Slashdot Mirror


One-Machine Linux Cluster

An AC wrote: Forget Beowulf ? clusters, Jacques Gelinas has made available a kernel patch to enable many virtual servers running on the same machine, even the same kernel. Read his original message posted to the Linux kernel list." Imagine what this will mean for hosting companies...

168 of 260 comments (clear)

  1. Re:bah by man_ls · · Score: 2

    Honestly, you might be on to something here :)

    A virtual Beowulf that is physically a beowulf node itself...Naah, that'd take some clever hacking, a cluster of cluster servers. Probably not possible.

  2. Re:bah by pyite · · Score: 2, Funny

    "a cluster of clusters" sounds awfully like an array of arrays which is a multi-dimensional array. Hmm... A multi-dimensional cluster perhaps?

    --

    "Nature doesn't care how smart you are. You can still be wrong." - Richard Feynman

  3. Re:Machines.. by man_ls · · Score: 2

    If I understand correctly (IIUC? Maybe I can start a new acronym trend here...) anything parallelizable must be custom-written with the Beowulf libraries in mind. I have absolutely no idea how to do this, but the command #include or comes to mind, something I read about it. I've got a handful of older systems sitting around, and gave clustering a thought, but I'm not confidant in my Linux skills to try and compile a custom clustered kernel.

  4. Everyone gets their own psuedo server by havardi · · Score: 4, Insightful

    haha.. better read the fine print and make sure you actuallu get your own *computer* including box and powersuppy, and motherboard-- or you may end up sharing your box with 100 other ppl :-P

  5. *BSD Jail? by TheRealDamion · · Score: 2, Insightful

    Isn't this like the BDSs jail() syscall?

    1. Re:*BSD Jail? by Anonymous Coward · · Score: 2, Informative

      Yes, but a little more general purpose. See
      the FAQ entry
      here

    2. Re:*BSD Jail? by lamontg · · Score: 1

      looks to me like its BSDs jail(), but with a messier syscall interface. i'm not sure the extra flexibility is really worth it. interesting to see if linus accepts it or not since he (rightly) tends to not like people cluttering up his syscalls.

    3. Re:*BSD Jail? by InvisibleCraterFunk · · Score: 2, Interesting
      Interesting. FWIW, several of jail()'s shortcomings are going to be addressed in FreeBSD 5.0.

      See jailNG

  6. Re:Machines.. by man_ls · · Score: 2

    The "Lameness Filter" edited out my .h files!

    #include "beowulf.h"
    or
    #include "cluster.h"

    Windows 2000 Advanced Server comes with clustering built in via the "cluster" command, you probably don't want that though, because it wouldn't run on the 450 and probably pretty slow on the Duron.

  7. wat r the implications for mainframes? by deadmantalking · · Score: 2, Interesting

    As far as i know... this was supposed to be one of the big wins for the mainframes... i recall some note about 44000 linuxes running together on a single IBM mainframe? sorry dont have the link handy...

    --
    A crank is a little thing that makes revolutions
    1. Re:wat r the implications for mainframes? by Buck2 · · Score: 2, Interesting

      Interesting point ... will a box containing a processor named Athlon ever have as much IO as a z900?

      Probably not, but you _will_ assuredly see a commodity item with a z900's IO in your lifetime (assuming you're of average /. age :)

      --

      As my father lik@(munch munch)... ....
    2. Re:wat r the implications for mainframes? by sudo · · Score: 1

      yeah, 44K accounts idling.

      I think you can remove a zero and querter it to
      see how many machines it can probably run adequately.

  8. I can hear the trolls now... by Scoria · · Score: 1

    Beowulf clusters of virtual Beowulf clusters of virtual Beowulf clusters.

    On a more serious note, though, this still does not give you the advantages a dedicated server does. You do not have the dedicated *hardware* resources and it is likely much slower than just going the "chroot route" (due to all of these virtual machines on one server...)

    --
    Do you like German cars?
  9. Very Useful by Gregg+Alan · · Score: 5, Insightful

    Slashdotted before I could read the whole thing. :( But, as a sysadmin for a smallish web devolopment/hosting company I could REALLY use some separation between certain clients. Sure, this isn't ready for production systems but one day it may be.

    The patcher is right...modern CPUs (for my industry) have PLENTY of power. What I hate is having to run some third party app for a client (even in a Linux environment) that *might* affect the whole machine. This patch holds the promise that I won't have as much to worry about.

    Yes, this is a good thing.

    --
    Here before all but 8486 of you.
    1. Re:Very Useful by btellier · · Score: 2, Informative
      What I hate is having to run some third party app for a client (even in a Linux environment) that *might* affect the whole machine.

      If this is your problem you're not running the right apps. For modern production machines the problem is usually running Exchange/Sendmail instead of Qmail or MSDNS instead of DJBDNS (OK, maybe i'm partial to DJ Bernstein's apps). The only thing you might overload on is web servers, and if you're running Apache you've got such good code behind you that your CPU is probably the bottleneck.

      The answer for production servers is not "seperation between clients" but rather choosing apps which are efficient. Name any app likely to be run on a high traffic machine and I can give you a specific UN*X app which will do it with very little waste.

    2. Re:Very Useful by lewp · · Score: 1, Informative

      Notice how he said "for a client." Clients, in the hosting business especially, tend to ask for things you know it isn't in anyone's best interest to provide. Unfortunately, sometimes keeping their business means going against your better judgement.

      That said, the company I work for has a product that does something along the same lines, with FreeBSD instead of Linux. Everyone agrees it is much nicer than the normal shared environments we've dealt with.

      --
      Game... blouses.
    3. Re:Very Useful by jm91509 · · Score: 1

      Sun have this in some of their high end servers. The E10k can have lots of domains that act as independent systems. Hardware resorces can also be dynamically added or removed from systems on the fly. Its way cool. A little expensive though. Not quite free....

      JM

    4. Re:Very Useful by rtaylor · · Score: 2

      Didn't you configure login.conf settings to keep those apps from running stray?

      Limit all clients to a max 10% CPU and 10% of the ram (depending on configuration). Most are manageable like this -- and nobody notices when someone has a script with a tiny loop that just pulls cpu time till it dies :)

      --
      Rod Taylor
    5. Re:Very Useful by rtaylor · · Score: 2

      Yes, but you still need 2 of them because when those things go down they go down hard. Always seems to take days to get it back up again when theres a catestrophic failure.

      --
      Rod Taylor
    6. Re:Very Useful by Lumpy · · Score: 2

      Processor power aside, Imagine running 6-12 V-linux machines on that cheap 2 processor P-III.

      you can easily run 12 websites on a SMP P-III 866 and if each boots off of seperate partitions (or even seperate SCSI drives for more seperation!) that would rock.

      The only problem I see is that User C can rob processor time from Users A and B by simply recompiling the Kernel with a make -J2

      I wonder what plans are in the future to eliminate machine A from mounting Machine B's hard drive partitions or Sniffing the ethernet traffic or even dumping the contents of memory.

      --
      Do not look at laser with remaining good eye.
    7. Re:Very Useful by Bender+Unit+22 · · Score: 1


      The patcher is right...modern CPUs (for my industry) have PLENTY of power. What I hate is having to run some third party app for a client (even in a Linux environment) that *might* affect the whole machine. This patch holds the promise that I won't have as much to worry about.


      Oh yeah, how come I keep getting those mails from the sysadmin with "overuse of CGI" in the subject line, dammit. :-)

      Oh well, maybe they shouldn't host 800 sites on one machine.

    8. Re:Very Useful by blang · · Score: 2

      Whole heartedly agree. It would also perforctly cover the market between colocation and virtual web hosting.

      Currently, the only choices we have are colocation and virtual web server hosting. colocation is way too expensive, and virtual hosting does not offer enough flexibility. It's hard to get any services that are not offered as part of the hosting company's smorgasboard.

      Virtual hosts like this would be perfect for tinkerers who can build all the stuff by themselves, without having to fork out for a rackmount server, precious rack space, and expensive colo fees.

      --
      -- Another senseless waste of fine bytes.
  10. Re:bah by talonyx · · Score: 4, Insightful

    Well hey, on a multiprocessor machine it might be interesting. Dedicate a processor for each node and you have four beowulf nodes in one box.

    Not only would it be cool for developers to test Beowulf-enabled code, but it would be awesome to have each node independantly accessible from the network.

  11. don't forget user mode linux by Anonymous Coward · · Score: 1, Informative

    Here is another project that just turns the kernel into another runnable process. You need to have a filesystem for it to mount and run with (available at the site) and from there you can have it run just about everything you can under the main host (within reason). It can be totally isolated, networked, and/or use its own hostfs to read directly from the host system's directory tree.

  12. Re:bah by man_ls · · Score: 2

    Ohh god...

    type beowulf=packed array[0..255] of system;
    type cluster=packed array[0..255,0..255,0..255] of beowulf;

    Slightly recursive...

    cluster[0[255],0[255],0[255]] = isPrime(bignumhere);

    Thats if I remember my multidimensional linked arrays correctly. (and no, it isn't C++ either, sorta Pascal.)

