Commits · 929d2675092bf978f9ca792113d41c1930cb3e70 · Chen Yisong / lxc

17 Aug, 2017 3 commits

Use "rsync -SHaAX" to copy the cached rootfs into place · 929d2675

authored Jul 28, 2017

(updated by Serge to also handle hte new lxc-fedora{-legacy{.in
templates)
Signed-off-by: Harald Dunkel <harri@afaics.de>
Signed-off-by: Serge Hallyn <serge@hallyn.com>
Acked-by: Serge Hallyn <serge@hallyn.com>

929d2675

commonds: fix typo · f0621266
Long Wang authored Jul 09, 2017
```
Signed-off-by: Long Wang <w@laoqinren.net>
```
f0621266
commands: add missing translation · d1090af0
Christian Brauner authored Jul 03, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
d1090af0

15 Aug, 2017 37 commits

utils: close parent end in child process after fork · dcc6437d
Long Wang authored Jul 08, 2017
```
Signed-off-by: Long Wang <w@laoqinren.net>
```
dcc6437d
state: remove lxc_rmstate declaration · 4de8c04f
Long Wang authored Jul 08, 2017
```
Signed-off-by: Long Wang <w@laoqinren.net>
```
4de8c04f

af_unix: remove unlink operation · a22f697e

authored Jul 08, 2017

It is not necessary to unlink the abstract socket pathname when
we have finished using the socket. The abstract name is automatically
removed when the socket is closed.
Signed-off-by: Long Wang <w@laoqinren.net>

a22f697e

Allow containers to start in AppArmor namespaces · e0b469aa

authored Jul 07, 2017

This patch allows users to start containers in AppArmor namespaces.
Users can define their own profiles for their containers, but
lxc-start must be allowed to change to a namespace.

A container configuration file can wrap a container in an AppArmor
profile using lxc.aa_profile.

A process in an AppArmor namespace is restricted to view
or manage only the profiles belonging to this namespace, as if no
other profiles existed. A namespace can be created as follow:
sudo mkdir /sys/kernel/security/apparmor/policy/namespaces/$NAMESPACE

AppArmor can stack profiles so that the contained process is bound
by the intersection of all profiles of the stack. This is achieved
using the '//&' operator as follow:

lxc.aa_profile = $PROFILE//&:$NAMESPACE://unconfined

In this case, even the guest process appears unconfined in the
namespace, it is still confined by $PROFILE.

A guest allowed to access "/sys/kernel/security/apparmor/** rwklix,"
will be able to manage its own profile set, while still being
enclosed in the topmost profile $PROFILE:

Different guests can be assigned the same namespace or different
namespaces. In the first case, they will share their profiles.
In the second case, they will have distinct sets of profiles.

This is validated on privileged containers.
Signed-off-by: Frédéric Dalleau <frederic.dalleau@collabora.com>

e0b469aa

tests: remove temp lxcpath for attach testcase · 7c41be9b
Long Wang authored Jul 05, 2017
```
Signed-off-by: Long Wang <w@laoqinren.net>
```
7c41be9b
lxc-init: add comment for exclude 32 and 33 signals · 088505df
Long Wang authored Jul 05, 2017
```
Signed-off-by: Long Wang <w@laoqinren.net>
```
088505df
README: update · f374f2e2
Christian Brauner authored Jul 04, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
f374f2e2
README: add CII Best Practices badge to README · b3b6f401
Christian Brauner authored Jul 03, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
b3b6f401

lxclock: non-functional changes · bc657918

authored Jul 03, 2017

This patch mainly updates comments based on the current code.
Signed-off-by: Long Wang <w@laoqinren.net>

bc657918

lxclock: return the right error when open lock file failed · 730481c0
Long Wang authored Jul 03, 2017
```
Signed-off-by: Long Wang <w@laoqinren.net>
```
730481c0

fix some cppcheck warnings · 42ba0192

authored Jul 02, 2017

use cppcheck tools `cppcheck --enable=warning  .` on lxc source directory.

