Re: [lxc-devel] process number limit

2013-05-12 Thread William Dauchy
Hi Robert, On Sun, May 12, 2013 at 10:15 PM, Robert Gierzinger wrote: > Is there anything planned to restrict exhaustive process generation in a > guest or any other means to defend against fork bombs? In recent kernels (such as 3.9.x) you have `memory.kmem.limit_in_bytes` which could be use for

Re: [lxc-devel] link /dev/kmsg to /dev/console in the container

2012-11-26 Thread William Dauchy
btw, I'm quite surprised to see such a patch between a rc2 and the final release. -- William -- Monitor your physical, virtual and cloud infrastructure from a single web console. Get in-depth insight into apps, servers, d

Re: [lxc-devel] link /dev/kmsg to /dev/console in the container

2012-11-26 Thread William Dauchy
Hi Serge, Thank you for you reply. On Mon, Nov 26, 2012 at 6:28 PM, Serge Hallyn wrote: > No, it's the kernel's. Patch for that is however not yet ready. > > Failure to set up kmsg should not fail container startup. Commit > f62b344996937459ae5f31b0358cb440ddde421f fixed that, but that is > ap

[lxc-devel] link /dev/kmsg to /dev/console in the container

2012-11-26 Thread William Dauchy
Hello, I tried to update from lxc-0.8-rc2 to lxc-0.8. I don't understand this commit: 1bd051a link /dev/kmsg to /dev/console in the container I don't see why lxc is doing this job. I'm using a read only rootfs with an additional rw disk (e.g for the console); so the start is now broken because i

Re: [lxc-devel] lxc0.8rc2

2012-07-10 Thread William Dauchy
On Tue, Jul 10, 2012 at 3:43 PM, Daniel Lezcano wrote: > Yeah, sorry for that. > I will upload it ASAP. thanks! btw, a rc3 planned? -- William -- Live Security Virtual Conference Exclusive live event will cover all the

Re: [lxc-devel] lxc0.8rc2

2012-07-10 Thread William Dauchy
On Wed, May 2, 2012 at 6:21 PM, William Dauchy wrote: > I saw that lxc-0.8.0-rc2 has been tagged 6 weeks ago > (http://lxc.git.sourceforge.net/git/gitweb.cgi?p=lxc/lxc;a=summary) > I was wondering why there was no package available in > http://lxc.sourceforge.net/download/lxc/ (

[lxc-devel] lxc0.8rc2

2012-05-02 Thread William Dauchy
Hello, I saw that lxc-0.8.0-rc2 has been tagged 6 weeks ago (http://lxc.git.sourceforge.net/git/gitweb.cgi?p=lxc/lxc;a=summary) I was wondering why there was no package available in http://lxc.sourceforge.net/download/lxc/ (since rc1 is present) Regards, -- William -

Re: [lxc-devel] lxc0.8 and hierarchies

2012-05-02 Thread William Dauchy
Hi Serge, Thanks for your quick reply. On Wed, May 2, 2012 at 4:14 PM, Serge Hallyn wrote: > The issue of what to do with control groups which do not support > hierarchies has been discussed on lkml recently.  I thought (though > maybe I'm wrong) the decision was that such a subsystem would have

[lxc-devel] lxc0.8 and hierarchies

2012-05-02 Thread William Dauchy
Hello, I tested lxc0.8 rc1 and saw that cgroups are now created in /cgroup/lxc/, so lxc-create will create the cgroups in this directory as a cgroups hierarchy. It makes the thing unusable when using cgroups capabilities that does not support hierarchies. I'm thinking about CONFIG_NETPRIO_CGROUP i