[Lxc-users] Hard links to fifos not permitted in ephemeral containers? (was: Re: selinux trouble in lxc?)

[Dan Kegel]

On Fri, Sep 7, 2012 at 3:47 PM, Dan Kegel <dank at kegel.com> wrote:
> I just discovered that, inside my lxc ubuntu 10.04 container, doing
>   mkfifo /tmp/fifo
>   ln /tmp/fifo /tmp/fifo2
> fails with "operation not permitted".
>
> This makes the app I'm trying to run vewwy vewwy mad, and it
> creates approximately alph null fifos in /tmp as revenge.
>
> Where is this restriction coming from?

Aha.  Starting with 'lxc-start' yields a system which can do the ln.
Starting with 'lxc-start-ephemeral' yields a system which can't.
Has nothing to do with /tmp.

Is overlayfs at fault?
- Dan