This patch fix the following warnning

```
[src/lxc/cgroups/cgfs.c:794]: (warning) %ld in format string (no. 3) requires 'long' but the argument type is 'unsigned long'.
[src/lxc/confile.c:4441]: (warning) %d in format string (no. 2) requires 'int' but the argument type is 'unsigned int'.
[src/lxc/confile.c:4502]: (warning) %d in format string (no. 2) requires 'int' but the argument type is 'unsigned int'.
[src/lxc/confile_legacy.c:921]: (warning) %d in format string (no. 2) requires 'int' but the argument type is 'unsigned int'.
[src/lxc/confile_legacy.c:938]: (warning) %d in format string (no. 2) requires 'int' but the argument type is 'unsigned int'.
[src/lxc/lxclock.c:63]: (warning) %zd in format string (no. 1) requires 'ssize_t' but the argument type is 'size_t {aka unsigned long}'.
[src/lxc/tools/lxc_info.c:118]: (warning) %u in format string (no. 1) requires 'unsigned int' but the argument type is 'signed int'.
[src/lxc/tools/lxc_info.c:118]: (warning) %u in format string (no. 2) requires 'unsigned int' but the argument type is 'signed int'.
[src/lxc/tools/lxc_info.c:123]: (warning) %u in format string (no. 1) requires 'unsigned int' but the argument type is 'signed int'.
[src/lxc/tools/lxc_info.c:127]: (warning) %u in format string (no. 1) requires 'unsigned int' but the argument type is 'signed int'.
[src/lxc/tools/lxc_info.c:130]: (warning) %u in format string (no. 1) requires 'unsigned int' but the argument type is 'signed int'.
[src/lxc/tools/lxc_top.c:212]: (warning) %u in format string (no. 1) requires 'unsigned int' but the argument type is 'signed int'.
[src/lxc/tools/lxc_top.c:212]: (warning) %u in format string (no. 2) requires 'unsigned int' but the argument type is 'signed int'.
[src/lxc/tools/lxc_top.c:217]: (warning) %u in format string (no. 1) requires 'unsigned int' but the argument type is 'signed int'.
[src/lxc/tools/lxc_top.c:221]: (warning) %u in format string (no. 1) requires 'unsigned int' but the argument type is 'signed int'.
[src/lxc/tools/lxc_top.c:224]: (warning) %u in format string (no. 1) requires 'unsigned int' but the argument type is 'signed int'.
```
Signed-off-by: Long Wang <w@laoqinren.net>

42ba0192

confile: free netdev->downscript · e6426fd3
0x0916 authored Jun 27, 2017
```
Signed-off-by: 0x0916 <w@laoqinren.net>
```
e6426fd3

remove the `__func__` macro · 854ef04b

authored Jun 26, 2017

Our logging function will always spew out the function name.
Signed-off-by: 0x0916 <w@laoqinren.net>

854ef04b

API doc: update note for get_config_item · 24ff59af

authored Jun 26, 2017

Fix issue: https://github.com/lxc/lxc/issues/505Signed-off-by: 0x0916 <w@laoqinren.net>

24ff59af

use altarch mirror for CentOS on arches other than i386 and x86_64 · 6810f3fa

authored Jun 24, 2017

CentOS only has i386 and x86_64 listed in mirrorlist.centos.org,
use http://mirror.centos.org/altarch/ for all other arches instead

See: https://bugs.centos.org/view.php?id=11250Signed-off-by: Evgeni Golov <evgeni@debian.org>

6810f3fa

templates/debian: add aarch64 → arm64 mapping · 6bdd5101

authored Jun 24, 2017

uname -m reports aarch64, but Debian calls the arch arm64
Signed-off-by: Evgeni Golov <evgeni@debian.org>

6bdd5101

Use strerror(errno) instead of %m · 74cd2949
0x0916 authored Jun 23, 2017
```
Signed-off-by: 0x0916 <w@laoqinren.net>
```
74cd2949
Merge pull request #1749 from brauner/2017-08-15/stable_1_0_cherry_picks · 5292b43b
Stéphane Graber authored Aug 15, 2017
```
bdev: enable building with gcc7
```
5292b43b

bdev: enable building with gcc7 · 9163a33b

authored Aug 16, 2017

We shouldn't ignore this anyway.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

9163a33b

adding warning for mtu ignoring · 1f561a9f
Shane Chen authored Jun 01, 2017
```
Signed-off-by: Shane Chen <ss1ha3tw@gmail.com>
```
1f561a9f
conf: improve write_id_mapping() · 6def4323
Christian Brauner authored May 27, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
6def4323
conf: non-functional changes · 8aeafb41
Christian Brauner authored May 29, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
8aeafb41
confile: config_utsname() · 66ebf6a1
Christian Brauner authored May 29, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
66ebf6a1
confile: config_stopsignal() · 76b83cb1
Christian Brauner authored May 29, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
76b83cb1
confile: config_haltsignal() · 8b4282e4
Christian Brauner authored May 29, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
8b4282e4
confile: config_haltsignal() · d86a9570
Christian Brauner authored May 29, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
d86a9570
confile: config_start() · 6a270659
Christian Brauner authored May 29, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
6a270659
confile: config_cap_drop() · b1b1a02d
Christian Brauner authored May 29, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
b1b1a02d
confile: config_cap_keep() · d3bd7483
Christian Brauner authored May 29, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
d3bd7483
confile: config_mount() · 952847ca
Christian Brauner authored May 29, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
952847ca
confile: config_mount_auto() · 6c0c7aff
Christian Brauner authored May 29, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
6c0c7aff
confile: config_fstab() · b47f83c9
Christian Brauner authored May 29, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
b47f83c9
confile: config_idmap() · ec98a414
Christian Brauner authored May 29, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
ec98a414
confile: config_cgroup() · f74c7c8a
Christian Brauner authored May 29, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
f74c7c8a
confile: config_loglevel() · 596c06fe
Christian Brauner authored May 29, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
596c06fe
confile: config_group() · 700d6541
Christian Brauner authored May 29, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
700d6541
confile: config_hook() · 6297815a
Christian Brauner authored May 29, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
6297815a