[libvirt-users] dropping capabilities in lxc containers
Daniel P. Berrange
berrange at redhat.com
Wed Jan 29 14:38:03 UTC 2014
On Wed, Jan 29, 2014 at 03:33:23PM +0100, Thierry Parmentelat wrote:
> Thanks for the feedback
> I take it from your answer that there is no current plan in the
> direction of adding this as a feature, right ?
I'm not aware of anyone currently working on this feature.
> In this case, how would you welcome pull requests if we managed
> to add this on our side ?
Well it seems the sf.net LXC tools support a 'lxc.caps.drop'
flag to list caps that should be removed. Since we'd like to
have equivalent or greater features in libvirt, it seems that
it would be in scope to add such a config option to libvirt
XML. So if you'd like to work on it feel free to make a
proposal for XML config & patch.
Regards,
Daniel
--
|: http://berrange.com -o- http://www.flickr.com/photos/dberrange/ :|
|: http://libvirt.org -o- http://virt-manager.org :|
|: http://autobuild.org -o- http://search.cpan.org/~danberr/ :|
|: http://entangle-photo.org -o- http://live.gnome.org/gtk-vnc :|
More information about the libvirt-users
mailing list