Ah the problem was that /etc/mtab was a file, and /run/netns did not show up in it so mount refused to act on it. Changing /etc/mtab to a symlink to /proc/mounts allows me to make those rslave.
So it should suffice for lxc to always turn all of / into MS_SLAVE. It currently does so only when / is MS_SHARED. ** Changed in: iproute (Ubuntu) Status: Confirmed => Invalid ** Summary changed: - network namespace error + /run/netns/* gets umounted on the host when a container starts -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1307829 Title: /run/netns/* gets umounted on the host when a container starts To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/iproute/+bug/1307829/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs