Re: [lxc-devel] [PATCH] Add lxc-net tool

2012-05-17 Thread Christian Seiler
Hi, >> - they unshare the mount namespace and remount /sys - apparently, in >>contrast to /proc, which depends on the current process's context, >>/sys depends on the context of the process mounting it > > Both actually depend on the context of the process mounting it. If you > do "lxc-

Re: [lxc-devel] [PATCH] Add lxc-net tool

2012-05-17 Thread Serge Hallyn
Quoting Christian Seiler (christ...@iwakd.de): > Hi again, > > >> Extending lxc-attach would also be fine by me - is anybody already > >> working on this? If not, I'd be willing to do that. > > > > It's on the todo list at the moment, I don't believe anyone is > > actively working on it at the mom

Re: [lxc-devel] [PATCH] Add lxc-net tool

2012-05-17 Thread Christian Seiler
Hi again, >> Extending lxc-attach would also be fine by me - is anybody already >> working on this? If not, I'd be willing to do that. > > It's on the todo list at the moment, I don't believe anyone is > actively working on it at the moment. > > So if you want to do it, it'd be much appreciated.

Re: [lxc-devel] [PATCH] Add lxc-net tool

2012-05-17 Thread Stéphane Graber
On 05/17/2012 03:21 PM, Christian Seiler wrote: > Hi, > >> Until lxc-attach is extended (Serge Hallyn took that action item), > > Extending lxc-attach would also be fine by me - is anybody already > working on this? If not, I'd be willing to do that. It's on the todo list at the moment, I don't

Re: [lxc-devel] [PATCH] Add lxc-net tool

2012-05-17 Thread Christian Seiler
Hi, > Until lxc-attach is extended (Serge Hallyn took that action item), Extending lxc-attach would also be fine by me - is anybody already working on this? If not, I'd be willing to do that. > I suggest using this very simple script to switch network namespaces: > http://paste.ubuntu.com/992744

Re: [lxc-devel] [PATCH] Add lxc-net tool

2012-05-17 Thread Stéphane Graber
-BEGIN PGP SIGNED MESSAGE- Hash: SHA512 On 05/17/2012 12:26 PM, Christian Seiler wrote: > Add a tool that switches context to enter the network namespace and > then execute an arbitrary command. Since we don't change mount / > pid namespaces, this allows the user to use the host's networki

Re: [lxc-devel] [PATCH] Add lxc-net tool

2012-05-17 Thread Serge Hallyn
Quoting Christian Seiler (christ...@iwakd.de): > Add a tool that switches context to enter the network namespace and then > execute an arbitrary command. Since we don't change mount / pid namespaces, > this allows the user to use the host's networking tools such as iputils, > iptables, netstat to q

[lxc-devel] [PATCH] Add lxc-net tool

2012-05-17 Thread Christian Seiler
Add a tool that switches context to enter the network namespace and then execute an arbitrary command. Since we don't change mount / pid namespaces, this allows the user to use the host's networking tools such as iputils, iptables, netstat to query / configure the container from the outside. This m