X-Git-Url: http://git.onelab.eu/?a=blobdiff_plain;f=lxcsu;h=b435b25e72cf54ff33ccea2c669fcf8d60ffd9ef;hb=9d2cdcc0d2722975477b6a5368514bc6fcb21c62;hp=ea63d1822234e6c9f2505c6983bf631aabf1cf49;hpb=5890874ae327145958ce7ad96ddc83441823ffb4;p=lxc-userspace.git diff --git a/lxcsu b/lxcsu index ea63d18..b435b25 100644 --- a/lxcsu +++ b/lxcsu @@ -3,11 +3,13 @@ import setns import os +import sys -from optparse import OptionParser +#from optparse import OptionParser -drop_capabilities='cap_sys_admin,cap_net_admin,cap_sys_boot,cap_sys_module'.split(',') +drop_capabilities='cap_sys_admin,cap_sys_boot,cap_sys_module'.split(',') +""" parser = OptionParser() parser.add_option("-n", "--net", action="store_true", dest="netns", default=False, @@ -20,6 +22,8 @@ parser.add_option("-p", "--pid", help="Enter pid namespace") (options, args) = parser.parse_args() +""" +args = sys.argv[1:] try: slice_name = args[0] @@ -56,10 +60,35 @@ if (not slice_spec or not pid): print "Not started: %s"%slice_name exit(1) -r1 = setns.chcontext('/proc/%s/ns/utc'%pid) +# Enter cgroups +try: + for subsystem in ['cpuset','memory','blkio']: + open('/sys/fs/cgroup/%s/libvirt/lxc/%s/tasks'%(subsystem,slice_name),'w').write(str(os.getpid())) + +except: + print "Error assigning resources: %s"%slice_name + exit(1) + +# If the slice is frozen, then we'll get an EBUSY when trying to write to the task +# list for the freezer cgroup. Since the user couldn't do anything anyway, it's best +# in this case to error out the shell. (an alternative would be to un-freeze it, +# add the task, and re-freeze it) +try: + f=open('/sys/fs/cgroup/freezer/libvirt/lxc/%s/tasks'%(slice_name),'w') + f.write(str(os.getpid())) + # note: we need to call f.close() explicitly, or we'll get an exception in + # the object destructor, which will not be caught + f.close() +except: + print "Error adding task to freezer cgroup. Slice is probably frozen: %s" % slice_name + exit(1) + +r1 = setns.chcontext('/proc/%s/ns/uts'%pid) + +print pid + r2 = setns.chcontext('/proc/%s/ns/ipc'%pid) -path = '/proc/%s/ns/net'%pid -r3 = setns.chcontext(path) +r3 = setns.chcontext('/proc/%s/ns/net'%pid) open('/proc/lxcsu','w').write(pid) open('/proc/pidsu','w').write(pid) @@ -69,6 +98,6 @@ pid = os.fork() cap_args = map(lambda c:'--drop='+c, drop_capabilities) if (pid == 0): - os.execv('/usr/sbin/capsh',cap_args+['--']) + os.execv('/usr/sbin/capsh',cap_args+['--','--login']+args[1:]) else: os.waitpid(pid,0)