urn:lj:livejournal.com:atom1:openvz OpenVZ OpenVZ 2018-08-27T18:52:37Z urn:lj:livejournal.com:atom1:openvz:53870 Сергей Бронников 2016-07-26T07:22:21Z 2016-07-26T07:29:42Z I&#39;m pleased to announce the release of OpenVZ 7.0. The new release focuses on merging OpenVZ and <a href="https://src.openvz.org/projects/OVZ" target="_blank" rel="nofollow">Virtuozzo source codebase</a>, replacing our own hypervisor with KVM.<br /><br />Key changes in comparison to the last stable OpenVZ release:<br /><ul><br /><li>OpenVZ 7.0 becomes a complete Linux distribution based on our own <a href="https://virtuozzo.com/products/virtuozzo-linux/" target="_blank" rel="nofollow">VzLinux</a>.</li><br /><li>The main difference between the Virtuozzo (commercial) and OpenVZ (free) versions are the EULA, packages with paid features, and Anaconda installer.</li><br /><li>The user documentation is <a href="https://docs.openvz.org/" target="_blank" rel="nofollow">publicly available</a>.</li><br /><li><a href="https://docs.openvz.org/virtuozzo_7_users_guide.webhelp/_managing_templates.html" target="_blank" rel="nofollow">EZ templates</a> can be used instead of tarballs with template caches.</li><br /><li>Additional features (see below)</li><br /></ul><br />This OpenVZ 7.0 release provides the following major improvements:<br /><ul><br /><li>RHEL7 (3.10+) kernel.</li><br /><li>KVM/QEMU hypervisor.</li><br /><li>Guest tools for virtual machines that currently allow the following: to execute commands in VMs from the host, to set user passwords, to set and obtain network settings, to change SIDs, to enter VMs.</li><br /><li>Unified management of containers and KVM virtual machines with the prlctl tool and SDK. You get a single universal toolset for all your CT/VM management needs.</li><br /><li>UUIDs are used to identify both virtual machines and containers. With containers, prlctl treats the former VEID parameter as name.</li><br /><li>Virtual machine HDD images are stored in the QCOW2 format.</li><br /><li>Ability to manage containers and VMs with libvirt and <a href="https://kb.virtuozzo.com/en/129047" target="_blank" rel="nofollow">virt-manager</a> or virsh via a <a href="http://libvirt.org/drvvirtuozzo.html" target="_blank" rel="nofollow">single driver</a> for containers and virtual machines. Libvirt is an open-source API, daemon, and management tool for managing virtualization platforms. The API is widely used in the orchestration layer of hypervisors for cloud-based solutions. OpenVZ considers libvirt as the standard API for managing both virtual machines and containers. Libvirt provides storage management on the physical host through storage pools and volumes which can be used in OpenVZ containers.</li><br /><li><a href="https://docs.openvz.org/virtuozzo_7_users_guide.webhelp/_managing_resources.html" target="_blank" rel="nofollow">Memory guarantees</a>. A memory guarantee is a percentage of container&#39;s or virtual machine&#39;s RAM that said container or VM is guaranteed to have.</li><br /><li>Memory hotplugging for containers and VMs that allows both increasing and reducing CT/VM memory size on the fly, without the need to reboot.</li><br /><li>Kernel same-page merging. To optimize memory usage by virtual machines, OpenVZ uses a Linux feature called Kernel Same-Page Merging (KSM). The KSM daemon ksmd periodically scans memory for pages with identical content and merges those into a single page.</li><br /><li><a href="https://openvz.org/Memory_management_in_VZ7" target="_blank" rel="nofollow">VCMMD</a>, the fourth-generation unified memory manager, and vcmmd, a single daemon for managing memory of both virtual machines and containers. OpenVZ 7 uses memcg. Balancing and configuring memcg limits enables getting the exact OpenVZ parameters like overcommit, shadow gangs, swap, page cache overuse.</li><br /><li>Container live migration via <a href="https://criu.org/Main_Page" target="_blank" rel="nofollow">CRIU</a> and <a href="https://criu.org/P.Haul" target="_blank" rel="nofollow">P.Haul</a>. In the previous versions of OpenVZ, most operations performed during migration were done in the kernel space. As a result, the migration process imposed a lot of restrictions. To improve upon migration, Virtuozzo launched the CRIU project aiming to move most of the migration code to the user space, make the migration process reliable, and remove excessive restrictions.