[Devel] [PATCH] hook_ct: mount devtmpfs in CT

2014-01-22 Thread Andrey Vagin
All modern distributions require devtmpfs in /dev. devtmpfs can't be mounted from userns. This patch bind-mounts the host /dev. It's secure, because permissions are handled according with uid and gid maps for the user namespace. This patch removes old hacks about devices. They are not required

Re: [Devel] [PATCH] hook_ct: mount devtmpfs in CT

2014-01-22 Thread Kir Kolyshkin
On 01/22/2014 02:37 AM, Andrey Vagin wrote: All modern distributions require devtmpfs in /dev. devtmpfs can't be mounted from userns. This patch bind-mounts the host /dev. It's secure, because permissions are handled according with uid and gid maps for the user namespace. This patch removes old

Re: [Devel] [PATCH] hook_ct: mount devtmpfs in CT

2014-01-22 Thread Andrew Vagin
On Wed, Jan 22, 2014 at 05:12:12PM -0800, Kir Kolyshkin wrote: On 01/22/2014 02:37 AM, Andrey Vagin wrote: All modern distributions require devtmpfs in /dev. devtmpfs can't be mounted from userns. This patch bind-mounts the host /dev. It's secure, because permissions are handled according with