[lxc-devel] [lxc/lxc] 01e5af: terminal: safely allocate pts devices from inside ...

Christian Brauner noreply at github.com
Mon Oct 19 16:00:24 UTC 2020 

  Branch: refs/heads/stable-4.0
  Home:   https://github.com/lxc/lxc
  Commit: 01e5af75dac178c7050029e45e91c22c9c4965da
      https://github.com/lxc/lxc/commit/01e5af75dac178c7050029e45e91c22c9c4965da
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M doc/api-extensions.md
    M src/lxc/api_extensions.h
    M src/lxc/attach.c
    M src/lxc/commands.c
    M src/lxc/commands.h
    M src/lxc/conf.c
    M src/lxc/conf.h
    M src/lxc/lxccontainer.c
    M src/lxc/lxccontainer.h
    M src/lxc/start.c
    M src/lxc/terminal.c
    M src/lxc/terminal.h

  Log Message:
  -----------
  terminal: safely allocate pts devices from inside the container

This was a year long journey which seems to finally have come to an end.

Closes: #1620.
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 3615d54a5d76a61406389ecb1f622d4f56465e98
      https://github.com/lxc/lxc/commit/3615d54a5d76a61406389ecb1f622d4f56465e98
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M src/lxc/macro.h

  Log Message:
  -----------
  macro: define TIOCGPTPEER if missing

Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 6e90f17424def3db1c9d4d4bf7153dc9146704c7
      https://github.com/lxc/lxc/commit/6e90f17424def3db1c9d4d4bf7153dc9146704c7
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M src/lxc/conf.c

  Log Message:
  -----------
  conf: use openat() instead of open_tree()

Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: f26fb0b541f335ef4dae971690188da85ccc3d2d
      https://github.com/lxc/lxc/commit/f26fb0b541f335ef4dae971690188da85ccc3d2d
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M src/lxc/seccomp.c

  Log Message:
  -----------
  seccomp: don't close the mainloop, simply remove the handler

Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: e300f6e990f0296f7aa6d84e231af66697541e8a
      https://github.com/lxc/lxc/commit/e300f6e990f0296f7aa6d84e231af66697541e8a
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M doc/api-extensions.md
    M src/lxc/api_extensions.h
    M src/lxc/commands.c
    M src/lxc/commands.h
    M src/lxc/lxccontainer.c
    M src/lxc/lxccontainer.h

  Log Message:
  -----------
  seccomp: add seccomp_notify_fd_active api extension

which allows to retrieve an active seccomp notifier fd from a running
container.

Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: d50941275f5af9b67193d484785062aae05cff2b
      https://github.com/lxc/lxc/commit/d50941275f5af9b67193d484785062aae05cff2b
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M src/lxc/seccomp.c

  Log Message:
  -----------
  seccomp: send notify fd as part of the message

Since we haven't made this official api yet: YOLO

Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: f61193f889acee2f5904bfa89e8e280c7a7ed295
      https://github.com/lxc/lxc/commit/f61193f889acee2f5904bfa89e8e280c7a7ed295
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M doc/api-extensions.md
    M src/lxc/api_extensions.h

  Log Message:
  -----------
  api-extension: add missing seccomp_proxy_send_notify_fd extension

Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 5f6b921c1a1df91db42bda02cf2ce98f07dbffa1
      https://github.com/lxc/lxc/commit/5f6b921c1a1df91db42bda02cf2ce98f07dbffa1
  Author: Stéphane Graber <stgraber at ubuntu.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M templates/lxc-download.in

  Log Message:
  -----------
  Revert "templates/lxc-download.in: use GPG option --receive-keys instead of --recv-keys"

This reverts commit 409040e702f814a167aed5a0e833f4d5c67fd29d.

Testing of both options show identical behavior but receive-keys does
not exist on older releases, so let's revert this.

