Re: [lxc-devel] [PATCH] Use container specific domain socket name

2013-04-09 Thread Serge Hallyn
Quoting S.Çağlar Onur (cag...@10ur.org): > Hi Serge, > > On Tue, Apr 9, 2013 at 4:47 PM, Serge Hallyn wrote: > > > All right you made me finally take a closer look at the monitor code > > (which I'd been avoiding). It's much simpler than I'd imagined. So > > here are the challenges: > > > > 1.

Re: [lxc-devel] meeting on lxc with user namespaces?

2013-04-09 Thread erkan yanar
On Mon, Apr 08, 2013 at 09:12:56AM -0500, Serge Hallyn wrote: > Quoting erkan yanar (er...@linsenraum.de): > > Ahoi Serge, > > > > On Wed, Jan 16, 2013 at 01:37:04PM -0600, Serge Hallyn wrote: > > > Hi, > > > > > > Now that the core user namespace support is in both the 3.8 kernel > > > and in th

Re: [lxc-devel] [PATCH] Use container specific domain socket name

2013-04-09 Thread S . Çağlar Onur
Hi Serge, On Tue, Apr 9, 2013 at 4:47 PM, Serge Hallyn wrote: > All right you made me finally take a closer look at the monitor code > (which I'd been avoiding). It's much simpler than I'd imagined. So > here are the challenges: > > 1. lxc-monitor should be able to watch 'all containers' (at le

Re: [lxc-devel] Howto user namespaces?

2013-04-09 Thread richard -rw- weinberger
On Tue, Apr 9, 2013 at 11:07 PM, Serge Hallyn wrote: > Quoting richard -rw- weinberger (richard.weinber...@gmail.com): >> On Tue, Apr 9, 2013 at 3:19 PM, Serge Hallyn wrote: >> > Quoting richard -rw- weinberger (richard.weinber...@gmail.com): >> >> On Tue, Apr 9, 2013 at 9:58 AM, richard -rw- wei

[lxc-devel] [PATCH] lxc.functions: don't let LXC_PATH= line end in failure

2013-04-09 Thread Serge Hallyn
Otherwise if called from dash with set -e, dash will exit. This causes lxc-clone to fail. Signed-off-by: Serge Hallyn --- src/lxc/lxc.functions.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/lxc/lxc.functions.in b/src/lxc/lxc.functions.in index b41f9b8..aa5717d 10064

Re: [lxc-devel] Howto user namespaces?

2013-04-09 Thread Serge Hallyn
Quoting richard -rw- weinberger (richard.weinber...@gmail.com): > On Tue, Apr 9, 2013 at 3:19 PM, Serge Hallyn wrote: > > Quoting richard -rw- weinberger (richard.weinber...@gmail.com): > >> On Tue, Apr 9, 2013 at 9:58 AM, richard -rw- weinberger > >> wrote: > >> > On Tue, Apr 9, 2013 at 5:28 AM,

Re: [lxc-devel] [PATCH] Use container specific domain socket name

2013-04-09 Thread Serge Hallyn
All right you made me finally take a closer look at the monitor code (which I'd been avoiding). It's much simpler than I'd imagined. So here are the challenges: 1. lxc-monitor should be able to watch 'all containers' (at least under a given lxcpath). That is actually the strong reason to object

Re: [lxc-devel] Howto user namespaces?

2013-04-09 Thread richard -rw- weinberger
On Tue, Apr 9, 2013 at 3:19 PM, Serge Hallyn wrote: > Quoting richard -rw- weinberger (richard.weinber...@gmail.com): >> On Tue, Apr 9, 2013 at 9:58 AM, richard -rw- weinberger >> wrote: >> > On Tue, Apr 9, 2013 at 5:28 AM, Serge Hallyn >> > wrote: >> >> Quoting richard -rw- weinberger (richard

Re: [lxc-devel] [PATCH] Use container specific domain socket name

2013-04-09 Thread S . Çağlar Onur
Hi Serge, Got it, in this case I'm waiting Daniel to respond before changing the patch based on your comments. On Tue, Apr 9, 2013 at 8:47 AM, Serge Hallyn wrote: > Quoting S.Çağlar Onur (cag...@10ur.org): > > From: "S.Çağlar Onur" > > > > Otherwise trying to start N containers in parallel giv

Re: [lxc-devel] Howto user namespaces?

