Re: [systemd-devel] containers again

2015-09-08 Thread Richard Maw
On Tue, Sep 08, 2015 at 04:14:58PM +0200, Michał Zegan wrote: > Hello. > > Before you stated that containers are not a security feature right > now. It is required to manually shift uids/gids on images etc. Yes. Also, if you uid-shift the container's root directory, using `--private-users` witho

[systemd-devel] containers again

2015-09-08 Thread Michał Zegan
Hello. Before you stated that containers are not a security feature right now. It is required to manually shift uids/gids on images etc. What are other known problems with containers that use ALL namespaces? Like if not counting the problem of uid allocation and manual shifting of them. _