RE: [gentoo-server] New Gentoo-Wiki Article (draft): Paravirtualizing Gentoo VMs on XenServer

RE: [gentoo-server] New Gentoo-Wiki Article (draft): Paravirtualizing Gentoo VMs on XenServer

[Pandu Poluan]

-original message-
Subject: Re: [gentoo-server] New Gentoo-Wiki Article (draft): Paravirtualizing Gentoo VMs on XenServer
From: Matthew Thode <mthode@mthode.org>
Date: 2011-07-27 22:37

>Is there a reason you are not using the {Hardened Server [Virtualization]}
>profile for grsec?
>I have tested this profile on rackspace and it works (we use xen here).

I forgot the exact reason. IIRC, I perused / compared the changes between 'Server' and 'Virtualization' and found some ... things I don't like. But I can't remember what exactly :(

Tomorrow when I get back @ the office, I'll again re-compare them.

Rgds,
--
FdS Pandu E Poluan
~ IT Optimizer ~

Sent from Nokia E72-1

Re: [gentoo-server] New Gentoo-Wiki Article (draft): Paravirtualizing Gentoo VMs on XenServer

[Pandu Poluan]

On Wed, Jul 27, 2011 at 23:08, Pandu Poluan <Pandu@poluan.info> wrote:
> -original message-
> Subject: Re: [gentoo-server] New Gentoo-Wiki Article (draft): Paravirtualizing Gentoo VMs on XenServer
> From: Matthew Thode <mthode@mthode.org>
> Date: 2011-07-27 22:37
>
>>Is there a reason you are not using the {Hardened Server [Virtualization]}
>>profile for grsec?
>>I have tested this profile on rackspace and it works (we use xen here).
>
> I forgot the exact reason. IIRC, I perused / compared the changes between 'Server' and 'Virtualization' and found some ... things I don't like. But I can't remember what exactly :(
>
> Tomorrow when I get back @ the office, I'll again re-compare them.
>

Okay, I *utterly* failed to see why I chose [server] rather than
[virtualization]. In fact, *now* I think [virtualization] will be a
better base security template.

I'll update the wiki.

Rgds,
-- 
Pandu E Poluan
~ IT Optimizer ~

 • Blog : http://pepoluan.tumblr.com
 • Linked-In : http://id.linkedin.com/in/pepoluan

Re: [gentoo-server] New Gentoo-Wiki Article (draft): Paravirtualizing Gentoo VMs on XenServer

[Kristjan Kalder]

Hey,

Has anyone experience with KVM under gentoo?
I'm trying to build a virtualization environment using KVM and right now 
I'm in the gathering information phase.
I need some tips about management interfaces. What's the best? Why are 
there no ebuilds?
Any other tips are welcome too.

On 27.07.2011 19:08, Pandu Poluan wrote:
> -original message-
> Subject: Re: [gentoo-server] New Gentoo-Wiki Article (draft): Paravirtualizing Gentoo VMs on XenServer
> From: Matthew Thode<mthode@mthode.org>
> Date: 2011-07-27 22:37
>
>> Is there a reason you are not using the {Hardened Server [Virtualization]}
>> profile for grsec?
>> I have tested this profile on rackspace and it works (we use xen here).
> I forgot the exact reason. IIRC, I perused / compared the changes between 'Server' and 'Virtualization' and found some ... things I don't like. But I can't remember what exactly :(
>
> Tomorrow when I get back @ the office, I'll again re-compare them.
>
> Rgds,
> --
> FdS Pandu E Poluan
> ~ IT Optimizer ~
>
> Sent from Nokia E72-1
>
>

Re: [gentoo-server] KVM Interface (was New Gentoo-Wiki Article (draft): Paravirtualizing Gentoo VMs on XenServer)

[Homer Parker]

On Sun, 2011-08-07 at 14:33 +0300, Kristjan Kalder wrote:
> I need some tips about management interfaces. What's the best? Why
> are 
> there no ebuilds? 

