[Samba] LXC, ADDC and xattr_tdb...

Rowland penny rpenny at samba.org
Fri Feb 28 17:12:25 UTC 2020

On 28/02/2020 17:02, Marco Gaiarin via samba wrote:
> I came back on this topic.
> As just depicted on:
> 	https://lists.samba.org/archive/samba/2019-December/227626.html
> there's no way to run samba AD DC on a unprivileged LXC container,
> because samba need the XATTR SYSTEM namespace that is reserved on
> container.
> Could be doable 'offloading' all XATTR from filesystem with a module
> like xattr_tdb?
> 	https://wiki.samba.org/index.php/Using_the_xattr_tdb_VFS_Module
> how much is 'inefficient' for an AD DC?
> There's some way, eventually,  to ''backup'' XATTR and restore it to
> migrate from filesystem to xattr_tdb?
> Thanks.
It doesn't scale, if it did, don't you think Samba would do this ?

Why are you insistent on running a DC in an unprivileged container ?


More information about the samba mailing list