-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 08/03/2012 03:45 PM, Lennart Poettering wrote: > On Mon, 30.07.12 17:13, Daniel J Walsh ([email protected]) wrote: > >> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 >> >> In containers we are blocking systemd from creating containers. If I try >> to run httpd within a container it asks for PrivateTmp and SELinux stops >> systemd from setting up the PrivateTmp. In order to get around this, I >> decided to try to create a unit file based off of the httpd unit file. >> >> cat /etc/systemd/system/sandbox.target.wants/httpd.service > > Files in .wants/ directory should be symlinks (since they just are used to > express deps, not the actual services). Hence you want to place this > service file in /etc/systemd/system/httpd.service and then make > /etc/systemd/system/sandbox.target.wants/httpd.service a symlink to it. > > And then use "systemctl daemon-reload" to actviate these changes. And use > "systemctl show httpd.service" to check whether your changes were properly > applied. > > Lennart > Yes I figured this all out last week. It now seems to work pretty well. Hopefull new versions of libvirt and libvirt-sandbox get pushed into Rawhide this week, so we can get people playing with this.
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iEYEARECAAYFAlAfzEsACgkQrlYvE4MpobN8UgCfX6PYDgalQvTas57pIMk9l/Jl 7sgAnApiyv/NzY1m8N/PaNjUaYl8XAMz =x1Tu -----END PGP SIGNATURE----- _______________________________________________ systemd-devel mailing list [email protected] http://lists.freedesktop.org/mailman/listinfo/systemd-devel
