[Pkg-systemd-maintainers] Bug#739593: closed by Michael Stapelberg <stapelberg at debian.org> (Re: Bug#739593: systemd makes / shared by default)

[Christoph Berg]

Control: severity -1 important
Control: retitle -1 systemd makes / shared by default

Re: Sam Morris 2014-02-24 <20140224122751.GA7788 at traxus.robots.org.uk>
> > I don't think we as PostgreSQL maintainers should be messing with the
> > configuration of / to enable the testsuite.
> 
> The tests will still break if the admin has set shared propagation on /.
> In my own code that uses CLONE_NEWNS for the same reason, I explicitly
> run 'mount --make-rprivate /' to bring the propagation settings into a
> known desired state; I suggest that others do the same.

The bit I was missing here is that I can run "mount --make-rprivate /"
*inside* the CLONE_NEWNS namespace, so that it doesn't modify the
system's global state, but just what I am seeing. (Does anyone
actually understand these semantics?!)

We can put that into our unshare -m scripts, so I guess the problem is
solved for us, but still, the question remains if systemd should
override the kernel default here. (Hence downgrading the bug.)

Mit freundlichen Grüßen,
Christoph Berg
-- 
Senior Berater, Tel.: +49 (0)21 61 / 46 43-187
credativ GmbH, HRB Mönchengladbach 12080, USt-ID-Nummer: DE204566209
Hohenzollernstr. 133, 41061 Mönchengladbach
Geschäftsführung: Dr. Michael Meskes, Jörg Folz, Sascha Heuer
pgp fingerprint: 5C48 FE61 57F4 9179 5970  87C6 4C5A 6BAB 12D2 A7AE
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 819 bytes
Desc: Digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-systemd-maintainers/attachments/20140224/10656475/attachment-0002.sig>