[lxc-devel] [lxc/lxc] 16fb82: confile: add getter for lxc.haltsignal
GitHub
noreply at github.com
Sun Jul 16 22:15:06 UTC 2017
Branch: refs/heads/stable-2.0
Home: https://github.com/lxc/lxc
Commit: 16fb828a24176c0f465303559278b62d96719d35
https://github.com/lxc/lxc/commit/16fb828a24176c0f465303559278b62d96719d35
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add getter for lxc.haltsignal
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 0705718417049c804236026aaeac2e235fdd43fa
https://github.com/lxc/lxc/commit/0705718417049c804236026aaeac2e235fdd43fa
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add getter for lxc.rebootsignal
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 723644fe57307cf68917c65ecc4e2205f1ba698f
https://github.com/lxc/lxc/commit/723644fe57307cf68917c65ecc4e2205f1ba698f
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add getter for lxc.stopsignal
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 063aaf031d279b7cd1bc4ac27a6b7e1df111f35f
https://github.com/lxc/lxc/commit/063aaf031d279b7cd1bc4ac27a6b7e1df111f35f
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add getters for lxc.start.*
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 34228a877de51bf02177d63c215adb0bb962b340
https://github.com/lxc/lxc/commit/34228a877de51bf02177d63c215adb0bb962b340
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add getter for lxc.monitor.unshare
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 966563ab230ff0149dd139782e29efbb45c42a07
https://github.com/lxc/lxc/commit/966563ab230ff0149dd139782e29efbb45c42a07
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add getter for lxc.group
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 9a26f732c6e3cbb21d53af78dba2bf488cf5d71f
https://github.com/lxc/lxc/commit/9a26f732c6e3cbb21d53af78dba2bf488cf5d71f
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add getter for lxc.environment
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 136a4dc220d7606c764e474cd0f4550b3d4a40d2
https://github.com/lxc/lxc/commit/136a4dc220d7606c764e474cd0f4550b3d4a40d2
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add getter for lxc.init_cmd
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 88c2c000a4340376eeceb28083f809258c160e86
https://github.com/lxc/lxc/commit/88c2c000a4340376eeceb28083f809258c160e86
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add getter for lxc.init_uid
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: da2bb1b887baa031caaf8f2dfd132ad08fdab488
https://github.com/lxc/lxc/commit/da2bb1b887baa031caaf8f2dfd132ad08fdab488
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add getter for lxc.init_gid
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: d0dab6d8fdf6f6e45317c5aa03175793c79dee76
https://github.com/lxc/lxc/commit/d0dab6d8fdf6f6e45317c5aa03175793c79dee76
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add getter for lxc.ephemeral
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: a91be2651e11a8cde0b7aea30dfc8a51dc28fdc4
https://github.com/lxc/lxc/commit/a91be2651e11a8cde0b7aea30dfc8a51dc28fdc4
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/lxccontainer.c
Log Message:
-----------
lxccontainer: switch api to new callback system
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: ba68feca22b5eeb9364936d3c0cb4a7dd9dfa9d4
https://github.com/lxc/lxc/commit/ba68feca22b5eeb9364936d3c0cb4a7dd9dfa9d4
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
M src/lxc/confile.h
M src/lxc/lxccontainer.c
Log Message:
-----------
confile: adapt layout of getter callback
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 1c28f239d61838c5ca00d65299924be87217beba
https://github.com/lxc/lxc/commit/1c28f239d61838c5ca00d65299924be87217beba
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/commands.c
Log Message:
-----------
commands: switch api to new callback system
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 022e5fb392070078d2f2082ee75ac2de4060eea2
https://github.com/lxc/lxc/commit/022e5fb392070078d2f2082ee75ac2de4060eea2
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
M src/lxc/confile.h
Log Message:
-----------
confile: dump lxc_get_config_item()
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: d8b1ee34d236b2de24f04b37360b2b75ca60ce50
https://github.com/lxc/lxc/commit/d8b1ee34d236b2de24f04b37360b2b75ca60ce50
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/tests/Makefile.am
A src/tests/parse_config_file.c
Log Message:
-----------
test: add item clear and config file tests
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 35268f7c9714c338d4bee12f8bf2b22ad91831b5
https://github.com/lxc/lxc/commit/35268f7c9714c338d4bee12f8bf2b22ad91831b5
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: final cleanups
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: a0f70df65155962716b8aee997c3afeead9e095d
https://github.com/lxc/lxc/commit/a0f70df65155962716b8aee997c3afeead9e095d
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.h
Log Message:
-----------
confile: implement config item clear callback
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 66d5e280782ba219ee9468332cd96df06b9abd02
https://github.com/lxc/lxc/commit/66d5e280782ba219ee9468332cd96df06b9abd02
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.personality
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 37dedabba5c9622c5646094b757619d36b46eab2
https://github.com/lxc/lxc/commit/37dedabba5c9622c5646094b757619d36b46eab2
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.pts
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: d60fa0536c79990dde3d0b264b59cad6a9997eec
https://github.com/lxc/lxc/commit/d60fa0536c79990dde3d0b264b59cad6a9997eec
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.tty
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 59809c4bacf4777f4e2490f712385fca6d81ed3b
https://github.com/lxc/lxc/commit/59809c4bacf4777f4e2490f712385fca6d81ed3b
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.devttydir
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 8ebe7aa05b384b1304c3b00a1356b81415464a3d
https://github.com/lxc/lxc/commit/8ebe7aa05b384b1304c3b00a1356b81415464a3d
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.kmsg
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: a0c4e775804840748ec6592207b43e5987f9dfc4
https://github.com/lxc/lxc/commit/a0c4e775804840748ec6592207b43e5987f9dfc4
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.aa_profile
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: bd6efb6fb163801fc5ad499fed1171b4066831c4
https://github.com/lxc/lxc/commit/bd6efb6fb163801fc5ad499fed1171b4066831c4
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.lsm_aa_allow_incomplete
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 7755e8c5d3b6d46315217b4dd88e909725d760a9
https://github.com/lxc/lxc/commit/7755e8c5d3b6d46315217b4dd88e909725d760a9
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.se_context
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 993e88fdf46f1c4bf92d7b33777386cfa3c9477a
https://github.com/lxc/lxc/commit/993e88fdf46f1c4bf92d7b33777386cfa3c9477a
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.cgroup
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 079eff026687dca47c4d1dbb0ffd87fa73890f2c
https://github.com/lxc/lxc/commit/079eff026687dca47c4d1dbb0ffd87fa73890f2c
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.id_map
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: bb6cde84c7586f86e41b8878f6ad42ebec9a6e71
https://github.com/lxc/lxc/commit/bb6cde84c7586f86e41b8878f6ad42ebec9a6e71
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.loglevel
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 36421187652db8f7acbc7ba70438abcca9e4de3d
https://github.com/lxc/lxc/commit/36421187652db8f7acbc7ba70438abcca9e4de3d
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.logfile
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 2057706ffffa030c4b8609e1215780f529c3e557
https://github.com/lxc/lxc/commit/2057706ffffa030c4b8609e1215780f529c3e557
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.mount.entry
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 0728e39544eaf8fd469d13f3cbcd79ac6f88d88d
https://github.com/lxc/lxc/commit/0728e39544eaf8fd469d13f3cbcd79ac6f88d88d
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.mount.auto
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 8d86b1882b00d268d3516ba7ddbb6ce2abead354
https://github.com/lxc/lxc/commit/8d86b1882b00d268d3516ba7ddbb6ce2abead354
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.mount
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 6bd6810ecacb9d2957e5bf2326bddb235324933e
https://github.com/lxc/lxc/commit/6bd6810ecacb9d2957e5bf2326bddb235324933e
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.rootfs
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 64951615004f77e0666103958acf7dc8244c28f1
https://github.com/lxc/lxc/commit/64951615004f77e0666103958acf7dc8244c28f1
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.rootfs.mount
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 10358a97ca39a6e38a6da1895d69a2aeb6acac29
https://github.com/lxc/lxc/commit/10358a97ca39a6e38a6da1895d69a2aeb6acac29
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.rootfs.options
