Re: [RESEND RFC PATCH 0/1] CAP_SYS_NICE inside user namespace

From: Prakash Sangappa
Date: Thu Nov 21 2019 - 20:54:41 EST




On 11/21/19 10:33 AM, Enrico Weigelt, metux IT consult wrote:
On 18.11.19 21:34, Prakash Sangappa wrote:

It is more the latter. Admin should be able to explicitly decide that container A
workload is to be given priority over other containers.
I guess, you're talking about the host's admin, correct ?

Yes, Specifically host's admin decides which container gets the privilege to increase priority of processes inside that container.


Shouldn't this already be possibly by tweaking the container's cgroups ?

Don't think so. The use case is that admin/user inside the container needs to be able to increase the priority of some the critical processes running in the container.



--mtx