Re: [lxc-devel] Device Namespaces

2013-10-01 Thread Greg Kroah-Hartman
On Tue, Oct 01, 2013 at 12:51:36PM -0700, Eric W. Biederman wrote: > "Serge E. Hallyn" writes: > > > Quoting Andy Lutomirski (l...@amacapital.net): > >> On Tue, Oct 1, 2013 at 7:19 AM, Janne Karhunen > >> wrote: > >> > On Thu, Sep 2

Re: [lxc-devel] Device Namespaces

2013-10-01 Thread Greg Kroah-Hartman
On Tue, Oct 01, 2013 at 09:19:58AM +0300, Janne Karhunen wrote: > On Thu, Sep 26, 2013 at 8:33 AM, Greg Kroah-Hartman > wrote: > > >> - We can relay a call of /sbin/hotplug from outside of a container > >> to inside of a container based on policy. > >> (B

Re: [lxc-devel] Device Namespaces

2013-09-30 Thread Greg Kroah-Hartman
On Mon, Sep 30, 2013 at 08:37:19AM -0700, James Bottomley wrote: > On Thu, 2013-09-26 at 10:07 -0700, Greg Kroah-Hartman wrote: > > On Thu, Sep 26, 2013 at 08:01:31PM +0300, Janne Karhunen wrote: > > > That being said, our wish would be to support any combination of > > &g

Re: [lxc-devel] Device Namespaces

2013-09-29 Thread Greg Kroah-Hartman
On Sun, Sep 29, 2013 at 10:28:55PM +0300, Amir Goldstein wrote: > > > > On Thu, Sep 26, 2013 at 8:33 AM, Greg Kroah-Hartman > > wrote: > > On Wed, Sep 25, 2013 at 02:34:54PM -0700, Eric W. Biederman wrote: > > So the big issues for a device namespac

Re: [lxc-devel] Device Namespaces

2013-09-26 Thread Greg Kroah-Hartman
On Thu, Sep 26, 2013 at 11:25:56AM +0300, Janne Karhunen wrote: > On Thu, Sep 26, 2013 at 8:33 AM, Greg Kroah-Hartman > wrote: > > >> In summary the situation with device hoptlug and containers sucks today, > >> and we need to do something. Running a linux deskt

Re: [lxc-devel] Device Namespaces

2013-09-26 Thread Greg Kroah-Hartman
On Thu, Sep 26, 2013 at 08:01:31PM +0300, Janne Karhunen wrote: > That being said, our wish would be to support any combination of > OS's and frankly, I'd be slightly annoyed to tell the customer that > they can't do two Androids or we magically run out of bits. If you want to support "any" combin

Re: [lxc-devel] Device Namespaces

2013-09-26 Thread Greg Kroah-Hartman
On Wed, Sep 25, 2013 at 02:34:54PM -0700, Eric W. Biederman wrote: > So the big issues for a device namespace to solve are filtering which > devices a container has access to and being able to dynamically change > which devices those are at run time (aka hotplug). As _all_ devices are hotpluggable