On Mon, 2012-10-22 at 09:12 -0500, Serge Hallyn wrote:
> Quoting Serge Hallyn (serge.hal...@canonical.com):
> > Quoting Michael H. Warfield (m...@wittsend.com):
> > > On Sun, 2012-10-21 at 14:49 -0500, Serge Hallyn wrote:
> > > > Quoting Michael H. Warfield (m...@wittsend.com):
> > > > > Serge,
> > > > > 
> > > 
> > > ...
> > > 
> > > > > Short of building a custom systemd, I don't know how to fix that 
> > > > > problem
> > > > > and I suspect this OP is going to run into this same thing (container
> > > > > taking over host's console) and might explain some of what he's 
> > > > > seeing.
> > > > > Several of these look like they could cause problems (like /dev/pts in
> > > > > there).  I've really reached an impasse at getting systemd (at least
> > > > > Fedora 16 and 17) to work in a container without screwing up the host.
> > > > > Prohibiting mounts entirely in the container might work but I suspect
> > > > > (having read some systemd error messages) systemd is going to have 
> > > > > some
> > > > > serious heartburn there.
> > > > > 
> > > > > Thoughts?
> > > > 
> > > > IIRC, simply having apparmor(/selinux) refuse the mount of /dev by the
> > > > container should work, i.e. systemd was not going to fail as a result.
> > > 
> > > Hopefully, you've seen the message from Kay Sievers cc'ed to this list
> > > from my post to the systemd-devel list.  Looks like they have a
> > > mechanism in place to do this...
> > > 
> > > http://www.freedesktop.org/wiki/Software/systemd/ContainerInterface
> > 
> > Saw the email, haven't yet read the page, thanks.

> So based on that page, what we do (set 'container=lxc') should already be
> sufficient.

For that step yes.  I'm hearing that they also need tmpfs mounted
on /dev, for some reason, and then bind mounting appropriate ttys and
creating devices.  It's mentioned on that page and mentioned in another
reply.  I'm going down the list of mounts that are detailed out now.
Several of those steps (UUID and HOSTNAME) seem optional.

> -serge

Regards,
Mike
-- 
Michael H. Warfield (AI4NB) | (770) 985-6132 |  m...@wittsend.com
   /\/\|=mhw=|\/\/          | (678) 463-0932 |  http://www.wittsend.com/mhw/
   NIC whois: MHW9          | An optimist believes we live in the best of all
 PGP Key: 0x674627FF        | possible worlds.  A pessimist is sure of it!

Attachment: signature.asc
Description: This is a digitally signed message part

------------------------------------------------------------------------------
Everyone hates slow websites. So do we.
Make your web apps faster with AppDynamics
Download AppDynamics Lite for free today:
http://p.sf.net/sfu/appdyn_sfd2d_oct
_______________________________________________
Lxc-users mailing list
Lxc-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/lxc-users

Reply via email to