Re: [PATCH net-next 3/4] bpf: add support for persistent maps/progs

[Daniel Borkmann]

On 10/22/2015 09:35 PM, Eric W. Biederman wrote:
> Daniel Borkmann <daniel@xxxxxxxxxxxxx> writes:
> > On 10/20/2015 08:56 PM, Eric W. Biederman wrote:
> > ...
> > > Just FYI:  Using a device for this kind of interface is pretty
> > > much a non-starter as that quickly gets you into situations where
> > > things do not work in containers.  If someone gets a version of device
> > > namespaces past GregKH it might be up for discussion to use character
> > > devices.
> >
> > Okay, you are referring to this discussion here:
> >
> >    http://thread.gmane.org/gmane.linux.kernel.containers/26760
>
> That is a piece of it.  It is an old old discussion (which generally has
> been handled poorly).  For the forseeable future device namespaces have
> a firm NACK by GregKH.  Which means that dynamic character device based
> interfaces do not work in containers.  Which means if you are not
> talking about physical hardware, character devices are a poor fit.

Yes, it breaks down with real namespace support. Reworking the set with
an improved version of the fs code is already in progress.

Thanks,
Daniel
--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/