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 4cddfcf5de80954b133594ec4acaf641935f9115
https://github.com/lxc/lxc/commit/4cddfcf5de80954b133594ec4acaf641935f9115
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.rootfs.backend
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: db9539c48c3e3b158a6fc127f058a0525ebb071e
https://github.com/lxc/lxc/commit/db9539c48c3e3b158a6fc127f058a0525ebb071e
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add dummy clearer for lxc.pivotdir
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: a9354cd36fc81ba800a286bbe39512334d2dc93f
https://github.com/lxc/lxc/commit/a9354cd36fc81ba800a286bbe39512334d2dc93f
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.utsname
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 61869f08b37984709ed77e0872bc53644ec8d5a2
https://github.com/lxc/lxc/commit/61869f08b37984709ed77e0872bc53644ec8d5a2
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.hook{.*}
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 595f5f4de7a45cb3d4582eba2e3de810f2607c88
https://github.com/lxc/lxc/commit/595f5f4de7a45cb3d4582eba2e3de810f2607c88
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.network.*
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: e512a8991394a9b73a44d9aeb222b5ae66f3d9f1
https://github.com/lxc/lxc/commit/e512a8991394a9b73a44d9aeb222b5ae66f3d9f1
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.network
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 7c81b7f3214967237cf6a8e369b3741d91c007a8
https://github.com/lxc/lxc/commit/7c81b7f3214967237cf6a8e369b3741d91c007a8
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.cap.drop
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 79244efe76cf620500df24ad4ef90dacb0c18e3d
https://github.com/lxc/lxc/commit/79244efe76cf620500df24ad4ef90dacb0c18e3d
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.cap.keep
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 19361b2edc345fcea372cfa50d27e7b0711524b8
https://github.com/lxc/lxc/commit/19361b2edc345fcea372cfa50d27e7b0711524b8
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.console
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: b333dd1be624c841c0ec37422c99196e7a484239
https://github.com/lxc/lxc/commit/b333dd1be624c841c0ec37422c99196e7a484239
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.console.logfile
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: e92ff0c43f35ebb563de01691f73a77207b9d7c6
https://github.com/lxc/lxc/commit/e92ff0c43f35ebb563de01691f73a77207b9d7c6
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.seccomp
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 2c9ca5f91b2b6bb1992d60f9bc4375efc6787b50
https://github.com/lxc/lxc/commit/2c9ca5f91b2b6bb1992d60f9bc4375efc6787b50
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.autodev
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 9e1434c5794e010207358e8620461a1e1e266924
https://github.com/lxc/lxc/commit/9e1434c5794e010207358e8620461a1e1e266924
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.haltsignal
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 7f358ad8b5c24f460290d431f2484207b73a149e
https://github.com/lxc/lxc/commit/7f358ad8b5c24f460290d431f2484207b73a149e
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.rebootsignal
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 460d233e1dd1c16e5b675649108c0dc614e18da7
https://github.com/lxc/lxc/commit/460d233e1dd1c16e5b675649108c0dc614e18da7
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.stopsignal
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 0b808b3e126e518cc185737e5e0a5b5dc6a08136
https://github.com/lxc/lxc/commit/0b808b3e126e518cc185737e5e0a5b5dc6a08136
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.start.*
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: dc1837d55c39ec975a6b1b371cfe957dbc27dfa3
https://github.com/lxc/lxc/commit/dc1837d55c39ec975a6b1b371cfe957dbc27dfa3
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.monitor.unshare
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: bf2ce93f4f63a7c864e94584c00f3b57f070d739
https://github.com/lxc/lxc/commit/bf2ce93f4f63a7c864e94584c00f3b57f070d739
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.group
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 51eb1491a570d72a6f7779a62a738abe0e015268
https://github.com/lxc/lxc/commit/51eb1491a570d72a6f7779a62a738abe0e015268
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.environment
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: b94f4070aee3ccdb02c194b08098e8b6098a16f4
https://github.com/lxc/lxc/commit/b94f4070aee3ccdb02c194b08098e8b6098a16f4
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.init_cmd
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: bcaa172c4e3412718f44dc695a7e0e28b0edd048
https://github.com/lxc/lxc/commit/bcaa172c4e3412718f44dc695a7e0e28b0edd048
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.init_uid
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 02e5ed49771bd90af295e7cf0036ad18f3033fc8
https://github.com/lxc/lxc/commit/02e5ed49771bd90af295e7cf0036ad18f3033fc8
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.init_gid
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 5eece15bb300ceaf123a82aa0ae8cf2904244a12
https://github.com/lxc/lxc/commit/5eece15bb300ceaf123a82aa0ae8cf2904244a12
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.ephemeral
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 69615f1269b00ed9f42f8eede36d1659b457adda
https://github.com/lxc/lxc/commit/69615f1269b00ed9f42f8eede36d1659b457adda
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.include
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 61484f62f09c63d697f63ecc29df6c9fe61226ba
https://github.com/lxc/lxc/commit/61484f62f09c63d697f63ecc29df6c9fe61226ba
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add clearer for lxc.include
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: e974c6ca95bded0298e4e0f26fc7ff3dadeec078
https://github.com/lxc/lxc/commit/e974c6ca95bded0298e4e0f26fc7ff3dadeec078
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
M src/lxc/confile.h
M src/lxc/lxccontainer.c
Log Message:
-----------
lxccontainer: switch api to new clearer callbacks
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 5eaf72cc310718a25fbf4a504f903da81ab632de
https://github.com/lxc/lxc/commit/5eaf72cc310718a25fbf4a504f903da81ab632de
Author: JD Friedrikson <yours at decompo.site>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M config/init/systemd/lxc at .service.in
Log Message:
-----------
Use lxc-stop to stop systemd service
Ever since 8eb62c2, systemd has not been able to cleanly stop lxc
containers (via lxc@) because it's still using SIGPWR for systemd-based
containers.
We should now use the nice logic in 330ae3d to stop the containers
instead.
Signed-off-by: JD Friedrikson <yours at decompo.site>
Commit: 6e74f4f20df4c8afcbfb1823a9114e31f8ec3cf1
https://github.com/lxc/lxc/commit/6e74f4f20df4c8afcbfb1823a9114e31f8ec3cf1
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: performance tweaks
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 72583ee13b60d789da2a512cd5add7076776993c
https://github.com/lxc/lxc/commit/72583ee13b60d789da2a512cd5add7076776993c
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/tests/parse_config_file.c
Log Message:
-----------
tests: comp retval to exp val whenever we can
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 7298c27bd0679e29af01cd0fd3933ba00f25e7cf
https://github.com/lxc/lxc/commit/7298c27bd0679e29af01cd0fd3933ba00f25e7cf
Author: Shane Chen <ss1ha3tw at gmail.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/conf.c
Log Message:
-----------
adding warning for mtu ignoring
Signed-off-by: Shane Chen <ss1ha3tw at gmail.com>
Commit: 2931a06800d54052e25b1aa356b80c009f490150
https://github.com/lxc/lxc/commit/2931a06800d54052e25b1aa356b80c009f490150
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/conf.c
Log Message:
-----------
conf: use minimal {g,u}id map
Afaict, userns_exec_1() is only used to operate based on privileges for the
user's own {g,u}id on the host and for the container root's unmapped {g,u}id.
This means we require only to establish a mapping from:
- the container root {g,u}id as seen from the host -> user's host {g,u}id
- the container root -> some sub{g,u}id
The former we add, if the user did not specifiy a mapping. The latter we
retrieve from the ontainer's configured {g,u}id mappings.
Closes #1598.
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 4bafda4b78e49230b6ea1ee7b965009a56a6eb4b
https://github.com/lxc/lxc/commit/4bafda4b78e49230b6ea1ee7b965009a56a6eb4b
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: add dummy getter for lxc.include
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: eb6b5584af346af2bd34213ef43ed949f3e32793
https://github.com/lxc/lxc/commit/eb6b5584af346af2bd34213ef43ed949f3e32793
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/tests/Makefile.am
A src/tests/config_jump_table.c
Log Message:
-----------
tests: enforce all methods for config items
This adds a test that checks LXC's configuration jump table whether all methods
for a given configuration item are implemented. If it is not, we'll error out.
