cc-shim: cc-shim is not namespaced

[sameo]

From @mcastelino on April 21, 2017 20:56

cc-shim is not namespaced to match the process that it represents. This results in inconsistencies when trying to use the PID reported by docker to examine the process.

PID=$(docker inspect --format {{.State.Pid}} <container name|id>)
sudo nsenter --target $PID --mount --uts --ipc --net --pid

Will result in incorrect information.

We should place the cc shim in the proper namespaces. Additionally we should document this limitation until we fix this issue.

Copied from original issue: intel/cc-oci-runtime#836

[sameo]

From @devimc on April 27, 2017 13:35

cc-shim is part of the memory cgroup but yes we have to add it to a namespace
adding this limitation to release notes
thanks

[sameo]

From @dlespiau on April 27, 2017 13:45

question: is it time to put these bugs/feature request as 3.0 items?

[sameo]

From @devimc on April 27, 2017 13:50

@dlespiau I think so, what do you think @mcastelino ?

[sameo]

This issue was moved to clearcontainers/runtime#122