From: "H. Peter Anvin" <hpa@zytor.com>
To: Seth Forshee <seth.forshee@canonical.com>,
linux-kernel@vger.kernel.org,
lxc-devel@lists.linuxcontainers.org
Cc: Greg Kroah-Hartman <gregkh@linuxfoundation.org>,
Alexander Viro <viro@zeniv.linux.org.uk>,
James Bottomley <James.Bottomley@HansenPartnership.com>,
Serge Hallyn <serge.hallyn@ubuntu.com>,
"Michael H. Warfield" <mhw@wittsend.com>,
Marian Marinov <mm@1h.com>,
Eric Biederman <ebiederm@xmission.com>,
Richard Weinberger <richard.weinberger@gmail.com>,
Andy Lutomirski <luto@amacapital.net>,
Michael J Coss <michael.coss@alcatel-lucent.com>
Subject: Re: [RFC PATCH 0/2] Loop device psuedo filesystem
Date: Wed, 28 May 2014 16:47:24 -0700 [thread overview]
Message-ID: <5386758C.4040702@zytor.com> (raw)
In-Reply-To: <1401227936-15698-1-git-send-email-seth.forshee@canonical.com>
On 05/27/2014 02:58 PM, Seth Forshee wrote:
>
> The patches implement a psuedo filesystem for loop devices, which will
> allow use of loop devices in containters using standard utilities. Under
> normal use a loopfs mount will initially contain a single device node
> for loop-control which can be used to request and release loop devices.
> Any devices allocated via this node will automatically appear in that
> loopfs mount (and in devtmpfs) but not in any other loopfs mounts.
> CAP_SYS_ADMIN in the userns of the process which performed the mount is
> allowed to perform privileged loop ioctls on these devices.
>
> Alternately loopfs can be mounted with the hostmount option, intended
> for mounting /dev/loop in the host. This is the default mount for any
> devices not created via loop-control in a loopfs mount (e.g. devices
> created during driver init, devices created via /dev/loop-control, etc).
> This is only available to system-wide CAP_SYS_ADMIN.
>
May I instead strongly advocate a slightly different solution: leave
legacy loop devices where they are, with the current semantics, and let
them be. Make the loopfs loop devices completely independent. Consider
this equivalent of Unix98 ptys versus legacy BSD ptys.
Then, hopefully, use of the legacy ones will disappear over time.
Enabling the new ones in losetup and friends is simple enough; this is
not like ptys where the old scheme was hard-coded into a hundred
different applications.
-hpa
next prev parent reply other threads:[~2014-05-28 23:50 UTC|newest]
Thread overview: 19+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-05-27 21:58 [RFC PATCH 0/2] Loop device psuedo filesystem Seth Forshee
2014-05-27 21:58 ` [RFC PATCH 1/2] loop: Add loop filesystem Seth Forshee
2014-05-27 22:56 ` Randy Dunlap
2014-05-28 7:36 ` Seth Forshee
2014-05-27 21:58 ` [RFC PATCH 2/2] loop: Permit priveleged operations within user namespaces Seth Forshee
2014-05-27 22:19 ` [RFC PATCH 0/2] Loop device psuedo filesystem Andy Lutomirski
2014-05-28 7:32 ` Seth Forshee
2014-05-28 16:10 ` Andy Lutomirski
2014-05-28 17:39 ` Michael H. Warfield
2014-05-28 23:47 ` H. Peter Anvin [this message]
2014-05-29 11:20 ` Seth Forshee
2014-09-15 20:38 ` Shea Levy
2014-09-15 20:55 ` Seth Forshee
2014-09-15 23:20 ` Shea Levy
2014-09-16 12:24 ` Seth Forshee
2014-09-16 16:12 ` Shea Levy
2014-09-16 16:39 ` Seth Forshee
2014-09-16 17:05 ` Shea Levy
2014-09-16 17:26 ` Seth Forshee
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=5386758C.4040702@zytor.com \
--to=hpa@zytor.com \
--cc=James.Bottomley@HansenPartnership.com \
--cc=ebiederm@xmission.com \
--cc=gregkh@linuxfoundation.org \
--cc=linux-kernel@vger.kernel.org \
--cc=luto@amacapital.net \
--cc=lxc-devel@lists.linuxcontainers.org \
--cc=mhw@wittsend.com \
--cc=michael.coss@alcatel-lucent.com \
--cc=mm@1h.com \
--cc=richard.weinberger@gmail.com \
--cc=serge.hallyn@ubuntu.com \
--cc=seth.forshee@canonical.com \
--cc=viro@zeniv.linux.org.uk \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.