- 15 Aug, 2017 7 commits
-
-
Christian Brauner authored
This reverts commit 8608cb0b. Signed-off-by:
Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
This reverts commit 2ea2f3c8. Signed-off-by:
-
Christian Brauner authored
This reverts commit a493a694. Signed-off-by:
-
Christian Brauner authored
This reverts commit d8bb582a. Signed-off-by:
-
Christian Brauner authored
This reverts commit 85914b67. Signed-off-by:
-
Christian Brauner authored
This reverts commit 162a857a. Signed-off-by:
-
Christian Brauner authored
This reverts commit 93b8f59a. Signed-off-by:
-
- 14 Aug, 2017 33 commits
-
-
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
We will fade out the old helpers soon. Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Closes #1698. Closes #1703. Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
otherwise default to "dir" Signed-off-by: -
Harald Dunkel authored
(updated by Serge to also handle hte new lxc-fedora{-legacy{.in templates) Signed-off-by:Harald Dunkel <harri@afaics.de> Signed-off-by:
Serge Hallyn <serge@hallyn.com> Acked-by:
-
Christian Brauner authored
Signed-off-by:
Thomas Hipp <thipp@suse.de> Signed-off-by:
-
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Closes #1669. Closes #1678. Relates to https://github.com/systemd/systemd/issues/6408. Signed-off-by:
-
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
When the running kernel supports cgroup namespaces and users want to manually set up cgroups via lxc.hook.mount before the init binary starts the cgroup namespace needs to be already unshared. Otherwise the view on the cgroup mounts is wrong. This commit places the call to lxc_setup() after the LXC_SYNC_POST_CGROUP barrier. Before this commit, the tty fds we allocate from a fresh devpts instance in the container's namespaces before the init binary starts were referring to the host's cgroup namespace since lxc_setup() was called before unshare(CLONE_NEWCGROUP). Although not a security risk at this point since setns() restricts its calls to /proc/<self>/ns files it's still better to do it *after* the cgroup namespace has been unshared. Adding a Suggested-by line for the lxc.mount.hook fix for Quentin. Closes #1597. Suggested-by:
Quentin Dufour <quentin@dufour.tk> Signed-off-by:
-