  13. Basically Like OpenVMS' Galaxy? by inhalent · · Score: 4, Informative

    Basically the same idea as Galaxy. Check it out for ideas.... http://www.openvms.compaq.com/availability/galaxy. html

    1. Re:Basically Like OpenVMS' Galaxy? by ewilts · · Score: 1

      Basically like IBM's VM, which predates OpenVMS Galaxy by, oh, a few decades.

      Basically spoken by someone who hasn't worked with either.

      Take a typical VM system and drag a CPU from one instance of the OS. Oh, that requires a reboot of BOTH instances? Damn... Do that with a Galaxy. Live. Drag and drop a CPU between VMS and Linux. Cool...

      Want shared memory between cluster instances? Sure, in a Galaxy running VMS. Want to do that with VM? Too bad...

      --
      .../Ed
  14. Someone doesn't read the article before commenting by A+Commentor · · Score: 1
    I always thought the point of a Cluster is desgined to add machines and combine into a "virtual" machine, that has much more porcessing power and disk capabilities than a single standalone box.

    It would help if you would read more than just the title before you commented...
    --

    Looking for any old 8-bit Heathkit/Zenith software/hardware - http://heathkit.garlanger.com

  15. Finally catching up by Ekman · · Score: 1, Flamebait
    It's nice to see Linux finally catching up. FreeBSD has had this functionality for over a year and a half.

    Take a look at the jail(8) and jail(2) manapges.

    1. Re:Finally catching up by Greg+Lindahl · · Score: 3, Insightful


      Jail isn't the same as this. If you read the jail manpages, it gives lots of examples how running with a jail involves very interesting problems for some uses. This different technique has different problems for other uses, and does some things nicely that jail does not. And user mode Linux is different, and better for yet other purposes.

  16. Re:Pointless? by A+Commentor · · Score: 1

    Did you only read the title?? Next time try reading the link (or at least the write-up) before you make a comment...

    --

    Looking for any old 8-bit Heathkit/Zenith software/hardware - http://heathkit.garlanger.com

  17. Re:who the crap is chrisd? by SquierStrat · · Score: 1

    Chris DiBona of course!

    --
    Derek Greene
  18. Beaowulf not the target audience by Genady · · Score: 4, Interesting

    This has just about zero to do with clustering, if anything this is the opposite of clustering. However this IS very very interesting for Web Hosts and just about anyone else that wants to create and maintain multiple environments for developement, test, etc. Image, being able to carve up a mid-range machine like you can an S390 (or other Mainframe class machine Like Sun's E10/15K). So suppose IBM takes this an runs with it. Linux is already ported to RS/6000 and AS/400, now you could get 8 processors of RS/6000 goodness, run production on 4 processors, Test on 2 processors, and Dev on 2 processors.

    The devil will be in how you refresh test and dev from production, but that can probably be done inside Logical Volume Manager.

    This is very very cool stuff it will be very ineresting to see how it stacks up against the big boys in Virtual machine space.

    --


    What if it is just turtles all the way down?
    1. Re:Beaowulf not the target audience by justin.warren · · Score: 2, Informative
      Just to clarify a little, Sun E10/15k's are not directly comparable in the way multiple servers run in the same chassis. If you were to combine all of the system boards in an E10/15k and then run virtual servers in a single copy of Solaris (I'm not aware of anything that allows you to do this) then it would be comparable.

      The way most E10/15 installations are used is to split the chassis, which supplies redundant power, management bus (JTAG) and a centreplane configuration for data and address buses, among several system boards. Each combination of system boards is used to run a completely separate OS installation. Even the data and address busses are physically separated from each other, rather than logically as in the article or an S390. It is a very rare error that will take the entire chassis down, providing superior uptimes. For the article, if there was a data or address bus error for one virtual machine, all of them would be affected, since it's the same physical hardware. This is not the case for an E10/15k.

      You could, theoretically, split one chassis into lots of system boards and run lots of Solaris instances in a cluster, but that wouldn't be nearly as powerful as putting all the boards into a dirty big SMP Solaris instance. Solaris SMP is pretty darn cool, IMHO.

      --
      Just because you're paranoid doesn't mean they're NOT after you.
    2. Re:Beaowulf not the target audience by Doktor+Memory · · Score: 4, Interesting

      now you could get 8 processors of RS/6000 goodness, run production on 4 processors, Test on 2 processors, and Dev on 2 processors.

      What you're suggesting is pretty much the opposite of how this package works. As the author himself states, you cannot dedicate hardware resources to a vserver. Only one kernel is ever running, and you use all of your cpus or none. Process- and user-space isolation is provided, but if a process in one vserver tickles a kernel bug that crashes the system, the whole ball of wax will come down with that vserver. (Likewise, it's very likely that a kernel-level root exploit will allow you to break out of the vserver and attack the whole system.)

      Essentially, vserver is to the process space what chroot is to the filesystem layer.

      This is not inherantly better or worse than the "system partitioning" approach; it's just a different approach, and will have different uses.

      --

      News for Nerds. Stuff that Matters? Like hell.

    3. Re:Beaowulf not the target audience by Xanni · · Score: 3, Informative

      Like most Slashdot posters, you obviously didn't read the documentation before posting. On an 8-processor machine, this patch will give you 8 processors for each virtual server; it does /not/ implement CPU partitioning and explains the difference in the documentation.

      Also the main server can see all the files in the virtual servers since it isn't chrooted.

      --
      http://www.glasswings.com/
    4. Re:Beaowulf not the target audience by AftanGustur · · Score: 2


      IBM is already running 15000+ linux servers (seperate kernel and all) on a single iron ..

      --
      echo '[q]sa[ln0=aln80~Psnlbx]16isb572CCB9AE9DB03273snlbxq' |dc
    5. Re:Beaowulf not the target audience by PD · · Score: 5, Funny

      IBM is already running 15000+ linux servers (seperate kernel and all) on a single iron ..


      They're running that on an iron? My god, technology is moving so fast now. They've skipped right over the toaster.

    6. Re:Beaowulf not the target audience by sharkey · · Score: 2

      Hopefully they'll have it ported to the iMac for women before too much longer.

      --

      --
      "Outlook not so good." That magic 8-ball knows everything! I'll ask about Exchange Server next.
    7. Re:Beaowulf not the target audience by TheRain · · Score: 1

      that's gotta be the funniest post I've seen on /. yet...

      --
      Please help! I'm stuck inside my virtual reality headset!
    8. Re:Beaowulf not the target audience by wokie-bug · · Score: 1

      On an AS/400 or Iseries machine the only way to run Linux is in a LPAR (Logical Partition of hardware resources). And Linux or other OSses like AIX and OS/400 can run together several times on such a machine with a virtual IP-lan between the different partitions. However, the main OS always must be OS/400, so this means high costs. The IBM and alike guys ask a lot money for their machines because of the high software and maintanance costs.
      The original mentioned new Linux feature have a something to do with clustering. You can cluster two Linux partitions on a single box, the availability gets higher because when there is a software failure the second partition takes it over.

  19. Isn't this sorta the opposite... by josquint · · Score: 5, Funny

    ... of clustering. Its... slicing your box up...

    1. Re:Isn't this sorta the opposite... by sharkey · · Score: 3, Funny

      Its... slicing your box up...

      It even makes Julienne child processes!

      --

      --
      "Outlook not so good." That magic 8-ball knows everything! I'll ask about Exchange Server next.
    2. Re:Isn't this sorta the opposite... by josquint · · Score: 1

      LMAO!
      mod this +1 funny somebody :)

    3. Re:Isn't this sorta the opposite... by yesthatguy · · Score: 1

      Julia Childs's julienne child processes? I smell a new tongue-twisting phenomenon - a merger of cooking and coding.

      --
      Yes! That guy!
  20. Why ask why? by Mdog · · Score: 1, Redundant

    I am displeased to see so many of you people replying and asking why this would be a good idea.

    The point is that this is *l337*. *That* is the point.

    If there happens to be a practical application, that is completely secondary. :)

    1. Re:Why ask why? by OmegaDan · · Score: 1

      Why ask how? :)

      "You don't ask how some things are done, you just e do them." - Q

  21. Is it similar to ensim? by aD+docwolf · · Score: 2, Interesting
    Is it similar to this (commercial, closed source) package for redhat?

    I believe this package is very popular with webhosts. One user can totally hose the machine, the rest are not impacted. Trust me, I know.

  22. Re:Someone doesn't read the article before comment by Darth+Turbogeek · · Score: 1

    "One-Machine Linux Cluster"

    Actually I did, which is why I added my comment about adding this TO a hardware cluster. What I was querying was that a) the title of the article appeared to be misleading and 2) It doesnt really seem to me to be much of a point on a single box.

    But as I said, with a hardware cluster AND this, now that's a good idea.

