[Devel] [PATCH rh7] fs: make overlayfs disabled in CT by default (v2)

[Vladimir Davydov]

On Thu, Jul 07, 2016 at 01:00:36PM -0700, Maxim Patlasov wrote:
> Overlayfs is in "TECH PREVIEW" state right now. Letting CT users to freely
> mount and exercise overlayfs, we risk to have the whole node crashed.
> 
> Let's disable it for CT users by default. Customers who need it (e.g. to
> run Docker in CT) may enable it like this:
> 
> # echo 1 > /proc/sys/fs/experimental_fs_enable
> 
> The patch is a temporary (awkward) workaround until we make overlayfs
> production-ready. Then we'll roll back the patch.
> 
> Changed in v2:
>  - let's only leave system-wide sysctl for permitting overlayfs; the sysctl
>    is "rw" in ve0, but "ro" inside CT.
> 
> https://jira.sw.ru/browse/PSBM-47981

Reviewed-by: Vladimir Davydov <vdavydov at virtuozzo.com>