Re: mock inside of Docker

2016-10-18 Thread Miroslav Suchý
Dne 14.10.2016 v 15:14 Jan Pazdziora napsal(a): > Wouldn't > > ln -s /proc /var/lib/mock/fedora-24-x86_64/root/proc > > work? No, sir. ln -s /proc /var/lib/mock/fedora-24-x86_64/root/proc Will create in chroot: sh-4.3# ls -ld /proc lrwxrwxrwx. 1 root mockbuild 5 Oct 18 09:34 /proc -> /

Re: mock inside of Docker

2016-10-14 Thread Jan Pazdziora
On Mon, Oct 10, 2016 at 05:44:17PM +0200, Miroslav Suchý wrote: > > So, the unshare()-skipping is working. But I got stuck on > /bin/mount -n -t proc proc /var/lib/mock/fedora-24-x86_64/root/proc > This fails in unprivileged containers. And I cannot skip it, because lots of > RPMs will miss it.

Re: mock inside of Docker

2016-10-10 Thread Miroslav Suchý
Dne 30.9.2016 v 15:15 Miroslav Suchý napsal(a): > Hi, > I am investigating > https://bugzilla.redhat.com/show_bug.cgi?id=1336750 > and honestly I'm not sure what is the right solution. > > Right now we use unshare() for CLONE_NEWNS, CLONE_NEWUTS, CLONE_NEWIPC. > > I can detect if mock is runnin

Re: mock inside of Docker

2016-09-30 Thread Mike Bonnet
On 9/30/16 7:28 AM, Miroslav Suchý wrote: Dne 30.9.2016 v 15:35 Jan Pazdziora napsal(a): Is there some example of application that might happen to run next to mock? Running multiple applications in container is typically not trivial, so user might make an extra effort to achieve that setup. I

Re: mock inside of Docker

2016-09-30 Thread Dennis Gilmore
On Friday, September 30, 2016 4:28:08 PM CDT Miroslav Suchý wrote: > Dne 30.9.2016 v 15:35 Jan Pazdziora napsal(a): > > Is there some example of application that might happen to run next to > > mock? Running multiple applications in container is typically not > > trivial, so user might make an extr

Re: mock inside of Docker

2016-09-30 Thread Miroslav Suchý
Dne 30.9.2016 v 15:35 Jan Pazdziora napsal(a): > Is there some example of application that might happen to run next to > mock? Running multiple applications in container is typically not > trivial, so user might make an extra effort to achieve that setup. I have no idea. People are weird sometimes

Re: mock inside of Docker

2016-09-30 Thread Neal Gompa
On Fri, Sep 30, 2016 at 9:35 AM, Jan Pazdziora wrote: > On Fri, Sep 30, 2016 at 03:15:59PM +0200, Miroslav Suchý wrote: >> Hi, >> I am investigating >> https://bugzilla.redhat.com/show_bug.cgi?id=1336750 >> and honestly I'm not sure what is the right solution. >> >> Right now we use unshare() fo

Re: mock inside of Docker

2016-09-30 Thread Jan Pazdziora
On Fri, Sep 30, 2016 at 03:15:59PM +0200, Miroslav Suchý wrote: > Hi, > I am investigating > https://bugzilla.redhat.com/show_bug.cgi?id=1336750 > and honestly I'm not sure what is the right solution. > > Right now we use unshare() for CLONE_NEWNS, CLONE_NEWUTS, CLONE_NEWIPC. > > I can detect i