[lxc-devel] [lxc/lxc] 0a188a: lxc-start: Add -F (foreground) option

Fri Aug 8 18:08:53 UTC 2014

  Branch: refs/heads/stable-1.0
  Home:   https://github.com/lxc/lxc
  Commit: 0a188a3f51c1b015afda5677c7e090ed9c41141b
      https://github.com/lxc/lxc/commit/0a188a3f51c1b015afda5677c7e090ed9c41141b
  Author: Stéphane Graber <stgraber at ubuntu.com>
  Date:   2014-08-08 (Fri, 08 Aug 2014)

  Changed paths:
    M doc/lxc-start.sgml.in
    M src/lxc/lxc_start.c

  Log Message:
  -----------
  lxc-start: Add -F (foreground) option

Introduce a new -F option (no-op for now) as an opposite of -d.

Signed-off-by: Stéphane Graber <stgraber at ubuntu.com>
Acked-by: Serge E. Hallyn <serge.hallyn at ubuntu.com>

  Commit: 15d7099dc947f7427bd5d47e877f769e5383a269
      https://github.com/lxc/lxc/commit/15d7099dc947f7427bd5d47e877f769e5383a269
  Author: Stéphane Graber <stgraber at ubuntu.com>
  Date:   2014-08-08 (Fri, 08 Aug 2014)

  Changed paths:
    M templates/lxc-download.in

  Log Message:
  -----------
  download: Have wget retry 3 times

This forces wget to retry if it gets a network error.

Signed-off-by: Stéphane Graber <stgraber at ubuntu.com>
Acked-by: Serge E. Hallyn <serge.hallyn at ubuntu.com>

  Commit: 601b7c260d59802559827f49c92f996c6f55dd80
      https://github.com/lxc/lxc/commit/601b7c260d59802559827f49c92f996c6f55dd80
  Author: Dwight Engen <dwight.engen at oracle.com>
  Date:   2014-08-08 (Fri, 08 Aug 2014)

  Changed paths:
    M config/Makefile.am
    A config/selinux/Makefile.am
    A config/selinux/lxc.if
    A config/selinux/lxc.te
    M configure.ac
    M doc/lxc.container.conf.sgml.in

  Log Message:
  -----------
  provide an example SELinux policy for older releases

The virtd_lxc_t type provided by the default RHEL/CentOS/Oracle 6.5
policy is an unconfined_domain(), so it doesn't really enforce anything.
This change will provide a link in the documentation to an example
policy that does confine containers.

On more recent distributions with new enough policy, it is recommended
not to use this sample policy, but to use the types already available
on the system from /etc/selinux/targeted/contexts/lxc_contexts, ie:

process = "system_u:system_r:svirt_lxc_net_t:s0"
file = "system_u:object_r:svirt_sandbox_file_t:s0"

Signed-off-by: Dwight Engen <dwight.engen at oracle.com>
Acked-by: Serge E. Hallyn <serge.hallyn at ubuntu.com>

  Commit: 6affb6ef1e5088cdad5e04b090c2ca136b960561
      https://github.com/lxc/lxc/commit/6affb6ef1e5088cdad5e04b090c2ca136b960561
  Author: Serge Hallyn <serge.hallyn at ubuntu.com>
  Date:   2014-08-08 (Fri, 08 Aug 2014)

  Changed paths:
    M src/lxc/conf.c
    M src/lxc/conf.h
    M src/lxc/lxc_usernsexec.c
    M src/lxc/lxccontainer.c

  Log Message:
  -----------
  print a helpful message if creating unpriv container with no idmap

This gives me:

ubuntu at c-t1:~$ lxc-create -t download -n u1
lxc_container: No mapping for container root
lxc_container: Error chowning /home/ubuntu/.local/share/lxc/u1/rootfs to container root
lxc_container: You must either run as root, or define uid mappings
lxc_container: To pass uid mappings to lxc-create, you could create
lxc_container: ~/.config/lxc/default.conf:
lxc_container: lxc.include = /etc/lxc/default.conf
lxc_container: lxc.id_map = u 0 100000 65536
lxc_container: lxc.id_map = g 0 100000 65536
lxc_container: Error creating backing store type (none) for u1
lxc_container: Error creating container u1

when I create a container without having an id mapping defined.

Signed-off-by: Serge Hallyn <serge.hallyn at ubuntu.com>

  Commit: 29cb3e8f35a803ab733fa0f001eb67bf9e9f4188
      https://github.com/lxc/lxc/commit/29cb3e8f35a803ab733fa0f001eb67bf9e9f4188
  Author: Serge Hallyn <serge.hallyn at ubuntu.com>
  Date:   2014-08-08 (Fri, 08 Aug 2014)

  Changed paths:
    M src/lxc/conf.c

  Log Message:
  -----------
  use non-thread-safe getpwuid and getpwgid for android

We only call it (so far) after doing a fork(), so this is fine.  If we
ever need such a thing from threaded context, we'll simply need to write
our own version for android.

