[lxc-devel] Unprivilege containers do not work on kernel 3.14.8, 3.15.1

KATOH Yasufumi karma at jazz.email.ne.jp
Thu Jun 26 06:58:04 UTC 2014


>>> On Wed, 25 Jun 2014 14:58:45 +0000
    in message   "Re: [lxc-devel] Unprivilege containers do not work on kernel 3.14.8, 3.15.1"
                  Serge Hallyn-san wrote:

> > I tried to resolv this, then
> > 
> >   chgrp 100 /dev/pts/3
> >   lxc-usernsexec -m u:0:100000:1 -m u:1000:1000:1 \
> >   > -m g:0:100000:1 -m g:100:100:1 -m g:5:100005:1 \
> >   > -- chown 0:5 /dev/pts/3
> > 
> >  (My uid:gid = 1000:100, gid of tty = 5)
> > 
> > This works fine :-)

> Nice :)

> > I updated the patch. After applying, foreground run of lxc-start and
> > lxc-console work fine. :-) Please review it:

> It looks good to me!

> It sounds like you've tested this, but I can't quite tell if you feel it
> is ready for inclusion.  If you feel it is, please resend it as just the
> patch, I'll look over it again and ack it.

Thanks! That patch is work fine when lxc-start, but do not work when
lxc-create. I'll try to investigate it a little more.


More information about the lxc-devel mailing list