- 02 Oct, 2013 7 commits
-
-
Andrey Mazo authored
Otherwise, it cases problems on cbuild endianness != ctarget endianness setups because /sbin/ldconfig expects elf header in the wrong endianness. Signed-off-by:
Andrey Mazo <ahippo@yandex.ru> Acked-by:
Stéphane Graber <stgraber@ubuntu.com>
-
Dwight Engen authored
Signed-off-by:
Dwight Engen <dwight.engen@oracle.com> Acked-by:
-
Stéphane Graber authored
Signed-off-by: -
Renich Bon Ciric authored
Fedora 19's release has no -1 revision; it's a -2 revision actually: ftp://mirrors.kernel.org/fedora/releases/19/Fedora/x86_64/os/Packages/f/Signed-off-by:
Renich Bon Ciric <renich@woralelandia.com> Acked-by:
-
KATOH Yasufumi authored
Signed-off-by:
KATOH Yasufumi <karma@jazz.email.ne.jp> Acked-by:
-
KATOH Yasufumi authored
Signed-off-by:
-
KATOH Yasufumi authored
- Update to commit 'fbf050e4' - Improve translation Acked-by:
Serge E. Hallyn <serge.hallyn@ubuntu.com> Signed-off-by:
-
- 01 Oct, 2013 5 commits
-
-
Dwight Engen authored
Signed-off-by:
-
Dwight Engen authored
Signed-off-by:
-
KATOH Yasufumi authored
Add description of automatic mounting options
-
KATOH Yasufumi authored
Add description of '-i' option
-
KATOH Yasufumi authored
* sync current English man pages on master branch * delete lxc-shutdown.sgml.in * add lxc-snapshot.sgml.in * update FSF address (same as 250b1eec) * remove trailing whitespaces in legacy/lxc-ls.sgml.in (same as 8900b9eb)
-
- 30 Sep, 2013 4 commits
-
-
Dwight Engen authored
- When doing the selinux change, I noticed that there was a lot of duplication of code in handing string configuration items, so I refactored this into a common function. - Added a config_string_max that can be passed a maximum acceptable length, used to limit ttydir to NAME_MAX. - The behavior of config_seccomp was different than other strings: if the item was already defined, then the second attempt to set it would fail instead of just replacing the value. Changed to just replace the value. - Remove unused key and lxc_conf arguments to config_path_item(). Signed-off-by:
-
Serge Hallyn authored
The original rationale for this was to make sure that if lxcpath was /home/serge/lxcbase, then then lockdir (/run/user/serge/lock/lxc/home/serge/lxcbase) would be owned by the same user as /home/serge/lxcbase. The only user who can chown to other uids (without CAP_CHOWN added to fP) is root, who shouldn't be mucking with non-root owned containers anyway. In the meantime this causes a bunch of noise for arguably no benefit. Signed-off-by: -
Serge Hallyn authored
Signed-off-by: -
Serge Hallyn authored
This is an api function which will return false if the container is running, and the caller may not talk to its monitor over its command socket. Otherwise - if the container is not running, or the caller may access it - it returns true. We can use this in several tools early on to prevent the segvs etc which we currently get. Signed-off-by:
-
- 29 Sep, 2013 1 commit
-
-
Stéphane Graber authored
Check that the interface structure is not NULL before trying to access its members. Signed-off-by:
-
- 27 Sep, 2013 8 commits
-
-
Stéphane Graber authored
Signed-off-by: -
Dwight Engen authored
Signed-off-by:
-
Christian Seiler authored
Signed-off-by:
Christian Seiler <christian@iwakd.de> Signed-off-by:
-
Christian Seiler authored
This adds quite a few more ways to mount the cgroup filesystem automatically: - Specify ro/rw/mixed: - ro: everything mounted read-only - rw: everything mounted read-write - mixed: only container's own cgroup is rw, rest ro (default) - Add cgroup-full that mounts the entire cgroup tree to the corresponding directories. ro/rw/mixed also apply here. Signed-off-by: -
