[Users] bug or feature?: ps -el on HN shows all processes, incl. those of VEs

[Anatoly Pugachev]

On Mon, Nov 7, 2011 at 2:00 PM, Kirill Korotaev <dev at parallels.com> wrote:
> http://wiki.openvz.org/Processes_scope_and_visibility
> Plus, as far as I remember there was a patch somewhere on download.openvz.org or sysctl which allows to hide non-root processes from root VE.
>
>
> On Nov 7, 2011, at 13:35 , <lst_hoe02 at kwsoft.de> <lst_hoe02 at kwsoft.de> wrote:
>
>> Zitat von "U.Mutlu" <for-gmane at mutluit.com>:
>>
>>> "ps -el" (and also "ps aux" etc.) on the HN shows all processes,
>>> incl. those of VEs.
>>> Is there a way to show, on the HN, only the processes of the HN itself,
>>> excluding the processes of the VEs?
>>
>> This is as far as i know by design. The HN is the Hypervisor and must
>> have a global view what is going on the machine. That's why it is
>> advised to not use any other services beside openvz on the HN.

I know I'm a bit offtopic here, but taking in example solaris 10 with
it's zones, it's possible to supply
ps with "-Z" command , which will say what zone/container process
belongs to. Would be nice,
to somehow label container processes with container ID in kernel and
have userland (ps for example, or any other tool)
to be able to show this label.

Thanks.