Signed-off-by: Serge Hallyn <serge.hallyn at ubuntu.com>
Acked-by: Stéphane Graber <stgraber at ubuntu.com>

  Commit: 0750fdbf40046bf96b272c52dd7c986bcb6a66be
      https://github.com/lxc/lxc/commit/0750fdbf40046bf96b272c52dd7c986bcb6a66be
  Author: KATOH Yasufumi <karma at jazz.email.ne.jp>
  Date:   2014-08-08 (Fri, 08 Aug 2014)

  Changed paths:
    M doc/ja/lxc-start.sgml.in

  Log Message:
  -----------
  doc: Add -F option to Japanese lxc-start(1)

Update for commit 476d302

Signed-off-by: KATOH Yasufumi <karma at jazz.email.ne.jp>
Acked-by: Stéphane Graber <stgraber at ubuntu.com>

  Commit: f6f07ecd1f52b95e2c371df48af5be4f5851d356
      https://github.com/lxc/lxc/commit/f6f07ecd1f52b95e2c371df48af5be4f5851d356
  Author: KATOH Yasufumi <karma at jazz.email.ne.jp>
  Date:   2014-08-08 (Fri, 08 Aug 2014)

  Changed paths:
    M doc/ja/lxc.container.conf.sgml.in

  Log Message:
  -----------
  doc: Update the description of SELinux in Japanese lxc.container.conf(5)

Update for commit 719fae0

Signed-off-by: KATOH Yasufumi <karma at jazz.email.ne.jp>
Acked-by: Stéphane Graber <stgraber at ubuntu.com>

  Commit: 4af2618bc7757406284eec65dfc65ae63d4e2d25
      https://github.com/lxc/lxc/commit/4af2618bc7757406284eec65dfc65ae63d4e2d25
  Author: KATOH Yasufumi <karma at jazz.email.ne.jp>
  Date:   2014-08-08 (Fri, 08 Aug 2014)

  Changed paths:
    M doc/ja/lxc-create.sgml.in
    M doc/lxc-create.sgml.in

  Log Message:
  -----------
  doc: Add 'zfs' to the parameter of -B option in lxc-create(1)

Signed-off-by: KATOH Yasufumi <karma at jazz.email.ne.jp>
Acked-by: Stéphane Graber <stgraber at ubuntu.com>

  Commit: cb69d6e6cd86445c181b449f3d492f348816adda
      https://github.com/lxc/lxc/commit/cb69d6e6cd86445c181b449f3d492f348816adda
  Author: Serge Hallyn <serge.hallyn at ubuntu.com>
  Date:   2014-08-08 (Fri, 08 Aug 2014)

  Changed paths:
    M src/lxc/Makefile.am
    M src/lxc/bdev.c
    A src/lxc/lxc-btrfs.h

  Log Message:
  -----------
  btrfs: support recursive subvolume deletion (v2)

Pull the #defines and struct definitions for btrfs into a separate
.h file to not clutter bdev.c

Implement btrfs recursive delete support

A non-root user isn't allow to do the ioctls needed for searching (as you can
verify with 'btrfs subvolume list').  So for an unprivileged user, if the
rootfs has subvolumes under it, deletion will fail.  Otherwise, it will
succeed.

Changelog: Aug 1:
  . Fix wrong objid passing when determining directory paths
  . In do_remove_btrfs_children, avoid dereferencing NULL dirid
  . Fix memleak in error case.

Signed-off-by: Serge Hallyn <serge.hallyn at ubuntu.com>
Acked-by: Stéphane Graber <stgraber at ubuntu.com>

  Commit: 1c43a3bea0b3cfaacc86d8fb9af92e43d738fb5c
      https://github.com/lxc/lxc/commit/1c43a3bea0b3cfaacc86d8fb9af92e43d738fb5c
  Author: Serge Hallyn <serge.hallyn at ubuntu.com>
  Date:   2014-08-08 (Fri, 08 Aug 2014)

  Changed paths:
    M templates/lxc-ubuntu-cloud.in
    M templates/lxc-ubuntu.in

  Log Message:
  -----------
  ubuntu templates: don't check for $rootfs/run/shm

/dev/shm must be turned from a directory into a symlink to /run/shm.
The templates do this only if they find -d $rootfs/run/shm.  Since /run
will be a tmpfs, checking for it in the rootfs is silly.  It also is
currently broken as ubuntu cloud images have an empty /run.

(this should fix https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1353734)

Signed-off-by: Serge Hallyn <serge.hallyn at ubuntu.com>
Acked-by: Stéphane Graber <stgraber at ubuntu.com>

  Commit: dfe112bce7ea8a19f10f1b24dd726d06b82bfed8
      https://github.com/lxc/lxc/commit/dfe112bce7ea8a19f10f1b24dd726d06b82bfed8
  Author: Michael Werner <xaseron at googlemail.com>
  Date:   2014-08-08 (Fri, 08 Aug 2014)

  Changed paths:
    M templates/lxc-centos.in
    M templates/lxc-fedora.in
    M templates/lxc-gentoo.in

  Log Message:
  -----------
  templates: switch from arch command to uname -m

Signed-off-by: Michael Werner <xaseron at googlemail.com>
Acked-by: Stéphane Graber <stgraber at ubuntu.com>

  Commit: 1dc942900719dc47bf374577d868535a8ee813ba
      https://github.com/lxc/lxc/commit/1dc942900719dc47bf374577d868535a8ee813ba
  Author: Nikolay Martynov <mar.kolya at gmail.com>
  Date:   2014-08-08 (Fri, 08 Aug 2014)

  Changed paths:
    M templates/lxc-sshd.in

  Log Message:
  -----------
  ssh: send hostname to dhcp server

Send container's hostname to dhcp server when getting ip address.

