Commits · de6a471a1cccd6d6cdfd0ea562dd03a33be59e83 · Chen Yisong / lxc

28 Oct, 2011 2 commits

lxc-fedora.in: Add missing default release variable · de6a471a

authored Oct 28, 2011

The text says that 14 is default, but release=14 was not set anywhere
in the script.
Signed-off-by: Tuomas Suutari <tuomas.suutari@gmail.com>
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

de6a471a

templates: update openSUSE template for openSUSE 12.1 · 44ee8a10

authored Oct 25, 2011

rely on "build" package, to ensure chroot can be created with
distribution older than 12.1
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

44ee8a10

24 Oct, 2011 13 commits

Drop resolvconf from oneiric container package list · 5fe95ad1

authored Oct 25, 2011

It prevents containers from getting a good resolv.conf without doing
ifdown eth0; ifup eth0.

(see pad.lv/880020)
Signed-off-by: Serge Hallyn <serge.hallyn@canonical.com>
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

5fe95ad1

extend the struct lxc_arguments · e788178a

authored Oct 24, 2011

This patch adds a private argument to extend the struct
lxc_arguments. This is useful to develop custom lxc commands
outside mainline lxc.
Signed-off-by: Cedric Le Goater <clg@fr.ibm.com>
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

e788178a

lxc: introduce lxc_execute() · 0ae4f887

authored Oct 24, 2011

This patch allows to create application containers with liblxc.so directly.

Some code cleanups on the way:
- separate ops for lxc_execute() and lxc_start(): the factorisation is wrong
  here as we may have specific things to do if we're running an application
  container. It deserves separate ops.
- lxc_arguments_dup() is merged in the pre-exec operation: this is a first
  use for the execute op introduced just above. It's better to build the
  arguments to execvp() where they're really used.
Signed-off-by: Greg Kurz <gkurz@fr.ibm.com>
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
Cc: Cedric Le Goater <clg@fr.ibm.com>

0ae4f887

handle kernel 3.x in lxc-checkconfig · e4c0cf92

authored Oct 13, 2011

Make sure to correctly detect kernel 3.x for file capabilities.
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

e4c0cf92

alt linux template · b031f0d2
Alexey Shabalin authored Oct 24, 2011
```
Updates.
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
--
```
b031f0d2

lxc-ubuntu: stop early if a bad user is specified in -b option · 8565ea1c

authored Oct 24, 2011

Otherwise we end up with a bad container fstab and a container
that won't boot. See
https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/879052Signed-off-by: Serge Hallyn <serge.hallyn@canonical.com>
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

8565ea1c

Don't list containers w/ active console sessions multiple times · bc71b5c5

authored Oct 24, 2011

The lxc-ls shell script uses netstat -xa to get a listing of AF_UNIX
sockets it then parses in order to determine the names of presently
running containers. This is wrong because it will list the
listening socket and all sockets created by accepting connections on
that. This causes the script to display the names of containers with
active lxc-console sessions 1 + n times, n being the number of active
console sessions. The patch below fixes this by using netstat -xl
instead which only displays the listening sockets.
Signed-off-by: Rainer Weikusat <rweikusat@mobileactivedefense.com>
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

bc71b5c5

ubuntu template: allow containers to create tap devices · b145c6ef

authored Oct 24, 2011

Thought I had sent this before, but I don't find it anywhere.
Signed-off-by: Serge Hallyn <serge.hallyn@canonical.com>
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

b145c6ef

Accurately detect whether a system supports clone_children · 3e2981d4

authored Oct 24, 2011

If multiple cgroups are mounted under /sys/fs/cgroup, then the
original check ends up looking for /sys/fs/cgroup/cgroup.clone_children,
which does not exist because that is just a tmpfs.

So make sure to check an actual cgroupfs.
Signed-off-by: Serge Hallyn <serge.hallyn@canonical.com>
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

3e2981d4

Let sshd template work on ubuntu systems. · b91b1cd7

authored Oct 24, 2011

/dev/shm is a symlink to /run/shm, so we need /run/shm
to exist in the container rootfs.  Also, /dev/mqueue does
not exist on the host, and can't be created by the container.
But we don't really need it so ignore that.
Signed-off-by: Serge Hallyn <serge.hallyn@canonical.com>
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

b91b1cd7

ubuntu template: disallow cap_sys_module (by popular demand) · cdcee3c7

authored Oct 24, 2011

This isn't particularly reassuring, and will be moot with user
namespaces, but as people are asking for it, turn off sys_module.
While we're at it, turn off mac_admin and mac_override.
Signed-off-by: Serge Hallyn <serge.hallyn@canonical.com>
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

cdcee3c7

lxc-clone: fix dhclient.conf send hostname command · 0f3fe9e0

authored Oct 24, 2011

End the command with ';', which is needed, and put the hostname in
quotes (which doesn't really seem needed, but shown in man page).
Signed-off-by: Serge Hallyn <serge.hallyn@canonical.com>
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

0f3fe9e0

fix more broken paths in lxc-*.in scripts · 6f7c8b02

authored Oct 24, 2011

There are still some sequels from commit:

1c41ddcbSigned-off-by: Greg Kurz <gkurz@fr.ibm.com>
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

6f7c8b02

20 Sep, 2011 1 commit

fix broken lxc-*.in scripts · 4e04d515

authored Sep 20, 2011

Commit 92c7f629 broke the following scipts:
- lxc-setcap
- lxc-setuid
- lxc-create

This patch adds the missing variables to be substitued by the configure
script.

