This website is deprecated, and remains online only for historic access to old issues and docs for historic versions of Virtualmin. It has been unmaintained for several years, and should not be relied on for up-to-date information. Please visit www.virtualmin.com instead.
Host kernel - the virtual system uses the same kernel as the host system
PyGrub - the system uses the kernel from its own filesystem, specified in its grub config just like a real system
PvGrub - the virtual system's kernel is also used. PvGrub is a newer bootloader than PyGrub and is considered more secure, but isn't available with some older Xen versions
Personally I recommend using PyGrub, as it lets each virtual system have a different kernel, and manage that kernel from within the VM just like on a real machine.
I agree. I switched to pygrub as using the hostkernel is a bit misleading.
It will use the hosts kernel version at initial install, but when the host's kernel gets updated, the guests do not.
Also it will now let me use 32bit guest systems on the 64bits host, which wouldn't let me properly before.
Apparently PvGrub is more secure because it runs grub within the VM, while PyGrub runs it on the host system - so theoretically a bug that allows an intentionally corrupted grub.conf file could be used by a VM owner to take control of the host system. As far as I know no such bug exists anymore, but even so ..
doesn't anyone know?
So the options and their differences are :
Personally I recommend using PyGrub, as it lets each virtual system have a different kernel, and manage that kernel from within the VM just like on a real machine.
''
I agree. I switched to pygrub as using the hostkernel is a bit misleading.
It will use the hosts kernel version at initial install, but when the host's kernel gets updated, the guests do not.
Also it will now let me use 32bit guest systems on the 64bits host, which wouldn't let me properly before.
Thanx Jamie.
So, is there any benefit in using pvgrub then? Apart from the fact that it's more secure? In what sense though, is it more secure?
Apparently PvGrub is more secure because it runs grub within the VM, while PyGrub runs it on the host system - so theoretically a bug that allows an intentionally corrupted grub.conf file could be used by a VM owner to take control of the host system. As far as I know no such bug exists anymore, but even so ..
For more details, see http://wiki.xensource.com/xenwiki/PvGrub and http://wiki.xensource.com/xenwiki/PyGrub . Also see http://bugzilla.xensource.com/bugzilla/show_bug.cgi?id=1068 for an example of the kind of bug I am talking about, although this one is fixed.
''