Commits · 35a9c96cb85be41b555a2408ffd58784b4fdf082 · Chen Yisong / lxc · GitLab

29 Apr, 2021 6 commits
- conf: improve idmapped mounts support · 35a9c96c
  Christian Brauner authored Apr 25, 2021
```
Setting up a detached idmapped mount is a privileged operation, mounting
it doesn't have to be.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  35a9c96c
- conf: s/lxc_rootfs_prepare/lxc_rootfs_init/g · 5f5df0dc
  Christian Brauner authored Apr 25, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  5f5df0dc
- conf: move all mount options into struct lxc_mount_options · 16fca125
  Christian Brauner authored Apr 25, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  16fca125
- conf: stash lxc_storage into lxc_rootfs and bind to its lifetime · 3b59ddb6
  Christian Brauner authored Apr 25, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  3b59ddb6
- configure: fix function detection · c910e00d
  Christian Brauner authored Apr 24, 2021
```
Fixes: #3809
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  c910e00d
- dir: fix rootfs mounting · 930aded5
  Christian Brauner authored Apr 23, 2021
```
We need to be able to lookup symlinks and allow xdev.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  930aded5
23 Apr, 2021 22 commits
- conf: don't overrun dest buffer in parse_lxc_mntopts() · c1831266
  Christian Brauner authored Apr 22, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  c1831266
- conf: better naming · fe45f5d8
  Christian Brauner authored Apr 22, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  fe45f5d8
- getsubopt: use correct include · 0876c9c3
  Christian Brauner authored Apr 22, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  0876c9c3
- Makefile: fix strchrnul() inclusion · 615d8f8c
  Christian Brauner authored Apr 22, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  615d8f8c
- conf: include strchrnul for platforms that don't support it · 53ba2762
  Christian Brauner authored Apr 22, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  53ba2762
- strchrnul: include header · 310f5976
  Christian Brauner authored Apr 22, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  310f5976
- conf: don't allow idmapped lxc.mount.{entry,fstab} just yet · 9bdae39f
  Christian Brauner authored Mar 20, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  9bdae39f
- conf: tweak parse_lxc_mntopts() · 0125a899
  Christian Brauner authored Mar 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  0125a899
- apparmor: handle on-exec · 4f0e0186
  Christian Brauner authored Mar 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  4f0e0186
- attach: use correct lxc_namespace_t type · a45cba87
  Christian Brauner authored Mar 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  a45cba87
- attach: visually separate pids from fds during initalization · d07d0091
  Christian Brauner authored Mar 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  d07d0091
- conf: verify that the rootfs can support idmapped mounts · 7597491b
  Christian Brauner authored Mar 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  7597491b
- start: documented idmapped mounts · 88dff0a5
  Christian Brauner authored Mar 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  88dff0a5
- mount_utils: add two detached mount helpers · fb9f0d84
  Christian Brauner authored Mar 17, 2021
```
They'll come in handy in the future.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  fb9f0d84
- conf: support idmapping directories · 45e08d76
  Christian Brauner authored Mar 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  45e08d76
- mount_utils: add helper to determine whether new mount api supports bind mounts · f3dde9c3
