Quoting Ulli Horlacher (frams...@rus.uni-stuttgart.de):
> I have a container running with:
> 
> root@vms2:/lxc# egrep 'fstab|lxc.cap.drop' fex.cfg 
> lxc.mount = /lxc/fex.fstab
> lxc.cap.drop = mac_override
> lxc.cap.drop = sys_module
> lxc.cap.drop = sys_boot
> lxc.cap.drop = sys_admin
> lxc.cap.drop = sys_time
> 
> root@vms2:/lxc# grep /sw fex.fstab
> /nfs/rusnas/sw          /lxc/fex/nfs/sw         none bind,ro 0 0
> 
> The problem is: "ro" for /lxc/fex/nfs/sw is wrong, it should be "rw".
> Can I change it without restarting the whole container?
> On a normal partition I would execute:
> mount -o remount,rw /lxc/fex/nfs/sw
> 
> Is this possible with bind mounts for containers, too?
> 
> Because of lxc.cap.drop = sys_admin I cannot execute (re)mount commands
> inside the container. 

If your kernel is new enough (check whether /proc/self/ns/mnt exists)
you could lxc-attach into the container with the -e flag to keep
elevated privileges, and do the remount.

------------------------------------------------------------------------------
October Webinars: Code for Performance
Free Intel webinars can help you accelerate application performance.
Explore tips for MPI, OpenMP, advanced profiling, and more. Get the most from 
the latest Intel processors and coprocessors. See abstracts and register >
http://pubads.g.doubleclick.net/gampad/clk?id=60135991&iu=/4140/ostg.clktrk
_______________________________________________
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users

Reply via email to