Re: [Xen-users] Yum repo for XCP (ex: XCP acpi shutdown)

[Grant McWilliams <grantmasterflash@xxxxxxxxx>]

On Wed, Oct 26, 2011 at 1:36 AM, George Shuklin <george.shuklin@xxxxxxxxx> wrote:

Citrix provides updates for XenServer, but not for XCP.

But in any way, exposing management interface to unprotected network is bad idea. If you have no managed interface available from internet, you have very few vulnerable for remote attack components: kernel, openvswitch... thats all.

Idea behind XCP is well-protected internal network with management interface, unencrypted storage traffic, migration traffic, XCP own synchronization traffic and separate (by VLAN or by different physical interface) network for clients with internet access.

Then why does Citrix provide updates for XenServer?

Let's face it, the real reason is Citrix doesn't want to provide repos for XCP and I understand that but saying it's bad practice to provide updates to XCP and then do it for XenServer is flawed logic.

For those of us who are using XCP in production we need an update system. Perhaps it will be the yum to redhat's RHN but still it's needed.


Grant McWilliams
http://grantmcwilliams.com/

Some people, when confronted with a problem, think "I know, I'll use Windows."
Now they have two problems.

_______________________________________________
Xen-users mailing list
Xen-users@xxxxxxxxxxxxxxxxxxx
http://lists.xensource.com/xen-users