On Tue, Jun 06, 2017 at 01:23:55PM +0300, Cyrill Gorcunov wrote: > On Tue, Jun 06, 2017 at 02:00:32PM +0400, Stanislav Kinsburskiy wrote: > > It's good enough for us. It won't work properly in case of setting rules by > > joining container network namespace without VE cgroup, but it's acceptable, > > because proper fix needs a lot of backporting. > > > > https://jira.sw.ru/browse/PSBM-43609 > > > > Signed-off-by: Stanislav Kinsburskiy <skinsbur...@virtuozzo.com> > Reviewed-by: Cyrill Gorcunov <gorcu...@openvz.org>
This should do a trick on one-level user-ns at least. Should be enough for now but in longterm perspective we might still need to backport the complete user-ns rework as in vanilla. Cyrill _______________________________________________ Devel mailing list Devel@openvz.org https://lists.openvz.org/mailman/listinfo/devel