Re: [gentoo-user] Increasing security [WAS: Rooted/compromised Gentoo, seeking advice [Solved?]

[Bill Longman <bill.longman@gmail.com>]

On 08/14/2010 12:32 PM, Jarry wrote:
> On 13. 8. 2010 21:05, Enrico Weigelt wrote:
>> * Bill Longman<bill.longman@gmail.com>  wrote:
>>
>>> Basically just run VMWare/Virtualbox etc and put the services in there.
>>
>> well, these solutions are way "bigger" (iow: more resource
>> intensive), since they run a complete operation system instance
>> within the virtual machine.
> 
> That is why I picked up Linux-VServer (actually, first I tried
> OpenVZ but could not make it run). It is a kind of compromise,
> where all guests share the same kernel. This brings certain
> security implications, but on the other side, I can run dozens
> of guest on a moderate machine, with 4-cores and 8GB memory
> (i.e. a guest running bind takes just about 20MB of memory)...

This looks rather interesting, Jarry. Is it simply a matter of compiling
the vserver-sources and util-vserver? Did it take much time to set up
the kernel for your box? Or is it pretty much a typical kernel setup?
Any good tools in the util-vserver package?

> The only service running on my "host" (main system) is sshd,
> which I secured as much as I could. Everything else (web, mail,
> dns, ftp, syslog, X, and plenty of users' services) runs on its
> own guest-system, chrooted in addition (where it was possible).

Sounds very efficient.

TIA,

Bill