- 05 Mar, 2020 2 commits
-
-
Christian Brauner authored
Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
- 29 Feb, 2020 1 commit
-
-
Christian Brauner authored
src/lxc/raw_syscalls.c: fix sparc assembly
-
- 28 Feb, 2020 5 commits
-
-
Fabrice Fontaine authored
Build of lxc 3.2.1 fails with ultrasparc on: raw_syscalls.c: In function ‘lxc_raw_clone’: raw_syscalls.c:66:3: error: invalid 'asm': invalid operand output code asm volatile( ^~~ Issue has been added with commit b52e8e68 which added %g1 instead of %%g1 Fixes: - http://autobuild.buildroot.org/results/17c2319850f02f24da6fbef9656c07f86fdc5a3aSigned-off-by:
Fabrice Fontaine <fontaine.fabrice@gmail.com>
-
Stéphane Graber authored
cgroups: honor lxc.cgroup.pattern if set explicitly II
-
Stéphane Graber authored
cgroups: honor lxc.cgroup.pattern if set explicitly
-
- 25 Feb, 2020 2 commits
-
-
Stéphane Graber authored
cgroups: remove unused method and cleanup cgroup_exit()
-
Christian Brauner authored
Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
- 13 Feb, 2020 1 commit
-
-
Stéphane Graber authored
tree-wide: improve setgroups() dropping
-
- 12 Feb, 2020 1 commit
-
-
Christian Brauner authored
Drop groups before we change to userns root. Reported-by:
Teddy Reed <teddy.reed@gmail.com> Signed-off-by:
Christian Brauner <christian.brauner@ubuntu.com>
-
- 10 Feb, 2020 2 commits
-
-
Christian Brauner authored
lxclock: fix a small memory leak
-
Tycho Andersen authored
if (!name), we allocate an unnamed semaphore, but if we then fail to allocate/create the lock, we don't free this semaphore, and we just leak it. Signed-off-by:Tycho Andersen <tycho@tycho.ws>
-
- 05 Feb, 2020 4 commits
-
-
Christian Brauner authored
container.conf: Fix parsing of config options:
-
Maximilian Blenk authored
Add a comment that documents that more specific options of a namespace have to be added above more generic options in config_jump_table. Signed-off-by:Maximilian Blenk <Maximilian.Blenk@bmw.de>
-
Maximilian Blenk authored
Currently lxc.selinux.context.keyring is placed after lxc.selinux.context in config_jump_table. This entails that if lxc.selinux.context.keyring is specified, lxc.selinux.context will be matched to that option. This commit places the lxc.selinux.context.keyring before lxc.selinux.context Signed-off-by:Maximilian Blenk <Maximilian.Blenk@bmw.de>
-
Maximilian Blenk authored
This commit fixes a off by 2 in config option parsing (due to missing parenthesis). The error occurs if for instance lxc.net.0.type is parsed. In that case, the .0 is removed from the string. However, due to the missing parenthesis, the null terminating character is off by two which means the modified config option would be lxc.net.typepe instead of lxc.net.type. Signed-off-by:Maximilian Blenk <Maximilian.Blenk@bmw.de>
-
- 31 Jan, 2020 4 commits
-
-
Christian Brauner authored
Add keyring option
-
Maximilian Blenk authored
Signed-off-by:Maximilian Blenk <Maximilian.Blenk@bmw.de>
-
Maximilian Blenk authored
lxc set's up a new session keyring for every container by default. There might be valid use-cases where this is not wanted / needed (e.g. systemd by default creates a new session keyring anyway). Signed-off-by:Maximilian Blenk <Maximilian.Blenk@bmw.de>
-
Maximilian Blenk authored
lxc set's up a new session keyring for every container by default. If executed on an SELinux enabled system, by default, the keyring inherits the label of the creating process. If executed with the currently available SELinux policy, this means that the keyring is labeled with the lxc_t type. Applications inside the container, however, might expect that the keyring is labeled with a certain context (and will fail to access the keyring if it's not explicitly allowed in the global policy). This patch introduces the config option lxc.selinux.context.keyring which enables to specify the label of the newly created keyring. That is, the keyring can be labeled with the label expected by the started application. Signed-off-by:Maximilian Blenk <Maximilian.Blenk@bmw.de>
-
- 27 Jan, 2020 2 commits
-
-
Christian Brauner authored
cgroups: fix default cgroup pattern
-
Kirill Petrov authored
Signed-off-by:Kirill Petrov <yakutskkirill@mail.ru>
-
- 17 Jan, 2020 1 commit
-
-
Stéphane Graber authored
start: fix container killing logic
-
- 16 Jan, 2020 1 commit
-
-
Christian Brauner authored
We need to account for the case where pidfd's are not supported by the kernel in question. Closes: #3254 Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
- 15 Jan, 2020 2 commits
-
-
Christian Brauner authored
network: Restore fixed MTU functionality
-
Thomas Parrott authored
If MTU setting is provided in network device config then always use it rather than inheriting from the link device. Affected both bridge and router veth modes. Signed-off-by:Thomas Parrott <thomas.parrott@canonical.com>
-
- 14 Jan, 2020 4 commits
-
-
Stéphane Graber authored
test: increase timeout for api reboot tests
-
Christian Brauner authored
cgroup.c: fix memory leak at cgroup init failed
-
Christian Brauner authored
Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
LiFeng authored
Signed-off-by:LiFeng <lifeng68@huawei.com>
-
- 10 Jan, 2020 2 commits
-
-
Stéphane Graber authored
network: improve veth device creation
-
Christian Brauner authored
This makes all the codepaths easier to follow and also moves and renames devices in one single step. Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
- 09 Jan, 2020 6 commits
-
-
Christian Brauner authored
We can't delete by netdev->ifindex since that's the ifindex of the device in the container, not on the host. The correct thing is done below. Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
This allows us to avoid having to move the network device. It also allows us to work around a kernel bug that in combination with a recent change in systemd 244 causes uses of systemd-networkd to not get an ip address. Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Stéphane Graber authored
handle kernel version <--> header incompatibility
-
Christian Brauner authored
We might e.g. be compiled in a container with old kernel headers. In this scenario CLONE_PIDFD will work but pidfd_send_signal() might not be detected because __NR_pidfd_send_signal is not defined because the kernel headers don't match the kernel version. This explains and fixes test-suite hangs on Jenkins I've recently debugged. Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-