</li><br /><li>Containers use cgroups and namespaces that limit, account for, and isolate resource usage as isolated namespaces of a collection of processes. The beancounters interface remains in place for backward compatibility and, at the same time, acts as a proxy for actual cgroups and namespaces implementation.</li><br /><li>SimFS remains in OpenVZ 7.0, however, the support is limited and we don&#39;t have plans to improve it in future.</li><br /></ul><h3>Download</h3>All binary components as well as <a href="https://download.openvz.org/virtuozzo/releases/7.0/x86_64/iso/" target="_blank" rel="nofollow">installation ISO image</a> are freely available at the <a href="https://download.openvz.org/virtuozzo/" target="_blank" rel="nofollow">OpenVZ download server</a> and <a href="https://mirrors.openvz.org/" target="_blank" rel="nofollow">mirrors</a>.<br /><br /><a href="https://lists.openvz.org/pipermail/announce/2016-July/000664.html" target="_blank" rel="nofollow">Original announce</a> urn:lj:livejournal.com:atom1:openvz:53609 Сергей Бронников 2016-01-18T14:18:02Z 2016-01-18T14:18:02Z <p><img alt="" src="https://ic.pics.livejournal.com/estetus/12957684/594/594_900.jpg" style="color: rgb(34, 34, 34); font-family: Arial, sans-serif; font-size: 14px; line-height: 1.4;" title="" fetchpriority="high" /><br /><br /><span style="color: rgb(34, 34, 34); font-family: Arial, sans-serif; font-size: 14px; line-height: 1.4;">The most important gathering of free software and open source enthusiasts in Europe is coming on Jan 30-31, in Brussels and OpenVZ will have a table booth there, plus several talks. Come to Containers and Process Isolation devroom (<a href="https://www.fosdem.org/2016/schedule/track/containers_and_process_isolation/" target="_blank" rel="nofollow">schedule</a>) and <a href="https://fosdem.org/2016/stands/" target="_blank" rel="nofollow">OpenVZ booth</a> to talk about Virtuozzo, CRIU, Live migration many other things related to containers.</span></p> urn:lj:livejournal.com:atom1:openvz:53331 Сергей Бронников 2015-09-16T08:47:23Z 2015-09-16T08:47:45Z <img src="https://imgprx.livejournal.net/30ffcea8e005110d82795f3ba48d05c37de6c588fd42dba79fd4ecf57179a31b/P2WlxyVijxKvimFu881fWEMdsf-ah7h00F6HSaRJwd_B9FfdmMCiDVlpAQh2GwJepkdbjynfYAgIDkcBkBEvskoAjHiBK_-Gr0c:QbU7eB_pGPA2Fc4nbeoBRQ" alt="" align="left" width="200" fetchpriority="high" /> We're very excited that this year OpenVZ will have exhibit space at <a href="https://www.openstack.org/summit/tokyo-2015/" target="_blank" rel="nofollow">OpenStack Summit</a> in Tokyo Japan, October 27-30. We will be showing and demoing OpenVZ server virtualization, answering questions and so on. <br /><br />We would like the community to participate with us in the event. If you live in Tokyo (or can come to this OpenStack Summit), are an OpenVZ user and would like to be a part of our team at the OpenVZ exhibit -- you are very welcome to join us! Please email me (sergeyb@openvz.org) your details and we'll discuss arrangements. urn:lj:livejournal.com:atom1:openvz:52998 Kir Kolyshkin 2015-08-11T20:46:29Z 2015-08-11T23:35:32Z <p>It was almost 10 years ago that I organized a kerneltrap.org interview with our at-that-time kernel team leader Andrey Savochkin, which was published on April 18, 2006. As years go by, kerneltrap.org is no more, Andrey moved on to <a href="http://www.nes.ru/en/people/catalog/s/andrei-savochkin" target="_blank" rel="nofollow">got a PhD in Economics and is now an Assistant Professor</a>, while OpenVZ is still here. Read on for this great piece of memorabilia.</p> <hr /> <div class=""><p>Andrey Savochkin leads the development of the kernel portion of OpenVZ, an operating system-level server virtualization solution. In this interview, Andrey offers a thorough explanation of what virtualization is and how it works. He also discusses the differences between hardware-level and operating system-level virtualization, going on to compare OpenVZ to VServer, Xen and User Mode Linux.</p> <p>Andrey is now working to get OpenVZ merged into the mainline Linux kernel explaining, "<i>virtualization makes the next step in the direction of better utilization of hardware and better management, the step that is comparable with the step between single-user and multi-user systems.