[Vserver] Re: [Devel] Container Test Campaign

[Clément Calmels]

Hi,

> > I'm wondering why a default 'guest' creation implies some resources
> > restrictions? Couldn't the resources be unlimited? I understand the need
> > for resource management, but the default values look a little bit
> > tiny...
> >   
> The reason is security. A guest is untrusted by default, though sane 
> limits are applied. Same as ulimit which has some sane defaults (check 
> output of ulimit -a). Same as those kernel settings from /proc/sys -- 
> should /proc/sys/fs/file-max be 'unlimited' by default?

Ok. So as our benchmarks have no security concern, you will see no
objection if I set all the parameters in the 'guest' to their value in
the host, won't you?

-- 
Clément Calmels <clement.calmels at fr.ibm.com>