Virtual Iron first to support new Intel Xeon Quad-Core

Quoting from the Virtual Iron official announcement:

Virtual Iron Software (www.virtualiron.com), a provider of enterprise-class software solutions for creating and managing virtual infrastructure, today reaffirmed its support for advancements in multi-core technology at Intel?s Quad-Core Software Symposium.

Virtual Iron is among the very first virtualization software solution providers to commercially support the new Quad-Core Intel Xeon processor 5300 series.

Virtual Iron?s comprehensive virtualization and management solution is very complementary to multi-core processing and enables end?users to fully exploit the power of quad-core technology. For example, Virtual Iron provides up to 96 gigabytes of memory per virtual server as well as the ability to do symmetric multi-processing where users can take advantage of up to eight CPUs in a single virtual machine, delivering the industry?s leading performance in a virtualized environment…

Release: SWsoft Virtuozzo 3.x Service Pack 1

SWsoft released a Service Pack 1 for both Virtuozzo 3.5.1 for Windows and 3.0 for Linux.

The update introduces several features:

  • Red Hat Enterprise Linux 4.0 Kernel Support
    Virtuozzo supports Red Hat Enterprise Linux 4.0 kernel, based on the 2.6.9 mainstream Linux kernel. This release provides a higher level of stability and security and increases the range of the compatible hardware and software
  • Ethernet Layer Network Adapter Support
    Virtual environments now may use an Ethernet (packet switching based) network adapter, bridged to a selected physical network card. Virtual environments may run any Ethernet dependant application or service, including network load-balancing applications
  • VLAN Support
    This release supports VE network adapters bridging with VLAN adapters. Virtuozzo administrators can create virtual networking infrastructure meeting strict security requirements with complete network traffic isolation
  • Virtual CPU Management
    System administrators may assign any required number of Virtual CPUs up to the number of physical CPUs available

Service Pack 1 is available now for Virtuozzo 3.0 for Linux, while is expected within 1 month for its counterpart on Windows. Download trial here.

virtualization.info extensively covered Virtuozzo in its review of SWsoft Virtuozzo for Windows 3.5.1.

OpenVZ introduces live migration in Linux kernel 2.6.9

After introducing the feature in April for unstable branch, OpenVZ team now releases it for kernel 2.6.9 stable.

Quoting from the OpenVZ official announcement:

The OpenVZ project (http://openvz.org) today announced availability of its operating system-level server virtualization software in the form of a kernel based on Linux 2.6.9, including for the first-time in a stable branch, fully-tested and performance-tuned live migration and Virtual Ethernet device features.

With checkpointing and live migration, the state of a running virtual environment is frozen and the image stored on disk then restored on another server. The function executes between any two servers on a network, so the capability works for any server and any application. OpenVZ delivers this capability without additional requirements, such as a storage area network (SAN).

Also, the Virtual Ethernet device function allows for network devices to be created inside virtual environments using designated names and hardware (MAC) addresses that are different from the actual physical device…

Download new kernel patches here.

Survey details virtualization adoption delay reason

Quoting from ITPro:


The survey of 100 IT directors by research company Vanson Bourne found these figures were even higher within financial services organisations with 81 per cent saying they were not using virtualisation technology throughout the business because of the perceived risks involved.

Others cited concern that virtualisation would cause a degradation in application performance (57 per cent) or that the technology would be too expensive (31 per cent). Almost one third (29 per cent) said they feared that managing a virtualised environment would be too complex. The fear of downtime was the biggest worry for IT directors in the manufacturing (80 per cent) and financial services (71 per cent) sectors…

Read the whole article at source.

virtualization.info will soon publish results of its 1st Virtualization Industry Survey, trying to provide a better picture of ongoing trends and market status. Stay tuned.

Tech: Managing Xen 3.0.3 on Debian with Xen-Tools

HowtoForge posted a useful 3-parts guide on how to install and use Xen-Tools on a Debian system where Xen 3.0.3 is installed:

This guide describes how to install and use xen-tools, xen-shell, and Argo on a Debian system. All three packages provide useful tools for the administration of virtual Xen machines.

Xen-tools is a collection of Perl scripts that allow you to easily create, update, and delete Xen guest domains.

The xen-shell provides a command-line interface to owners of Xen domains so that they can manage their Xen domains without the help of the server administrator.

And with Argo, you can control Xen domains through a web interface or through a menu on the command line. All three packages were developed for Debian systems, but might work on other distributions as well….

Read the whole guide at source.

Security: VMware ESX Server AMD fxsave/fxrstor vulnerability

VMware released a security bulletin about a security vulnerability affecting its flagship product: ESX Server:

The instructions fxsave and fxrstor on AMD CPUs are used to save or restore the FPU registers (FOP, FIP and FDP). On AMD Opteron Processors, these instructions do not save/restore some exception related registers unless an exception is currently being serviced. This can lead to a security hole that allows local attackers to monitor the execution path of FPU processes, possibly allowing them to obtain sensitive information being passed through those processes.

