Re: [libvirt] [RFC PATCH 2/6] LXC: introduce virLXCControllerSetupUserns and lxcContainerSetUserns

2013-03-13 Thread Gao feng
On 2013/03/13 18:57, Daniel P. Berrange wrote: > On Mon, Mar 11, 2013 at 02:26:48PM +0800, Gao feng wrote: >> This patch introduces new helper function >> virLXCControllerSetupUserns, in this function, >> we set the files uid_map and gid_map of process >> libvirt_lxc. >> >> lxcContainerSetUserns is

Re: [libvirt] [RFC PATCH 2/6] LXC: introduce virLXCControllerSetupUserns and lxcContainerSetUserns

2013-03-13 Thread Daniel P. Berrange
On Mon, Mar 11, 2013 at 02:26:48PM +0800, Gao feng wrote: > This patch introduces new helper function > virLXCControllerSetupUserns, in this function, > we set the files uid_map and gid_map of process > libvirt_lxc. > > lxcContainerSetUserns is used for creating cred for > tasks running in contain

Re: [libvirt] [RFC PATCH 2/6] LXC: introduce virLXCControllerSetupUserns and lxcContainerSetUserns

2013-03-10 Thread Gao feng
On 2013/03/11 14:26, Gao feng wrote: > This patch introduces new helper function > virLXCControllerSetupUserns, in this function, > we set the files uid_map and gid_map of process > libvirt_lxc. > Oops,not libvirt_lxc, it's the init task of container. > lxcContainerSetUserns is used for creating

[libvirt] [RFC PATCH 2/6] LXC: introduce virLXCControllerSetupUserns and lxcContainerSetUserns

2013-03-10 Thread Gao feng
This patch introduces new helper function virLXCControllerSetupUserns, in this function, we set the files uid_map and gid_map of process libvirt_lxc. lxcContainerSetUserns is used for creating cred for tasks running in container. Since after setuid/setgid, we may be a new user. This patch calls lx