On 12/9/25, 1:55 PM, "Peter Xu" <[email protected] <mailto:[email protected]>> 
wrote:

> On Mon, Dec 08, 2025 at 07:32:41PM +0000, Chaney, Ben wrote:
> >
> > On 12/5/25, 10:13 AM, "Peter Xu" <[email protected] 
> > <mailto:[email protected]> <mailto:[email protected] 
> > <mailto:[email protected]>>> wrote:
> >
> >
> > > Maybe you can stick with -incoming defer, then it'll be after step [3],
> > > which will inherit the modified uid, and mgmt doesn't need to bother
> > > monitoring.
> >
> > I tried this approach, but It doesn't look like it is possible to create the
> > cprsocket later with -incoming defer.
>
>
> You'll still need to chmod for the cpr socket. "defer" will still help the
> main channel to be created with the uid provided.

Thanks for the pointers. I was able to get the incoming defer method
working, but it has much worse performance than the other method.

Would you be open to a solution where we chown only the migration
sockets, or would that run into similar concerns?

Thanks,
        Ben




Reply via email to