use fd 9 instead of 200

to catch up mksh changes from 17abf278Signed-off-by: Elan Ruusamäe <glen@delfi.ee>

seccomp: non functional changes

- log more errnos
- adapt coding style
Signed-off-by: Christian Brauner <cbrauner@suse.de>

confile: add more archs to lxc_config_parse_arch()

seccomp: add support for s390x

Signed-off-by: Christian Brauner <cbrauner@suse.de>

Signed-off-by: Christian Brauner <cbrauner@suse.de>

Signed-off-by: Christian Brauner <cbrauner@suse.de>

Add MIPS support

Signed-off-by: James Cowgill <james410@cowgill.org.uk>

Fixes "unsupported personality" warnings when starting containers.
Signed-off-by: James Cowgill <james410@cowgill.org.uk>

Signed-off-by: James Cowgill <james410@cowgill.org.uk>

MIPS processors implement 3 ABIs: o32, n64 and n32 (similar to x32). The kernel
treats each ABI separately so syscalls disallowed on "all" arches should be
added to all three seccomp sets. This is implemented by expanding compat_arch
and compat_ctx to accept two compat architectures.

After this, the MIPS hostarch detection code and config section code is added.
Signed-off-by: James Cowgill <james410@cowgill.org.uk>

Signed-off-by: James Cowgill <james410@cowgill.org.uk>

Update korean manuals

Update for commit 71d74a83Signed-off-by: Sungbae Yoo <sungbae.yoo@samsung.com>

Update for commit 71d74a83Signed-off-by: Sungbae Yoo <sungbae.yoo@samsung.com>

 * Update for commit 03b03982
 * Fix mistranslation words
Signed-off-by: Sungbae Yoo <sungbae.yoo@samsung.com>

Use full GPG fingerprint instead of long IDs.

With how easy it is to create a collision on a short ID nowadays and
given that the user doesn't actually have to remember or manually enter
the key ID, lets just use the full fingerprint from now on.
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

Rcfile as common arg

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

It doesn't have any effect on what lxc-top does and is only
accepted on account of being part of the common option list.
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

In order to cause c->is_defined() to become true.
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

In almost all commands it's a useful addition to the -n
switch which is a common option, too.
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

bdev: use correct overlay module name

- Assume that the module name is "overlay" per default and not "overlayfs".
- Assume that the overlay version we are using requires a workdir.
- When we mount an overlay filesystem and we fail with ENODEV retry once with
  the module name we haven't already used.
Signed-off-by: Christian Brauner <cbrauner@suse.de>

Update gitignore

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

autotools: fix tests

Signed-off-by: Christian Brauner <cbrauner@suse.de>

[RFC] add minimal unit testing for liblxc functions

Signed-off-by: Christian Brauner <cbrauner@suse.de>

Signed-off-by: Christian Brauner <cbrauner@suse.de>

tools: use fclose() after fdopen() + add newline

So far we accidently used close() on the original file descriptor. (After
fdopen() the original fd is considered private and should not be used anymore.
The close operations should be performed on the new file handle. We did the
correct thing on error but not on success.) Using close() on the original fd
caused "Text file busy" errors and prevented the cloned tmpfs container from
starting.
Signed-off-by: Christian Brauner <cbrauner@suse.de>