0

An openvz container can be stopped with

vzctl stop <id>

, but this needs the cooperation from the init inside the container. In case a container is compromised a way is needed to stop the container withouts its cooperation. Something like a

vzctl kill <id>

is needed which kills all processes inside the container and puts it into the stopped state. Such a kill command is not listed in the manpage.

How can an openvz container be killed/stopped without needing it's cooperation?

5

http://wiki.openvz.org/User_Guide/Operations_on_Containers#Starting.2C_Stopping.2C_Restarting.2C_and_Querying_Status_of_Container

in case of a Container that is known to be corrupt, you may use the --fast switch:

# vzctl stop 101 --fast
Stopping container ...
Container was stopped
Container is unmounted

Make sure that you do not use the --fast switch with healthy Containers, unless necessary, as the forcible killing of Container processes may be potentially dangerous.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.