Re: [lxc-devel] Detecting if you are running in a container

2011-10-14 Thread Ted Ts'o
On Wed, Oct 12, 2011 at 03:12:34PM -0400, Kyle Moffett wrote: > Well, you're going to need to introduce a bunch of new xattrs to > handle the namespacing anyways. > > As I understand it you can use RichACLs to grant all the same > privileges as owner and group, so you can simply map the real > nam

Re: [lxc-devel] Detecting if you are running in a container

2011-10-14 Thread H. Peter Anvin
On 10/14/2011 11:04 AM, Eric W. Biederman wrote: > > I have found and merged a solution that allows us to name namespaces > without needing a namespaces for namespaces. > Something based on UUIDs, perhaps? UUIDs are kind of exactly this, after all... a single namespace designed to be large and

Re: [lxc-devel] Detecting if you are running in a container

2011-10-14 Thread Eric W. Biederman
Ted Ts'o writes: >> I am of course making it sound a million times easier than it's >> actually likely to be, but I do think it's possible without too many >> odd corner cases. > > It's not the corner cases, it's all of the different name spaces that > different system administrators and their si