On 4/24/07, Herbert Poetzl <herbert@13thfloor.at> wrote:
>
> On Tue, Apr 24, 2007 at 11:43:54AM -0400, Wenbin Zhang wrote:
> > >
> > >> For example, I use below command to create the guest:
> > >> #/sbin/vserver va780 build -m rpm --context 43 --hostname=va780
> > >--interface
> > >> va7800=eth0:192.168.1.2/24 --rootdir /vserver1 --pkgbase
> /vserver1/.pkg
> > >--
> > >> -d fc6
> > >
> > >this is one of them, although it has some bugs, like the
> > >--hostname= which should be --hostname va780.some.domain
> >
> >
> > The other ways mean vcmd, right?
> > But I reviewed the page
> > http://linux-vserver.org/VCMD_HowTo
> >
> > Seems no way to create isolated process, right?
>
> why do you think so? vcmd can do everything necessary
> for context isolation and context setup (for both,
> process and network contexts)
>
> vcmd -i 42 -C ctx_create -- ps auxwww
> vserver: ret = 0x0000002A (42)
> USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
> root 11780 0.0 0.0 1944 672 pts/2 R+ 13:35 0:00 ps auxwww
>
> Thanks! That's pretty good.
One more question, If I create 3 vserver processes by this way, and I allow
the 3 processes can access only certain files in my machine, for example,
only 4 files on my systems.
Can I group the 3 processes and 4 files together? say, they can see each
other on their vserver domain, but they will not be accessible by other
program on my host machine?
Thanks,
Wenbin
_______________________________________________
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
Received on Tue Apr 24 20:45:02 2007