Ah the problem was that /etc/mtab was a file, and /run/netns did not show up in it so mount refused to act on it. Changing /etc/mtab to a symlink to /proc/mounts allows me to make those rslave.
So it should suffice for lxc to always turn all of / into MS_SLAVE. It currently does so only when / is MS_SHARED. ** Changed in: iproute (Ubuntu) Status: Confirmed => Invalid ** Summary changed: - network namespace error + /run/netns/* gets umounted on the host when a container starts -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1307829 Title: /run/netns/* gets umounted on the host when a container starts To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/iproute/+bug/1307829/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs