Re: RE : Re: [tlug] Small footprint Linux distribution without a GUI

["Jedidiah Israel" <jedidiah.israel@example.com>]

On 5/9/07, Al Hoang <hoanga@example.com> wrote:
>     Depending on your needs, you might want to also explore OpenVZ [1] if you
> don't need a whole instance that is virtualized.  It is conceptually similar to what
> FreeBSD calls Jails or Solaris calls zones/containers.

Thank you. I was not aware of OpenVZ.

> 1. Each virtualized instance needs basically a whole install to run
>    properly which dictates they also need space.   So let's say you
>    want to run 10 service instances and you have pared down your
>    custom Linux install to about 20MB.  Each virtualized instance
>    will require approximately the same amount plus factor in the compiled
>    binaries for the service in question.

Using aufs I hope to pare down to an even smaller size, just kernel,
modules and app if possible. Data files, including read-only app
configuration files, would be located outside the instance.

> 2. How will you handle updating the services in each virtualized instance
>    to deal with security instances

I have not given it much thought. I suppose just patching the kernel,
modules or app then overwrite the previous instance with a newer one.

> 3. Is KVM or whatever you choose robust enough to do what you envision
>    or will it require upgrades.  If so then how does this get upgraded?

I do not know yet.

>     Anyways good luck, I'd be curious to see the results although am confused
> with the vision still.

For vision, well, to come up with an easier way to administer policy
enforcement. I can not wrap my mind around LinuxSE. I would like to
have specific roles for each instance. I like the idea of the
instances being exported to other servers but maintain filesystem and
security integrity. Logs would be maintained in a centralized
repository. The dream includes having an all Linux solution under GPL.
This is the short list.

And I am shooting for something that is eventually Mac simple. As in
drag it over to my Application folder and configure. ;)

I`ll look into your`s and Mattia`s suggestions as well. This summer
should be alot of fun. It should be a good project for learning Linux
in more detail.

Cheers,
Jed