Re: BSD jail

[Serge E. Hallyn]

Quoting Joshua Hudson (joshudson@xxxxxxxxx):
> I had been wanting this functionality myself, but for some reason it never found
> its way into the stock kernel.  I looked around, started coding,
> looked some more,
> coded some more, looked some more until I found this:
> 
> http://kerneltrap.org/node/3823
> 
> I suppose the reason it wasn't applied is lack of good IPv6 support.

The latest version (which is still quite old) is at
http://www.sf.net/projects/linuxjail and does have ipv6 support.  The last
time I submitted it, Christoph had objected to the way the networking was
done in general.  I've tried twice to float a generalized "per-process
network namespaces" patch, but haven't really found a good approach.

I suspect that the best approach would be to take the linux-vserver
ngnet implementation and convert it to a standalone network namespace
plus virtual network device implementation.  Do you care to give this
a try?

thanks,
-serge

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/