- 17 May, 2021 1 commit
-
-
Christian Brauner authored
At the prior location we we're placed between sending and receiving networking information over the data socket causing the startup to fail. Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
- 12 May, 2021 4 commits
-
-
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Fixes: #3838 Signed-off-by: -
Christian Brauner authored
Fixes: #3838 Signed-off-by: -
Christian Brauner authored
Fixes: #3836 Signed-off-by:
-
- 11 May, 2021 1 commit
-
-
Christian Brauner authored
Signed-off-by:
-
- 10 May, 2021 7 commits
-
-
Stéphane Graber authored
confile: convert AppArmor and SELinux confile parsing from errors to …
-
Christian Brauner authored
Fixes: https://github.com/lxc/lxc/issues/3765#issuecomment-836792820Signed-off-by:
-
Christian Brauner authored
Fixes: https://jenkins.linuxcontainers.org/job/lxc-build-tarballs/2762/consoleSigned-off-by:
-
Christian Brauner authored
Ensure that we detect all supported architectures and don't regress recognizing them. Signed-off-by: -
Christian Brauner authored
Apparenty we dropped this when we cleaned up architecture handling. Fixes: #3832 Signed-off-by: -
Jeff Cook authored
Per https://github.com/lxc/lxc/pull/3831#discussion_r628865713Signed-off-by:
Jeff Cook <jeff@jeffcook.io>
-
Jeff Cook authored
Signed-off-by:
-
- 08 May, 2021 1 commit
-
-
Christian Brauner authored
Signed-off-by:
-
- 06 May, 2021 1 commit
-
-
Christian Brauner authored
LXC is being very clever and sometimes maps the caller's uid into the child userns. This means that the caller can technically write fscaps that are valid in the ancestor userns (which can be a security issue in some scenarios) so newer kernels require CAP_SETFCAP to do this. Until newuidmap/newgidmap are updated to account for this simply write the mapping directly in this case. Cc: stable-4.0 Signed-off-by:
-
- 04 May, 2021 16 commits
-
-
Stéphane Graber authored
Signed-off-by:Stéphane Graber <stgraber@ubuntu.com>
-
Christian Brauner authored
Introduce LXC_ATTACH_DETECT_PERSONALITY to make it explicit what is happening instead of using -1. Signed-off-by: -
Christian Brauner authored
Catch errors in personality handling better. Signed-off-by: -
Christian Brauner authored
In a moment of idioticity I switch -1 with 0xffffffff in the header definition but we use -1 to autodetect. Signed-off-by: -
Christian Brauner authored
Fix architecture parsing. So far we couldn't really differ between "want default architecture" and "failed to parse requested architecture" because the -1 return value means both. Fix this by using the return value only to indicate success or failure and return the parsed personality in a return argument. Signed-off-by: -
Christian Brauner authored
Use the dedicated LXC_ARCH_UNCHANGED macro everywhere instead of relying on -1 being correct. Signed-off-by: -
Christian Brauner authored
Now that we have the infra to make personality handling unconitional remove the ifndefs everywhere. Signed-off-by: -
Christian Brauner authored
There's no need to making personality handling conditional as it has been around for such a long time that only weird systems wouldn't have support for it. And especially if the user requested a specific personality to be set but the system doesn't support the personality syscall we should loudly fail instead of moving on. Signed-off-by: -
Christian Brauner authored
Don't spam the logs because we do receive a lot of file descriptors. Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Evgeny Vereshchagin authored
by getting rid of stpncpy Tested with gcc (GCC) 11.1.1 20210428 (Red Hat 11.1.1-1) Closes https://github.com/lxc/lxc/issues/3752Signed-off-by:
Evgeny Vereshchagin <evvers@ya.ru>
-
Evgeny Vereshchagin authored
Signed-off-by: -
Evgeny Vereshchagin authored
We don't build any packages there so it seems we don't need those packages any more. Apart from that, it should make the script work on Ubuntu Hirsute where dh-systemd was merged into debhelper and is no longer available. Signed-off-by: -
Stéphane Graber authored
Signed-off-by: -
Aaron Thompson authored
Signed-off-by:Aaron Thompson <dev@aaront.org>
-
Evgeny Vereshchagin authored
Apparently /proc/self/cmd can't be used (reliably) on OSS-Fuzz to figure out whether the code is run inside the fuzz targets, which causes the fuzz targets to fill the filesystem with log files. Related: https://github.com/google/oss-fuzz/issues/5509 Should address https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=33835Signed-off-by:
-
- 30 Apr, 2021 3 commits
-
-
Stéphane Graber authored
Signed-off-by: -
Christian Brauner authored
When we attach to an old server the server can return ENOSYS instead of ENOCGROUP2 which causes LXC to abort the attach unnecessary. Fix this! Signed-off-by: -
Christian Brauner authored
Fixes: Coverity 1477399 Signed-off-by:
-
- 29 Apr, 2021 6 commits
-
-
Stéphane Graber authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by:
-
