[Devel] Re: [PATCH] [RFC] c/r: Add UTS support

[Dan Smith]

DL> Assuming you have a process and this one unshared the network 100
DL> times and each time opens a socket, how do you checkpoint these
DL> namespaces ?

>> What's the argument for depending on userspace to set this up?
>> 
DL> Maybe, CR of the namespaces is more complicate topic than it looks
DL> like and the CR itself is big enough to not complicate
DL> things. IMHO, I would recommend as the first step to forbid the
DL> unshare inside a container and let the container implementation to
DL> save the configuration with the statefile in order to recreate it
DL> at the restart

I think what you're suggesting here is some sort of check to make sure
we don't allow checkpointing a process with nested namespaces... is
that correct?  If so, I agree.

-- 
Dan Smith
IBM Linux Technology Center
email: danms at us.ibm.com

_______________________________________________
Containers mailing list
Containers at lists.linux-foundation.org
https://lists.linux-foundation.org/mailman/listinfo/containers