Commits · 756cadb6ab07a6043960bf0db6c39742fb10f118 · Chen Yisong / lxc

11 May, 2020 2 commits

confile: fix order independence of network keys · 756cadb6

authored May 11, 2020

We need to make sure we don't overwrite values when they have already been set.

Closes: #3405.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

756cadb6

tools/lxc-ls: shut up lgtm more · 598b35b4
Christian Brauner authored May 11, 2020
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
598b35b4

07 May, 2020 4 commits
- Merge pull request #3403 from brauner/2020-05-07/fixes · 57140e5a
  Stéphane Graber authored May 07, 2020
```
fixes
```
  57140e5a
- tools/lxc-ls: shutup lgtm · a201349b
  Christian Brauner authored May 07, 2020
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  a201349b
- yum: remove unused module · c89e6d58
  Christian Brauner authored May 07, 2020
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  c89e6d58
- tree-wide: this is all rather TODO than FIXME · 50e3e83d
  Christian Brauner authored May 07, 2020
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  50e3e83d
05 May, 2020 3 commits
- Merge pull request #3399 from brauner/2020-05-09/compiler_hardening · 424886b1
  Stéphane Graber authored May 05, 2020
```
compiler: more hardening
```
  424886b1
- compiler: support new access attributes · 674c9692
  Christian Brauner authored May 05, 2020
```
which will allow us to catch more oob accesses.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  674c9692
- gcc: add -Warray-bounds, -Wrestrict, -Wreturn-local-addr, -Wstringop-overflow · 6acf25e3
  Christian Brauner authored May 05, 2020
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  6acf25e3
04 May, 2020 5 commits
- Merge pull request #3398 from brauner/2020-05-04/fixes · a4327f2a
  Stéphane Graber authored May 04, 2020
```
terminal: remove unneeded if condition
```
  a4327f2a
- terminal: remove unneeded if condition · af25cae4
  Christian Brauner authored May 04, 2020
```
Fixes: Coverity 1461742.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  af25cae4
- Merge pull request #3397 from brauner/2020-05-03/fixes · 466b8e7f
  Stéphane Graber authored May 04, 2020
```
conf: introduce userns_exec_mapped_root()
```
  466b8e7f
- conf: support console setup on containers without rootfs · cf68ffd9
  Christian Brauner authored May 04, 2020
```
This depends on the new mount api.

Closes #3164.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  cf68ffd9
- conf: introduce userns_exec_mapped_root() · 234998b4
  Christian Brauner authored May 04, 2020
```
to avoid the overhead of calling to lxc-usernsexec whenever we can.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  234998b4
03 May, 2020 4 commits

Merge pull request #3396 from brauner/2020-05-03/fixes · 33b8e598
Stéphane Graber authored May 03, 2020
```
cgroup: fixes
```
33b8e598

cgroups: premount cgroups on cgroup2-only systems · 4547e73e

authored May 03, 2020

Fixes: #3183
Cc: Thomas Moschny <thomas.moschny@gmx.de>
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

4547e73e

common.conf: add cgroup2 default device limits · 8dd7f905

authored May 03, 2020

Fixes: #3183
Cc: Thomas Moschny <thomas.moschny@gmx.de>
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

8dd7f905

cgroups: ignore cgroup2 limits on non-cgroup2 layouts · 0e7a013e

authored May 03, 2020

Mixing cgroup2 and legacy cgroup systems such that some controllers are enabled
in legacy cgroup hierarchies and other controllers in the unified hierarchies
is simply not something we're supporting. Even systemd's hybrid layout (crazy)
doesn't bind controllers to the unified cgroup hierarchy.

