New answers tagged lxc
I know now how to do this. If you can't follow this explanation, please ask back, but also make sure you have read up on userns in the readings I am giving at the bottom Preliminary assumptions I'll stick with the following assumptions, extended from what I have from your question: host has a user1 and a user2, if an information isn't specific to one, ...
I have investigate that since I asked my question and it turns out that the ranges of sub-GIDs/sub-UIDs are indeed used as file-group/-owner for the files. There is no additional metadata (unless you'd be using SELinux or the like) which is relevant to this.
For lxc in Debian Wheezy I use in /etc/fstab: cgroup /sys/fs/cgroup cgroup defaults,blkio,net_cls,freezer,devices,cpuacct,cpu,cpuset,memory,clone_children 0 0 In /etc/default/grub GRUB_CMDLINE_LINUX_DEFAULT="quiet cgroup_enable=memory,namespace" (& don't forget to run update-grub) It is also possible to run LXC 1.0.7 on Debian Wheezy
To answer 1. for d in /sys/fs/cgroup/*; do f=$(basename $d) echo "looking at $f" if [ "$f" = "cpuset" ]; then echo 1 | sudo tee -a $d/cgroup.clone_children; elif [ "$f" = "memory" ]; then echo 1 | sudo tee -a $d/memory.use_hierarchy; fi sudo mkdir -p $d/$USER sudo chown ...
Top 50 recent answers are included