	I like using libvirtd with virt-manager, both in portage.

-- 
Homer Parker <hparker@gentoo.org>

Re: [gentoo-server] New Gentoo-Wiki Article (draft): Paravirtualizing Gentoo VMs on XenServer

[Matt Thode]

[-- Attachment #1: Type: text/plain, Size: 1369 bytes --]

The ebuild is qemu-kvm.  The management interface that I would use if given the choice is ganeti, but honestly I just run the command manually.  #kvm on freenode is pretty helpful.

-- Matthew Thode

On Aug 7, 2011, at 6:33 AM, Kristjan Kalder wrote:

> Hey,
> 
> Has anyone experience with KVM under gentoo?
> I'm trying to build a virtualization environment using KVM and right now I'm in the gathering information phase.
> I need some tips about management interfaces. What's the best? Why are there no ebuilds?
> Any other tips are welcome too.
> 
> On 27.07.2011 19:08, Pandu Poluan wrote:
>> -original message-
>> Subject: Re: [gentoo-server] New Gentoo-Wiki Article (draft): Paravirtualizing Gentoo VMs on XenServer
>> From: Matthew Thode<mthode@mthode.org>
>> Date: 2011-07-27 22:37
>> 
>>> Is there a reason you are not using the {Hardened Server [Virtualization]}
>>> profile for grsec?
>>> I have tested this profile on rackspace and it works (we use xen here).
>> I forgot the exact reason. IIRC, I perused / compared the changes between 'Server' and 'Virtualization' and found some ... things I don't like. But I can't remember what exactly :(
>> 
>> Tomorrow when I get back @ the office, I'll again re-compare them.
>> 
>> Rgds,
>> --
>> FdS Pandu E Poluan
>> ~ IT Optimizer ~
>> 
>> Sent from Nokia E72-1
>> 
>> 
> 


[-- Attachment #2: This is a digitally signed message part --]
[-- Type: application/pgp-signature, Size: 881 bytes --]

RE: [gentoo-server] New Gentoo-Wiki Article (draft): Paravirtualizing Gentoo VMs on XenServer

[Pandu Poluan]

-original message-
Subject: Re: [gentoo-server] New Gentoo-Wiki Article (draft): Paravirtualizing Gentoo VMs on XenServer
From: Paul Hartman <paul.hartman@gmail.com>
Date: 2011-07-26 22:42

>On Tue, Jul 26, 2011 at 7:47 AM, Pandu Poluan <pandu@poluan.info> wrote:
>> Hello list!
>>
>> As I've once promised, here's a (draft) of HOWTO run Gentoo VMs
>> paravirtualized on XenServer
>>
>> http://en.gentoo-wiki.com/wiki/User:Pepoluan/Paravirtualized_Gentoo_VMs_on_XenServer
>>
>> Any inputs?
>
>Thanks for this, I've got a virtual server using old xen-sources
>kernel and previous attempts to use vanilla kernel have failed. Now I
>think I'll try my luck again with kernel 3.0 and your guide to see if
>I can get it to boot this time... :)

Glad to be of help. Two notes of caution, though:

1. I forgot to specify that memory allocation (VMSPLIT) *must* be 3G/1G (3G for userspace, 1G for kernelspace). If not, the VM would mysteriously refuse to start -- without any error messages.

2. I truly have no idea if my method works for 3.0. It's been tested thoroughlt with 2.6, though (to be precise: 2.6.38 and 2.6.39). I am still hesitant to use 3.0 because I saw people reporting bugs where a program is hard-coded to require kernel==2.6 (instead of requiring kernel>=2.6). IMO, it's not yet safe to tread the 3.0 waters. At least for another month. (As usual, YMMV)

That said, feel free to point out errors. And if you fail/succeed, please do tell me.

