1 Feb 2006 01:01
Re: RFC [patch 13/34] PID Virtualization Define new task_pid api
Hubertus Franke <frankeh <at> watson.ibm.com>
2006-02-01 00:01:41 GMT
2006-02-01 00:01:41 GMT
Linus Torvalds wrote: > (I'm coming in late, it's not been a high priority for me) > > On Fri, 20 Jan 2006, Hubertus Franke wrote: > >>2nd: >>==== Issue: we don't need pid virtualization, instead simply use >><container,pid> pair. >> >>This requires a bit more thought. Essentially that's what I was doing, >>but I mangled them into the same pid and using masking to add/remove the >>container for internal use. As pointed out by Alan(?), we can indeed >>reused the same pid internally many times as long as we can distinguish >>during the pid-to-task_struct lookup. This is easily done because, the >>caller provides the context hence the container for the lookup. > > > This is my preferred approach BY FAR. > > Doing a <container,pid> approach is very natural, and avoids almost all > issues. At most, you might want to have a new system call (most naturally > just the one that is limited to the "init container" - it the one that we > boot up with) that can specify both container and pid explicitly, and see > all processes and access all processes. But all "normal" system calls > would only ever operate within their container. That's what the current patch set does. One "global container" that sees and accesses all and the rest is limited to their respective "container".(Continue reading)
RSS Feed