This should provide additional safety since a) the API can now be sure that
dereferencing the pointer for a given method in the config struct is safe and
b) when users implement new configuration keys and forget to implement a
required method we'll see it right away.
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 7685829a420053e133b3ea653370fa7f0425903b
https://github.com/lxc/lxc/commit/7685829a420053e133b3ea653370fa7f0425903b
Author: Shane Chen <ss1ha3tw at gmail.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/tools/lxc-checkconfig.in
Log Message:
-----------
add probe status checking
Signed-off-by: Shane Chen <ss1ha3tw at gmail.com>
Commit: c4315c40b3af0e1bc3af1294a64df2850bd24896
https://github.com/lxc/lxc/commit/c4315c40b3af0e1bc3af1294a64df2850bd24896
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/Makefile.am
M src/lxc/confile.c
A src/lxc/confile_utils.c
A src/lxc/confile_utils.h
Log Message:
-----------
confile_utils: add new file
This adds confile_utils.{c,h} which will contain a helpers to parse lxc
configuration files.
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: e166b2b346ab715a8379bcc450c61b78be71cde6
https://github.com/lxc/lxc/commit/e166b2b346ab715a8379bcc450c61b78be71cde6
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/conf.c
M src/tests/parse_config_file.c
Log Message:
-----------
tests: add unit tests for idmap parser
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 86a7b52ab0760ec6a40260847e54c7873b7c7a37
https://github.com/lxc/lxc/commit/86a7b52ab0760ec6a40260847e54c7873b7c7a37
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/conf.c
M src/lxc/conf.h
M src/lxc/lxccontainer.c
Log Message:
-----------
conf: non-functional changes
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 7027a76f4b2daed88b04dc9d3ad82492a0e8e3ac
https://github.com/lxc/lxc/commit/7027a76f4b2daed88b04dc9d3ad82492a0e8e3ac
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/conf.c
Log Message:
-----------
conf: rework userns_exec_1()
This also fixes a bug where we caused a double mapping, when the {u,g}id for
the user was mapped to container root {g,u}id.
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 24deb44a12de344e42c80c8708fa50d1c3fac5d3
https://github.com/lxc/lxc/commit/24deb44a12de344e42c80c8708fa50d1c3fac5d3
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/conf.c
M src/lxc/start.c
Log Message:
-----------
start: log sending and receiving of tty fds
This is a potentially security sensitive operation and I really want to keep an
eye on *when exactly* this is send. So add more logging on the TRACE() level.
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 1e3551b234eb7dc5dd7f7d635f0a1ca1ac075038
https://github.com/lxc/lxc/commit/1e3551b234eb7dc5dd7f7d635f0a1ca1ac075038
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/conf.c
Log Message:
-----------
conf: non-functional changes
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 7808e834ce92762c9d40664847a47788ed72a631
https://github.com/lxc/lxc/commit/7808e834ce92762c9d40664847a47788ed72a631
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/conf.c
Log Message:
-----------
conf: avoid double-frees in userns_exec_1()
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: b66e56c883fc0589241eabd9e127b3aa7c251c46
https://github.com/lxc/lxc/commit/b66e56c883fc0589241eabd9e127b3aa7c251c46
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/bdev/bdev.c
M src/lxc/bdev/lxcaufs.c
M src/lxc/bdev/lxcbtrfs.c
M src/lxc/bdev/lxcoverlay.c
M src/lxc/cgroups/cgfs.c
M src/lxc/cgroups/cgfsng.c
M src/lxc/cgroups/cgmanager.c
M src/lxc/conf.c
M src/lxc/conf.h
M src/lxc/lxccontainer.c
M src/lxc/start.c
Log Message:
-----------
tree-wide: log function called in userns_exec_1()
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 55b24e80abcee5af49b05906fabb764ea2d26d2f
https://github.com/lxc/lxc/commit/55b24e80abcee5af49b05906fabb764ea2d26d2f
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/af_unix.c
M src/lxc/af_unix.h
M src/lxc/attach.c
M src/lxc/commands.c
M src/lxc/conf.c
M src/lxc/start.c
Log Message:
-----------
af_unix: abstract lxc_abstract_unix_{send,recv}_fd
- Enable lxc_abstract_unix_{send,recv}_fd() to send and receive multiple fds at
once.
- lxc_abstract_unix_{send,recv}_fd() -> lxc_abstract_unix_{send,recv}_fds()
- Send tty fds from child to parent all at once.
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 24e15915cc0b48418aff1c66d6e23aa14cb9786a
https://github.com/lxc/lxc/commit/24e15915cc0b48418aff1c66d6e23aa14cb9786a
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/conf.c
Log Message:
-----------
conf: remove dead mount code
The removed codepath was non-functional for a long time now. All mounting is
handled through bdev.{c,h} and if that fails the other codepath would
necessarily fail as well. So let's remove them. This makes it way clearer what
is going on and simplifies things massively.
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 5e924aa867cce0873887f8aac518f17a491cf853
https://github.com/lxc/lxc/commit/5e924aa867cce0873887f8aac518f17a491cf853
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/bdev/bdev.c
M src/lxc/bdev/lxcloop.c
Log Message:
-----------
bdev: "detect" loop file
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 67e963fea45c77fdc2efbb791f2d8cc8847128c5
https://github.com/lxc/lxc/commit/67e963fea45c77fdc2efbb791f2d8cc8847128c5
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M doc/lxc.container.conf.sgml.in
Log Message:
-----------
doc: tweak lxc.container.conf a little
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 185f6ea565f23e98a1e27a825d2cab4363f7a27e
https://github.com/lxc/lxc/commit/185f6ea565f23e98a1e27a825d2cab4363f7a27e
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/bdev/bdev.c
M src/lxc/bdev/bdev.h
Log Message:
-----------
bdev: non-functional changes
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 1dd111eb8e2f1e46acf66e53555e820502a57354
https://github.com/lxc/lxc/commit/1dd111eb8e2f1e46acf66e53555e820502a57354
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/bdev/bdev.c
M src/lxc/bdev/bdev.h
M src/lxc/bdev/lxcloop.c
M src/lxc/bdev/lxclvm.c
M src/lxc/bdev/lxcrbd.c
Log Message:
-----------
bdev: record output from mkfs.*
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: fabcb0cca816781bd6adfba2bbaf2b5618d865ae
https://github.com/lxc/lxc/commit/fabcb0cca816781bd6adfba2bbaf2b5618d865ae
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/conf.c
M src/lxc/conf.h
M src/lxc/start.c
M src/lxc/tools/lxc_attach.c
Log Message:
-----------
conf: improve tty shifting function
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: e7bd80d8f13440b2e6bb56017c9f6c03288128a4
https://github.com/lxc/lxc/commit/e7bd80d8f13440b2e6bb56017c9f6c03288128a4
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/conf.c
Log Message:
-----------
conf: improve lxc_map_ids()
Closes https://github.com/lxc/lxd/issues/3384.
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: b64553b9914655330d42bcf2b5751bf637e03604
https://github.com/lxc/lxc/commit/b64553b9914655330d42bcf2b5751bf637e03604
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/conf.c
M src/lxc/utils.h
Log Message:
-----------
conf: fix bionic builds
bionic seems to lack a definition of __S_ISTYPE().
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 6f9bdb686b6824dd3d5bfc5b0aceec0afcb7dce7
https://github.com/lxc/lxc/commit/6f9bdb686b6824dd3d5bfc5b0aceec0afcb7dce7
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M templates/lxc-opensuse.in
Log Message:
-----------
lxc-opensuse: add Tumbleweed as supported release
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 3a61f1e7e8219a5fafe7b6b87ec85f17db9f0b5e
https://github.com/lxc/lxc/commit/3a61f1e7e8219a5fafe7b6b87ec85f17db9f0b5e
Author: 0x0916 <w at laoqinren.net>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/seccomp.c
Log Message:
-----------
seccomp: export the seccomp filter after load it into kernel successful
when the log level is TRACE, this patch export the seccomp
filter to log file.
the ouput of `seccomp_export_pfc()` is human readable and this feature
is useful for user to make sure their `seccomp configuration file` is
right.
