On 2015-12-04 09:26, Russell Coker wrote:
In the case of Red Hat, that's probably the way it's done because that's originally what was needed to make things work. Early versions of Xen very much did need a special version of Linux running as Domain 0. Coupling things like that also simplifies testing for the developers at Red hat, as they then only need to test one combination, instead of a big matrix of features. Less to test means they can test more thoroughly, which means they can provide a better guarantee that things will work without intervention right out of the box, which is important for enterprise distros.On Sat, 5 Dec 2015 12:53:07 AM Austin S Hemmelgarn wrote:The only reason I'm not running Unstable kernels on my Debian systems is because I run some Xen servers and upgrading Xen is problemmatic. Linode is moving from Xen to KVM so I guess I should consider doing the same. If I migrate my Xen servers to KVM I can use newer kernels with less risk.That's interesting, that must be something with how they do kernel development in Debian, because I've never had any issues upgrading either Xen or Linux on any of the systems I've run Xen on, and I directly track mainline (with a small number of patches) for Linux, and stay relatively close to mainline with Xen (Gentoo doesn't have all that many patches on top of the regular release for Xen, aside from XSA patches).I don't think that Debian does anything wrong in this regard. It's just that my experience of Xen is that it is fragile at the best of times. The fact that Red Hat packaged the Xen kernel in the Linux kernel package is a major indication of Xen problems IMHO, the concept of Xen is that it shouldn't be tied to a Linux kernel.
Xen is supposed to be decoupled from the version of the Domain 0 kernel, and in most of my experience with it, they do a pretty good job. 90% of the issues I've heard of personally have been with patched versions put together by Linux distros, not with an upstream release.
I have personally had issues using Debian as Domain 0 and keeping Xen up to date myself, but all of those issues vanished when I switched to Gentoo for that purpose (well, they vanished when I switched to NetBSD, but haven't resurfaced since I switched from that to Gentoo Linux after about a week of pulling my hair out from fighting with BSD). I'm admittedly not doing anything other than small purpose built PV domains for service isolation in most cases (although I do use a dedicated PV domain for testing kernel patches from time to time), but that really shouldn't have any impact.If you haven't had Xen issues then I think you have been lucky.
smime.p7s
Description: S/MIME Cryptographic Signature