From: Alin Dobre <alin.dobre-1hSFou9RDDldEee+Cai+ZQ@public.gmane.org>
Cc: containers-qjLDD68F18O7TbgM5vRIOg@public.gmane.org,
linux-kernel-u79uwXL29TY76Z2rM5mHXA@public.gmane.org,
lxc-devel-cunTk1MwBs9qMoObBWhMNEqPaTDuhLve2LY78lusg7I@public.gmane.org
Subject: Re: [RFC] Per-user namespace process accounting
Date: Thu, 12 Jun 2014 15:37:54 +0100 [thread overview]
Message-ID: <5399BB42.60304@elastichosts.com> (raw)
In-Reply-To: <5386D58D.2080809-108MBtLGafw@public.gmane.org>
On 29/05/14 07:37, Marian Marinov wrote:
> Hello,
>
> I have the following proposition.
>
> Number of currently running processes is accounted at the root user namespace. The problem I'm facing is that multiple
> containers in different user namespaces share the process counters.
>
> So if containerX runs 100 with UID 99, containerY should have NPROC limit of above 100 in order to execute any
> processes with ist own UID 99.
>
> I know that some of you will tell me that I should not provision all of my containers with the same UID/GID maps, but
> this brings another problem.
If this matters, we also suffer from the same problem here. So we
support any implementation that would address it.
Cheers,
Alin.
_______________________________________________
lxc-devel mailing list
lxc-devel@lists.linuxcontainers.org
http://lists.linuxcontainers.org/listinfo/lxc-devel
next prev parent reply other threads:[~2014-06-12 14:37 UTC|newest]
Thread overview: 16+ messages / expand[flat|nested] mbox.gz Atom feed top
2014-05-29 6:37 [RFC] Per-user namespace process accounting Marian Marinov
[not found] ` <5386D58D.2080809-108MBtLGafw@public.gmane.org>
2014-05-29 10:06 ` Eric W. Biederman
[not found] ` <87tx88nbko.fsf-JOvCrm2gF+uungPnsOpG7nhyD016LWXt@public.gmane.org>
2014-05-29 10:40 ` Marian Marinov
[not found] ` <53870EAA.4060101-108MBtLGafw@public.gmane.org>
2014-05-29 15:32 ` Serge Hallyn
2014-06-03 17:01 ` Pavel Emelyanov
[not found] ` <538DFF72.7000209-bzQdu9zFT3WakBO8gow8eQ@public.gmane.org>
2014-06-03 17:26 ` Serge Hallyn
2014-06-03 17:39 ` Pavel Emelyanov
[not found] ` <538E0848.6060900-bzQdu9zFT3WakBO8gow8eQ@public.gmane.org>
2014-06-03 17:47 ` Serge Hallyn
2014-06-03 18:18 ` Eric W. Biederman
2014-06-03 17:54 ` Eric W. Biederman
[not found] ` <8738flkhf0.fsf-JOvCrm2gF+uungPnsOpG7nhyD016LWXt@public.gmane.org>
2014-06-03 21:39 ` Marian Marinov
[not found] ` <538E4088.7010605-108MBtLGafw@public.gmane.org>
2014-06-23 4:07 ` Serge E. Hallyn
2014-06-07 21:39 ` James Bottomley
[not found] ` <1402177144.2236.26.camel-sFMDBYUN5F8GjUHQrlYNx2Wm91YjaHnnhRte9Li2A+AAvxtiuMwx3w@public.gmane.org>
2014-06-08 3:25 ` Eric W. Biederman
2014-06-12 14:37 ` Alin Dobre [this message]
[not found] ` <5399BB42.60304-1hSFou9RDDldEee+Cai+ZQ@public.gmane.org>
2014-06-12 15:08 ` Serge Hallyn
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=5399BB42.60304@elastichosts.com \
--to=alin.dobre-1hsfou9rddldeee+cai+zq@public.gmane.org \
--cc=containers-qjLDD68F18O7TbgM5vRIOg@public.gmane.org \
--cc=linux-kernel-u79uwXL29TY76Z2rM5mHXA@public.gmane.org \
--cc=lxc-devel-cunTk1MwBs9qMoObBWhMNEqPaTDuhLve2LY78lusg7I@public.gmane.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox