Re: Network namespaces a path to mergable code.

"Serge E. Hallyn" [off-list ref] writes:

Quoting Eric W. Biederman (ebiederm@xmission.com):

quoted

quoted

I think we're reaching the limits of namespaces. It would be much easier
with a container id in each kernel object we want to isolate.

Nope.  Except for the fact that names are peculiar (sockets, network
device names, IP address, routes...) the network stack splits quite cleanly.

I did all of this in a proof of concept mode several months ago and
the code is still sitting in my git tree on kernel.org.  I even got
the generic stack reference counting fixed.

Eric

Which branch?

It should be the proof-of-concept branch.  It is a development branch so the
history is ugly but the result was fairly decent.

Eric