[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [Xen-users] which is the best way to setup DomU's kernel location



Hi Ian,

I see you know all about running Xen kernels. You don't even consider any advice from me at least. Then what is the purpose of your question? You asked for our opinions, but you consider yours to be the best.

I've told you to build your own static domU kernels because in case you upgrade the dom0 kernel you need to update the domU's modules as well. For 1-2 domU's that's fine, but do that for 2000-3000!


Good luck with your strong beliefs!


Ian Murray wrote:


----- Original Message ----
From: Ady Deac <ady@xxxxxxxxxxx>
To: Ian Murray <murrayie@xxxxxxxxxxx>
Sent: Sunday, 20 September, 2009 10:33:43
Subject: Re: [Xen-users] which is the best way to setup DomU's kernel location

Hi Ian,

Heh, you learn something new each day. ;) Thanks for the tip!

Anyways, you still need to build the custom kernel. :P

Have phun!


Hi,

No you don't. I am using pygrub with all my PV DomU's, using the
standard distribution kernels that come with CentOS 5.x in both Dom0
and DomU.

Of pvGrub and pyGrub, I think pvgrub is the preferred option because of 
inherent security problems with pyGrub, but is available on newer hypervisors 
and not on the std CentOS hypervisor. I think the security issue goes along the 
lines of the DomU can affect something that runs on the Dom0 (pyGrub) by 
manipulating the grub menu in the DomU. This could be part of an attack, if 
some other vector is discovered in pygrub. Something like that, I think. I am 
sure some one will correct me, if I am wrong about that.

HTH,

Ian.



_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users

--
Deac Mihai-Adrian

W: www.mikesoftware.com
P: +40-745-256.364


_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users


 


Rackspace

Lists.xenproject.org is hosted with RackSpace, monitoring our
servers 24x7x365 and backed by RackSpace's Fanatical Support®.