    --
    "Old Rallydrivers never die - they just fail to book in on time"
  23. Re:Machines.. by morcheeba · · Score: 2, Informative

    check out mosix -- it looks like the simplest way to combine the two transparently. I haven't used it, but it looks easy. This would be helpful for some tasks more than others (ie. povray or orher intesive math, but not quake), and of course, things that are multi-process (the same requirement needed for SMP). There was a ./ article about this a while ago.

  24. User Mode Linux? by jmv · · Score: 4, Informative

    Can anyone tell me how this is different than User Mode Linux?

    1. Re:User Mode Linux? by dispari · · Score: 4, Informative

      User Mode Linux is basically a VM. It uses virtual devices for hardware multiplexing. Read the "Alternative technolgoies/Virtual Machines" and "Alternative technologies/Limitations of those technologies" for why this is a different (and better in some instances) solution.

      The vunify tool has significance when differentiating between VM's and this.

    2. Re:User Mode Linux? by Florian+Weimer · · Score: 5, Insightful

      At the moment, User Mode Linux does separate the processes in a VM from the host system. That's because the kernel image itself is writable for the processes running in a UML virtual machine, which means that processes can break out of the virtual machine pretty easily and gain access to the account running UML on the host system. In addition, even if this is corrected (perhaps it has been during the last few weeks, I haven't checked), the kernel memory would still be read-only for the processes run by it, so different processes in the virtual machine could snoop each other. This means that User Mode Linux is great for testing stuff, but it only moderately increases security.

      The patches for compartmentalization which mimic FreeBSD's jail(8) feature are completely different. If they are done properly (and checking this will require some time), they can provide complete separation of the processes running in different compartments. Performance is probably a bit better, too, because only one kernel is running, and not a stack of two.

      Again, if you need compartmentalization now, and you have security concerns, you should either use FreeBSD, or GNU/Linux on S/390. This new kernel feature will need a bit of time to settle down and work correctly (from a security point of view).

  25. Re:Someone doesnt understand the reason for a clus by fanatic · · Score: 3, Insightful

    Someone doesnt understand the reason for a cluster

    I think that was whoever wrote the headline. This doesn't buy you what a cluster buys you, which is more MIPS and RAM working on the same problem. This buys you multiple relatively independent environments on one machine. Hence the reference in the /. article to hosting companies. This is like the Sandinavian ISP that replaced a bunch of Sun boxen with a much smaller number of larger IBM mainframes. The mainframes run IBM's VM (stands for Virtual Machine), which is roughly analogous to the "root-kernel" dicussed in the linked-to articles, then runs many independent copies of Linux under VM. Each user gets his own copy of Linux to screwup^H^H^H^H^H^H^H do as wishes with. VM 'fools' the copies of Linux into thinking they each have their own machine. Here we have Linux replacing VM, so now a Free product can do some of this (assuming it works, which, being brand new, I wouldn't bet my income on. But I'll bet it will work well soon.), though not all: VM lets you run multiple OS's on the box, which this doesn't. But it does a lot - separate root logins/passwords and process lists for the 'vurtual Linuxen', for example.

    --
    "that's not encryption - it's a new perl script that I'm working on..." - from some Matrix parody
  26. Actually this is kind of an old idea by Ghostx13 · · Score: 3, Informative

    Hostpro, now Interland has this sort of thing for freeBSD. It used to be called vserver. The new improved version is called Freedom. It's been out for years.

    1. Re:Actually this is kind of an old idea by Kraft · · Score: 2

      hostpro/vserver/vservers.. all the same thing. Now they have their own stuff systems, but they just used to be resellers for iServer (now viaverio.

      Right now, my site and a friends is each running on a Free/BSD split with about 10 other users - it's a virtual server, and I can install/do anything I feel like on it. I get:

      > FreeBSD 4.2-RELEASE (VKERN)
      and
      > BSDI BSD/OS 3.1 Virtual Kernel #17
      (they are discontinuing BSD, afaik)

      --

      -Kraft
      Live and let live
    2. Re:Actually this is kind of an old idea by BlueTooth · · Score: 1

      Verio has been doing the same thing (also with FreeBSD) for quite some time. They give you a virtual kernel and call it a Virtual Private Server. 10-20 clients per machine, max. It works quite nicely, too.

      --
      SPAM
  27. Virtual Servers by MontyP · · Score: 1

    This concept is not new... A project known as FreeVSD has been in production for a while now.
    The software is released under the GPL, and is striving to be the most advanced and finely tuned web hosting system available.

    More information can be found here:
    http://www.freevsd.org/

    --


    There is no .sig
  28. mosix by morcheeba · · Score: 5, Interesting

    I wonder how this would work with mosix... it could be a dream system!

    You could use mosix to combine the compute resources of several boxes to look like one box. And then, you could use this divy up the space so that people don't step on each other. When anyone (working in thier own space) kicks off a large compile, the load would transparently be distributed among all the boxen.

    Of course, I have zippy experience with any of this, but it sounds possible.

    1. Re:mosix by Buck2 · · Score: 1

      I have a gut feeling that there would be a significant amount of work necessary before this would be feasible. As cool as it may be, it is absolutely essential that either network memory or some sort of uber-slick inter-virtual-server communication about necessary and future memory requirements, as well as super-slick process movements, be hashed out.

      If you have N machines and greater than N users, it's probably better to install a batch system. There is already a shitload of flexibility in the _current_ UNIX environment especially WRT linking together of multiple machines. No need to mess with the absolute barebones with two patches, eh?

      --

      As my father lik@(munch munch)... ....
    2. Re:mosix by Antoshka · · Score: 1

      Why don't you post it on the MOSIX mailing list? Beside I think that, for the same audience, there is more interesting project MOSIX Virtual Server. There are not much details online and I'm not authorized to publish any inside info, but you can ask the one who does the research.

      --
      Don't say No, say May be
    3. Re:mosix by morcheeba · · Score: 1

      That's good if you can break up the task into multiple program batches (i.e. each program applies x effect to frame y), but doesn't help if you had a massively multithreaded ap (like the ap I'm writing, once I get it working on a single thread), or if you're just plain too lazy to cut up a parallizable task into small batches (that would also describe me).

      Also, do the regular unix batch stuff have some sort of load-spreading? I don't know unix well enough to answer. It seems that the mosix/vm combo would do this automatically.

      The batch system is definately something I've want to learn... (I've been interested ever since I found out that on the old honeywell mainframe at school each program gets equal time. Divide your task into lots of programs = more time for you!)

    4. Re:mosix by bn557 · · Score: 1

      but with what you're doing, you no longer need multilple virtual machines. What the person was talking about was like, you have 5 computers and 3 clients, each one gets just over 1 and a half systems..... suddenly you have a 4th user and each user gets one and a quarter. now 3 people sign out and one person gets 5 CPUs of power. He's talking about a VM with Multiple VMs in it.

      Pat

      --
      Humans are slow, innaccurate, and brilliant; computers are fast, acurrate, and dumb; together they are unbeatable
    5. Re:mosix by vidarh · · Score: 2

      Compaq recently announced that they are working on Single System Image clustering for Linux, which does make several boxes look like one - same PID space, shared IP addresses, shared memory, shared devices and filesystem etc.

    6. Re:mosix by Buck2 · · Score: 1

      a) If it won't parallelize, how do you expect to thread?

      b) Mosix won't spread threads to different machines

      c) You _will_ have problems with memory management between different VM's.

      I agree that it is an intriguing idea, but the devil is in the details. Those details are memory pressure for processes which are by nature isolated from each other, disk IO, and two huge (in concept, not necessarily lines) patches to your OS kernels.

      Batch systems with schedulers and properly set policies are extremely flexible in ensuring QOS for each process. It would be _more_ difficult to do so with VM's and Mosix, esp. in their current state.

      --

      As my father lik@(munch munch)... ....
    7. Re:mosix by DrSkwid · · Score: 2

      hmm,

      plan9 is a distributed architecture.
      you don't need one pid space, that all sounds terribly over complicated

      On plan9 you can happily debug code running on any of MIPS, SPARC, Motorola 68020, Intel 386 on any other plan9 box (permissions granted of course).

      Multi-threading isn't the only way to build a big application.

      --
      There are places where the networks are not touching,and there are places where they are-Boeing's Lori Gunter
    8. Re:mosix by lophophore · · Score: 1

      sounds like a vaxcluster all over again.

      --
      there are 3 kinds of people:
      * those who can count
      * those who can't
  29. ensim by tsuki777 · · Score: 1

    i use an "appliance server" at mediatemple.net that uses the same sort of thing. just a small, isolated linux os on a shared box. works great! i'm fairly sure they use technology developed by ensim. read up on it here. nice to see this made available elsewhere though...

  30. parallel file systems by Alien54 · · Score: 2
    unfortunately many clustering setups only muscle the processor power.

    What many people think it means is often something like a parallel file system. which is not the same.

    If I recall right, backups can be a pain, but that would vary and depend on the software

    --
    "It is a greater offense to steal men's labor, than their clothes"
  31. what would happen.... by L-Wave · · Score: 2, Insightful

    what would happen if you ran a fork bomb on one of the virtual servers? would it bring the whole physical machine down or just the virtual machine?

