[lxc.git] / README

NOTES:

Problems with RHEL7 kernel:

  ret = unshare(CLONE_NEWUSER);

does not work, because:

---------------------------
# file: liinux-2.6-3.10.0/kernel/user_namespace.c 
int create_user_ns(struct cred *new)
{
	struct user_namespace *ns, *parent_ns = new->user_ns;
	kuid_t owner = new->euid;
	kgid_t group = new->egid;
	int ret;

	/* Currently disabled in RHEL7 */
	return -EINVAL;
...
---------------------------

There is already an open bug:

https://bugzilla.redhat.com/show_bug.cgi?id=917708

Other links:

http://zurlinux.com/?p=2106
Commit	Line	Data
c599714d DM	1	NOTES:
	2
	3	Problems with RHEL7 kernel:
	4
	5	ret = unshare(CLONE_NEWUSER);
	6
	7	does not work, because:
	8
	9	---------------------------
	10	# file: liinux-2.6-3.10.0/kernel/user_namespace.c
	11	int create_user_ns(struct cred *new)
	12	{
	13	struct user_namespace ns, parent_ns = new->user_ns;
	14	kuid_t owner = new->euid;
	15	kgid_t group = new->egid;
	16	int ret;
	17
	18	/* Currently disabled in RHEL7 */
	19	return -EINVAL;
	20	...
	21	---------------------------
	22
	23	There is already an open bug:
	24
	25	https://bugzilla.redhat.com/show_bug.cgi?id=917708
9075a66d DM	26
	27	Other links:
	28
	29	http://zurlinux.com/?p=2106