debian/patches/pve/0006-PVE-Config-namespace-separation.patch

   1 From 0000000000000000000000000000000000000000 Mon Sep 17 00:00:00 2001
   2 From: Wolfgang Bumiller <w.bumiller@proxmox.com>
   3 Date: Fri, 23 Dec 2016 15:57:24 +0100
   4 Subject: [PATCH] PVE: [Config] namespace separation
   5
   6 * rename cgroup namespace directory to ns
   7 * set lxc.cgroup.protect_limits default to 'both'
   8
   9 Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
  10 ---
  11  src/lxc/cgroups/cgroup.h | 2 +-
  12  src/lxc/initutils.h      | 2 +-
  13  2 files changed, 2 insertions(+), 2 deletions(-)
  14
  15 diff --git a/src/lxc/cgroups/cgroup.h b/src/lxc/cgroups/cgroup.h
  16 index 59445b5a5..7d6135c19 100644
  17 --- a/src/lxc/cgroups/cgroup.h
  18 +++ b/src/lxc/cgroups/cgroup.h
  19 @@ -36,7 +36,7 @@
  20   * will be moved into an additional subdirectory "cgns/" inside the cgroup in
  21   * order to prevent it from accessing the outer limiting cgroup.
  22   */
  23 -#define CGROUP_NAMESPACE_SUBDIR "cgns"
  24 +#define CGROUP_NAMESPACE_SUBDIR "ns"
  25
  26  struct lxc_handler;
  27  struct lxc_conf;
  28 diff --git a/src/lxc/initutils.h b/src/lxc/initutils.h
  29 index b542e6015..78d3f2b10 100644
  30 --- a/src/lxc/initutils.h
  31 +++ b/src/lxc/initutils.h
  32 @@ -42,7 +42,7 @@
  33  #define DEFAULT_THIN_POOL "lxc"
  34  #define DEFAULT_ZFSROOT "lxc"
  35  #define DEFAULT_RBDPOOL "lxc"
  36 -#define DEFAULT_CGPROTECT "privileged"
  37 +#define DEFAULT_CGPROTECT "both"
  38
  39  #ifndef PR_SET_MM
  40  #define PR_SET_MM 35
  41 --
  42 2.20.1
  43