libvirt/src/lxc/lxc_container.h
ik.nitk c27553b6e2 lxc: Inherit namespace feature
This patch adds feature for lxc containers to inherit namespaces.
This is very similar to what lxc-tools or docker provides.  Look
for "man lxc-start" and you will find that you can pass command
args as [ --share-[net|ipc|uts] name|pid ]. Or check out docker
networking option in which you can give --net=container:NAME_or_ID
as an option for sharing +namespace.

>From this patch you can add extra libvirt option to share
namespace in following way.

 <lxc:namespace>
   <lxc:sharenet type='netns' value='red'/>
   <lxc:shareipc type='pid' value='12345'/>
   <lxc:shareuts type='name' value='container1'/>
 </lxc:namespace>

The netns option is specific to sharenet. It can be used to
inherit from existing network namespace.

Co-authored: Daniel P. Berrange <berrange@redhat.com>
2015-08-26 11:28:30 +01:00

79 lines
2.3 KiB
C

/*
* Copyright IBM Corp. 2008
*
* lxc_container.h: header file for fcns run inside container
*
* Authors:
* David L. Leskovec <dlesko at linux.vnet.ibm.com>
*
* This library is free software; you can redistribute it and/or
* modify it under the terms of the GNU Lesser General Public
* License as published by the Free Software Foundation; either
* version 2.1 of the License, or (at your option) any later version.
*
* This library is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
* Lesser General Public License for more details.
*
* You should have received a copy of the GNU Lesser General Public
* License along with this library. If not, see
* <http://www.gnu.org/licenses/>.
*/
#ifndef LXC_CONTAINER_H
# define LXC_CONTAINER_H
# include "lxc_conf.h"
# include "lxc_domain.h"
# include "security/security_manager.h"
enum {
LXC_CONTAINER_FEATURE_NET = (1 << 0),
LXC_CONTAINER_FEATURE_USER = (1 << 1),
};
# define LXC_DEV_MAJ_MEMORY 1
# define LXC_DEV_MIN_NULL 3
# define LXC_DEV_MIN_ZERO 5
# define LXC_DEV_MIN_FULL 7
# define LXC_DEV_MIN_RANDOM 8
# define LXC_DEV_MIN_URANDOM 9
# define LXC_DEV_MAJ_TTY 5
# define LXC_DEV_MIN_TTY 0
# define LXC_DEV_MIN_CONSOLE 1
# define LXC_DEV_MIN_PTMX 2
# define LXC_DEV_MAJ_PTY 136
# define LXC_DEV_MAJ_FUSE 10
# define LXC_DEV_MIN_FUSE 229
int lxcContainerSendContinue(int control);
int lxcContainerWaitForContinue(int control);
int lxcContainerStart(virDomainDefPtr def,
virSecurityManagerPtr securityDriver,
size_t nveths,
char **veths,
size_t npassFDs,
int *passFDs,
int control,
int handshakefd,
int *nsInheritFDs,
size_t nttyPaths,
char **ttyPaths);
int lxcContainerAvailable(int features);
int lxcContainerSetupHostdevCapsMakePath(const char *dev);
virArch lxcContainerGetAlt32bitArch(virArch arch);
int lxcContainerChown(virDomainDefPtr def, const char *path);
bool lxcIsBasicMountLocation(const char *path);
#endif /* LXC_CONTAINER_H */