Re: [zones-discuss] Programming for zones

2008-10-04 Thread Nick Kew
On 3 Oct 2008, at 21:46, Dan Price wrote: Nick, I think this is an interesting idea, but I must caution you that zone_enter(2) isn't a public API, and using it correctly is truly non-trivial. Indeed, that's the impression I have, and seems to be a dominant theme in other replies to my post.

Re: [zones-discuss] Programming for zones

2008-10-04 Thread Nick Kew
On 3 Oct 2008, at 23:02, Jordan Brown wrote: Nicolas Williams wrote: On Fri, Oct 03, 2008 at 02:37:28PM -0700, Jordan Brown wrote: Nick is trying to isolate virtual systems, not users. I've seen this That was, obviously, not the impression tat I got. It's trivial to separate virtual

Re: [zones-discuss] Programming for zones

2008-10-04 Thread Nick Kew
On 3 Oct 2008, at 22:37, Jordan Brown wrote: Nick is trying to isolate virtual systems, not users. I've seen this problem on my personal hosting providers - my CGI scripts run as the same user as everybody else's, in the same file system. We'd better all trust each other. That's OK for

Re: [zones-discuss] Programming for zones

2008-10-04 Thread Jordan Brown
Nick Kew wrote: (Note, incidentally, that the picture might be different for a Java server, where the Java byte code for the application and a bunch of overhead objects might well fall into that sharable bucket.) Would that apply to similar bytecode like Python, which is commonly run