public inbox for linux-kernel@vger.kernel.org
 help / color / mirror / Atom feed
* [ANNOUNCE] OpenVZ patch for 2.6.16 and beta SUSE10.1 kernels
@ 2006-03-27 10:01 Kirill Korotaev
  2006-03-27 11:22 ` Herbert Poetzl
  0 siblings, 1 reply; 5+ messages in thread
From: Kirill Korotaev @ 2006-03-27 10:01 UTC (permalink / raw)
  To: linux-kernel, Andrew Morton, Rik van Riel, Kurt Garloff,
	Kir Kolyshkin, devel

OpenVZ team is happy to announce the release of its virtualization
solution based on 2.6.16 and beta SUSE10.1 kernels.

As in previous releases, OpenVZ 2.6.16 kernel patch includes:
- virtualization
- fine grained resource management (user beancounters)
- 2 level disk quota

Coming soon new features (!):
- virtualized AppArmor
- dynamic virtual CPU adding/remove to/from VPS

More information about OpenVZ project is available at http://openvz.org/

Fine grained broken-out patch set can be found at
http://download.openvz.org/kernel/broken-out/2.6.16-026test005.1/
or at GIT repository at http://git.openvz.org/

About OpenVZ software
~~~~~~~~~~~~~~~~~~~~~

OpenVZ is a kernel virtualization solution which can be considered as a
natural step in the OS kernel evolution: after multiuser and
multitasking functionality there comes an OpenVZ feature of having
multiple environments.

Virtualization lets you divide a system into separate isolated
execution environments (called VPSs - Virtual Private Servers). From the
point of view of the VPS owner (root), it looks like a stand-alone
server. Each VPS has its own filesystem tree, process tree (starting
from init as in a real system) and so on. The  single-kernel approach
makes it possible to virtualize with very little overhead, if any.

OpenVZ in-kernel modifications can be divided into several components:

1. Virtualization and isolation.
Many Linux kernel subsystems are virtualized, so each VPS has its own:
- process tree (featuring virtualized pids, so that the init pid is 1);
- filesystems (including virtualized /proc and /sys);
- network (virtual network device, its own ip addresses,
   set of netfilter and routing rules);
- devices (if needed, any VPS can be granted access to real devices
   like network interfaces, serial ports, disk partitions, etc);
- IPC objects.

2. Resource Management.
This subsystem enables multiple VPSs to coexist, providing managed
resource sharing and limiting.
- User Beancounters is a set of per-VPS resource counters, limits,
   and guarantees (kernel memory, network buffers, phys pages, etc.).
- Two-level disk quota (first-level: per-VPS quota;
   second-level: ordinary user/group quota inside a VPS)

Resource management is what makes OpenVZ different from other solutions
of this kind (like Linux VServer or FreeBSD jails). There are a few
resources that can be abused from inside a VPS (such as files, IPC
objects, ...) leading to a DoS attack. User Beancounters prevent such
abuses.

As virtualization solution OpenVZ makes it possible to do the same
things for which people use UML, Xen, QEmu or VMware, but there are
differences:
(a) there is no ability to run other operating systems
     (although different Linux distros can happily coexist);
(b) performance loss is negligible due to absense of any kind of
     emulation;
(c) resource utilization is much better.

Thanks,
OpenVZ team.



^ permalink raw reply	[flat|nested] 5+ messages in thread

end of thread, other threads:[~2006-04-12 13:14 UTC | newest]

Thread overview: 5+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2006-03-27 10:01 [ANNOUNCE] OpenVZ patch for 2.6.16 and beta SUSE10.1 kernels Kirill Korotaev
2006-03-27 11:22 ` Herbert Poetzl
     [not found]   ` <20060327064203.24f8f607.seanlkml@sympatico.ca>
2006-03-27 11:42     ` sean
2006-04-12  7:58       ` Kirill Korotaev
2006-04-12 13:15         ` Stephen Frost

This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox