On Tue, Apr 24, 2007 at 02:18:57PM -0400, Wenbin Zhang wrote:
> On 4/24/07, Herbert Poetzl <email@example.com> wrote:
> >On Tue, Apr 24, 2007 at 11:43:54AM -0400, Wenbin Zhang wrote:
> >> >
> >> >> For example, I use below command to create the guest:
> >> >> #/sbin/vserver va780 build -m rpm --context 43 --hostname=va780
> >> >--interface
> >> >> va7800=eth0:192.168.1.2/24 --rootdir /vserver1 --pkgbase
> >> >--
> >> >> -d fc6
> >> >
> >> >this is one of them, although it has some bugs, like the
> >> >--hostname= which should be --hostname va780.some.domain
> >> The other ways mean vcmd, right?
> >> But I reviewed the page
> >> http://linux-vserver.org/VCMD_HowTo
> >> Seems no way to create isolated process, right?
> >why do you think so? vcmd can do everything necessary
> >for context isolation and context setup (for both,
> >process and network contexts)
> >vcmd -i 42 -C ctx_create -- ps auxwww
> >vserver: ret = 0x0000002A (42)
> >USER PID %CPU %MEM VSZ RSS TTY STAT START TIME COMMAND
> >root 11780 0.0 0.0 1944 672 pts/2 R+ 13:35 0:00 ps auxwww
> >Thanks! That's pretty good.
> One more question, If I create 3 vserver processes by this way, and I
> allow the 3 processes can access only certain files in my machine, for
> example, only 4 files on my systems.
> Can I group the 3 processes and 4 files together?
yes, somewhat ...
> say, they can see each other on their vserver domain, but they will
> not be accessible by other program on my host machine?
no, as the host context is also the admin context,
it will have access to those processes and files in
some way ... but you can keep them separate from
eachother or another group of processes ...
> Vserver mailing list
Vserver mailing list
Received on Tue Apr 24 22:35:02 2007