Closes #3510

Signed-off-by: Stéphane Graber <stgraber at ubuntu.com>


  Commit: 0f2503d3114b5d04734723d92ea7a589c2f48bc9
      https://github.com/lxc/lxc/commit/0f2503d3114b5d04734723d92ea7a589c2f48bc9
  Author: Stéphane Graber <stgraber at ubuntu.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M templates/lxc-download.in

  Log Message:
  -----------
  lxc-download: Fix retry loop

Closes #3511

Signed-off-by: Stéphane Graber <stgraber at ubuntu.com>


  Commit: 36c2ad35c544aa1129d677261afed8a1a9047fb1
      https://github.com/lxc/lxc/commit/36c2ad35c544aa1129d677261afed8a1a9047fb1
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M configure.ac
    M src/lxc/conf.c
    M src/lxc/syscall_numbers.h
    M src/lxc/syscall_wrappers.h

  Log Message:
  -----------
  syscalls: add openat2()

Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 4e2b86de921ca1036d8ba249006711dbad572904
      https://github.com/lxc/lxc/commit/4e2b86de921ca1036d8ba249006711dbad572904
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M src/lxc/utils.c
    M src/lxc/utils.h

  Log Message:
  -----------
  utils: add safe_mount_beneath() based on openat2()

Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 594e5f241c6d075ee728fce1f70010daf1bcfbdf
      https://github.com/lxc/lxc/commit/594e5f241c6d075ee728fce1f70010daf1bcfbdf
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M src/lxc/conf.c

  Log Message:
  -----------
  conf: switch mount_autodev() to new safe_mount_beneath() helper

Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: bf5f0d7b1c4b7c10215f626334ff8b952e423837
      https://github.com/lxc/lxc/commit/bf5f0d7b1c4b7c10215f626334ff8b952e423837
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M src/lxc/cgroups/cgfsng.c

  Log Message:
  -----------
  cgfsng: use safe_mount_beneath()

Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 3eda62ad45f9feb138bde9aa10d83fd7c0b517df
      https://github.com/lxc/lxc/commit/3eda62ad45f9feb138bde9aa10d83fd7c0b517df
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M src/lxc/conf.c
    M src/lxc/utils.c
    M src/lxc/utils.h

  Log Message:
  -----------
  utils: introduce safe_mount_beneath_at()

Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: fd377ee881233a245043314afb715b1444981d95
      https://github.com/lxc/lxc/commit/fd377ee881233a245043314afb715b1444981d95
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M src/lxc/conf.c
    M src/lxc/conf.h

  Log Message:
  -----------
  conf: stash file descriptor to root mountpoint in struct lxc_rootfs

This way we only need to open it _once_ per container startup.

Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 3e2ec670878d84551d82214c9ff370a1af483774
      https://github.com/lxc/lxc/commit/3e2ec670878d84551d82214c9ff370a1af483774
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M src/lxc/conf.c

  Log Message:
  -----------
  conf: make use of stashed container mountpoint fd in mount_autodev()

Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 110fc87362198296d5e022e4a81685383b8e92b9
      https://github.com/lxc/lxc/commit/110fc87362198296d5e022e4a81685383b8e92b9
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M src/lxc/file_utils.c
    M src/lxc/file_utils.h
    M src/lxc/utils.c

  Log Message:
  -----------
  file_utils: add exists_dir_at()

Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 8f4bff49fd94c57091fdefbac513bb257e7b504f
      https://github.com/lxc/lxc/commit/8f4bff49fd94c57091fdefbac513bb257e7b504f
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M src/lxc/conf.c

  Log Message:
  -----------
  conf: harden lxc_fill_autodev() via save_mount_beneath_at()

Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: d226c6409084adab1b8d505505f1b0a06878016a
      https://github.com/lxc/lxc/commit/d226c6409084adab1b8d505505f1b0a06878016a
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M src/lxc/conf.c
    M src/lxc/conf.h
    M src/lxc/file_utils.c
    M src/lxc/file_utils.h

  Log Message:
  -----------
  conf: move /dev setup to be file descriptor based

Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 91a5e8b780f139b2d6a3c92f942c7cbed9f3b8f4
      https://github.com/lxc/lxc/commit/91a5e8b780f139b2d6a3c92f942c7cbed9f3b8f4
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M src/lxc/attach.c
    M src/lxc/conf.c
    M src/lxc/file_utils.c
    M src/lxc/file_utils.h
    M src/lxc/start.c
    M src/lxc/terminal.c
    M src/lxc/terminal.h

  Log Message:
  -----------
  terminal: harden terminal allocation

Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: e6a4e7c126810b806aa537528a65ef2adc8fc3bc
      https://github.com/lxc/lxc/commit/e6a4e7c126810b806aa537528a65ef2adc8fc3bc
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M src/lxc/attach.c
    M src/lxc/attach.h
    M src/lxc/conf.c
    M src/lxc/lsm/apparmor.c
    M src/lxc/lsm/lsm.c
    M src/lxc/lsm/lsm.h
    M src/lxc/lsm/nop.c
    M src/lxc/lsm/selinux.c
    M src/lxc/start.c
    M src/lxc/start.h
    M src/lxc/utils.c
    M src/lxc/utils.h
    M src/tests/attach.c