    --
    I SURVIVED THE GREAT SLASHDOT BLACKOUT OF 2002!
    1. Re:what would happen.... by greenrd · · Score: 1
      GNU/Linux has built-in protection against (at least some) fork bombs, as you'll find out if you ever misconfigure X so that it can't come up in runlevel 5. "Respawning too fast" it'll say.

    2. Re:what would happen.... by L-Wave · · Score: 1

      actually GNU/linux does not have protection against fork bombs. The respawning message msut be a subsystem message, but not within the kernel itself. There is no protection against something like:

      forker.pl:

      #!/usr/bin/perl
      print("forking\n");
      system("./forker.pl");
      system("./forker.pl");

      --
      I SURVIVED THE GREAT SLASHDOT BLACKOUT OF 2002!
  32. This is... by keepper · · Score: 1, Insightful


    EXACTLY what the FreeBSD jail() call does...

    Basically chroot on steroids...

    Well, it is good the linux crowd took such
    a good idea over.. if now only they would take
    the concepts of having three branches ( RELEASE,STABLE,CURRENT) to the kernel...

    On another note though.... with linux's history of root kit's, ths is certainly something i would not use for a commercial offering...

    1. Re:This is... by Anonymous Coward · · Score: 1, Funny
      if now only they would take
      the concepts of having three branches ( RELEASE,STABLE,CURRENT) to the kernel...


      (2.0, 2.2, 2.4)
    2. Re:This is... by psamuels · · Score: 2, Informative
      EXACTLY what the FreeBSD jail() call does...

      And you can do most of the same in Linux, with good old-fashioned chroot plus capabilities. No need for a separate system call.


      Restricting to a specific IP address is a nice touch, and one thing Linux capabilities can't do, but it seems rather application-specific. It only allows one IP alias to the jailed process, and doesn't seem to cover any non-IPv4 addressing. And WTF do you have to specify a hostname? The kernel needs this information? (Or does the (2) in jail(2) not actually mean it's a syscall, like it doesn't in AIX?)


      I'm also not sure if Linux capabilities are fine-grained enough to keep root from escaping a chroot without totally crippling it - but then again, jail() seems pretty crippling too. A virtual host server really shouldn't need root privs, other than bind-to-low-ports, and Linux capabilities do have that granularity.

      --
      "How can you claim that you are anti-crack, while still writing a window manager?" — Metacity README
    3. Re:This is... by keepper · · Score: 1

      uh...

      I didn't say (ANCIENT,OLD,BLEEDING) which is
      what 2.0,2.2,2.4 are respectively....

    4. Re:This is... by realdpk · · Score: 1

      Yes, the 2 means it is a system call. The binary is jail(8). And yes, it needs the hostname. Linux uses the hostname in the kernel, too, I believe. It's been that way for years.

    5. Re:This is... by psamuels · · Score: 1

      Well so it does. I learn something new every day. I still can't figure out why something like a hostname isn't 100% a figment of user-space. Anyone?

      --
      "How can you claim that you are anti-crack, while still writing a window manager?" — Metacity README
  33. *Extends arm, palm face up* by lightware · · Score: 2, Insightful
    This is pretty sad.
    Firstly, you're an idiot if you still haven't realized staff comments aren't in italics.

    Secondly, Beowulf clusters were only mentioned because they are the complete opposite of the subject matter:

    Beowulf clusters bring the computing power of several computers together for a single task, whereas with this a single computer could be used for several isolated tasks.

    Some of you should hand over your geek badges, right now.

  34. Re:Machines.. by psamuels · · Score: 2, Informative

    Two common uses for a cluster:


    • computing - there are two common approaches:
      • have a parallel-computing library which your applications already use (PVM and MPI are the two popular APIs for such libraries), and configure it to share the load over your cluster. I think this is what Beowulf does.
      • sometimes used for 3d rendering - have a compute-intensive server program that can do any fraction of the total work (say, render frames x through y) running on each machine and a controller program which hands out and collects work to do. This is also how seti@home works.

    • serving - as in web, database, etc. Have multiple server processes, one on each machine, and they are basically independent of each other. (How to coordinate database updates between multiple database servers is left as an exercise to your DB vendor.) To get clients to use "any available machine" when they think they're pointed at a single box, you can either use a proxy server or round-robin DNS.

    To answer your question, a web server can use either proxying or round-robin DNS without any special support from the main web server software. Of course, you have to have the proxy / DNS server running correctly. (Also, you obviously have to have either a shared or a synced filestore for your actual web site.)

    --
    "How can you claim that you are anti-crack, while still writing a window manager?" — Metacity README
  35. Re:Pointless? by ThatComputerGuy · · Score: 2, Informative

    Even if this was to be used to "simulate" a cluster, even that would be fairly useful to some people. If you want to learn to write programs optimized for clustered systems, yet don't have enough capital to be able to access one easily, what can you do?

    Well, for one, you can now setup a virtual cluster to test out your apps...

    --
    XML is like violence. If it doesn't solve the problem, use more.
  36. Hasn't IBM Been Doing This for Some Time? by GroundBounce · · Score: 2, Insightful

    IBM has been doing this for some time on their mainframes, where it actually makes sense because of the massive amounts of processing power.

    1. Re:Hasn't IBM Been Doing This for Some Time? by jooniqzb1tch · · Score: 1

      real mainframes have always been able to run severall OSes and to divide hardware ressources I think.

  37. Re:wow by foobar104 · · Score: 3, Offtopic

    (Goodbye, karma.)

    I know this is completely off-topic, but here it is anyway.

    Your understanding of the prefix "meta-" is incomplete. In addition to indicating syntactic self-reference (see Hofstader), it can also indicate semantic self-reference (see... well, Hofstader; he talks about this, too, in his discussion of GOD: God Over Djinn).

    SGI has a device for connecting crossbar routers together to form large single-system-image computers. It's called a metarouter:a router for routers.

    Likewise, a cluster of clusters would be properly called a metacluster. Since "Beowulf" is commonly synonymous with "cluster," the term "meta-beowulf" is pretty much correct, even though it makes me cringe.

  38. Re:Machines.. by Buck2 · · Score: 1

    You forget the extremely usefule pile of compute nodes available to a batch job scheduler like PBS or Condor or whatnot. :)

    --

    As my father lik@(munch munch)... ....
  39. Think about restricting services by mendepie · · Score: 2, Interesting

    Think about a system where you want to use IP filter to control what a network host/ports a service (or the hacker that has cracked your service) accesses.

    If it addresses many of the issues that normal chroot has, then it may be good.

    Isolation of applications against each other.

    It's going to be intresting to see how much overhead this has when compared to vmware, usermode linux, or just chroots. (Tried 'em all).

    If the overhead of this is not higher than chroot then it will be a big win.

    --

    Are you paranoid if you know that they just want to know everything you say and do?

  40. possible security vulnerability? by WiPEOUT · · Score: 1

    I could be mistaken here, but it is my impression that any user can spin off a virtual machine.

    What happens in the following scenario:

    A user spins off a vserver, specifying the IP address of the default gateway for the parent server. The user then somehow convinces the parent server that it really *is* the gateway, and effectively takes the parent server off the network. If this is possible, someone without physical access to the network, but with an unpriviledged login to the parent server, could effectively perform a DOS attack on it.

    I must be missing something here. It can't be this simple. Can anyone point out where I've gone wrong?

    1. Re:possible security vulnerability? by ZerothAngel · · Score: 1
      I must be missing something here. It can't be this simple. Can anyone point out where I've gone wrong?

      I haven't actually looked at the implementation, but I would think that they'd restrict the creation of vservers to root. That is, the real root of the host server. root users of vservers would not and should not be able to create more vservers.

  41. Too late. You already can! by wrinkledshirt · · Score: 1

    You bring up fifty instances of WINE. Each one of those instances brings up its own LINE emulator (okay, except it's not an emulator, but you know what I mean). You get each one of THOSE instances to broadcast on a different local IP on the machine, and then you cluster them all together from a serving process, no?

    How'm I doing? Better not quit my job as a VB instructor?

    --

    --------
    Bleah! Heh heh heh... BLEAH BLEAH!!! Ha ha ha ha...

  42. Save money on hosting? by BrookHarty · · Score: 2

    Co-location is kinda pricey, but use linux enabled with domains, and you could split the cost with other people. Then nobody has to bitch about ROOT access. If I ran a small ISP, I could offer linux domains for cheap, virtual servers. If someone messed up a domain, just restore from the nightly backup and they are up and running. Get a couple dual proc boxes, with dual nics (inet/nfs+backup), and a 60 gig (raided?). Make 2 gigs per domain, and NFS mount the /home dirs on some nas. If you could get the backups working, where handling domains are like files, just copy and go, this could be some powerful tool for the busy admin.
    -
    Sometimes I've believed as many as six impossible things before breakfast. -Lewis Carroll (1832 - 1898)

  43. binding 2 servers to the same port? by graveyhead · · Score: 2
    -May run various network services, binding to the same ports without special configuration.


