Commits · beda39ebbdb1490574530cb29fffc73e9a0b82f1 · Chen Yisong / lxc

03 Jun, 2017 6 commits
- Merge pull request #1612 from brauner/2017-06-03/bugfixes · beda39eb
  Stéphane Graber authored Jun 03, 2017
```
idmapping bugfixes
```
  beda39eb
- tree-wide: log function called in userns_exec_1() · c9b7c33e
  Christian Brauner authored Jun 03, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  c9b7c33e
- conf: avoid double-frees in userns_exec_1() · 1d90e064
  Christian Brauner authored Jun 03, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  1d90e064
- conf: non-functional changes · b0ee5983
  Christian Brauner authored Jun 03, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  b0ee5983
- start: log sending and receiving of tty fds · f07fa8df
  Christian Brauner authored Jun 01, 2017
```
This is a potentially security sensitive operation and I really want to keep an
eye on *when exactly* this is send. So add more logging on the TRACE() level.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  f07fa8df
- Merge pull request #1609 from brauner/2017-06-01/unit_test_idmap_parser · ff3381e1
  Stéphane Graber authored Jun 02, 2017
```
unit test idmap parser + userns_exec_1() rework
```
  ff3381e1
02 Jun, 2017 6 commits

Merge pull request #1608 from ss1h2a3tw/checkconfig · 60025244
Christian Brauner authored Jun 02, 2017
```
add probe status checking
```
60025244

authored Jun 03, 2017

This also fixes a bug where we caused a double mapping, when the {u,g}id for
the user was mapped to container root {g,u}id.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

28a2d9e7

conf: non-functional changes · 339efad9
Christian Brauner authored Jun 03, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
339efad9
tests: add unit tests for idmap parser · 77803ee7
Christian Brauner authored Jun 01, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
77803ee7

confile_utils: add new file · 0b843d35

authored Jun 01, 2017

This adds confile_utils.{c,h} which will contain a helpers to parse lxc
configuration files.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

0b843d35

add probe status checking · 59d74707
Shane Chen authored Jun 02, 2017
```
Signed-off-by: Shane Chen <ss1ha3tw@gmail.com>
```
59d74707

01 Jun, 2017 8 commits
- Merge pull request #1592 from brauner/2017-05-28/idmap_handling · a9849a06
  Serge Hallyn authored Jun 01, 2017
```
idmap improvements
```
  a9849a06
- Merge pull request #1599 from brauner/2017-05-30/use_minimal_idmap_set · ca3592eb
  Serge Hallyn authored Jun 01, 2017
```
conf: use minimal {g,u}id map
```
  ca3592eb
- conf: use minimal {g,u}id map · f8aa4bf3
  Christian Brauner authored May 29, 2017
```
Afaict, userns_exec_1() is only used to operate based on privileges for the
user's own {g,u}id on the host and for the container root's unmapped {g,u}id.
This means we require only to establish a mapping from:
- the container root {g,u}id as seen from the host -> user's host {g,u}id
- the container root -> some sub{g,u}id

The former we add, if the user did not specifiy a mapping. The latter we
retrieve from the ontainer's configured {g,u}id mappings.

Closes #1598.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  f8aa4bf3
- Merge pull request #1596 from brauner/2017-05-29/fix_parsing · 493c6236
  Serge Hallyn authored Jun 01, 2017
```
confile: fix parsing
```
  493c6236
- Merge pull request #1607 from ss1h2a3tw/master · 1573a514
  Christian Brauner authored Jun 01, 2017
```
adding warning for mtu ignoring
```
  1573a514
- adding warning for mtu ignoring · 72ccbbe1
  Shane Chen authored Jun 01, 2017
```
Signed-off-by: Shane Chen <ss1ha3tw@gmail.com>
```
  72ccbbe1
- tests: comp retval to exp val whenever we can · ae4ad10d
  Christian Brauner authored Jun 01, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  ae4ad10d
- confile: performance tweaks · a182feae
  Christian Brauner authored Jun 01, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  a182feae
31 May, 2017 20 commits
- Merge pull request #1605 from decomposite/systemd_unit_stop · 03931c9e
  Christian Brauner authored Jun 01, 2017
```
Use lxc-stop to stop systemd service
```
  03931c9e
- Use lxc-stop to stop systemd service · c08d29b6
  JD Friedrikson authored May 31, 2017
```
Ever since 8eb62c24, systemd has not been able to cleanly stop lxc
containers (via lxc@) because it's still using SIGPWR for systemd-based
containers.

We should now use the nice logic in 330ae3d3 to stop the containers
instead.
Signed-off-by: JD Friedrikson <yours@decompo.site>
```
  c08d29b6
- Merge pull request #1601 from brauner/2017-05-30/veth_fixes · bf3e9c15
  Stéphane Graber authored May 31, 2017
```
network: don't delete net devs we didn't create
```
  bf3e9c15
- lxccontainer: switch api to new clearer callbacks · 6afd673f
  Christian Brauner authored May 31, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  6afd673f
- confile: add clearer for lxc.include · 973082f5
  Christian Brauner authored May 31, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  973082f5
- confile: add clearer for lxc.include · fdf3c589
  Christian Brauner authored May 31, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  fdf3c589
- confile: add clearer for lxc.limit{.*} · 715ccc96
  Christian Brauner authored May 31, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  715ccc96
- confile: add clearer for lxc.no_new_privs · b98c5ab0
  Christian Brauner authored May 31, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  b98c5ab0
- confile: add clearer for lxc.ephemeral · 59e370db
  Christian Brauner authored May 31, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  59e370db
- confile: add clearer for lxc.init_gid · 1044b247
  Christian Brauner authored May 31, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  1044b247
- confile: add clearer for lxc.init_uid · ec76dcfb
  Christian Brauner authored May 31, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  ec76dcfb
- confile: add clearer for lxc.init_cmd · 8e90af3e
  Christian Brauner authored May 31, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  8e90af3e
- confile: add clearer for lxc.environment · 832fb63a
  Christian Brauner authored May 31, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  832fb63a
- confile: add clearer for lxc.group · 4850d223
  Christian Brauner authored May 31, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  4850d223
- confile: add clearer for lxc.monitor.unshare · adad12ca
  Christian Brauner authored May 31, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  adad12ca
- confile: add clearer for lxc.syslog · 998ca94f
  Christian Brauner authored May 31, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  998ca94f
- confile: add clearer for lxc.start.* · c6182222
  Christian Brauner authored May 31, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  c6182222
- confile: add clearer for lxc.stopsignal · de45f3a8
  Christian Brauner authored May 31, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  de45f3a8
- confile: add clearer for lxc.rebootsignal · cae63cfa
  Christian Brauner authored May 31, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  cae63cfa
- confile: add clearer for lxc.haltsignal · 87b288d1
  Christian Brauner authored May 31, 2017
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  87b288d1