  Log Message:
  -----------
  lsm: rework lsm handling

Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 491436791489b2bfd1dc37211ec558036e602e56
      https://github.com/lxc/lxc/commit/491436791489b2bfd1dc37211ec558036e602e56
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M src/lxc/lsm/apparmor.c

  Log Message:
  -----------
  lsm: use atomic in ase we're used multi-threaded

Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 74f0c66dc4bb80a6b706c0e3595ab6e167246412
      https://github.com/lxc/lxc/commit/74f0c66dc4bb80a6b706c0e3595ab6e167246412
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M src/lxc/attach.c
    M src/lxc/attach.h
    M src/lxc/conf.c
    M src/lxc/lsm/apparmor.c
    M src/lxc/lsm/lsm.c
    M src/lxc/lsm/lsm.h
    M src/lxc/lsm/nop.c
    M src/lxc/lsm/selinux.c
    M src/lxc/start.c
    M src/lxc/start.h
    M src/tests/attach.c

  Log Message:
  -----------
  lsm: remove the need for atomic operations

Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 31ef03b52f621e905165d653443423ae5f6685dc
      https://github.com/lxc/lxc/commit/31ef03b52f621e905165d653443423ae5f6685dc
  Author: Arjun Ramachandrula <arjun.ramachandrula at gmail.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M doc/pam_cgfs.sgml.in

  Log Message:
  -----------
   Updated documentation to reflect lack of support for pure cgroupv2

Signed-off-by: Arjun Ramachandrula <arjun.ramachandrula at gmail.com>


  Commit: 509eae3a682559015e414d42e9b685b6618aa43f
      https://github.com/lxc/lxc/commit/509eae3a682559015e414d42e9b685b6618aa43f
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M src/lxc/cgroups/cgfsng.c

  Log Message:
  -----------
  cgfsng: fix cgroup attach cgroup creation

cgroups/cgfsng.c: In function ‘cgroup_attach_leaf.constprop’:
cgroups/cgfsng.c:2221:10: error: writing 1 byte into a region of size 0 [-Werror=stringop-overflow=]
 2221 |   *slash = '\0';
      |   ~~~~~~~^~~~~~
cgroups/cgfsng.c:2213:8: note: at offset -13 to object ‘attach_cgroup’ with size 23 declared here
 2213 |   char attach_cgroup[STRLITERALLEN(".lxc-1000/cgroup.procs") + 1];
      |        ^~~~~~~~~~~~~
cgroups/cgfsng.c:2229:10: error: writing 1 byte into a region of size 0 [-Werror=stringop-overflow=]
 2229 |   *slash = '/';
      |   ~~~~~~~^~~~~
cgroups/cgfsng.c:2213:8: note: at offset -13 to object ‘attach_cgroup’ with size 23 declared here
 2213 |   char attach_cgroup[STRLITERALLEN(".lxc-1000/cgroup.procs") + 1];
      |        ^~~~~~~~~~~~~
cgroups/cgfsng.c:2229:10: error: writing 1 byte into a region of size 0 [-Werror=stringop-overflow=]
 2229 |   *slash = '/';
      |   ~~~~~~~^~~~~
cgroups/cgfsng.c:2213:8: note: at offset -13 to object ‘attach_cgroup’ with size 23 declared here
 2213 |   char attach_cgroup[STRLITERALLEN(".lxc-1000/cgroup.procs") + 1];
      |        ^~~~~~~~~~~~~

Link: https://launchpadlibrarian.net/494354168/buildlog_ubuntu-groovy-armhf.lxc_1%3A4.0.4-0ubuntu1_BUILDING.txt.gz
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 783dba47991f5cfe6a571406f67d311e50863867
      https://github.com/lxc/lxc/commit/783dba47991f5cfe6a571406f67d311e50863867
  Author: graysky <graysky at archlinux.us>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M config/init/systemd/lxc.service.in

  Log Message:
  -----------
  remove deprecated options in lxc.service fixes #3527

