WTH 2005: Linux – Vserver
The Linux vserver project is an approach to enable the Linux kernel to handle virtual server instances on a single kernel. The process separation and recourse handling is almost done with the classic methods of capability separation trough different trust domains on a system. I was interested in the speech because I have to separate my services as the machines I’m running get overloaded more and more. Honestly I’m not longer sure about my Systems because of the various number of processes and services grow and grow. In the case of Linux Vserver I learned that i need a Virtual Machine System (suggestions anyone?) and not a Virtual Server as I want to be able to run different kernels on a single box. Because compromising the virtualisation layer would end up in compromising of the whole system. So this is for maintenance and delegation purpose but not for security reason.