| Re: How does OpenVZ manage memory? [message #42684 is a reply to message #40491] |
Wed, 11 May 2011 09:01  |
mike
Messages: 7
Registered: September 2006
Location: Kiev, Ukraine
|
Junior Member |
|
|
You might want to read up on mmap syscall and to google for "copy on write" approach; lwn.net articles well might be preferred in search results.
BTW one can use -o bind,ro with 2.6.32 so that getting root and compromising a binary in a container won't get all the rest compromised -- you might want to either bindmount off the "maintenance" VE which won't be accessible from network (except from your host or even by vzctl enter only), or prepare a chroot which isn't running as a VE altogether (it might be less convenient with Gentoo).
--
Michael Shigorin
OSDN.Org.UA / ALT Linux Team
|
|
|
|
OpenVZ Forum
Members
Search
Help
Register
Login
Home
