Subject: Re: [vserver] About running X server on guest
From: "Nicolas Cadou" <ncadou@cobi.net>
Date: Fri, 29 Aug 2008 12:43:59 -0400
Fri, 29 Aug 2008 12:43:59 -0400
IMHO, having X applications on the host display on an X server in a guest has no advantages
and in addition is a hassle.

There is no gain in security by running X in a guest instead of the host, as to just
start X in a guest you have to open up that guest (give capabilities, unhide proc entries
and whatnot.)

Running X applications on the host is much less secure than in a guest, so all in all
you end up with a less secure and way more difficult to configure system than the reverse,
which is to run X on the host and the apps in a guest.

There is one catch, though, I never managed to make Adobe Flash sound output work in
a Debian guest with Firefox. Video works but no sound.

Anyone knows how to make it work?

Nicolas Cadou

Cobi Informatique, inc.
http://www.cobi.net

Tel: (450) 266-2420 (305)
Fax: (450) 266-2415

----- Original Message -----
From: Stephen Liu <satimis@yahoo.com>
To: vserver@list.linux-vserver.org <vserver@list.linux-vserver.org>
Sent: Fri Aug 29 12:17:23 2008
Subject: Re: [vserver] About running X server on guest


--- Nicolas Cadou <ncadou@cobi.net> wrote:

> Le August 29, 2008, Stephen Liu a écrit :
> > On the Host or on the Guest?
> 
> On the guest, since you're getting the error by running startx in the
> guest.
> 
> Is that what you really want? Running X on the host AND a second X
> instance in 
> the guest?
 

No, absolutely NOT.  I'm testing X forwarding.  In the guest to forward
X from the host.  ssh, server and client, are installed in guest.  In
the guest I can ssh connect the host.  But I can't forward X of host to
the guest.  Because no X session is installed/running on the guest. 
Therefore I install X packages on the guest in anticipation to have X
window of the host forwarded to the guest.  So that I can operate host
application in the guest on X window.  This is a test.


B.R.
Stephen

Send instant messages to your online friends http://uk.messenger.yahoo.com 

Re: [vserver] About running X server on guest

IMHO, having X applications on the host display on an X server in a guest has no advantages and in addition is a hassle.

There is no gain in security by running X in a guest instead of the host, as to just start X in a guest you have to open up that guest (give capabilities, unhide proc entries and whatnot.)

Running X applications on the host is much less secure than in a guest, so all in all you end up with a less secure and way more difficult to configure system than the reverse, which is to run X on the host and the apps in a guest.

There is one catch, though, I never managed to make Adobe Flash sound output work in a Debian guest with Firefox. Video works but no sound.

Anyone knows how to make it work?

Nicolas Cadou

Cobi Informatique, inc.
http://www.cobi.net
Tel: (450) 266-2420 (305)
Fax: (450) 266-2415

----- Original Message -----
From: Stephen Liu <satimis@yahoo.com>
To: vserver@list.linux-vserver.org <vserver@list.linux-vserver.org>
Sent: Fri Aug 29 12:17:23 2008
Subject: Re: [vserver] About running X server on guest


--- Nicolas Cadou <ncadou@cobi.net> wrote:

> Le August 29, 2008, Stephen Liu a écrit :
> > On the Host or on the Guest?
>
> On the guest, since you're getting the error by running startx in the
> guest.
>
> Is that what you really want? Running X on the host AND a second X
> instance in
> the guest?


No, absolutely NOT.  I'm testing X forwarding.  In the guest to forward
X from the host.  ssh, server and client, are installed in guest.  In
the guest I can ssh connect the host.  But I can't forward X of host to
the guest.  Because no X session is installed/running on the guest.
Therefore I install X packages on the guest in anticipation to have X
window of the host forwarded to the guest.  So that I can operate host
application in the guest on X window.  This is a test.


B.R.
Stephen

Send instant messages to your online friends http://uk.messenger.yahoo.com