| |||||||||||||
Make it complete, please.Make it complete, please.Posted Apr 13, 2006 8:01 UTC (Thu) by kleptog (subscriber, #1183)Parent article: Containers and lightweight virtualization
All I can say is, if you do it, do it properly. For example, on FreeBSD the jail seperates process spaces but not SysV shared memory, which means the IPC_STAT commend returns references to processes you can't see. This in turn breaks code that tries to clean-up lost IPC segments because it assumes the segment is orphand if it can't see an owning process.
Don't assume you can do it piece by piece. Do it all or not at all.
(Log in to post comments)
|
|||||||||||||