    What!?!? What happens when you bind, say, sshd to port 22 on multiple servers? Do you also need multiple ethernet cards and ip addresses? The docs don't say anything about that...
    --
    std::disclaimer<std::legalese> sig=new std::disclaimer; sig->dump(); delete sig;
    1. Re:binding 2 servers to the same port? by mlanett · · Score: 2, Informative

      With IP aliasing it's not a problem; one card could service multiple servers, each with their own (set of) IPs.

    2. Re:binding 2 servers to the same port? by ZerothAngel · · Score: 1
      What!?!? What happens when you bind, say, sshd to port 22 on multiple servers? Do you also need multiple ethernet cards and ip addresses? The docs don't say anything about that...

      It sounds like you will need multiple IP addresses, but I'd think you could use IP aliases on a single interface just fine.

  44. user-mode-linux by swifticus · · Score: 1

    user-mode-linux has been around for quite a while now. it allows you to run the linux kernel on top of linux with its own filesystem, etc. if you're interested, grab the patch or check out the alan cox branch of the kernel.

  45. Humm, multi-proc boxes. by BrookHarty · · Score: 2

    When we upgrade databases, we assign a dedicated server because we dont want to use the all the cpu horsepower. If we ran a linux with virtual domains, we could upgrade on the same box and not use up all the resources, and the box could stay in production. Thou the article said there is a draw back on a shared file system, allow some kind of snapshots of file systems and you could make a very powerful combination. If you could move a snapshot file system to a domain, you could test, upgrade, whatever. Interesting idea.

    BTW, if you have a Sun StarFire with domains plugged into an EMC terabyte storage, you spent millions to do just that!

    1. Re:Humm, multi-proc boxes. by martinde · · Score: 1

      "some kind of snapshots of filesystems" sounds like a "chrooted" environment for each app to run on. So, I think all of the software exists to do what you're saying.

  46. Re:Pointless? by mabinogi · · Score: 1

    well...for a start, VMWare costs money....

    --
    Advanced users are users too!
  47. Virtual Machine by AnimeFreak · · Score: 1

    Isn't this basically what Bochs and VMWare are capable of?

  48. FLW ? by AftanGustur · · Score: 2

    I am displeased to see so many of you people replying and asking why this would be a good idea.
    The point is that this is *l337*. *That* is the point.

    Somehow I'm sure I could find a similar phrase in a "famous last words" collection somewhere ;-)

    --
    echo '[q]sa[ln0=aln80~Psnlbx]16isb572CCB9AE9DB03273snlbxq' |dc
  49. Isn't this a Virtual Private Server? by Ian+Bicking · · Score: 2
    I don't really know how they do it, but a number of hosting companies offer VPSs -- like 32 virtual computers hosted with one computer. I have an account like this myself, and it's a fairly economical way to get a very flexible host.

    It seems like this is the same kind of thing this person is talking about...? Is this more general in some way? What exactly is my host using anyway?

    1. Re:Isn't this a Virtual Private Server? by bilgebag · · Score: 1

      "What exactly is my host using anyway?" Why not let netcraft have a sniff at it? 'twill give you the OS anyway.

    2. Re:Isn't this a Virtual Private Server? by Ian+Bicking · · Score: 2
      "What exactly is my host using anyway?" Why not let netcraft have a sniff at it? 'twill give you the OS anyway.
      From the inside it is clearly a Redhat 6.0 Linux system. The kernel itself claims to be Linux 2.2.12-20ensim, FWIW.

      But it's obviously not a normal Linux system, since it's hosting multiple fully virtual systems on the same computer.

    3. Re:Isn't this a Virtual Private Server? by aozilla · · Score: 1

      Does your VSP allow you to write your own DNS server and bind it to your static IP address? I've been using iserver, and it is good but it doesn't let me bind to low ports. If you can do that, could you please send me an email with the url of your provider, or reply to this?

      --
      ok then your [sic] infringing on my copyright! Could you as [sic] me next time before STEALING my comments for your own?
    4. Re:Isn't this a Virtual Private Server? by Ian+Bicking · · Score: 2
      Yeah, I can do anything and install any software I want. I'm using superb.net. I haven't been super-excited about them, but for the most part it's worked well -- I'm used to Debian, and I think part of the pain was simply getting used to Redhat (still don't like it, though). Verio offers the same service on FreeBSD for somewhat more.

      A few people seem curious about this. I did a little research several months ago. Here's the places that looked decent:

      http://www.asp-linux.com/en/services/hosting/power server.shtml
      $65/mo -- a little sparse on information. I don't understand how you can have a VPS with limited POP boxes or no SSL. Maybe they just don't install it for you...?

      http://www.vitalserver.com/prices/
      $75/mo -- The website is a little sparse.

      http://services.superb.net/sps/
      $80/mo -- I've heard of them. Look competent. $90 when you pay quarterly, $80 only if you pay yearly.

      http://www.lightspeedhost.com/vps/detailed.html
      $80/mo -- same limitations as asp-linux...?

      http://www.1000island.net/virtual.htm
      $100/mo -- Looks half-assed. They have a phone number listed without an area code...

      http://www.datapipe.com/privateserver.htm
      $150/mo -- 10 IP address, reasonably cheap to get more.

      http://home.verio.com/products/hosting/web/vps/vps standard.cfm
      $150/mo -- FreeBSD (all others are Linux). Don't mention IP addresses -- only one?

    5. Re:Isn't this a Virtual Private Server? by aozilla · · Score: 1

      I'm currently using the verio product here. It doesn't allow me to bind to low ports, or have root access. You get one IP address. Also it is now $95/month. Maybe the product you were referring to was something different, though. I couldn't get your link to work.

      --
      ok then your [sic] infringing on my copyright! Could you as [sic] me next time before STEALING my comments for your own?
    6. Re:Isn't this a Virtual Private Server? by Ian+Bicking · · Score: 2
      /. inserted spaces, which you have to remove.

      Unfortunately none of the big web-hosting review sites have anything about VPS -- just shared hosts and colos. I found it hard to find information.

      Anyway, for the same price at superb.net you do get root and access to install whatever the heck you want. I bet the $150 deal at Verio is more like what you want. But as I look at it, it doesn't actually say anything about root. Most of the other places are pretty explicit about that.

      If you don't get root, it's not a very big step above a shared host. I guess you can do long-running processes.

    7. Re:Isn't this a Virtual Private Server? by aozilla · · Score: 1

      If you don't get root, it's not a very big step above a shared host. I guess you can do long-running processes.

      Well, I'm currently using it for handling email and web on multiple domain names. I also get my own running copy of mysql (with unlimited databases) and unlimited pop accounts (which a few of my friends are using). What I don't get is multiple telnet accounts (only POP/IMAP/FTP) or the ability to bind to low ports (which I guess would imply multiple telnet accounts). In any case, I looked at the documentation for the link you gave (for verio) and it looks like the same thing I already have, for a jacked up price. Also, I've used superb in the past and they were very rude and would not give me any refund after their servers were down for something like 3 days straight. So it looks for now like I'm going to have to wait until my dsl comes in (a month or two) before I can do any fun root access things. Even then I'll keep my verio around until I can find a suitable backup for my main mail domain. Even if I have to pay $95 a month (which I won't), I absolutely refuse to lose mail.

      --
      ok then your [sic] infringing on my copyright! Could you as [sic] me next time before STEALING my comments for your own?
  50. How might this impact Linux SMP scaling? by Anonymous Coward · · Score: 1, Interesting
    OK, I don't have a clue what's really involved but I wonder if this could be significant for Linux SMP maybe moreso in time than for single cpu systems. I remember reading a couple of years back about an idea someone had for keeping Linux well optimized for 1 & 2 cpu systems , which is something Linus appears to care about, while also aquiring massive SMP scaling capabilities competitive with, say Solaris. The basic idea was to find a way to operate a multicpu machine as a collection of 2 or 4 cpu Linux systems. Mainframe-like virtualization within Linux I think is what he was proposing. Of course, proposing it and actually achieving an 64-way implementation that doesn't impose so much overhead as to squash the original purpose, namely keeping Linux fast on modest systems, are 2 different things.
    This patch sounds somewhat similar. Uhh...is it at all similar, aside from the fact that it virtualizes in the other direction? Could it be turned inside out and extended in that direction ?

  51. Re:bah by utahjazz · · Score: 2, Funny

    Yeah! Let's take single machine, split it into 4 logical machines, and then combine them into 1 logical machine! DOH!

  52. Insightful? by xant · · Score: 1

    Arguably, the above post was +2, Funny. +5, Insightful is just plain bad moderation. Time to break out my red M2 pen.

    --
    It's rare that you're presented with a knob whose only two positions are Make History and Flee Your Glorious Destiny.
  53. Security flaws by BuGless · · Score: 2, Interesting

    Having these calls available to non-root opens up a can of worms. The system provided looks clean, except he should limit its execution with yet another capability.

    1. Re:Security flaws by kin_korn_karn · · Score: 1

      That a job for permission on the binaries, not the software itself.

