Re: [PATCH] Make linux-user-chroot useable inside vServer guests
- From: Colin Walters <walters verbum org>
- To: Adrian Perez <aperez igalia com>
- Cc: ostree-list gnome org
- Subject: Re: [PATCH] Make linux-user-chroot useable inside vServer guests
- Date: Thu, 06 Sep 2012 10:59:47 -0400
Just to follow up:
Option list in what I see as ascending order of difficulty:
0) Don't use vServer on the build machine - use virtualization or
baremetal.
1) Run ostbuild as uid 0 inside the vServer; write a tool that accepts
the same options as linux-user-chroot, but doesn't try to use any
container features like CLONE_NEWNET or set PR_SET_NO_NEW_PRIVS.
We just need chroot and bind mounts. The tool wouldn't have to be
setuid.
2) Like #1, except try to make the build run as non-root too.
This is clearly better, but may involve patching vServer so it
works better with linux-user-chroot.
[
Date Prev][
Date Next] [
Thread Prev][
Thread Next]
[
Thread Index]
[
Date Index]
[
Author Index]