X-Git-Url: http://git.onelab.eu/?p=util-vserver.git;a=blobdiff_plain;f=doc%2Fcompatibility.xml;fp=doc%2Fcompatibility.xml;h=5b9fde54ebfe828da3aefd0a211f616f42470b74;hp=0000000000000000000000000000000000000000;hb=8cf13bb177d92c93eb73dc8939777150536c2d00;hpb=6bf3f95de36c804c97716b2d0bdf10680c559044 diff --git a/doc/compatibility.xml b/doc/compatibility.xml new file mode 100644 index 0000000..5b9fde5 --- /dev/null +++ b/doc/compatibility.xml @@ -0,0 +1,413 @@ + + + + + compatibility of util-vserver alpha branch + + + LIBDIR + + + + + + LIBDIR + + replaced by vpkg + + + + + + LIBDIR + + + + + + LIBDIR + + + + + + LIBDIR + + + + + + LIBDIR + + Replaced by more general build-methods which are building vservers from apt-repositories. + + + + + + LIBDIR + + + + + + LIBDIR + + + + + + LIBDIR + + + + + + LIBDIR + + + + + + LIBDIR + + incompatible with recent configuration style. + + + + + + LIBDIR + + incompatible with recent configuration style; partially replaced by save_ctxinfo. + + + + + + LIBDIR + + Has been moved into SBINDIR. Lots of new option were added to support new functionality. + + + It is possible to recurse directories and it supports + all vserver related attributes (admin, hide, watch, barrier, + iunlink). + + + + + LIBDIR + + Has been moved into SBINDIR. Lots of new option were added to support new functionality. + + + It is possible to recurse directories and it supports all + vserver related attributes (admin, hide, watch, barrier, + iunlink). The output has been changed: the flags are now in the + first column and they are displayed in a symbolic manner. + + + + + LIBDIR + + + + + + LIBDIR + + + will be removed/rewritten soon. + + + + + LIBDIR + + + will be removed/rewritten soon. + + + + + LIBDIR + + incompatible with recent configuration style. + + + + + + LIBDIR + + + + + + LIBDIR + + vkill contains the needed functionality + already. + + + + + + LIBDIR + + + + + + LIBDIR + + CLI has been changed to reflect new functionality. Now, it + accepts either a single vserver, or (directory,excludelist) + pairs as arguments. The old "refserver vserver1 vserver2 ..." + syntax is gone. + + + vunify allows to unify generic paths, or vservers with + preconfigured reference vservers. The filelist is not taken from + packagemanagement anymore, but every file which has a counterpart + in the reference-path(s)/vserver(s) and is not in an excludelist + will be unified. A part of the excludelist will be generated + dynamically with information from the packagemanagement about + configfiles. + + + + + SBINDIR + + + + + + SBINDIR + + + Return code in '--disconnect' case is now more correctly. + + + + + SBINDIR + + + + + + SBINDIR + + + + + + SBINDIR + + + + + + SBINDIR + + + will be removed/rewritten soon. + + + + + SBINDIR + + + It uses native kernel interface now and is secure (in + opposite to the old perl implementation). + + + + + SBINDIR + + + It has been rewritten into C and output might have been changed slightly. + + + + + SBINDIR + + + + + + SBINDIR + + + It has been rewritten into a secure, native C + implementation. Unpacking of files happens in host-ctx, but + scriptlets are executed in vserver context. The rpm database + will/can be hold outside of the vserver and there will never be + access on it from the inside (neither direct, nor by + scriptlets). This is implemented through an LD_PRELOAD wrapper + which provides own, secure NSS functions too. + + + + + SBINDIR + + It accepts all the old arguments, but adds lots of new + ones. This program is intended as the basic vserver management + tool; e.g. to unify a vserver you can execute "vserver XX unify", + to install a package "vserver XX install PKG" and so on. + + + This tool is rewritten to completely and is now resistant + against symlink attacks. It uses the new configuration scheme + and the iproute2 tools instead of ifconfig for network + setup. Old-style vserver can be still started through this tool, + but modifications/building of them is not possible + anymore. + + + + + SBINDIR + + + will be removed/rewritten soon. + + + + + SBINDIR + + + It has been rewritten to use the new libvserver API. The + output has been changed slightly. + + + + + SBINDIR + + + + + + SBINDIR + + changes into a directory in a secure manner and executes a + program there. + + + + + LIBDIR + + NSS resolver; used by vrpm and executed in + vserver-ctx. + + + + + LIBDIR + + LD_PRELOAD wrapper; used by vrpm. + + + + + LIBDIR + + Helper script for vapt-get. + + + + + LIBDIR + + Generic interface for package management; it allows + to install, remove or query packages in a distribution + independent manner. It can be seen as the successor of + distrib-info. + + + + + LIBDIR + + Helper script for vrpm. + + + + + LIBDIR + + Helper script for vrpm. + + + + + LIBDIR + + Builds a vserver from scratch and allows to select the + used method. It will be called by the "vserver XY build" + command. + + + + + SBINDIR + + Wrapper for apt-get; currently only the apt-rpm port + is supported. Metadata will/can be stored outside of the + vserver. This program call vrpm. + + + + + + SBINDIR + + This program assigns the associated context of an inode. It + replaces parts of the vserver-quota tools. + + + + + SBINDIR + + This program shows the associated context of an inode. It + replaces parts of the vserver-quota tools. + + + + + SBINDIR + + This program starts a program within a new namespace which is + created with CLONE_NEWNS. It is used e.g. by vrpm to + map the rpm-database into the vserver in a secure manner. + + + + + SBINDIR + + This is an interface to the rlimit syscalls which allow to + limit resource-usage of contexts. + + + + + SBINDIR + + This program allows to setup vroot devices. It replaces + vrsetup from the vr-tools + + +