Commits · 2dbb699e6b6c087b8b2833314d5701622dfe05de · Chen Yisong / lxc

10 Sep, 2017 1 commit
- console: non-functional change · 2dbb699e
  Christian Brauner authored Aug 30, 2017
```
Remove executable bit.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  2dbb699e
29 Aug, 2017 3 commits

templates/ubuntu: conditionally move upstart ssh job, as it is now optional. · 0c69a60f
Dimitri John Ledkov authored Aug 29, 2017
```
Mimic the code from the debian template.
Signed-off-by: Dimitri John Ledkov <xnox@ubuntu.com>
```
0c69a60f
rtnl: non-functional changes · 9de45f8f
Christian Brauner authored Aug 25, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
9de45f8f

Use deb.debian.org as the default Debian mirror · f23b538c

authored Aug 24, 2017

The httpredir.debian.org service has been discontinued in favour of
deb.debian.org and httpredir.debian.org now redirects to deb.debian.org.

https://lists.debian.org/debian-mirrors/2017/02/msg00000.html
https://wiki.debian.org/DebianGeoMirror#httpredir.debian.org_.2F_http.debian.net

Cf. https://bugs.debian.org/872719Signed-off-by: Salvatore Bonaccorso <carnil@debian.org>

f23b538c

22 Aug, 2017 1 commit

tools: use "which" · 3a7fb53a

authored Aug 21, 2017

Somehow "type" doesn't really work.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

3a7fb53a

17 Aug, 2017 8 commits
- Fix mem leak with realpath · 12d06fa3
  Shukui Yang authored Aug 11, 2017
```
Signed-off-by: Shukui Yang <yangshukui@huawei.com>
```
  12d06fa3
- debian: Add buster as a valid release · c549cb11
  Stéphane Graber authored Aug 07, 2017
```
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
```
  c549cb11
- travis: fix builds · 962d0e55
  Christian Brauner authored Aug 02, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  962d0e55
- templates/opensuse: getty.target.wants does not always exists · 22bfcb2a
  Thomas Lamprecht authored Aug 01, 2017
```
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
```
  22bfcb2a
- lxccontainer: use snprintf() · b1e22e81
  Christian Brauner authored Jul 15, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  b1e22e81
- Use "rsync -SHaAX" to copy the cached rootfs into place · 929d2675
  Harald Dunkel authored Jul 28, 2017
```
(updated by Serge to also handle hte new lxc-fedora{-legacy{.in
templates)
Signed-off-by: Harald Dunkel <harri@afaics.de>
Signed-off-by: Serge Hallyn <serge@hallyn.com>
Acked-by: Serge Hallyn <serge@hallyn.com>
```
  929d2675
- commonds: fix typo · f0621266
  Long Wang authored Jul 09, 2017
```
Signed-off-by: Long Wang <w@laoqinren.net>
```
  f0621266
- commands: add missing translation · d1090af0
  Christian Brauner authored Jul 03, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  d1090af0
15 Aug, 2017 27 commits

utils: close parent end in child process after fork · dcc6437d
Long Wang authored Jul 08, 2017
```
Signed-off-by: Long Wang <w@laoqinren.net>
```
dcc6437d
state: remove lxc_rmstate declaration · 4de8c04f
Long Wang authored Jul 08, 2017
```
Signed-off-by: Long Wang <w@laoqinren.net>
```
4de8c04f

af_unix: remove unlink operation · a22f697e

authored Jul 08, 2017

It is not necessary to unlink the abstract socket pathname when
we have finished using the socket. The abstract name is automatically
removed when the socket is closed.
Signed-off-by: Long Wang <w@laoqinren.net>

a22f697e

Allow containers to start in AppArmor namespaces · e0b469aa

authored Jul 07, 2017

This patch allows users to start containers in AppArmor namespaces.
Users can define their own profiles for their containers, but
lxc-start must be allowed to change to a namespace.

A container configuration file can wrap a container in an AppArmor
profile using lxc.aa_profile.

A process in an AppArmor namespace is restricted to view
or manage only the profiles belonging to this namespace, as if no
other profiles existed. A namespace can be created as follow:
sudo mkdir /sys/kernel/security/apparmor/policy/namespaces/$NAMESPACE

AppArmor can stack profiles so that the contained process is bound
by the intersection of all profiles of the stack. This is achieved
using the '//&' operator as follow:

lxc.aa_profile = $PROFILE//&:$NAMESPACE://unconfined

In this case, even the guest process appears unconfined in the
namespace, it is still confined by $PROFILE.

A guest allowed to access "/sys/kernel/security/apparmor/** rwklix,"
will be able to manage its own profile set, while still being
enclosed in the topmost profile $PROFILE:

Different guests can be assigned the same namespace or different
namespaces. In the first case, they will share their profiles.
In the second case, they will have distinct sets of profiles.

This is validated on privileged containers.
Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.com>

e0b469aa

tests: remove temp lxcpath for attach testcase · 7c41be9b
Long Wang authored Jul 05, 2017
```
Signed-off-by: Long Wang <w@laoqinren.net>
```
7c41be9b
lxc-init: add comment for exclude 32 and 33 signals · 088505df
Long Wang authored Jul 05, 2017
```
Signed-off-by: Long Wang <w@laoqinren.net>
```
088505df
README: update · f374f2e2
Christian Brauner authored Jul 04, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
f374f2e2
README: add CII Best Practices badge to README · b3b6f401
Christian Brauner authored Jul 03, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
b3b6f401

lxclock: non-functional changes · bc657918

authored Jul 03, 2017

This patch mainly updates comments based on the current code.
