Re: [lxc-devel] Detecting if you are running in a container

2011-10-11 Thread david
On Tue, 11 Oct 2011, Eric W. Biederman wrote: > Theodore Tso writes: > >> On Oct 11, 2011, at 2:42 AM, Eric W. Biederman wrote: >> >>> I am totally in favor of not starting the entire world. But just >>> like I find it convienient to loopback mount an iso image to see >>> what is on a disk image

[lxc-devel] [ lxc-Bugs-3411497 ] random veth device MAC addresses cause bridge problems

2011-10-11 Thread SourceForge . net
Bugs item #3411497, was opened at 2011-09-19 14:18 Message generated for change (Comment added) made by You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=826303&aid=3411497&group_id=163076 Please note that this message will contain a full copy of the comment thread,

Re: [lxc-devel] Detecting if you are running in a container

2011-10-11 Thread david
On Mon, 10 Oct 2011, Matt Helsley wrote: > On Mon, Oct 10, 2011 at 09:32:01PM -0400, Ted Ts'o wrote: >> On Mon, Oct 10, 2011 at 01:59:10PM -0700, Eric W. Biederman wrote: >>> Lennart Poettering writes: >>> To make a standard distribution run nicely in a Linux container you usually have

Re: [lxc-devel] Detecting if you are running in a container

2011-10-11 Thread Eric W. Biederman
Theodore Tso writes: > On Oct 11, 2011, at 2:42 AM, Eric W. Biederman wrote: > >> I am totally in favor of not starting the entire world. But just >> like I find it convienient to loopback mount an iso image to see >> what is on a disk image. It would be handy to be able to just >> download a d

Re: [lxc-devel] Detecting if you are running in a container

2011-10-11 Thread Eric W. Biederman
da...@lang.hm writes: > On Tue, 11 Oct 2011, Eric W. Biederman wrote: > >> Theodore Tso writes: >> >>> On Oct 11, 2011, at 2:42 AM, Eric W. Biederman wrote: >>> I am totally in favor of not starting the entire world. But just like I find it convienient to loopback mount an iso image to

Re: [lxc-devel] Detecting if you are running in a container

2011-10-11 Thread david
On Tue, 11 Oct 2011, Eric W. Biederman wrote: > da...@lang.hm writes: > >> On Tue, 11 Oct 2011, Eric W. Biederman wrote: >> >>> Theodore Tso writes: >>> On Oct 11, 2011, at 2:42 AM, Eric W. Biederman wrote: >>> I admit for a lot of test cases that it makes sense not to use a full >>> se

[lxc-devel] [PATCH] [RFC] lxc-init: fix odd signal mask manipulation

2011-10-11 Thread Matt Helsley
lxc init modifies a different signal mask in the loop than the one it's installing with sigaction in the loop. It appears that either these lines should move outside the loop, or the intent was to clear the bits of the sa_mask instead of the mask. Signed-off-by: Matt Helsley Should the same mask

Re: [lxc-devel] Detecting if you are running in a container

2011-10-11 Thread Theodore Tso
On Oct 11, 2011, at 2:42 AM, Eric W. Biederman wrote: > I am totally in favor of not starting the entire world. But just > like I find it convienient to loopback mount an iso image to see > what is on a disk image. It would be handy to be able to just > download a distro image and play with it,

Re: [lxc-devel] Detecting if you are running in a container

2011-10-11 Thread Eric W. Biederman
Lennart Poettering writes: > On Mon, 10.10.11 13:59, Eric W. Biederman (ebied...@xmission.com) wrote: > >> > Quite a few kernel subsystems are >> > currently not virtualized, for example SELinux, VTs, most of sysfs, most >> > of /proc/sys, audit, udev or file systems (by which I mean that for a >

[lxc-devel] [ lxc-Bugs-3411497 ] random veth device MAC addresses cause bridge problems

2011-10-11 Thread SourceForge . net
Bugs item #3411497, was opened at 2011-09-19 10:18 Message generated for change (Comment added) made by mhwarfield You can respond by visiting: https://sourceforge.net/tracker/?func=detail&atid=826303&aid=3411497&group_id=163076 Please note that this message will contain a full copy of the commen

Re: [lxc-devel] Detecting if you are running in a container

2011-10-11 Thread Ted Ts'o
On Mon, Oct 10, 2011 at 01:59:10PM -0700, Eric W. Biederman wrote: > Lennart Poettering writes: > > > To make a standard distribution run nicely in a Linux container you > > usually have to make quite a number of modifications to it and disable > > certain things from the boot process. Ideally ho

[lxc-devel] Detecting if you are running in a container

2011-10-11 Thread Eric W. Biederman
Cc's and subject updated so hopefully we get the correct people on this discussion to make progress. Lennart Poettering writes: > To make a standard distribution run nicely in a Linux container you > usually have to make quite a number of modifications to it and disable > certain things from th

Re: [lxc-devel] Detecting if you are running in a container

2011-10-11 Thread Lennart Poettering
On Mon, 10.10.11 13:59, Eric W. Biederman (ebied...@xmission.com) wrote: > > Quite a few kernel subsystems are > > currently not virtualized, for example SELinux, VTs, most of sysfs, most > > of /proc/sys, audit, udev or file systems (by which I mean that for a > > container you probably don't wan

Re: [lxc-devel] Detecting if you are running in a container

2011-10-11 Thread Ted Ts'o
On Mon, Oct 10, 2011 at 07:05:30PM -0700, Matt Helsley wrote: > Yes, it does detract from the unique advantages of using a container. > However, I think the value here is not the effeciency of the initial > system configuration but the fact that it gives users a better place to > start. > > Right

Re: [lxc-devel] Detecting if you are running in a container

2011-10-11 Thread Eric W. Biederman
Ted Ts'o writes: > On Mon, Oct 10, 2011 at 07:05:30PM -0700, Matt Helsley wrote: >> Yes, it does detract from the unique advantages of using a container. >> However, I think the value here is not the effeciency of the initial >> system configuration but the fact that it gives users a better place

Re: [lxc-devel] Detecting if you are running in a container

2011-10-11 Thread Eric W. Biederman
Lennart Poettering writes: > On Mon, 10.10.11 13:59, Eric W. Biederman (ebied...@xmission.com) wrote: >> My list of things that still have work left to do looks like: >> - cgroups. It is not safe to create a new hierarchies with groups >> that are in existing hierarchies. So cgroups don't wo

Re: [lxc-devel] Detecting if you are running in a container

2011-10-11 Thread Matt Helsley
On Mon, Oct 10, 2011 at 09:32:01PM -0400, Ted Ts'o wrote: > On Mon, Oct 10, 2011 at 01:59:10PM -0700, Eric W. Biederman wrote: > > Lennart Poettering writes: > > > > > To make a standard distribution run nicely in a Linux container you > > > usually have to make quite a number of modifications to