From f33b31b3d65b62c02855236b8558eb53ceeac3c9 Mon Sep 17 00:00:00 2001
From: Peter Wilmott <p@p8952.info>
Date: Fri, 31 Jul 2015 21:59:07 +0000
Subject: [PATCH] Make each isolation level in bocker_run more clear

---
 bocker | 7 +++++--
 1 file changed, 5 insertions(+), 2 deletions(-)

diff --git a/bocker b/bocker
index 2e0b786..523376a 100755
--- a/bocker
+++ b/bocker
@@ -78,8 +78,11 @@ function bocker_run() { #HELP Create a container:\nBOCKER run <image_id> <comman
 	cgcreate -g "$cgroups:/$uuid"
 	cgset -r cpuset.cpus=0-1 "$uuid" &&	cgset -r cpuset.mems=0 "$uuid"
 	cgset -r memory.limit_in_bytes=512000000 "$uuid"
-	cgexec -g "$cgroups:$uuid" ip netns exec netns_"$uuid" "unshare" -fmuip --mount-proc "chroot" \
-		"$btrfs_path/$uuid" /bin/sh -c "/bin/mount -t proc proc /proc && $cmd" \
+	cgexec -g "$cgroups:$uuid" \
+		ip netns exec netns_"$uuid" \
+		unshare -fmuip --mount-proc \
+		chroot "$btrfs_path/$uuid" \
+		/bin/sh -c "/bin/mount -t proc proc /proc && $cmd" \
 		2>&1 | tee "$btrfs_path/$uuid/$uuid.log" || true
 	ip link del dev veth0_"$uuid"
 	ip netns del netns_"$uuid"