[CRIU] Docker User Namespaces + CRIU

[Andrei Vagin]

On Tue, Oct 04, 2016 at 08:40:42AM -0700, Andrei Vagin wrote:
> On Tue, Oct 4, 2016 at 2:58 AM, Pavel Emelyanov <xemul at virtuozzo.com> wrote:
> > On 09/30/2016 05:42 PM, Ross Boucher wrote:
> >> hmm. That path should be just pointing to /dev/null.
> >
> > Then the "--ext-mount-map auto" ? :)
> 
> I think it is a bad idea to use "--ext-mount-map auto"  here. It may
> solve this problem, but add other side effects.
> 
> I remember runc has a code to handle ext mounts, so we need to add
> logic about these mounts too.

Hi Ross,

I think I've fixed CRIU and runc to dump/restore containers with userns.
Clould you try out how it works for you?

https://github.com/opencontainers/runc/pull/1110
https://github.com/avagin/criu/tree/docker

Thanks,
Andrei
> 
> >
> >> On Fri, Sep 30, 2016 at 5:59 AM Pavel Emelyanov <xemul at virtuozzo.com <mailto:xemul at virtuozzo.com>> wrote:
> >>
> >>     On 09/28/2016 05:18 PM, Ross Boucher wrote:
> >>     > Hey all,
> >>     >
> >>     > I wanted to start playing around with user namespace support in Docker as part of seeing where checkpoint/restore currently works and doesn't work. Turns out things don't work currently, here's a checkpoint log:
> >>     >
> >>     > https://gist.github.com/boucher/768a74b236470e3d28a49990fe2f1665
> >>
> >>     Error (mount.c:716): mnt: 66:./proc/sched_debug
> >>
> >>     It's again the lack of --ext-mount-map option.
> >>
> >>     > Any thoughts on what might be going wrong?
> >>     >
> >>     > -Ross
> >>     >
> >>     >
> >>     > _______________________________________________
> >>     > CRIU mailing list
> >>     > CRIU at openvz.org <mailto:CRIU at openvz.org>
> >>     > https://lists.openvz.org/mailman/listinfo/criu
> >>     >
> >>
> >
> > _______________________________________________
> > CRIU mailing list
> > CRIU at openvz.org
> > https://lists.openvz.org/mailman/listinfo/criu
> _______________________________________________
> CRIU mailing list
> CRIU at openvz.org
> https://lists.openvz.org/mailman/listinfo/criu