Serge Hallyn 655f8ea808 Do not set devices cgroup entries if in a user namespace ...

When in a non-initial user namespace you cannot update the devices
cgroup whitelist (or blacklist).  The kernel won't allow it.  So
detect that case and don't try.

This is a step to being able to run docker/runc containers inside a user
namespaced container.

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

2016-02-16 19:39:43 -08:00

..

fs

Do not set devices cgroup entries if in a user namespace

2016-02-16 19:39:43 -08:00

systemd

cgroup: systemd: further systemd slice validation

2016-01-27 19:00:52 +11:00

cgroups_test.go

Rework ParseCgroupFile

2015-09-10 20:59:27 +03:00

cgroups_unsupported.go

Move libcontainer into subdirectory

2015-06-21 19:29:15 -07:00

cgroups.go

Revert to non-recursive GetPids, add recursive GetAllPids

2016-01-08 19:42:25 +00:00

stats.go

Add limit value to memory stats

2016-02-03 11:54:09 -08:00

utils_test.go

Remove usage of GetMounts from GetCgroupMounts

2016-02-01 11:00:23 -08:00

utils.go

Remove usage of GetMounts from GetCgroupMounts

2016-02-01 11:00:23 -08:00