Re: [lxc-devel] Nested namespaces

2014-09-28 Thread Riya Khanna
Thanks! Does this mean that the new namespaces will be subject to new cgroups quota (as defined by the new namespaces) or parent namespaces cgroups apply to the child as well? Thanks, Riya > On Sep 28, 2014, at 11:24 PM, Stéphane Graber wrote: > >> On Sun, Sep 28, 2014 at 06:31:18PM -0500,

Re: [lxc-devel] Nested namespaces

2014-09-28 Thread Stéphane Graber
On Sun, Sep 28, 2014 at 06:31:18PM -0500, riya khanna wrote: > Hi, > > As I understand, kernel currently supports six namespaces. Is it > possible for a process inside a container (running with different > namespaces - all six) to escape the container by unshare() 'ing ? > > Would this be differe

[lxc-devel] Nested namespaces

2014-09-28 Thread riya khanna
Hi, As I understand, kernel currently supports six namespaces. Is it possible for a process inside a container (running with different namespaces - all six) to escape the container by unshare() 'ing ? Would this be different for privileged/unprivileged containers? Thanks, Riya __

[lxc-devel] Haskell LXC API bindings

2014-09-28 Thread Nickolay Kudasov
Hello, list! I am pleased to announce Haskell LXC API bindings. Bindings are represented by 2 cabal packages: lxc and bindings-lxc . lxc — High level Haskell bindings