Questions tagged [namespaces]
The namespaces tag has no usage guidance.
61
questions
1
vote
0answers
41 views
namespace - nobody to root mapping
I'd like to create new user namespace being root with the command:
# unshare -U bash
$ echo $$
3500
$ id
uid=65534(nobody) ... etc
After that I edit /proc/3500/uid_map im my initial namespace as root:...
0
votes
1answer
25 views
Build a multitenant managed control plane for kubernetes
I noticed that there are some cloud providers that offer a managed solution for kubernetes, I'm wondering what are the various components involved in this offering.
My gut feeling is telling me there ...
1
vote
0answers
23 views
Copy file from real home into DynamicUser home
I am working on restricting the permssions of user units in SystemD. One of the things that I want to do is set ProtectHome=yes (or DynamicUser=yes), but the process needs access to the .Xauthority ...
2
votes
1answer
276 views
Alpine linux veth network/bridge has no internet
I have been trying to follow multiple guides to setup a veth-pair for 2 namespaces which can communicate with each other on alpine linux. So far I have communication between namespaces working but ...
0
votes
0answers
477 views
Error: Connection activation failed: Failed to find a compatible device for this connection
Hi linux newbie here pardon any mistakes.
I have configured a network namespace local-routeTable and have brought up interface eth3 inside the namespace:
# ip netns exec local-routeTable ifconfig
eth3:...
0
votes
1answer
347 views
Disable mount namespaces in Apache/PHP-FPM
For a web GUI to manage NFS mount points, we've run into a problem after migrating to Centos 8.
JS Billings noted that:
CentOS8 runs httpd in a private namespace (with its own private /tmp).
Since it'...
1
vote
1answer
496 views
Run docker in an existing network namespace?
Would it be possible to run a docker container inside an existing namespace ?
I created a namespace using:
ip netns add client
Now I want to run a container (with a bridge or host network, whatever is ...
2
votes
2answers
226 views
Unable to reach network namespace through master
I'm trying to create an isolated lab using network namespaces.
It works correctly, that is, only the machines in the network namespace can talk.
But now I want reach the machines by localhost using v-...
0
votes
1answer
298 views
Dovecot: issue with converting mdbox to MailDir
I have a problem to convert mdbox to MailDir. Log from that process looks like:
/bin/dsync -Dv -u user@domian.com mirror maildir:/tmp/destination/mailboxes/user@domian.com
Debug: Loading modules ...
0
votes
0answers
417 views
Communicating across macvlan network namespaces
Let's create two macvlan's and attach network namespaces to them:
$ sudo ip link add macvlan1 link eth0 type macvlan mode bridge
$ sudo ip link add macvlan2 link eth0 type macvlan mode bridge
$ sudo ...
1
vote
1answer
41 views
Added DFSR to Domain controller, non domain admins can not create shares
My situation is I deployed a couple of domain controllers at some locations. My boss didn't want to spend money on servers, so I reused some servers we were not using.
I installed them as domain ...
1
vote
1answer
465 views
How to connect two networks having the same network address using a linux host which is part of both networks with the same IP address?
I have two cloned networks (lan1 and lan2) used for testing purposes, each with the same address space 10.20.80.0/22:
# 10.20.80.0/22
10.20.80.0 # first address
...
10.20.83.254 # last address
...
1
vote
0answers
127 views
Glusterfs support for user namespaces
I have a gluster volume mounted on a host machine and tried to run a namespaced docker container with a bind mount from the gluster mount on the host.
It seems that the user namespacing is not ...
1
vote
0answers
324 views
Linux NFS (v4) user namespace file permissions
I am trying to set up a rootless container setup using podman and am having a problem with file permissions on NFS (running NFSv4).
Within the user namespace, I am able to create files as root on any ...
6
votes
1answer
3k views
Cannot create nested network namespace
Is seems that one is not able to create a network namespace from a network namespace. It results in "Error: Peer netns reference is invalid.".
Is this a bug or is there some kind of limitation that I ...
3
votes
6answers
8k views
Do Containers Have An OS?
I know that containers use the host's kernel and from what I understand , that's the reason we do not need an OS.
My questions are (and I couldn't find any good explanation online) :
1) If that's ...
