Re: [atomic-devel] Systemd, containers, and pid=host

[Lars Kellogg-Stedman <lars redhat com>]

On Thu, Mar 12, 2015 at 01:21:01PM -0400, Daniel J Walsh wrote:
> docker run -d -v /sys/fs/cgroup:/sys/fs/cgroup -n MYUNIT MYUNIT
>  
> With docker-1.5.0 in rhel this should run systemd within a container

Have we done something to remove the requirement for --privileged when
using systemd in a container?  With vanilla docker, units making use
of, e.g., PrivateTmp=true will fail without CAP_SYS_ADMIN.

-- 
Lars Kellogg-Stedman <lars redhat com> | larsks @ {freenode,twitter,github}
Cloud Engineering / OpenStack          | http://blog.oddbit.com/

Attachment: pgpiIAHypNzNZ.pgp
Description: PGP signature