[Users] bug or feature?: ps -el on HN shows all processes, incl. those of VEs

[Kirill Korotaev]

On Nov 7, 2011, at 14:58 , Anatoly Pugachev wrote:

> On Mon, Nov 7, 2011 at 2:00 PM, Kirill Korotaev <dev at parallels.com> wrote:
>> http://wiki.openvz.org/Processes_scope_and_visibility
>> Plus, as far as I remember there was a patch somewhere on download.openvz.org or sysctl which allows to hide non-root processes from root VE.
>> 
>> 
>> On Nov 7, 2011, at 13:35 , <lst_hoe02 at kwsoft.de> <lst_hoe02 at kwsoft.de> wrote:
>> 
>>> Zitat von "U.Mutlu" <for-gmane at mutluit.com>:
>>> 
>>>> "ps -el" (and also "ps aux" etc.) on the HN shows all processes,
>>>> incl. those of VEs.
>>>> Is there a way to show, on the HN, only the processes of the HN itself,
>>>> excluding the processes of the VEs?
>>> 
>>> This is as far as i know by design. The HN is the Hypervisor and must
>>> have a global view what is going on the machine. That's why it is
>>> advised to not use any other services beside openvz on the HN.
> 
> I know I'm a bit offtopic here, but taking in example solaris 10 with
> it's zones, it's possible to supply
> ps with "-Z" command , which will say what zone/container process
> belongs to. Would be nice,
> to somehow label container processes with container ID in kernel and
> have userland (ps for example, or any other tool)
> to be able to show this label.

There are tools vzps and vztop which does that.
vzps ax -E <VEID>
will show tasks from specified VE only (and for -E 0 it will show host system tasks only filtering out containers).

Thanks,
Kirill