Output for he default ubuntu container's seccomp filter is the
following:
```
lxc-start ubuntu 20170520024159.412 INFO lxc_apparmor - lsm/apparmor.c:apparmor_process_label_set:238 - changed apparmor profile to lxc-container-default-cgns
if ($arch == 3221225534)
# filter for syscall "finit_module" (313) [priority: 65535]
if ($syscall == 313)
action ERRNO(1);
# filter for syscall "open_by_handle_at" (304) [priority: 65535]
if ($syscall == 304)
action ERRNO(1);
# filter for syscall "kexec_load" (246) [priority: 65535]
if ($syscall == 246)
action ERRNO(1);
# filter for syscall "delete_module" (176) [priority: 65535]
if ($syscall == 176)
action ERRNO(1);
# filter for syscall "init_module" (175) [priority: 65535]
if ($syscall == 175)
action ERRNO(1);
# filter for syscall "umount2" (166) [priority: 65533]
if ($syscall == 166)
if ($a1.hi32 & 0x00000000 == 0)
if ($a1.lo32 & 0x00000001 == 1)
action ERRNO(13);
# default action
action ALLOW;
if ($arch == 1073741827)
# filter for syscall "finit_module" (350) [priority: 65535]
if ($syscall == 350)
action ERRNO(1);
# filter for syscall "open_by_handle_at" (342) [priority: 65535]
if ($syscall == 342)
action ERRNO(1);
# filter for syscall "kexec_load" (283) [priority: 65535]
if ($syscall == 283)
action ERRNO(1);
# filter for syscall "delete_module" (129) [priority: 65535]
if ($syscall == 129)
action ERRNO(1);
# filter for syscall "init_module" (128) [priority: 65535]
if ($syscall == 128)
action ERRNO(1);
# filter for syscall "umount2" (52) [priority: 65534]
if ($syscall == 52)
if ($a1 & 0x00000001 == 1)
action ERRNO(13);
# default action
action ALLOW;
if ($arch == 3221225534)
# filter for syscall "kexec_load" (1073742352) [priority: 65535]
if ($syscall == 1073742352)
action ERRNO(1);
# filter for syscall "finit_module" (1073742137) [priority: 65535]
if ($syscall == 1073742137)
action ERRNO(1);
# filter for syscall "open_by_handle_at" (1073742128) [priority: 65535]
if ($syscall == 1073742128)
action ERRNO(1);
# filter for syscall "delete_module" (1073742000) [priority: 65535]
if ($syscall == 1073742000)
action ERRNO(1);
# filter for syscall "init_module" (1073741999) [priority: 65535]
if ($syscall == 1073741999)
action ERRNO(1);
# filter for syscall "umount2" (1073741990) [priority: 65534]
if ($syscall == 1073741990)
if ($a1 & 0x00000001 == 1)
action ERRNO(13);
# default action
action ALLOW;
action KILL;
lxc-start ubuntu 20170520024159.412 NOTICE lxc_start - start.c:start:1470 - Exec'ing "/sbin/init".
```
Signed-off-by: 0x0916 <w at laoqinren.net>
Commit: eb2bbc84d648ac97934fabbe32aa7bca02055f3e
https://github.com/lxc/lxc/commit/eb2bbc84d648ac97934fabbe32aa7bca02055f3e
Author: 0x0916 <w at laoqinren.net>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/log.c
M src/lxc/log.h
M src/lxc/lxc_monitord.c
M src/lxc/tools/lxc_attach.c
M src/lxc/tools/lxc_autostart.c
M src/lxc/tools/lxc_cgroup.c
M src/lxc/tools/lxc_checkpoint.c
M src/lxc/tools/lxc_console.c
M src/lxc/tools/lxc_copy.c
M src/lxc/tools/lxc_create.c
M src/lxc/tools/lxc_destroy.c
M src/lxc/tools/lxc_device.c
M src/lxc/tools/lxc_execute.c
M src/lxc/tools/lxc_freeze.c
M src/lxc/tools/lxc_info.c
M src/lxc/tools/lxc_init.c
M src/lxc/tools/lxc_ls.c
M src/lxc/tools/lxc_monitor.c
M src/lxc/tools/lxc_snapshot.c
M src/lxc/tools/lxc_start.c
M src/lxc/tools/lxc_stop.c
M src/lxc/tools/lxc_unfreeze.c
M src/lxc/tools/lxc_wait.c
Log Message:
-----------
Switch to a new lxc_log_init function
Signed-off-by: 0x0916 <w at laoqinren.net>
Commit: bad6582c13d9467570a45368b989c7b1798e7a73
https://github.com/lxc/lxc/commit/bad6582c13d9467570a45368b989c7b1798e7a73
Author: Breno Leitao <breno.leitao at gmail.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M templates/lxc-alpine.in
Log Message:
-----------
lxc-alpine: Add support for ppc64le
Starting at version 3.6, Alpine Linux has support for ppc64le
architecture. Adding the new keys also.
Signed-off-by: Breno Leitao <breno.leitao at gmail.com>
Commit: a63bb845f126932aa089dfe36717bb05c13f8dea
https://github.com/lxc/lxc/commit/a63bb845f126932aa089dfe36717bb05c13f8dea
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/criu.c
M src/lxc/execute.c
M src/lxc/lxc.h
M src/lxc/lxccontainer.c
M src/lxc/start.c
M src/lxc/start.h
M src/lxc/state.c
M src/lxc/tools/lxc_execute.c
Log Message:
-----------
start: add lxc_init_handler()
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 5702bdbb4e1b861a247153396a4920eeda73b6a4
https://github.com/lxc/lxc/commit/5702bdbb4e1b861a247153396a4920eeda73b6a4
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/lxccontainer.c
Log Message:
-----------
lxccontainer: only spawn monitord on demand
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 2d6f6aa722c206355be8d2f3450f12e4e784b9f9
https://github.com/lxc/lxc/commit/2d6f6aa722c206355be8d2f3450f12e4e784b9f9
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/commands.c
M src/lxc/start.c
Log Message:
-----------
commands: add TRACE()ers
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 3988d163450ecdecf734621e6704f2d9cfa83d66
https://github.com/lxc/lxc/commit/3988d163450ecdecf734621e6704f2d9cfa83d66
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/commands.c
M src/lxc/commands.h
M src/lxc/lxccontainer.c
M src/lxc/start.c
M src/lxc/start.h
M src/lxc/state.c
M src/lxc/state.h
Log Message:
-----------
commands: add lxc_cmd_state_server()
A LXC container's lifecycle is regulated by the states STARTING, RUNNING,
STOPPING, STOPPED, ABORTING. These states are tracked in the LXC handler and
can be checked via approriate functions in the command socket callback system.
(The freezer stages are not part of a container's lifecycle since they are not
recorded in the LXC handler. This might change in the future but given that the
freezer controller will be removed from future cgroup implementations it is
unlikely.) So far, LXC was using an external helper to track the states of a
container (lxc-monitord). This solution was error prone. For example, the
external state server would hang in various scenarios that seemed to be caused
by either very subtle internal races or irritation of the external state server
by signals.
LXC will switch from an external state monitor (lxc-monitord) which serves as a
state server for state clients to a native implementation using the indiviual
container's command socket. This solution was discussed and outlined by Stéphane
Graber and Christian Brauner during a LX{C,D} sprint.
The LXC handler will gain an additional field to track state clients. In order
for a state client to receive state notifications from the command server he
will need to register himself via the lxc_cmd_state_server() function in the
state client list. The state client list will be served by lxc_set_state()
during the container's lifecycle. lxc_set_state() will also take care of
removing any clients from the state list in the LXC handler once the requested
state has been reached and sent to the client.
In order to prevent races between adding and serving new state clients the state
client list and the state field in the LXC handler will be protected by a lock.
