OpenVZ Forum


Home » Mailing lists » Users » a newbie question
Re: a newbie question [message #46810 is a reply to message #46808] Sun, 17 June 2012 10:56 Go to previous messageGo to previous message
Martin Dobrev is currently offline  Martin Dobrev
Messages: 14
Registered: November 2006
Junior Member
Martin Dobrev

Sent from iPhonespam SPAMSPAM 4

On 17.06.2012, at 13:25, cheetah <xuwh06@gmail.com> wrote:

> Hi guys,
>

Hi Peter,

> I am a newbie to openvz and preparing to deploy it in my production environment to give each user a container. I have the following concerns now.
>
> 1. Can user load kernel modules in the guest container without influencing the host kernel or other container's kernel? As far as I understand, all the containers share the same kernel of the host. So I am wondering if this is possible?
>

Some modules can be shared from the host sytem to the containers. More info in the vzctl man page.

> 2. Or how is the container's security isolation? Can I give user root access in the container? Is there any hack that he/she can use root in the container to attack the host or other containers?
>
It's impossible to gain host system access using a kernel bug as far as I know. Some kernel exploits are still able to crash the hole system. Giving root in the container will be considered as secure as giving root on physical server.
> 3. Does openvz kernel support kvm?
>
It's possible to have Xen and KVM compiled in the OVZ kernel but you'll need to compile it yourself.
> 4. What is recommended distro of Linux to install openvz? I am now using CentOS 6.2. How about Debian?
>
Mainstream kernel development follows the RHEL kernel branches, so best for you will be CentOS. I have some production systems on it too.
> Thanks a lot for answering my stupid questions.
>
I hope my info helps.
> Regards,
> Peter
P.S. There is no need to write to the devel list directly for user questions.

Report message to a moderator

[Message index]
 
Read Message
Read Message
Read Message
Read Message
Read Message
Read Message
Previous Topic: openvz and ftp connection tracking for non-default ports
Next Topic: Netstat on Deb ovz vs Deb Proxmox
Goto Forum:
  

[ Syndicate this forum (XML) ] [ RSS ] [ PDF ]

Current Time: Thu Oct 09 01:00:41 GMT 2025

Total time taken to generate the page: 0.15764 seconds
Powered by FUDforum Powered by Virtuozzo Containers