  54. Resource limits are needed by hosting companies by the+frizz · · Score: 3, Insightful
    My particular interest was to find virtual hosting solutions that would (1) not allow one runaway virtual server to deny the others of at least a predefined minimum level of CPU, RAM and I/O (disk and network) resources and (2) give any one virtual server extra resources if they were available. From my reading of other slashdotter's posting and the info on the web I've summarized below the various virtual server hosting solutions mentioned. Someone who actually has used these products should actually correct me.

    Linux can natively be configured to enforce disk quotas and (with more difficulty) manage network bandwidth without any special virtual server software. Also the native unix process scheduling algorithm does reduce the priority of CPU bound tasks. The getrlimit(2) system call can be used to set various limits per process (not per virtual server unless the virtual server runs as one process I guess.) I know of no way to specifically limit disk bandwidth on Linux.

    Freeware such as s_context and user mode linux provide no control over how much resources one virtual server gets over another besides disk usage. Other limited resources like CPU, disk and network bandwidth (RAM?) are shared just like they would be shared by separate processes under a single Linux system.

    FreeVSD is not a virtual server, but a collection of scripts, binaries and multiple copies of hard-linked read-only filesystems for the common system environment. It is has the best chance for winning the total performance award but has no extra features for resource limits between systems.

    True virtual machines. (E.g., vmware) provide very good isolation, but this leads to little sharing of excess unused resources between virtual servers I believe. They also have poorer performance in general because so much emulation is done.

    The commercial, proprietary Private Server product from Ensim seems good from the marketing blurbs which say that they have "their own guaranteed share of the servers resources, including CPU, memory and bandwidth". I wonder what the performance penalty for this is and how much does it cost? Can anyone comment?

    1. Re:Resource limits are needed by hosting companies by autocracy · · Score: 2
      Freeware such as s_context and user mode linux provide no control over how much resources one virtual server gets over another besides disk usage. Other limited resources like CPU, disk and network bandwidth (RAM?) are shared just like they would be shared by separate processes under a single Linux system.
      Yup, you're right. But you can cap individual users in the main system. User Bob could be limited to $X% processor usage, etc. He's still root of his machine once he changes context though. Run as a script at boot before allowing him to log in, and his virtual machine is capped. I'm really liking the sound of this.
      --
      SIG: HUP
    2. Re:Resource limits are needed by hosting companies by sydb · · Score: 2

      and user mode linux [sourceforge.net] provide no control over how much resources one virtual server gets over another besides disk usage

      That's wrong, you can specify RAM allocation in UML.

      --
      Yours Sincerely, Michael.
  55. Ensim kernel virtualization by dkumpozr · · Score: 1

    I use the commercial Ensim Linux Private server technology... indeed it is perfect hosting. I've hosted over 50 Linux servers (VPS) on one physical machine (a big dell) with very few bumps. I reccomend about 30-40 though. Some of Ensim's products are rock solid - like the VPS itself, which is coined as the heart of "ServerXchange"; however a few of the "add-ons" need a little work. It's good because there are a large number of users who require root control over a server to install apps, and maintain security, etc - but don't need all of the hardware behind a dedicated box. They just want out of shared-hosting hell. It's important to note that the Ensim product completely isolates each VPS (virtual private server) including the Disk, CPU, Mem/Swap, Network, and soon disk activity on the physical server. I've stressed tested the Ensim VPS servers, have broken them, run really bad rm commands - and it is possible to wipe out a VPS and the others keep churning. Outside of not being able to mount the floppy disk or whatever they function like dedicated servers. I've found very few limitations. I run NFS mounts, IDS software, IPChains, and almost any other app. The Ensim stuff has been in development for years, so you also benefit from numerous code revisions, upgrades, and tuning. Something to think about... free is not always better. I am defintely an advocate of the Ensim product and thought I should give it good light. I've got 4 boxes for Linux hosting servers instead of 120.

  56. Please stop the war... by Ernesto+S.+Domato · · Score: 1

    Sorry if I sound a little upset, but I'm really tired of the FreeBSD vs. Linux war. I think it's pointless and don't make any good to anyone or the OpenSource community.

    Jail is in some way like chroot (as other has pointed). It imprision some process placing some restrictions to what the process can do and the idea of this new patch is to run an entire new machine (with his own kernel, process list, etc...) over the same machine.

    So just stop trying to start a flame and find a better use for your time, I guess that all the community will be happy on this.

  57. Read this article commenting this patch by lekter1 · · Score: 2, Interesting

    There is an article (spanish only) commenting this kernel feature here:

    http://www.hispacluster.org/modules.php?op=modload &name=Sections&file=index&req=viewarticle&artid=2.

    In fact, this article was generated collecting the opinions of many users who post comments about this topic.

    I hope it could give you some ideas about the implication of this important feature in the Linux future.

    --

    greetings,
    lekter
    http://www.hispacluster.org
  58. freevsd by salingpusa · · Score: 1

    You guys might want to look at freevsd (http://www.freevsd.org) which has been doing this for a while.

  59. Re:Very Useful - is it? by Birdie-PL · · Score: 1

    Well, it really depends on the application. *If* it spends a lot of time in the kernel, or worse gets locked in it, then the whole machine will come to a halt.

    From the description it seems like the kernel is shared (no 'one kernel for one virtual host') so extensive locking performed on behalf on one application *will* influence others. Even if you have lots of extensive computing power.

    Or just imagine - 99% of CPU hogged by an application you cannot kill. Or is there some form of 'master' context that can influence all others?

    --
    e-mail: karol at tls-technologies.com
    www: http://www.tls-technologies.com
    sig: not found
  60. It's not the processing power by KMSelf · · Score: 4, Informative

    It's the control over it.

    Mainframes have insane amounts of control over user processes (a Linux image essentially becomes same), as well as the ability to allocate more resources, fewer, provide fine-grained process accounting, shut down processes, migrate them elsewhere (part of the IBM dataceter Linux concept is the ability to migrate nodes around the country as needed).

    What a mainframe doesn't have to offfer is insane amounts of processor power or memory. Disk, and disk I/O are quite another matter -- the amount of aggregate bandwidth a z390 has to offer is impressive.

    PC-based virtualization clearly has some advantages, through not all of those offered by a mainframe. A rack of virtualized PCs probably does offer a higher processor density than the equivalent mainframe, however.

    --

    What part of "gestalt" don't you understand?

  61. *This* is why open source works by mubes · · Score: 5, Insightful

    Much respect to this guy. He's taken something thats big, hairy and complex and looked at it from a different direction. Because he's got access to the source he's been able to do something novel with it in what appears to be an efficient and simple way...you couldn't do that with any of the closed source OSes out there today!

    The beauty of this is that there's *one* kernel running so, apart from any overhead of selecting the environment, you pretty much get the same performance as running native. This has got to have 1001 applications.

    One of the things I'd personally like to see is some kind of overlaid filesystem so each image by default gets /bin /lib etc. from a generic set but users can modify them if they need to - this would allow a sysadmin to keep the default system current while not preventing 'owners' of an individual image from being able to change things if they need to....I vaguely remember something like this for CDs - anyone got the details? Time for a bit of experimentation ;-)

    1. Re:*This* is why open source works by Stinger · · Score: 2, Informative

      No doubt you could use mount --bind to get that, of course having 5x mounts for each vserver is gonna start looking ugly

    2. Re:*This* is why open source works by gregorio · · Score: 1, Informative

      Because he's got access to the source he's been able to do something novel with it in what appears to be an efficient and simple way...you couldn't do that with any of the closed source OSes out there today!

      You're being waaay too partial here: You can always accomplish any "normal" task if the OS provides you a good API or DDK.

    3. Re:*This* is why open source works by Procrasti · · Score: 1

      You can always accomplish any "normal" task if the OS provides you a good API or DDK.

      Except that this isn't a "normal" task, is it?

    4. Re:*This* is why open source works by Ghengis · · Score: 2, Insightful
      But, there's the overhead of going through the DDK API, so if speed is an issue, there's more potential for keep it fast or increasing the speed by hacking the kernel itself. I do agree about being to partial, though. There's more than one way to skin a cat.

      --

      "The best laid plans of mice and men gang oft agley..." - ROBERT BURNS

    5. Re:*This* is why open source works by esper · · Score: 1

      Ay, but there's the rub... If the API was written by someone who didn't foresee the possibility that you might want to change process management, you're SOL. Or if he did foresee it, but didn't want to allow it.

    6. Re:*This* is why open source works by DrSkwid · · Score: 1

      try plan9 then

      the filesystem is all synthetic, processes on different machine transparently appearing in your filesystem etc.

      plan9.bell-labs.com/plan9

      --
      There are places where the networks are not touching,and there are places where they are-Boeing's Lori Gunter
  62. Re:What this means for hosting companies... by wolverine1999 · · Score: 1

    Actually they were doing it with Linux too, virtual servers can be a property of the web server e.g. Roxen, etc, have supported the feature for ages.

  63. Re:kernel dev? by FrankBough · · Score: 2, Informative

    No, it's a single kernel running compartmentalised. If you introduce a development kernel driver and it crashes, all the virtual machines go down with it.

