Re: [Vserver] Re: [Devel] Container Test Campaign

From: Clément Calmels <clement.calmels_at_fr.ibm.com>
Date: Tue 04 Jul 2006 - 14:54:09 BST
Message-Id: <1152021249.24611.39.camel@localhost.localdomain>

Hi,

> > I'm wondering why a default 'guest' creation implies some resources
> > restrictions? Couldn't the resources be unlimited? I understand the need
> > for resource management, but the default values look a little bit
> > tiny...
> >
> The reason is security. A guest is untrusted by default, though sane
> limits are applied. Same as ulimit which has some sane defaults (check
> output of ulimit -a). Same as those kernel settings from /proc/sys --
> should /proc/sys/fs/file-max be 'unlimited' by default?

Ok. So as our benchmarks have no security concern, you will see no
objection if I set all the parameters in the 'guest' to their value in
the host, won't you?

-- 
Clément Calmels <clement.calmels@fr.ibm.com>
_______________________________________________
Vserver mailing list
Vserver@list.linux-vserver.org
http://list.linux-vserver.org/mailman/listinfo/vserver
Received on Tue Jul 4 14:59:33 2006
[Next/Previous Months] [Main vserver Project Homepage] [Howto Subscribe/Unsubscribe] [Paul Sladen's vserver stuff]
Generated on Tue 04 Jul 2006 - 14:59:39 BST by hypermail 2.1.8