Re: [libvirt] [PATCH v2 08/21] qemu: Spawn qemu under mount namespace

2016-12-12 Thread Michal Privoznik
On 12.12.2016 12:47, Daniel P. Berrange wrote: > On Mon, Dec 12, 2016 at 10:55:55AM +, Daniel P. Berrange wrote: >> On Wed, Dec 07, 2016 at 09:36:15AM +0100, Michal Privoznik wrote: >>> Prime time. When it comes to spawning qemu process and >>> relabelling all the devices it's going to touch,

Re: [libvirt] [PATCH v2 08/21] qemu: Spawn qemu under mount namespace

2016-12-12 Thread Daniel P. Berrange
On Wed, Dec 07, 2016 at 09:36:15AM +0100, Michal Privoznik wrote: > Prime time. When it comes to spawning qemu process and > relabelling all the devices it's going to touch, there's inherent > race with other applications in the system (e.g. udev). Instead > of trying convincing udev to not touch

Re: [libvirt] [PATCH v2 08/21] qemu: Spawn qemu under mount namespace

2016-12-12 Thread Daniel P. Berrange
On Mon, Dec 12, 2016 at 10:55:55AM +, Daniel P. Berrange wrote: > On Wed, Dec 07, 2016 at 09:36:15AM +0100, Michal Privoznik wrote: > > Prime time. When it comes to spawning qemu process and > > relabelling all the devices it's going to touch, there's inherent > > race with other applications

Re: [libvirt] [PATCH v2 08/21] qemu: Spawn qemu under mount namespace

2016-12-12 Thread Daniel P. Berrange
On Wed, Dec 07, 2016 at 09:36:15AM +0100, Michal Privoznik wrote: > Prime time. When it comes to spawning qemu process and > relabelling all the devices it's going to touch, there's inherent > race with other applications in the system (e.g. udev). Instead > of trying convincing udev to not touch

[libvirt] [PATCH v2 08/21] qemu: Spawn qemu under mount namespace

2016-12-07 Thread Michal Privoznik
Prime time. When it comes to spawning qemu process and relabelling all the devices it's going to touch, there's inherent race with other applications in the system (e.g. udev). Instead of trying convincing udev to not touch libvirt managed devices, we can create a separate mount namespace for the