[Devel] [PATCH RH7] ve/cgroup: hide ve and ub cgroups in CT

[Cyrill Gorcunov]

On Mon, Jan 15, 2018 at 02:50:10PM +0300, Pavel Tikhomirov wrote:
> Reasons:
> 1) We don't need to show these cgroups in CT, they are vz specific,
> and nobody should use them inside.
> 2) Docker from v17.11 checks that all cgroups are mounted, but we
> don't mount beancounter and ve, thus docker fails.
> 
> Still show ve and ub for pseudosuper, so that these change does not
> influence criu. I checked that with these patch c/r of container works
> fine and values in ve cgroup files persist.
> 
> Docker ct starts fine after these change.
> 
> https://jira.sw.ru/browse/PSBM-80421
> 
> Signed-off-by: Pavel Tikhomirov <ptikhomirov at virtuozzo.com>
Reviewed-by: Cyrill Gorcunov <gorcunov at openvz.org>

Lets move it to testing. It should not break criu, neither libvzctl
which does access from the root namespace.