| Running hosting on Main Node (A very bad idea) [message #3792] |
Sun, 18 February 2007 21:28  |
Lxhelp Messages: 23691 Registered: July 2006 |
The Champion |
|
|
We are finding that many people are attempting to run full fledged hosting control panels like cpanel/directadmin on the node itself, even though we have strictly warned against it. If security vulnerabilities that crop up from running an entire hosting system on the node doesn't bother you, here's something that will.
On openvz, running a hosting on the node is not just a bad idea, but actually impossible. The reason is the peculiar architecture of openvz where all the process in all the vpses are visible and accessible on the main host server, which would mean that if you restart named on the node, it will actually kill all the nameds running on all the vpses, because the redhat init script uses 'killproc' and pidof functions. Mysql will work fine, but almost all of the generic redhat init scripts would end up completely killing processes in the vpses too.
So it is not just a bad idea, but can lead to very real issues as well. So please don't run any service other than hyperVM on the main host server.
Thanks.
[Updated on: Thu, 13 March 2008 18:02] by Moderator Report message to a moderator
|
|
|
|
|
|