[lxc-devel] [lxc/lxc] ef0e44: confile: cleanup set_config_hooks()

[Christian Brauner]

  Branch: refs/heads/stable-4.0
  Home:   https://github.com/lxc/lxc
  Commit: ef0e44603f6814627e4b4005986b686c996b6458
      https://github.com/lxc/lxc/commit/ef0e44603f6814627e4b4005986b686c996b6458
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2021-01-06 (Wed, 06 Jan 2021)

  Changed paths:
    M src/lxc/confile.c

  Log Message:
  -----------
  confile: cleanup set_config_hooks()

Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 40281306801782963368d7b7cae33ceee3337b14
      https://github.com/lxc/lxc/commit/40281306801782963368d7b7cae33ceee3337b14
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2021-01-06 (Wed, 06 Jan 2021)

  Changed paths:
    M src/lxc/confile.c

  Log Message:
  -----------
  confile: don't accidently alter lxc.cgroup.dir

Cc: stable-4.0
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 1f253dbedf4ae29160ddc0e4a704aa9fff410634
      https://github.com/lxc/lxc/commit/1f253dbedf4ae29160ddc0e4a704aa9fff410634
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2021-01-06 (Wed, 06 Jan 2021)

  Changed paths:
    M src/lxc/utils.c

  Log Message:
  -----------
  utils: allow cross-device resolution

This is needed to enable containers without a rootfs.

Fixes: #3607
Cc: stable-4.0
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: a4a5fe2a244079854d31e0ca7a525dec521c401b
      https://github.com/lxc/lxc/commit/a4a5fe2a244079854d31e0ca7a525dec521c401b
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2021-01-06 (Wed, 06 Jan 2021)

  Changed paths:
    M src/lxc/cgroups/cgfsng.c
    M src/lxc/cgroups/cgroup2_devices.c
    M src/lxc/cgroups/cgroup2_devices.h
    M src/lxc/commands.c
    M src/lxc/conf.c
    M src/lxc/conf.h

  Log Message:
  -----------
  cgroup2: move bpf device cgroup program to struct cgroup_ops

Cc: stable-4.0
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 0d6d83fdd0452e4491852ac6a392d0218b55823b
      https://github.com/lxc/lxc/commit/0d6d83fdd0452e4491852ac6a392d0218b55823b
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2021-01-06 (Wed, 06 Jan 2021)

  Changed paths:
    M src/lxc/macro.h

  Log Message:
  -----------
  macro: use ascending order for capabilities

Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 9ace6f7ce7cb611144b582615afcf8d5f9475e4a
      https://github.com/lxc/lxc/commit/9ace6f7ce7cb611144b582615afcf8d5f9475e4a
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2021-01-06 (Wed, 06 Jan 2021)

  Changed paths:
    M src/lxc/conf.c
    M src/lxc/macro.h

  Log Message:
  -----------
  conf: define missing capabilities

Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: ee79a696cfbafb75849b10a9d0e8e9e85053ab52
      https://github.com/lxc/lxc/commit/ee79a696cfbafb75849b10a9d0e8e9e85053ab52
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2021-01-06 (Wed, 06 Jan 2021)

  Changed paths:
    M src/lxc/conf.c
    M src/lxc/macro.h

  Log Message:
  -----------
  conf: add new capabilities CAP_{BLOCK_SUSPEND,PERFMON,BPF,CAP_CHECKPOINT_RESTORE}

Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 1865b6406bd9c0f4e39b3212bbcaede514e72981
      https://github.com/lxc/lxc/commit/1865b6406bd9c0f4e39b3212bbcaede514e72981
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2021-01-06 (Wed, 06 Jan 2021)

  Changed paths:
    M src/lxc/macro.h

  Log Message:
  -----------
  macro: define all capabilities

Fixes: #3612
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 2dfeec3d72a3cc3244960af12ef2e8daa76e6c99
      https://github.com/lxc/lxc/commit/2dfeec3d72a3cc3244960af12ef2e8daa76e6c99
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2021-01-06 (Wed, 06 Jan 2021)

  Changed paths:
    M src/lxc/cgroups/cgfsng.c
    M src/lxc/conf.h

  Log Message:
  -----------
  conf: add lxc_wants_cap() helper

Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


  Commit: 952ab618268b4af2773ed9d8fade817363c28a5c
      https://github.com/lxc/lxc/commit/952ab618268b4af2773ed9d8fade817363c28a5c
  Author: Christian Brauner <christian.brauner at ubuntu.com>
  Date:   2021-01-06 (Wed, 06 Jan 2021)

  Changed paths:
    M src/lxc/conf.c
    M src/lxc/conf.h

  Log Message:
  -----------
  conf: fix CAP_NET_ADMIN-based mount handling

Fixes: e8b9c9ec6fb9 ("unmounted proc/sys/net if dropping CAP_NET_ADMIN")
Signed-off-by: Christian Brauner <christian.brauner at ubuntu.com>


Compare: https://github.com/lxc/lxc/compare/6e8b98aaf89a...952ab618268b