ALT Linux Team development discussions
 help / color / mirror / Atom feed
* [devel] Fw: FWD: Announce: many virtual servers on a single box
@ 2001-10-12  8:40 Alexander Bokovoy
  2001-10-12 11:59 ` Stanislav Ievlev
  0 siblings, 1 reply; 2+ messages in thread
From: Alexander Bokovoy @ 2001-10-12  8:40 UTC (permalink / raw)
  To: devel

Двойной форвард, но он стоит того.

2Sergey Bolshakov: интересно, можно ли ее использовать с BTE?

2Goldhead: Твои мысли по интеграции с нашим 2.4?

----- Forwarded message from Mike Panetta <mpanetta@applianceware.com> -----

Date: Thu, 11 Oct 2001 14:10:21 -0700
From: Mike Panetta <mpanetta@applianceware.com>
To: devel@applianceware.com, aw@belcaf.com
Subject: FWD: Announce: many virtual servers on a single box

I found this pretty intresting, dont know immediately
what it may be good for, but it may be usefull in the
future.

Mike

----- Forwarded message from Jacques Gelinas <jack@solucorp.qc.ca> -----

From: Jacques Gelinas <jack@solucorp.qc.ca>
Date: 	Thu, 11 Oct 2001 01:06:32 -0500
To: Linux kernel list <linux-kernel@vger.kernel.org>
Subject: Announce: many virtual servers on a single box
Precedence: bulk
X-Mailing-List: 	linux-kernel@vger.kernel.org
X-UIDL: ]7/!!g03!!_%N"!0;4"!

I have enhanced the kernel to allow several independant virtual servers
running on the same box (sharing the same kernel as well). I introduced
2 new system calls (new_s_context and set_ipv4root) allowing
much independance between the virtual servers. Virtual servers are
independant enough and "real" enough that you can supply root password
to the virtual server administrators. Virtual servers may be described

-May run various network services, binding to the same ports
 without special configuration. Services are started normally (sysv script, whatever
 the distro you are using).

-Have independant process list, so they can't interfere. You can't see or send
  signal to process in other vservers (or the root server)

-I have also modified the capability system a little, so those virtual server
 administrators can't take over the machine. I have introduced a per-process
 capability ceiling, inherited by sub-process. Even setuid program can't grab
 more capabilities..

-Update packages normally, create users, Use any admin procedure/tool

Maybe such a project has already been done. Anyway, I have written a lot
of documentation about it (how it works, pro and con and so on). It works
on top of 2.4.10 or 2.4.11 (probably anything). I would really like to get
some comments.

You can find all the documentation and packages at
http://www.solucorp.qc.ca/miscprj/s_context.hc

All this is GPL...

---------------------------------------------------------
Jacques Gelinas <jack@solucorp.qc.ca>
vserver: run general purpose virtual servers on one box, full speed!
http://www.solucorp.qc.ca/miscprj/s_context.hc
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

----- End forwarded message -----

-- 

----- End forwarded message -----

-- 
/ Alexander Bokovoy
$ cat /proc/identity >~/.signature
  `Senior software developer and analyst for SaM-Solutions Ltd.`
---
I have accepted Provolone into my life!
_______________________________________________
Devel mailing list
Devel@linux.iplabs.ru
http://www.logic.ru/mailman/listinfo/devel


^ permalink raw reply	[flat|nested] 2+ messages in thread

* Re: [devel] Fw: FWD: Announce: many virtual servers on a single box
  2001-10-12  8:40 [devel] Fw: FWD: Announce: many virtual servers on a single box Alexander Bokovoy
@ 2001-10-12 11:59 ` Stanislav Ievlev
  0 siblings, 0 replies; 2+ messages in thread
From: Stanislav Ievlev @ 2001-10-12 11:59 UTC (permalink / raw)
  To: devel

Alexander Bokovoy wrote:

>Двойной форвард, но он стоит того.
>
>2Sergey Bolshakov: интересно, можно ли ее использовать с BTE?
>
>2Goldhead: Твои мысли по интеграции с нашим 2.4?
>
Мощная, судя по описанию, штука.

