[lxc-users] Accessing cgroup sysfs entries from within a container

David Shwatrz dshwatrz at gmail.com
Mon Mar 31 10:08:24 UTC 2014


Hello,

Suppose I want to be able to let a container access only the sysfs cgroup
 of itself.
To be more specific, if the container name is "fedoraCT", I want to
let it access only /sys/fs/cgroup/blkio/lxc/fedoraCT (and the
corresponding entries of the other controllers) and not be able to access
/sys/fs/cgroup/blkio/lxc/ubuntoCT and /sys/fs/cgroup/blkio/lxc/CentOS_CT, etc.

Is it possible to achieve with currentl LXC release or latest git
tree? Is using cgmanager on the host
and cgproxy on the container can provide this currently ?

Regards,
David


More information about the lxc-users mailing list