Re: [lxc-devel] Dynamic devices

2013-03-11 Thread Stéphane Graber
On 03/11/2013 04:49 PM, Michael J Coss wrote: > I know that this has probably been hashed over dozens of time but as far > as I can tell udev still does not work properly in containers, neither > OpenVZ nor LXC variants. Unfortunately, I really do have a need for > dynamic devices, specifically so

[lxc-devel] Dynamic devices

2013-03-11 Thread Michael J Coss
I know that this has probably been hashed over dozens of time but as far as I can tell udev still does not work properly in containers, neither OpenVZ nor LXC variants. Unfortunately, I really do have a need for dynamic devices, specifically some USB devices tunnelled over IP. I'm looking at usin

Re: [lxc-devel] [PATCH] uidmap: fix writing multiple ranges

2013-03-11 Thread Serge Hallyn
Quoting Dwight Engen (dwight.en...@oracle.com): > The kernel requires a single atomic write for setting the /proc > idmap files. We were calling write(2) more than once when multiple > ranges were configured so instead build a buffer to pass in one write(2) > call. > > Change id types to unsigned

Re: [lxc-devel] [PATCH] make [ug]id map ordering consistent with /proc//[ug]id_map

2013-03-11 Thread Serge Hallyn
Quoting Dwight Engen (dwight.en...@oracle.com): > The id ordering and case of u,g is also consistent with uidmapshift, > reducing confusion. > > doc: Moved example to the the EXAMPLES section, and used values > corresponding to the defaults in the pending shadow-utils subuid patch. > > Signed-off

[lxc-devel] [PATCH] uidmap: fix writing multiple ranges

2013-03-11 Thread Dwight Engen
The kernel requires a single atomic write for setting the /proc idmap files. We were calling write(2) more than once when multiple ranges were configured so instead build a buffer to pass in one write(2) call. Change id types to unsigned long to handle large id mappings gracefully. Fix max id in

Re: [lxc-devel] [PATCH] make [ug]id map ordering consistent with /proc//[ug]id_map

2013-03-11 Thread Stéphane Graber
On 03/11/2013 03:33 PM, Dwight Engen wrote: > The id ordering and case of u,g is also consistent with uidmapshift, > reducing confusion. > > doc: Moved example to the the EXAMPLES section, and used values > corresponding to the defaults in the pending shadow-utils subuid patch. > > Signed-off-by:

[lxc-devel] [PATCH] make [ug]id map ordering consistent with /proc//[ug]id_map

2013-03-11 Thread Dwight Engen
The id ordering and case of u,g is also consistent with uidmapshift, reducing confusion. doc: Moved example to the the EXAMPLES section, and used values corresponding to the defaults in the pending shadow-utils subuid patch. Signed-off-by: Dwight Engen --- doc/lxc.conf.sgml.in | 30

Re: [lxc-devel] Networknamespace & Netfilter hooks

2013-03-11 Thread Serge Hallyn
Quoting Fabio Patriarca (fab.patria...@gmail.com): > Hello, > i'm no expert about LXC. > I would like to use core emulator based on LXC (and namespaces) to emulate > different machines in a emulated wireless environement. > Each machine should use a kernel module, that we have developed, called > U

[lxc-devel] Networknamespace & Netfilter hooks

2013-03-11 Thread Fabio Patriarca
Hello, i'm no expert about LXC. I would like to use core emulator based on LXC (and namespaces) to emulate different machines in a emulated wireless environement. Each machine should use a kernel module, that we have developed, called UPMT (http://netgroup.uniroma2.it/twiki/bin/view.cgi/Netgroup/Up

Re: [lxc-devel] procfs and unnamed pipes

2013-03-11 Thread Serge Hallyn
Quoting Eric W. Biederman (ebied...@xmission.com): > "Timofey.Kirillov" writes: > > > Hi, > > > > I have a question about using unnamed pipes with procfs. > > > > Suppose a chrooted environment with proc mounted as procfs. I am trying > > to use bash process substitution feature and get this: >

Re: [lxc-devel] [PATCH 3/3] python: Add get_version to binding

2013-03-11 Thread Serge Hallyn
Quoting Stéphane Graber (stgra...@ubuntu.com): > Signed-off-by: Stéphane Graber Acked-by: Serge E. Hallyn > --- > src/python-lxc/lxc.c | 8 > src/python-lxc/lxc/__init__.py | 1 + > 2 files changed, 9 insertions(+) > > diff --git a/src/python-lxc/lxc.c b/src/python-lxc/lxc.

