Re: [PATCH v2 0/3] vsock: add namespace support to vhost-vsock

2025-04-05 Thread Daniel P . Berrangé
On Wed, Apr 02, 2025 at 10:13:43AM +0200, Stefano Garzarella wrote: > On Wed, 2 Apr 2025 at 02:21, Bobby Eshleman wrote: > > > > I do like Stefano's suggestion to add a sysctl for a "strict" mode, > > Since it offers the best of both worlds, and still tends conservative in > > protecting existing

Re: [PATCH v2 0/3] vsock: add namespace support to vhost-vsock

2025-04-01 Thread Daniel P . Berrangé
On Fri, Mar 28, 2025 at 06:03:19PM +0100, Stefano Garzarella wrote: > CCing Daniel > > On Wed, Mar 12, 2025 at 01:59:34PM -0700, Bobby Eshleman wrote: > > Picking up Stefano's v1 [1], this series adds netns support to > > vhost-vsock. Unlike v1, this series does not address guest-to-host (g2h) > >

Re: [PATCH v2 0/3] vsock: add namespace support to vhost-vsock

2025-04-04 Thread Daniel P . Berrangé
On Wed, Apr 02, 2025 at 03:18:13PM -0700, Bobby Eshleman wrote: > On Wed, Apr 02, 2025 at 10:21:36AM +0100, Daniel P. Berrangé wrote: > > It occured to me that the problem we face with the CID space usage is > > somewhat similar to the UID/GID space usage for user namespaces.