- 11 May, 2017 4 commits
-
-
Stéphane Graber authored
Signed-off-by:Stéphane Graber <stgraber@ubuntu.com>
-
Christian Brauner authored
Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
0x0916 authored
Signed-off-by:0x0916 <w@laoqinren.net>
-
0x0916 authored
Signed-off-by:
-
- 10 May, 2017 14 commits
-
-
Christian Brauner authored
I mean.. really? But better safe than sorry. Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
I really fail to see the point of this and git {blame, log -S} don't really enlighten me on the reason for this as well. But I might be dense. The way I see it the only thing this line achieves is causing trouble when the container is started as root because the umount2() call will umount e.g. /usr/lib/x86_64-linux-gnu/lxc in case it is a mountpoint on the host. Note, this is because lxc_spawn() is still called in the hosts namespaces. Closes https://github.com/lxc/lxd/#3255. Signed-off-by: -
Christian Brauner authored
There's really no reason not to if it's requested. Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
lxc_unstack_mountpoint() tries to clear all mountpoints from a given path. It return the number of successful umounts on success and -errno on error. Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
The code in conf will bind-mount a /dev/pts/<n> device over a dummy regular /dev/console file. If users really want /dev/console bind-mount from the host they can request it explicitly in the containers config file. This change will have no effect on current LX{C,D} behavior since we (as said above) overmount the /dev/console bind-mount anyway. Signed-off-by: -
Christian Brauner authored
In case the user specified lxc.console = none lxc.devttydir = bla lxc.mount.entry = /dev/console dev/console none bind,create=file 0 0 move the mount under /dev/bla/console If he requested a mknod()ed /dev/console rename it to /dev/bla/console. Signed-off-by: -
Christian Brauner authored
In case the user did request a console to be set up unmount any prior bind-mount for it. Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by:
-
- 09 May, 2017 14 commits
-
-
0x0916 authored
Signed-off-by: -
Evgeni Golov authored
-
Christian Brauner authored
Older version of liblxc only allowed for 105 bytes to be used for the abstract unix domain socket name because the code for our abstract unix socket handling performed invalid checks. Since we \0-terminate we could now have a maximum of 106 chars. But do not break backwards compatibility we keep the limit at 105. Reported-by: 0x0916 w@laoqinren.net Signed-off-by: -
Christian Brauner authored
In case the lxc command socket is hashed and the socket was created for a different path than the one we're currently querying lxc_cmd_get_{lxcpath,name}() can return NULL. The command socket path is hashed when len(lxcpath) > sizeof(sun_path) - 2. Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
lxc_cmd_get_lxcpath() and lxc_cmd_get_name() both pass a nil pointer to fill_sock_name(). Make sure that they are not dereferenced. Signed-off-by: -
Christian Brauner authored
Abstract unix sockets need not be \0-terminated. So you can effectively have 107 chars available. If you \0-terminate you'll have a 106. Don't enforce \0-termination in these low-level functions. Enforce it higher up which we already do. Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Nikolay Martynov authored
A few things have changed and this patch makes container generated for sshd work in Ubuntu Signed-off-by:Nikolay Martynov <mar.kolya@gmail.com>
-
Christian Brauner authored
Create /proc directory if it doesn't exist. Closes #1475. Signed-off-by: -
Christian Brauner authored
Closes #1475. Signed-off-by: -
Christian Brauner authored
This left the file descriptor to the underlying /dev/ptmx file open which confused the hell out of criu. Let's close it. Closes https://github.com/lxc/lxd/issues/3243. Signed-off-by:
-
- 26 Apr, 2017 7 commits
-
-
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
In a lot of cases we need a list of the writeable cgroup controllers detected by the cgfsng driver. Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Use the loop device helpers I wrote for LXD in LXC as well. They should be more efficient. Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
AppArmor will refuse on /dev/ptmx being a symlink. Signed-off-by: -
Christian Brauner authored
Signed-off-by:
-
- 19 Apr, 2017 1 commit
-
-
Christian Brauner authored
Signed-off-by:
-
