[lxc-devel] [lxc/lxc] 4be483: add --share-$NS= support to lxc-execute

GitHub noreply at github.com
Thu Dec 14 20:37:42 UTC 2017


  Branch: refs/heads/master
  Home:   https://github.com/lxc/lxc
  Commit: 4be4832738cbcb376a65740e9641d63cdec6e641
      https://github.com/lxc/lxc/commit/4be4832738cbcb376a65740e9641d63cdec6e641
  Author: Tycho Andersen <tycho at tycho.ws>
  Date:   2017-12-08 (Fri, 08 Dec 2017)

  Changed paths:
    M src/lxc/tools/arguments.c
    M src/lxc/tools/arguments.h
    M src/lxc/tools/lxc_execute.c
    M src/lxc/tools/lxc_start.c

  Log Message:
  -----------
  add --share-$NS= support to lxc-execute

Signed-off-by: Tycho Andersen <tycho at tycho.ws>


  Commit: d76e3e1a5b70b46af860b9bf77fd1151ff3847c4
      https://github.com/lxc/lxc/commit/d76e3e1a5b70b46af860b9bf77fd1151ff3847c4
  Author: Tycho Andersen <tycho at tycho.ws>
  Date:   2017-12-14 (Thu, 14 Dec 2017)

  Changed paths:
    M src/lxc/lxc_init.c

  Log Message:
  -----------
  init: don't kill(-1) if we aren't in a pid ns

...otherwise we'll kill everyone on the machine. Instead, let's explicitly
try to kill our children. Let's do a best effort against fork bombs by
disabling forking via the pids cgroup if it exists. This is best effort for
a number of reasons:

* the pids cgroup may not be available
* the container may have bind mounted /dev/null over pids.max, so the write
  doesn't do anything

Signed-off-by: Tycho Andersen <tycho at tycho.ws>


  Commit: eeeb5865f55f22e97b6dadca6ca99c7a66049f40
      https://github.com/lxc/lxc/commit/eeeb5865f55f22e97b6dadca6ca99c7a66049f40
  Author: Tycho Andersen <tycho at tycho.ws>
  Date:   2017-12-14 (Thu, 14 Dec 2017)

  Changed paths:
    M src/lxc/tools/arguments.h

  Log Message:
  -----------
  SHARE_NS options should be before OPT_USAGE

Signed-off-by: Tycho Andersen <tycho at tycho.ws>


  Commit: c379af4c03c191984a53b4fc211cecbd04d20451
      https://github.com/lxc/lxc/commit/c379af4c03c191984a53b4fc211cecbd04d20451
  Author: Tycho Andersen <tycho at tycho.ws>
  Date:   2017-12-14 (Thu, 14 Dec 2017)

  Changed paths:
    M src/lxc/lxc_init.c
    M src/lxc/tools/arguments.c

  Log Message:
  -----------
  the bike shed should be brilliant purple

Signed-off-by: Tycho Andersen <tycho at tycho.ws>


  Commit: ec09a5a2de764ea0c09b368c6c1eab0aff4e2a57
      https://github.com/lxc/lxc/commit/ec09a5a2de764ea0c09b368c6c1eab0aff4e2a57
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2017-12-14 (Thu, 14 Dec 2017)

  Changed paths:
    M src/lxc/lxc_init.c
    M src/lxc/tools/arguments.c
    M src/lxc/tools/arguments.h
    M src/lxc/tools/lxc_execute.c
    M src/lxc/tools/lxc_start.c

  Log Message:
  -----------
  Merge pull request #2008 from tych0/share-ns-in-execute

add --share-$NS= support to lxc-execute


Compare: https://github.com/lxc/lxc/compare/2e3890af0fed...ec09a5a2de76


More information about the lxc-devel mailing list