cgfsng: remove freezer requirement

The freezer controller has been made optional in all other codepaths so
don't require it.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

autotools: fix lxc-{create,copy} build

After commit 2b670dfe lxc-create and lxc-copy fails with "undefined
symbol: get_fssize".

Closes #2730
Signed-off-by: Radostin Stoyanov <rstoyanov1@gmail.com>

utils: make keyring allocation failure non-fatal

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

apparmor: allow various remount,bind options

RW bind mounts need to be restricted for some paths in
order to avoid MAC restriction bypasses, but read-only bind
mounts shouldn't have that problem.

Additionally, combinations of 'nosuid', 'nodev' and
'noexec' flags shouldn't be a problem either and are
required with newer systemd versions, so let's allow those
as long as they're combined with 'ro,remount,bind'.
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>

Adds -qq flags to lvcreate commands

Adds -qq flags to lvcreate commands to avoid answer 'no' to ant questions the LVM subsystem asks to avoid hanging lxc-create command
Signed-off-by: tomponline <tomp@tomp.uk>

pam_cgfs: remove dependency & redundancy functions

Signed-off-by: 2xsec <dh48.jeong@samsung.com>

Signed-off-by: 2xsec <dh48.jeong@samsung.com>

Signed-off-by: 2xsec <dh48.jeong@samsung.com>

Signed-off-by: 2xsec <dh48.jeong@samsung.com>

Signed-off-by: 2xsec <dh48.jeong@samsung.com>

conf: s/ty/tty/g

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

replace read & write syscalls with nointr functions

dlog: move match_dlog_fds()

Signed-off-by: 2xsec <dh48.jeong@samsung.com>

Signed-off-by: 2xsec <dh48.jeong@samsung.com>

Signed-off-by: 2xsec <dh48.jeong@samsung.com>

Fix spacing error in namespace.c

Signed-off-by: Jungsub Shin supsup5642@tmax.co.kr

include: correctly include macro.h

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

lxcmntent: coding rules

log: fix too wide or inconsistent non-owner permissions

Signed-off-by: 2xsec <dh48.jeong@samsung.com>

Signed-off-by: 2xsec <dh48.jeong@samsung.com>

Signed-off-by: 2xsec <dh48.jeong@samsung.com>

confile: remove debug printf()s

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

conf: expand shmounts lxc.mount.auto option

Needed-by: https://github.com/lxc/lxd/issues/5227Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

Leave it up to the caller for now until we have a clear way to do
this without causing double mounts etc.

Needed-by: https://github.com/lxc/lxd/issues/5227Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

Allow users to specify a path in the container they want to use.
This will help LXD.

Needed-by: https://github.com/lxc/lxd/issues/5227Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

Spelling