Re: [lxc-devel] [RFC 0/8] Unprivileged container creation and use

2013-07-23 Thread Serge Hallyn
Quoting Jäkel, Guido (g.jae...@dnb.de): > > >The downside of this approach though is that we'd have to ban the > >lxc.network option allowing you to change the host interface name or use > >that as a suffix for lxc--. > > Please don't drop this option completely. In my framework I'm using it to s

Re: [lxc-devel] [RFC 0/8] Unprivileged container creation and use

2013-07-23 Thread Jäkel , Guido
>The downside of this approach though is that we'd have to ban the >lxc.network option allowing you to change the host interface name or use >that as a suffix for lxc--. Please don't drop this option completely. In my framework I'm using it to set the external veth name to the name of the contai

Re: [lxc-devel] [RFC 0/8] Unprivileged container creation and use

2013-07-23 Thread Stéphane Graber
On Mon, Jul 22, 2013 at 10:15:17AM -0500, Serge Hallyn wrote: > Thanks for the review, Stéphane. > > So the next thing I was wanting to do (beside fixing lxc-destroy and > having the ubuntu-cloud template properly handle cached images and > locking in custom lxcpaths for unprivileged users) was th

Re: [lxc-devel] [RFC 0/8] Unprivileged container creation and use

2013-07-23 Thread Stéphane Graber
On Mon, Jul 22, 2013 at 10:07:29AM -0500, Serge Hallyn wrote: > Quoting Stéphane Graber (stgra...@ubuntu.com): > > On Fri, Jul 19, 2013 at 02:26:47PM +, Serge Hallyn wrote: > > > With this patchset, I am able to create and start an ubuntu-cloud > > > container completely as an unprivileged user

Re: [lxc-devel] [RFC 0/8] Unprivileged container creation and use

2013-07-22 Thread Serge Hallyn
Thanks for the review, Stéphane. So the next thing I was wanting to do (beside fixing lxc-destroy and having the ubuntu-cloud template properly handle cached images and locking in custom lxcpaths for unprivileged users) was the networking. I have a question on that. Originally I was going to have

Re: [lxc-devel] [RFC 0/8] Unprivileged container creation and use

2013-07-22 Thread Serge Hallyn
Quoting Stéphane Graber (stgra...@ubuntu.com): > On Fri, Jul 19, 2013 at 02:26:47PM +, Serge Hallyn wrote: > > With this patchset, I am able to create and start an ubuntu-cloud > > container completely as an unprivileged user, on an ubuntu saucy > > host with the kernel from ppa:ubuntu-lxc/kern

Re: [lxc-devel] [RFC 0/8] Unprivileged container creation and use

2013-07-21 Thread Stéphane Graber
On Fri, Jul 19, 2013 at 02:26:47PM +, Serge Hallyn wrote: > With this patchset, I am able to create and start an ubuntu-cloud > container completely as an unprivileged user, on an ubuntu saucy > host with the kernel from ppa:ubuntu-lxc/kernel and the nsexec > package from ppa:serge-hallyn/usern