Re: [PATCH] kernel: allow reboots from user_ns

2013-02-14 Thread Glauber Costa
On 02/14/2013 06:58 PM, Eric W. Biederman wrote: >> I didn't see that, and using Linus' master my stop container scripts >> > stopped working after I started using Eric's userns... > The patch has been sitting in my for-next branch for quite a while > just waiting for the merge window. > > Eric Fi

Re: [PATCH] kernel: allow reboots from user_ns

2013-02-14 Thread Eric W. Biederman
Glauber Costa writes: > On 02/14/2013 06:27 PM, Serge Hallyn wrote: >> Quoting Glauber Costa (glom...@parallels.com): >>> Reboot support for pid namespaces is already implemented and it works >>> well. However, in most containers the tasks will join all namespaces, >>> including the now supported

Re: [PATCH] kernel: allow reboots from user_ns

2013-02-14 Thread Glauber Costa
On 02/14/2013 06:27 PM, Serge Hallyn wrote: > Quoting Glauber Costa (glom...@parallels.com): >> Reboot support for pid namespaces is already implemented and it works >> well. However, in most containers the tasks will join all namespaces, >> including the now supported user namespace. In that situa

Re: [PATCH] kernel: allow reboots from user_ns

2013-02-14 Thread Serge Hallyn
Quoting Glauber Costa (glom...@parallels.com): > Reboot support for pid namespaces is already implemented and it works > well. However, in most containers the tasks will join all namespaces, > including the now supported user namespace. In that situation, we will > fail the "capable" test and won't

Re: [PATCH] kernel: allow reboots from user_ns

2013-02-14 Thread Daniel Lezcano
On 02/14/2013 12:56 PM, Glauber Costa wrote: > Reboot support for pid namespaces is already implemented and it works > well. However, in most containers the tasks will join all namespaces, > including the now supported user namespace. In that situation, we will > fail the "capable" test and won't b

[PATCH] kernel: allow reboots from user_ns

2013-02-14 Thread Glauber Costa
Reboot support for pid namespaces is already implemented and it works well. However, in most containers the tasks will join all namespaces, including the now supported user namespace. In that situation, we will fail the "capable" test and won't be able to reboot. The proposed solution is to allow