Linux Features to Create full isolation

arapngenoka1 · 07-24-2023, 08:58 AM

I have 2 questions:

1. Where in cgroups.c do I modify to create another field/flag for maximum allowed size so that I provide for a range?

2. I am looking to achieve full isolation without virtualization. I have explored that this can be achieved with namespaces. How Can I merge all namespaces to create one global setting.

pan64 · 07-24-2023, 10:41 AM

Hi,
where are these questions coming from?
see LQ rules: https://www.linuxquestions.org/linux/rules.html

Quote:

Do not post homework assignments verbatim. We're happy to assist if you have specific questions or have hit a stumbling point, however. Let us know what you've already tried and what references you have used (including class notes, books, and searches) and we'll do our best to help. Keep in mind that your instructor might also be an LQ member.

Otherwise would be nice to define what kind of size and range do you mean?
What do you mean by full isolation?
What do you mean by merging namespaces?

arapngenoka1 · 08-02-2023, 12:54 PM

Thanks for your response.

I am sorry, my asks may have been unclear. Allow me to reframe the questions. What I am looking to achieve is to extend kernel features in more ways than a namespacing tool -e.g. containerization tool. Currently, in cgroups, only a hard limit is set. I wish to set a low and highest limit and define some scaling rules so that a process can scale resources to a maximum limit subject to available resources and without suffocating other processes

I will appreciate your guidance

pan64 · 08-03-2023, 01:28 AM

that sounds good. The usual question is what have you done so far, where did you stuck, what kind of help do you need at all?