Signed-off-by: graysky <graysky at archlinux.us>


  Commit: f6a72ee4b6911742f778ea453573454b8c872ed7
      https://github.com/lxc/lxc/commit/f6a72ee4b6911742f778ea453573454b8c872ed7
  Author: Pranay Kr. Srivastava <pranay.srivastava at pantacor.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M src/lxc/utils.c

  Log Message:
  -----------
  Check only rootfs as filesystem type

When detecting if rootfs is on ramfs instead of checking "- rootfs
rootfs" which is the " - <file_system> <device>" information only check
the file system type. This is due to a change introduced in kernel where
ramfs file system doesn't set the device to "rootfs" but instead mark it
as "none". By making sure we only check for "rootfs" as the file system
name we also offer backward compatibility with earlier kernels as well.

The kernel commit that introduced this change was

commit f32356261d44d580649a7abce1156d15d49cf20f
Author: David Howells <dhowells at redhat.com>
Date:   Mon Mar 25 16:38:31 2019 +0000

    vfs: Convert ramfs, shmem, tmpfs, devtmpfs, rootfs to use the new
    mount API

Signed-off-by: Pranay Kr. Srivastava <pranay.srivastava at pantacor.com>


  Commit: f3d2aa897f1d94e18cded99def33802581a26446
      https://github.com/lxc/lxc/commit/f3d2aa897f1d94e18cded99def33802581a26446
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M src/lxc/cgroups/cgfsng.c

  Log Message:
  -----------
  cgroups: fix armhf builds

Link: https://launchpadlibrarian.net/494473462/buildlog_ubuntu-groovy-armhf.lxc_1%3A4.0.4-0ubuntu2_BUILDING.txt.gz
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 8c23afc3cf3fa9f61b760b2c79a273e2ffbe7296
      https://github.com/lxc/lxc/commit/8c23afc3cf3fa9f61b760b2c79a273e2ffbe7296
  Author: wujing <Jing.Woo at outlook.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M src/lxc/conf.c

  Log Message:
  -----------
  remove useless parameters

Signed-off-by: wujing <Jing.Woo at outlook.com>


  Commit: a836df0484d20f0a1911016d483045068aab9767
      https://github.com/lxc/lxc/commit/a836df0484d20f0a1911016d483045068aab9767
  Author: Scott Parlane <scott.parlane at alliedtelesis.co.nz>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M src/lxc/attach.c

  Log Message:
  -----------
  avoid a NULL pointer dereference in lxc-attach

Seems to appear when stderr is a terminal and not stdin or stdout.

Signed-off-by: Scott Parlane <scott.parlane at alliedtelesis.co.nz>


  Commit: 1748c4bd53b6e979bab15aabcc4865f075cae579
      https://github.com/lxc/lxc/commit/1748c4bd53b6e979bab15aabcc4865f075cae579
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M src/lxc/terminal.c
    M src/lxc/terminal.h

  Log Message:
  -----------
  terminal: introduce lxc_terminal_signal_sigmask_safe_blocked()

Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: f59f2f9ea77d4f0bc45148263b0ac3ff94039bd6
      https://github.com/lxc/lxc/commit/f59f2f9ea77d4f0bc45148263b0ac3ff94039bd6
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M src/lxc/attach.c

  Log Message:
  -----------
  attach: use lxc_terminal_signal_sigmask_safe_blocked()

Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 422820d5f3db6126b819684d76f3c1f333aa7c58
      https://github.com/lxc/lxc/commit/422820d5f3db6126b819684d76f3c1f333aa7c58
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M src/lxc/commands.c

  Log Message:
  -----------
  commands: don't fail if unfreeze fails

We can e.g. fail the unfreeze because the freezer cgroup is not available and
then we erronously report that stopping the container failed.