Re: [lxc-devel] [PATCH 2/3] API: export lxc_get_version()

2013-03-11 Thread Serge Hallyn
Quoting Stéphane Graber (stgra...@ubuntu.com): > Signed-off-by: Stéphane Graber Acked-by: Serge E. Hallyn > --- > src/lxc/Makefile.am| 6 -- > src/lxc/lxc.h | 5 - > src/lxc/lxccontainer.c | 6 ++ > src/lxc/lxccontainer.h | 1 + > src/lxc/version.h | 31 ++

Re: [lxc-devel] [PATCH 1/3] python: Don't hardcode LXCPATH in python module

2013-03-11 Thread Serge Hallyn
Quoting Stéphane Graber (stgra...@ubuntu.com): > Signed-off-by: Stéphane Graber Acked-by: Serge E. Hallyn > --- > .gitignore| 1 - > configure.ac | 1 - > src/python-lxc/lxc.c | 14 +- > src/python-lxc/lxc/__init__.py| 470

Re: [lxc-devel] lxc-lenny: Remove deprecated template

2013-03-11 Thread Serge Hallyn
> Debian 5.0 Lenny turned out of support on the 6th of February 2012. > > From now on, the only supported Debian template is lxc-debian. > > Signed-off-by: Stéphane Graber -- Symantec Endpoint Protection 12 positioned as

[lxc-devel] [PATCH 3/3] python: Add get_version to binding

2013-03-11 Thread Stéphane Graber
Signed-off-by: Stéphane Graber --- src/python-lxc/lxc.c | 8 src/python-lxc/lxc/__init__.py | 1 + 2 files changed, 9 insertions(+) diff --git a/src/python-lxc/lxc.c b/src/python-lxc/lxc.c index 8fd0a78..f2b25c1 100644 --- a/src/python-lxc/lxc.c +++ b/src/python-lxc/lxc.c @@ -

[lxc-devel] [PATCH 1/3] python: Don't hardcode LXCPATH in python module

2013-03-11 Thread Stéphane Graber
Signed-off-by: Stéphane Graber --- .gitignore| 1 - configure.ac | 1 - src/python-lxc/lxc.c | 14 +- src/python-lxc/lxc/__init__.py| 470 + src/python-lxc/lxc/__init__.py.in | 471 -

[lxc-devel] [PATCH 2/3] API: export lxc_get_version()

2013-03-11 Thread Stéphane Graber
Signed-off-by: Stéphane Graber --- src/lxc/Makefile.am| 6 -- src/lxc/lxc.h | 5 - src/lxc/lxccontainer.c | 6 ++ src/lxc/lxccontainer.h | 1 + src/lxc/version.h | 31 +++ 5 files changed, 42 insertions(+), 7 deletions(-) create mode

Re: [lxc-devel] [PATCH] RFC: how to fix race with fast init?

2013-03-11 Thread Serge Hallyn
Quoting Serge Hallyn (serge.hal...@ubuntu.com): > Quoting Daniel Lezcano (daniel.lezc...@free.fr): > > This problem shouldn't appears with lxc-start. > > It hasn't (that we know of), but then the init task in lxc-start takes > a lot longer. I haven't ried, what happens when you > > lxc-sta

[lxc-devel] 0.9~rc1 pull request to be sent out on Wednesday

2013-03-11 Thread Stéphane Graber
Hello, I was initially hoping to send the pull request for rc1 today but there are still a few changes I know are coming and that should make it. As a result, I'm planning on sending the pull request for rc1 on Wednesday. If you have patches that you'd like to see make it for 0.9, now would be a

Re: [lxc-devel] [PATCH] don't leak the rootfs.pin fd into the container

2013-03-11 Thread Serge Hallyn
Quoting Ward, David - 0663 - MITLL (david.w...@ll.mit.edu): > On 03/10/2013 11:45 PM, Serge Hallyn wrote: > >Quoting Ward, David - 0663 - MITLL (david.w...@ll.mit.edu): > >>Hi Serge, > >> > >>This patch seems to have introduced a regression. When I use > >>lxc-execute with a very simple container

Re: [lxc-devel] [PATCH] don't leak the rootfs.pin fd into the container

2013-03-11 Thread Ward, David - 0663 - MITLL
On 03/10/2013 11:45 PM, Serge Hallyn wrote: Quoting Ward, David - 0663 - MITLL (david.w...@ll.mit.edu): Hi Serge, This patch seems to have introduced a regression. When I use lxc-execute with a very simple container (which only sets the utsname), the terminal input is not forwarded to the appl