Signed-off-by: Nikolay Martynov <mar.kolya at gmail.com>
Acked-by: Stéphane Graber <stgraber at ubuntu.com>

  Commit: 58777d6dbad7c1b1ab3a73a7c83593a7b5bee6be
      https://github.com/lxc/lxc/commit/58777d6dbad7c1b1ab3a73a7c83593a7b5bee6be
  Author: Kalman Olah <hello at kalmanolah.net>
  Date:   2014-08-08 (Fri, 08 Aug 2014)

  Changed paths:
    M templates/lxc-centos.in

  Log Message:
  -----------
  Include hostname in DHCP requests

With the current old CentOS template, dnsmasq was not able to resolve
the hostname of an lxc container after it had been created. This minor
change rectifies that.

Signed-off-by: Kalman Olah <hello at kalmanolah.net>
Acked-by: Stéphane Graber <stgraber at ubuntu.com>

  Commit: 3661db84bfd88aeea174f49323f5b49a60c8e017
      https://github.com/lxc/lxc/commit/3661db84bfd88aeea174f49323f5b49a60c8e017
  Author: rabisg <guha.rabishankar at gmail.com>
  Date:   2014-08-08 (Fri, 08 Aug 2014)

  Changed paths:
    M templates/lxc-gentoo.in

  Log Message:
  -----------
  Use portageq to determine portage distdir

Signed-off-by: Rabi Shanker Guha <guha.rabishankar at gmail.com>
Acked-by: Stéphane Graber <stgraber at ubuntu.com>

  Commit: bfc6269e9b7124fdae874cdcda7bc5319f14f4a7
      https://github.com/lxc/lxc/commit/bfc6269e9b7124fdae874cdcda7bc5319f14f4a7
  Author: Jean-Tiare LE BIGOT <jean-tiare.le-bigot at ovh.net>
  Date:   2014-08-08 (Fri, 08 Aug 2014)

  Changed paths:
    M src/lxc/lxc_start.c

  Log Message:
  -----------
  fix '--log-priority' --> '--logpriority' in main

Signed-off-by: Jean-Tiare LE BIGOT <jean-tiare.le-bigot at ovh.net>
Acked-by: Stéphane Graber <stgraber at ubuntu.com>

  Commit: 427b9615c064dc7f8d5ccf7250c60b872e29817f
      https://github.com/lxc/lxc/commit/427b9615c064dc7f8d5ccf7250c60b872e29817f
  Author: Vincent Giersch <vincent.giersch at ovh.net>
  Date:   2014-08-08 (Fri, 08 Aug 2014)

  Changed paths:
    M src/lxc/lxccontainer.c

  Log Message:
  -----------
  Fix a file descriptor leak in the daemonization

Especially when using the Python API, the child process inherits of
the file descriptiors of the script.

Signed-off-by: Vincent Giersch <vincent.giersch at ovh.net>
Acked-by: Stéphane Graber <stgraber at ubuntu.com>

  Commit: 7802d4828f8432a6153d1eefff886d03b2f56060
      https://github.com/lxc/lxc/commit/7802d4828f8432a6153d1eefff886d03b2f56060
  Author: Vincent Giersch <vincent.giersch at ovh.net>
  Date:   2014-08-08 (Fri, 08 Aug 2014)

  Changed paths:
    M src/lxc/monitor.c
    M src/lxc/start.c

  Log Message:
  -----------
  Fix a file descriptor leak in the monitord spawn

Signed-off-by: Vincent Giersch <vincent.giersch at ovh.net>
Acked-by: Stéphane Graber <stgraber at ubuntu.com>

  Commit: 7a8bee8a1001a622a9a68eb4f702da27d06824ed
      https://github.com/lxc/lxc/commit/7a8bee8a1001a622a9a68eb4f702da27d06824ed
  Author: Jean-Tiare LE BIGOT <jean-tiare.le-bigot at ovh.net>
  Date:   2014-08-08 (Fri, 08 Aug 2014)

  Changed paths:
    M src/lxc/conf.c

  Log Message:
  -----------
  Ensure /dev/pts directory exists on pts setup

When `lxc.autodev = 0` and empty tmpfs is mounted on /dev
and private pts are requested, we need to ensure '/dev/pts'
exists before attempting to mount devpts on it.

Signed-off-by: Jean-Tiare LE BIGOT <jean-tiare.le-bigot at ovh.net>
Acked-by: Stéphane Graber <stgraber at ubuntu.com>

Compare: https://github.com/lxc/lxc/compare/2ac9010b005b...7a8bee8a1001