This commit effectively deprecates lxc-monitord. Instead of serving states to
state clients via the lxc-monitord fifo and socket we will now send the state
of the container via the container's command socket.
lxc-monitord is still useable and will - for the sake of the lxc-monitor
command - be kept around so that non-API state clients can still monitor the
container during it's lifecycle.
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 081f3eb4ca7179cc353712d55c05410099d07550
https://github.com/lxc/lxc/commit/081f3eb4ca7179cc353712d55c05410099d07550
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/lxccontainer.c
M src/lxc/start.c
M src/lxc/start.h
Log Message:
-----------
{start,lxccontainer}: add lxc_free_handler()
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: e9be1c7a6ec8a18e90e8c200a7ac3ba24c87ee7b
https://github.com/lxc/lxc/commit/e9be1c7a6ec8a18e90e8c200a7ac3ba24c87ee7b
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/lxccontainer.c
Log Message:
-----------
lxccontainer: cleanup + bugfixes
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: ef025635a84140432143d1f98f6567932340a5d1
https://github.com/lxc/lxc/commit/ef025635a84140432143d1f98f6567932340a5d1
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/conf.c
Log Message:
-----------
conf: fix wrong path on overlayfs
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 412ec97c414ad217a186e317747e27fcdb36afb9
https://github.com/lxc/lxc/commit/412ec97c414ad217a186e317747e27fcdb36afb9
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/tests/lxc-test-apparmor-mount
M src/tests/lxc-test-unpriv
Log Message:
-----------
tests: don't fail when no processes for user exist
Since we kicked lxc-monitord there will very likely be no user processes around
anymore after all container's have been stopped. Which is a very very very good
thing. So let's not error out when pkill doesn't find any processes.
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 0d75d4a46e9b4bdef700e78cae491cd9f0785e32
https://github.com/lxc/lxc/commit/0d75d4a46e9b4bdef700e78cae491cd9f0785e32
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/conf.c
M src/lxc/confile.c
M src/lxc/log.c
M src/lxc/log.h
M src/lxc/lxc_monitord.c
M src/lxc/seccomp.c
M src/lxc/tools/lxc_attach.c
M src/lxc/tools/lxc_autostart.c
M src/lxc/tools/lxc_cgroup.c
M src/lxc/tools/lxc_checkpoint.c
M src/lxc/tools/lxc_console.c
M src/lxc/tools/lxc_copy.c
M src/lxc/tools/lxc_create.c
M src/lxc/tools/lxc_destroy.c
M src/lxc/tools/lxc_device.c
M src/lxc/tools/lxc_execute.c
M src/lxc/tools/lxc_freeze.c
M src/lxc/tools/lxc_info.c
M src/lxc/tools/lxc_init.c
M src/lxc/tools/lxc_ls.c
M src/lxc/tools/lxc_monitor.c
M src/lxc/tools/lxc_snapshot.c
M src/lxc/tools/lxc_start.c
M src/lxc/tools/lxc_stop.c
M src/lxc/tools/lxc_unfreeze.c
M src/lxc/tools/lxc_wait.c
Log Message:
-----------
tree-wide: priority -> level
When we merged the new logging function for the api we exposed the log level
argument in the struct as "priority" which we actually requested to be changed
to "level" which somehow didn't happen and we missed it. Given the fact there
has been no new liblxc release let's fix it right now before it hits users.
Also, take the chance to change the terminology in the log from "priority" to
"level" globally. This is to prevent confusion with syslog's "priority"
argument which we also support.
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 2238c21634f9bac96d287f26d041c99d40e8f290
https://github.com/lxc/lxc/commit/2238c21634f9bac96d287f26d041c99d40e8f290
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
M src/lxc/confile_utils.c
M src/lxc/confile_utils.h
Log Message:
-----------
network: mv config_value_empty() to confile_utils
and rename it to lxc_config_value_empty()
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 4f1f10bd3f92e6babbaa5958887d7ba36f9f1e3c
https://github.com/lxc/lxc/commit/4f1f10bd3f92e6babbaa5958887d7ba36f9f1e3c
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
M src/lxc/confile.h
M src/lxc/lxccontainer.c
Log Message:
-----------
network: add data arg to set callback
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 3bdbfd43b6f9aae20b1d48457b50490883f24ade
https://github.com/lxc/lxc/commit/3bdbfd43b6f9aae20b1d48457b50490883f24ade
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/conf.h
Log Message:
-----------
network: add network counter
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 5d9a6c64f4a58f67e37a8f0231b5e19cbdce8045
https://github.com/lxc/lxc/commit/5d9a6c64f4a58f67e37a8f0231b5e19cbdce8045
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile_utils.c
M src/lxc/confile_utils.h
Log Message:
-----------
network: implement lxc_get_netdev_by_idx()
lxc_get_netdev_by_idx() takes care of checking whether a given netdev struct
for a given index is already allocated. If so it returns a pointer to it to the
caller.
If it doesn't find it it will allocate a new netdev struct and insert it into
the network list at the right position. For example, let's say you have the
following networks defined in your config file:
lxc.network.0.type=veth
lxc.network.0.link=lxcbr0
lxc.network.0.name=eth0
lxc.network.0.flags=up
lxc.network.3.type=veth
lxc.network.3.link=lxcbr0
lxc.network.3.name=eth1
lxc.network.3.flags=up
lxc.network.3.hwaddr = 00:16:3e:5d:7d:65
lxc.network.1.type=veth
lxc.network.1.link=lxcbr0
lxc.network.1.name=eth0
lxc.network.1.flags=up
lxc_get_netdev_by_idx() will take care that the internal network list appears
in the order:
0
1
3
The ordering of the keys themselves can also be random, meaning you could do:
lxc.network.3.type=veth
lxc.network.0.link=lxcbr0
lxc.network.0.name=eth0
lxc.network.3.hwaddr = 00:16:3e:5d:7d:65
lxc.network.0.flags=up
lxc.network.3.flags=up
lxc.network.0.type=veth
lxc.network.3.link=lxcbr0
lxc.network.3.name=eth1
and lxc_get_netdev_by_idx() would still figure out the correct ordering since
it keeps track of the index.
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 9c8ca2a54cf68a161f16978741a1174749f8eac1
https://github.com/lxc/lxc/commit/9c8ca2a54cf68a161f16978741a1174749f8eac1
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/conf.c
Log Message:
-----------
network: perform network validation at creation time
Some of the checks were previously performed when parsing the network config.
But since we allow for a little more flexibility now it doesn't work anymore.
Instead, let's validate the network at creation time.
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: e360d52a6bd9ab5deeedcfe5c3768ab91b176424
https://github.com/lxc/lxc/commit/e360d52a6bd9ab5deeedcfe5c3768ab91b176424
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/conf.c
M src/lxc/confile_utils.c
M src/lxc/confile_utils.h
Log Message:
-----------
network: add lxc_log_configured_netdevs()
This logs the configured networks on the trace level to support debugging.
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 5b68058765aa9491cac612833cb7323a9434ac3c
https://github.com/lxc/lxc/commit/5b68058765aa9491cac612833cb7323a9434ac3c
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
M src/lxc/confile.h
M src/lxc/lxccontainer.c
Log Message:
-----------
network: add arg to config clear method
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: a816c9c12f6ece4b6a31a64b554731326121398f
https://github.com/lxc/lxc/commit/a816c9c12f6ece4b6a31a64b554731326121398f
Author: Yifeng Tan <tanyifeng1 at huawei.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/utils.c
Log Message:
-----------
utils: fix the way to detect blocking signal
Signed-off-by: Yifeng Tan <tanyifeng1 at huawei.com>
Commit: 569eb78e7c134999feb3ae61b2e5e94606cb53c1
https://github.com/lxc/lxc/commit/569eb78e7c134999feb3ae61b2e5e94606cb53c1
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/utils.c
Log Message:
-----------
utils: use 1LU otherwise we overflow
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 70b63c0ff6348d6adb5c70c6cfabe64a8b0044b0
https://github.com/lxc/lxc/commit/70b63c0ff6348d6adb5c70c6cfabe64a8b0044b0
Author: KATOH Yasufumi <karma at jazz.email.ne.jp>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M doc/ja/lxc.container.conf.sgml.in
Log Message:
-----------
doc: Tweak Japanese lxc.container.conf(5)
Add description of new network configuration, and tweak.