Cheers.
Signed-off-by: Greg Kurz <gkurz@fr.ibm.com>
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

4e04d515

13 Sep, 2011 3 commits

Set the utsname on the debian template · 16501521

authored Sep 13, 2011

Signed-off-by: Tzafrir Cohen <tzafrir@cohens.org.il>
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

16501521

only warn for inherited file descriptors · 92c7f629

authored Sep 13, 2011

As discussed in thread:

http://sourceforge.net/mailarchive/forum.php?thread_name=4E5618C3.5060507%40free.fr&forum_name=lxc-devel

We think it's better for now to only warn the user about a fd leaking into
the container. Also remove the call to readlink() as it isn't really useful
now: since the container will start anyway, the user can look into /proc/../fd
or use lsof or whatever.
Signed-off-by: Greg Kurz <gkurz@fr.ibm.com>
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

92c7f629

fixes for rpmbuild · 1c41ddcb

authored Sep 13, 2011

This patch fixes some makefile/specfile issues when running
rpmbuild with the distributed lxc specfile:

- fixes usage of installation directories for config files,
  rootfs, templates and lxc-init so that they're calculated
  at make time instead of configure time. Thanks to this,
  all installed items go under $RPM_BUILD_ROOT when running
  rpmbuild
- introduce --disable-rpath option to configure to avoid
  check-rpaths errors when building non-root.
- introduce a lxc-libs package in the default spec file
  to allow concurrent installation of 32 bit and 64 bit
  libraries.

v2: - fix circular reference in lxc.pc
    - ship lxc.pc with lxc-devel
Signed-off-by: Greg Kurz <gkurz@fr.ibm.com>
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

1c41ddcb

01 Sep, 2011 1 commit
- remove the check for container path as it's done in lxc-create · f7b98d38
  InformatiQ authored Sep 01, 2011
```
Signed-off-by: InformatiQ <rhanna@informatiq.org>
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
```
  f7b98d38
30 Aug, 2011 10 commits

if after freezing the container the snapshot/rsync fails, unfreeze before exiting · ac70c6cf

authored Aug 31, 2011

Signed-off-by: InformatiQ <rhanna@informatiq.org>
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
Acked-by: Serge Hallyn <serge.hallyn@canonical.com>

ac70c6cf

*add the new opts to help() *set container_running=false · 8534a83e

authored Aug 31, 2011

Signed-off-by: InformatiQ <rhanna@informatiq.org>
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
Acked-by: Serge Hallyn <serge.hallyn@canonical.com>

8534a83e

* allow cloning of non-snapshot lvm devices · 27078f44

authored Aug 31, 2011

Signed-off-by: InformatiQ <rhanna@informatiq.org>
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
Acked-by: Serge Hallyn <serge.hallyn@canonical.com>

27078f44

lxc-fedora.in · 29ec8f84

authored Aug 31, 2011

* if not running on fedora host amd -R is not set, use fedora 14 as default
* trap SIGHUP SIGINT SIGTERM, and cleanup before exiting
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

29ec8f84

fix for missing EOF and fstab contents · a30ce0ac

authored Aug 31, 2011

 templates/lxc-fedora.in |   10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

a30ce0ac

add lxc-altlinux template · 262f4e48
Alexey Shabalin authored Aug 16, 2011
```
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
```
262f4e48

.gateway options · be58c6b5

authored Aug 30, 2011

Man for the gateway option.
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

be58c6b5

add autodetection of the gateway address · 19a26f82

authored Aug 30, 2011

For veth and macvlan networks, this can look up the host address on the
bridge (link) interface and add a default route on the guest to that
address. This facilitates a typical setup where guests are bridged
together.

syntax:
	lxc.ipv4.gateway = auto
	lxc.ipv6.gateway = auto
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

19a26f82

.gateway configuration · f8fee0e2

authored Aug 30, 2011

This directive adds a default route to the guest at startup.

syntax:
	lxc.network.ipv4.gateway = 10.0.0.1
	lxc.network.ipv6.gateway = 2001:db8:85a3::8a2e:370:7334
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

f8fee0e2

Don't log an error when the container is stopped · ebdd307d
Daniel Lezcano authored Aug 30, 2011
```
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
```
ebdd307d

12 Aug, 2011 1 commit
- remove minimal install for ubuntu template · e6238180
  Daniel Lezcano authored Aug 12, 2011
```
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
```
  e6238180
11 Aug, 2011 9 commits

make undefined personality non-fatal · 970ab589
Daniel Lezcano authored Aug 12, 2011
```
Just warn, do not exit fatally.
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
```
970ab589
fix segfault when an unsupported personality is set · 6f1239c3
Daniel Lezcano authored Aug 12, 2011
```
Bad array len computation.
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
```
6f1239c3
Version 0.7.5 · 6371febf
Daniel Lezcano authored Aug 11, 2011
```
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
```
6371febf

fix setns parameter · d3b90403

authored Aug 11, 2011

The setns syscall is now mainstream but the parameter passing changed.
Let's fix that.

The pid namespace and mount namespace attach are missing for the moment.
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

d3b90403

lxc-ps : update the man page for passing the options · c797dcc3
Daniel Lezcano authored Aug 11, 2011
```
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
```
c797dcc3

lxc-ps : fix the container name search · 858133f5

authored Aug 11, 2011

We don't have to check for the cgroup namespace name because the
pid we are looking for is already in the list of the container owned by
lxc and retrieved from the abstract socket command name.
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>

858133f5

add container init pid with the lxc-info command · 5d42011a
Daniel Lezcano authored Aug 11, 2011
```
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
```
5d42011a
fix RELEAE_URL to not hardcode the arch · 98945759
InformatiQ authored Jul 14, 2011
```
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
```
98945759
working fedora template · 579ebf12
InformatiQ authored Apr 20, 2011
```
Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
```
579ebf12