From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from eggs.gnu.org ([2001:4830:134:3::10]:34965) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Yqjs9-0005uQ-2W for qemu-devel@nongnu.org; Fri, 08 May 2015 11:07:30 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Yqjs5-0003wY-QI for qemu-devel@nongnu.org; Fri, 08 May 2015 11:07:29 -0400 Received: from mx1.redhat.com ([209.132.183.28]:43222) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Yqjs5-0003wH-JP for qemu-devel@nongnu.org; Fri, 08 May 2015 11:07:25 -0400 Message-ID: <554CD126.2080508@redhat.com> Date: Fri, 08 May 2015 09:07:18 -0600 From: Eric Blake MIME-Version: 1.0 References: In-Reply-To: Content-Type: multipart/signed; micalg=pgp-sha256; protocol="application/pgp-signature"; boundary="7894GTwC3RrHRs088JmIINNDUTBpFw3XG" Subject: Re: [Qemu-devel] vmfork in KVM List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , To: Zhi Yong Wu , KVM mailing list , QEMU Developers , libvir-list@redhat.com Cc: loki2441@gmail.com, Zhi Yong Wu This is an OpenPGP/MIME signed message (RFC 4880 and 3156) --7894GTwC3RrHRs088JmIINNDUTBpFw3XG Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable On 05/08/2015 03:55 AM, Zhi Yong Wu wrote: > HI, all guys >=20 > Why does vmfork not get supported by KVM project? What is the > drawback? It's very cool if it's used in some scenario, e.g. HPC. It > will be appreciated for your comments, thanks. In general, live cloning of a VM is a security nightmare - you have to make sure that either both sides of the fork will never be exposed to the same network, or that you figure out how to scrub everything such as IP addresses and random number state so that the two VMs are independent enough as to not be able to guess the behavior of one guest by observing the other. Offline cloning is a much more tractable problem. --=20 Eric Blake eblake redhat com +1-919-301-3266 Libvirt virtualization library http://libvirt.org --7894GTwC3RrHRs088JmIINNDUTBpFw3XG Content-Type: application/pgp-signature; name="signature.asc" Content-Description: OpenPGP digital signature Content-Disposition: attachment; filename="signature.asc" -----BEGIN PGP SIGNATURE----- Version: GnuPG v2 Comment: Public key at http://people.redhat.com/eblake/eblake.gpg Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQEcBAEBCAAGBQJVTNEmAAoJEKeha0olJ0NqsJAH/AujuOWOqzZFdrmFt5TlN55d LMfU84txG2/mmGK0bgVBXyhNFEOPNKz/Xuy0iavYsM3/+fhcldiNGF6FPvjTiXee C6XOmkmXDWTb6Jn8iaKPZiREqZ5yA3Z3gzQ4J1SsMhbjbaPYe2A9mdjtfJPryIly qbkExKnOMDXzDDQmESylXXJ1YM1Ixs49jTWgUcIwE0laY9LmRWOuxbT3fnd78dde gnHk+Sh5zvWXpCZREBerOkEGJOi0gOkaZkwpmuV3fCy1YodO7UBLVO7ZNIZKJwg8 bPirgeJGVIK/QdZYpNjA4QiAtiuLmHpvErGgN8OOsAbQhQt/D6hpQzeJW6SXBH0= =hv8r -----END PGP SIGNATURE----- --7894GTwC3RrHRs088JmIINNDUTBpFw3XG--