namespaces are not created as specified by OCI spec

[sameo]

From @jodh-intel on August 30, 2016 16:35

The following namespaces are not honoured:

• pid (see create: copy container's annotations to pod #143).
• mount
• ipc
• uts
• user
• cgroup

See: https://github.com/opencontainers/runtime-spec/blob/master/config-linux.md#namespaces.

Note that the network namespace is created outside the VM - this is mandatory to work with docker and have working networking.

Copied from original issue: intel/cc-oci-runtime#189

[sameo]

From @jodh-intel on August 31, 2016 10:13

Docker 1.12.1 specifies the following namespaces in config.json:

• network (done)
• pid (see create: copy container's annotations to pod #143)
• mount
• uts
• ipc