Rick,

This is a security question in addition to a management question. For example, 
assume that one of your guest instances is eventually compromised. Will it 
matter if the attacker can freely access the file system of the other 
instances? If so, then you should look at creating separate accounts with 
restrictive permissions on each rootfs. If it doesn't matter, then using a 
common account can simplify things.

To "kill" each UML, I would strongly recommend the use of "uml_mconsole". This 
will allow you to shutdown the UML based on a supplied UML ID rather than using 
a PID or other means.

Good luck!

Tony


>>> "Lull, Rick" <[EMAIL PROTECTED]> 04/26/05 09:24AM >>>

I'm currently working on getting multiple UMLs up and going on a single
host.

 

What I am currently wrestling with now is the following:

 

Should each UML instance be run from a separate user account on the host or
should you use a single user to launch all the UML instances?

 

I am thinking that having separate users would make it easier to kill a UML
process that was not responding, but have a single user seems easier from
the standpoint of using screen to get to the console.

 

All these guests have to talk to the rest of the network, so I will have
bridging between them and the rest of the world. I've successfully run 4
UMLs at once on this host, each guest had a separate IP, and I was able to
ping/ssh to them. I'm planning on having somewhere from 10 to 14 guests on
this hosts, if that matters.

 

Thanks for any input on how to best handle this.

 

Rick

 

***************************************************

Rick Lull, CCNA

Enterprise Network Analyst

Bon Secours Health System

804.627.5006 BSHSI Network Op Center

800.918.0503 Pager

804.317.8586 Cell

 



________________________________________________________________________________________________________________________________
________________________________________________________________________________________________________________________________

The information in this communication is intended to be confidential to the 
Individual(s) and/or Entity to whom it is addressed.
It may contain information of a Privileged and/or Confidential nature, which is 
subject to Federal and/or State privacy regulations.
In the event that you are not the intended recipient or the agent of the 
intended recipient, do not copy or use the information
contained within this communication, or allow it to be read, copied or utilized 
in any manner, by any other person(s).  Should
this communication be received in error, please notify the sender immediately 
either by response e-mail or by phone,
and permanently delete the original e-mail, attachment(s), and any copies. 



-------------------------------------------------------
SF.Net email is sponsored by: Tell us your software development plans!
Take this survey and enter to win a one-year sub to SourceForge.net
Plus IDC's 2005 look-ahead and a copy of this survey
Click here to start!  http://www.idcswdc.com/cgi-bin/survey?id5hix
_______________________________________________
User-mode-linux-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/user-mode-linux-user

Reply via email to