Commits · 136b349c94dbc573ebfe762cde4f4b91faf8f428 · Chen Yisong / lxc · GitLab

15 Feb, 2021 23 commits
- Merge pull request #3674 from brauner/2021-02-15/nesting · 136b349c
  Stéphane Graber authored Feb 15, 2021
```
cgroups: tighten cgroup config items
```
  136b349c
- confile: forbid absolute paths in config items that modify the cgroup layout · f63ef155
  Christian Brauner authored Feb 15, 2021
```
This is not a safety measure but merely is supposed to raise awareness that
these paths are always relative to the cgroup root as determined by
lxc.cgroup.relative.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  f63ef155
- confile: forbid walking upwards for confile items that modify cgroup layout · 0a48ee66
  Christian Brauner authored Feb 15, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  0a48ee66
- confile_utils: normalize paths in config items · 7d714159
  Christian Brauner authored Feb 15, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  7d714159
- confile: use set_config_path_item() for most cgroup layout modifiers · ee94a8b5
  Christian Brauner authored Feb 15, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  ee94a8b5
- Merge pull request #3673 from brauner/2021-02-15/nesting · 7e925736
  Stéphane Graber authored Feb 15, 2021
```
cgroups: first batch of cgroup mounting fixes
```
  7e925736
- cgroupfs: rework cgroup2 mounting · a3e5ec26
  Christian Brauner authored Feb 15, 2021
```
We now explicitly refuse to mount cgroups on pure unified layouts when the
container is not running in a separate cgroup namespace. This is not a
regression since we simply always failed before anyway. I will likely fix this
very soon though. But there are bigger fish to fry currently.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  a3e5ec26
- cgroups: log early return · 3a86fb37
  Christian Brauner authored Feb 15, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  3a86fb37
- cgroups: s/__cg_mount_direct()/__cgroupfs_mount()/g · 44234ae1
  Christian Brauner authored Feb 15, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  44234ae1
- cgroups: strip LXC_AUTO_CGROUP_MIXED and LXC_AUTO_CGROUP_FULL_MIXED when cgroup… · 6768700d
  Christian Brauner authored Feb 15, 2021
```
cgroups: strip LXC_AUTO_CGROUP_MIXED and LXC_AUTO_CGROUP_FULL_MIXED when cgroup namespaces are supported and used
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  6768700d
- cgroups: fix flag checking in legacy mount paths · 80262447
  Christian Brauner authored Feb 15, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  80262447
- cgroups: s/cg_mount_cgroup_full()/cgroupfs_bind_mount()/g · 14111650
  Christian Brauner authored Feb 15, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  14111650
- cgroups: s/cg_mount_in_cgroup_namespace()/cgroupfs_mount()/g · 074af890
  Christian Brauner authored Feb 15, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  074af890
- conf: remove wrong comment · 6cc501f3
  Christian Brauner authored Feb 15, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  6cc501f3
- cgroups: switch to flag-based checking · c581c8a3
  Christian Brauner authored Feb 15, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  c581c8a3
- cgroups: don't strip LXC_AUTO_CGROUP_FORCE · 68599aab
  Christian Brauner authored Feb 15, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  68599aab
- cgroups: make clear that a flag argument is passed to cgroup mount functions · cdd3b77d
  Christian Brauner authored Feb 15, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  cdd3b77d
- utils: add development helper to quickly dump a directories contents · 8cdbef77
  Christian Brauner authored Feb 15, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  8cdbef77
- cgroups: improve cgroup mounting · e7e45fdf
  Christian Brauner authored Feb 15, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  e7e45fdf
- cgroups: verify that we are actually running in cgroup namespace · 937a3af9
  Christian Brauner authored Feb 15, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  937a3af9
- cgroups: pass handler to cgroup mount() method · ab8cd5d9
  Christian Brauner authored Feb 15, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  ab8cd5d9
- conf: don't pass conf separately to lxc_mount_auto_mounts() · 6d25a524
  Christian Brauner authored Feb 15, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  6d25a524
- cgroups: move cgns_supported() to cgroup utilities · c988c8b1
  Christian Brauner authored Feb 15, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  c988c8b1
14 Feb, 2021 10 commits
- Merge pull request #3672 from brauner/2021-02-14/fixes · 4b946797
  Stéphane Graber authored Feb 14, 2021
```
start: small fixes
```
  4b946797
- start: fix comment about time namespace preservation · 245066af
  Christian Brauner authored Feb 14, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  245066af
- start: improve comment in lxc_spawn() · 3a89b0ab
  Christian Brauner authored Feb 14, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  3a89b0ab
- start: improve comments · 9beaca55
  Christian Brauner authored Feb 14, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  9beaca55
- start: improve namespace preservation · 857ba1f0
  Christian Brauner authored Feb 14, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  857ba1f0
- start: fix error handling and improve comment · cb3b010c
  Christian Brauner authored Feb 14, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  cb3b010c
- Merge pull request #3671 from brauner/2021-02-14/namespace_hooks · 5fd09683
  Stéphane Graber authored Feb 14, 2021
```
hooks: rework exposing namespace information
```
  5fd09683
- network: expose namespace fd paths to network hooks · 37631ddb
  Christian Brauner authored Feb 14, 2021
```
Closes: #3667
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  37631ddb
- start: rework namespace preservation and path creation for hooks · 8db6be1b
  Christian Brauner authored Feb 14, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  8db6be1b
- Merge pull request #3670 from brauner/2021-02-13/fixes · 3bcf3ba0
  Stéphane Graber authored Feb 13, 2021
```
tree-wide: convert to strequal() and strnequal()
```
  3bcf3ba0
13 Feb, 2021 7 commits
- utils: convert to strequal() · a58b0754
  Christian Brauner authored Feb 13, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  a58b0754
- seccomp: convert to strequal() · becc8d20
  Christian Brauner authored Feb 13, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  becc8d20
- lxccontainer: convert to strequal() · 948fcf60
  Christian Brauner authored Feb 13, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  948fcf60
- lsm: convert to strequal() · 12b90260
  Christian Brauner authored Feb 13, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  12b90260
- freezer: convert to strequal() · 90d5fea5
  Christian Brauner authored Feb 13, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  90d5fea5
- file_utils: convert to strequal() · b3fde944
  Christian Brauner authored Feb 13, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  b3fde944
- confile_utils: convert to strequal() · 1c95f94c
  Christian Brauner authored Feb 13, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  1c95f94c