[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bug#672695: wordpress: no sane way for security updates in stable releases



On Mon, May 14, 2012 at 04:23:27PM +0200, Adam Borowski wrote:
> On Mon, May 14, 2012 at 03:04:20PM +0200, Toni Mueller wrote:
> > > to support in Debian; another is that it is really helpful for web
> > > applications to be able to give an entirely independent installation to
> > > each major site rather than trying to share the same code.  For another
> > 
> > Ack. That's also one factor driving the demand for virtual servers (xen,
> > kvm, you-name-it).
> 
> This reminds me: is anyone going to bring back vserver or openvz in some
> form?

Ola Lundqvist <ola@inguza.com> had plans to do this in an
OpenVZ-hosted repository.

> Otherwise, wheezy would end up with no containers.  Xen does kernel
> virtualization and thus takes an order of magnitude more memory, lxc is not
> supposed to be secure (it provides a chroot with usage limits, but no
> isolation).
[...]

User IDs and capabilities aren't yet properly namespaced.  So you
can't create a container-root user to manage the container from the
inside, and you can't rent out a container as a VPS.

That doesn't mean we have 'no containers'.

Ben.

-- 
Ben Hutchings
We get into the habit of living before acquiring the habit of thinking.
                                                              - Albert Camus


Reply to: