- 30 Mar, 2020 1 commit
-
-
Wolfgang Bumiller authored
validate that a cgroup controller name is a valid zero-terminated string before passing it to `cgroup_ops->get_cgroup()`. Signed-off-by:Wolfgang Bumiller <w.bumiller@proxmox.com>
-
- 28 Mar, 2020 7 commits
-
-
Stéphane Graber authored
tree-wide: fixes
-
Christian Brauner authored
Signed-off-by:Christian Brauner <christian.brauner@ubuntu.com>
-
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Cc: cenxianlong <cenxianlong@huawei.com> Signed-off-by: -
Christian Brauner authored
monitor process exited by signal SIGKILL, clean cgroup resource by th…
-
Stéphane Graber authored
cgroups: please compilers
-
cenxianlong authored
Writing the value 0 to a cgroup.procs file causes the writing process to be moved to the corresponding cgroup Signed-off-by:cenxianlong <cenxianlong@huawei.com>
-
- 27 Mar, 2020 18 commits
-
-
Christian Brauner authored
Signed-off-by: -
Stéphane Graber authored
cgroups: use hidden directory for attaching cgroup
-
Christian Brauner authored
Signed-off-by: -
Stéphane Graber authored
conf: simplify userns_exec_minimal()
-
Christian Brauner authored
Signed-off-by: -
Stéphane Graber authored
attach: fixes
-
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
This reverts commit ba7ca43b. Signed-off-by:
-
Stéphane Graber authored
tree-wide: fixes
-
Wolfgang Bumiller authored
Particularly important for lxc_cmd_handler() handles client input and should not be capable of canceling the main loop, some syscall return values leaked through overlapping with LXC_MAINLOOP_ERROR, causing unauthorized clients connecting to the command socket to shutdown the main loop. In turn, signal_handler() receiving unexpected `signalfd_siginfo` struct sizes seems like a reason to bail (since it's a kernel interface). Signed-off-by:
-
Christian Brauner authored
There's a fundamental problem with futexes and setid calls and the go runtime. POSIX requires that when one thread setids all threas must setids and it uses futexes and signals to synchronize the state across threads. This causes deadlocks which means we can't use the pretty solution I first implemented. Instead we need to chown after we create the directory. I might come up with something smarter later but for now this will do. Signed-off-by: -
Stéphane Graber authored
conf: rework and fix leak in userns_exec_1()
-
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
We didn't account for cgroup_attach() succeeding and just tried to attach to the same cgroup again which doesn't make sense. Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by:
-
- 26 Mar, 2020 6 commits
-
-
Stéphane Graber authored
cgroups: fix attaching to the unified cgroup
-
Christian Brauner authored
Signed-off-by: -
Stéphane Graber authored
tree-wide: fixes
-
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by:
-
- 25 Mar, 2020 4 commits
-
-
Stéphane Graber authored
lxc.service: Starts after remote-fs.target
-
Pierre-Elliott Bécue authored
Signed-off-by:Pierre-Elliott Bécue <becue@crans.org>
-
Christian Brauner authored
Signed-off-by: -
Christian Brauner authored
Signed-off-by:
-
- 24 Mar, 2020 4 commits
-
-
Stéphane Graber authored
Signed-off-by:Stéphane Graber <stgraber@ubuntu.com>
-
Stéphane Graber authored
Signed-off-by: -
Stéphane Graber authored
make dist: add missing files
-
Christian Brauner authored
lxc-download: Pre-release bump of compat
-
