Proposals

Proc fs virtualization

Session information has not yet been published for this event.

*

One Line Summary

An in-container view of /proc fs

Abstract

Currently /proc contents is virtualized only in terms of pid namespaces this proc mount is responsible for. With this approach, the contents of non-pid part of the proc (i.e. system files) is system-wide. The discussion will cover the security and other aspects of this model and the ways to get beyond this.

Tags

kernel, containers, procfs

Speakers

  • Biography

    Pavel Emelyanov is a core Virtuozzo and OpenVZ kernel developer working in the project for the last six years. He’s currently the kernel team leader at Parallels and manages the development of all the kernel features for OpenVZ and Parallels Virtuozzo Containers. Pavel is also a prolific mainstream kernel contributor. He holds a PhD degree in Applied Mathematics from the Moscow Institute of Physics and Technology.

  • Kir Kolyshkin

    OpenVZ

    Biography

    Kirill Kolyshkin was named leader and project manager for the OpenVZ project in 2005 to further the adoption of containers virtualization for Linux. He spearheads the overall development and manages all key architecture, updates and feature upgrades for OpenVZ. Kolyshkin has more than 10 years Linux experience and has long been an active open source advocate. He is a frequent speaker about virtualization technology and his 15-years career experience includes positions in information technology at Deutsche Bank and telecommunications company, Severtelecom. He holds a degree in Computer Science from the Ukhta State Technical University.