Skip to content

Conversation

@h-vetinari
Copy link
Contributor

@h-vetinari h-vetinari commented Mar 5, 2020

I offered to rebase #975 by @dongsupark, which had grown conflicts with master and wasn't getting much attention anymore, so here it is.

Fixes #973
Closes #975

Edit: following review, does not include the portion about shared+slave from #975.

Section of rootfs mount propagation modes should include more
descriptions about each propagation mode as well as its actual
meaning in the real world. Since the shared subtrees document
in the Linux Kernel is not exactly readable for ordinary users,
we should elaborate more on this topic in the runtime-spec.

Fixes opencontainers#973

Suggested by @alban, @iaguis

Signed-off-by: Dongsu Park <[email protected]>
Signed-off-by: H. Vetinari <[email protected]>
config-linux.md Outdated
This means that further mounts (e.g. nested containers) will also belong to that peer group and will propagate events to the rootfs.
Note this does not mean that it's shared with the host.
* **`slave`**: the rootfs mount receives propagation events from the host (e.g. if something is mounted on the host it will also appear in the container) but not the other way around.
* **`shared+slave`**: the rootfs mount is slave to the host but it also has its own peer group, so mounts from the host will appear in the container and in a nested container (if the nested container `rootfsPropagation` option allows it), but mounts in a nested container can only propagate to the rootfs and not to the host.
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Sorry for the late comment, but as I've noted on #973 (comment), I'm not totally convinced we're ready for this value to be added -- IMO this and the formatting update can/should be split.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I just rebased the PR as it was, but I'm happy to remove this if that helps get it merged.

@h-vetinari h-vetinari changed the title Rebase #975 config-linux: describe more about rootfs mount propagation (cont'd) Mar 6, 2020
Signed-off-by: H. Vetinari <[email protected]>
@tianon
Copy link
Member

tianon commented Mar 6, 2020

LGTM

Thanks! (I think we should discuss shared+slave separately 👍)

Approved with PullApprove

@vbatts
Copy link
Member

vbatts commented Mar 7, 2020

LGTM

Approved with PullApprove

@vbatts vbatts merged commit 30d79a2 into opencontainers:master Mar 7, 2020
@h-vetinari h-vetinari deleted the rebase_975 branch March 7, 2020 13:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

config-linux: improving description about rootfs mount propagation

3 participants