</i>" The complete OpenVZ patchset weighs in at around 70,000 lines, approximately 2MB, but has been broken into smaller logical pieces to aid in discussion and to help with merging.</p> <p><i>Jeremy Andrews</i>: Please share a little about yourself and your background...</p> <p><a href="http://static.openvz.org/lj/andrey.jpg" target="_blank" target="_blank" rel="nofollow"><img src="https://imgprx.livejournal.net/1b63bf5fcfa3191d8caf7017f941ad5aee3a3b98e55a5f96e15b9fcbfc74b00c/P2WlxyVijxKvimFu881fWEMdsf-ah7h0zFqDU7tQwd_D9hbCj4-qGk1pDE04H0N1pEdMoy7TYg9JU1gcmlom:T5Y4qhx9oOnPfoaOLQcBaw" align="left" border="0" fetchpriority="high" /></a><i>Andrey Savochkin</i>: I live in Moscow, Russia, and work for <a href="http://www.swsoft.com/" target="_blank" target="_blank" rel="nofollow">SWsoft</a>. My two major interests in life are mathematics and computers, and I was unable to decide for a long time which one I preferred.</p> <p>I studied in Moscow State University which has a quite strong mathematical school, and got M.Sc. degree in 1995 and Ph.D. degree in 1999. The final decision between mathematics and computers came at the time of my postgraduate study, and my Ph.D. thesis was completely in the computer science area, exploring some security aspects of operating systems and software intended to be used on computers with Internet access.</p> <p><i>Jeremy Andrews</i>: What is your involvement with the OpenVZ project?</p> <p><i>Andrey Savochkin</i>: The OpenVZ project has kernel and userspace parts. For the kernel part, we have been using the a development model close to the model of the mainstream Linux kernel, and for a long time I accumulated and reviewed OpenVZ kernel patches and prepared "releases". Certainly, I've been contributing a lot of code to OpenVZ.</p> <p><i>Jeremy Andrews</i>: What do you mean when you say that your development model is close to the kernel development model?</p> <p><i>Andrey Savochkin</i>: Linux kernel development model implies that the developers can't directly add their changes to the main code branch, but publish their changes. Other developers can review and provide comments, and, more importantly, there is a dedicated person who reviews all the changes, asks for corrections or clarifications, and finally incorporates the changes into the main code branch. This model is extremely rare in producing commercial software, and in the open source software world only some projects use it. Linux kernel has been using this model from the beginning quite effectively.</p> <p>In my opinion, this model is very valuable for software that has high reliability requirements and, at the same time, is complex and difficult to debug by traditional means (such as debuggers, full state dump on failure, and so on).</p> <p><i>Jeremy Andrews</i>: OpenVZ is described as an "Operating System-level server virtualization solution". What does this mean?</p> <p><i>Andrey Savochkin</i>: First, it is a virtualization solution, that is, it enables multiple environments (compartments) on a single physical server, and each environment looks like and provides the same functionality as a dedicated server. We call these environments Virtual Private Servers (VPSs), or Virtual Environments (VEs). VPSs on a single physical server are isolated from each other, and also they are isolated from the physical hardware. Isolation from the hardware allows to implement on top of OpenVZ an automated migration of VPSs between servers that does not require any reconfiguration for running the VPSs on a very different hardware. A fair and efficient resource management mechanism is also included, as one of the most important components for a virtualization solution.</p> <p>Second, OpenVZ is an operating system-level solution, virtualizing access to the operating system, not to the hardware. There are many well-known hardware-level virtualization solutions, but operating system-level virtualization architecture gives many advantages over them. OpenVZ has better performance in some areas, considerably better scalability and VPS density, and provides unique management options in comparison with hardware-level virtualization solutions.</p> <p><i>Jeremy Andrews</i>: How many VPSs can you have on one piece of hardware?</p> <p><i>Andrey Savochkin</i>: That depends on the hardware and the "size" of VPSs and applications in them. For experimental purposes OpenVZ can run hundreds of small VPSs at the same time; in production environment -- tens of VPSs. Virtuozzo has higher density and can run hundreds production VPSs.