2013-04-09 Thread Dwight Engen
On Tue, 9 Apr 2013 08:15:59 -0500 Serge Hallyn wrote: > Quoting richard -rw- weinberger (richard.weinber...@gmail.com): > > On Tue, Apr 9, 2013 at 5:28 AM, Serge Hallyn > > wrote: > > > Quoting richard -rw- weinberger (richard.weinber...@gmail.com): > > >> Am I missing something obvious? > > > >

Re: [lxc-devel] [PATCH] minor documentation fixes / clarification

2013-04-09 Thread Dwight Engen
Signed-off-by: Dwight Engen Acked-by: Serge E. Hallyn --- doc/legacy/lxc-ls.sgml.in | 4 ++-- doc/lxc-execute.sgml.in | 8 doc/lxc-ps.sgml.in| 6 +++--- doc/lxc-unshare.sgml.in | 6 +++--- 4 files changed, 12 insertions(+), 12 deletions(-) diff --git a/doc/legacy/lxc-ls.sg

Re: [lxc-devel] Howto user namespaces?

2013-04-09 Thread Serge Hallyn
Quoting richard -rw- weinberger (richard.weinber...@gmail.com): > On Tue, Apr 9, 2013 at 9:58 AM, richard -rw- weinberger > wrote: > > On Tue, Apr 9, 2013 at 5:28 AM, Serge Hallyn > > wrote: > >> Quoting richard -rw- weinberger (richard.weinber...@gmail.com): > >>> Am I missing something obvious

Re: [lxc-devel] Howto user namespaces?

2013-04-09 Thread Serge Hallyn
Quoting richard -rw- weinberger (richard.weinber...@gmail.com): > On Tue, Apr 9, 2013 at 5:28 AM, Serge Hallyn wrote: > > Quoting richard -rw- weinberger (richard.weinber...@gmail.com): > >> Am I missing something obvious? > > > > lxc-create does not yet convert the rootfs to the mapped uids, so y

Re: [lxc-devel] [PATCH] Enable support for chroot on busybox hosts

2013-04-09 Thread Serge Hallyn
Quoting Bogdan Purcareata (bogdan.purcare...@freescale.com): > Signed-off-by: Bogdan Purcareata We generally prefer that mounting be done in a fresh namespace (lxc-unsahre -s MOUNT -- actions). If lxc-busybox were switched to be 'set -e', it could leave lingering mounts (and we might not notice

Re: [lxc-devel] [PATCH] Use container specific domain socket name

2013-04-09 Thread Serge Hallyn
Quoting S.Çağlar Onur (cag...@10ur.org): > From: "S.Çağlar Onur" > > Otherwise trying to start N containers in parallel gives "lxc_container: bind > : Address already in use" error. > > Found while using Go bindings to create/start/stop large number of containers > in parallel so I reproduced

Re: [lxc-devel] Howto user namespaces?

2013-04-09 Thread richard -rw- weinberger
On Tue, Apr 9, 2013 at 9:58 AM, richard -rw- weinberger wrote: > On Tue, Apr 9, 2013 at 5:28 AM, Serge Hallyn wrote: >> Quoting richard -rw- weinberger (richard.weinber...@gmail.com): >>> Am I missing something obvious? >> >> lxc-create does not yet convert the rootfs to the mapped uids, so you >

[lxc-devel] Enable chroot correct behavior on busybox hosts

2013-04-09 Thread Bogdan Purcareata
When creating busybox containers on a busybox host, chroot requires /lib to be mounted inside the new environment. This patch adds supoort for this requirement, without breaking functionality on other hosts. -- Precog i

[lxc-devel] [PATCH] Enable support for chroot on busybox hosts

2013-04-09 Thread Bogdan Purcareata
Signed-off-by: Bogdan Purcareata --- templates/lxc-busybox.in | 3 +++ 1 file changed, 3 insertions(+) diff --git a/templates/lxc-busybox.in b/templates/lxc-busybox.in index cb425ec..450c5a5 100644 --- a/templates/lxc-busybox.in +++ b/templates/lxc-busybox.in @@ -189,8 +189,11 @@ configure_busyb

Re: [lxc-devel] Howto user namespaces?

2013-04-09 Thread richard -rw- weinberger
On Tue, Apr 9, 2013 at 5:28 AM, Serge Hallyn wrote: > Quoting richard -rw- weinberger (richard.weinber...@gmail.com): >> Am I missing something obvious? > > lxc-create does not yet convert the rootfs to the mapped uids, so you > need to do that manually using uidmapshift. Check the > container-us