Re: [gentoo-user] Increasing security [WAS: Rooted/compromised Gentoo, seeking advice [Solved?]

[Mark Knecht]

On Mon, Aug 16, 2010 at 7:16 AM, Bill Longman <bill.longman@×××××.com> wrote:
> On 08/14/2010 12:32 PM, Jarry wrote:
>> On 13. 8. 2010 21:05, Enrico Weigelt wrote:
>>> * Bill Longman<bill.longman@×××××.com>  wrote:
>>>
>>>> Basically just run VMWare/Virtualbox etc and put the services in there.
>>>
>>> well, these solutions are way "bigger" (iow: more resource
>>> intensive), since they run a complete operation system instance
>>> within the virtual machine.
>>
>> That is why I picked up Linux-VServer (actually, first I tried
>> OpenVZ but could not make it run). It is a kind of compromise,
>> where all guests share the same kernel. This brings certain
>> security implications, but on the other side, I can run dozens
>> of guest on a moderate machine, with 4-cores and 8GB memory
>> (i.e. a guest running bind takes just about 20MB of memory)...
>
> This looks rather interesting, Jarry. Is it simply a matter of compiling
> the vserver-sources and util-vserver? Did it take much time to set up
> the kernel for your box? Or is it pretty much a typical kernel setup?
> Any good tools in the util-vserver package?
>
>> The only service running on my "host" (main system) is sshd,
>> which I secured as much as I could. Everything else (web, mail,
>> dns, ftp, syslog, X, and plenty of users' services) runs on its
>> own guest-system, chrooted in addition (where it was possible).
>
> Sounds very efficient.
>
> TIA,
>
> Bill

Certainly looks interesting.

I guess the baselayout-vserver packages is somehow for setting up each
of the guests?

QUESTION: Where does X run? In the host or separate copies in each guest?

For a long time I've wanted to set up a single piece of hardware for
my parents, but with two screens, two keyboards, two mice. Each user
would have what they expect in front of them physically but it's
really a single computer. Can that be done using this software?

Thanks,
Mark