Messages in this thread | | | Subject | Re: [RFC] Virtualization steps | From | (Eric W. Biederman) | Date | Thu, 30 Mar 2006 06:37:10 -0700 |
| |
"Serge E. Hallyn" <serue@us.ibm.com> writes:
> Quoting Chris Wright (chrisw@sous-sol.org): >> * Eric W. Biederman (ebiederm@xmission.com) wrote: >> > At least one implementation Linux Jails by Serge E. Hallyn was done > completely >> > with security modules, and the code was pretty minimal. >> >> Yes, although the networking area was something that looked better done >> via namespaces (at least that's my recollection of my conversations with >> Serge on that one a few years back). > > Yes, namespaces would be better - just as the file system isolation was > moved from a "strong chroot" approach to using pivot-root. Though note > that vserver still uses basically the method that bsdjail uses, and my > two attempts at getting network namespaces considered in the kernel so > far were dismal failures. Hopefully this time we've got some better, > more network-savvy minds on the task :)
Any pointers to those old discussions?
I'm curious why getting your network namespaces were dismal failures. Everyone ignored the patch?
Eric - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |