It struck me recently that you can view the general virtualizationworld as having three strata:

• at the first level, people are just interested in virtualizing andisolating user-level programs. This is the world of FreeBSD jailsand Solaris zones.

• at the second level, people are interested in virtualizing theentire operating system. This is the world of server consolidation,hypervisors, paravirtualization and so on.

• at the third level, people actively want to virtualize even thehardware itself. This is often the world of testers and so

One of the drawbacks of real network filesystems like AFS is that they don'tsupport setuid. This isn't a feature that they've neglected toimplement; it's a fundamental incompatibility.

The reason is ultimately simple: in a real network filesystem, theserver doesn't trust the end nodes, and in particular it doesn't trustthe end nodes not to lie to it. If an end node says 'the user X is doingthis', the server must say 'prove it

This week, we:

• got 11,732 messages from 232 different IP addresses.
• handled 18,216 sessions from 1,165 different IP addresses.
• received 189,951 connections from at least 55,941 different IPaddresses.
• hit a highwater of 7 connections being checked at once.

This is all down from last week , and I haveno explanation for why the messages received count is down so much; itis normally quite