clearcontainers / shim

Hypervisor based containers shim
Apache License 2.0
21 stars 15 forks source link

cc-shim: cc-shim is not namespaced #17

Open sameo opened 7 years ago

sameo commented 7 years ago

From @mcastelino on April 21, 2017 20:56

cc-shim is not namespaced to match the process that it represents. This results in inconsistencies when trying to use the PID reported by docker to examine the process.

PID=$(docker inspect --format {{.State.Pid}} <container name|id>)
sudo nsenter --target $PID --mount --uts --ipc --net --pid

Will result in incorrect information.

We should place the cc shim in the proper namespaces. Additionally we should document this limitation until we fix this issue.

Copied from original issue: 01org/cc-oci-runtime#836

sameo commented 7 years ago

From @devimc on April 27, 2017 13:35

cc-shim is part of the memory cgroup but yes we have to add it to a namespace adding this limitation to release notes thanks

sameo commented 7 years ago

From @dlespiau on April 27, 2017 13:45

question: is it time to put these bugs/feature request as 3.0 items?

sameo commented 7 years ago

From @devimc on April 27, 2017 13:50

@dlespiau I think so, what do you think @mcastelino ?

sameo commented 7 years ago

This issue was moved to clearcontainers/runtime#122