Christian Seiler authored
Signed-off-by:
-
Christian Seiler authored
Improve lxc.mount.auto code: allow the user to specify whether to mount certain things read-only or read-write. Also make the code much more easily extensible for the future. Signed-off-by:
-
Stéphane Graber authored
This adds a new -i flag to lxc-info to print the container's IP addresses using get_ips(). Example: $ lxc-info -n lxc-dev -s -p -i state: RUNNING pid: 21331 ip: 10.0.3.165 ip: 2607:f2c0:f00f:2751:e9ca:842f:efa9:97d1 ip: 2607:f2c0:f00f:2751:216:3eff:fe3a:f1c1 Signed-off-by:
-
Stéphane Graber authored
Signed-off-by:
-
- 26 Sep, 2013 2 commits
-
-
Serge Hallyn authored
(Which will also break failure-to-build in the !HAVE_LIBGNUTLS case) Signed-off-by: -
Dwight Engen authored
- change get_template_path() to only return NULL or non-NULL since one of the callers was doing a free(-1) which caused the segfault. Handle the NULL template case in the lxcapi_create() caller. - make sure to free(tpath) in the sha1sum_file() failure case Signed-off-by:
-
- 25 Sep, 2013 7 commits
-
-
Dwight Engen authored
Currently, a maximum of one LSM within LXC will be initialized and used. If in the future stacked LSMs become a reality, we can support it without changing the configuration syntax and add support for more than a single LSM at a time to the lsm code. Generic LXC code should note that lsm_process_label_set() will take effect "now" for AppArmor, and upon exec() for SELinux. - fix Oracle template mounting of proc and sysfs, needed when using SELinux Signed-off-by:
-
Serge Hallyn authored
Signed-off-by: -
Serge Hallyn authored
Signed-off-by: -
Serge Hallyn authored
Make sure to free line. Don't free 'info' when freeing base_info will later free info. Signed-off-by: -
Dwight Engen authored
Don't worry about saved_errno since none of the *_free routines will set it Signed-off-by:
-
Serge Hallyn authored
This one's easier to review by looking at the before and after files. It splits up lxc_cgroup_load_meta2() by adding 3 helpers. The result seems easier to reason about. A question I had, is, should the kernel_subsystems ** be freed in the success case? I assumed it was being used elsewhere but I can't find where. Currently it is only being freed in the error case. I suspect we want to free it in the success case as well. Cc: Christian Seiler <christian@iwakd.de> Cc: Dwight Engen <dwight.engen@oracle.com> Signed-off-by: -
KATOH Yasufumi authored
Character encoding of Japanese man pages is UTF-8. But docbook-utils can't treat it (and don't have --encoding option that use in Makefile). So change to Japanese man pages is not generated when docbook-utils is used. Signed-off-by:
-
- 24 Sep, 2013 2 commits
-
-
Qiang Huang authored
Signed-off-by:
Qiang Huang <h.huangqiang@huawei.com> Acked-by:
-
Qiang Huang authored
In lxc_cmd(), we use snprintf(path, len, "%s/%s/command", lxcpath ? lxcpath : inpath, name); to fill sock name, this assume lxcpath have no trailing slashes, so if we use lxc-info -n test -P /usr/local/var/lib/lxc_anon/ to get a running container's state, we will get state: STOPPED which is wrong, because we combine a wrong sock name. To fix this, just remove trailing slashes when parsing arguments. Signed-off-by:
-
- 23 Sep, 2013 4 commits
-
-
Stéphane Graber authored
Signed-off-by:
-
Stéphane Graber authored
Signed-off-by:
-
Stéphane Graber authored
Signed-off-by:
-
Stéphane Graber authored
The API header was included in a variety of ways before, standardize those to "include <lxc/lxccontainer.h>" as this will always work both in tree and on a system with the headers installed. Signed-off-by:
-
