[buildd-tools-devel] Bug#586333: Debian desktop support for virtualisation

[Roger Leigh]

Hi,

I'd appreciate any input from the Debian desktop (gnome, kde) and
amd64 folks regarding supporting easy integration of support for
running desktop/X applications in a chroot environment, particularly
for running 32-bit programs in a chroot on 64-bit systems.

schroot is commonly used for this task, and I'm adding a "desktop"
configuration profile, which I'd like to work "out of the box" to
allow desktop applications to run inside a chroot.  More detail
is given below, and in the full bug report.

Basically, I'd like to add whatever pieces are needed from the
host system, be it bind mounting filesystems, making sure
the needed services are accessible, copying over configuration
etc.  Anything that makes using a chroot more transparent and
accessible to users is on the cards.  If anyone has already
added customisations to schroot to make this work, sharing your
configuration details would also be useful.


Thanks!
Roger


On Thu, Jun 24, 2010 at 12:15:42AM +0100, Roger Leigh wrote:
> Over the last couple of nights, I've added support for "profiles"
> to schroot, and one of these is a "desktop" profile.  Currently,
> this is the fstab for this profile on Linux:
> 
> # fstab: static file system information for chroots.
> # Note that the mount point will be prefixed by the chroot path
> # (CHROOT_PATH)
> #
> # <file system> <mount point>   <type>  <options>       <dump>  <pass>
> /proc           /proc           none    rw,rbind        0       0
> /sysfs          /sysfs          none    rw,rbind        0       0
> /dev            /dev            none    rw,rbind        0       0
> /home           /home           none    rw,bind         0       0
> /tmp            /tmp            none    rw,bind         0       0
> /var/run        /var/run        none    rw,bind         0       0
> 
> I opted to bind mount the whole of /var/run to get other stuff
> like dbus sockets.  However, doing this more selectively might
> reduce the change of nasty problems such as things in the
> chroot interfering with services on the host.
> 
> Do you think there are any other things that need binding into the
> chroot under e.g. /var that we've missed?
> 
> The same applies to files copied in with "copyfiles"--is there anything
> else here we should add?  Currently this is just resolv.conf, but any
> other stuff needed by X or other things in the user's session could be
> copied here.

Regards,
Roger

-- 
  .''`.  Roger Leigh
 : :' :  Debian GNU/Linux             http://people.debian.org/~rleigh/
 `. `'   Printing on GNU/Linux?       http://gutenprint.sourceforge.net/
   `-    GPG Public Key: 0x25BFB848   Please GPG sign your mail.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL: <http://lists.alioth.debian.org/pipermail/buildd-tools-devel/attachments/20100624/2b930c5a/attachment.pgp>