Re: [Devel] Re: [PATCHSET] 2.6.20-lxc8

2007-03-23 Thread Kirill Korotaev
Eric W. Biederman wrote: Benjamin Thery [EMAIL PROTECTED] writes: My investigations on the increase of cpu load when running netperf inside a container (ie. through etun2-etun1) is progressing slowly. I'm not sure the cause is fragmentation as we supposed initially. In fact, it seems related

[Devel] Re: [PATCH] Protect tty drivers list a little

2007-03-23 Thread Alexey Dobriyan
On Thu, Mar 22, 2007 at 09:29:05AM -0800, Andrew Morton wrote: On Thu, 22 Mar 2007 14:25:42 +0300 Alexey Dobriyan [EMAIL PROTECTED] wrote: Additions and removal from tty_drivers list were just done as well as iterating on it for /proc/tty/drivers generation. --- a/drivers/char/tty_io.c

[Devel] Re: controlling mmap()'d vs read/write() pages

2007-03-23 Thread Eric W. Biederman
Nick Piggin [EMAIL PROTECTED] writes: Eric W. Biederman wrote: Dave Hansen [EMAIL PROTECTED] writes: So, I think we have a difference of opinion. I think it's _all_ about memory pressure, and you think it is _not_ about accounting for memory pressure. :) Perhaps we mean different things,

Re: [Devel] Re: [PATCHSET] 2.6.20-lxc8

2007-03-23 Thread Eric W. Biederman
Kirill Korotaev [EMAIL PROTECTED] writes: we have the hack below in ip_forward() to avoid skb_cow(), Banjamin, can you check whether it helps in your case please? (NOTE: you will need to replace check for NETIF_F_VENET with something else or introduce the same flag on etun device). Ugh.

[Devel] Re: controlling mmap()'d vs read/write() pages

2007-03-23 Thread Eric W. Biederman
Nick Piggin [EMAIL PROTECTED] writes: Would any of them work on a system on which every filesystem was on ramfs, and there was no swap? If not then they are not memory attacks but I/O attacks. I completely concede that you can DOS the system with I/O if that is not limited as well. My

[Devel] Re: controlling mmap()'d vs read/write() pages

2007-03-23 Thread Dave Hansen
On Fri, 2007-03-23 at 04:12 -0600, Eric W. Biederman wrote: Would any of them work on a system on which every filesystem was on ramfs, and there was no swap? If not then they are not memory attacks but I/O attacks. I truly understand your point here. But, I don't think this thought exercise

[Devel] Linux-VServer example results for sharing vs. separate mappings ...

2007-03-23 Thread Herbert Poetzl
Hi Eric! Hi Folks! here is a real world example result from one of my tests regarding the benefit of sharing over separate memory the setup is quite simple, a typical machine used by providers all over the world, a dual Pentium D 3.2GHz with 4GB of memory and a single 160GB SATA disk running a

[Devel] Re: Linux-VServer example results for sharing vs. separate mappings ...

2007-03-23 Thread Andrew Morton
On Fri, 23 Mar 2007 20:30:00 +0100 Herbert Poetzl [EMAIL PROTECTED] wrote: Hi Eric! Hi Folks! here is a real world example result from one of my tests regarding the benefit of sharing over separate memory the setup is quite simple, a typical machine used by providers all over the

[Devel] Re: [ckrm-tech] [PATCH 7/7] containers (V7): Container interface to nsproxy subsystem

2007-03-23 Thread Srivatsa Vaddagiri
On Mon, Feb 12, 2007 at 12:15:28AM -0800, [EMAIL PROTECTED] wrote: +/* + * Rules: you can only create a container if + * 1. you are capable(CAP_SYS_ADMIN) + * 2. the target container is a descendant of your own container + */ +static int ns_create(struct container_subsys *ss, struct