OpenVZ Forum


Home » Mailing lists » Users » bug or feature?: ps -el on HN shows all processes, incl. those of VEs
bug or feature?: ps -el on HN shows all processes, incl. those of VEs [message #43975] Fri, 04 November 2011 09:48 Go to next message
U.Mutlu is currently offline  U.Mutlu
Messages: 12
Registered: October 2011
Junior Member
From: *parallels.com
"ps -el" (and also "ps aux" etc.) on the HN shows all processes,
incl. those of VEs.
Is there a way to show, on the HN, only the processes of the HN itself,
excluding the processes of the VEs?
Re: bug or feature?: ps -el on HN shows all processes, incl. those of VEs [message #43988 is a reply to message #43975] Mon, 07 November 2011 09:35 Go to previous messageGo to next message
MailingListe is currently offline  MailingListe
Messages: 29
Registered: May 2008
Junior Member
From: *parallels.com
Zitat von "U.Mutlu" <for-gmane@mutluit.com>:

> "ps -el" (and also "ps aux" etc.) on the HN shows all processes,
> incl. those of VEs.
> Is there a way to show, on the HN, only the processes of the HN itself,
> excluding the processes of the VEs?

This is as far as i know by design. The HN is the Hypervisor and must
have a global view what is going on the machine. That's why it is
advised to not use any other services beside openvz on the HN.

Regards

Andreas
  • Attachment: smime.p7s
    (Size: 6.03KB, Downloaded 143 times)
Re: bug or feature?: ps -el on HN shows all processes, incl. those of VEs [message #43989 is a reply to message #43988] Mon, 07 November 2011 10:00 Go to previous messageGo to next message
Kirill Korotaev is currently offline  Kirill Korotaev
Messages: 137
Registered: January 2006
Senior Member
From: *parallels.com
http://wiki.openvz.org/Processes_scope_and_visibility
Plus, as far as I remember there was a patch somewhere on download.openvz.org or sysctl which allows to hide non-root processes from root VE.


On Nov 7, 2011, at 13:35 , <lst_hoe02@kwsoft.de> <lst_hoe02@kwsoft.de> wrote:

> Zitat von "U.Mutlu" <for-gmane@mutluit.com>:
>
>> "ps -el" (and also "ps aux" etc.) on the HN shows all processes,
>> incl. those of VEs.
>> Is there a way to show, on the HN, only the processes of the HN itself,
>> excluding the processes of the VEs?
>
> This is as far as i know by design. The HN is the Hypervisor and must
> have a global view what is going on the machine. That's why it is
> advised to not use any other services beside openvz on the HN.
>
> Regards
>
> Andreas
>
>
>
> <smime.p7s><ATT00001.c>
Re: bug or feature?: ps -el on HN shows all processes, incl. those of VEs [message #43991 is a reply to message #43989] Mon, 07 November 2011 10:58 Go to previous messageGo to next message
mator is currently offline  mator
Messages: 2
Registered: February 2009
Location: moscow
Junior Member
From: *parallels.com
On Mon, Nov 7, 2011 at 2:00 PM, Kirill Korotaev <dev@parallels.com> wrote:
> http://wiki.openvz.org/Processes_scope_and_visibility
> Plus, as far as I remember there was a patch somewhere on download.openvz.org or sysctl which allows to hide non-root processes from root VE.
>
>
> On Nov 7, 2011, at 13:35 , <lst_hoe02@kwsoft.de> <lst_hoe02@kwsoft.de> wrote:
>
>> Zitat von "U.Mutlu" <for-gmane@mutluit.com>:
>>
>>> "ps -el" (and also "ps aux" etc.) on the HN shows all processes,
>>> incl. those of VEs.
>>> Is there a way to show, on the HN, only the processes of the HN itself,
>>> excluding the processes of the VEs?
>>
>> This is as far as i know by design. The HN is the Hypervisor and must
>> have a global view what is going on the machine. That's why it is
>> advised to not use any other services beside openvz on the HN.

I know I'm a bit offtopic here, but taking in example solaris 10 with
it's zones, it's possible to supply
ps with "-Z" command , which will say what zone/container process
belongs to. Would be nice,
to somehow label container processes with container ID in kernel and
have userland (ps for example, or any other tool)
to be able to show this label.

Thanks.
Re: bug or feature?: ps -el on HN shows all processes, incl. those of VEs [message #43992 is a reply to message #43991] Mon, 07 November 2011 11:17 Go to previous message
Kirill Korotaev is currently offline  Kirill Korotaev
Messages: 137
Registered: January 2006
Senior Member
From: *parallels.com
On Nov 7, 2011, at 14:58 , Anatoly Pugachev wrote:

> On Mon, Nov 7, 2011 at 2:00 PM, Kirill Korotaev <dev@parallels.com> wrote:
>> http://wiki.openvz.org/Processes_scope_and_visibility
>> Plus, as far as I remember there was a patch somewhere on download.openvz.org or sysctl which allows to hide non-root processes from root VE.
>>
>>
>> On Nov 7, 2011, at 13:35 , <lst_hoe02@kwsoft.de> <lst_hoe02@kwsoft.de> wrote:
>>
>>> Zitat von "U.Mutlu" <for-gmane@mutluit.com>:
>>>
>>>> "ps -el" (and also "ps aux" etc.) on the HN shows all processes,
>>>> incl. those of VEs.
>>>> Is there a way to show, on the HN, only the processes of the HN itself,
>>>> excluding the processes of the VEs?
>>>
>>> This is as far as i know by design. The HN is the Hypervisor and must
>>> have a global view what is going on the machine. That's why it is
>>> advised to not use any other services beside openvz on the HN.
>
> I know I'm a bit offtopic here, but taking in example solaris 10 with
> it's zones, it's possible to supply
> ps with "-Z" command , which will say what zone/container process
> belongs to. Would be nice,
> to somehow label container processes with container ID in kernel and
> have userland (ps for example, or any other tool)
> to be able to show this label.

There are tools vzps and vztop which does that.
vzps ax -E <VEID>
will show tasks from specified VE only (and for -E 0 it will show host system tasks only filtering out containers).

Thanks,
Kirill
Previous Topic: check_openvz_beans: Nagios Plugin for OpenVZ beancounters
Next Topic: Service restart on host system kills same service inside all VEs
Goto Forum:
  


Current Time: Tue Aug 21 04:22:58 GMT 2018