On Fri, Mar 05, 2010 at 06:50:01PM +0100, Herbert Poetzl wrote: > On Fri, Mar 05, 2010 at 02:58:45PM +0000, Ed W wrote: > > Hi > > >so you need to have CAP_SYS_ADMIN inside the guest for now > > >to create or modify the 'trusted' namespace ... let me know > > >if you want to do some testing with a FS_TRUSTED flag ... > > Definitely yes please. > > I have sent a donation separately hopefully to incentivise > > such a new feature... > many thanks for that! quite appreciated! > > Note, because I am using the grsec patch also and it's a > > non-trivial merge, for testing, would you perhaps be kind > > enough to break out the relevant changes into a standalone > > patch? > sure, we usually do that anyways for distro > integrators and interested folks > > (Or perhaps I can try interdiff?) > works too, but not required, see above ... > > Note also, if it's useful I can easily package up my kernel > > tree and vserver-guest (however, for the guest all I did was > > pull down the latest gluster 3.02 code using the gentoo > > ebuild. I believe it should be reproducible with other > > distro's packages) > if possible, pay a visit on the IRC channel, > we'll go from there (simpler than via email) here is a patch which might just work for your setup: http://vserver.13thfloor.at/ExperimentalT/delta-trusted-feat01.diff keep in mind that you need to specify the capability numerically, as util-vserver does not know the name yet ... let me know how it goes, best, Herbert > > I anticipate running into other issues with glusterfs in a > > guest (under load), but I guess lets see how we get on... > would be interesting to know .... > best, > Herbert > > Many thanks > > Ed Wildgoose