[lxc-devel] [lxc/lxc] dddf7c: cgfs: also check for EACCES when writing devices

GitHub noreply at github.com
Sat Feb 20 03:13:37 UTC 2016


  Branch: refs/heads/master
  Home:   https://github.com/lxc/lxc
  Commit: dddf7c5b7e0fbf35006bbf3a524c0c15ed687deb
      https://github.com/lxc/lxc/commit/dddf7c5b7e0fbf35006bbf3a524c0c15ed687deb
  Author: Serge Hallyn <serge.hallyn at ubuntu.com>
  Date:   2016-02-19 (Fri, 19 Feb 2016)

  Changed paths:
    M src/lxc/cgfs.c

  Log Message:
  -----------
  cgfs: also check for EACCES when writing devices

Because that's what lxcfs gives us.

Signed-off-by: Serge Hallyn <serge.hallyn at ubuntu.com>


  Commit: 836514a877bac367d443b17f4c43afbf472f7222
      https://github.com/lxc/lxc/commit/836514a877bac367d443b17f4c43afbf472f7222
  Author: Ubuntu <ubuntu at localhost.localdomain>
  Date:   2016-02-19 (Fri, 19 Feb 2016)

  Changed paths:
    M src/lxc/cgfs.c

  Log Message:
  -----------
  lxc: cgfs: handle lxcfs

When containers have lxcfs mounted instead of cgroupfs, we have to
process /proc/self/mountinfo a bit differently.  In particular, we
should look for fuse.lxcfs fstype, we need to look elsewhere for the
list of comounted controllers, and the mount_prefix is not a cgroup path
which was bind mounted, so we should ignore it, and named subsystems
show up without the 'name=' prefix.

With this patchset I can start containers inside a privileged lxd
container with lxcfs mounted (i.e. without cgroup namespaces).

Closes #830

Signed-off-by: Ubuntu <ubuntu at localhost.localdomain>


  Commit: aaae118e7e017cdab229a46d8e37aa3a32a897cb
      https://github.com/lxc/lxc/commit/aaae118e7e017cdab229a46d8e37aa3a32a897cb
  Author: Stéphane Graber <stgraber at stgraber.org>
  Date:   2016-02-19 (Fri, 19 Feb 2016)

  Changed paths:
    M src/lxc/cgfs.c

  Log Message:
  -----------
  Merge pull request #831 from hallyn/2016-02-19/cgfs

2016 02 19/cgfs


Compare: https://github.com/lxc/lxc/compare/b9138559c387...aaae118e7e01


More information about the lxc-devel mailing list