Daniel Lezcano <daniel.lezcano@xxxxxxx> writes: >> No, the plan is only one namespace at a time. >> >> It would not be much of a change to support multiple namespaces, >> but I don't think I want to go there. Bitmaps filling up are >> ugly and I don't see what would be gained. >> > The idea I had in mind when I asked this question was if we can "move" a process > inside a container, aka a set of namespaces :) Yes. >> I does make sense to support all of the namespaces we can support >> with unshare, but with nstype as an enumeration not as a bitmap. >> > I suppose when you say "to support all of the namespaces we can support with > *unshare*", you exclude the pid namespace which is created only with clone, > right ? Do you think we can extend the concept to all the namespaces including > the pid_namespace ? Yes, and I think also the credential/uid namespace. It is possible that this could be the basis for a general purpose enter, but that is not the primary motivation. I am after the easy cases simple cases. So I can modify /sbin/ip to take advantage of it. Eric -- To unsubscribe from this list: send the line "unsubscribe netfilter-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
