OpenVZ Forum


Home » General » Support » OpenVZ 8 / virtuozzo linux 8 (OpenVZ 8 features & security)
Re: OpenVZ 8 / virtuozzo linux 8 [message #53740 is a reply to message #53735] Thu, 18 March 2021 09:11 Go to previous messageGo to previous message
khorenko is currently offline  khorenko
Messages: 533
Registered: January 2006
Location: Moscow, Russia
Senior Member
tumtum wrote on Sat, 13 March 2021 16:28

https://www.virtuozzo.com/connect/details/blog/view/virtuozz o-linux-8-beta-is-here-we-are-replacing-our-centos-servers-w ith-it-shouldnt-you.html



Just to make sure we are in sync here:

the article above is about "Virtuozzo Linux" (VZlinux) which is close to just rebuild of Redhat Enterprise Linux (RHEL) like we used to in CentOS.
And vzlinux contains stock RHEL kernel with no virtualization patches.

And vzlinux != OpenVZ.

tumtum wrote on Sat, 13 March 2021 16:28

Will there be a new OpenVZ version soon with better security for the community?
It would be nice if I can use OpenVZ again.

OpenVZ 7 is also fine, but after the message about the best effort kernel patches, I no longer use it.


i'm not a business solution maker, but i'm not aware about plans to change that.

* we do perform rebases on new major RHEL kernels (like RHEL7.6 -> RHEL7.7) and publish them both in Virtuozzo and OpenVZ as full kernels
* in between of such releases we try to push all important but small patches as live patches (ReadyKernel) which go to Virtuozzo only
* big and/or not that important patches are laid in dev branch till next release of full kernel for both VZ and OpenVZ
* sometimes if we face an important bug/feature/whatever which is too risky to release as RK, we release full kernels. For both VZ and OpenVZ.
* sometimes if we face a very-very important security issue with public exploit, etc, which can be released via RK, we still build a full kernel for OpenVZ. Especially for OpenVZ. Yes, there were couple of such cases. But their are exceptions.


For example in 2020 RedHat has published RHEL7.8 and RHEL7.9: http://en.wikipedia.org/wiki/Red_Hat_Enterprise_Linux,
and we have published 4 full kernels: http://download.openvz.org/virtuozzo/releases/

Dev kernel branch binaries are always available at link
and they are quite stable most of the time.

And finally all patches go through our public dev mailing list,
building a new kernel is not a hard task - i've already posted an instruction.


If your problem is solved - please, report it!
It's even more important than reporting the problem itself...
 
Read Message
Read Message
Read Message
Read Message
Read Message
Previous Topic: Can migration continue after IO errors?
Next Topic: using virsh instead of prlctl
Goto Forum:
  


Current Time: Fri Apr 26 08:31:50 GMT 2024

Total time taken to generate the page: 0.01639 seconds