- 05 Oct, 2017 4 commits
-
-
Christian Brauner authored
implement lxc_string_split_quoted
-
Serge Hallyn authored
confile: ignore lxc.kmsg and lxc.pivotdir
-
Christian Brauner authored
Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
- 04 Oct, 2017 1 commit
-
-
Serge Hallyn authored
lxc_string_split_quoted() splits a string on spaces, but keeps groups in single or double qoutes together. In other words, generally what we'd want for argv behavior. Switch lxc-execute to use this for lxc.execute.cmd. Switch lxc-oci template to put the lxc.execute.cmd inside single quotes, because parse_line() will eat those. If we don't do that, then if we have lxc.execute.cmd = /bin/echo "hello, world", then the last double quote will disappear. Signed-off-by:Serge Hallyn <shallyn@cisco.com>
-
- 03 Oct, 2017 4 commits
-
-
Christian Brauner authored
Add OCI container creation template
-
Serge Hallyn authored
Closes #1813 This adds preliminary (but working) support for creating application containers from OCI formats. Examples: create a container from a local OCI layout in ../oci: sudo lxc-create -t oci -n a1 -- -u oci:../oci:alpine Or, create a container pulling from the docker hub. sudo lxc-create -t oci -n u1 -- -u docker://ubuntu The url is specified in the same format as for 'skopeo copy'. Comments appreciated. Signed-off-by:Serge Hallyn <shallyn@cisco.com>
-
Christian Brauner authored
drop useless apparmor denies
-
Tycho Andersen authored
mem and kmem are really in /dev, so this does us no good. Signed-off-by:Tycho Andersen <tycho@tycho.ws>
-
- 02 Oct, 2017 5 commits
-
-
Serge Hallyn authored
Signed-off-by:Serge Hallyn <shallyn@cisco.com>
-
Serge Hallyn authored
network: clear ifindeces
-
Christian Brauner authored
We need to clear any ifindeces we recorded so liblxc won't have cached stale data which would cause it to fail on reboot we're we don't re-read the on-disk config file. Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
- 01 Oct, 2017 1 commit
-
-
Serge Hallyn authored
add a pre-start-host hook
-
- 30 Sep, 2017 1 commit
-
-
Serge Hallyn authored
This should satisfy several use cases. The one I tested for was CNI. I replaced the network configuration in a root owned container with: lxc.net.0.type = empty lxc.hook.start-host = /bin/lxc-start-netns where /bin/lxc-start-netns contained: ================================= echo "starting" > /tmp/debug ip link add host1 type veth peer name peer1 ip link set host1 master lxcbr0 ip link set host1 up ip link set peer1 netns "${LXC_PID}" ================================= The nic 'peer1' was placed into the container as expected. For this to work, we pass the container init's pid as LXC_PID in an environment variable, since lxc-info cannot work at that point. Signed-off-by:Serge Hallyn <shallyn@cisco.com>
-
- 29 Sep, 2017 2 commits
-
-
Serge Hallyn authored
Add support share pid namespace
-
LiFeng authored
Signed-off-by:LiFeng <lifeng68@huawei.com>
-
- 28 Sep, 2017 2 commits
-
-
Christian Brauner authored
start: don't close inherited namespace fds
-
LiFeng authored
Otherwise we can never share namespaces. Signed-off-by:
LiFeng <lifeng68@huawei.com> Acked-by:
Christian Brauner <christian.brauner@ubuntu.com>
-
- 27 Sep, 2017 2 commits
-
-
Stéphane Graber authored
cgfsng: check whether we have a conf
-
Christian Brauner authored
We can't rely in general on the presence of an initialized conf on cgroup init time. One good example are our criu codepaths. Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
- 25 Sep, 2017 2 commits
-
-
Christian Brauner authored
doc: Translate lxc-update-config(1) into Japanese
-
KATOH Yasufumi authored
Signed-off-by:KATOH Yasufumi <karma@jazz.email.ne.jp>
-
- 24 Sep, 2017 1 commit
-
-
Stéphane Graber authored
lvm: fix thinpool logical volumes
-
- 23 Sep, 2017 1 commit
-
-
Christian Brauner authored
Closes #1827. Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
- 20 Sep, 2017 4 commits
-
-
Stéphane Graber authored
doc: add lxc-update-config manpage
-
Stéphane Graber authored
Merge pull request #1821 from brauner/2017-09-19/fail_on_when_setting_limits_on_unavailable_controllers cgfsng: fail when limits fail to apply
-
Stéphane Graber authored
zfs: return error directly when zfs creation fails
-
Christian Brauner authored
Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
- 19 Sep, 2017 5 commits
-
-
Christian Brauner authored
doc: fix regex-typo in Japanese and Korean lxc-monitor(1)
-
KATOH Yasufumi authored
Update for commit e3dd06efSigned-off-by:
KATOH Yasufumi <karma@jazz.email.ne.jp>
-
Christian Brauner authored
So far, we silently skipped over limits that failed to be applied which is very odd. Let's error on when cgroup limits fail to apply. Closes #1815. Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Closes #1818. Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Fix typo
-
- 18 Sep, 2017 5 commits
-
-
Stéphane Graber authored
Change alpine template file check to also check file size (`-f` => `-s`)
-
Stéphane Graber authored
Signed-off-by:Stéphane Graber <stgraber@ubuntu.com>
-
Christian Brauner authored
tests: Support systemd hybrid cgroups
-
Stéphane Graber authored
Signed-off-by:Stéphane Graber <stgraber@ubuntu.com>
-
Rune Juhl Jacobsen authored
Because the `fetch` wget wrapper outputs files to stdout we may end up in a situation where wget fails but the files are still created. This can happen e.g. when the host date is out of sync leading to a failed certificate check, resulting in the creation of empty key files. Once the empty files have been created the template will try to use them which causes the certificate check to fail. By using `-s` instead of `-f` the template will re-fetch the files unless they exist AND have a size greater than zero. Signed-off-by:Rune Juhl Jacobsen <runejuhl@petardo.dk>
-