Happy paravirtualizing! :)


Rgds,
--
FdS Pandu E Poluan
~ IT Optimizer ~

Sent from Nokia E72-1

Re: [gentoo-server] New Gentoo-Wiki Article (draft): Paravirtualizing Gentoo VMs on XenServer

[Matthew Thode]

Is there a reason you are not using the {Hardened Server [Virtualization]}
profile for grsec?
I have tested this profile on rackspace and it works (we use xen here).

-- Matthew Thode

On 7/26/11 12:07 PM, "Pandu Poluan" <Pandu@poluan.info> wrote:

>-original message-
>Subject: Re: [gentoo-server] New Gentoo-Wiki Article (draft):
>Paravirtualizing Gentoo VMs on XenServer
>From: Paul Hartman <paul.hartman@gmail.com>
>Date: 2011-07-26 22:42
>
>>On Tue, Jul 26, 2011 at 7:47 AM, Pandu Poluan <pandu@poluan.info> wrote:
>>> Hello list!
>>>
>>> As I've once promised, here's a (draft) of HOWTO run Gentoo VMs
>>> paravirtualized on XenServer
>>>
>>> 
>>>http://en.gentoo-wiki.com/wiki/User:Pepoluan/Paravirtualized_Gentoo_VMs_
>>>on_XenServer
>>>
>>> Any inputs?
>>
>>Thanks for this, I've got a virtual server using old xen-sources
>>kernel and previous attempts to use vanilla kernel have failed. Now I
>>think I'll try my luck again with kernel 3.0 and your guide to see if
>>I can get it to boot this time... :)
>
>Glad to be of help. Two notes of caution, though:
>
>1. I forgot to specify that memory allocation (VMSPLIT) *must* be 3G/1G
>(3G for userspace, 1G for kernelspace). If not, the VM would mysteriously
>refuse to start -- without any error messages.
>
>2. I truly have no idea if my method works for 3.0. It's been tested
>thoroughlt with 2.6, though (to be precise: 2.6.38 and 2.6.39). I am
>still hesitant to use 3.0 because I saw people reporting bugs where a
>program is hard-coded to require kernel==2.6 (instead of requiring
>kernel>=2.6). IMO, it's not yet safe to tread the 3.0 waters. At least
>for another month. (As usual, YMMV)
>
>That said, feel free to point out errors. And if you fail/succeed, please
>do tell me.
>
>Happy paravirtualizing! :)
>
>
>Rgds,
>--
>FdS Pandu E Poluan
>~ IT Optimizer ~
>
>Sent from Nokia E72-1
>
>
>

[gentoo-server] New Gentoo-Wiki Article (draft): Paravirtualizing Gentoo VMs on XenServer

[Pandu Poluan]

Hello list!

As I've once promised, here's a (draft) of HOWTO run Gentoo VMs
paravirtualized on XenServer

http://en.gentoo-wiki.com/wiki/User:Pepoluan/Paravirtualized_Gentoo_VMs_on_XenServer

Any inputs?

Rgds,
-- 
Pandu E Poluan
~ IT Optimizer ~

 • Blog : http://pepoluan.tumblr.com
 • Linked-In : http://id.linkedin.com/in/pepoluan

Re: [gentoo-server] New Gentoo-Wiki Article (draft): Paravirtualizing Gentoo VMs on XenServer

[Paul Hartman]

On Tue, Jul 26, 2011 at 7:47 AM, Pandu Poluan <pandu@poluan.info> wrote:
> Hello list!
>
> As I've once promised, here's a (draft) of HOWTO run Gentoo VMs
> paravirtualized on XenServer
>
> http://en.gentoo-wiki.com/wiki/User:Pepoluan/Paravirtualized_Gentoo_VMs_on_XenServer
>
> Any inputs?

Thanks for this, I've got a virtual server using old xen-sources
kernel and previous attempts to use vanilla kernel have failed. Now I
think I'll try my luck again with kernel 3.0 and your guide to see if
I can get it to boot this time... :)