Re: [gentoo-hardened] virtualization with gentoo hardened

[Ed W]

Yiannis wrote:
> While
> googling a bit I read an article on ibm's site about linux containers
> (LXC) which is supposed to finally land on the kernel. I think that this
> might be worth trying as opposed to linux-vserver.
>
>


I don't really know all the in's and out's of this argument, but I would 
desire to have vserver push to integrate stuff upstream, but the main 
developer seems happy with the status quo and has had many knock backs 
previously.  As you point out, independently a bunch of people seem to 
be implementing substantially the same functionality, but without the 
prior history...  Shame we can't avoid the duplication of work here...

(One quite interesting patch included in the vserver kernel is a COW 
implementation of hardlink breaking.  This is interesting for a class of 
problems such as rsync style backups, or obviously for any kind of 
duplicated shared pools of files.  I would have thought this was an 
interesting feature to push upstream on it's own, but just to bring it 
to your attention in case it's useful for something else?)

Anyway, vserver is also a fairly developed wrapper around the 
containers, so hopefully any new stuff will absorbed into that project 
and gradually it's patch will become smaller, but it really is a 
terrific solution to a whole class of problems

Good luck

Ed W