Signed-off-by: Long Wang <w@laoqinren.net>

bc657918

lxclock: return the right error when open lock file failed · 730481c0
Long Wang authored Jul 03, 2017
```
Signed-off-by: Long Wang <w@laoqinren.net>
```
730481c0

fix some cppcheck warnings · 42ba0192

authored Jul 02, 2017

use cppcheck tools `cppcheck --enable=warning  .` on lxc source directory.

This patch fix the following warnning

```
[src/lxc/cgroups/cgfs.c:794]: (warning) %ld in format string (no. 3) requires 'long' but the argument type is 'unsigned long'.
[src/lxc/confile.c:4441]: (warning) %d in format string (no. 2) requires 'int' but the argument type is 'unsigned int'.
[src/lxc/confile.c:4502]: (warning) %d in format string (no. 2) requires 'int' but the argument type is 'unsigned int'.
[src/lxc/confile_legacy.c:921]: (warning) %d in format string (no. 2) requires 'int' but the argument type is 'unsigned int'.
[src/lxc/confile_legacy.c:938]: (warning) %d in format string (no. 2) requires 'int' but the argument type is 'unsigned int'.
[src/lxc/lxclock.c:63]: (warning) %zd in format string (no. 1) requires 'ssize_t' but the argument type is 'size_t {aka unsigned long}'.
[src/lxc/tools/lxc_info.c:118]: (warning) %u in format string (no. 1) requires 'unsigned int' but the argument type is 'signed int'.
[src/lxc/tools/lxc_info.c:118]: (warning) %u in format string (no. 2) requires 'unsigned int' but the argument type is 'signed int'.
[src/lxc/tools/lxc_info.c:123]: (warning) %u in format string (no. 1) requires 'unsigned int' but the argument type is 'signed int'.
[src/lxc/tools/lxc_info.c:127]: (warning) %u in format string (no. 1) requires 'unsigned int' but the argument type is 'signed int'.
[src/lxc/tools/lxc_info.c:130]: (warning) %u in format string (no. 1) requires 'unsigned int' but the argument type is 'signed int'.
[src/lxc/tools/lxc_top.c:212]: (warning) %u in format string (no. 1) requires 'unsigned int' but the argument type is 'signed int'.
[src/lxc/tools/lxc_top.c:212]: (warning) %u in format string (no. 2) requires 'unsigned int' but the argument type is 'signed int'.
[src/lxc/tools/lxc_top.c:217]: (warning) %u in format string (no. 1) requires 'unsigned int' but the argument type is 'signed int'.
[src/lxc/tools/lxc_top.c:221]: (warning) %u in format string (no. 1) requires 'unsigned int' but the argument type is 'signed int'.
[src/lxc/tools/lxc_top.c:224]: (warning) %u in format string (no. 1) requires 'unsigned int' but the argument type is 'signed int'.
```
Signed-off-by: Long Wang <w@laoqinren.net>

42ba0192

confile: free netdev->downscript · e6426fd3
0x0916 authored Jun 27, 2017
```
Signed-off-by: 0x0916 <w@laoqinren.net>
```
e6426fd3

remove the `__func__` macro · 854ef04b

authored Jun 26, 2017

Our logging function will always spew out the function name.
Signed-off-by: 0x0916 <w@laoqinren.net>

854ef04b

API doc: update note for get_config_item · 24ff59af

authored Jun 26, 2017

Fix issue: https://github.com/lxc/lxc/issues/505Signed-off-by: 0x0916 <w@laoqinren.net>

24ff59af

use altarch mirror for CentOS on arches other than i386 and x86_64 · 6810f3fa

authored Jun 24, 2017

CentOS only has i386 and x86_64 listed in mirrorlist.centos.org,
use http://mirror.centos.org/altarch/ for all other arches instead

See: https://bugs.centos.org/view.php?id=11250Signed-off-by: Evgeni Golov <evgeni@debian.org>

6810f3fa

templates/debian: add aarch64 → arm64 mapping · 6bdd5101

authored Jun 24, 2017

uname -m reports aarch64, but Debian calls the arch arm64
Signed-off-by: Evgeni Golov <evgeni@debian.org>

6bdd5101

Use strerror(errno) instead of %m · 74cd2949
0x0916 authored Jun 23, 2017
```
Signed-off-by: 0x0916 <w@laoqinren.net>
```
74cd2949
Merge pull request #1749 from brauner/2017-08-15/stable_1_0_cherry_picks · 5292b43b
Stéphane Graber authored Aug 15, 2017
```
bdev: enable building with gcc7
```
5292b43b

bdev: enable building with gcc7 · 9163a33b

authored Aug 16, 2017

We shouldn't ignore this anyway.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

9163a33b

adding warning for mtu ignoring · 1f561a9f
Shane Chen authored Jun 01, 2017
```
Signed-off-by: Shane Chen <ss1ha3tw@gmail.com>
```
1f561a9f
conf: improve write_id_mapping() · 6def4323
Christian Brauner authored May 27, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
6def4323
conf: non-functional changes · 8aeafb41
Christian Brauner authored May 29, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
8aeafb41
confile: config_utsname() · 66ebf6a1
Christian Brauner authored May 29, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
66ebf6a1
confile: config_stopsignal() · 76b83cb1
Christian Brauner authored May 29, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
76b83cb1
confile: config_haltsignal() · 8b4282e4
Christian Brauner authored May 29, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
8b4282e4
confile: config_haltsignal() · d86a9570
Christian Brauner authored May 29, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
d86a9570
confile: config_start() · 6a270659
Christian Brauner authored May 29, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
6a270659