lkml.org 
[lkml]   [2014]   [Mar]   [13]   [last100]   RSS Feed
Views: [wrap][no wrap]   [headers]  [forward] 
 
Messages in this thread
    /
    Date
    From
    SubjectRe: [PATCH 2/2] net: Implement SO_PEERCGROUP
    On Thu, Mar 13, 2014 at 01:51:17PM -0400, Simo Sorce wrote:

    [..]
    > > 1. Fix Docker to use user namespaces and use the uid of the requesting
    > > process via SCM_CREDENTIALS.
    >
    > This is not practical, I have no control on what UIDs will be used
    > within a container,

    I guess uid to container mapping has to be managed by somebody, say systemd.
    Then there systemd should export an API to query the container a uid is
    mapped into. So that should not be the real problem.

    > and IIRC user namespaces have severe limitations
    > that may make them unusable in some situations. Forcing the use of user
    > namespaces on docker to satisfy my use case is not in my power.

    I think that's the real practical problem. Adoption of user name space.

    Thanks
    Vivek


    \
     
     \ /
      Last update: 2014-03-13 19:41    [W:4.074 / U:0.052 seconds]
    ©2003-2020 Jasper Spaans|hosted at Digital Ocean and TransIP|Read the blog|Advertise on this site