containers / virtcontainers

A Go package for building hardware virtualized container runtimes
Apache License 2.0
139 stars 43 forks source link

Shim process should be in the same network namespace with VM process. #615

Closed miaoyq closed 6 years ago

miaoyq commented 6 years ago

Now, the container pid that is get by docker inspect -f '{{.State.Pid}}' [container_id] is the pid of shim process, and the shim process is in the host netwok namespace.

In some case, we should get the netwok namespace of container via the container pid (e.g. dockershim), so I think the shim process should be in the container network namespace like VM process.

/cc @sboeuf @sameo