Closes: #3471.
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 5e43318908f9bfdb02a09efabc735f2317e40f2f
      https://github.com/lxc/lxc/commit/5e43318908f9bfdb02a09efabc735f2317e40f2f
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M src/lxc/cmd/lxc_usernsexec.c

  Log Message:
  -----------
  lxc-usernsexec: setgroups() similar to other places shouldn't fail on EPERM

FAIL: lxc-tests: lxc-test-usernsexec (1s)
---
as test-userns executing /tmp/autopkgtest.waGEXj/build.Hm3/src/src/tests/lxc-test-usernsexec
uid=1001 gid=1001 name=test-userns subuid=165536 subgid=165536 ver=1:4.0.4-0ubuntu3
lxc-utils=1:4.0.4-0ubuntu3 kver=5.8.0-19-generic
USERNSEXEC=lxc-usernsexec
nouidgid: PASS
myuidgid: FAIL - runtest failed 1
  $ lxc-usernsexec -mu:0:1001:1 -mg:0:1001:1 -- /tmp/autopkgtest.waGEXj/build.Hm3/src/src/tests/lxc-test-usernsexec inside f0
  lxc 20200914222824.562 ERROR    utils - utils.c:lxc_setgroups:1363 - Operation not permitted - Failed to setgroups()
  kid 73112 is gone 1
subuidgid: PASS
bothsets: PASS
mismatch: PASS
ERRORS: myuidgid
---

Reported-by: Seth Forshee <seth.forshee at canonical.com>
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 9b43bce0720e1be059991313cbaa4c0b06508ef0
      https://github.com/lxc/lxc/commit/9b43bce0720e1be059991313cbaa4c0b06508ef0
  Author: Mingli Yu <mingli.yu at windriver.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    A config/init/systemd/lxc-monitord.service.in
    M config/init/systemd/lxc at .service.in

  Log Message:
  -----------
  Remove obsolete setting regarding the Standard Output

The Standard output type "syslog" is obsolete, causing a warning since systemd
version 246 [1].

Please consider using "journal" or "journal+console"

[1] https://github.com/systemd/systemd/blob/master/NEWS#L202

Signed-off-by: Mingli Yu <mingli.yu at windriver.com>


  Commit: 7241d0f40ff731309aba1a6c8b23ea7afcfb20e6
      https://github.com/lxc/lxc/commit/7241d0f40ff731309aba1a6c8b23ea7afcfb20e6
  Author: Ruben Jenster <r.jenster at drachenfels.de>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M src/lxc/seccomp.c

  Log Message:
  -----------
  seccomp: Check if syscall is supported on compat architecture.

Signed-off-by: Ruben Jenster <r.jenster at drachenfels.de>


  Commit: 95cc56cde57dab5818511aaea20eec007d3978ba
      https://github.com/lxc/lxc/commit/95cc56cde57dab5818511aaea20eec007d3978ba
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M src/lxc/seccomp.c

  Log Message:
  -----------
  seccomp: log invalid seccomp notify ids

Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 6778323df2ea11650daa8ec3f9f26ffc3fcb8fe8
      https://github.com/lxc/lxc/commit/6778323df2ea11650daa8ec3f9f26ffc3fcb8fe8
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M src/lxc/seccomp.c

  Log Message:
  -----------
  seccomp: improve default notification sending

Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 8d3bcf63fc16ddccddfd05b8a5973d24b0156d8d
      https://github.com/lxc/lxc/commit/8d3bcf63fc16ddccddfd05b8a5973d24b0156d8d
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M src/lxc/seccomp.c

  Log Message:
  -----------
  seccomp: fix compilation on powerpc

Link: https://launchpadlibrarian.net/502200189/buildlog_snap_ubuntu_bionic_ppc64el_lxd-latest-edge_BUILDING.txt.gz
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: dab1ce7fbcd4b7574f0af9d8134ba0e616b990c0
      https://github.com/lxc/lxc/commit/dab1ce7fbcd4b7574f0af9d8134ba0e616b990c0
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M src/lxc/sync.c

  Log Message:
  -----------
  sync: switch to new error helpers

Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 49f049653664e98a5884a73832c7e53e383dd9c0
      https://github.com/lxc/lxc/commit/49f049653664e98a5884a73832c7e53e383dd9c0
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M src/lxc/sync.c
    M src/lxc/sync.h

  Log Message:
  -----------
  sync: log synchronization states

Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 90a3b1da817784346594cdfe4669ae7a74dda93a
      https://github.com/lxc/lxc/commit/90a3b1da817784346594cdfe4669ae7a74dda93a
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2020-10-19 (Mon, 19 Oct 2020)

  Changed paths:
    M src/lxc/conf.c
    M src/lxc/start.c

  Log Message:
  -----------
  start: improve devpts fd sending

Closes: #3549.
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


Compare: https://github.com/lxc/lxc/compare/531e01280365...90a3b1da8177

More information about the lxc-devel mailing list