Security of virtualization: which one to use ?

[evilangel]

Hi all,

I know this topic is not directly linked to grsecurity.
However, it may interfer.

In the choice of KVM, Xen, Vserver, OpenVZ, QEMU, ... which virtualization solution would you choose when security matters ?

I don't know if one solution is providing more segregation between host and guest ?
Is one solution more robust when the guest has been conpromised ?

Thanks

[evilangel]

I just noticed that Vserver is providing a "combo" vserver-grsecurity patch.
http://linux-vserver.org/Welcome_to_Linux-VServer.org
This sounds good

[evilangel]

I looked on the main competitor of Vserver, OpenVZ.
It is clear: OpenVZ does not and can not support Grsecurity.
http://wiki.openvz.org/Grsecurity