On Wed, 2011-03-30 at 08:20 -0500, Serge E. Hallyn wrote:
> Quoting Justin Cormack (jus...@specialbusservice.com):
> > On Tue, 2011-03-29 at 18:19 -0500, Serge E. Hallyn wrote:
> > 
> > > As for trouble with init - is your fedora using systemd?  How does it
> > > actually start runlevel changes?  Upstart uses dbus over abstract unix
> > > socket (which is containerized with netns), sysvinit uses ioctl over
> > > /dev/init which is a distinct file from the one in the container...
> > > Does systemd do something we're not containerizing right now?
> > 
> > When I tried Ubuntu on Ubuntu (using upstart), the abstract socket was
> > not containerized, and it was changing runlevels on the host, which was
> > a complete pain. How do I make sure that it is? Is it an lxc version
> > issue (I was using the lxc that ships with Ubuntu 10.10, 0.7.2)?
> 
> No, you must have created a container without private network namespace.
> Since upstart uses an abstact unix domain socket, you can only keep
> root in a container from being able to reboot by either (1) starting
> the container as a user who is not root and having a private user
> namespace (which is not currently recommended since userns is going
> through churn), or (2) having a private network namespace.

How do I make sure my container does have a private network namespace?
Network namespaces are enabled on my system, but I cant find the
documentation anywhere about how to turn this on when I create a
container (only the clone flags documentation...)

Sorry to be dumb about this....

Justin



------------------------------------------------------------------------------
Create and publish websites with WebMatrix
Use the most popular FREE web apps or write code yourself; 
WebMatrix provides all the features you need to develop and 
publish your website. http://p.sf.net/sfu/ms-webmatrix-sf
_______________________________________________
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users

Reply via email to