Subject: Re: [vserver] problems mounting fuse filesystem
From: Herbert Poetzl <herbert@13thfloor.at>
Date: Sat, 6 Mar 2010 00:58:10 +0100

On Fri, Mar 05, 2010 at 06:50:01PM +0100, Herbert Poetzl wrote:
> On Fri, Mar 05, 2010 at 02:58:45PM +0000, Ed W wrote:
> > Hi

> > >so you need to have CAP_SYS_ADMIN inside the guest for now
> > >to create or modify the 'trusted' namespace ... let me know
> > >if you want to do some testing with a FS_TRUSTED flag ...

> > Definitely yes please.

> > I have sent a donation separately hopefully to incentivise 
> > such a new feature...

> many thanks for that! quite appreciated!

> > Note, because I am using the grsec patch also and it's a 
> > non-trivial merge, for testing, would you perhaps be kind 
> > enough to break out the relevant changes into a standalone 
> > patch? 

> sure, we usually do that anyways for distro
> integrators and interested folks

> > (Or perhaps I can try interdiff?)

> works too, but not required, see above ...

> > Note also, if it's useful I can easily package up my kernel 
> > tree and vserver-guest (however, for the guest all I did was 
> > pull down the latest gluster 3.02 code using the gentoo 
> > ebuild. I believe it should be reproducible with other 
> > distro's packages)

> if possible, pay a visit on the IRC channel,
> we'll go from there (simpler than via email)

here is a patch which might just work for your setup:
http://vserver.13thfloor.at/ExperimentalT/delta-trusted-feat01.diff

keep in mind that you need to specify the capability
numerically, as util-vserver does not know the name
yet ...

let me know how it goes, best,
Herbert

> > I anticipate running into other issues with glusterfs in a 
> > guest (under load), but I guess lets see how we get on...

> would be interesting to know ....

> best,
> Herbert

> > Many thanks
> > Ed Wildgoose