From mboxrd@z Thu Jan 1 00:00:00 1970 From: "Thompson, David" Subject: Re: Update on GuixSD containers Date: Sat, 13 Jun 2015 09:14:20 -0400 Message-ID: References: <87bngok1vt.fsf@gnu.org> <87381xklk6.fsf@gnu.org> <877fr7dah1.fsf@gnu.org> Mime-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Return-path: Received: from eggs.gnu.org ([2001:4830:134:3::10]:55289) by lists.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Z3lGS-0004dg-O1 for guix-devel@gnu.org; Sat, 13 Jun 2015 09:14:25 -0400 Received: from Debian-exim by eggs.gnu.org with spam-scanned (Exim 4.71) (envelope-from ) id 1Z3lGP-0002wX-I1 for guix-devel@gnu.org; Sat, 13 Jun 2015 09:14:24 -0400 Received: from mail-pd0-f169.google.com ([209.85.192.169]:36068) by eggs.gnu.org with esmtp (Exim 4.71) (envelope-from ) id 1Z3lGP-0002vr-Dh for guix-devel@gnu.org; Sat, 13 Jun 2015 09:14:21 -0400 Received: by pdjm12 with SMTP id m12so40900205pdj.3 for ; Sat, 13 Jun 2015 06:14:20 -0700 (PDT) In-Reply-To: <877fr7dah1.fsf@gnu.org> List-Id: "Development of GNU Guix and the GNU System distribution." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org Sender: guix-devel-bounces+gcggd-guix-devel=m.gmane.org@gnu.org To: =?UTF-8?Q?Ludovic_Court=C3=A8s?= Cc: guix-devel On Sat, Jun 13, 2015 at 9:06 AM, Ludovic Court=C3=A8s wrote: > "Thompson, David" skribis: > >> On Fri, Jun 12, 2015 at 11:12 AM, Ludovic Court=C3=A8s wr= ote: >>> "Thompson, David" skribis: >>> >>>> Yeah, our daemon would do the same thing. We could maybe even have a >>>> little Guile library that allows one to evaluate arbitrary scheme code >>>> from within the container. :) >>> >>> Actually, something quite easily feasible would be this: >>> >>> (eval-in-container #~(system* #$evil-program >>> #$(local-file "important-data.txt")) >>> #:networking? #f) >>> >>> ... where the container=E2=80=99s store would be populated with just >>> EVIL-PROGRAM and the local file. >>> >>> Food for thought... >> >> Ooooh yeah! That would be cool. Though I think we should still spawn >> a dmd process as PID 1 to deal with reaping zombie processes. We >> could generate a single service that runs the gexp script. How does >> that sound? > > Wouldn=E2=80=99t it be enough to have the Guile process that evaluates th= e > expression be PID 1 in the container, as is the case in guix-daemon > containers? Sure, it would work, but my concern is that a long-running process on a user's machine could create and orphan tons of child processes and nothing would be able to clean them up until the PID namespace is garbage collected. - Dave