> Von: lxc-users [mailto:lxc-users-boun...@lists.linuxcontainers.org] Im 
> Auftrag
>
> Hi Andrey,
>
> This seems to be the perfect solution, I can just copy over to the path like
> proc/12423/root/usr/local, without worrying about snapshot clone uses
> delta0, rather than root in the container folder. After I moved the file, I 
> still
> need to update the file permissions and ownership though.

What about packing the files with e.g. cpio on the host and injecting them via 
pipe to ns-attached cpio-process running in guest scope.

This also works around guest to host privilege escalation if malicious guest 
content moves around fs-tree parts while copying.

Roman

> On Fri, Apr 24, 2015 at 2:43 PM, Andrey <anrdae...@yandex.ru> wrote:
>
>
>       Greetings, Dan Shi.
>
>       Saturday, April 25, 2015, 00:37:27 you wrote:
>
>       DS> I need to deploy some config files, e.g., .ssh config,  key file 
> etc, 
> to
>       DS> container. I can copy the files to the absolute path in  container,
> e.g.,
>       DS> /usr/local/containers/base/rootfs/root/.ssh/
>
>       DS> The  problem is that, I have to change the owner and permission
> of the
>       DS> files  manually. I'm wondering if there is a better way to do it, 
> like
> scp?
>
>       ls -l /proc/$(lxc-info -n $NAME -p -H)/
>
>       Courtesy @stgraber
>
>
>       --
>       Sincerely,
>       Andrey
>       Saturday, April 25, 2015 00:41:52
>
>       Sorry for my terrible english...
>
>       _______________________________________________
>       lxc-users mailing list
>       lxc-users@lists.linuxcontainers.org
>       http://lists.linuxcontainers.org/listinfo/lxc-users
>

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
lxc-users mailing list
lxc-users@lists.linuxcontainers.org
http://lists.linuxcontainers.org/listinfo/lxc-users

Reply via email to