[Samba] LXC, ADDC and xattr_tdb...

[Rowland penny]

On 28/02/2020 17:02, Marco Gaiarin via samba wrote:
> I came back on this topic.
>
> As just depicted on:
>
> 	https://lists.samba.org/archive/samba/2019-December/227626.html
>
> there's no way to run samba AD DC on a unprivileged LXC container,
> because samba need the XATTR SYSTEM namespace that is reserved on
> container.
>
> Could be doable 'offloading' all XATTR from filesystem with a module
> like xattr_tdb?
> 	https://wiki.samba.org/index.php/Using_the_xattr_tdb_VFS_Module
> how much is 'inefficient' for an AD DC?
>
> There's some way, eventually,  to ''backup'' XATTR and restore it to
> migrate from filesystem to xattr_tdb?
>
>
> Thanks.
>
It doesn't scale, if it did, don't you think Samba would do this ?

Why are you insistent on running a DC in an unprivileged container ?

Rowland