Describe user namespaces

[kernel-news-talk.git] / index.html

diff --git a/index.html b/index.html
index 5ab2423b9eaec732ce524c347e6c543ca60aee40..cac3e8dc7604ccdb2476bc86c7833d6e6c7d06f5 100644 (file)
--- a/index.html
+++ b/index.html
@@ -143,6 +143,89 @@
   </ul>
 </div>
 
+<div class="slide">
+  <h1>New KMS drivers [3.3-3.10]</h1>
+  <ul class="incremental">
+    <li>
+      DRM/KMS drivers added for old, new and virtual hardware -
+      AST, DisplayLink, Hyper-V, Matrox G200, QEMU Cirrus
+    </li>
+    <li>
+      Should be more robust than purely user-mode drivers, and
+      compatible with Secure Boot
+    </li>
+    <li>
+      Current X drivers don't work with these, so the kernel drivers
+      are disabled for now
+    </li>
+    <li>
+      Want to make it work?  Join the X Strike Force and package the
+      new X drivers
+    </li>
+  </ul>
+</div>
+
+<div class="slide">
+  <h1>Module signing [3.7]</h1>
+  <ul class="incremental">
+    <li>
+      Kernel modules can be signed at build time, and the kernel
+      configured to refuse loading unsigned modules
+    </li>
+    <li>
+      Necessary but not sufficient to implement Secure Boot -
+      we would also need signed kernel images and some other
+      restrictions when booted in this mode
+    </li>
+    <li>
+      Want to make Secure Boot work?  Come to the meeting on Tuesday
+    </li>
+  </ul>
+</div>
+
+<div class="slide">
+  <h1>More support for discard</h1>
+  <ul class="incremental">
+    <li>
+      Flash devices (and thin-provisioned SANs) can be more efficient
+      if the filesystem 'discards' unused disk space
+    </li>
+    <li>
+      Requires support in hardware, driver, filesystem and any layered
+      device drivers - e.g. LVM, RAID (added in 3.7)
+    </li>
+    <li>
+      Must be explicitly enabled, but d-i doesn't do this by default
+    </li>
+    <li>
+      Want to make it work?
+      See <a href="http://bugs.debian.org/690977">http://bugs.debian.org/690977</a>
+    </li>
+  </ul>
+</div>
+
+<div class="slide">
+  <h1>User namespaces [3.7]</h1>
+  <ul class="incremental">
+    <li>
+      One of the last missing pieces for OpenVZ-like containers
+    </li>
+    <li>
+      Each user namespace has its own <tt>root</tt> user with
+      privileges over the users and processes in that namespace - but
+      not the whole system
+    </li>
+    <li>
+      Currently somewhat experimental, and requires filesystem
+      changes which haven't been done for NFS or XFS
+    </li>
+    <li>
+      Want to make it work?  This needs upstream work to make those
+      filesystems compatible
+    </li>
+  </ul>
+</div>
+
 <div class="slide">
   <h1>Questions?</h1>
 </div>