Update for commit b9986e437ba334a3860472a3e01ed2fa221603ab
Signed-off-by: KATOH Yasufumi <karma at jazz.email.ne.jp>
Commit: dc7ae814ecc7ad0ffd3b277926bd532075b06b9b
https://github.com/lxc/lxc/commit/dc7ae814ecc7ad0ffd3b277926bd532075b06b9b
Author: Li Feng <lifeng68 at huawei.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/console.c
Log Message:
-----------
Fix memory leak of 'lxc_tty_state'
Signed-off-by: Li Feng <lifeng68 at huawei.com>
Commit: 9cdb97e59209c3f504798453128abcdcafe80443
https://github.com/lxc/lxc/commit/9cdb97e59209c3f504798453128abcdcafe80443
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/confile.c
Log Message:
-----------
confile: do not check for empty value twice
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 237850315f564e4eb157f9d2a628b70754b63c4c
https://github.com/lxc/lxc/commit/237850315f564e4eb157f9d2a628b70754b63c4c
Author: 0x0916 <w at laoqinren.net>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M lxc.pc.in
Log Message:
-----------
Revert "Add a prefix to the lxc.pc"
This reverts commit 758243d8af0406e63cc5446c65d415298fa3cef2.
Signed-off-by: 0x0916 <w at laoqinren.net>
Commit: 1430601ed3d2e352e7daa5e442ec188a20fc5310
https://github.com/lxc/lxc/commit/1430601ed3d2e352e7daa5e442ec188a20fc5310
Author: 0x0916 <w at laoqinren.net>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/attach.c
M src/lxc/bdev/bdev.c
Log Message:
-----------
fix memory and resource leak
Signed-off-by: 0x0916 <w at laoqinren.net>
Commit: 34bbdf6495bff1f6e28499a0eff20fe1e63610e8
https://github.com/lxc/lxc/commit/34bbdf6495bff1f6e28499a0eff20fe1e63610e8
Author: 0x0916 <w at laoqinren.net>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/arguments.c
M src/lxc/caps.c
M src/lxc/cgroups/cgfsng.c
M src/lxc/conf.c
M src/lxc/start.c
M src/lxc/sync.c
M src/lxc/tools/lxc_init.c
M src/tests/reboot.c
Log Message:
-----------
Use strerror(errno) instead of %m
Signed-off-by: 0x0916 <w at laoqinren.net>
Commit: 278d561816e7fdb3099bbf33a3f5fed588cc4fa9
https://github.com/lxc/lxc/commit/278d561816e7fdb3099bbf33a3f5fed588cc4fa9
Author: 0x0916 <w at laoqinren.net>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M .gitignore
Log Message:
-----------
update .gitignore
Signed-off-by: 0x0916 <w at laoqinren.net>
Commit: d0f69d4127d12babba5ec478c302a759ebb54128
https://github.com/lxc/lxc/commit/d0f69d4127d12babba5ec478c302a759ebb54128
Author: Evgeni Golov <evgeni at debian.org>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M templates/lxc-debian.in
Log Message:
-----------
templates/debian: add aarch64 → arm64 mapping
uname -m reports aarch64, but Debian calls the arch arm64
Signed-off-by: Evgeni Golov <evgeni at debian.org>
Commit: 433297cb59b44612bbdd475fd29a4e8d03789fad
https://github.com/lxc/lxc/commit/433297cb59b44612bbdd475fd29a4e8d03789fad
Author: Evgeni Golov <evgeni at debian.org>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M templates/lxc-centos.in
Log Message:
-----------
use altarch mirror for CentOS on arches other than i386 and x86_64
CentOS only has i386 and x86_64 listed in mirrorlist.centos.org,
use http://mirror.centos.org/altarch/ for all other arches instead
See: https://bugs.centos.org/view.php?id=11250
Signed-off-by: Evgeni Golov <evgeni at debian.org>
Commit: 48542305025b0b2ec290ab6f0a7a7d2ded75fe85
https://github.com/lxc/lxc/commit/48542305025b0b2ec290ab6f0a7a7d2ded75fe85
Author: 0x0916 <w at laoqinren.net>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/lxccontainer.h
Log Message:
-----------
API doc: update note for get_config_item
Fix issue: https://github.com/lxc/lxc/issues/505
Signed-off-by: 0x0916 <w at laoqinren.net>
Commit: 2f3f7152bb9ffacbf280224e6455acfc19c945e4
https://github.com/lxc/lxc/commit/2f3f7152bb9ffacbf280224e6455acfc19c945e4
Author: 0x0916 <w at laoqinren.net>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/bdev/lxcbtrfs.c
M src/lxc/cgroups/cgfs.c
M src/lxc/cgroups/cgmanager.c
M src/lxc/conf.c
M src/lxc/utils.c
Log Message:
-----------
remove the `__func__` macro
Our logging function will always spew out the function name.
Signed-off-by: 0x0916 <w at laoqinren.net>
Commit: 80fe604633a02038af0dc99febb4f553e0d9ff49
https://github.com/lxc/lxc/commit/80fe604633a02038af0dc99febb4f553e0d9ff49
Author: 0x0916 <w at laoqinren.net>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/lxc_monitord.c
Log Message:
-----------
lxc-monitord: exit when got a quit command
lxc-monitor has an option to tell lxc-monitord to quit.
```
~/lxc (master) # lxc-monitor --help
lxc-monitor monitors the state of the NAME container
Options :
-n, --name=NAME NAME of the container
NAME may be a regular expression
-Q, --quit tell lxc-monitord to quit
```
But it does not work. This patch fix that.
Signed-off-by: 0x0916 <w at laoqinren.net>
Commit: 27c08a00016ca00d25db04febf4e973acc9ac7a3
https://github.com/lxc/lxc/commit/27c08a00016ca00d25db04febf4e973acc9ac7a3
Author: 0x0916 <w at laoqinren.net>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/start.c
Log Message:
-----------
start: send state to legacy lxc-monitord state server even if no state clients registered
This pr https://github.com/lxc/lxc/pull/1618 kill lxc-monitord, for backwards compatibility,
we also send state to legacy lxc-monitord state server in function `lxc_set_state`.
we should also send state if there is no state clients registered, otherwise `lxc-monitor` client will
not get state change event if container changed state to `STARTING` or `RUNNING`.
Signed-off-by: 0x0916 <w at laoqinren.net>
Commit: 11a74d848213854d1781fc985fd1b9d4022f152a
https://github.com/lxc/lxc/commit/11a74d848213854d1781fc985fd1b9d4022f152a
Author: 0x0916 <w at laoqinren.net>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/lxclock.c
Log Message:
-----------
remove the unused macro
Signed-off-by: Long Wang <w at laoqinren.net>
Commit: 6b0e00a27e8a9a03c299b0812d617513cedf84b7
https://github.com/lxc/lxc/commit/6b0e00a27e8a9a03c299b0812d617513cedf84b7
Author: Long Wang <w at laoqinren.net>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/lxclock.c
Log Message:
-----------
lxclock: return the right error when open lock file failed
Signed-off-by: Long Wang <w at laoqinren.net>
Commit: 0f11dba27527e3e90f1737db87dc5db3f3dff16b
https://github.com/lxc/lxc/commit/0f11dba27527e3e90f1737db87dc5db3f3dff16b
Author: Long Wang <w at laoqinren.net>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/lxclock.c
M src/lxc/lxclock.h
Log Message:
-----------
lxclock: non-functional changes
This patch mainly updates comments based on the current code.