2
votes
1answer
79 views
How to recover an SSD (Samsung) after deleting all the namespaces?
I deleted all the namespaces (2 were present) on a samsung drive (SSD). Now the drive is not being recognized by the system. How do I recover the SSD?
1
vote
2answers
5k views
How to run a command in another process's network namespace?
There is a process running in its own network namespace. I would like to telnet to the machine and run a command in this process network namespace, something like that (17543 is the pid of the process ...
0
votes
1answer
58 views
Kubernetes, partitioning around clusters and namespaces
Let's say we have 2 subsystems: A & B.
And we have 2 env: QA & Prod.
What would be a better way to organize it around cluster & namespace?. Is it:
One cluster for subsystem A, another ...
8
votes
1answer
7k views
How do I mount a private /proc inside a namespace inside a docker container?
I have a need to create namespaces inside a Docker container. And as part of this, I will need to mount a /proc private to the inner namespace. I realize that I will have to run the container with ...
3
votes
0answers
2k views
bind mount /proc in Docker container with user namespaces enabled
My dockerd (CentOS7: 17.12.0-ce, build c97c6d6) is running with user namespaces enabled for better isolation.
Now I build a image which is supposed to read for monitoring purposes also from /proc of ...
1
vote
1answer
278 views
Error deploying neo4j cluster on Kubernetes namespace
I am trying to install neo4j on kubernetes using Helm to a separate namespace and cluster startup is failing with the below error. But the same install into default namespace is working fine. Anyone ...
4
votes
1answer
1k views
Access another process's mount namespace
Is there a way to inspect the files and directories of another mount namespace?
setns(2) syscall appears to be able to move a thread to another namespace, but if this functionality is not already ...
1
vote
1answer
742 views
Docker namespaces and SELinux not working
My system:
Debian 9 Stretch
Docker version 17.06.0-ce, build 02c1d87
SELinux
This is just running fine.
But, if I also activate Namespace Remapping (default, using the dockremap User), I can't run ...
-2
votes
1answer
126 views
Domain without Nameservers- how to find them [duplicate]
I am a bit new to the servers. I still want to ask one question, and yes I know its a noob question but still... So I bought one domain from amazon AWS. The domain name is droni-bg.eu. Do you know how ...
12
votes
2answers
7k views
Chrome under Docker: CAP_SYS_ADMIN vs privileged? [closed]
I am running chromedriver + chrome inside Docker in my test environment.
Everything was working fine until latest CoreOS upgrade.
These are the versions that seem to work:
VERSION=1185.5.0
...
2
votes
1answer
192 views
Why LXC requires restart?
LXC documentation says:
Just before you create your first container, you probably should logout and login again,
or even reboot your machine to make sure that your user is placed in the right ...
2
votes
0answers
290 views
Can systemd's .mount units be used to mount to points within a service's namespace only?
I am interested in setting a temporary directory that exists for the duration of the .service unit's running - exactly like the PrivateTmp= directive but on a custom mount point specified by a systemd ...
1
vote
0answers
596 views
WebDav Performance - Drive mapping vs Web Browsing
I can't seem to find any information about this topic. We have setup an IIS server with WebDav support and this seems to be a fine solution but we're getting fairly slow performance out of a specific ...
0
votes
1answer
79 views
Linking a domain name to a web server without full masking
I'm currently trying to deploy my first website and I ran trough a small issue with DNS. I have my website www folder available (hosted on atlantic.net cloud) and I registered a domain through godaddy....
-2
votes
2answers
822 views
How to run a program in a new PID namespace
How to run a program in a new PID namespace? All tutorials on the internet show writing some custom C code in order to do it. Is there a command instead for that?
1
vote
0answers
520 views
Forward port to virtual IP in namespace
So, I followed this guide to make a namespace where I can run my VPN:
https://schnouki.net/posts/2014/12/12/openvpn-for-a-single-application-on-linux/
It works fine so far, but I have one problem. I ...
0
votes
1answer
2k views
publish DFS namespaces?
We have multiple domain controllers and file servers, and have recently begun migrating to DFS. Everything works quite well, but one thing has me scratching my head... DFS namespaces not found on ...