</p> <p><i>Jeremy Andrews</i>: When you talk about the migration of VPSs between servers, do you mean that a VPS can be running on one server and then migrate to another server where it will continue running, somewhat like a cluster?</p> <p><i>Andrey Savochkin</i>: OpenVZ VPS will be stopped and started again, so there will be some downtime. But this migration doesn't require any reconfiguration or other manual intervention related to IP addresses, drivers, partitions, device names or anything else. That means in the first place that taking hardware offline for maintenance or upgrade, replacement of hardware and similar things become much more painless, and this is a certain advantage of virtualization. Then, since OpenVZ allows to fully automate manipulations with VPS as a whole, it makes implementation of load balancing (as well as fail-over and other features of clustering) more easy.</p> <p>Virtuozzo has additional functionality called Zero-Downtime Migration. It provides the ability to migrate a VPS from one server to another without downtime, without restart of processes and preserving network connections. This functionality will be released as part of OpenVZ in April.</p> <p><i>Jeremy Andrews</i>: Can you explain how the resource management mechanism works?</p> <p><i>Andrey Savochkin</i>: In virtualization solutions resource management has two main requirements. First, it should cover enough resources to provide good isolation and security (and the isolation and security properties of resource management are one of the main differentiators between OpenVZ and VServer). Next, resource management should be flexible enough to allow high utilization of hardware when the resource demands of VPSs or virtual machines change.</p> <p>OpenVZ resource management operates the following resource groups:</p> <ol> <li>CPU </li><li>memory </li><li>pools of various OS objects </li><li>disk quota </li></ol> <p>Each group may have multiple resources, like low memory and high memory, or disk blocks and disk inodes. Resource configuration can be specified in terms of upper limits (which may be soft or hard limits, and impose an upper boundary on the consumption of the corresponding resource), in terms of shares (or weights) for resource distribution, or in terms of guarantees (the amount of resources guaranteed no matter what other VPSs are doing).</p> <p><i>Jeremy Andrews</i>: What are some common uses of server virtualization?</p> <p><i>Andrey Savochkin</i>: Just examples are:</p> <ol> <li> <p>Server consolidation -- moving the content of multiple servers into VPSs on a single server to reduce management (and hardware) costs.</p> </li><li> <p>Disaster Recovery -- providing redundant environments for replication and fast data and application recovery.</p> </li><li> <p>Improving server security -- by creating multiple VPSs and moving different services (HTTP, FTP, mail) into different VPSs.</p> </li><li> <p>Creation of multiple environments and replication of environments for software testing and development.</p> </li><li> <p>Hosting -- hosting service providers use Virtuozzo/OpenVZ to bridge the gap between and exceed shared and dedicated services. Typical Virtuozzo/OpenVZ based hosting services include VPSs and Dynamic Servers which provide isolation, root access and guaranteed and burstable resources to customers. </p></li></ol> <p><i>Jeremy Andrews</i>: What prevents multiple operating systems running on the same server using OpenVZ from affecting each other?</p> <p><i>Andrey Savochkin</i>:<br /> Isolation between multiple VPSs consists of</p> <ul> <li>separation of entities such as processes, users, files and so on, and </li><li>resource control. </li></ul> <p>Let's first speak about separation of processes and similar objects. There are two possible approaches to this separation: access control and separation of namespace. The former means that when someone tries to access an object, the kernel checks whether he has access rights; the latter means that objects live in completely different spaces (for example, per-VPS lists), do not have pointers to objects in spaces other than their own and, thus, nobody can get access to objects to which he isn't supposed to get the access.