The new concept is to provide bindmounted cgroups from the node to the container with user-space help (vzctl/prctl) thus we at least for not don't need cgroups virtualization which makes code a way more complex to read.
If for some unlikely reason we would need to virtualizae them back it should be done via separate compat module. Cyrill _______________________________________________ Devel mailing list Devel@openvz.org https://lists.openvz.org/mailman/listinfo/devel