Signed-off-by: Long Wang <w at laoqinren.net>
Commit: 26357bf1bcae411ef67604617e2896966add9a8e
https://github.com/lxc/lxc/commit/26357bf1bcae411ef67604617e2896966add9a8e
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M README.md
Log Message:
-----------
README: add CII Best Practices badge to README
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 04ed77c09c28d0576428a133eca476ff78bf7f87
https://github.com/lxc/lxc/commit/04ed77c09c28d0576428a133eca476ff78bf7f87
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M README.md
Log Message:
-----------
README: update
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 64eebf357759392ab8c4fb08423ed74841b57f98
https://github.com/lxc/lxc/commit/64eebf357759392ab8c4fb08423ed74841b57f98
Author: Long Wang <w at laoqinren.net>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/tools/lxc_execute.c
Log Message:
-----------
lxc-execute: print error message when failed
Signed-off-by: Long Wang <w at laoqinren.net>
Commit: ef3db30f291ad3f63b76a7db374096ef2b3d827d
https://github.com/lxc/lxc/commit/ef3db30f291ad3f63b76a7db374096ef2b3d827d
Author: Long Wang <w at laoqinren.net>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/tools/lxc_init.c
Log Message:
-----------
lxc-init: add comment for exclude 32 and 33 signals
Signed-off-by: Long Wang <w at laoqinren.net>
Commit: a33b05fa4cf6afe0704c846ab08385e409a5f9a9
https://github.com/lxc/lxc/commit/a33b05fa4cf6afe0704c846ab08385e409a5f9a9
Author: Long Wang <w at laoqinren.net>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/error.c
M src/lxc/initutils.c
M src/lxc/tools/lxc_init.c
Log Message:
-----------
lxc-init: non-functional changes
This patch mainly update the message format to:
* upper the first letter
* end without a dot
all changes are relate to `lxc-init`
Signed-off-by: Long Wang <w at laoqinren.net>
Commit: f602f03dd600cca1407b40b91d3d9bb1c7007207
https://github.com/lxc/lxc/commit/f602f03dd600cca1407b40b91d3d9bb1c7007207
Author: Long Wang <w at laoqinren.net>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/tools/lxc_init.c
Log Message:
-----------
lxc-init: adjust include statements
* Use `#include <lxc/lxccontaienr.h>` style for exported haeders.
* remove used header `caps.h`
Signed-off-by: Long Wang <w at laoqinren.net>
Commit: 2492b2e3a9d8265084dd8339891e9a2bf24d5b75
https://github.com/lxc/lxc/commit/2492b2e3a9d8265084dd8339891e9a2bf24d5b75
Author: Long Wang <w at laoqinren.net>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/tools/lxc_init.c
Log Message:
-----------
lxc-init: move initialization of act to outside of the loop
Signed-off-by: Long Wang <w at laoqinren.net>
Commit: 4dd09ace7c5793c5268764e03f54a295114c9c4e
https://github.com/lxc/lxc/commit/4dd09ace7c5793c5268764e03f54a295114c9c4e
Author: Long Wang <w at laoqinren.net>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/caps.h
Log Message:
-----------
caps.h: move ifndef/define to the top
Signed-off-by: Long Wang <w at laoqinren.net>
Commit: eb5656c44b518774db615dad7e469f15027870a2
https://github.com/lxc/lxc/commit/eb5656c44b518774db615dad7e469f15027870a2
Author: Long Wang <w at laoqinren.net>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/include/getline.h
M src/include/getsubopt.h
M src/include/lxcmntent.h
M src/include/openpty.h
M src/lxc/lsm/lsm.h
Log Message:
-----------
use same ifndef/define format for all headers
Signed-off-by: Long Wang <w at laoqinren.net>
Commit: 157fdf70e1931c29d1f5d70cc161ff6b9e6b0eed
https://github.com/lxc/lxc/commit/157fdf70e1931c29d1f5d70cc161ff6b9e6b0eed
Author: Frédéric Dalleau <frederic.dalleau at collabora.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M config/apparmor/abstractions/start-container
Log Message:
-----------
Allow containers to start in AppArmor namespaces
This patch allows users to start containers in AppArmor namespaces.
Users can define their own profiles for their containers, but
lxc-start must be allowed to change to a namespace.
A container configuration file can wrap a container in an AppArmor
profile using lxc.aa_profile.
A process in an AppArmor namespace is restricted to view
or manage only the profiles belonging to this namespace, as if no
other profiles existed. A namespace can be created as follow:
sudo mkdir /sys/kernel/security/apparmor/policy/namespaces/$NAMESPACE
AppArmor can stack profiles so that the contained process is bound
by the intersection of all profiles of the stack. This is achieved
using the '//&' operator as follow:
lxc.aa_profile = $PROFILE//&:$NAMESPACE://unconfined
In this case, even the guest process appears unconfined in the
namespace, it is still confined by $PROFILE.
A guest allowed to access "/sys/kernel/security/apparmor/** rwklix,"
will be able to manage its own profile set, while still being
enclosed in the topmost profile $PROFILE:
Different guests can be assigned the same namespace or different
namespaces. In the first case, they will share their profiles.
In the second case, they will have distinct sets of profiles.
This is validated on privileged containers.
Signed-off-by: Frédéric Dalleau <frederic.dalleau at collabora.com>
Commit: bbf98522a4e3c349b6e360d061dc858330993ccc
https://github.com/lxc/lxc/commit/bbf98522a4e3c349b6e360d061dc858330993ccc
Author: Long Wang <w at laoqinren.net>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/af_unix.c
Log Message:
-----------
af_unix: remove unlink operation
It is not necessary to unlink the abstract socket pathname when
we have finished using the socket. The abstract name is automatically
removed when the socket is closed.
Signed-off-by: Long Wang <w at laoqinren.net>
Commit: a792aa17c3281cfafcecdb47da0780776903929d
https://github.com/lxc/lxc/commit/a792aa17c3281cfafcecdb47da0780776903929d
Author: Long Wang <w at laoqinren.net>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/state.h
Log Message:
-----------
state: remove lxc_rmstate declaration
Signed-off-by: Long Wang <w at laoqinren.net>
Commit: dd75b97c229576afa1245f73eccecbf12fbf64de
https://github.com/lxc/lxc/commit/dd75b97c229576afa1245f73eccecbf12fbf64de
Author: Long Wang <w at laoqinren.net>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/af_unix.c
Log Message:
-----------
lxc_abstract_unix_connect: remove the workaround-code
commit bdb3f44147bc1a55a97131b4b39d42844ae4fb9e says that we may undo
the change in august 2014.
I think that it is time to do that.
Signed-off-by: Long Wang <w at laoqinren.net>
Commit: f6aa6929794d9b58cf1bc4d9e5cd216bde800612
https://github.com/lxc/lxc/commit/f6aa6929794d9b58cf1bc4d9e5cd216bde800612
Author: Long Wang <w at laoqinren.net>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/utils.c
Log Message:
-----------
utils: close parent end in child process after fork
Signed-off-by: Long Wang <w at laoqinren.net>
Commit: 1dc4a3b50fa5a60a4e267fe4ddaf2454d5451b55
https://github.com/lxc/lxc/commit/1dc4a3b50fa5a60a4e267fe4ddaf2454d5451b55
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/commands.c
M src/lxc/utils.c
M src/lxc/utils.h
Log Message:
-----------
utils: lxc_make_abstract_socket_name()
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: a172018e0c2e7eb8ee0eb1298159e07ea31c7386
https://github.com/lxc/lxc/commit/a172018e0c2e7eb8ee0eb1298159e07ea31c7386
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/execute.c
M src/lxc/lxccontainer.c
M src/lxc/monitor.c
M src/lxc/network.c
M src/lxc/start.c
M src/lxc/start.h
Log Message:
-----------
start: generalize lxc_check_inherited()
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: b42041e480f538264d4469ac6c24ac2b4eb37d01
https://github.com/lxc/lxc/commit/b42041e480f538264d4469ac6c24ac2b4eb37d01
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/criu.c
M src/lxc/lxccontainer.c
M src/lxc/start.c
M src/lxc/start.h
Log Message:
-----------
start: use separate socket on daemonized start
Since we killed lxc-monitord we rely on the container's command socket to wait
for the container. This doesn't work nicely on daemonized startup since a
container's init process might be something that is so short-lived that we
won't even be able to add a state client before the mainloop closes. But the
container might still have been RUNNING and executed the init binary correctly.
In this case we would erroneously report that the container failed to start
when it actually started just fine.
