- 24 Oct, 2011 3 commits
-
-
Serge E. Hallyn authored
This isn't particularly reassuring, and will be moot with user namespaces, but as people are asking for it, turn off sys_module. While we're at it, turn off mac_admin and mac_override. Signed-off-by:
Serge Hallyn <serge.hallyn@canonical.com> Signed-off-by:
Daniel Lezcano <dlezcano@fr.ibm.com>
-
Serge E. Hallyn authored
End the command with ';', which is needed, and put the hostname in quotes (which doesn't really seem needed, but shown in man page). Signed-off-by:
-
Greg Kurz authored
There are still some sequels from commit: 1c41ddcbSigned-off-by:
Greg Kurz <gkurz@fr.ibm.com> Signed-off-by:
-
- 20 Sep, 2011 1 commit
-
-
Greg Kurz authored
Commit 92c7f629 broke the following scipts: - lxc-setcap - lxc-setuid - lxc-create This patch adds the missing variables to be substitued by the configure script. Cheers. Signed-off-by:
-
- 13 Sep, 2011 3 commits
-
-
Tzafrir Cohen authored
Signed-off-by:
Tzafrir Cohen <tzafrir@cohens.org.il> Signed-off-by:
-
Greg Kurz authored
As discussed in thread: http://sourceforge.net/mailarchive/forum.php?thread_name=4E5618C3.5060507%40free.fr&forum_name=lxc-devel We think it's better for now to only warn the user about a fd leaking into the container. Also remove the call to readlink() as it isn't really useful now: since the container will start anyway, the user can look into /proc/../fd or use lsof or whatever. Signed-off-by:
-
Greg Kurz authored
This patch fixes some makefile/specfile issues when running rpmbuild with the distributed lxc specfile: - fixes usage of installation directories for config files, rootfs, templates and lxc-init so that they're calculated at make time instead of configure time. Thanks to this, all installed items go under $RPM_BUILD_ROOT when running rpmbuild - introduce --disable-rpath option to configure to avoid check-rpaths errors when building non-root. - introduce a lxc-libs package in the default spec file to allow concurrent installation of 32 bit and 64 bit libraries. v2: - fix circular reference in lxc.pc - ship lxc.pc with lxc-devel Signed-off-by:
-
- 01 Sep, 2011 1 commit
-
-
InformatiQ authored
Signed-off-by:
InformatiQ <rhanna@informatiq.org> Signed-off-by:
-
- 30 Aug, 2011 10 commits
-
-
InformatiQ authored
Signed-off-by:
-
InformatiQ authored
Signed-off-by:
-
InformatiQ authored
Signed-off-by:
-
Ramez Hanna authored
* if not running on fedora host amd -R is not set, use fedora 14 as default * trap SIGHUP SIGINT SIGTERM, and cleanup before exiting Signed-off-by: -
Ramez Hanna authored
templates/lxc-fedora.in | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) Signed-off-by: -
Alexey Shabalin authored
Signed-off-by: -
Matthijs Kooijman authored
Man for the gateway option. Signed-off-by: -
Matthijs Kooijman authored
For veth and macvlan networks, this can look up the host address on the bridge (link) interface and add a default route on the guest to that address. This facilitates a typical setup where guests are bridged together. syntax: lxc.ipv4.gateway = auto lxc.ipv6.gateway = auto Signed-off-by: -
Matthijs Kooijman authored
This directive adds a default route to the guest at startup. syntax: lxc.network.ipv4.gateway = 10.0.0.1 lxc.network.ipv6.gateway = 2001:db8:85a3::8a2e:370:7334 Signed-off-by: -
Daniel Lezcano authored
Signed-off-by:
-
- 12 Aug, 2011 1 commit
-
-
Daniel Lezcano authored
Signed-off-by:
-
- 11 Aug, 2011 9 commits
-
-
Daniel Lezcano authored
Just warn, do not exit fatally. Signed-off-by: -
Daniel Lezcano authored
Bad array len computation. Signed-off-by: -
Daniel Lezcano authored
Signed-off-by: -
Daniel Lezcano authored
The setns syscall is now mainstream but the parameter passing changed. Let's fix that. The pid namespace and mount namespace attach are missing for the moment. Signed-off-by: -
Daniel Lezcano authored
Signed-off-by: -
Daniel Lezcano authored
We don't have to check for the cgroup namespace name because the pid we are looking for is already in the list of the container owned by lxc and retrieved from the abstract socket command name. Signed-off-by: -
Daniel Lezcano authored
Signed-off-by: -
InformatiQ authored
Signed-off-by: -
InformatiQ authored
Signed-off-by:
-
- 09 Aug, 2011 6 commits
-
-
Daniel Lezcano authored
Take into account we may have the clone_children flag on the cgroup, so we ignore cgroup namespace in this case. Signed-off-by: -
Serge E. Hallyn authored
If ns cgroup is mounted, then when lxc-unshare runs, the kernel automatically creates a new cgroup for the task. So lxc-unshare tries to delete it. But if ns cgroup is not mounted, that cgroup does not get created, and now lxc-unshare spits an error. Author: Serge Hallyn <serge.hallyn@canonical.com> Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/819319 Forwarded: no Signed-off-by:
-
Serge E. Hallyn authored
like lxc-ps and lxc-ls, lxc-netstat breaks if there is not an 'lxc' cgroup mount and /etc/mtab is not a link to /proc/mounts. Author: Serge Hallyn <serge.hallyn@canonical.com> Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/819319 Forwarded: no Signed-off-by:
-
Serge E. Hallyn authored
The cgroup mounts created by cgroup-bin do not show up in /etc/mtab. lxc-ls, as lxc-ps before it, assumes that /etc/mtab is symlinked to /proc/mounts. Author: Serge Hallyn <serge.hallyn@canonical.com> Forwarded: no Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/819319Signed-off-by:
-
Serge E. Hallyn authored
This is more consistent with other lxc commands Bug-Ubuntu: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/820720Signed-off-by:
-
Daniel Lezcano authored
If the keyword 'none' is specified for the console name, lxc will ignore creating a console. That allows to have a rootfs but without a console. Signed-off-by:
-
- 07 Aug, 2011 2 commits
-
-
Serge E. Hallyn authored
If /var/run is a symlink to /run in the container, then opening /proc/<pid>/root/var/run/utmp will end up opening the host's utmp. Therefore the hack detecting shutdown through utmp fails. Signed-off-by:
-
Serge E. Hallyn authored
Otherwise apt fails during and after debootstrap. Signed-off-by:
-
- 27 Jul, 2011 1 commit
-
-
Serge E. Hallyn authored
When '-b user' is specified to lxc-ubuntu container creation template, do not automatically add all the groups of which user is a member on the host, to user's groups in the container. Signed-off-by:
Serge Hallyn <serge.hallyn@ubuntu.com> Signed-off-by:
-
- 24 Jul, 2011 3 commits
-
-
Serge Hallyn authored
As people seem to want it, i.e. https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/800886Signed-off-by:
-
Serge Hallyn authored
src/lxc/conf.c will explicitly mount it anyway. Furthermore, the fstab entry, which is getting processed first, did not specify -o newinstance. This can cause the host's devpts entry mount options to change, as in https://bugs.launchpad.net/ubuntu/+source/libvirt/+bug/607636. Note - I messed up. This was applied upstream, but I dropped it in subsequent conversion to lxc-ubuntu template. It therefore needs to be reapplied. Signed-off-by:
-
Serge Hallyn authored
Otherwise building on armel fails with checking for linux SRCARCH... configure: error: architecture arm-unknown-linux-gnueabi not supported See https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/745884 for details. Signed-off-by:
-