</p> <p>OpenVZ uses both of these two approaches, choosing the approaches so that they do not reduce performance and efficiency and do not degrade isolation.</p> <p>In the theory of security, there are strong arguments in favor of both of these approaches. For a long period of time different military and national security agencies in their publications and solutions preferred the first approach, accompanying it with logging. Many authors on different occasions advocate for the second approach. In our specific task, virtualization of the Linux kernel, I believe that the most important step is to identify the objects that need to be separated, and this step is absolutely same for both approaches. However, depending on the object type and data structures these two approaches differ in performance and resource consumption. For search in long lists, for example, namespace separation is better, but for large hash tables access control is better. So, the way the isolation is implemented in OpenVZ provides both safety and efficiency.</p> <p>Resource control is the other very important part of VPS isolation.</p> <p><i>Jeremy Andrews</i>: When relying on namespace separation, what prevents a process in one VPS from writing to a random memory address that just happens to be used by another VPS?</p> <p><i>Andrey Savochkin</i>: Processes can't access physical memory at random addresses. They only have their virtual address space and, additionally, can get access to some named objects: processes identified by a numeric ID, files identified by their path and so on. The idea of namespace separation is to make sure that a process can identify only those objects that it is authorized to access. For other objects, the process won't get "permission denied" error, it will be unable to see them instead.</p> <p><i>Jeremy Andrews</i>: Can you explain a little about how resource control provides virtual private server isolation?</p> <p><i>Andrey Savochkin</i>: Resource control is very related to resource management. It ensures that one VPS can't harm others through excessive use of some resources. If one VPS had been able to easily take down the whole server by exhausting some system resource, we couldn't say that VPSs are really isolated from each other. Implementing resource control, we in OpenVZ tried to prevent not only situations when one VPS can bring down the whole server, but also possibilities to cause significant performance drop for other VPSs.</p> <p>One of part of resource control is accounting and management of CPU, memory, disk quota, and other resources used by each VPS. The other part is virtualization of system-wide limits. For instance, Linux provides a system-wide limit on the number of IPC shared memory segments. For complete isolation, this limit should apply to each VPS separately - otherwise, one VPS can use all IPC segments and other VPS will get nothing. But certainly, most difficult part of resource control is accounting and management of resources like CPU and system memory.</p> <p><i>Jeremy Andrews</i>: How does OpenVZ improve upon other virtualization projects, such as VServer?</p> <p><i>Andrey Savochkin</i>: First of all, OpenVZ is a completely different project than VServer and has different code base.</p> <p>OpenVZ has bigger feature set (including, for example, netfilter support inside VPSs) and significantly better isolation, Denial-of-Service protection and general reliability. Better isolation and DoS protection comes from OpenVZ resource management system, which includes hierarchical CPU scheduler and User Beancounter patch to control the usage of memory and internal kernel objects. Also, we've invested a lot of efforts in the creation of the system of quality assurance, and now we have people who manually test OpenVZ as well as a large automated testing system.</p> <p>Virtuozzo, a virtualization solution built on the same core as OpenVZ, provides much more features, has better performance characteristics and includes many additional management capabilities and tools.</p> <p><i>Jeremy Andrews</i>: What are some examples of hardware-level virtualization solutions?</p> <p><i>Andrey Savochkin</i>: VMware, Xen, User Mode Linux.</p> <p><i>Jeremy Andrews</i>: How does OpenVZ compare to Xen?</p> <p><i>Andrey Savochkin</i>: OpenVZ has certain advantages over Xen.