lxc: containers shows hosts's partitions

[ned]

I notices when logged inside lxc container if I do cat /proc/partitions I will have access to hosts's partitions.

Is there a way to hide host's partitions?

pveversion
pve-manager/4.4-12/e71b7a74 (running kernel: 4.4.35-1-pve)

 

[dietmar]

You can see the host partitions, but you cannot access them.

 

[ned]

Hi dietmar,
Is this something I can hide or do I have to wait for the lxc team to implement something? Thanks

 

[fabian]

Hi dietmar,
Is this something I can hide or do I have to wait for the lxc team to implement something? Thanks

while lxcfs could somehow also "virtualize" this file - the whole sys interface of the kernel would still expose it.. this is rather deeply rooted into the way LXC (and other cgroups based container solutions) work, and would require rather heavy changes on the kernel side.

 

[dietmar]

==> please use KVM if you want to hide everything.