- 26 Jan, 2021 1 commit
-
-
Christian Brauner authored
Cc: stable-4.0 Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
- 25 Jan, 2021 4 commits
-
-
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Stéphane Graber authored
tree-wide: fix compilation with-Wstrict-prototypes -Wold-style-defini…
-
- 24 Jan, 2021 1 commit
-
-
Christian Brauner authored
Fixes: #3630 Signed-off-by:
-
- 22 Jan, 2021 12 commits
-
-
Stéphane Graber authored
build: allow to build all binaries statically via --enable-static-binaries
-
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Including openssl handling. Signed-off-by: -
Christian Brauner authored
Cc: stable-4.0 Signed-off-by: -
Christian Brauner authored
Cc: stable-4.0 Signed-off-by: -
Christian Brauner authored
Fix compilation without seccomp when libseccomp is installed
-
Stéphane Graber authored
conf: fix containers retaining CAP_NET_ADMIN
-
Christian Brauner authored
Cc: stable-4.0 Signed-off-by: -
Christian Brauner authored
Cc: stable-4.0 Signed-off-by: -
Christian Brauner authored
Cc: stable-4.0 Signed-off-by: -
Christian Brauner authored
Fixes: #3627 Cc: stable-4.0 Signed-off-by:
-
- 16 Jan, 2021 2 commits
-
-
Eneas U de Queiroz authored
Move the block checking for libseccomp api compatibility inside AM_COND_IF([ENABLE_SECCOMP] ... ). Signed-off-by:Eneas U de Queiroz <cotequeiroz@gmail.com>
-
Eneas U de Queiroz authored
Use HAVE_SECCOMP_NOTIFY instead of HAVE_DECL_SECCOMP_NOTIFY_FD. Currently the latter will be true if the declaration is found by configure, even if 'configure --disable-seccomp' is used. HAVE_SECCOMP_NOTIFY is defined in lxcseccomp.h if both HAVE_SECCOMP and HAVE_DECL_SECCOMP_NOTIFY_FD are true, which is the correct behavior. Signed-off-by:
-
- 11 Jan, 2021 2 commits
-
-
Stéphane Graber authored
make lxc-net's dnsmasq hermetic
-
Motiejus Jakštys authored
lxc's dnsmasq will try to read system's dnsmasq if `--conf-file` is not specified. This is likely not desirable, as lxc's dnsmasq should be self-contained. On my system the conflicting options are `--bind-interfaces` and `--bind-dynamic`, since the same host is doing other DNS-y things unrelated to lxc. This is an incompatible change, since lxc's dnsmasq will stop honoring system's `/etc/dnsmasq.conf`, and some systems may be relying on it. Given that, I believe it should not depend on it by default, since dnsmasq is lxc's implementation detail. However, if the user desires, the old behavior could be brought back by setting `LXC_DHCP_CONFILE=/etc/dnsmasq.conf` in `/etc/default/lxc-net`. Signed-off-by:Motiejus Jakštys <motiejus@jakstys.lt>
-
- 09 Jan, 2021 2 commits
-
-
Stéphane Graber authored
Changed Version from 2.*.* to 4.*.*
-
sirh3e authored
Signed-off-by:sirh3e <marvin.huber@bluewin.ch>
-
- 04 Jan, 2021 7 commits
-
-
Stéphane Graber authored
capability fixes
-
Christian Brauner authored
Fixes: e8b9c9ec ("unmounted proc/sys/net if dropping CAP_NET_ADMIN") Signed-off-by:
-
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Fixes: #3612 Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by:
-
- 28 Dec, 2020 1 commit
-
-
Stéphane Graber authored
bugfixes
-
- 27 Dec, 2020 2 commits
-
-
Christian Brauner authored
Cc: stable-4.0 Signed-off-by: -
Christian Brauner authored
This is needed to enable containers without a rootfs. Fixes: #3607 Cc: stable-4.0 Signed-off-by:
-
- 15 Dec, 2020 3 commits
-
-
Stéphane Graber authored
confile: don't accidently alter lxc.cgroup.dir
-
Christian Brauner authored
Cc: stable-4.0 Signed-off-by: -
Christian Brauner authored
Signed-off-by:
-
- 14 Dec, 2020 3 commits
-
-
Stéphane Graber authored
conf: fix block-device based rootfs mounting
-
Christian Brauner authored
Fixes: #3598 Cc: stable-4.0 Signed-off-by: -
Christian Brauner authored
unmounted proc/sys/net by dropping CAP_NET_ADMIN
-
