libvirt users - Apr 2015 - Re: Mounting directory as readonly within LXC

Hello

Is there a way to mount a directory as readonly when using LXC with libvirt?

Something like:

                <filesystem type="mount">
                    <source dir="/sw/py27/python2.7_x86_64"/>
                    <target dir="/opt//py27"/>
                    <readonly/>
                </filesystem>


The documentation says readonly only works with KVM/QEMU.

Regards,
Harish

On 20.04.2015 12:58, Harish Vishwanath wrote:
> Hello
> 
> Is there a way to mount a directory as readonly when using LXC with
libvirt?
> 
> Something like:
> 
>                 <filesystem type="mount">
>                     <source
dir="/sw/py27/python2.7_x86_64"/>
>                     <target dir="/opt//py27"/>
>                     <readonly/>
>                 </filesystem>
> 
> 
> The documentation says readonly only works with KVM/QEMU.
That's a bug in our docs. Going through the code it seems like it should
work on LXC too. Mind trying out and posting a documentation patch?

Michal

Hi Michal

Thanks. I did test it out with lxc driver and <readonly/> works fine. I
would like to send a pull request/ patch for the documentation, however, I
am having a tough time figuring out the source file the domain xml
reference section.

http://libvirt.org/git/?p=libvirt-appdev-guide.git;a=tree;f=en-US;h=e620f903954760dfecf12c79981f8364976584fc;hb=HEAD

I even tried to lookup form the gitweb interface - no luck. Which file is
creating XML reference section?

Regards
Harish

Regards,
Harish

On Mon, Apr 20, 2015 at 4:43 PM, Michal Privoznik <mprivozn@redhat.com>
wrote:
> On 20.04.2015 12:58, Harish Vishwanath wrote:
> > Hello
> >
> > Is there a way to mount a directory as readonly when using LXC with
> libvirt?
> >
> > Something like:
> >
> >                 <filesystem type="mount">
> >                     <source
dir="/sw/py27/python2.7_x86_64"/>
> >                     <target dir="/opt//py27"/>
> >                     <readonly/>
> >                 </filesystem>
> >
> >
> > The documentation says readonly only works with KVM/QEMU.
>
> That's a bug in our docs. Going through the code it seems like it
should
> work on LXC too. Mind trying out and posting a documentation patch?
>
> Michal
>