Hi Daniel,
On Fri, Mar 6, 2009 at 11:28 PM, Daniel P. Berrange <berrange(a)redhat.com> wrote:
On Fri, Mar 06, 2009 at 02:27:04PM +0100, Daniel Veillard wrote:
> On Thu, Mar 05, 2009 at 02:34:48AM +0900, Ryota Ozaki wrote:
> > Hi,
> >
> > This patch enables to get CPU usage of a lxc using cpuacct subsystem
> > of cgroups.
>
> Looks cool, what kernel version is required to make use of this ?
> The kernel patch seems to be from last december, but I'm not sure.
> I would just prefer to make sure it's in a released kernel version
> before applying the patch here :-)
It is in 2.6.27 because I can see it there on my Fedora 9 box after
doing
# mount -t cgroup none /mnt/cg
# ls /mnt/cg
cpuacct.usage cpuset.memory_pressure_enabled devices.deny
cpuset.cpu_exclusive cpuset.memory_spread_page devices.list
cpuset.cpus cpuset.memory_spread_slab notify_on_release
cpuset.mem_exclusive cpuset.mems release_agent
cpuset.mem_hardwall cpuset.sched_load_balance tasks
cpuset.memory_migrate cpuset.sched_relax_domain_level
cpuset.memory_pressure devices.allow
The Linux kernel support for containers is still incomplete, so I don't
think it is worth fixing on a long term minimum kernel version for LXC
just yet. We still need the PTS filesystem virtualization before you can
consider LXC a reasonably secure container and I don't think that's
until 2.6.30.
2.6.29 will include 'devpts multiple instances' feature so I hope LXC in
the next released kernel will be secure enough. I'm missing anything?
Thanks,
ozaki-r
Daniel
--
|: Red Hat, Engineering, London -o-
http://people.redhat.com/berrange/ :|
|:
http://libvirt.org -o- http://virt-manager.org -o- http://ovirt.org :|
|:
http://autobuild.org -o-
http://search.cpan.org/~danberr/ :|
|: GnuPG: 7D3B9505 -o- F3C9 553F A1DA 4AC2 5648 23C1 B3DF F742 7D3B 9505 :|