This vulnerability exists for all AMD Athlon, Duron, Athlon MP, Athlon XP, Athlon64, Athlon64 FX, Opteron, Turion, and Sempron processors but the AMD Opteron processors are the only AMD processors supported with ESX Server.

It only affects version 3.0.0 and patch ESX-2533126 has already been issues.

Check details for patching procedure here.

The vulnerability is actually related with a Linux kernel bug prior to 2.6.16.9. More details are available here.

Security: Parallels Desktop for Mac Insecure File Permissions

Secunia reported a security advisory about file permissions issue with Parallels Desktop:

The security issue is caused due to /Library/StartupItems/Parallels/prl_dhcpd creating the file “/Library/Parallels/.dhcpd_configuration” with insecure file permissions (set to 666).

The security issue is reported in Parallels Desktop for Mac Build 1940. Other versions may also be affected.

No patch is available at the moment of writing. Check the advisor for updates at source.

Tech: Installing Windows Vista RTM ISO on VMware Server

Microsoft Windows Vista finally made its way to MSDN subscriptions (and warez circuits…) and within a couple of months the whole world will be able to access it.

A virtual machine is the very first place where to try a new operating system, even if in this case virtualization products (VMware, Microsoft, Parallels) will not be able to show you the new graphic interface Aero.

At the moment of writing none of existing platforms is supporting Vista as host or guest OS, but current beta versions (Microsoft Virtual PC 2007 and VMware Workstation 6.0) do the trick.
A Microsoft Virtual PC 2007 public beta is available now, while for one of VMware Workstation 6.0 you’ll have to wait December. Parallels Workstation is expected as well to support Vista very soon.

While waiting for these updates, Jason Brooks of eWeek Labs, posted a nice suggestion to install Vista RTM on VMware Server 1.0.1 starting from the ISO.
Read it here.

Server virtualization meets grid computing

GRIDtoday published an interesting interview with Kate Keahey, an Argonne National Laboratory scientist working on the Globus Toolkit and other aspects of Grid technology, about how server virtualization can serve distributed computing purposes:


Gt: Virtualization and distributed computing seem to permeate everything in IT today. Tell us about some of the ways virtualization is converging with distributing computing and how Grid technology fits in.

KEAHEY: I think of virtualization as a vehicle to realize the dream of Grid computing — obtaining on-demand computational resources from distributed sources in the same simple and intuitive way we get electricity today. Today, in order to run a job on the grid a user has to identify a set of platforms capable of running that job by virtue of having the right installation of operating system, libraries, tools, and the right configuration of environment variables, etc. In practice, this means that the choice of platforms will either be limited to a very narrow set, or the job first has to be made compatible with an environment supported by a large resource provider, such as TeraGrid. For some applications this is a significant hurdle. Furthermore, even if you do manage to identify such an environment, it is hard to guarantee that the resource will be available when needed, for as long as needed, and that the user will gets his or her fair share of that resource.

Virtualization introduces a layer of abstraction that turns the question around from “let’s see what resources are available and figure out if we can adapt our problem to use them” to “here is an environment I need to solve my problem — I want to have it deployed on the grid as described.” For a user this is a much simpler question. The issue is whether we can implement the middleware that will map such virtual workspace onto physical resources. One way to implement it would be to provide an automated environment installation on a remote node.

But what really gives this idea a boost is using virtual machine technology to represent such a workspace. This makes the environment easy to describe (you just install it), easy to transport, fast to deploy and, thanks to recent research, very efficient. Best of all, virtual machine management tools nowadays allow you to enforce the resource quantum assigned to a specific virtual machine very accurately — so you could for example test or demo your application in a virtual cluster making sparing use of resources, and redeploy the virtual cluster on a much more powerful resource for production runs. This is another powerful idea behind virtualization: the environment is no longer permanently tied to a specific amount of resource but rather this resource quantum can be adjusted on-demand.

Similarly, we can define virtual storage and implemented using distributed storage facilities, or overlay networks implemented on top of networking infrastructure. We can compose those constructs to put together whole “virtual grids” and test their operation before requesting serious resource allocations. There are many exciting ongoing research efforts in this area and some of them will be represented at the VTDC workshop.

Further down the road, if the idea of running virtual machines becomes ubiquitous, we may find other ways of leveraging the fact that we can have more than one isolated “hardware device” on a physical resource. We could use it to host physical devices requiring isolation for security reasons. We could carry around pluggable virtualized environments the way we carry laptops today. We could rely on migration to a greater extent to provide uninterrupted services. All those potential applications will come more clearly in focus once we see how widespread the appeal of virtual machines will prove in practice….

Read the whole interview at source.

I already covered this topic in January 2006, with my old Virtualization is the first step of a long walk called Grid Computing.