</p> <ol> <li> <p>OpenVZ allows to utilize system resources such as memory and disk space much more efficiently, and because of that has better performance on memory-critical workloads. OpenVZ does not run separate kernel in each VPS and saves memory on kernel internal data. However, even bigger efficiency of OpenVZ comes from dynamic resource allocation. Using Xen, you need to specify in advance the amount of memory for each virtual machine and create disk device and filesystem for it, and your abilities to change settings later on the fly are very limited. When running multiple VPSs, at each moment some VPSs are handling load burst and are busy, some are less busy and some are idle, hence the dynamic assignment of resources in OpenVZ can significantly improve the utilization of resources. With Xen, you have to slice the server for the worst-case scenario and maximal resource usage by each VPS; with OpenVZ you usually can slice basing on average usages.</p></li> <li> <p>OpenVZ provides more management capabilities and management tools. To start, OpenVZ has from out of the box ability to immediately create VPSs based on various Linux distributions, without preparation of disk images, installing hundreds of packages and so on. But most importantly, OpenVZ has the ability to access files and start from the host system programs inside VPS. It means that a damaged VPS (having lost network access or unbootable) can be easily repaired from the host system, and that a lot of operations related to management, configuring or software upgrade inside VPSs can be easily scripted and executed from the host system. In short, managing Xen virtual machines is like managing separate servers, but managing a group of VPSs on one computer is more like managing a single multi-user server.</p></li> <li> <p>Operating system inside Xen virtual machine is not necessarily able to use all capabilities of the hardware; for instance, support of SMP and more that 4GB of RAM inside virtual machines will appear only in Xen 3.0. OpenVZ is as scalable as Linux when hardware capabilities increase. SMP and more than 4GB have been supported in OpenVZ from the very beginning. Recently we've built OpenVZ for x86_64 platform, and it was a straightforward job not requiring going into architecture details. So, OpenVZ is far more hardware independent than Xen, and hence is able to start to use new hardware capabilities much faster. </p></li></ol> <p>There is one point where Xen will have certain advantage over OpenVZ. In version 3.0, Xen is going to allow to run Windows virtual machines on Linux host system (but it isn't possible in the stable branch of Xen).</p> <p>Again, I need to note that the above describes my opinion about the main differences between OpenVZ and Xen. Virtuozzo has many additions to OpenVZ, and, for instance, there is Virtuozzo for Windows solution.</p> <p><i>Jeremy Andrews</i>: How does OpenVZ compare to User Mode Linux?</p> <p><i>Andrey Savochkin</i>:<br /> What I've said before about advantages of OpenVZ over Xen also apply when OpenVZ is compared with User Mode Linux.</p> <p>The unique feature of User Mode Linux is that you can run it under standard debuggers for studying Linux kernel in depth. In other aspects, User Mode Linux does not have as many features as Xen, and Xen is superior in performance and stability.</p> <p><i>Jeremy Andrews</i>: Is OpenVZ portable? That is, can we expect to see the technology ported to other kernels?</p> <p><i>Andrey Savochkin</i>: Well, OpenVZ is portable between different Linux kernels (but the amount of efforts to port between 2 kernels certainly depends on how different the kernels are). On our FTP there are OpenVZ ports to SLES 10, Fedora Core 5 kernels. The ideas of OpenVZ are broadly portable, and we even had them implemented on FreeBSD kernel (but by now this FreeBSD port has been dropped).</p> <p><i>Jeremy Andrews</i>:<br /> Why was the FreeBSD port dropped?<br /> </p> <p><i>Andrey Savochkin</i>:<br /> We decided to focus on Linux version to implement new ideas as fast as possible. </p> <p><i>Jeremy Andrews</i>: How widely used is OpenVZ?</p> <p><i>Andrey Savochkin</i>: OpenVZ in its current form has just been released to the public, but we've already got considerable number of downloads (and questions). Virtuozzo, a superset of OpenVZ, already has a large number of installations. I'd estimate that currently 8,000+ servers with 400,000 VPSs on them run Virtuozzo/OpenVZ code.