Re: [systemd-devel] A potentially cross platform solution forprocess containment in init applications

2014-03-20 Thread Rong
> OK, I'll bite. > > The good thing about cgroupfs is that processes cannot escape > supervision, unless they are priviliged and do some non-trivial stuff > that cannot happen by accident, very much unlike an fd which anyone can > close and which is closed all the time. Also, cgroups provide us wit

[systemd-devel] A potentially cross platform solution for process containment in init applications

2014-03-20 Thread Rong
Hi, Currently systemd is using cgroups kernel interface for process containment. Cgroups is a very easy solution on linux to handle the double fork used by daemons, and it can help respawning services in case of self-crash. However cgroups seems to be the major stopper for systemd to be cross p