Subject: Re: [vserver] Re: autofs problem
From: Herbert Poetzl <herbert@13thfloor.at>
Date: Tue, 4 Sep 2007 17:05:22 +0200

On Tue, Sep 04, 2007 at 03:12:56PM +0200, Petar Hitij wrote:
> On 9/4/07, Petar Hitij <petahi@gmail.com> wrote:
> > I have within the same host one guest that has hosts autofs transparently
> > working, the other guest however doesn't work.  If I touch the automounted
> > directory within host it gets mounted, but I cannot see it within the
> > guest. The other guest works.
> >
> > The difference between the guests is that one has hidden interface and mounts
> > and not working autofs. The other has not hidden interface and mounts
> > and working autofs. That is why I tried to find a flag to disable hiding
> > interface and mounts in the documentation.
> >
> > Would somebody please show me how to disable hiding the mounts and interface,
> > or how to make autofs to work.
> >
> >
> >
> > vigil:/etc/vservers# vserver-info
> > Versions:
> >                    Kernel: 2.6.18-4-vserver-amd64
> >                    VS-API: 0x00020002
> >              util-vserver: 0.30.212; Dec  9 2006, 20:37:54
> >
> > Features:
> >                        CC: gcc, gcc (GCC) 4.1.2 20061115 (prerelease)
> > (Debian 4.1.1-20)
> >                       CXX: g++, g++ (GCC) 4.1.2 20061115 (prerelease)
> > (Debian 4.1.1-20)
> >                  CPPFLAGS: ''
> >                    CFLAGS: '-Wall -g  -O2 -std=c99 -Wall -pedantic -W
> > -funit-at-a-time'
> >                  CXXFLAGS: '-g -O2 -ansi -Wall -pedantic -W
> > -fmessage-length=0 -funit-at-a-time'
> >                build/host: x86_64-pc-linux-gnu/x86_64-pc-linux-gnu
> >              Use dietlibc: yes
> >        Build C++ programs: yes
> >        Build C99 programs: yes
> >            Available APIs: compat,v11,fscompat,v13,net,v21,oldproc,olduts
> >             ext2fs Source: e2fsprogs
> >     syscall(2) invocation: alternative
> >       vserver(2) syscall#: 236/glibc
> >
> > Paths:
> >                    prefix: /usr
> >         sysconf-Directory: /etc
> >             cfg-Directory: /etc/vservers
> >          initrd-Directory: $(sysconfdir)/init.d
> >        pkgstate-Directory: /var/run/vservers
> >           vserver-Rootdir: /var/lib/vservers
> >
> 
> I have found the solution in irc logs:
> 
>     root@host# touch /etc/vservers/pasat/nonamespaces
>     root@host# vserver pasat restart
> 
> It is probably less secure than with namespaces.

you might be able to get the proper behaviour if
you bind mount the autofs directory into your guest's
namespace, but I'm not sure that works, as autofs is
very special in the way it handles access ...

HTH,
Herbert