  64. Re:What? by kkenn · · Score: 1

    I read the message, and this seems almost identical to the jail(8) functionality which FreeBSD has had for a number of years. Jail is very very useful for a number of purposes, but this doesn't seem to be anything new, just a "feature catch-up".

  65. CPU Time limits and scheduling by kris · · Score: 3

    I wonder if it would be practical to associate absolute CPU time limits or CPU usage percentages with a security context id in order to prevent a certain security context from hogging all CPU ressources.

    A similar thing would be desireable for resident set size (real RAM usage) and virtual size (process size) per security context.

  66. Re:Too bad none of those useful itches get scratch by Araneas · · Score: 1
    Hmmm let me check....

    Sounds of paper rustling...

    Ah there it is! Nope sorry still an honours English degree.

    Though what the hell I'm going to do with a one mchine cluster I have no idea. ;)

  67. Re:bah by Birdie-PL · · Score: 1

    As it was alredy stated - you cannot dedicate CPUs to virtual hosts.

    But to make Beowulf you don't need to - you still got a virtual machine for each host. The fact that they use the same CPU does not matter - they will only get slower.

    And yes, virtual hosts can be independently (to some extent) accessible. As written in the note, they can use distinct IP addresses meaning i.e. that all the vhosts can bind to the same port simultaneously. If you want more independence, why not install some multi-interface cards (or just 4 ol' Ethernet NICs).

    --
    e-mail: karol at tls-technologies.com
    www: http://www.tls-technologies.com
    sig: not found
  68. It's called.. by Evan+Sarmiento · · Score: 2, Insightful

    Jail SYNOPSIS jail path hostname ip-number command ... DESCRIPTION The jail command imprisons a process and all future descendants. Please see the jail(2) man page for further details. .... .... FreeBSD 4.4 April 28, 1999

  69. Not cluster, partition! by noz · · Score: 2, Informative

    Forget arguing about the definition of a 'cluster'. This is the technology that differentiates between PCs, servers, and mainframes.

    IBM and Unisys mainframes (perhaps others, I've worked with these) have hardware partitions where CPUs are divided up. Linux is there now too.

  70. Kickin stuff by CDWert · · Score: 1

    This looks awesome on paper.

    Now I can run an server that when my clients ask for shell access I dont have to cringe....

    Anyone out there running this yet ?

    --
    Sig went tro...aahemmm.....fishing........
  71. Can or User Mode be used as a better chroot? by dpilot · · Score: 2

    Chroot jails have their problems an annoyances. I've been toying around for a bit with the idea of using User Mode Linux as a security sandbox. This cluster-on-one-system looks even better, and a sibling comment to this one indicates that maybe User Mode isn't a safe jail, anyway.

    Not having enough of a home DP Center to dedicate one box for a firewall, I end up running local services (properly configured for local ONLY access in addition to firewalled for local only) on the same machine. I think I've done a good job, but there's always that nagging doubt. Putting my local services in a -safe- virtual OS would give me an additional level of comfort. Chroot jails are ok for standalone things like BIND, but once you have several services interacting like a mail system, it gets a bit messy.

    --
    The living have better things to do than to continue hating the dead.
  72. one cpu cluster.... by jlemmerer · · Score: 1

    well i think that doesn't make sense, at least in my understanding of a cluster. first of all: what is a cluster for? i know two situations whane you might want to use a cluster: to gain performance or to gain redundancy (or to say so -> come closer to the 24/7 availability). in both way's a one cpu cluster won't help. so, what's the advantage of one....
    oh yeah, before i forget.. i can already run multible apache instances on my single cpu machine

    --
    ".Sig Stealer" was here
  73. umm. BSD has had this for a long time by gskouby · · Score: 1

    Alright, this for all you people who always pipe up and say "but linux has had this for years" when
    an announcment about a BSD happening is made. BSD HAD HAD THIS FOR A LONG TIME (couple of years). This sounds and looks astonishly similar to the BSD jail() written by PHK but with a messier interface. It is good stuff and hosting companies already use it a lot. Thanks for your time.

    Back to the linux zealots.

  74. offtopic: Re:Behold, the power of Open Source... by fanatic · · Score: 2

    Wow, that's enough karma to make you an official "Kool Kid" (tm)! Your opinions sure count now!

    No, moron, it means that I don't have to whore for points. Your mommy should have pointed that out to you when she read you the article to which you replied.

    --
    "that's not encryption - it's a new perl script that I'm working on..." - from some Matrix parody
  75. chroot safe? by tal197 · · Score: 2, Interesting
    The documentation says...


    Unix and Linux have always had the chroot() system call. This call was used to trap a process into a sub-directory. After the system-call, the process is led to believe that the sub-directory is now the root directory. This system call can't be reversed. In fact, the only thing a process can do is trap itself further and further in the file-system (calling chroot() again).

    And...

    The vserver is trapped into a sub-directory of the main server and can't escape. This is done by the standard chroot() system call found on all Unix and Linux boxes.


    But, I thought you couldn't (safely) run root processes in a chroot jail, because escape is easy if you can call chroot? Eg, create a subdirectory in your jail and chroot to that (keeping the same current directory), then chroot("../../../../") to get out of jail. Is it really safe to give someone the root password to a vserver in this system?

  76. give every app a virtual machine? by aozilla · · Score: 2

    Could this be used to give every remotely downloaded app a virtual machine, sort of like a java VM? As an advantage to java, with IPv6, you could give every app its own class C network off your 1 billion IP block.

    --
    ok then your [sic] infringing on my copyright! Could you as [sic] me next time before STEALING my comments for your own?
  77. Re:Machines.. by MrHat · · Score: 1

    If I understand correctly (IIUC? Maybe I can start a new acronym trend here...) anything parallelizable must be custom-written with the Beowulf libraries in mind.

    Nah. Check out MOSIX - it can migrate processes across nodes of a cluster automatically. Like on SMP, parallelism is just a fork() away.

  78. freevsd by rangerx · · Score: 1

    I have been using this system for a couple years now....

    http://www.freevsd.org/

    freeVSD is an advanced web-hosting platform for ISPs, educational institutions and other large organisations. It allows multiple Virtual Servers to be created on a single hosting server, each with a truly separate and secure web-hosting environment. This reduces an ISP's hardware outlay and also lowers the cost of support due to delegated administration.

  79. That's what I was thinking... by hubersan · · Score: 1

    I've used Ensim before as well as some other decent web management packages, and yes it seems to be the same idea as what's mentioned above.

  80. Yet another use by Fjord · · Score: 2

    Another use that hasn't been mentioned here is testing your failover systems. Now, instead of buying two machines, you can buy one and simulate crashes to test the failover. Very useful stuff.

    Note: for most packages there are ways to do this anyway, but they can become a PITA.

    --
    -no broken link
  81. Good for Intranet sites by satanami69 · · Score: 1

    I can see using one of those old machines that we give to temps we don't like, slapping this patch on it, and the six or seven little used intranet sites on it. It'd be nice to take them off the mail server.

    --
    I really hate Dan Patrick.
  82. I'd also like to point out by Mdog · · Score: 1

    I agree my post wasn't +5 *insightful*, but it's pretty fucking pathetic when you can get users (especially an AC) to tell you how to moderate, and you then proceed to do it.

    I'd also love some links to show how it was "redundant."

    And it was not a troll.

  83. Hardware isolation by TBone · · Score: 3, Informative

    Yes, the patch doesn't support hardware dedication. But my SUN background makes me ponder a line of thought.

    In Solaris, there are the psr* family of commands for processor administration. psradmin -f 0 will turn off processor 0. As long as this isn't physical powering down of processors, and simply instructions to the scheduler to disregard p0, you could, on the above vm, do something like:

    Prod: psradm -f 4,5,6,7
    Test: psradm -f 0,1,2,3,6,7
    Dev: psradm -f 0,1,2,3,4,5

    Leaving procs 0-3 for Prod, 4-5 for Test, and 6-7 for Dev.

    Along the same lines, at boot time you can explicitly state memory ranges to the kernel, if linux can't detect your memory right, or you have known bad memory you want to avoid. With the same thought, the Prod, Test, and Dev kernels can be brought up explicitly stating the 0-2G, 2-3G, and 3-4G ranges as usable memory addresses.

    You run into more problems when it comes to peripherals in the box, but how many serial ports do you really need? Just specify ttyS0 in the VM with the addresses of ttyS0,1,2 of the physical server.

    Am I smoking crack, or should I just stick with my much-more-hardware-flexible Sparc architecture :)

    --

    This space for rent. Call 1-800-STEAK4U

    1. Re:Hardware isolation by Doktor+Memory · · Score: 2
      In Solaris, there are the psr* family of commands for processor administration. psradmin -f 0 will turn off processor 0. As long as this isn't physical powering down of processors, and simply instructions to the scheduler to disregard p0, you could, on the above vm, do something like:

      Prod: psradm -f 4,5,6,7
      Test: psradm -f 0,1,2,3,6,7
      Dev: psradm -f 0,1,2,3,4,5

      Leaving procs 0-3 for Prod, 4-5 for Test, and 6-7 for Dev.