1
vote
1answer
878 views
dovecot namespace: empty prefix vs. list=yes
I just upgraded dovecot from 2.1.7 to 2.2.13, and my previously working configuration broke.
I have one user with an empty prefix in his default namespace:
Error: XXXX: Initialization failed: ...
11
votes
3answers
19k views
How can I move an interface out of a network namespace?
If I move an interface temporarily into a netns with
ip link set eth10 netns myns
then it no longer is visible in the root, only within the namespace myns.
How do I move it back, something like (...
2
votes
1answer
2k views
Dovecot not working with added public namespace
we're running Dovecot 2.2.5 under OS X Server 4.1 (under 10.10.3). I'm trying to add a public namespace with some public folders without success.
doveconf -n:
# 2.2.5: /Library/Server/Mail/Config/...
0
votes
0answers
105 views
DFS Namespace is inaccessible when DC4 is up and running
DC1, DC2 and DC3 are at site A. DC4 and DFS server (2008 R2) are at Site B.
DC4 is Server 2003 and not a Global Catalog. DC1, DC2 and DC3 all are Server 2003, FSMO role holders and a Global Catalog. ...
2
votes
2answers
5k views
How to configure a Linux network namespace that allows UDP broadcast
I'm trying to use the ip netns family of commands in Linux to create a network namespace in which I can run a program that uses UDP broadcast. I do not need access to the Internet, or any interface on ...
-1
votes
1answer
675 views
Hosts cannot ping in two name spaces using Open Vswitch
I have two name spaces red and blue. Red is connected to host1, and blue is connected to host2,
but these two hosts cannot ping each other. Here is the commands that I put:
ip link add host1 type ...
-1
votes
1answer
1k views
Dovecot: autocreate public mailboxes?
Currently I have a problem with my understanding of public mailboxes with dovecot.
What is currently running is postfix together with dovecot (also with dovecot's sasl).
Whenever an e-mail reaches my ...
3
votes
0answers
603 views
how to move process from one namespace to other? [closed]
Is there any available method to move process/group of processes from one namespace to other in Linux? I mean methods via commands of some packages or it can be done via setns()? E.g. I have processes ...
0
votes
1answer
1k views
Creating VLANs between network namespaces [closed]
I want to implement the topology shown in the figure below using network namespaces (ns1 to ns4).
...
1
vote
1answer
8k views
Linux network namespaces - ping fails on specific veth
I just started to exploring network namespaces. I try to implement the following simple setting following the article in http://www.opencloudblog.com/?p=42
+--------+ +--------...
2
votes
0answers
1k views
access tap interface in network namespace across machines
I want to be able to access services running on a TAP interface within a namespace from outside the machine where it is running. I have setup that looks like this -
VM1/Machine1
+eth0 : Public ...
10
votes
1answer
6k views
Macvlan based interface pings from host but not from namespace
[EDIT]
The production system is currently a mix physical and ESXi based system. We obviously would never use virtualbox even for a pre-production environment ! It was used here only to quickly narrow ...
2
votes
1answer
275 views
Public dovecot namespace visible only to some users
I have a dovecot IMAP server (version 2.1.7) with Maildirs and a virtual user setup (e.g. all accounts are mapped to the same system user). I’d like to create a public namespace shared between users A ...
2
votes
1answer
3k views
OpenVSwitch between namespaces
I'm trying to configure a bridge between two TAP interfaces each created inside their own network namespace, on Linux.
I'm using OpenVSwitch as software bridge.
These are the steps that I believe ...
0
votes
1answer
5k views
PHP xpath: extract all nodes, even with namespaces
I am new to PHP's simplexml and xpath implementation, but here's what I want to do:
I have this XML file (excerpt from a youtube API response):
<?xml version="1.0" encoding="UTF-8"?>
<feed ...
0
votes
1answer
1k views
Exchange 2010 - smtp namespace sharing
I'm setting up SMTP namespace sharing between two different Exchange 2010 organizations/forests that are connected via an AD trust.
I'm using these 2 articles as references:
Configure Exchange to ...
0
votes
1answer
174 views
Open File dialog shows a renamed folder
I recently renamed a directory in the "My Pictures" folder from "ghostAlbum" to "imageAlbum"
Explorer shows what I would expect (the new folder) as does the command line "dir" command.
Excel's and ...
