From mboxrd@z Thu Jan 1 00:00:00 1970 From: Dave Quigley Subject: Re: Mirror a file system on the fly Date: Fri, 19 Aug 2005 22:42:04 -0400 Message-ID: <4306987C.6040504@ic.sunysb.edu> References: <3e32b777050818124045dcd1f0@mail.gmail.com> <1124395116.5222.396.camel@localhost> <3e32b77705081813273f887aef@mail.gmail.com> <1124398992.5222.404.camel@localhost> <3e32b777050819082723b0f8d6@mail.gmail.com> Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7BIT Cc: Ram Pai , linux-fsdevel@vger.kernel.org Return-path: Received: from mta8.srv.hcvlny.cv.net ([167.206.4.203]:15517 "EHLO mta8.srv.hcvlny.cv.net") by vger.kernel.org with ESMTP id S932631AbVHTCmD (ORCPT ); Fri, 19 Aug 2005 22:42:03 -0400 Received: from [127.0.0.1] (ool-44c29f76.dyn.optonline.net [68.194.159.118]) by mta8.srv.hcvlny.cv.net (Sun Java System Messaging Server 6.2-2.06 (built May 11 2005)) with ESMTP id <0ILI00G4025Y1U75@mta8.srv.hcvlny.cv.net> for linux-fsdevel@vger.kernel.org; Fri, 19 Aug 2005 22:42:01 -0400 (EDT) In-reply-to: <3e32b777050819082723b0f8d6@mail.gmail.com> To: Dave Schwartz Sender: linux-fsdevel-owner@vger.kernel.org List-Id: linux-fsdevel.vger.kernel.org Dave Schwartz wrote: >Ram, > >Your code snippet seems to work great as discussed. Thanks. :-) >However, my requirement is slightly different. What I also want is >that any file created from the mirrored/cloned file-system must not be >available in the parent file system. > >Gracias, >decebel > > >On 8/18/05, Ram Pai wrote: > > >>On Thu, 2005-08-18 at 13:27, Dave Schwartz wrote: >> >> >>>Hi Ram, >>>Thanks for the inputs. I was going over the man pages describing the >>>clone system call and its option of CLONE_NEWNS. Could understand the >>>description only in parts. >>> >>>The man page suggests that this flag when set, the cloned child is >>>started in a new name space, initialized with a copy of the parent. >>>Now does that mean, a program like a shell when cloned with >>>CLONE_NEWNS set, will have a copy of file hierarchy of the underlying >>>parent process? >>> >>> >>Yes the child process will see an exact copy of all the mounts of >>various filesystems as that of the parent. However if you mount/unmount >>any filesystems in the child, the same will not be mounted/unmounted in >>the parent and vice-versa. Each has its individual view of the >>the filesystem heirarchy. >> >>Try the following program that clones off a child process with a mirror >>namespace and gives you a bash prompt. Try mounting and unmounting >>in this bash prompt and see if the same is visible in a totally >>different window. >> >> >>#include >>#include >>#include >> >>char somemem[4096]; >> >>int myfunc(){ >> system("bash"); >>} >> >>int >>main(int argc, char *argv[]) >>{ >> if(clone(myfunc, somemem, CLONE_NEWNS|SIGCHLD, NULL)) { >> wait(NULL); >> } else { >> printf("clone failed\n"); >> } >> printf("exit\n"); >>} >> >> >>Hope this helps, >>RP >> >> >> >> >> >> >>>Gracias, >>>decebel >>> >>> >>> >>>On 8/19/05, Ram Pai wrote: >>> >>> >>>>On Thu, 2005-08-18 at 12:40, Dave Schwartz wrote: >>>> >>>> >>>>>Hi list, >>>>> >>>>>Not too sure if this is the right forum to ask this question but since >>>>>my requirement is around linux filesystems, I shall take this liberty >>>>>to post my question. >>>>> >>>>>My requirement is to develop a kernel/user space module to add an >>>>>extension to the shell program environment such that this shell forks >>>>>a mirror look-alike filesystem of the underlying OS to the programs >>>>>run in that particular shell. >>>>> >>>>> >>>>u seem to be talking about namespaces, if I get you right. >>>> >>>>there is a flag CLONE_NEWNS to the system call 'clone' which does what >>>>u r talking about. >>>> >>>>RP >>>> >>>> >>>> >>>> >>>> >>>> >>>>>Was trying to look thru the FAQ and a few list archives to look for >>>>>ideas around my requirement. The archives were overwhelming. >>>>> >>>>> >>>>>Any ideas/pointers will be a great help, >>>>>Gracias, >>>>>decebel >>>>>- >>>>>To unsubscribe from this list: send the line "unsubscribe linux-fsdevel" in >>>>>the body of a message to majordomo@vger.kernel.org >>>>>More majordomo info at http://vger.kernel.org/majordomo-info.html >>>>> >>>>> >>>> >>>> >>>- >>>To unsubscribe from this list: send the line "unsubscribe linux-fsdevel" in >>>the body of a message to majordomo@vger.kernel.org >>>More majordomo info at http://vger.kernel.org/majordomo-info.html >>> >>> >> >> >- >To unsubscribe from this list: send the line "unsubscribe linux-fsdevel" in >the body of a message to majordomo@vger.kernel.org >More majordomo info at http://vger.kernel.org/majordomo-info.html > > > > You might want to look into a project I work on called unionfs It contains code for sandboxing which is what your looking to do. The current code base is available for both 2.4 and 2.6 so you can do this with either kernel version. You can find the source at http://www.filesystems.org/project-unionfs.html the split cache source is what you should be looking at. It will give you an example of how to create a small sandbox. If you think unionfs itself can be used for your purposes Ide suggest asking on their mailing list.. Dave Quigley