      I don't think that this could work with the vserver patches as they are currently implemented. There is still only one kernel and (important bit here) one scheduler running: so all of your assorted vservers will run on the total number of procs aloted to the scheduler.

      You might be able to hack up some sort of "vpsradm" command that instructed the scheduler to never assign processes from a certain vserver to a certain processor, but I suspect that such a thing is a lot easier to theorize about than to actually implement. (Actual kernel hackers are encouraged to add their two cents here.)
      --

      News for Nerds. Stuff that Matters? Like hell.

  84. Re:bah by afidel · · Score: 1

    Yeah! Let's take single machine, split it into 4 logical machines, and then combine them into 1 logical machine! DOH!

    Sounds resonable to me, how else do you test your beowulf code before pushing it out to the big ol cluster? Before this there were 2 alternatives, a smaller test cluster, or VMware. Granted that if your app ends up network bound you probably dont have a very valid test here, but its at least as good as the vmware one, without the huge overhead.

    --
    There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
  85. vps.verio.com by seichert · · Score: 1

    Verio's Virtual Private Server runs a modified FreeBSD 4.2 to accomplish this. Verio acquired best.com (bay area legends) and their VPS technology quite some time ago.

    --

    Stuart Eichert

  86. overlaid filesystem mounting by Benley · · Score: 1

    One of the things I'd personally like to see is some kind of overlaid filesystem so each image by default gets /bin /lib etc. from a generic set but users can modify them if they need to - this would allow a sysadmin to keep the default system current while not preventing 'owners' of an individual image from being able to change things if they need to....I vaguely remember something like this for CDs - anyone got the details? Time for a bit of experimentation ;-)

    The HURD has support for such an overlaid filesystem. It's flexible to the point where you could (I believe) mount a CD as a read-only device, and then write changes to the disc, storing your changes elsewhere. I'm pretty fuzzy on exactly how it works, but I've had it explained to me by a couple of HURD hackers and it sounds very neat.

  87. Advantages of Clusters by ncon · · Score: 2, Interesting

    This is much like the jail() of BSD. This does not give any of the benefits of a clustering arrangement. That is, the benefit of having a cluster is that you can distribute process across multiple machines and run from a common storage server. Although this technology is very useful (and can be applied in all sorts of ways- We run Bind in a jail) it does not provide extra process space if only running on one machine.

    Having sufficient RAM is the largest factor in commodity grade webhosting services, so having mutlitple instances of a cluster on the same machine does not really make sense, when the whole point of a cluster is to give faster computation and access time.

    btw- we offer both of these services here, and we do it on FreeBSD.

  88. Tradeoffs by smartfart · · Score: 1
    Here's the basic deal...

    You have to decide if your application needs to crunch numbers real fast, or if it needs to do a lot of I/O. Since you are communicating between 2 or more boxes, your bottleneck is I/O (ethernet, whatever). Number-crunching works well on clusters, because you are not shuttling stuff between the nodes so much.

    On the other hand, databases with lots of little reads/writes have to spend most of their time sending data over the wire to each machine, and it is possible that if you cluster, your app could run slower than on a single machine. For these kinds of apps, you would get better performance from a multi-processor box (SMP).

    You can, of course, take all of this into account, and engineer your app and the cluster accordingly. You can replicate your databases, etc. Basically, clustering is not a plug-and-play operation (although it is 31337 in front of your friends, even if you don't optimize it --- heh).

  89. meta- by Zilya · · Score: 1

    actually, It means "beyong" in greek.
    metaphysics (meta ta physics): beyong physics

  90. Re:Very Useful - is it? by blang · · Score: 2

    Or just imagine - 99% of CPU hogged by an application you cannot kill. Or is there some form of 'master' context that can influence all others?


    Well, for those kinds of scenarios we could use a method frequently used by a renowned professional commercial platform. Just hunt down an MCSE, and tell them to fix the problem. I assure you, it will take only a few seconds.

    --
    -- Another senseless waste of fine bytes.
  91. Desktop Kernel Upgrades by lostchicken · · Score: 1

    Would it be possible to use this to have one 'host' kernel (something bare-bones), and another 'active' kernel running below the host? You could then change the kernel version on the 'active' part without a restart.
    Just a thought...

    --
    -twb
  92. Re:The obligatory by crazy_ape · · Score: 1

    Moderators don't seem to have any sense of humor here.
    The parent is hilarious, but it's labeled as a troll.
    And, your reply is modded as off-topic.
    I wonder what moderation I'll get.

    I'd probably be given mod access more often, but I haven't been able to pass the smoking crack requirement.

    --
    The first truth about awareness, as I have already told you, is that the world out there is not as we think it is. -DJ
  93. Gee, just like Solaris. And... by swordgeek · · Score: 2

    Sun has machines entirely built around the concept of virtual hosts. Of course, they stole the idea from the mainframe world, where this has been going on for decades. I don't know of any systems that currently allow splitting a single CPU between domains, but I honestly don't see it as much of a benefit.

    Which is definitely not to say that it's a bad or late thing--it's nice to see Linux playing with the Big Boys (tm) now and again. Just don't think that it's ground-breaking technology.

    --

    "People who do stupid things with hazardous materials often die." -- Jim Davidson on alt.folklore.urban
  94. My hopeful use for this... by Loligo · · Score: 2


    During the course of my job, I have to recreate customer environments to duplicate their problems. Often these environments involve firewalls, NAT, or simply multiple subnets that are difficult and time-consuming to get past our IT guys (and even once we convince them of the need, it may be a week before any real progress is made on their end to set things up).

    However, using this, I can hopefully get a single box set up with several "systems" using internal virtual networks that will allow me to have something like...

    1: Server / Client Gateway
    2: Client

    3: Firewall / NAT / Router

    4: Client Gateway
    5: Client

    With 1 and 2 being "inside" the firewall and 4 and 5 being "outside".

    This would allow me to eliminate TONS of bureaucratic red-tape paperwork BS, and give a self-contained environment for some of my other coworkers to educate themselves on (95% of which have never done any actual hands-on work with a firewall or even done any routing).

    While all this could be easily accomplished using a multi-processor Sun box and their domain / partitioning scheme, those tend to be a little more pricey than the dual-P2 I've already got sitting idle in the corner of my office...

    Any comments on the feasibility of this scenario?

    Would this package work for what I'd like to do?

    Thanks...

    -l

  95. Well. by mindstrm · · Score: 2

    How does this compare to both
    umlinux (I suspect this is not what's going on)
    and
    freevsd (Check it out)
    http://www.freevsd.org

  96. Root access for $10/mo? by Girf · · Score: 1

    This could mean that finally people with a small application base (web server, email, maybe a instant messaging server) can get together a share a colocated server somewhere. If we could get 25 or so people together, the cost would only be $10/mo or so...

    --

    Apathy -- The state of numbness of the mind. When you are apathic, you can think.

  97. Big Deal by Motheius · · Score: 1

    FreBSD has been using the Jail code that PKH wrote years ago

  98. wow! by Cinematique · · Score: 1

    can you imagine a virtual cluster of these things?

  99. Real world use - vserver and usermodelinux by mattr · · Score: 2

    Some extremely large, well known hosting companies have trouble providing "reasonable" (trustworthy, timely, competent) support to corporate website virtual hosting clients, and I have repeatedly seen all hell break loose in the case of deadlines to push staging to live server from many time zones away.. for some reason I still don't understand, we were never allowed to touch the live server so we never even knew its directoy contents. Sheer hell. In this situation you seldom know if it's going to work on the live server (which is *not* the same as staging no matter what was promised) until D-Day.

    I was even offered root access once to fix this provider's host but I had to refuse due to responsibility for all the other clients with virtual websites. The problems generally do not come from things that would crash a kernel, but from the economics of getting individuals to apply appropriate knowledge in the right place at the right time, within the context of a number of companies working together with their own agendas.

    Using this virtual server patch, I can see a *lot* of time, effort, danger, stress, complaints, etc. all swept away into history!

    Run a virtual servers on your local dev box and the remote staging and live machines, then use rsync from local to staging. Ssh into staging and rsync again, or have the admin staff do so. But the live machine can be isolated network-wise, so it is more likely that the user could be allowed onto the live server themselves.

    Of course, 1) it isn't a real compartment with your own filesystem and everything, so for example installing Perl modules, tweaking boot scripts, or tweaking security ain't happening. 2) it isn't strong compartmentalization. And 3) you have to be running a linux kernel in the first place. And 4) the above problems tend to involve Suns, not linux boxes.

    Seems this kind of idea is killer though. It would be really interesting if we could run something like this or (maybe better yet) user-mode-linux efficiently as a process inside a SunOS environment. Sounds like IBM had the right idea running a bunch of complete OS images on their heavy iron.

  100. Next week at Linux-Qu�bec :) by alexandre · · Score: 1

    He'll be at Linux-Québec meeting's next week for those interested...