Fixes: #3183
Cc: Thomas Moschny <thomas.moschny@gmx.de>
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

0e7a013e

22 Apr, 2020 2 commits
- Merge pull request #3392 from tomponline/tp-ipvlan-netlink · 95d4c1c4
  Christian Brauner authored Apr 22, 2020
```
src/lxc/network: Fixes netlink attribute type 1 has an invalid length message
```
  95d4c1c4
- src/lxc/network: Fixes netlink attribute type 1 has an invalid length message · 3a934e2e
  Thomas Parrott authored Apr 22, 2020
```
Fixes #3386
Signed-off-by: Thomas Parrott <thomas.parrott@canonical.com>
```
  3a934e2e
21 Apr, 2020 2 commits
- Merge pull request #3391 from stgraber/master · 1bfaf96f
  Christian Brauner authored Apr 21, 2020
```
apparmor: Allow boot_id
```
  1bfaf96f
- apparmor: Allow boot_id · 86384507
  Stéphane Graber authored Apr 21, 2020
```
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
```
  86384507
16 Apr, 2020 1 commit
- configure: fix coverity builds · 538337ee
  Christian Brauner authored Apr 16, 2020
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  538337ee
15 Apr, 2020 17 commits
- Merge pull request #3385 from brauner/2020-04-15/fixes · 4fa41f35
  Stéphane Graber authored Apr 15, 2020
```
cgroups: fix cgroup limit braino
```
  4fa41f35
- cgroups: fix cgroup limit braino · 92afbe74
  Christian Brauner authored Apr 15, 2020
```
Fixes: https://discuss.linuxcontainers.org/t/memory-limits-no-longer-being-applied/7429/7Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  92afbe74
- Merge pull request #3384 from brauner/master · 2c46eaed
  Stéphane Graber authored Apr 15, 2020
```
travis: coverity gets confused about the %m printf extension in glibc
```
  2c46eaed
- travis: coverity gets confused about the %m printf extension in glibc · 64a2547c
  Christian Brauner authored Apr 15, 2020
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  64a2547c
- Merge pull request #3383 from brauner/2020-04-15/fixes · b3e27ad4
  Stéphane Graber authored Apr 15, 2020
```
log: set GNU_SOURCE as it might help coverity along
```
  b3e27ad4
- log: set GNU_SOURCE as it might help coverity along · b10cb59b
  Christian Brauner authored Apr 15, 2020
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  b10cb59b
- Merge pull request #3382 from brauner/2020-04-15/fixes · 2c6e8985
  Stéphane Graber authored Apr 15, 2020
```
conf: correctly cleanup memory in get_minimal_idmap()
```
  2c6e8985
- conf: correctly cleanup memory in get_minimal_idmap() · 47649d5b
  Christian Brauner authored Apr 15, 2020
```
Fixes: Coverity 1461760.
Fixes: Coverity 1461762.
Fixes: Coverity 1461763.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  47649d5b
- Merge pull request #3381 from brauner/2020-04-15/fixes · 55785a2c
  Stéphane Graber authored Apr 15, 2020
```
fixes
```
  55785a2c
- rexec: free argv array on failure · 0212dc6f
  Christian Brauner authored Apr 15, 2020
```
Fixes: Coverity 1461736.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  0212dc6f
- attach: move check for valid config earlier · a9909116
  Christian Brauner authored Apr 15, 2020
```
Fixes: Coverity 1461735.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  a9909116
- log: restore non-local value · ad9ea939
  Christian Brauner authored Apr 15, 2020
```
Fixes: Coverity 1461734.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  ad9ea939
- network: log warning on network deconfiguration failures · 40a22043
  Christian Brauner authored Apr 15, 2020
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  40a22043
- commands: add additional check to lxc_cmd_sock_get_state() · 7792a5b6
  Christian Brauner authored Apr 15, 2020
```
to please Coverity.

Fixes: Coverity 1461732.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  7792a5b6
- zfs: fix resource leak · c148bb7d
  Christian Brauner authored Apr 15, 2020
```
Fixes: Coverity 1461730.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  c148bb7d
- criu: make explicit that we're ignoring rmdir() return value · f075e955
  Christian Brauner authored Apr 15, 2020
```
Fixes: Coverity 1461726.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  f075e955
- conf: don't double free in get_minimal_idmap() · 2c996219
  Christian Brauner authored Apr 15, 2020
```
Fixes: Coverity 1461725.
Fixes: Coverity 1461727.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  2c996219