This commit ensures that we really all cases where the container successfully
ran by switching to a short-lived per-container anonymous unix socket pair that
uses credentials to pass container states around. It is immediately closed once
the container has started successfully.
This should also make daemonized container start way more robust since we don't
rely on the command socket handler to be running.
For the experienced developer: Yes, I did think about utilizing the command
socket directly for this. The problem is that when the mainloop starts it may
end up end accept()ing the connection that we want
do_wait_on_daemonized_start() to accept() so this won't work and might cause us
to hang indefinitely. The same problem arises when the container fails to start
before the mainloop is created. In this case we would hang indefinitely as
well.
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: cf605ce74c658a8b48e611f96b410b23a64337d2
https://github.com/lxc/lxc/commit/cf605ce74c658a8b48e611f96b410b23a64337d2
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/lxccontainer.c
Log Message:
-----------
lxccontainer: make sure memory is free()ed
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 578a00ffd5852f24a0e9aa4ebf736419266a1da2
https://github.com/lxc/lxc/commit/578a00ffd5852f24a0e9aa4ebf736419266a1da2
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/lxccontainer.c
Log Message:
-----------
lxccontainer: non-functional changes
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 2edb3cc0ec1a52fa7e010240c5bfb87c9769c36b
https://github.com/lxc/lxc/commit/2edb3cc0ec1a52fa7e010240c5bfb87c9769c36b
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M .gitignore
M src/tests/Makefile.am
A src/tests/shortlived.c
Log Message:
-----------
test: shortlived daemonized containers
Add a test to see if we can start daemonized containers that have a very
short-lived init process. The point of this is to see whether we can correctly
retrieve the state.
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 72e9f5b15d0197d468c4279647629edca563493a
https://github.com/lxc/lxc/commit/72e9f5b15d0197d468c4279647629edca563493a
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/tools/lxc_init.c
Log Message:
-----------
lxc static init: report exec*() failure
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: bccc67cf403de3d07419c1f93c36b4bcd4a8aff1
https://github.com/lxc/lxc/commit/bccc67cf403de3d07419c1f93c36b4bcd4a8aff1
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/commands.c
M src/lxc/commands.h
M src/lxc/start.c
M src/lxc/state.c
Log Message:
-----------
commands: rename to lxc_cmd_add_state_client()
The new wait commands API is not yet stable so this change is ok.
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 965730ceb564d385a085db366ecd57c6e2f45924
https://github.com/lxc/lxc/commit/965730ceb564d385a085db366ecd57c6e2f45924
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/Makefile.am
M src/lxc/commands.c
M src/lxc/commands.h
A src/lxc/commands_utils.c
A src/lxc/commands_utils.h
M src/lxc/lxccontainer.c
M src/lxc/state.c
Log Message:
-----------
commands: make state server interface flexible
This adds a little more flexibility to the state server. The idea is to have a
command socket function "lxc_cmd_add_state_client()" whose only task is to add
a new state client to the container's in-memory handler. This function returns
either the state of the container if it is already in the requested state or it
will return the newly registered client's fd in one of its arguments to the
caller. We then provide a separate helper function "lxc_cmd_sock_rcv_state()"
which can be passed the returned client fd and listens on the fd for the
requested state.
This is useful when we want to first register a client, then send a signal to
the container and wait for a state. This ensure that the client fd is
registered before the signal can have any effect and can e.g. be used to catch
something like the "STOPPING" state that is very ephemeral.
Additionally we provide a convenience function "lxc_cmd_sock_get_state()" which
combines both tasks and is used in e.g. "lxc_wait()".
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 039f38679a6ab1a69e86a25888782d5ef5a40d4b
https://github.com/lxc/lxc/commit/039f38679a6ab1a69e86a25888782d5ef5a40d4b
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/commands.c
M src/lxc/commands_utils.c
M src/lxc/commands_utils.h
M src/lxc/start.c
M src/lxc/utils.c
M src/lxc/utils.h
Log Message:
-----------
commands: mv lxc_make_abstract_socket_name()
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: e862063b38a0a3c98bf802628f3aa3d7208c5dc2
https://github.com/lxc/lxc/commit/e862063b38a0a3c98bf802628f3aa3d7208c5dc2
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/commands.c
Log Message:
-----------
commands: add missing translation
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 911d56d4d0e11291209ef668ba67ee15f3e612fe
https://github.com/lxc/lxc/commit/911d56d4d0e11291209ef668ba67ee15f3e612fe
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/commands.c
M src/lxc/commands_utils.c
M src/lxc/commands_utils.h
Log Message:
-----------
commands: abstract cmd socket handling + logging
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 3e6798e3425f410107ff10f66fda3e379ef5be65
https://github.com/lxc/lxc/commit/3e6798e3425f410107ff10f66fda3e379ef5be65
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/commands_utils.c
M src/lxc/lxccontainer.c
M src/lxc/start.c
Log Message:
-----------
commands: handle EINTR
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: 7e8cb5d05d1435f7c8d0e069256b52cb8b8bb0f9
https://github.com/lxc/lxc/commit/7e8cb5d05d1435f7c8d0e069256b52cb8b8bb0f9
Author: Long Wang <w at laoqinren.net>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/commands.c
M src/lxc/commands_utils.c
Log Message:
-----------
commands: delete meaningless comments
Signed-off-by: Long Wang <w at laoqinren.net>
Commit: 569d2c8c452ace257fd9d17f967d6d90ddce9347
https://github.com/lxc/lxc/commit/569d2c8c452ace257fd9d17f967d6d90ddce9347
Author: Long Wang <w at laoqinren.net>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/commands.c
Log Message:
-----------
commonds: fix typo
Signed-off-by: Long Wang <w at laoqinren.net>
Commit: bad62acbfd439f85ebaad1cfd0e024136168e855
https://github.com/lxc/lxc/commit/bad62acbfd439f85ebaad1cfd0e024136168e855
Author: Long Wang <w at laoqinren.net>
Date: 2017-07-16 (Sun, 16 Jul 2017)
Changed paths:
M src/lxc/utils.c
Log Message:
-----------
utils: use access instead of stat
we shoud test whether the file exists and grants
execute permissions.
Signed-off-by: Long Wang <w at laoqinren.net>
Commit: b4700e2c50aa16ed9d0b06c0b1ed1527ea92981b
https://github.com/lxc/lxc/commit/b4700e2c50aa16ed9d0b06c0b1ed1527ea92981b
Author: Li Feng <lifeng68 at huawei.com>
Date: 2017-07-17 (Mon, 17 Jul 2017)
Changed paths:
M src/lxc/start.c
Log Message:
-----------
start: dup std{in,out,err} to pty slave
In the case the container has a console with a valid slave pty file descriptor
we duplicate std{in,out,err} to the slave file descriptor so console logging
works correctly. When the container does not have a valid slave pty file
descriptor for its console and is started daemonized we should dup to
/dev/null.
Closes #1646.
Signed-off-by: Li Feng <lifeng68 at huawei.com>
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: a18763707d5ab7984cc07fe422122ac7f38e9317
https://github.com/lxc/lxc/commit/a18763707d5ab7984cc07fe422122ac7f38e9317
Author: Christian Brauner <christian.brauner at ubuntu.com>
Date: 2017-07-17 (Mon, 17 Jul 2017)
Changed paths:
M src/lxc/utils.c
Log Message:
-----------
utils: set_stdfds()
non-functional changes
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>
Commit: fabc1414a57e193e35f30078e8562bdcad5a9ed6
https://github.com/lxc/lxc/commit/fabc1414a57e193e35f30078e8562bdcad5a9ed6
Author: Long Wang <w at laoqinren.net>
Date: 2017-07-17 (Mon, 17 Jul 2017)
Changed paths:
M src/lxc/cgroups/cgfsng.c
Log Message:
-----------
cgfsng: only output debug info when we set cgroup data
Only output debug info `cgroup 'xxxx' set to 'yyyy'` when we set
cgroup data.
Signed-off-by: Long Wang <w at laoqinren.net>
Compare: https://github.com/lxc/lxc/compare/2dfd5284767e...fabc1414a57e
More information about the lxc-devel
mailing list