Signed-off-by: tomponline <thomas.parrott@canonical.com>

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

This backports various helpers associated with seccomp notify to make
maintenance easier.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

This backports seccomp notify into various parts of the codebase as a pure nop
to make maintenance easier.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

Another case of calling 'zfs get' which requires reordering arguments to work with latest zfs.
Signed-off-by: Paul Gauret <pgauret@yahoo.com>

We don't in fact exit(1) if this is not specified, and it wouldn't make
sense to, since most people probably don't specify this.
Signed-off-by: Tycho Andersen <tycho@tycho.ws>

s/NETLINK_DUMP_STRICT_CHK/NETLINK_GET_STRICT_CHK/g
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

These configuration options use the same syntax and therefore it seems
more intuitive to have the same behavior for both of them, which is
not the case today since mount hooks and autodev mounts are called
between the two.

See: https://github.com/lxc/lxc/issues/2932Signed-off-by: Felix Abecassis <fabecassis@nvidia.com>

Change zfs arguments. This also works with older zfs versions, tested with
zfs 0.7.9-3 on Ubuntu 18.10.

Closes #2916.
Signed-off-by: Paul Gauret <pgauret@yahoo.com>
[christian.brauner@ubuntu.com: adapt commit message and add Signed-off-by for Paul]
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

We can simply fix this issue by switching to our cleanup macros instead of
manually freeing the memory.

Closes #2912.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

Signed-off-by: yosukesan <y.otsuki30@gmail.com>

Update for commit db74bbd0Signed-off-by: KATOH Yasufumi <karma@jazz.email.ne.jp>

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
Cc: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>

Closes #1823.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
Cc: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
Cc: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>

Signed-off-by: Felix Abecassis <fabecassis@nvidia.com>

Closes #2849.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

Signed-off-by: tomponline <tomp@tomp.uk>

Signed-off-by: tomponline <tomp@tomp.uk>

Signed-off-by: tomponline <tomp@tomp.uk>

Previously, environment variables with a space where splitted.
Signed-off-by: Felix Abecassis <fabecassis@nvidia.com>

Account for different trap number on 32bit SPARC.

Link: https://bugs.gentoo.org/656368Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

cgfsng: backport new cgroup handling logic

BugLink: https://bugs.launchpad.net/bugs/1825155

This will allow us to better support cgroup2 layouts on stable-3.0.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

The child_path variable is initialized very late in the function so jumping to
the on_error label would cause a nullderef. With the cleanup macros we can
simplify this function to simply do direct returns and avoid that whole issue.

Closes #2935.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

This adds --{disable,enable}-asan. It is disabled by default.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

Fixes: #2902
Signed-off-by: Felix Abecassis <fabecassis@nvidia.com>

Signed-off-by: Felix Abecassis <fabecassis@nvidia.com>

This hardens multi-threaded C. Without it, the implementation of thread
cancellation handlers (introduced by pthread_cleanup_push) uses a completely
unprotected function pointer on the stack. This function pointer can simplify
the exploitation of stack-based buffer overflows even if the thread in question
is never canceled.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

Avoid temporary files, speeding up builds.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

Increased reliability of backtraces.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

Apparently the name received from the tree walk is not guaranteed to have \0
byte at the end. So let's make sure we append one.
Note that this is only an issue if there are any subvolumes in the container's
rootfs.

Closes 2826.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

Callers such as LXD run post-stop hooks to perform cleanup operations on
shutdown. This can involve umount and other things. To avoid surprises with
lingering namespace references we should close all our namespace-preserving
file descriptors. We don't need them at this point anymore anyway.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

Signed-off-by: Michael Sparmann <theseven@gmx.net>

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

This reverts commit 912c4bb4.

I accidently merged this commit. The initialization is wrong.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

Signed-off-by: tomponline <tomp@tomp.uk>

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>