Open Source Virtualization Solutions Sample Clauses

Open Source Virtualization Solutions. Besides KVM, Linux Container is an operating system virtualization implementation, and uses namespace isolation features inside the Linux kernel in order to create isolated domains, where applications can execute without breaking free from the container [16]. The kernel functionality needed by LXC [18] is already part of the Linux kernel, so no special patches are necessary; this includes e.g. namespace isolation for Process IDs (PIDs), the file system, network interfaces, ensuring containers are under the illusion they are running alone on the system, while at the same time keeping each container securely isolated from each other. This kind of virtualization allows for very good performance, since everything is done by the Linux kernel without excessive context switches, however all containers run under the same Kernel and there is a larger attack surface in case of a malicious user inside a container.