About this list Date view Thread view Subject view Author view Attachment view

From: Herbert Poetzl (herbert_at_13thfloor.at)
Date: Mon 12 Sep 2005 - 23:44:11 BST


On Tue, Sep 13, 2005 at 04:07:44AM +0900, Jun OKAJIMA wrote:
>
> Hello.
>
>
> How you handle /dev/* stuff under Vservers?
>
> For example, when you install Debian Sarge on /vservers/sarge with
> debootstrap, you get below figures.
>
> files under /vserver/sarge -> about 15K files.
> files under /vserver/sarge/dev -> about 5k files.
>
> (1/3 of inodes are just dev nodes!)
>
> but, most dev nodes on /vserver/sarge/dev are not usable,
> so they are just a waste of inodes.

well, the other ones are dangerous, and that's why
they are not available at all, at least not on a properly
built guest ...

> There are some solutions.
>
> 1. Using devfs/udev/sysfs/devpts.....

  - devfs is no option (same security implications)
  - ude will not work (no helper)
  - sysfs is again no good idea (security)
  - devpts is already mounted inside (virtualized)

> 2. Making only necessary dev nodes.

> But, before doing these ways, the most important issue is,
> understanding what dev nodes are necessary.

this is what the vserver tools (util-vserver) does
by default, and the required dev nodes can be found
in a dozent email replies ... but here is another
copy ...

crw-rw-rw- 1 root root 1, 7 Sep 12 16:17 full
crw-rw-rw- 1 root root 1, 3 Sep 12 16:17 null
crw-rw-rw- 1 root root 5, 2 Sep 12 16:17 ptmx
drwxr-xr-x 2 root root 4096 Sep 12 16:17 pts/
crw-r--r-- 1 root root 1, 8 Sep 12 16:17 random
crw-rw-rw- 1 root root 5, 0 Sep 12 16:17 tty
crw-r--r-- 1 root root 1, 9 Sep 12 16:17 urandom
crw-rw-rw- 1 root root 1, 5 Sep 12 16:17 zero

> Your opinion is welcome.

you should check the archives/use the tools ...

best,
Herbert

> --- Okajima, Jun. Tokyo, Japan.
> _______________________________________________
> Vserver mailing list
> Vserver_at_list.linux-vserver.org
> http://list.linux-vserver.org/mailman/listinfo/vserver
_______________________________________________
Vserver mailing list
Vserver_at_list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver


About this list Date view Thread view Subject view Author view Attachment view
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Mon 12 Sep 2005 - 23:44:32 BST by hypermail 2.1.3