[lxc-devel] [lxc/lxc] 476d30: lxc-start: Add -F (foreground) option

[GitHub]

  Branch: refs/heads/master
  Home:   https://github.com/lxc/lxc
  Commit: 476d302ca27175d98d19f886cb6237da64881664
      https://github.com/lxc/lxc/commit/476d302ca27175d98d19f886cb6237da64881664
  Author: Stéphane Graber <stgraber at ubuntu.com>
  Date:   2014-07-31 (Thu, 31 Jul 2014)

  Changed paths:
    M doc/lxc-start.sgml.in
    M src/lxc/lxc_start.c

  Log Message:
  -----------
  lxc-start: Add -F (foreground) option

Introduce a new -F option (no-op for now) as an opposite of -d.

Signed-off-by: Stéphane Graber <stgraber at ubuntu.com>
Acked-by: Serge E. Hallyn <serge.hallyn at ubuntu.com>


  Commit: c00f3f36e1f3f99e3bc38c7408763d533d2d8aa7
      https://github.com/lxc/lxc/commit/c00f3f36e1f3f99e3bc38c7408763d533d2d8aa7
  Author: Stéphane Graber <stgraber at ubuntu.com>
  Date:   2014-07-31 (Thu, 31 Jul 2014)

  Changed paths:
    M doc/lxc-start.sgml.in
    M src/lxc/lxc_start.c

  Log Message:
  -----------
  lxc-start: Daemonize by default

Signed-off-by: Stéphane Graber <stgraber at ubuntu.com>
Acked-by: Serge E. Hallyn <serge.hallyn at ubuntu.com>


  Commit: acabe1faee82d44db391345a8a51b9dec3dc0229
      https://github.com/lxc/lxc/commit/acabe1faee82d44db391345a8a51b9dec3dc0229
  Author: Stéphane Graber <stgraber at ubuntu.com>
  Date:   2014-07-31 (Thu, 31 Jul 2014)

  Changed paths:
    M templates/lxc-download.in

  Log Message:
  -----------
  download: Have wget retry 3 times

This forces wget to retry if it gets a network error.

Signed-off-by: Stéphane Graber <stgraber at ubuntu.com>
Acked-by: Serge E. Hallyn <serge.hallyn at ubuntu.com>


  Commit: 7c6617262d4cd1f8f2c1721aca980ecd71117bd5
      https://github.com/lxc/lxc/commit/7c6617262d4cd1f8f2c1721aca980ecd71117bd5
  Author: Matt Palmer <mpalmer at hezmatt.org>
  Date:   2014-07-31 (Thu, 31 Jul 2014)

  Changed paths:
    M doc/lxc.container.conf.sgml.in
    M src/lxc/conf.c
    M src/lxc/conf.h
    M src/lxc/confile.c
    M src/lxc/start.c

  Log Message:
  -----------
  Support providing env vars to container init

It's quite useful to be able to configure containers by specifying
environment variables, which init (or initscripts) can use to adjust the
container's operation.

This patch adds one new configuration parameter, `lxc.environment`, which
can be specified zero or more times to define env vars to set in the
container, like this:

    lxc.environment = APP_ENV=production
    lxc.environment = SYSLOG_SERVER=192.0.2.42
    lxc.environment = SOMETHING_FUNNY=platypus

Default operation is unchanged; if the user doesn't specify any
lxc.environment parameters, the container environment will be what it is
today ('container=lxc').

Signed-off-by: Matt Palmer <mpalmer at hezmatt.org>
Acked-by: Stéphane Graber <stgraber at ubuntu.com>
Acked-by: Serge E. Hallyn <serge.hallyn at ubuntu.com>


  Commit: ab799c0ba931bde0f4586fb2a61854610a0daf0d
      https://github.com/lxc/lxc/commit/ab799c0ba931bde0f4586fb2a61854610a0daf0d
  Author: Stéphane Graber <stgraber at ubuntu.com>
  Date:   2014-07-31 (Thu, 31 Jul 2014)

  Changed paths:
    M src/lxc/conf.c
    M src/lxc/conf.h
    M src/lxc/confile.c

  Log Message:
  -----------
  Add the remaining bits for lxc.environment

This adds the few missing bits so that the new lxc.environment config
entry can be queried, cleared and saved as the others are.

Signed-off-by: Stéphane Graber <stgraber at ubuntu.com>


  Commit: 719fae07bf641ad6ed80b12c52f60b68d734f611
      https://github.com/lxc/lxc/commit/719fae07bf641ad6ed80b12c52f60b68d734f611
  Author: Dwight Engen <dwight.engen at oracle.com>
  Date:   2014-07-31 (Thu, 31 Jul 2014)

  Changed paths:
    M config/Makefile.am
    A config/selinux/Makefile.am
    A config/selinux/lxc.if
    A config/selinux/lxc.te
    M configure.ac
    M doc/lxc.container.conf.sgml.in

  Log Message:
  -----------
  provide an example SELinux policy for older releases

The virtd_lxc_t type provided by the default RHEL/CentOS/Oracle 6.5
policy is an unconfined_domain(), so it doesn't really enforce anything.
This change will provide a link in the documentation to an example
policy that does confine containers.

On more recent distributions with new enough policy, it is recommended
not to use this sample policy, but to use the types already available
on the system from /etc/selinux/targeted/contexts/lxc_contexts, ie:

process = "system_u:system_r:svirt_lxc_net_t:s0"
file = "system_u:object_r:svirt_sandbox_file_t:s0"

Signed-off-by: Dwight Engen <dwight.engen at oracle.com>
Acked-by: Serge E. Hallyn <serge.hallyn at ubuntu.com>


  Commit: 97e9cfa02ff30cbbc305e745559ab62ce90efd81
      https://github.com/lxc/lxc/commit/97e9cfa02ff30cbbc305e745559ab62ce90efd81
  Author: Serge Hallyn <serge.hallyn at ubuntu.com>
  Date:   2014-07-31 (Thu, 31 Jul 2014)

  Changed paths:
    M src/lxc/conf.c
    M src/lxc/conf.h
    M src/lxc/lxc_usernsexec.c
    M src/lxc/lxccontainer.c

  Log Message:
  -----------
  print a helpful message if creating unpriv container with no idmap

This gives me:

ubuntu at c-t1:~$ lxc-create -t download -n u1
lxc_container: No mapping for container root
lxc_container: Error chowning /home/ubuntu/.local/share/lxc/u1/rootfs to container root
lxc_container: You must either run as root, or define uid mappings
lxc_container: To pass uid mappings to lxc-create, you could create
lxc_container: ~/.config/lxc/default.conf:
lxc_container: lxc.include = /etc/lxc/default.conf
lxc_container: lxc.id_map = u 0 100000 65536
lxc_container: lxc.id_map = g 0 100000 65536
lxc_container: Error creating backing store type (none) for u1
lxc_container: Error creating container u1

when I create a container without having an id mapping defined.

Signed-off-by: Serge Hallyn <serge.hallyn at ubuntu.com>


Compare: https://github.com/lxc/lxc/compare/b1814e1c6918...97e9cfa02ff3