This paper explores how to generate a minimized Linux target from a standard distribution. Most minimalization tools either create from scratch: a new distribution dedicated to a special functionality (ex: DSL, Leaf, OpenPBX, LTSP, ...) or reduce an existing distribution by skimming installed packages (OpenSuSE/KIWI, Ubuntu/JeOS, RedHat/ELDS). This paper describes a mixed approach, where you start from a standard running distribution (Ubuntu, OpenSuSE, ...) and extract the minimum set of binaries required for your target.The advantage of this host/target approach, is that it does not impose you a special distribution, provide a simple method to keep in sync your development host and embedded target. On the other hand you should understand in deep the dependencies of selected binaries and your boot process.

While they are many available firewall for Linux, none of them are really designed for virtualization. Obviously it is alway possible to hack an existing one to fit your need, but VM-firewall has been designed to support virtualization in a Internet hosted environment, it runs the same rules for Xen, OpenVZ and VirtualBox. The goal of VM-Firewall if to provide to virtualization administrator the same facility has the one provided by an intelligent router in a traditional architecture, it is particularly useful for people who have multiple IP addresses that they want to forward on different virtual machines.