{"action":"created","issue":{"url":"https://api.github.com/repos/docker/docker/issues/7906","labels_url":"https://api.github.com/repos/docker/docker/issues/7906/labels{/name}","comments_url":"https://api.github.com/repos/docker/docker/issues/7906/comments","events_url":"https://api.github.com/repos/docker/docker/issues/7906/events","html_url":"https://github.com/docker/docker/issues/7906","id":42069509,"number":7906,"title":"Proposal: Support for user namespaces","user":{"login":"dineshs-altiscale","id":5912118,"avatar_url":"https://avatars.githubusercontent.com/u/5912118?v=3","gravatar_id":"","url":"https://api.github.com/users/dineshs-altiscale","html_url":"https://github.com/dineshs-altiscale","followers_url":"https://api.github.com/users/dineshs-altiscale/followers","following_url":"https://api.github.com/users/dineshs-altiscale/following{/other_user}","gists_url":"https://api.github.com/users/dineshs-altiscale/gists{/gist_id}","starred_url":"https://api.github.com/users/dineshs-altiscale/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dineshs-altiscale/subscriptions","organizations_url":"https://api.github.com/users/dineshs-altiscale/orgs","repos_url":"https://api.github.com/users/dineshs-altiscale/repos","events_url":"https://api.github.com/users/dineshs-altiscale/events{/privacy}","received_events_url":"https://api.github.com/users/dineshs-altiscale/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/docker/docker/labels/feature","name":"feature","color":"bfd4f2"},{"url":"https://api.github.com/repos/docker/docker/labels/Proposal","name":"Proposal","color":"009800"}],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":6,"created_at":"2014-09-05T17:24:52Z","updated_at":"2015-03-09T16:51:06Z","closed_at":null,"body":"The details of user namespace support have been discussed quite a bit under the following docker and libcontainer PRs.  However, there was never really a proposal to provide a space to discuss the big picture.  This issue is created to cover that purpose.\r\n\r\nhttps://github.com/docker/docker/pull/4572\r\nhttps://github.com/docker/libcontainer/pull/23\r\nhttps://github.com/docker/libcontainer/pull/53\r\n\r\nTo summarize, docker support for user namespaces requires the backend exec driver to provide the necessary system interface.  Currently LXC supports it but libcontainer support is gated by Go (https://code.google.com/p/go/issues/detail?id=8447).\r\n\r\nOne of the questions to answer is whether the high level support in Docker (regardless of the backend) can be shepherded along based on LXC, while Go issues for libcontainer are being worked out in parallel.  If so, we can discuss approaches currently proposed in https://github.com/docker/docker/pull/4572 along with other potential alternatives."},"comment":{"url":"https://api.github.com/repos/docker/docker/issues/comments/77893453","html_url":"https://github.com/docker/docker/issues/7906#issuecomment-77893453","issue_url":"https://api.github.com/repos/docker/docker/issues/7906","id":77893453,"user":{"login":"estesp","id":1397980,"avatar_url":"https://avatars.githubusercontent.com/u/1397980?v=3","gravatar_id":"","url":"https://api.github.com/users/estesp","html_url":"https://github.com/estesp","followers_url":"https://api.github.com/users/estesp/followers","following_url":"https://api.github.com/users/estesp/following{/other_user}","gists_url":"https://api.github.com/users/estesp/gists{/gist_id}","starred_url":"https://api.github.com/users/estesp/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/estesp/subscriptions","organizations_url":"https://api.github.com/users/estesp/orgs","repos_url":"https://api.github.com/users/estesp/repos","events_url":"https://api.github.com/users/estesp/events{/privacy}","received_events_url":"https://api.github.com/users/estesp/received_events","type":"User","site_admin":false},"created_at":"2015-03-09T16:51:06Z","updated_at":"2015-03-09T16:51:06Z","body":"See PR #11253 for the user-facing proposal.  I can't confirm that all components will make it for 1.6, but work is ongoing.  The most important is to have the libcontainer version that has the support in the Docker vendor tree, and that PR (to update libcontainer in `vendor/` and use the new libcontainer API) is going through review at the moment."}}