Messages in this thread | | | Date | Thu, 30 Mar 2006 07:29:22 -0600 | From | "Serge E. Hallyn" <> | Subject | Re: [RFC] Virtualization steps |
| |
Quoting Chris Wright (chrisw@sous-sol.org): > * Eric W. Biederman (ebiederm@xmission.com) wrote: > > At least one implementation Linux Jails by Serge E. Hallyn was done completely > > with security modules, and the code was pretty minimal. > > Yes, although the networking area was something that looked better done > via namespaces (at least that's my recollection of my conversations with > Serge on that one a few years back).
Yes, namespaces would be better - just as the file system isolation was moved from a "strong chroot" approach to using pivot-root. Though note that vserver still uses basically the method that bsdjail uses, and my two attempts at getting network namespaces considered in the kernel so far were dismal failures. Hopefully this time we've got some better, more network-savvy minds on the task :)
-serge - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |