John, 

Zones are a great solution to the model you're proposing. You can get 
tremendous execution and privilege isolation using zones - they are lightweight 
and very high-performance. 


In addition, much work has been done lately on KVM - which would be the way to 
go if you wish to virtualize non-OI OSes. It can run _within_ a zone, and 
interacts nicely with fundamental OpenIndiana/illumos features, like CrossBow 
and ZFS. Specifically, you'll want to run OI 151_a5 to get the latest and 
greatest here. 


Though there had been a linux-branded zone back in the OpenSolaris days, 
development of zone branding has not continued... KVM may get you all you need. 


Lou Picciano 

----- Original Message -----
From: "John McQuay" <j...@johnmcquay.co.uk> 
To: openindiana-discuss@openindiana.org 
Sent: Thursday, July 19, 2012 9:58:01 AM 
Subject: [OpenIndiana-discuss] Virtualisation in OI 151 

Hi Folks 



I'm very much a newbie to OpenIndiana and would like to ask about 
Virtualisation. 

My server is at the moment running only as a file server but the plan is to 
virtualise a web server and an FTP server separately in their own zones. 

Is this feasible, and is there any point? My theory (which may be quashed 
shortly) is that by virtualising the servers which would be accessible from 
the outside world I would have huge gains in security. I don't have the 
space for multiple servers and want to remain slightly green by using only 
one if I can get away with it. 



In this situation, what would your recommendations be? Does anyone have 
experience with configuring zones and could you throw me a couple of 
pointers? 



Many thanks and all the best, John. 

_______________________________________________ 
OpenIndiana-discuss mailing list 
OpenIndiana-discuss@openindiana.org 
http://openindiana.org/mailman/listinfo/openindiana-discuss 
_______________________________________________
OpenIndiana-discuss mailing list
OpenIndiana-discuss@openindiana.org
http://openindiana.org/mailman/listinfo/openindiana-discuss

Reply via email to