Re: [Devel] [PATCH v3 7/9] modify tar extraction to account for user namespace

2013-05-14 Thread Glauber Costa
On 05/14/2013 07:17 AM, Kir Kolyshkin wrote: Hmm... If I understand it correctly, in case LOCAL_UID/LOCAL_GID is not set in the global configuration file, and not supplied from command line, here you apply the default values of 1. The problem I see these values are not saved into

Re: [Devel] [PATCH v3 7/9] modify tar extraction to account for user namespace

2013-05-14 Thread Glauber Costa
On 05/14/2013 07:17 AM, Kir Kolyshkin wrote: Hmm... If I understand it correctly, in case LOCAL_UID/LOCAL_GID is not set in the global configuration file, and not supplied from command line, here you apply the default values of 1. The problem I see these values are not saved into

Re: [Devel] [PATCH v3 7/9] modify tar extraction to account for user namespace

2013-05-13 Thread Glauber Costa
On 05/11/2013 03:53 AM, Igor M Podlesny wrote: On 30 April 2013 13:16, Glauber Costa glom...@openvz.org wrote: From: Glauber Costa glom...@parallels.com To work around that, we can employ a trick to allow container creation right now, as well as to avoid compatibility problems: we will resort

Re: [Devel] [PATCH v3 7/9] modify tar extraction to account for user namespace

2013-05-13 Thread Kir Kolyshkin
On 04/29/2013 10:16 PM, Glauber Costa wrote: From: Glauber Costa glom...@parallels.com If we are running upstream with user namespaces, we need to create the container filesystem not with the ownership preserved, but reflecting the mapping we need to apply. Note that according to our

[Devel] [PATCH v3 7/9] modify tar extraction to account for user namespace

2013-05-10 Thread Glauber Costa
From: Glauber Costa glom...@parallels.com If we are running upstream with user namespaces, we need to create the container filesystem not with the ownership preserved, but reflecting the mapping we need to apply. Note that according to our documentation, we should ignore this if the user

Re: [Devel] [PATCH v3 7/9] modify tar extraction to account for user namespace

2013-05-10 Thread Igor M Podlesny
On 30 April 2013 13:16, Glauber Costa glom...@openvz.org wrote: From: Glauber Costa glom...@parallels.com To work around that, we can employ a trick to allow container creation right now, as well as to avoid compatibility problems: we will resort to LD_PRELOAD to load a schim that captures