[CRIU] Restore into different cgroups

[Tycho Andersen]

On Wed, Aug 13, 2014 at 02:58:47PM +0000, Serge Hallyn wrote:
> Quoting Tycho Andersen (tycho.andersen at canonical.com):
> >
> > I see, combined with the patch Pavel sent this morning and a good
> > sleep this makes more sense now. Pavel, are you implementing this or
> > would you like me to?
> > 
> > The only other question I have is what to do about cgroups where we
> > don't want to reset the root (e.g. the user.slice systemd groups,
> > presumably).
> 
> Why wouldn't we want to reset the root there?  If I restart a system
> container (one auto-started by root), then the restarted container
> should not be inside my systemd cgroup.  Else if I get forcibly
> logged off, the container will be killed.

I don't think will be (unless I am missing something). CRIU will put
it in the systemd group that it was in when it was dumped. Except if
we change the root, then it won't be in this systemd group (e.g.
/user/1000.user/10.session) but instead some other cgroup /newroot,
which means that any future restrictions applied to
/user/1000.user/10.session will miss this container.

Tycho