Skip to content

L
lxc
Commit 6cee93ac by Serge Hallyn
Options

attach: unshare cgroupns if possible

Signed-off-by: 's avatarSerge Hallyn <serge.hallyn@ubuntu.com> --- Changelog 20160104: only try if kernel supports cgns.
parent 12983ba4
Showing with 7 additions and 0 deletions
src/lxc/attach.c
...@@ -957,6 +957,13 @@ int lxc_attach(const char* name, const char* lxcpath, lxc_attach_exec_t exec_fun ...@@ -957,6 +957,13 @@ int lxc_attach(const char* name, const char* lxcpath, lxc_attach_exec_t exec_fun
WARN("could not change directory to '%s'", new_cwd); WARN("could not change directory to '%s'", new_cwd);
free(cwd); free(cwd);
if (options->attach_flags & LXC_ATTACH_MOVE_TO_CGROUP && cgns_supported()) {
if (unshare(CLONE_NEWCGROUP) != 0) {
SYSERROR("cgroupns unshare: permission denied");
rexit(-1);
}
}
/* now create the real child process */ /* now create the real child process */
{ {
struct attach_clone_payload payload = { struct attach_clone_payload payload = {
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment