[PATCH 0/4] Sysctl namespace support




Currently the network namespace work has gotten about as far as we can
without the ability to make sysctls that are per network namespace.

The techniques we have been using for other namespace of examining
current and replacing the ctl_table.data field depending on the
namespace instance that current->nsproxy refers to are both ugly
and do not work for the network sysctls.

The case in handling the networking sysctls that does not work with
the existing ugly pointer munging techniques are directories like
/proc/sys/net/ipv4/conf/ and /proc/sys/net/ipv4/neigh/ whose contents
vary depending on the networking devices present in the network
namespace.

Adding support to the sysctl infrastructure to allow to register
a sysctl table for a particular instance of a particular namespace
removes the need for magic sysctl methods, and allows the use
of the techniques for managing dynamic sysctl tables used for years
in the network stack.



Herbert we need this infrastructure most in net-2.6.25 (as not having
it is a current bottleneck to further development of the network
namespace) so these patches are against net-2.6.25.

Andrew also need this infrastructure in -mm so that we can take
advantage of this new infrastructure when implementing other
namespaces.

So I expect the sane way to deal with this patchset is to merge into
both net-2.6.25 and -mm and then Andrew can drop or disable the
patches once he pulls bases -mm on a version of net-2.6.25 with
the changes.

Eric
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/



Relevant Pages

  • Re: sysfs: tagged directories not merged completely yet
    ... A namespace introduces a scope so multiple ... Like network devices. ... I have two network devices named lo, and sysfs ...
    (Linux-Kernel)
  • Re: [RFC] [PATCH 0/7] Some basic vserver infrastructure
    ... Eric, though I suggest to postpone proc and sysctl a bit, can you share ... My thinking is move the calls for printing the sysvipc namespace ... broken-out patches for recent 2.6.16 kernel. ...
    (Linux-Kernel)
  • Re: [patch 2/6] [Network namespace] Network device sharing by view
    ... the device names so that each guest can have a separate ... Example as a prefix: guest0-eth0. ... We really want the fundamental rule that a network device ... is tied to a single namespace, and that a socket is tied ...
    (Linux-Kernel)
  • Re: [RFC] [PATCH 0/7] Some basic vserver infrastructure
    ... Eric, though I suggest to postpone proc and sysctl a bit, can you share ... My thinking is move the calls for printing the sysvipc namespace ... broken-out patches for recent 2.6.16 kernel. ...
    (Linux-Kernel)
  • Re: [9fans] Using the Acme Editor
    ... "public" namespace as long as there is one user on the system. ... restriction in UNIX systems was put in place because multiple users exist ... Try to do ioctl over the network. ... where the file system abstraction is plainly naive. ...
    (comp.os.plan9)