[xen-tools-discuss] support for pvgrub?

[Jonathan Aquilina]

I set this up on a vps running gentoo. you dont need any parts of the grub
legacy at all.

All you need to do is create /boot/grub/menu.lst and that is sufficient for
pv grub.

difference between pvgrub vs pygrub

and im quoting from
http://lists.xen.org/archives/html/xen-users/2012-05/msg00075.html

"PyGrub copies the DomU kernel and initrd from the DomU filesystem image to
Dom0 and then creates a new domain using that kernel. This means that
PyGrub manipulates the DomU filesystem and files from within Dom0 which is
a potential security issue if someone can find a flaw in the code and craft
(for example) a malicious filesystem or menu.lst.

PvGrub executes within the newly created DomU environment."


On Sun, Jun 15, 2014 at 10:13 PM, Axel Beckert <abe at deuxchevaux.org> wrote:

> Hi,
>
> On Sun, Jun 15, 2014 at 10:02:25PM +0200, Jonathan Aquilina wrote:
> > On Sun, Jun 15, 2014 at 9:39 PM, Axel Beckert <abe at deuxchevaux.org>
> wrote:
> > > I've never used pvgrub yet, so I wasn't in the need of implementing
> > > support in xen-tools for it yet.
> > >
> > > But if someone has a patch for that, I'd be happy and very likely
> > > accept that patch.
> >
> > Its actually very easy to implement. you need a menu.lst in grub 1
> > format
>
> xen-tools already does exactly that for pygrub. So is there actually
> a difference other than pygrub runs in Dom0 context and pvgrub in DomU
> context.
>
> > and that is it the only thing that im not sure how you could
> > automate with xen tools is when a new kernel is released and when
> > you pull the kernel for that distro into your new xen image how you
> > would update the menu.lst.
>
> update-grub, but not grub1 itself may suffice. I can check.
>
> > For pvgrub you do not need the full grub legacy install.
>
> Neither do you for pygrub. But I haven't checked yet what parts you
> can drop and if e.g. Debian's grub-common package suffices.
>
>                 Kind regards, Axel
> --
> /~\  Plain Text Ribbon Campaign                   | Axel Beckert
> \ /  Say No to HTML in E-Mail and News            | abe at deuxchevaux.org
>  (Mail)
>  X   See http://www.nonhtmlmail.org/campaign.html | abe at noone.org
> (Mail+Jabber)
> / \  I love long mails: http://email.is-not-s.ms/ | http://noone.org/abe/
> (Web)
> _______________________________________________
> xen-tools-discuss mailing list
> xen-tools-discuss at xen-tools.org
> https://xen-tools.org/mailman/listinfo/xen-tools-discuss
>



-- 
Jonathan Aquilina
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://xen-tools.org/pipermail/xen-tools-discuss/attachments/20140615/a350363a/attachment-0001.html>