After many years of using Linux vserver as PlanetLab's node provisioning mechanism, we have officially started migrating to LXC - the implementation of container-based virtualization in the Linux kernel. We have been working on this new release for several months and are pleased to announce that it has become stable and mature enough to deploy for users. Here are some of the highlights of the update...
Library functions for vsys
I've added some Library functions that can be used to build vsys scripts. Hopefully, they should reduce all the scripts that we'd ever want to write, or at least the services supported by proper, to a few lines of code.
- connect_fd [ connects an fd in a slice to an fd on the node]
( implements open_file)
- mount_dir [ bind-mounts a directory into a slice ]
- socket_filter [ basically a wrapper for the UNIX 'socket' program which restricts you to a fixed set of hosts and/or ports]
Dominant issues or repeated problems and their causes, if known. Suggestions for solutions would also be nice.
This page is outdated. My current activities are summarized in PlanetLab's trac system. An up-to-date version can be found on my homepage.
August 14, 2007
The 'new vnet', implemented as an iptables extension is now running on alpha. 2 TODO items before rolling it out automatically:
1. Run the following iptables instruction:
iptables -t nat -A POSTROUTING -j MARK --copy-xid