[Devel] Re: [PATCH 1/4] Virtualization/containers: introduction

[Dave Hansen]

On Wed, 2006-02-08 at 18:36 +0300, Kirill Korotaev wrote: 
> - full isolation can be inconvinient from containers management point of 
> view. You will need to introduce new modified tools such as top/ps/kill 
> and many many others. You won't be able to strace/gdb processes from the 
> host also. 

I'd like to put a theory out there:  the more isolation we perform, the
easier checkpointing and migration become to guarantee.

Agree?  Disagree?

But, full isolation is hard to code.  The right approach is very likely
somewhere in the middle where we require some things to happen
underneath us.  For instance, requiring that the filesystem be made
consistent if a container is moved across systems.

-- Dave