2015-09-28 20:31:53 +00:00
|
|
|
# Système d'exploitation vs. hyperviseur
|
2015-09-28 00:23:15 +00:00
|
|
|
|
|
|
|
|
## Est-ce bien nécessaire ...
|
|
|
|
|
|
|
|
|
|
### ... un noyau ?
|
|
|
|
|
|
2015-09-29 19:34:30 +00:00
|
|
|
|
|
|
|
|
|
|
|
|
|
|
2015-09-28 00:23:15 +00:00
|
|
|
|
|
|
|
|
|
|
|
|
|
### ... le temps de boot ?
|
|
|
|
|
|
2015-09-29 19:34:30 +00:00
|
|
|
![dmesg.png]
|
2015-09-28 20:31:53 +00:00
|
|
|
|
2015-09-28 00:23:15 +00:00
|
|
|
. . .
|
|
|
|
|
|
2015-09-28 20:31:53 +00:00
|
|
|
https://0xax.gitbooks.io/linux-insides/content/
|
|
|
|
|
|
2015-09-28 00:23:15 +00:00
|
|
|
|
|
|
|
|
### ... le système de fichiers ?
|
|
|
|
|
|
|
|
|
|
Eh oui !
|
|
|
|
|
|
|
|
|
|
|
2015-09-28 20:31:53 +00:00
|
|
|
### ... d'isoler ?
|
2015-09-28 00:23:15 +00:00
|
|
|
|
2015-09-28 20:31:53 +00:00
|
|
|
> * Limitation des ressources ;
|
|
|
|
|
> * partage du temps de calcul ;
|
|
|
|
|
> * prévention des dénis de service :
|
|
|
|
|
> ```sh
|
|
|
|
|
> 42sh$ while true; do mkdir x; cd x; done
|
|
|
|
|
> ```
|
|
|
|
|
> * abstraction des ports ;
|
|
|
|
|
> * sécurité (root, exploit, ...).
|
2015-09-28 00:23:15 +00:00
|
|
|
|
|
|
|
|
|
2015-09-29 19:34:30 +00:00
|
|
|
## Les techniques d'isolation
|
2015-09-28 00:23:15 +00:00
|
|
|
|
2015-09-29 19:34:30 +00:00
|
|
|
> * `chroot`
|
|
|
|
|
> * Virtualisation et paravirtualisation
|
2015-09-28 20:31:53 +00:00
|
|
|
|
2015-09-29 19:34:30 +00:00
|
|
|
----
|
2015-09-28 00:23:15 +00:00
|
|
|
|
2015-09-29 19:34:30 +00:00
|
|
|
* `chroot`
|
|
|
|
|
* Virtualisation et paravirtualisation
|
2015-09-28 00:23:15 +00:00
|
|
|
|
2015-09-28 20:31:53 +00:00
|
|
|
|
2015-09-28 00:23:15 +00:00
|
|
|
### Mais ...
|
|
|
|
|
|
2015-09-29 19:34:30 +00:00
|
|
|
![idea.jpg]
|
