Low End Talk

Low End Talk » Low End Talk

1. 

   a2787382
   Member

   hello, can someone write a small simple tutorial on how to install GrSec on Debian on Xen HVM?

   Posted 1 year ago #
2. 

   kprice
   Member

   All I did was Google your question:
   http://www.howtoforge.com/hardening-the-linux-kernel-with-grsecurity-debian

   Xen HVM doesn't require anything extra. Stock kernel will be fine. Use your existing kernel config as a starting point when you rebuilt the kernel.

   Posted 1 year ago #
3. 

   drmike
   Member

   Gottaa dmit that I'm wondering about the difference between Xen and Xen HVM. I haven't google'ed and know I need to. Just been behind.

   edit: That's not a request but I know I would love to see some comparison between the different softwares as an article here. :)

   Posted 1 year ago #
4. 

   kprice
   Member

   An article isn't necessary, just an understanding of Xen. Traditionally all Xen VPS's in the VPS hosting world have been Xen PV (paravirtualized). Lately, however, Xen HVM (hardware virtualized) VPS's have been popping up. Generally speaking, you'll get better performance from a PV VPS than a HVM VPS.

   FROM XEN.ORG:
   The Domain Guests referred to as DomUs are launched and controlled by the Dom0 and
   independently operate on the system. These guests are either run with a special modified operating system referred to as paravirtualizion or un-modified operating systems leveraging special virtualization hardware (Intel VT and AMD-V) referred to as hardware virtual machine (HVM). Note – Microsoft Windows requires a HVM Guest environment.

   • Paravirtualization
   A term used to describe a virtualization technique that allows the operating system to be aware that it is running on a hypervisor instead of base hardware. The operating system must be modified to accommodate the unique situation of running on a hypervisor instead of basic hardware.

   • Hardware Virtual Machine (HVM)
   A term used to describe an operating system that is running in a virtualized environment unchanged and unaware that it is not running directly on the hardware. Special hardware is required to allow this, thus the term HVM.

   Posted 1 year ago #

RSS feed for this topic

Reply

You must log in to post.