[lxc-devel] problem with user namespace as root

Michael H. Warfield mhw at WittsEnd.com
Sat Feb 15 15:06:40 UTC 2014


On Sat, 2014-02-15 at 14:59 +0100, Stephan Sachse wrote:
> On Sat, Feb 15, 2014 at 5:07 AM, Michael H. Warfield <mhw at wittsend.com> wrote:
> 
> > > Probably best to grab a 3.13 kernel and set CONFIG_USER_NS=y.
> >
> > I'm working from rpm's to save what little management sanity I have
> > left.  There may be a 3.13 rpm in rawhide I can snag.

> there are mainline kernels for fedora

> https://fedoraproject.org/wiki/Kernel_Vanilla_Repositories

> but the simplest thing is: take the srpm for your current kernel
> change the config, pump the release number and rebuild it.

> > Hmmm...  Which I just did.  Rawhide (F21) actually has a 3.14 kernel in
> > it while F20 updates testing has a 3.13 kernel.  I'm snagging them both
> > to see what they have in them and how their configured.

> CONFIG_USER_NS should be enabled in current rawhide kernels

> https://bugzilla.redhat.com/show_bug.cgi?id=917708#c9

Excellent!  That's then where I'm heading first.  Always take the lazy
way, errr easy way, first.  :-)

Thanks!

> /stephan

Regards,
Mike

> -- 
> Software is like sex, it's better when it's free!
> _______________________________________________
> lxc-devel mailing list
> lxc-devel at lists.linuxcontainers.org
> http://lists.linuxcontainers.org/listinfo/lxc-devel
> 

-- 
Michael H. Warfield (AI4NB) | (770) 978-7061 |  mhw at WittsEnd.com
   /\/\|=mhw=|\/\/          | (678) 463-0932 |  http://www.wittsend.com/mhw/
   NIC whois: MHW9          | An optimist believes we live in the best of all
 PGP Key: 0x674627FF        | possible worlds.  A pessimist is sure of it!

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 465 bytes
Desc: This is a digitally signed message part
URL: <http://lists.linuxcontainers.org/pipermail/lxc-devel/attachments/20140215/f3425bfe/attachment.pgp>


More information about the lxc-devel mailing list