From mboxrd@z Thu Jan 1 00:00:00 1970 From: ebiederm-aS9lmoZGLiVWk0Htik3J/w@public.gmane.org (Eric W. Biederman) Subject: Re: [lxc-devel] RFC: Device Namespaces Date: Wed, 25 Sep 2013 14:47:05 -0700 Message-ID: <8738osr2ue.fsf@xmission.com> References: <20130822182118.GA28331@sergelap> <8761udlu0d.fsf@xmission.com> <871u4yddg4.fsf@xmission.com> <87ioxo4pm5.fsf@xmission.com> Mime-Version: 1.0 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: (Jeremy Andrus's message of "Wed, 25 Sep 2013 17:17:08 -0400") List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Sender: containers-bounces-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org Errors-To: containers-bounces-cunTk1MwBs9QetFLy7KEm3xJsTq8ys+cHZ5vskTnxNA@public.gmane.org To: Jeremy Andrus Cc: Linux Containers , lxc-devel List-Id: containers.vger.kernel.org Jeremy Andrus writes: > On Sep 25, 2013, at 4:23 PM, Eric W. Biederman wrote: > >> Janne Karhunen writes: >> >>> That being said, is there a valid reason why binder is part of device >>> namespace here instead of IPC? >> >> I think the practical issue with binder was simply that binder only >> allows for a single instance and thus is does not play nicely with >> containers. > > It's true that there was a singleton paradigm in binder that had to be > overcome, but I agree with Janne. It really belongs in the IPC namespace, > and I don't see any technical reason not to move it there. *Blink* I missed the IPC namespace suggestion. The IPC namespace sounds reasonable. Of course binder is still in staging because it has implementation and ABI problems. Little things like a 64bit kernel and a 32bit userspace don't work particularly well. So while fixing those problems it might be possible to fix the single container problem as well. It would be a weird direction for cleanup of binder to come from but I don't see why that wouldn't work. Personally until binder is out of staging it seems reasonable to push for an API that sucks less, or for a more general solution that Androdid could use instead of binder. One of the uses of namespaces is to clean up after problematic kernel design decisions. If we still have the option I would rather fix the problems than clean up after them. Eric