Re: [PATCH 5/7] cgroup: mount cgroupns-root when inside non-init cgroupns

2015-12-09 Thread Tejun Heo
Hello, Serge. On Tue, Dec 08, 2015 at 05:21:24PM -0600, Serge E. Hallyn wrote: > > Heh, is kernfs_obtain_root() the right name? Maybe > > kernfs_node_to_inode()? > > kernfs_node_to_dentry? > > This would presumably make the question of whether to pass in a namespace > moot? Sounds good.

Re: [PATCH 5/7] cgroup: mount cgroupns-root when inside non-init cgroupns

2015-12-09 Thread Tejun Heo
Hello, Serge. On Tue, Dec 08, 2015 at 05:21:24PM -0600, Serge E. Hallyn wrote: > > Heh, is kernfs_obtain_root() the right name? Maybe > > kernfs_node_to_inode()? > > kernfs_node_to_dentry? > > This would presumably make the question of whether to pass in a namespace > moot? Sounds good.

Re: [PATCH 5/7] cgroup: mount cgroupns-root when inside non-init cgroupns

2015-12-08 Thread Serge E. Hallyn
On Tue, Dec 08, 2015 at 11:20:40AM -0500, Tejun Heo wrote: > Hello, > > On Mon, Dec 07, 2015 at 05:06:20PM -0600, serge.hal...@ubuntu.com wrote: > > fs/kernfs/mount.c | 74 > > > > include/linux/kernfs.h |2 ++ > > kernel/cgroup.c

Re: [PATCH 5/7] cgroup: mount cgroupns-root when inside non-init cgroupns

2015-12-08 Thread Serge E. Hallyn
On Tue, Dec 08, 2015 at 11:20:40AM -0500, Tejun Heo wrote: > Hello, > > On Mon, Dec 07, 2015 at 05:06:20PM -0600, serge.hal...@ubuntu.com wrote: > > fs/kernfs/mount.c | 74 > > > > include/linux/kernfs.h |2 ++ > > kernel/cgroup.c

Re: [PATCH 5/7] cgroup: mount cgroupns-root when inside non-init cgroupns

2015-12-08 Thread Tejun Heo
Hello, On Mon, Dec 07, 2015 at 05:06:20PM -0600, serge.hal...@ubuntu.com wrote: > fs/kernfs/mount.c | 74 > > include/linux/kernfs.h |2 ++ > kernel/cgroup.c| 39 - > 3 files changed, 114

Re: [PATCH 5/7] cgroup: mount cgroupns-root when inside non-init cgroupns

2015-12-08 Thread Serge E. Hallyn
On Tue, Dec 08, 2015 at 11:20:40AM -0500, Tejun Heo wrote: > Hello, > > On Mon, Dec 07, 2015 at 05:06:20PM -0600, serge.hal...@ubuntu.com wrote: > > fs/kernfs/mount.c | 74 > > > > include/linux/kernfs.h |2 ++ > > kernel/cgroup.c

Re: [PATCH 5/7] cgroup: mount cgroupns-root when inside non-init cgroupns

2015-12-08 Thread Tejun Heo
Hello, On Mon, Dec 07, 2015 at 05:06:20PM -0600, serge.hal...@ubuntu.com wrote: > fs/kernfs/mount.c | 74 > > include/linux/kernfs.h |2 ++ > kernel/cgroup.c| 39 - > 3 files changed, 114

Re: [PATCH 5/7] cgroup: mount cgroupns-root when inside non-init cgroupns

2015-12-08 Thread Serge E. Hallyn
On Tue, Dec 08, 2015 at 11:20:40AM -0500, Tejun Heo wrote: > Hello, > > On Mon, Dec 07, 2015 at 05:06:20PM -0600, serge.hal...@ubuntu.com wrote: > > fs/kernfs/mount.c | 74 > > > > include/linux/kernfs.h |2 ++ > > kernel/cgroup.c

[PATCH 5/7] cgroup: mount cgroupns-root when inside non-init cgroupns

2015-12-07 Thread serge . hallyn
From: Aditya Kali This patch enables cgroup mounting inside userns when a process as appropriate privileges. The cgroup filesystem mounted is rooted at the cgroupns-root. Thus, in a container-setup, only the hierarchy under the cgroupns-root is exposed inside the container. This allows container

[PATCH 5/7] cgroup: mount cgroupns-root when inside non-init cgroupns

2015-12-07 Thread serge . hallyn
From: Aditya Kali This patch enables cgroup mounting inside userns when a process as appropriate privileges. The cgroup filesystem mounted is rooted at the cgroupns-root. Thus, in a container-setup, only the hierarchy under the cgroupns-root is exposed inside the

[PATCH 5/7] cgroup: mount cgroupns-root when inside non-init cgroupns

2015-11-27 Thread serge . hallyn
From: Aditya Kali This patch enables cgroup mounting inside userns when a process as appropriate privileges. The cgroup filesystem mounted is rooted at the cgroupns-root. Thus, in a container-setup, only the hierarchy under the cgroupns-root is exposed inside the container. This allows container

[PATCH 5/7] cgroup: mount cgroupns-root when inside non-init cgroupns

2015-11-27 Thread serge . hallyn
From: Aditya Kali This patch enables cgroup mounting inside userns when a process as appropriate privileges. The cgroup filesystem mounted is rooted at the cgroupns-root. Thus, in a container-setup, only the hierarchy under the cgroupns-root is exposed inside the