From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Message-ID: <1427807471.4411.18.camel@redhat.com> Subject: Re: [PATCH] devpts: Add ptmx_uid and ptmx_gid options From: Alexander Larsson To: James Bottomley Cc: Andy Lutomirski , gnome-os-list@gnome.org, Linux Containers , "linux-kernel@vger.kernel.org" , mclasen@redhat.com, "Eric W. Biederman" , Linux FS Devel Date: Tue, 31 Mar 2015 15:11:11 +0200 In-Reply-To: <1427807248.2117.117.camel@HansenPartnership.com> References: <1427447013.2250.9.camel@HansenPartnership.com> <1427788642.4411.12.camel@redhat.com> <1427807248.2117.117.camel@HansenPartnership.com> Content-Type: text/plain; charset="UTF-8" Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Sender: linux-kernel-owner@vger.kernel.org List-ID: On tis, 2015-03-31 at 16:07 +0300, James Bottomley wrote: > On Tue, 2015-03-31 at 09:57 +0200, Alexander Larsson wrote: > > On fre, 2015-03-27 at 10:03 +0100, James Bottomley > > > > > > > On Fri, Feb 20, 2015 at 5:04 PM, Andy Lutomirski wrote: > > > > > It's currently impossible to mount devpts in a user namespace that > > > > > has no root user, since ptmx can't be created. > > > > > > This is where I stopped reading because it's not true ... because it is > > > possible, you just do it from the host as real root. > > > > The point is being able to set up a container as a user, not requiring > > the setup to be run as root at all. In my case container is a desktop > > application which will be started by the user, and will run as the user. > > There is no root involved in the call chain at all. > > I don't really like that use case: Most container setups are under the > control of an orchestration system (like LXC, OpenVZ or even Docker). Well, I'm doing something different from a server side orchestration framework. I'm doing sandboxed desktop apps. -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Alexander Larsson Red Hat, Inc alexl@redhat.com alexander.larsson@gmail.com He's an underprivileged sweet-toothed master criminal in a wheelchair. She's a psychotic out-of-work opera singer with the power to see death. They fight crime!