Re: [lxc-users] Unprivileged account(s)

2019-07-24 Thread Fajar A. Nugraha
On Thu, Jul 25, 2019 at 6:30 AM Narcis Garcia wrote: > Hello, I've been creating LXC containers in a dedicated user account. > I need to know if this is a good practice, instead of dedicating > different user account per each unprivileged container. > > It depends on what you're trying to achieve

[lxc-users] Unprivileged account(s)

2019-07-24 Thread Narcis Garcia
Hello, I've been creating LXC containers in a dedicated user account. I need to know if this is a good practice, instead of dedicating different user account per each unprivileged container. Thank you. -- __ I'm using this express-made address because personal addresses aren't masked e

Re: [lxc-users] confusion with ``pam_cgroup`` and ``pam_cgfs`` for unprivileged containers

2019-07-24 Thread Serge E. Hallyn
On Wed, Jul 24, 2019 at 08:31:35PM +0200, Lukas Pirl wrote: > Dear all, > > I struggle understanding the difference between ``pam_cgroup`` > and ``pam_cgfs`` and their respective relevance for running unprivileged > containers. > > For what I understand, ``pam_cgroup`` puts (existing processes of

[lxc-users] confusion with ``pam_cgroup`` and ``pam_cgfs`` for unprivileged containers

2019-07-24 Thread Lukas Pirl
Dear all, I struggle understanding the difference between ``pam_cgroup`` and ``pam_cgfs`` and their respective relevance for running unprivileged containers. For what I understand, ``pam_cgroup`` puts (existing processes of users upon login and all future processes of) users in "their" writable c