[lxc-devel] [Fwd: Re: [RFC][PATCH] ns: Syscalls for better namespace sharing control.]

[Ciprian Dorin, Craciun]

On Mon, Mar 8, 2010 at 10:50 PM, Daniel Lezcano <daniel.lezcano at free.fr> wrote:
> Ciprian Dorin, Craciun wrote:
>>
>>    Please let me know when such patchset / afferent tools are
>> available. (I hope that the patchset is also applicable to prior
>> kernel verions (.33, .34)...)
>>
>
> Mmh, would it makes sense to have an out-of-tree lxc kernel grouping all the
> patches around related to the containers ?
> like sysfs per namespace, udev event, entering a container ...
> At least the ones having a very good chance to be merged upstream ?

    For me (and others wanting to try the latest and greatest features
about the containers) it would be a very good idea to either provide a
clean patch for the proposed features. And even maybe someone could
provide a branch of the latest stable kernel with these patches ontop.
(I could maintain such a branch, as I frequently compile the stable
kernel myself from Linus's tree.)

    So if you can provide these patches I would like to thank you in advance. :)
    Ciprian.


>>    Ciprian.
>>
>>    P.S.: For those interested I'm playing with LXC to isolate
>> different applications, and my intent is that my working machine is
>> going to be a combination of Gentoo (or Debian?) (for boot,
>> networking, disk, and services), ArchLinux (for desktop applicaions
>> like Firefox and OpenOffice), and custom built applications (here LXC
>> allows me to separate the roots so that the package managers are not
>> going to interfere one with another). I also want that all my services
>> (dnscache, polipo proxy, etc.) to be contained in restricted
>> containers.
>>
>