Re: [lxc-devel] [PATCH] netns: unix: only allow to find out unix socket in same net namespace

2013-08-20 Thread Gao feng
cc libvirt-list On 08/21/2013 01:30 PM, Eric W. Biederman wrote: > Gao feng writes: > >> Unix sockets are private resources of net namespace, >> allowing one net namespace to access to other netns's unix >> sockets is meaningless. > > Allowing one net namespace to access another netns's unix so

Re: [lxc-devel] [PATCH] netns: unix: only allow to find out unix socket in same net namespace

2013-08-20 Thread Eric W. Biederman
Gao feng writes: > Unix sockets are private resources of net namespace, > allowing one net namespace to access to other netns's unix > sockets is meaningless. Allowing one net namespace to access another netns's unix socket is deliberate behavior. This is a desired and useful feature, and only

Re: [lxc-devel] [PATCH] netns: unix: only allow to find out unix socket in same net namespace

2013-08-20 Thread Gao feng
cc contain...@lists.linux-foundation.org On 08/21/2013 12:31 PM, Gao feng wrote: > Unix sockets are private resources of net namespace, > allowing one net namespace to access to other netns's unix > sockets is meaningless. > > I'm researching a problem about shutdown from container, > if the cota

[lxc-devel] [PATCH] netns: unix: only allow to find out unix socket in same net namespace

2013-08-20 Thread Gao feng
Unix sockets are private resources of net namespace, allowing one net namespace to access to other netns's unix sockets is meaningless. I'm researching a problem about shutdown from container, if the cotainer shares the same file /run/systemd/private with host, when we run shutdown -h xxx in conta

Re: [lxc-devel] [PATCH] install attach_options.h into /usr/include/lxc

2013-08-20 Thread S . Çağlar Onur
Hi, On Mon, Aug 19, 2013 at 8:39 AM, Stéphane Graber wrote: > On Mon, Aug 19, 2013 at 07:27:47AM -0500, Serge Hallyn wrote: > > Quoting S.Çağlar Onur (cag...@10ur.org): > > > Signed-off-by: S.Çağlar Onur > > > > Acked-by: Serge E. Hallyn > > > > > --- > > > src/lxc/Makefile.am | 1 + > > > 1

Re: [lxc-devel] RFC: aliases

2013-08-20 Thread Jay Taylor
On Tue, Aug 20, 2013 at 4:07 PM, Serge Hallyn wrote: > Quoting Jay Taylor (j...@jaytaylor.com): > > Hey Serge, > > > > > > On Tue, Aug 20, 2013 at 1:55 PM, Serge Hallyn >wrote: > > > > > Hi, > > > > > > one idea that has been brought up is to support 'aliases'. So if > you're > > > locally build

Re: [lxc-devel] RFC: aliases

2013-08-20 Thread Serge Hallyn
Quoting Jay Taylor (j...@jaytaylor.com): > Hey Serge, > > > On Tue, Aug 20, 2013 at 1:55 PM, Serge Hallyn wrote: > > > Hi, > > > > one idea that has been brought up is to support 'aliases'. So if you're > > locally building a daily pristine container, say at 'c-2013-08-20', > > you might want t

Re: [lxc-devel] RFC: aliases

2013-08-20 Thread Jay Taylor
Hey Serge, On Tue, Aug 20, 2013 at 1:55 PM, Serge Hallyn wrote: > Hi, > > one idea that has been brought up is to support 'aliases'. So if you're > locally building a daily pristine container, say at 'c-2013-08-20', > you might want to then have a 'c-latest' alias or link pointing to the > late

[lxc-devel] RFC: aliases

2013-08-20 Thread Serge Hallyn
Hi, one idea that has been brought up is to support 'aliases'. So if you're locally building a daily pristine container, say at 'c-2013-08-20', you might want to then have a 'c-latest' alias or link pointing to the latest container, so you can always just sudo lxc-clone -o c-latest -n te

[lxc-devel] [PATCH] Track snapshot dependencies

2013-08-20 Thread Serge Hallyn
lvm, btrfs, and zfs snapshots each do an ok job of handling deletions for us - a btrfs snapshot does fine after the original is removed, while zfs and lvm will both refuse to allow the original to be deleted while the snapshot exists. Overlayfs doesn't do this for us. So, for overlayfs snapshots,

Re: [lxc-devel] [PATCH 1/5] cgroup: minor bugfixes so start and attach work again

2013-08-20 Thread Serge Hallyn
Quoting Stéphane Graber (stgra...@ubuntu.com): > On Mon, Aug 19, 2013 at 04:57:10PM -0500, Serge Hallyn wrote: > > Quoting Christian Seiler (christ...@iwakd.de): > > > Hi Serge, > > > > > > > Thanks, Christian - I've pushed a new patch to github on top of yours. > > > > Regular start/stop/lxc-cgro