Commits · b76873a51ec58294438be9e52de2efc3a1c50feb · Chen Yisong / lxc · GitLab

26 Feb, 2021 40 commits
- commands: improve bpf device program management · b76873a5
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  b76873a5
- cgroups: improve bpf device program management · 72a27f06
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  72a27f06
- bpf: add helpers for better bpf device program management · 35cca0f8
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  35cca0f8
- cgroups: improve bpf device program handling · 795313a6
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  795313a6
- cgroups: make device cgroups semantics clearer · 7708e2d2
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  7708e2d2
- bpf: enable helpers to let caller replace existing bpf programs · 9b7d34a2
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  9b7d34a2
- bpf: align struct initialization · 54c17d39
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  54c17d39
- bpf: use return macros · e490acc4
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  e490acc4
- conf: introduce lxc_bpf_devices_rule_t type · 789bf479
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  789bf479
- bpf: use cgroup fd directly instead of paths · e0542702
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  e0542702
- cgroups: kill monitor_full_path · e4f23a0f
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  e4f23a0f
- cgroups: free correct path · c0fb6f36
  Christian Brauner authored Feb 18, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  c0fb6f36
- utils: fix print_r() debugging helper · 4e771848
  Christian Brauner authored Feb 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  4e771848
- cgroups: fix error values · 5bd52b01
  Christian Brauner authored Feb 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  5bd52b01
- cgroups: don't overwrite type · 3bb6756d
  Christian Brauner authored Feb 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  3bb6756d
- cgroups: make it extremely obvious that we're transitioning from a flag to a type · b9a9768c
  Christian Brauner authored Feb 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  b9a9768c
- cgroups: create controller directories if missing · 6194bad7
  Christian Brauner authored Feb 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  6194bad7
- cgroups: use non-flag based checking now that we switched all codepaths over · 4ab1d9a6
  Christian Brauner authored Feb 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  4ab1d9a6
- conf: use brackets to clarify check semantics · 0679efa0
  Christian Brauner authored Feb 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  0679efa0
- cgroups: validate that only a single cgroup mount type is set · 16ed8086
  Christian Brauner authored Feb 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  16ed8086
- cgroups: prevent cgroup mount type overwrite · d6614b80
  Christian Brauner authored Feb 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  d6614b80
- cgroups: ensure that cgroup_root is initialized in legacy codepaths · 3a72de50
  Christian Brauner authored Feb 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  3a72de50
- cgroups: distinguish between tmpfs and unified based cgroup layouts file descriptors · b7967f52
  Christian Brauner authored Feb 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  b7967f52
- cgroups: log intermediate cleanup · 0bdd81d9
  Christian Brauner authored Feb 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  0bdd81d9
- cgroups: prevent NULL pointer deref · 2e5d1172
  Christian Brauner authored Feb 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  2e5d1172
- cgroups: simplify mount opening · c46e18f5
  Christian Brauner authored Feb 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  c46e18f5
- cgroups: ensure we prune the limit dir · 192711f0
  Christian Brauner authored Feb 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  192711f0
- cgroups: ensure we don't remove cgroups we didn't create · 1a9fab99
  Christian Brauner authored Feb 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  1a9fab99
- cgroups: don't move pivot cgroup under the monitor's cgroup · 699919e6
  Christian Brauner authored Feb 17, 2021
```
Otherwise we will never be able to destroy the monitor's cgroup.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  699919e6
- cgroups: don't rely on absolute path · 14637407
  Christian Brauner authored Feb 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  14637407
- cgroups: be stricter when creating payloads · f5eccee1
  Christian Brauner authored Feb 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  f5eccee1
- cgroups: rework cgroup tree creation · 5ff6d751
  Christian Brauner authored Feb 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  5ff6d751
- cgroups: ensure leaf cgroup is correctly pruned on creation failure · 5fb9efeb
  Christian Brauner authored Feb 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  5fb9efeb
- cgroups: rework cgroup tree removal on creation failure · a291dc9c
  Christian Brauner authored Feb 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  a291dc9c
- cgroups: remove obsolote check · 9d14f691
  Christian Brauner authored Feb 17, 2021
```
In the new layout we don't need to do this.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  9d14f691
- cgroups: reorder function arguments · a5c543e7
  Christian Brauner authored Feb 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  a5c543e7
- start: delegate than move into the target cgroup · 4f284640
  Christian Brauner authored Feb 17, 2021
```
This is a way more sensible model.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  4f284640
- cgroups: rework unified controller delegation · 380facc9
  Christian Brauner authored Feb 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  380facc9
- cgroups: check correct variable · 9c0e2c57
  Christian Brauner authored Feb 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  9c0e2c57
- cgroups: s/openat()/open_at()/g · e7fa53de
  Christian Brauner authored Feb 17, 2021
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  e7fa53de