[Devel] [PATCH hci-8.1 0/2] ve/fs: allow host to go over container mount limit

[Pavel Tikhomirov]

Since 22.4 CRIU fails to dump a container which is close to its mount
limit:

  Error (criu/mount.c:1740): mnt: Unable to unshare a mount namespace: Cannot allocate memory

To get access to overmounted mounts, CRIU (in ve0) copies the container
mount namespace. The copied mounts are owned by and charged to the
container, and now the container limit is also checked for them, so the
host is restricted by the container limit.

Patch 1 relaxes the limit for ve0 (still counting, as for pseudosuper),
patch 2 adds a selftest for it.

https://virtuozzo.atlassian.net/browse/VSTOR-147661

Signed-off-by: Pavel Tikhomirov <ptikhomirov at virtuozzo.com>
---
Pavel Tikhomirov (2):
      ve/fs: allow host to go over limit of container mount namespace
      selftests/ve: check that host can go over container mount limit

 fs/namespace.c                                     |  3 +-
 .../selftests/ve/ve_mount_accounting_test.c        | 37 ++++++++++++++++++++++
 2 files changed, 39 insertions(+), 1 deletion(-)
---
base-commit: ca54f152160587a74ff17cb52feef16f7b9d4e2b
change-id: 20260928-b4-ve0-mnt-limit-5bdc176203a4

Best regards,
--  
Pavel Tikhomirov <ptikhomirov at virtuozzo.com>