <location>LIBDIR</location> 136 <clicompat status="no"> 137 <text>incompatible with recent configuration style.</text> 138 </clicompat> 139 <funccompat status="no"/> 140 </program> 141 142 <program name="vreboot"> 143 <location>LIBDIR</location> 144 <clicompat status="yes"/> 145 <funccompat status="yes"/> 146 </program> 147 148 <program name="vserverkillall" status="removed"> 149 <location>LIBDIR</location> 150 <clicompat status="no"> 151 <text><pref>vkill</pref> contains the needed functionality 152 already.</text> 153 </clicompat> 154 <funccompat status="no"/> 155 </program> 156 157 <program name="vservers.grabinfo.sh"> 158 <location>LIBDIR</location> 159 <clicompat status="yes"/> 160 <funccompat status="yes"/> 161 </program> 162 163 <program name="vunify" status="rewritten"> 164 <location>LIBDIR</location> 165 <clicompat status="no"> 166 <text>CLI has been changed to reflect new functionality. Now, it 167 accepts either a single vserver, or (directory,excludelist) 168 pairs as arguments. The old "refserver vserver1 vserver2 ..." 169 syntax is gone.</text> 170 </clicompat> 171 <funccompat status="limited"> 172 <text>vunify allows to unify generic paths, or vservers with 173 preconfigured reference vservers. The filelist is not taken from 174 packagemanagement anymore, but every file which has a counterpart 175 in the reference-path(s)/vserver(s) and is not in an excludelist 176 will be unified. A part of the excludelist will be generated 177 dynamically with information from the packagemanagement about 178 configfiles.</text> 179 </funccompat> 180 </program> 181 182 <program name="chbind"> 183 <location>SBINDIR</location> 184 <clicompat status="yes"/> 185 <funccompat status="yes"/> 186 </program> 187 188 <program name="chcontext"> 189 <location>SBINDIR</location> 190 <clicompat status="yes"/> 191 <funccompat status="yes"> 192 <text>Return code in '--disconnect' case is now more correctly.</text> 193 </funccompat> 194 </program> 195 196 <program name="rebootmgr"> 197 <location>SBINDIR</location> 198 <clicompat status="yes"/> 199 <funccompat status="yes"/> 200 </program> 201 202 <program name="reducecap"> 203 <location>SBINDIR</location> 204 <clicompat status="yes"/> 205 <funccompat status="yes"/> 206 </program> 207 208 <program name="vdu"> 209 <location>SBINDIR</location> 210 <clicompat status="yes"/> 211 <funccompat status="yes"/> 212 </program> 213 214 <program name="vfiles" status="broken"> 215 <location>SBINDIR</location> 216 <clicompat status="yes"/> 217 <funccompat status="no"> 218 <text>will be removed/rewritten soon.</text> 219 </funccompat> 220 </program> 221 222 <program name="vkill" status="rewritten"> 223 <location>SBINDIR</location> 224 <clicompat status="yes"/> 225 <funccompat status="limited"> 226 <text>It uses native kernel interface now and is secure (in 227 opposite to the old perl implementation).</text> 228 </funccompat> 229 </program> 230 231 <program name="vps" status="rewritten"> 232 <location>SBINDIR</location> 233 <clicompat status="yes"/> 234 <funccompat status="limited"> 235 <text>It has been rewritten into C and output might have been changed slightly.</text> 236 </funccompat> 237 </program> 238 239 <program name="vpstree"> 240 <location>SBINDIR</location> 241 <clicompat status="yes"/> 242 <funccompat status="yes"/> 243 </program> 244 245 <program name="vrpm" status="rewritten"> 246 <location>SBINDIR</location> 247 <clicompat status="yes"/> 248 <funccompat status="limited"> 249 <text>It has been rewritten into a secure, native C 250 implementation. Unpacking of files happens in host-ctx, but 251 scriptlets are executed in vserver context. The rpm database 252 will/can be hold outside of the vserver and there will never be 253 access on it from the inside (neither direct, nor by 254 scriptlets). This is implemented through an LD_PRELOAD wrapper 255 which provides own, secure NSS functions too.</text> 256 </funccompat> 257 </program> 258 259 <program name="vserver" status="rewritten"> 260 <location>SBINDIR</location> 261 <clicompat status="limited"> 262 <text>It accepts all the old arguments, but adds lots of new 263 ones. This program is intended as the basic vserver management 264 tool; e.g. to unify a vserver you can execute "vserver XX unify", 265 to install a package "vserver XX install PKG" and so on.</text> 266 </clicompat> 267 <funccompat status="limited"> 268 <text>This tool is rewritten to completely and is now resistant 269 against symlink attacks. It uses the new configuration scheme 270 and the iproute2 tools instead of ifconfig for network 271 setup. Old-style vserver can be still started through this tool, 272 but modifications/building of them is not possible 273 anymore.