>
>
>----- Forwarded message from Mike Panetta <mpanetta@applianceware.com> -----
>
>Date: Thu, 11 Oct 2001 14:10:21 -0700
>From: Mike Panetta <mpanetta@applianceware.com>
>To: devel@applianceware.com, aw@belcaf.com
>Subject: FWD: Announce: many virtual servers on a single box
>
>I found this pretty intresting, dont know immediately
>what it may be good for, but it may be usefull in the
>future.
>
>Mike
>
>----- Forwarded message from Jacques Gelinas <jack@solucorp.qc.ca> -----
>
>From: Jacques Gelinas <jack@solucorp.qc.ca>
>Date: 	Thu, 11 Oct 2001 01:06:32 -0500
>To: Linux kernel list <linux-kernel@vger.kernel.org>
>Subject: Announce: many virtual servers on a single box
>Precedence: bulk
>X-Mailing-List: 	linux-kernel@vger.kernel.org
>X-UIDL: ]7/!!g03!!_%N"!0;4"!
>
>I have enhanced the kernel to allow several independant virtual servers
>running on the same box (sharing the same kernel as well). I introduced
>2 new system calls (new_s_context and set_ipv4root) allowing
>much independance between the virtual servers. Virtual servers are
>independant enough and "real" enough that you can supply root password
>to the virtual server administrators. Virtual servers may be described
>
>-May run various network services, binding to the same ports
> without special configuration. Services are started normally (sysv script, whatever
> the distro you are using).
>
>-Have independant process list, so they can't interfere. You can't see or send
>  signal to process in other vservers (or the root server)
>
>-I have also modified the capability system a little, so those virtual server
> administrators can't take over the machine. I have introduced a per-process
> capability ceiling, inherited by sub-process. Even setuid program can't grab
> more capabilities..
>
>-Update packages normally, create users, Use any admin procedure/tool
>
>Maybe such a project has already been done. Anyway, I have written a lot
>of documentation about it (how it works, pro and con and so on). It works
>on top of 2.4.10 or 2.4.11 (probably anything). I would really like to get
>some comments.
>
>You can find all the documentation and packages at
>http://www.solucorp.qc.ca/miscprj/s_context.hc
>
>All this is GPL...
>
>---------------------------------------------------------
>Jacques Gelinas <jack@solucorp.qc.ca>
>vserver: run general purpose virtual servers on one box, full speed!
>http://www.solucorp.qc.ca/miscprj/s_context.hc
>-
>To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
>the body of a message to majordomo@vger.kernel.org
>More majordomo info at  http://vger.kernel.org/majordomo-info.html
>Please read the FAQ at  http://www.tux.org/lkml/
>
>----- End forwarded message -----
>



_______________________________________________
Devel mailing list
Devel@linux.iplabs.ru
http://www.logic.ru/mailman/listinfo/devel


^ permalink raw reply	[flat|nested] 2+ messages in thread

end of thread, other threads:[~2001-10-12 11:59 UTC | newest]

Thread overview: 2+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2001-10-12  8:40 [devel] Fw: FWD: Announce: many virtual servers on a single box Alexander Bokovoy
2001-10-12 11:59 ` Stanislav Ievlev

ALT Linux Team development discussions

This inbox may be cloned and mirrored by anyone:

	git clone --mirror http://lore.altlinux.org/devel/0 devel/git/0.git

	# If you have public-inbox 1.1+ installed, you may
	# initialize and index your mirror using the following commands:
	public-inbox-init -V2 devel devel/ http://lore.altlinux.org/devel \
		devel@altlinux.org devel@altlinux.ru devel@lists.altlinux.org devel@lists.altlinux.ru devel@linux.iplabs.ru mandrake-russian@linuxteam.iplabs.ru sisyphus@linuxteam.iplabs.ru
	public-inbox-index devel

Example config snippet for mirrors.
Newsgroup available over NNTP:
	nntp://lore.altlinux.org/org.altlinux.lists.devel


AGPL code for this site: git clone https://public-inbox.org/public-inbox.git