Commits · fa1a9b4d54cda7fdc8a6a3f20b6baa73edec5c9a · Chen Yisong / lxc

06 Jul, 2020 3 commits
- Merge pull request #3479 from brauner/2020-07-06/fixes · fa1a9b4d
  Stéphane Graber authored Jul 06, 2020
```
openpty: improve implementation and handling of platforms without it
```
  fa1a9b4d
- openpty: improve implementation and handling of platforms without it · 35eb5cdc
  Christian Brauner authored Jul 06, 2020
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  35eb5cdc
- Merge pull request #3478 from brauner/2020-07-05/fixes · 6d3b6851
  Stéphane Graber authored Jul 05, 2020
```
openpty: fix faulty rename
```
  6d3b6851
05 Jul, 2020 8 commits
- openpty: fix faulty rename · 0a8409df
  Christian Brauner authored Jul 05, 2020
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  0a8409df
- Merge pull request #3477 from brauner/2020-07-05/fixes · 184de6b8
  Stéphane Graber authored Jul 05, 2020
```
tree-wide: update terminal terminology once more
```
  184de6b8
- tree-wide: s/pts/pty/g · 41808e20
  Christian Brauner authored Jul 05, 2020
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  41808e20
- tree-wide: s/ptmx/ptx/g · 36a94ce8
  Christian Brauner authored Jul 05, 2020
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  36a94ce8
- Merge pull request #3476 from brauner/2020-07-05/fixes · 3e519859
  Stéphane Graber authored Jul 05, 2020
```
cgroups: handle empty bpf log buffer
```
  3e519859
- cgroups: handle empty bpf log buffer · fddbd866
  Christian Brauner authored Jul 05, 2020
```
Link: https://launchpadlibrarian.net/487274879/buildlog_ubuntu-eoan-amd64.lxc_1:4.0.3+master~20200705-1541-0ubuntu1~eoan_BUILDING.txt.gzSigned-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  fddbd866
- Merge pull request #3475 from brauner/2020-07-05/fixes · 40f02ccd
  Stéphane Graber authored Jul 05, 2020
```
cgroups: fix bpf device program generation
```
  40f02ccd
- cgroups: fix bpf device program generation · ee9d3ef0
  Christian Brauner authored Jul 05, 2020
```
Closes: #3473.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  ee9d3ef0
03 Jul, 2020 8 commits
- Merge pull request #3474 from brauner/2020-07-03/fixes · 18448244
  Stéphane Graber authored Jul 03, 2020
```
api-extensions: add seccomp_allow_deny_syntax extension
```
  18448244
- api-extensions: add seccomp_allow_deny_syntax extension · c312db11
  Christian Brauner authored Jul 03, 2020
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  c312db11
- Merge pull request #3472 from brauner/2020-07-03/fixes · 22e97b8e
  Stéphane Graber authored Jul 03, 2020
```
fixes
```
  22e97b8e
- cgroup2_devices: fix access rule parsing · beafa987
  Christian Brauner authored Jul 03, 2020
```
Closes: #3473.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  beafa987
- cgroups: use empty {} to initialize struct · 50329f28
  Christian Brauner authored Jul 03, 2020
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  50329f28
- seccomp: support allowlist/denylist in profiles · 78522aa9
  Christian Brauner authored Jul 03, 2020
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  78522aa9
- cgroups: update terminology II · 9ea99cf7
  Christian Brauner authored Jul 03, 2020
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  9ea99cf7
- cgroups: update terminology · 29a01c37
  Christian Brauner authored Jul 03, 2020
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  29a01c37
01 Jul, 2020 2 commits
- Merge pull request #3469 from johanneskastl/20200630_Kastl_fix_gpg_option · ffa68840
  Stéphane Graber authored Jul 01, 2020
```
templates/lxc-download.in: use GPG option "--receive-keys"
```
  ffa68840
- templates/lxc-download.in: use GPG option --receive-keys instead of --recv-keys · 409040e7
  Johannes Kastl authored Jun 30, 2020
```
Signed-off-by: Johannes Kastl <kastl@b1-systems.de>
```
  409040e7
30 Jun, 2020 4 commits
- Merge pull request #3468 from johanneskastl/20200630_Kastl_fix_shell_download_template · 5408652d
  Stéphane Graber authored Jun 30, 2020
```
templates/lxc-download.in: fix wrong if-condition
```
  5408652d
- templates/lxc-download.in: make shellcheck happy · eb44984a
  Johannes Kastl authored Jun 30, 2020
```
Signed-off-by: Johannes Kastl <kastl@b1-systems.de>
```
  eb44984a
- templates/lxc-download.in: fix wrong if condition (use the result of the gpg… · 18e18d4c
  Johannes Kastl authored Jun 30, 2020
```
templates/lxc-download.in: fix wrong if condition (use the result of the gpg command, not the result when executing the result of the gpg command)
Signed-off-by: Johannes Kastl <kastl@b1-systems.de>
```
  18e18d4c
- Merge pull request #3466 from alivenets/fix-no-new-privs · f88d8e68
  Christian Brauner authored Jun 30, 2020
```
attach: set no_new_privs flag after LSM label
```
  f88d8e68
29 Jun, 2020 6 commits

attach: set no_new_privs flag after LSM label · 6ce8e678

authored Jun 30, 2020

In `start.c:1284`, no_new_privs flag is set after LSM label is set.