</p> <p><i>Jeremy Andrews</i>: Is there any plan to try and get OpenVZ merged into the mainline Linux kernel?</p> <p><i>Andrey Savochkin</i>: Yes, we'd like to get it merged into the mainstream Linux and are working in that direction. Virtualization makes the next step in the direction of better utilization of hardware and better management, the step that is comparable with the step between single-user and multi-user systems. Virtualization will become more demanded with the growth of hardware capabilities, such as multi-core systems that are currently in the Intel roadmap. So, I believe that when OpenVZ is merged into the mainstream, Linux will instantly become more attractive and more convenient in many usage scenarios. That's why I think OpenVZ project is so interesting project, and that's why I've invested so much of my time into it.</p> <p><i>Jeremy Andrews</i>: How large are the changes required in the Linux kernel to support OpenVZ? Can they be broken into small logical pieces?</p> <p><i>Andrey Savochkin</i>: The current size of the OpenVZ kernel patch is about 2MB (70,000 lines). This size is not small, but it is less than 10% of the average size of the changes between minor versions in 2.6 kernel branch (e.g., 2.6.12 to 2.6.13). OpenVZ patch split into major parts is presented here [ed: dead link]. OpenVZ code can also be viewed and downloaded from GIT repository at <a href="http://git.openvz.org/" target="_blank" rel="nofollow">http://git.openvz.org/</a>. One of the large parts (about 25%) is various stability fixes, which we are submitting to the mainstream. Then comes virtualization itself, general management of resources, CPU scheduler, and so on.</p> <p><i>Jeremy Andrews</i>:<br /> What efforts have been made so far to try and get OpenVZ merged into the kernel?<br /> </p> <p><i>Andrey Savochkin</i>:<br /> OpenVZ patch was split into smaller pieces, easier for us to explain and for the community to accept. Then, in the last couple of months, some virtualization pieces have been send to the linux-kernel mailing list and actively discussed there.</p> <p>The biggest argument was whether we want "partial" virtualization, when VPSs can have, for example, isolated network but common filesystem space. In my personal opinion, in some perfect world such partial virtualization would be ok. But in real life, subsystems of Linux kernel have a lot of dependencies on each other: every subsystem interacts with proc filesystem, for example. Virtualization is cheap, so its easier to to have complete isolation, both from the implementation point of view and then for use and management of VPSs by users.</p> <p>The process of submitting OpenVZ patches into the mainstream keeps going. Also, we are working with SuSE, RedHat (RHEL and Fedora Core), Xandros, and Mandriva to include OpenVZ in their distributions and make it available and well supported for maximum number of users.</p> <p><i>Jeremy Andrews</i>:<br /> What do you think is the biggest obstacle that could keep OpenVZ from being merged into the mainline Linux kernel?<br /> </p> <p><i>Andrey Savochkin</i>:<br /> I don't see any serious obstacles. OpenVZ code is available, its functionality has been proven to be very useful - I think it is now running on 8,000+ servers. So, it is just a matter of continuing the discussion to make everyone involved agree what exactly we want to have in Linux and how technically we want to organize these new capabilities.</p> <p><i>Jeremy Andrews</i>: You've referred to OpenVZ as a subset of Virtuozzo. What is Virtuozzo, and what does it add over OpenVZ?</p> <p><i>Andrey Savochkin</i>: OpenVZ is SWsoft's contribution to the community. Virtuozzo is a commercial product, built on the same core backend, with many additional features and management tools.</p> <p>Virtuozzo provides much more efficient resource sharing through VZFS filesystem, and better scalability and higher VPS per node density because of that; new generation resource and service level management; different system of OS and application templates; tools for VPS migration between nodes and for conversion of a dedicated server into a VPS; monitoring, statistics and traffic accounting tools; additional management APIs and various GUI and Web-based tools, including self-management and recovery tools for VPS users and owners.</p> <p><i>Jeremy Andrews</i>:<br />