On Tue, Sep 13, 2005 at 04:07:44AM +0900, Jun OKAJIMA wrote:
> 
> Hello.
> 
> 
> How you handle /dev/* stuff under Vservers?
> 
> For example, when you install Debian Sarge on /vservers/sarge with
> debootstrap, you get below figures.
> 
> files under /vserver/sarge     -> about 15K files.
> files under /vserver/sarge/dev -> about  5k files.
> 
> (1/3 of inodes are just dev nodes!)
> 
> but, most dev nodes on /vserver/sarge/dev are not usable,
> so they are just a waste of inodes.

well, the other ones are dangerous, and that's why
they are not available at all, at least not on a properly 
built guest ...

> There are some solutions.
> 
> 1. Using devfs/udev/sysfs/devpts.....

  - devfs is no option (same security implications)
  - ude will not work (no helper)
  - sysfs is again no good idea (security)
  - devpts is already mounted inside (virtualized)

> 2. Making only necessary dev nodes.

> But, before doing these ways, the most important issue is,
> understanding what dev nodes are necessary.

this is what the vserver tools (util-vserver) does
by default, and the required dev nodes can be found
in a dozent email replies ... but here is another
copy ...

crw-rw-rw-   1 root root 1, 7 Sep 12 16:17 full
crw-rw-rw-   1 root root 1, 3 Sep 12 16:17 null
crw-rw-rw-   1 root root 5, 2 Sep 12 16:17 ptmx
drwxr-xr-x   2 root root 4096 Sep 12 16:17 pts/
crw-r--r--   1 root root 1, 8 Sep 12 16:17 random
crw-rw-rw-   1 root root 5, 0 Sep 12 16:17 tty
crw-r--r--   1 root root 1, 9 Sep 12 16:17 urandom
crw-rw-rw-   1 root root 1, 5 Sep 12 16:17 zero

> Your opinion is welcome.

you should check the archives/use the tools ...

best,
Herbert

>                 --- Okajima, Jun. Tokyo, Japan.
> _______________________________________________
> Vserver mailing list
> [email protected]
> http://list.linux-vserver.org/mailman/listinfo/vserver
_______________________________________________
Vserver mailing list
[email protected]
http://list.linux-vserver.org/mailman/listinfo/vserver

Reply via email to