[lxc-users] Status: Debian Jessie support for unprivileged containers?

[Serge Hallyn]

Quoting Fajar A. Nugraha (list at fajar.net):
> On Sat, Jan 9, 2016 at 4:58 PM, Xavier Gendre <gendre.reivax at gmail.com> wrote:
> > Le 09/01/2016 03:23, Fajar A. Nugraha a écrit :
> >> Anyway, I wrote this several months ago, should be the easiest way to
> >> get unpriv jessie on jessie: http://debian-lxc.github.io/
> >> The repo has lxc-1.1.5 and cgmanager, ported from ubuntu.
> >
> > I have followed your tutorials and it works perfectly well, thanks
> > Fajar! This is definitly cleaner than my way and, now, I have a lot to
> > do to update my stuff ;-) I will add a link to your tutorials in my blog
> > post to indicate this better way.
> >
> > A little question, the repositories that you use for lxc and systemd are
> > maintained with up-to-date packages? Do you plan to maintain it for some
> > times or is it only experimental?
> 
> It's maintained in my free time, so expect some delays. Volunteers
> welcome. The site, packaging recipe, and binaries are available on
> https://github.com/debian-lxc , and sometimes the update effort is as
> simple as recompiling sources from ubuntu ppa, so the effort shouldn't
> be too hard.
> 
> lxcfs is another story. I held up from updating as upgrading it (or to
> be exact, restarting lxcfs) would cause all running containers to lose
> access to lxcfs-provided ressources (e.g. some parts of /proc and
> /sys), so you need to restart all containers as well. There's a recent
> change in packaging to not restart lxcfs when upgrading though
> (https://github.com/lxc/lxcfs-pkg-ubuntu/commit/904f24), so I'll
> probably update it after the next lxc release.

If someone would like to work on a patch to do upstart-style
serialize-reexec-unserialize that would rock :)