[Devel] [PATCH RH7] cgroup: fix mangle root in CT

Cyrill Gorcunov gorcunov at virtuozzo.com
Wed Aug 19 00:56:09 PDT 2015


On Wed, Aug 19, 2015 at 10:49:24AM +0300, Pavel Tikhomirov wrote:
> 
> 
> On 08/19/2015 10:35 AM, Pavel Tikhomirov wrote:
> >cgroups with depth level more than 2 were not mangled inside a
> >container, that might caused problems with docker, docker were able
> >to see in /proc/self/cgroup paths relative to host.
> >
> >PSBM-38634
> >
> >But it is not docker specific:
> >
> >CT-103 /# mkdir /sys/fs/cgroup/devices/test.slice
> >CT-103 /# mkdir /sys/fs/cgroup/devices/test.slice/test.scope
> >CT-103 /# sleep 1000&
> >[1] 578
> >CT-103 /# echo 578 > /sys/fs/cgroup/devices/test.slice/test.scope/tasks
> >
> >with patch:
> >
> >CT-103 /# cat /proc/578/cgroup
> >16:ve:/
> >15:hugetlb:/
> >14:perf_event:/
> >12:net_cls:/
> >11:freezer:/
> >10:devices:/test.slice/test.scope
> >6:name=systemd:/user-0.slice/session-c109.scope
> 
> The other thing, I'm not yet sure how to fix now, is that such process
> somehow gets out of ve-103.slice and is in
> /sys/fs/cgroup/systemd/user-0.slice/session-c109.scope if we look from host.
> 

I'll take a look.



More information about the Devel mailing list