From owner-freebsd-stable@FreeBSD.ORG Mon Mar 12 21:03:26 2007 Return-Path: X-Original-To: freebsd-stable@freebsd.org Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [69.147.83.52]) by hub.freebsd.org (Postfix) with ESMTP id 5FE0716A400 for ; Mon, 12 Mar 2007 21:03:26 +0000 (UTC) (envelope-from vivek@khera.org) Received: from yertle.kcilink.com (yertle.kcilink.com [74.92.149.58]) by mx1.freebsd.org (Postfix) with ESMTP id 3579B13C44C for ; Mon, 12 Mar 2007 21:03:26 +0000 (UTC) (envelope-from vivek@khera.org) Received: from [192.168.7.103] (host-103.int.kcilink.com [192.168.7.103]) by yertle.kcilink.com (Postfix) with ESMTP id C05AEB80A for ; Mon, 12 Mar 2007 17:03:25 -0400 (EDT) Mime-Version: 1.0 (Apple Message framework v752.2) In-Reply-To: References: Content-Type: text/plain; charset=US-ASCII; delsp=yes; format=flowed Message-Id: <870A042E-4BA8-45E3-888A-4661C0B1F9C6@khera.org> Content-Transfer-Encoding: 7bit From: Vivek Khera Date: Mon, 12 Mar 2007 17:03:24 -0400 To: FreeBSD Stable List X-Mailer: Apple Mail (2.752.2) Subject: Re: Xen Dom0, are we making progress? X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 12 Mar 2007 21:03:26 -0000 On Mar 12, 2007, at 4:34 PM, Nikolas Britton wrote: > What I'd really love to do is split up each service (httpd, postgres, > samba/nfs, ldap/nis, asterisk, etc.) into discrete virtual machines. > It's too much work trying to make them all play nice on one system, This is the purpose for which we (ab)use jails for too. Works great, less filling. Check out ezjail in the ports; it makes very lightweight jails by using nullfs to share the full install tree across multiple jails. This may not be what you want, but it is what I wanted. What you don't get is a private kernel per jail, and some services are not really virtualized like network, and SYSV IPC. And you can only assign one IP per jail. For what I need, Xen is overkill.