Re: Raw CAN socket support in LXC?

[Marc Kleine-Budde <mkl@pengutronix.de>]

[-- Attachment #1: Type: text/plain, Size: 1245 bytes --]

On 05/08/2015 10:12 AM, John Ernberg wrote:
> We're working on an embedded system where we're planning on wrapping our 
> applications in containers as a resource control safety measurement.
>  From our understanding Raw CAN sockets are not yet supported in LXC, 
> and now we're wondering why.

I don't know - I've never tried to do so. LXC make heavy use of network
namespaces, I think netfilter (NAT, filter) is used to grant access to
the containers.

Can you elaborate your use case in more detail. Do you want to limit the
sending of CAN frames from the containers to the outside? Do you want to
filter on CAN-id or even the contents? What about the receiving side? Do
you want to limit the reception to certain CAN-ids, too?

> Is there any reasoning we should be aware of as to why support has not 
> been added? Except possibly "We have not seen the need" or "No one has 
> taken the time to".

I think all of the above.

regards,
Marc

-- 
Pengutronix e.K.                  | Marc Kleine-Budde           |
Industrial Linux Solutions        | Phone: +49-231-2826-924     |
Vertretung West/Dortmund          | Fax:   +49-5121-206917-5555 |
Amtsgericht Hildesheim, HRA 2686  | http://www.pengutronix.de   |


[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 801 bytes --]