Re: [systemd-devel] [PATCH] loopback setup in unprivileged containers

2015-02-03 Thread Lennart Poettering
On Mon, 29.12.14 15:14, Tom Gundersen (t...@jklm.no) wrote: > On Mon, Dec 29, 2014 at 2:34 PM, Lennart Poettering > wrote: > > On Mon, 29.12.14 09:07, Matthias Urlichs (matth...@urlichs.de) wrote: > > > >> > On Sun, Dec 28, 2014 at 6:18 PM, Stéphane Graber > >> > wrote: > >> > > My host system d

Re: [systemd-devel] [PATCH] loopback setup in unprivileged containers

2014-12-29 Thread Stéphane Graber
On Mon, Dec 29, 2014 at 02:32:36PM +0100, Lennart Poettering wrote: > On Sun, 28.12.14 18:18, Stéphane Graber (stephane.gra...@canonical.com) wrote: > > > My host system doesn't have nspawn so I can't easily test it this way, > > but it was my understanding that nspawn didn't support user namespac

Re: [systemd-devel] [PATCH] loopback setup in unprivileged containers

2014-12-29 Thread Stéphane Graber
On Mon, Dec 29, 2014 at 02:43:37PM +0100, Martin Pitt wrote: > Hey Tom, > > Tom Gundersen [2014-12-29 2:22 +0100]: > > The bug should now be fixed in git. Please let me know if you still > > experience problems. > > Nice! I confirm that the "systemd spins 100% CPU for about one > minute" when bo

Re: [systemd-devel] [PATCH] loopback setup in unprivileged containers

2014-12-29 Thread Matthias Urlichs
Hi, Lennart Poettering: > I am open to adding support for this, but I think the allocation of > the UID ranges should really happen automatically, and not be > something the admin has to manually assign. > > Which means we'd enter dynamic UID allocation terroritory, and that > opens a huge can of

Re: [systemd-devel] [PATCH] loopback setup in unprivileged containers

2014-12-29 Thread Tom Gundersen
On Mon, Dec 29, 2014 at 2:34 PM, Lennart Poettering wrote: > On Mon, 29.12.14 09:07, Matthias Urlichs (matth...@urlichs.de) wrote: > >> > On Sun, Dec 28, 2014 at 6:18 PM, Stéphane Graber >> > wrote: >> > > My host system doesn't have nspawn so I can't easily test it this way, >> > > but it was my

Re: [systemd-devel] [PATCH] loopback setup in unprivileged containers

2014-12-29 Thread Martin Pitt
Hey Tom, Tom Gundersen [2014-12-29 2:22 +0100]: > The bug should now be fixed in git. Please let me know if you still > experience problems. Nice! I confirm that the "systemd spins 100% CPU for about one minute" when booting an user level container is indeed fixed now. I can't test it much furth

Re: [systemd-devel] [PATCH] loopback setup in unprivileged containers

2014-12-29 Thread Lennart Poettering
On Mon, 29.12.14 09:07, Matthias Urlichs (matth...@urlichs.de) wrote: > > On Sun, Dec 28, 2014 at 6:18 PM, Stéphane Graber > > wrote: > > > My host system doesn't have nspawn so I can't easily test it this way, > > > but it was my understanding that nspawn didn't support user namespaces > > > and

Re: [systemd-devel] [PATCH] loopback setup in unprivileged containers

2014-12-29 Thread Lennart Poettering
On Sun, 28.12.14 18:18, Stéphane Graber (stephane.gra...@canonical.com) wrote: > My host system doesn't have nspawn so I can't easily test it this way, > but it was my understanding that nspawn didn't support user namespaces > and uid/gid mappings which is what I'm working with here. Note that sy

Re: [systemd-devel] [PATCH] loopback setup in unprivileged containers

2014-12-29 Thread Matthias Urlichs
Hi, Tom Gundersen: > On Sun, Dec 28, 2014 at 6:18 PM, Stéphane Graber > wrote: > > My host system doesn't have nspawn so I can't easily test it this way, > > but it was my understanding that nspawn didn't support user namespaces > > and uid/gid mappings which is what I'm working with here. > > I

Re: [systemd-devel] [PATCH] loopback setup in unprivileged containers

2014-12-28 Thread Tom Gundersen
On Sun, Dec 28, 2014 at 11:56 PM, Tom Gundersen wrote: > On Sun, Dec 28, 2014 at 6:18 PM, Stéphane Graber > wrote: >> My host system doesn't have nspawn so I can't easily test it this way, >> but it was my understanding that nspawn didn't support user namespaces >> and uid/gid mappings which is w

Re: [systemd-devel] [PATCH] loopback setup in unprivileged containers

2014-12-28 Thread Tom Gundersen
On Sun, Dec 28, 2014 at 6:18 PM, Stéphane Graber wrote: > My host system doesn't have nspawn so I can't easily test it this way, > but it was my understanding that nspawn didn't support user namespaces > and uid/gid mappings which is what I'm working with here. Indeed, that is not supported by ns

Re: [systemd-devel] [PATCH] loopback setup in unprivileged containers

2014-12-28 Thread Tom Gundersen
Hi Martin, On Sat, Dec 27, 2014 at 7:27 PM, Martin Pitt wrote: > I'm forwarding a patch for the loopback setup from Stéphane. I already > pushed one part of it as > http://cgit.freedesktop.org/systemd/systemd/commit/?id=58a489c > which is trivial and obvious, but the other part isn't. Thanks fo

[systemd-devel] [PATCH] loopback setup in unprivileged containers

2014-12-27 Thread Martin Pitt
Hello all, I'm forwarding a patch for the loopback setup from Stéphane. I already pushed one part of it as http://cgit.freedesktop.org/systemd/systemd/commit/?id=58a489c which is trivial and obvious, but the other part isn't. Thanks, Martin - Forwarded message from Stéphane Graber -