- 27 Jan, 2021 11 commits
-
-
Christian Brauner authored
Cc: stable-4.0 Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Cc: stable-4.0 Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Cc: stable-4.0 Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Cc: stable-4.0 Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
but still yield memory immediately once we're done with it to not have it lying around while the parent process is around. Cc: stable-4.0 Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
This makes it more consistent with th rest of the shared library. Cc: stable-4.0 Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Fixes: 493e00b6 ("mkdir -p /proc /sys on container startup") Cc: stable-4.0 Signed-off-by:
Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
mkdir -p /proc /sys on container startup
-
Motiejus Jakštys authored
some containers don't have it, and strange things happen. Signed-off-by:Motiejus Jakštys <motiejus@jakstys.lt>
-
- 26 Jan, 2021 7 commits
-
-
Stéphane Graber authored
cgroups: fixes and cgroup2 improvements
-
Christian Brauner authored
Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Cc: stable-4.0 Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Cc: stable-4.0 Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Cc: stable-4.0 Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Stolen without shame from my previous implementation in LXCFS. Cc: stable-4.0 Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Cc: stable-4.0 Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
- 25 Jan, 2021 5 commits
-
-
Stéphane Graber authored
autotools: update build
-
Christian Brauner authored
Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Stéphane Graber authored
tree-wide: fix compilation with-Wstrict-prototypes -Wold-style-defini…
-
- 24 Jan, 2021 1 commit
-
-
Christian Brauner authored
Fixes: #3630 Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
- 22 Jan, 2021 12 commits
-
-
Stéphane Graber authored
build: allow to build all binaries statically via --enable-static-binaries
-
Christian Brauner authored
Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Including openssl handling. Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Cc: stable-4.0 Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Cc: stable-4.0 Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Fix compilation without seccomp when libseccomp is installed
-
Stéphane Graber authored
conf: fix containers retaining CAP_NET_ADMIN
-
Christian Brauner authored
Cc: stable-4.0 Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Cc: stable-4.0 Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Cc: stable-4.0 Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Fixes: #3627 Cc: stable-4.0 Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
- 16 Jan, 2021 2 commits
-
-
Eneas U de Queiroz authored
Move the block checking for libseccomp api compatibility inside AM_COND_IF([ENABLE_SECCOMP] ... ). Signed-off-by:Eneas U de Queiroz <cotequeiroz@gmail.com>
-
Eneas U de Queiroz authored
Use HAVE_SECCOMP_NOTIFY instead of HAVE_DECL_SECCOMP_NOTIFY_FD. Currently the latter will be true if the declaration is found by configure, even if 'configure --disable-seccomp' is used. HAVE_SECCOMP_NOTIFY is defined in lxcseccomp.h if both HAVE_SECCOMP and HAVE_DECL_SECCOMP_NOTIFY_FD are true, which is the correct behavior. Signed-off-by:Eneas U de Queiroz <cotequeiroz@gmail.com>
-
- 11 Jan, 2021 2 commits
-
-
Stéphane Graber authored
make lxc-net's dnsmasq hermetic
-
Motiejus Jakštys authored
lxc's dnsmasq will try to read system's dnsmasq if `--conf-file` is not specified. This is likely not desirable, as lxc's dnsmasq should be self-contained. On my system the conflicting options are `--bind-interfaces` and `--bind-dynamic`, since the same host is doing other DNS-y things unrelated to lxc. This is an incompatible change, since lxc's dnsmasq will stop honoring system's `/etc/dnsmasq.conf`, and some systems may be relying on it. Given that, I believe it should not depend on it by default, since dnsmasq is lxc's implementation detail. However, if the user desires, the old behavior could be brought back by setting `LXC_DHCP_CONFILE=/etc/dnsmasq.conf` in `/etc/default/lxc-net`. Signed-off-by:Motiejus Jakštys <motiejus@jakstys.lt>
-