On Mon, Oct 24, 2022 at 10:35:21PM +0800, Dust Li wrote: > For the netdevice, that's true. But for RDMA, we should not even see > the ib device in the containers any more, so I think we cannot create > qp/cq, and RDMA is not available for these containers in this case. Correct, in shared mode the RDMA device should only allow using GID table entries that have netdevs that are present in the processe's net namespace. This is, in general, the philosophy. The user is supposed to keep the various devices in the namespace in sync, because the kernel cannot guess what is correct. Jason