On Wed, Aug 13, 2014 at 08:21:32PM +0300, Mihamina Rakotomandimby wrote:
> Easing the work by defaulting to a ready-to-work kernel would be nice.
I think that LXC is used by minority of users (myself included). So, enabling
USER_NS by default would put the rest of (unsuspecting) users in unnecessary
danger.
OTOH, configuring an LXC container already requires some understanding.
Compared to that, building a custom kernel is really not a major barrier.
Of course, the user namespace stuff will never become 'stable' if nobody uses
it...
Cheers,
--
Leonid Isaev
GPG fingerprints: DA92 034D B4A8 EC51 7EA6 20DF 9291 EE8A 043C B8C4
C0DF 20D0 C075 C3F1 E1BE 775A A7AE F6CB 164B 5A6D
Attachment:
pgpylaw_O57Xu.pgp
Description: PGP signature
