Re: [RFD] cgroup: about multiple hierarchies

Quoting Eric W. Biederman (ebiederm-aS9lmoZGLiVWk0Htik3J/w@public.gmane.org):

4.  Only allow a single controller per hierarchy.  So that we can
make reasonable choice points.  If the hierarchy is to be about
policy I am baffled by concept of putting multiple controllers in
a single hierarchy.  Because where you clump things together for
policy for one controller in general does not seem to be where you
want to clump things together for another controller.

This I agree with.  The only reasonably use I've seen for the
composed hierarchies is the ns cgroup, which was the wrong tool
for what it wanted to do anyway.  With ns cgroup deprecated, every
modern setup I've seen mounts each cgroup separately.

quoted

So, I mean, I don't know.  What do other people think?  Is this a
unnecessary worry?  Are people generally happy with the way things
are?  Lennart, Kay, what do you guys think?

I think the current situation is crazy.

I especially think it is crazy that inside a container I can't create
a fresh set of cgroup mounts, and establish a fresh "hierarchy" relative
to the process that created the cgroup mounts.  It sucks that
controllers may nest fine but hierarchies don't nest.

Again I agree here.  In the past there has been brought up the idea
of fake cgroup roots ( http://thread.gmane.org/gmane.linux.kernel/1197643 )
I haven't looked in detail, but I know some people hated this particular
idea.  But it tried to solve this problem.

Perhaps we can attack this in two stages.

1. get rid of the ability to compose cgroups.  See how much this
simplifies the code.

2. add the ability to somehow namespace the cgroup mounts to allow a
container to freshly mount cgroups.

-serge