Re: [PATCH] Make linux-user-chroot useable inside vServer guests



Just to follow up:

Option list in what I see as ascending order of difficulty:

0) Don't use vServer on the build machine - use virtualization or
   baremetal.
1) Run ostbuild as uid 0 inside the vServer; write a tool that accepts
   the same options as linux-user-chroot, but doesn't try to use any
   container features like CLONE_NEWNET or set PR_SET_NO_NEW_PRIVS.
   We just need chroot and bind mounts.  The tool wouldn't have to be
   setuid.
2) Like #1, except try to make the build run as non-root too. 
   This is clearly better, but may involve patching vServer so it
   works better with linux-user-chroot.







[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]