Commits · a7f145beff658e887ff6cfeee5be460597e0a2cb · Chen Yisong / lxc · GitLab

26 Feb, 2021 40 commits
- conf: s/setup_mount()/setup_mount_fstab()/g · a7f145be
  Christian Brauner authored Feb 08, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  a7f145be
- mount_utils: add locked flag helpers · 3c0117cc
  Christian Brauner authored Feb 07, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  3c0117cc
- mount_utils: kill mount_filesystem() · a7141930
  Christian Brauner authored Feb 05, 2021
```
We have way better helpers now.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  a7141930
- attach: switch to simple mount() · 177458b6
  Christian Brauner authored Feb 05, 2021
```
At the point where we're remounging proc and sys we're in the container's
namespaces so there's no chance of escape so a simple mount() syscall will
suffice.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  177458b6
- mount_utils: initialize fd · 20af37f7
  Christian Brauner authored Feb 05, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  20af37f7
- tree-wide: make use of new_mount_api() where it makes sense · 362ad2f2
  Christian Brauner authored Feb 05, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  362ad2f2
- mount_utils: detect new mount api support · c4199d11
  Christian Brauner authored Feb 05, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  c4199d11
- mount_utils: kill mount_from_at() · 296e0b11
  Christian Brauner authored Feb 05, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  296e0b11
- conf: use fd_bind_mount() in lxc_fill_autodev() · d469fee9
  Christian Brauner authored Feb 05, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  d469fee9
- mount_utils: add support for bind-mounts through the new mount api · 8e7c46e8
  Christian Brauner authored Feb 05, 2021
```
fd_bind_mount()
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  8e7c46e8
- mount_utils: kill mount_at() · a4df9820
  Christian Brauner authored Feb 05, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  a4df9820
- cgroups: switch __cg_mount_direct() to use the new mount api · 7bd7619b
  Christian Brauner authored Feb 05, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  7bd7619b
- cgroups: switch tmpfs mounting to new mount api · 9b0712c0
  Christian Brauner authored Feb 05, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  9b0712c0
- conf: switch mount_autodev() to new mount api · ee28c8ce
  Christian Brauner authored Feb 05, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  ee28c8ce
- mount_utils: add extended helpers for new mount api · b6546e30
  Christian Brauner authored Feb 05, 2021
```
fs_prepare()
fs_set_property()
fs_attach()
fs_mount()
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  b6546e30
- mount_utils: move mount_at() and mount_from_at() over from utils.{c,h} · c59b7ab9
  Christian Brauner authored Feb 05, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  c59b7ab9
- confile: handle appending init groups · 36fbe851
  Christian Brauner authored Feb 05, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  36fbe851
- conf: use lxc_groups_t directly · 506ec838
  Christian Brauner authored Feb 05, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  506ec838
- attach_options: use size_t for lxc_groups_t · 6c289559
  Christian Brauner authored Feb 05, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  6c289559
- attach: use brackets around flag check · 8e5fb3de
  Christian Brauner authored Feb 05, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  8e5fb3de
- attach_options: use standard C pointer syntax · 7cec31a9
  Christian Brauner authored Feb 05, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  7cec31a9
- attach_options: initialize .groups · 2ab3ea3e
  Christian Brauner authored Feb 05, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  2ab3ea3e
- attach: Add groups option to keep additional group IDs. · 8066b01f
  Ruben Jenster authored Feb 04, 2021
```
Signed-off-by: Ruben Jenster <r.jenster@drachenfels.de>
```
  8066b01f
- confile: add lxc.init.groups to keep additional groups · e778f973
  Ruben Jenster authored Oct 30, 2020
```
Signed-off-by: Ruben Jenster <r.jenster@drachenfels.de>
```
  e778f973
- utils: rework lxc_setgroups() · 7e9d3f20
  Christian Brauner authored Feb 05, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  7e9d3f20
- tree-wide: use lxc_drop_groups() instead of lxc_setgroups(0, NULL) · 1529fd39
  Christian Brauner authored Feb 05, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  1529fd39
- utils: add lxc_drop_groups() · 35c45e17
  Christian Brauner authored Feb 05, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  35c45e17
- utils: check for snprintf() error · fde1420c
  Christian Brauner authored Feb 04, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  fde1420c
- attach: improve logging and terminology · 883a6f8f
  Christian Brauner authored Feb 04, 2021
```
The term "intermediate process" is not very nice imho, "transient process" fits
better.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  883a6f8f
- cgroups: check for correct error in __cg_unified_attach() from cgroup_attach() · f6666d3b
  Christian Brauner authored Feb 04, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  f6666d3b
- tree-wide: s/dfd_root_host/dfd_host/g · cb17f83f
  Christian Brauner authored Feb 04, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  cb17f83f
- tree-wide: s/mntpt_fd/dfd_mnt/g · 856fb719
  Christian Brauner authored Feb 04, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  856fb719
- tree-wide: s/dev_mntpt_fd/dfd_dev/g · acf2aed8
  Christian Brauner authored Feb 04, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  acf2aed8
- syscall_wrappers: fix PROTECT_OPEN_W macro · 3bc37321
  Christian Brauner authored Feb 04, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  3bc37321
- conf: restricted fd-only lxc_fill_autodev() · 4eaba6a4
  Christian Brauner authored Feb 04, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  4eaba6a4
- conf: start stashing dfd to host's / during container setup · d6c618aa
  Christian Brauner authored Feb 04, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  d6c618aa
- conf: fix lxc_setup_dev_console() · f4c43287
  Christian Brauner authored Feb 04, 2021
```
We were printing garbage on accident.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  f4c43287
- utils: add mount_from_at() · 7ce4f69a
  Christian Brauner authored Feb 04, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  7ce4f69a
- cgroups: restrict open calls in cgroup_attach_create_leaf() · 37b56e97
  Christian Brauner authored Feb 04, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  37b56e97
- cgroups: improve error handling and logging in cgroup_attach_leaf() · 1041c03b
  Christian Brauner authored Feb 04, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  1041c03b