On Fri, Mar 05, 2010 at 06:50:01PM +0100, Herbert Poetzl wrote:
> On Fri, Mar 05, 2010 at 02:58:45PM +0000, Ed W wrote:
> > Hi
> > >so you need to have CAP_SYS_ADMIN inside the guest for now
> > >to create or modify the 'trusted' namespace ... let me know
> > >if you want to do some testing with a FS_TRUSTED flag ...
> > Definitely yes please.
> > I have sent a donation separately hopefully to incentivise
> > such a new feature...
> many thanks for that! quite appreciated!
> > Note, because I am using the grsec patch also and it's a
> > non-trivial merge, for testing, would you perhaps be kind
> > enough to break out the relevant changes into a standalone
> > patch?
> sure, we usually do that anyways for distro
> integrators and interested folks
> > (Or perhaps I can try interdiff?)
> works too, but not required, see above ...
> > Note also, if it's useful I can easily package up my kernel
> > tree and vserver-guest (however, for the guest all I did was
> > pull down the latest gluster 3.02 code using the gentoo
> > ebuild. I believe it should be reproducible with other
> > distro's packages)
> if possible, pay a visit on the IRC channel,
> we'll go from there (simpler than via email)
here is a patch which might just work for your setup:
http://vserver.13thfloor.at/ExperimentalT/delta-trusted-feat01.diff
keep in mind that you need to specify the capability
numerically, as util-vserver does not know the name
yet ...
let me know how it goes, best,
Herbert
> > I anticipate running into other issues with glusterfs in a
> > guest (under load), but I guess lets see how we get on...
> would be interesting to know ....
> best,
> Herbert
> > Many thanks
> > Ed Wildgoose
Received on Fri Mar 5 23:59:56 2010