X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=lxcsu;h=229cb33d0fa6095f4e73411d639e70e57b91eb5f;hb=9e57ef001f206b31efbfe5f8398d231c9928c29e;hp=ea63d1822234e6c9f2505c6983bf631aabf1cf49;hpb=5890874ae327145958ce7ad96ddc83441823ffb4;p=lxc-userspace.git diff --git a/lxcsu b/lxcsu index ea63d18..229cb33 100644 --- a/lxcsu +++ b/lxcsu @@ -3,11 +3,13 @@ import setns import os +import sys -from optparse import OptionParser +#from optparse import OptionParser drop_capabilities='cap_sys_admin,cap_net_admin,cap_sys_boot,cap_sys_module'.split(',') +""" parser = OptionParser() parser.add_option("-n", "--net", action="store_true", dest="netns", default=False, @@ -20,6 +22,8 @@ parser.add_option("-p", "--pid", help="Enter pid namespace") (options, args) = parser.parse_args() +""" +args = sys.argv[1:] try: slice_name = args[0] @@ -56,6 +60,14 @@ if (not slice_spec or not pid): print "Not started: %s"%slice_name exit(1) +# Enter cgroups +try: + for subsystem in ['cpuset','memory','blkio']: + open('/sys/fs/cgroup/%s/libvirt/tasks'%subsystem,'w').write(pid) +except: + print "Error assigning resources: %s"%slice_name + exit(1) + r1 = setns.chcontext('/proc/%s/ns/utc'%pid) r2 = setns.chcontext('/proc/%s/ns/ipc'%pid) path = '/proc/%s/ns/net'%pid @@ -64,11 +76,13 @@ r3 = setns.chcontext(path) open('/proc/lxcsu','w').write(pid) open('/proc/pidsu','w').write(pid) + + pid = os.fork() cap_args = map(lambda c:'--drop='+c, drop_capabilities) if (pid == 0): - os.execv('/usr/sbin/capsh',cap_args+['--']) + os.execv('/usr/sbin/capsh',cap_args+['--']+args[1:]) else: os.waitpid(pid,0)