Jailed sysvipc implementation.

Pawel Jakub Dawidek nick at garage.freebsd.pl
Wed Jun 25 07:58:48 PDT 2003


On Wed, Jun 25, 2003 at 06:52:33PM +0400, Dmitry Sivachenko wrote:
+> > But you got still *one* memory zones for every jail and main host.
+> 
+> Yes, that is exactly what I want.
+> This is similar to separate IP stack for each jail:  this is more powerful
+> solution, but more expensive (uses more kernel memory).

But note that my implementation allocates memory "on demand".
If IPC syscall will not be used inside of jail memory will not be allocated.
If think also that this will be trivial to add value to jail struct
that will thell if we want separate IPC memory zones for this jail or not.

+> Jail is not a true virtual machine.
+> Let's keep it a *light* virtual machine replacement, with single IP stack,
+> one memory zones for all jails and host, etc.

I think it should be and it isn't now because of implementaion problems.
Am I wrong? Poul? Robert?

-- 
Pawel Jakub Dawidek                       pawel at dawidek.net
UNIX Systems Programmer/Administrator     http://garage.freebsd.pl
Am I Evil? Yes, I Am!                     http://cerber.sourceforge.net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 305 bytes
Desc: not available
Url : http://lists.freebsd.org/pipermail/freebsd-arch/attachments/20030625/5dce3153/attachment.bin


More information about the freebsd-arch mailing list