On 13. 8. 2010 21:05, Enrico Weigelt wrote:
* Bill Longman<[email protected]> wrote:
Basically just run VMWare/Virtualbox etc and put the services in there.
well, these solutions are way "bigger" (iow: more resource
intensive), since they run a complete operation system instance
within the virtual machine.
That is why I picked up Linux-VServer (actually, first I tried
OpenVZ but could not make it run). It is a kind of compromise,
where all guests share the same kernel. This brings certain
security implications, but on the other side, I can run dozens
of guest on a moderate machine, with 4-cores and 8GB memory
(i.e. a guest running bind takes just about 20MB of memory)...
The only service running on my "host" (main system) is sshd,
which I secured as much as I could. Everything else (web, mail,
dns, ftp, syslog, X, and plenty of users' services) runs on its
own guest-system, chrooted in addition (where it was possible).
Jarry
--
_______________________________________________________________
This mailbox accepts e-mails only from selected mailing-lists!
Everything else is considered to be spam and therefore deleted.