Also, in `lxc.container.conf` documentation it is written that:
```
Note that PR_SET_NO_NEW_PRIVS is applied after the container has
changed into its intended AppArmor profile or SElinux context.
```
This commit fixes the behavior of `lxc_attach` by moving
`PR_SET_NO_NEW_PRIVS` set logic after LSM for the process is configured;

Closes #3393
Signed-off-by: Alexander Livenets <a.livenets@gmail.com>

6ce8e678

Merge pull request #3465 from brauner/2020-06-19/clone_into_cgroup · 7c8b10e5
Stéphane Graber authored Jun 29, 2020
```
clone_into_cgroup: fixes
```
7c8b10e5

start: use __aligned_u64 · 0aff04e0

authored Jun 29, 2020

Closes: Coverity 1465044.
Closes: Coverity 1465046.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

0aff04e0

start: initialize cgroup_fd · 84b66ced

authored Jun 29, 2020

Fixes: Coverity 1465045.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

84b66ced

Merge pull request #3464 from brauner/2020-06-19/clone_into_cgroup · d5827bc0
Stéphane Graber authored Jun 29, 2020
```
lxc: support CLONE_INTO_CGROUP
```
d5827bc0
lxc: support CLONE_INTO_CGROUP · f7176c3e
Christian Brauner authored Jun 29, 2020
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
f7176c3e

26 Jun, 2020 7 commits
- Merge pull request #3463 from brauner/2020-06-26/fixes · 3a9018bb
  Stéphane Graber authored Jun 26, 2020
```
confile: handle overflow in lxc.time.offset.{boot,monotonic}
```
  3a9018bb
- Merge pull request #3462 from tenforward/japanese · 11e5f16a
  Stéphane Graber authored Jun 26, 2020
```
Update Japanese lxc.container.conf(5)
```
  11e5f16a
- start: preserve time namespace · f1c43439
  Christian Brauner authored Jun 26, 2020
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  f1c43439
- confile: handle overflow in lxc.time.offset.{boot,monotonic} · 07f89c1e
  Christian Brauner authored Jun 26, 2020
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  07f89c1e
- doc: Add lxc.time.offset.* to Japanese lxc.container.conf(5) · bb144af2
  KATOH Yasufumi authored Jun 26, 2020
```
and fix a type in English man page.
Update for commit 7fb5a8dfSigned-off-by: KATOH Yasufumi <karma@jazz.email.ne.jp>
```
  bb144af2
- doc: Add veth vlan bridge options to Japanese lxc.container.conf(5) · 6fcaba05
  KATOH Yasufumi authored Jun 26, 2020
```
Update for commit a789ca4cSigned-off-by: KATOH Yasufumi <karma@jazz.email.ne.jp>
```
  6fcaba05
- Merge pull request #3461 from brauner/2020-06-25/time_namespace · b2ff0ccc
  Stéphane Graber authored Jun 25, 2020
```
time namespace support
```
  b2ff0ccc
25 Jun, 2020 2 commits
- doc: add lxc.time.offset.{boot,monotonic} · 7fb5a8df
  Christian Brauner authored Jun 26, 2020
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  7fb5a8df
- api: add time_namespace extension · b1248e47
  Christian Brauner authored Jun 26, 2020
```
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
```
  b1248e47