  Christian Brauner authored Mar 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  f3dde9c3
- storage: keep a reference to lxc_rootfs in lxc_storage · 39c2e2e3
  Christian Brauner authored Mar 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  39c2e2e3
- mount_utils: add support for mount_setattr() syscall · 1633166b
  Christian Brauner authored Mar 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  1633166b
- confile: parse idmap=<path> mount option for rootfs · 4c51f614
  Christian Brauner authored Mar 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  4c51f614
- conf: add first, trivial support for idmapped mounts · 70e105ee
  Christian Brauner authored Mar 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  70e105ee
- conf: rework lxc specific mount option parsing · a2d701da
  Christian Brauner authored Mar 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  a2d701da
- seccomp: init and destroy notifier.cookie · 8b83dcdf
  Evgeny Vereshchagin authored Apr 15, 2021
```
It's a follow-up to 84cf6d25

Closes https://github.com/lxc/lxc/issues/3806Signed-off-by: Evgeny Vereshchagin <evvers@ya.ru>
```
  8b83dcdf
21 Apr, 2021 12 commits
- autoconf: stop passing -fsanitize=address via AM_LDFLAGS · 5855f270
  Evgeny Vereshchagin authored Apr 13, 2021
```
The snippet is redundant because the build system automatically
passes the sanitizers flags set in AM_CFLAGS to the linker
Signed-off-by: Evgeny Vereshchagin <evvers@ya.ru>
```
  5855f270
- ci: get rid of the -static-libasan stopgap · 6b2e9a0f
  Evgeny Vereshchagin authored Apr 13, 2021
```
Signed-off-by: Evgeny Vereshchagin <evvers@ya.ru>
```
  6b2e9a0f
- build-system: stop building init.lxc.static with sanitizers · bbed65ec
  Evgeny Vereshchagin authored Apr 13, 2021
```
`-static` isn't compatible with `-fsanitize=`:
```
  gcc: error: cannot specify -static with -fsanitize=address
```
Signed-off-by: Evgeny Vereshchagin <evvers@ya.ru>
```
  bbed65ec
- autoconf: add AC_LANG_SOURCE to CC_CHECK_LDFLAGS · e83874ca
  Evgeny Vereshchagin authored Apr 13, 2021
```
Inspired by https://lore.kernel.org/alsa-devel/18135209-abc9-ca1c-84e0-8ac3e75caaf1@perex.cz/t/Signed-off-by: Evgeny Vereshchagin <evvers@ya.ru>
```
  e83874ca
- ci: make use of --enable-sanitizers instead of CFLAGS · 4a0a0617
  Evgeny Vereshchagin authored Apr 13, 2021
```
Signed-off-by: Evgeny Vereshchagin <evvers@ya.ru>
```
  4a0a0617
- tests: free the buffer filled by lxc_cmd_rsp_recv · d5c1b3ab
  Evgeny Vereshchagin authored Apr 13, 2021
```
Fixes https://github.com/lxc/lxc/issues/3796Signed-off-by: Evgeny Vereshchagin <evvers@ya.ru>
```
  d5c1b3ab
- Revert "ci: get around https://github.com/lxc/lxc/issues/3796" · c3d3cebd
  Evgeny Vereshchagin authored Apr 13, 2021
```
This reverts commit 44818e89.
Signed-off-by: Evgeny Vereshchagin <evvers@ya.ru>
```
  c3d3cebd
- ci: build with -Wall -Werror · e19c8007
  Evgeny Vereshchagin authored Apr 12, 2021
```
Signed-off-by: Evgeny Vereshchagin <evvers@ya.ru>
```
  e19c8007
- ci: turn on strict_string_checks · c20326dc
  Evgeny Vereshchagin authored Apr 12, 2021
```
Signed-off-by: Evgeny Vereshchagin <evvers@ya.ru>
```
  c20326dc
- ci: get around https://github.com/lxc/lxc/issues/3796 · 6856fc54
  Evgeny Vereshchagin authored Apr 12, 2021
```
Signed-off-by: Evgeny Vereshchagin <evvers@ya.ru>
```
  6856fc54
- ci: prevent lxc-exercise from running indefinitely · d2139d6b
  Evgeny Vereshchagin authored Apr 12, 2021
```
and show all the commands it runs to make it easier to
debug potential issues.
Signed-off-by: Evgeny Vereshchagin <evvers@ya.ru>
```
  d2139d6b
- ci: get around https://github.com/lxc/lxc/issues/3788 · 660b74d5
  Evgeny Vereshchagin authored Apr 12, 2021
```
Signed-off-by: Evgeny Vereshchagin <evvers@ya.ru>
```
  660b74d5