Is there a reason you are not using the {Hardened Server [Virtualization]} profile for grsec? I have tested this profile on rackspace and it works (we use xen here).
-- Matthew Thode On 7/26/11 12:07 PM, "Pandu Poluan" <pa...@poluan.info> wrote: >-original message- >Subject: Re: [gentoo-server] New Gentoo-Wiki Article (draft): >Paravirtualizing Gentoo VMs on XenServer >From: Paul Hartman <paul.hart...@gmail.com> >Date: 2011-07-26 22:42 > >>On Tue, Jul 26, 2011 at 7:47 AM, Pandu Poluan <pa...@poluan.info> wrote: >>> Hello list! >>> >>> As I've once promised, here's a (draft) of HOWTO run Gentoo VMs >>> paravirtualized on XenServer >>> >>> >>>http://en.gentoo-wiki.com/wiki/User:Pepoluan/Paravirtualized_Gentoo_VMs_ >>>on_XenServer >>> >>> Any inputs? >> >>Thanks for this, I've got a virtual server using old xen-sources >>kernel and previous attempts to use vanilla kernel have failed. Now I >>think I'll try my luck again with kernel 3.0 and your guide to see if >>I can get it to boot this time... :) > >Glad to be of help. Two notes of caution, though: > >1. I forgot to specify that memory allocation (VMSPLIT) *must* be 3G/1G >(3G for userspace, 1G for kernelspace). If not, the VM would mysteriously >refuse to start -- without any error messages. > >2. I truly have no idea if my method works for 3.0. It's been tested >thoroughlt with 2.6, though (to be precise: 2.6.38 and 2.6.39). I am >still hesitant to use 3.0 because I saw people reporting bugs where a >program is hard-coded to require kernel==2.6 (instead of requiring >kernel>=2.6). IMO, it's not yet safe to tread the 3.0 waters. At least >for another month. (As usual, YMMV) > >That said, feel free to point out errors. And if you fail/succeed, please >do tell me. > >Happy paravirtualizing! :) > > >Rgds, >-- >FdS Pandu E Poluan >~ IT Optimizer ~ > >Sent from Nokia E72-1 > > >