On 02/23/2011 05:22 AM, Rob Landley wrote: > It looks like clone flags aren't the only way to create a new namespace, > any existing process can move to a new namespace via unshare(2). > > This sounds like you could fairly easily make a super_chroot() function > that does most of the container stuff. The hard part would be doing > mount points, device setup, and TTY I/O. (How much of this requires a > host daemon? I still haven't properly investigated how the current > container TTY stuff behind lxc-console works...)
The problem with unshare is you can not create a new pid namespace. ------------------------------------------------------------------------------ Free Software Download: Index, Search & Analyze Logs and other IT data in Real-Time with Splunk. Collect, index and harness all the fast moving IT data generated by your applications, servers and devices whether physical, virtual or in the cloud. Deliver compliance at lower cost and gain new business insights. http://p.sf.net/sfu/splunk-dev2dev _______________________________________________ Lxc-devel mailing list Lxc-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/lxc-devel
