|
|
|
Re: OpenVZ 8 / virtuozzo linux 8 [message #53740 is a reply to message #53735] |
Thu, 18 March 2021 09:11   |
khorenko
Messages: 532 Registered: January 2006 Location: Moscow, Russia
|
Senior Member |
|
|
tumtum wrote on Sat, 13 March 2021 16:28
https://www.virtuozzo.com/connect/details/blog/view/virtuozz o-linux-8-beta-is-here-we-are-replacing-our-centos-servers-w ith-it-shouldnt-you.html
Just to make sure we are in sync here:
the article above is about "Virtuozzo Linux" (VZlinux) which is close to just rebuild of Redhat Enterprise Linux (RHEL) like we used to in CentOS.
And vzlinux contains stock RHEL kernel with no virtualization patches.
And vzlinux != OpenVZ.
tumtum wrote on Sat, 13 March 2021 16:28
Will there be a new OpenVZ version soon with better security for the community?
It would be nice if I can use OpenVZ again.
OpenVZ 7 is also fine, but after the message about the best effort kernel patches, I no longer use it.
i'm not a business solution maker, but i'm not aware about plans to change that.
* we do perform rebases on new major RHEL kernels (like RHEL7.6 -> RHEL7.7) and publish them both in Virtuozzo and OpenVZ as full kernels
* in between of such releases we try to push all important but small patches as live patches (ReadyKernel) which go to Virtuozzo only
* big and/or not that important patches are laid in dev branch till next release of full kernel for both VZ and OpenVZ
* sometimes if we face an important bug/feature/whatever which is too risky to release as RK, we release full kernels. For both VZ and OpenVZ.
* sometimes if we face a very-very important security issue with public exploit, etc, which can be released via RK, we still build a full kernel for OpenVZ. Especially for OpenVZ. Yes, there were couple of such cases. But their are exceptions.
For example in 2020 RedHat has published RHEL7.8 and RHEL7.9: http://en.wikipedia.org/wiki/Red_Hat_Enterprise_Linux,
and we have published 4 full kernels: http://download.openvz.org/virtuozzo/releases/
Dev kernel branch binaries are always available at link
and they are quite stable most of the time.
And finally all patches go through our public dev mailing list,
building a new kernel is not a hard task - i've already posted an instruction.
If your problem is solved - please, report it!
It's even more important than reporting the problem itself...
|
|
|
|