</text> 274 </funccompat> 275 </program> 276 277 <program name="vserver-copy" status="broken"> 278 <location>SBINDIR</location> 279 <clicompat status="yes"/> 280 <funccompat status="no"> 281 <text>will be removed/rewritten soon.</text> 282 </funccompat> 283 </program> 284 285 <program name="vserver-stat" status="rewritten"> 286 <location>SBINDIR</location> 287 <clicompat status="yes"/> 288 <funccompat status="yes"> 289 <text>It has been rewritten to use the new libvserver API. The 290 output has been changed slightly.</text> 291 </funccompat> 292 </program> 293 294 <program name="vtop"> 295 <location>SBINDIR</location> 296 <clicompat status="yes"/> 297 <funccompat status="yes"/> 298 </program> 299 300 <program name="exec-cd" status="new"> 301 <location>SBINDIR</location> 302 <funccompat status="yes"> 303 <text>changes into a directory in a secure manner and executes a 304 program there.</text> 305 </funccompat> 306 </program> 307 308 <program name="rpm-fake-resolver" status="new"> 309 <location>LIBDIR</location> 310 <funccompat status="yes"> 311 <text>NSS resolver; used by <pref>vrpm</pref> and executed in 312 vserver-ctx.</text> 313 </funccompat> 314 </program> 315 316 <program name="rpm-fake.so" status="new"> 317 <location>LIBDIR</location> 318 <funccompat status="yes"> 319 <text>LD_PRELOAD wrapper; used by <pref>vrpm</pref>.</text> 320 </funccompat> 321 </program> 322 323 <program name="vapt-get-worker" status="new"> 324 <location>LIBDIR</location> 325 <funccompat status="yes"> 326 <text>Helper script for <pref>vapt-get</pref>.</text> 327 </funccompat> 328 </program> 329 330 <program name="vpkg" status="new"> 331 <location>LIBDIR</location> 332 <funccompat status="yes"> 333 <text>Generic interface for package management; it allows 334 to install, remove or query packages in a distribution 335 independent manner. It can be seen as the successor of 336 <pref>distrib-info</pref>.</text> 337 </funccompat> 338 </program> 339 340 <program name="vrpm-preload" status="new"> 341 <location>LIBDIR</location> 342 <funccompat status="yes"> 343 <text>Helper script for <pref>vrpm</pref>.</text> 344 </funccompat> 345 </program> 346 347 <program name="vrpm-worker" status="new"> 348 <location>LIBDIR</location> 349 <funccompat status="yes"> 350 <text>Helper script for <pref>vrpm</pref>.</text> 351 </funccompat> 352 </program> 353 354 <program name="vserver-build" status="new"> 355 <location>LIBDIR</location> 356 <funccompat status="yes"> 357 <text>Builds a vserver from scratch and allows to select the 358 used method. It will be called by the "vserver XY build" 359 command.</text> 360 </funccompat> 361 </program> 362 363 <program name="vapt-get" status="new"> 364 <location>SBINDIR</location> 365 <funccompat status="yes"> 366 <text>Wrapper for apt-get; currently only the apt-rpm port 367 is supported. Metadata will/can be stored outside of the 368 vserver. This program call <pref>vrpm</pref>.</text> 369 </funccompat> 370 </program> 371 372 373 <program name="chxid" status="new"> 374 <location>SBINDIR</location> 375 <funccompat status="yes"> 376 <text>This program assigns the associated context of an inode. It 377 replaces parts of the vserver-quota tools.</text> 378 </funccompat> 379 </program> 380 381 <program name="lsxid" status="new"> 382 <location>SBINDIR</location> 383 <funccompat status="yes"> 384 <text>This program shows the associated context of an inode. It 385 replaces parts of the vserver-quota tools.</text> 386 </funccompat> 387 </program> 388 389 <program name="new-namespace" status="new"> 390 <location>SBINDIR</location> 391 <funccompat status="yes"> 392 <text>This program starts a program within a new namespace which is 393 created with CLONE_NEWNS. It is used e.g. by <pref>vrpm</pref> to 394 map the rpm-database into the vserver in a secure manner.</text> 395 </funccompat> 396 </program> 397 398 <program name="vlimit" status="new"> 399 <location>SBINDIR</location> 400 <funccompat status="yes"> 401 <text>This is an interface to the rlimit syscalls which allow to 402 limit resource-usage of contexts.</text> 403 </funccompat> 404 </program> 405 406 <program name="vrsetup" status="new"> 407 <location>SBINDIR</location> 408 <funccompat status="yes"> 409 <text>This program allows to setup vroot devices. It replaces 410 vrsetup from the vr-tools</text> 411 </funccompat> 412 </program> 413 </compatibility>