cgroup: add support for cgroup namespaces

cgroup namespaces are imminent to be merged into the kernel (indeed, they
went into and out of 4.5 for minor issues), and will be carried as a
patchset in the ubuntu 16.04 kernel. Here's an attempt at c/r.

There are essentially three key steps:
  * on dump, in parse_task_cgroup, we should ask the task what cgroups it
    thinks it is in (unless it has the same cgroup ns id as its parent, then we
    should just take the prefixes from the parent's set), and set the prefix on
    the cg set
  * add a new restore step, prepare_cgroup_namespace(), which happens in
    prepare_task_cgroup() that does an unshare() if necessary
  * when restoring, in move_in_cgroup, if we're going to restore via usernsd,
    leave the full path. if not, use (cgset->path + len(cgset->cgns_prefix) as
    the path, since we will have already moved into the cgns_prefix and unshared.

Another observation here is that we can support nesting, since these are
restored heirarchically by nature.

v2: * store cgns prefix length instead of full prefix in images
    * set has_cgroup_ns_id conditionally
    * drop unused argument to move_in_cgroup
    * add extra comments about what is happening when unsharing() on
      restore
    * add extra comments about what is happening when computing the actual
      cgns prefix

Signed-off-by: Tycho Andersen <tycho.andersen@canonical.com>
Signed-off-by: Pavel Emelyanov <xemul@virtuozzo.com>

1 files changed, 3 insertions, 2 deletions

diff --git a/images/cgroup.proto b/images/cgroup.proto
index dcd2fe812..e4154f2ca 100644
--- a/images/cgroup.proto
+++ b/images/cgroup.proto
@@ -23,8 +23,9 @@ message cg_controller_entry {
 }
 
 message cg_member_entry {
-	required string name	= 1;
-	required string path	= 2;
+	required string name		= 1;
+	required string path		= 2;
+	optional uint32 cgns_prefix	= 3;
 }
 
 message cg_set_entry {