[lxc-devel] [lxc/lxc] ba9eab: cgroups: ignore cgroup2 limits on non-cgroup2 layouts

[Christian Brauner]

  Branch: refs/heads/stable-4.0
  Home:   https://github.com/lxc/lxc
  Commit: ba9eab74b8e7c9bcafadb83809f5f07c21318e2d
      https://github.com/lxc/lxc/commit/ba9eab74b8e7c9bcafadb83809f5f07c21318e2d
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-05-04 (Mon, 04 May 2020)

  Changed paths:
    M src/lxc/cgroups/cgfsng.c

  Log Message:
  -----------
  cgroups: ignore cgroup2 limits on non-cgroup2 layouts

Mixing cgroup2 and legacy cgroup systems such that some controllers are enabled
in legacy cgroup hierarchies and other controllers in the unified hierarchies
is simply not something we're supporting. Even systemd's hybrid layout (crazy)
doesn't bind controllers to the unified cgroup hierarchy.

Fixes: #3183
Cc: Thomas Moschny <thomas.moschny at gmx.de>
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 6001872d082dffce5e328049788c7f1ae0864789
      https://github.com/lxc/lxc/commit/6001872d082dffce5e328049788c7f1ae0864789
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-05-04 (Mon, 04 May 2020)

  Changed paths:
    M config/templates/common.conf.in
    M config/templates/userns.conf.in

  Log Message:
  -----------
  common.conf: add cgroup2 default device limits

Fixes: #3183
Cc: Thomas Moschny <thomas.moschny at gmx.de>
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 8cce8b5930d3718b11217561bda78dcaa84dfdee
      https://github.com/lxc/lxc/commit/8cce8b5930d3718b11217561bda78dcaa84dfdee
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-05-04 (Mon, 04 May 2020)

  Changed paths:
    M src/lxc/cgroups/cgfsng.c

  Log Message:
  -----------
  cgroups: premount cgroups on cgroup2-only systems

Fixes: #3183
Cc: Thomas Moschny <thomas.moschny at gmx.de>
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 0343423e578ef608d6a5c2518de0d7bcbac5887b
      https://github.com/lxc/lxc/commit/0343423e578ef608d6a5c2518de0d7bcbac5887b
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-05-04 (Mon, 04 May 2020)

  Changed paths:
    M src/lxc/conf.c
    M src/lxc/conf.h
    M src/lxc/terminal.c
    M src/lxc/utils.h

  Log Message:
  -----------
  conf: introduce userns_exec_mapped_root()

to avoid the overhead of calling to lxc-usernsexec whenever we can.

Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 0baff7b7f54824d8f829a8d7a82b3423db03d305
      https://github.com/lxc/lxc/commit/0baff7b7f54824d8f829a8d7a82b3423db03d305
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-05-04 (Mon, 04 May 2020)

  Changed paths:
    M configure.ac
    M src/lxc/conf.c
    M src/lxc/macro.h
    M src/lxc/syscall_numbers.h
    M src/lxc/syscall_wrappers.h

  Log Message:
  -----------
  conf: support console setup on containers without rootfs

This depends on the new mount api.

Closes #3164.
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 63910a22283059853f0c799f6dcdc369c83518a0
      https://github.com/lxc/lxc/commit/63910a22283059853f0c799f6dcdc369c83518a0
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-05-04 (Mon, 04 May 2020)

  Changed paths:
    M src/lxc/terminal.c

  Log Message:
  -----------
  terminal: remove unneeded if condition

Fixes: Coverity 1461742.
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


Compare: https://github.com/lxc/lxc/compare/3a4031f03696...63910a222830