Microsoft starts supporting, er, Linux (Register)

I see little difference between running Windows or Linux as the host OS, I prefer Linux because I understand it and can therefore shutdown all non essential services.

To be fair Windows with no software running is perfectly stable :) Add a virus checker (one that doesnt delete system files) and add your VM software and the system is fine. They key is not to run anything on the host, certainly dont allow any users with in 10 feet of it!

If you want an extra stable environment for VM then use the ESX product, I believe that that provides its own host OS.

Not only that, but with Xen the operating system operating in the DomU ring (that is the one having direct hardware access for items like disk formatting and such) has direct and unfettered access to not only the files on the server but to the consoles on the running system.

(for those reading this that don't know yet keep in mind that Xen operates in a similar fasion to the VMware ESX server stuff.. That Xen is the first thing to boot up on your computer and then it loads the domU kernel on top of itself.. which then launches the other VM enviroments)

Obviously if your running a insecure operating system as the domU item then all the operating systems running on the virtual machine are going to share that system's vunerabilities...

That is, say, your running Linux on domU and it has a apache version with a root exploit you could use that root exploit to help you take over a locked down OpenBSD system running in Dom0.

So obviously you want to have the absolutely most stripped down and locked down system imaginable for the domU stuff. Totally disable everything except maybe ssh access.. and even then you have to think very carefully about that. (It may be more smarter to connect the server to a central workstation via serial cable with a different login password then what that workstation may use)

And then given that you can access all the files, network, and such on all the hosted systems from the DomU system then it makes sense to exploit (as a administrator) that and use normally-difficult-to-deploy tools like IDS systems (snort), archive log files, tripwire, anti-virus/rootkit stuff on the domU system.

So obviously given Windows difficult nature with security and 'odd' or unusual configurations and the fact that these sort of security tools are easier to use and generally perform better on Linux shows that Windows is a poor system to deploy virtualised enviroments on compared to stuff like Linux or one of the BSDs.

So I can't realy think of a good reason why on earth one would want to deploy a windows-hosted vm enviroment when you have the options of things like Xen and Vmware.

This is no attempt at trolling, or anything else. What you are saying is plain BS. Have you actually used Windows recently? It's been rock solid since around Win2k, and its kernel has quite a few features that Linux may never see.

In the past 2 or 3 years I have had much more trouble keeping Linux systems stable than I have had Microsoft systems. This coming from someone who has run Linux boxes professionally since 2000ish, and Windows boxes since 2001.

The "it's unstable", "it's insecure" mantra is circa mid 90's, would you please for the love of God just drop it. There are much more plausable ways of attacking Microsoft than resorting to outdated lies.

Thanks,

David.
(An avid Linux supporter, but a detester of BS)

Robert