who up*
i'm debating whether i should get my new vps from linode or arpnetworks. the major attraction to linode (compared to arp) is backup
so, do you offer backup?
tuv: we don't, sorry
tuv: I looked at linode, it doesn't hardly even compare to arp .. unless you want a cheap vps with a single ipv4 IP and a limit on the os you can run
lol @ 2 ip limmit
and having to run linux?
:|
Yuck.
lol
I have to run Linux all day at work. Why would I want to run Linux on my VPS.
Im not saying linux sucks
I am. :p
obviously arp runs with a linux backend (KVM)
i am saying it sucks HAVING to use it
when free/openbsd are better at most server related tasks
and more secure
up_the_irons: Speaking of KVM, are your PPM up to date or have you been keeping KVM up to date and not your PPM?
when it comes to a VPS where there are no hardware compatibility constraints as well as no need for virtualization
i see very few incentives to run linux
Er, PPA.
mhoran: the KVM in my PPA is what I use currently.  I have not upgraded because 1) it works very well, so if it ain't broke, don't fix it 2) it would cause downtime to perform the dist-upgrade
gotta bail, cd $home
I like that reasoning
up_the_irons: Cool. I've finally got some time to possibly move us off our deprecated Xen setup, and am looking into KVM. Tried setting up an installation based off your PPA but wanted to make sure there wasn't anything more recent before I went too far.
i'm a debian die hard, so the option of not running linux is not very relevant to me
pshaw@debian
;)
fink: there is a kfreebsd in debian, if your beef is with linux
if it's with debian though, it's a lost cause
tuv: i bet you're one of those vi* lovers, as well?
fink: nah.. never got vi. emacs
tuv: ah cool, well then at least we have something in common
i have no beef with linux
i just hate being restricted to only linux :)
love rms, hate linux?
haha
I just hate how linux makes me jump through so many hoops
to have a good default system vs 0days
seems like the is no interest in proactive security in most linux distros
or nothing that is effective anyway
linux is great dont get me wrong
but for systems where security counts, i dont have time to spend a few days locking down a system good
for the desktop, it cant be beat
vcs: out of curiosity, what is it that you need to lock down in linux?
say i run debian
I would need to patch the kernel with grsecurity to add more secure chroot + SSP and memory randomization
i would need to chroot alot of notoriously insecure daemons
i dont have time to do that
say i ran a more enterprisey linux, like RHEL
i would need to disable like 30 services and tweak selinux so it did not break stuff
what are some examples of 'notoriously insecure daemons' that you can't replace?
also chroot daemons
well, bind has a bad record
it can be replaced yes
but i prefer to run all network services in chroot
besides stuff that needs root and cant be chrooted realistically, like OpenSSH
also, chroot in linux is too easy to break out of by default
so i need to apply grsecurity to basically any kernel that comes with a distro
but its not just about track records, its about proactive measures against future exploits
that may already be present in code
I can jail stuff easily with FreeBSD, and OpenBSD comes with most network services chrooted by default
the downside is of course hardware support and virtualization
but since we are running them in VPS, that does not even matter
and for linux only binary programs, OpenBSD, FreeBSD, solaris etc support emulation
i love linux, i just wish more measures were taken by default in distros to be secure by default or with little effort
thats really my only complaint with linux ;)
distros like debian get so much right
vcs: you use jails?
fink: when I am working with a freebsd box yes
tuv: both linode and arp are great providers, but i feel less boxed in at arp because one can get additional ipv4 addresss (linode limits 2 per vm) and a full /48 block of ipv6 which will be nice in the future
and being able to run whatever OS i want with arp is great
you know what I want now? DragoflyBSD with HAMMER :-p
hehe
Hammer sounds cool