lkml.org 
[lkml]   [2006]   [Mar]   [30]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    SubjectRe: [RFC] Virtualization steps
    From
    Date
    "Serge E. Hallyn" <serue@us.ibm.com> writes:

    > Quoting Chris Wright (chrisw@sous-sol.org):
    >> * Eric W. Biederman (ebiederm@xmission.com) wrote:
    >> > At least one implementation Linux Jails by Serge E. Hallyn was done
    > completely
    >> > with security modules, and the code was pretty minimal.
    >>
    >> Yes, although the networking area was something that looked better done
    >> via namespaces (at least that's my recollection of my conversations with
    >> Serge on that one a few years back).
    >
    > Yes, namespaces would be better - just as the file system isolation was
    > moved from a "strong chroot" approach to using pivot-root. Though note
    > that vserver still uses basically the method that bsdjail uses, and my
    > two attempts at getting network namespaces considered in the kernel so
    > far were dismal failures. Hopefully this time we've got some better,
    > more network-savvy minds on the task :)

    Any pointers to those old discussions?

    I'm curious why getting your network namespaces were dismal failures.
    Everyone ignored the patch?

    Eric
    -
    To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
    the body of a message to majordomo@vger.kernel.org
    More majordomo info at http://vger.kernel.org/majordomo-info.html
    Please read the FAQ at http://www.tux.org/lkml/

    \
     
     \ /
      Last update: 2006-03-30 15:43    [W:3.310 / U:0.068 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site