Hello, James. On Fri, May 20, 2016 at 12:09:10PM -0400, James Bottomley wrote: > I think it's just different definitions. If you take on our definition > of being able to set up a container without any admin intervention, do > you see our problem: we can't get the initial delegation of the > hierarchy. Yeah, I can see the difference but we can't solve that by special casing NS case. This is stemming from the fact that an unpriv application can't create its sub-cgroups without explicit delegation from the root and that has always been an explicit design choice. It's tied to who's responsible for cleanup afterwards and what happens when the process gets migrated to a different cgroup. The latter is an important issue on v1 hierarchies because migrating tasks sometimes is used as a way to control resource distribution. Thanks. -- tejun -- To unsubscribe from this list: send the line "unsubscribe cgroups" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
