Re: [PATCH 1/1] containers: implement nsproxy containers subsystem

Serge E. Hallyn wrote:
Quoting Pavel Emelianov (xemul@xxxxxxxxxx):
Serge E. Hallyn wrote:
From 190ea72d213393dd1440643b2b87b5b2128dff87 Mon Sep 17 00:00:00 2001
From: Serge E. Hallyn <serue@xxxxxxxxxx>
Date: Mon, 4 Jun 2007 14:18:52 -0400
Subject: [PATCH 1/1] containers: implement nsproxy containers subsystem

When a task enters a new namespace via a clone() or unshare(), a new
container is created and the task moves into it. This enables
I have a design question.

How the child that has a new namespace guesses what id
this namespace has in containers?

parse /proc/$$/container

Ok.

So more likely the parent would have to grab the cloned pid of the
child, parse /proc/$$/container, then rename the container.

Child can happen to die before this and we'll have an orphaned
container. I mean, it will be deletable, but its name will be unknown.

Maybe its better to get the containers id from the pid of new task?

-serge
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/


-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/

Relevant Pages

  • Re: RFC [patch 13/34] PID Virtualization Define new task_pid api
    ... If "secure" environment is requested - fully isolated. ... For everything except the PID namespace I am just interested in having multiple ... Yes, but nesting can be one level as in OpenVZ, when VPS is a nested namespace inside host system or it can be a fully isolated separate traditional namespace. ... By real nesting I mean hierarchical containers, when containers inside multiple containers are allowed. ...
    (Linux-Kernel)
  • [PATCH 2/8] ns: Introduce the setns syscall
    ... of containers but in the context of people doing interesting ... There is also demand in the context of containers to have ... int setns; ... an the name of the namespace you think you are changing, ...
    (Linux-Kernel)
  • Re: A non-const std::set iterator
    ... >have a really compelling reason for a mutable set iterator. ... utility libs for initializing and displaying contents of containers. ... using namespace ESTLUtils; ... C++ users: Download BD Software's free STL Error Message Decryptor at: ...
    (comp.lang.cpp)
  • Re: [ckrm-tech] [PATCH 7/7] containers (V7): Container interface to nsproxy subsystem
    ... task-group it represents thr' the filesystem interface, ... I suspect that could be a problem if we have recursive containers. ... Even by having a separate mount namespace for isolation you really ... Won't there be some master namespace which can see everything? ...
    (Linux-Kernel)
  • Re: minor confusion
    ... The algorithms operate open the half-open interval ... that subscripting may be used to access individual elements of the ... for some associative containers, subscripting means something else ... for_each is an algorithm and part of the 'std' namespace. ...
    (alt.comp.lang.learn.c-cpp)