From mboxrd@z Thu Jan 1 00:00:00 1970 From: Tejun Heo Subject: Re: [PATCHv1 7/8] cgroup: cgroup namespace setns support Date: Wed, 22 Oct 2014 15:42:00 -0400 Message-ID: <20141022194200.GA24009@htj.dyndns.org> References: <87lhoayo59.fsf@x220.int.ebiederm.org> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=sender:date:from:to:cc:subject:message-id:references:mime-version :content-type:content-disposition:in-reply-to:user-agent; bh=dJ8uUvPl6es7ek8KfnJOfPAwSRmnWY92dTaNOUeU02k=; b=wjr+C+JblUXoTjx648tWhJuzxqlUgssBHmX9lZAGQezyXLXFmZhPA5SmrupFLal/V2 VhxTDYXqr7Zb58eL3nKKB+6KZJxlLZOns+iDNT/fQPlfYhBVeoFwSBygT+RuOJFOfz4D eo+DWOpEQqp8HpXuqlrGMIxUghmk8+X1Y/aofVrvK2O3tK8WB/WyOCBcWq7CAfXZY8o0 T3emjVrndtzHKrKIdldpxTK3ms1YDN3cDaRdvxI4F9OkEf/dPgw1sH4GQqdvqOVL2QZW NseehWVIWIHmy0UWGOsa2gzOkc4UOVnl1A8JlBrYhmRwvoQk+9ApAl7NJ7w1qgo/QFvy QQ1Q== Content-Disposition: inline In-Reply-To: List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: containers-bounces-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org Errors-To: containers-bounces-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org To: Aditya Kali Cc: Linux API , Linux Containers , Serge Hallyn , "linux-kernel-u79uwXL29TY76Z2rM5mHXA@public.gmane.org" , Andy Lutomirski , Ingo Molnar , "Eric W. Biederman" , cgroups-u79uwXL29TY76Z2rM5mHXA@public.gmane.org Hello, On Wed, Oct 22, 2014 at 11:37:55AM -0700, Aditya Kali wrote: ... > Actually, there is no right answer here. Our options are: > * show relative path > -- this will break userspace as /proc//cgroup does not show > relative paths today. This is also very ambiguous (is it relative to > cgroupns-root or relative to /proc/cgroup file reader's cgroup?). Let's go with this w/o pinning. The only necessary feature for cgroupns is making the /proc/*/cgroups relative to its own root. It's not like containers can avoid trusting its outside world anyway and playing tricks with things like this tend to lead to weird surprises down the road. If userland messes up, userland messes up. Thanks. -- tejun