Wolfgang Bumiller
e9c7c23a84
bump version to 3.1.0-6
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-08-13 14:41:55 +02:00
Wolfgang Bumiller
44f421318a
merge fix for 'getent' in lxc-attach
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-08-13 14:41:10 +02:00
Wolfgang Bumiller
39994e5496
fix issues with shell detection on attach
...
Merge: attach: always use getent
Commit message:
In debian buster, some libnss plugins (if installed) can
cause getpwent to segfault instead of erroring out cleanly.
To avoid this, stick to always using getent.
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-08-13 14:41:05 +02:00
Wolfgang Bumiller
7448d87373
bump version to 3.1.0-5
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-08-09 10:51:15 +02:00
Wolfgang Bumiller
4e7aceadeb
merge new apparmor profile update
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-08-09 10:49:43 +02:00
Wolfgang Bumiller
cf5ee1a924
bump version to 3.1.0-4
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-08-07 10:39:57 +02:00
Wolfgang Bumiller
5b9827461e
update apparmor profile
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-08-07 10:39:57 +02:00
Wolfgang Bumiller
200de80309
d/postinst: reload service files
...
Otherwise the upgrade from -3 to -4 issues the
reload-or-try-restart on the old service which has no
ExecReload yet.
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-08-07 10:39:57 +02:00
Wolfgang Bumiller
a5021a1ac4
d/rules: compat level 10 fixups
...
And add a patch to add an ExecReload for lxc.service.
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-08-07 10:24:45 +02:00
Wolfgang Bumiller
6189a9f01a
d/rules: whitespace fixup
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-08-07 10:19:55 +02:00
Thomas Lamprecht
e3b12b115d
bump debian compat level to 10
...
This allows to remove a few dependencies and flags from dh which are
now implied or obsolete
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-05-22 12:28:29 +02:00
Thomas Lamprecht
177f98f6f7
buildsys: use dpkg-dev makefile helpers for pkg info
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-05-22 12:28:08 +02:00
Wolfgang Bumiller
4684650018
bump version to 3.1.0-3
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-02-12 08:07:15 +01:00
Wolfgang Bumiller
907c590de2
merge fix for CVE-2019-5736
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-02-12 08:07:07 +01:00
Wolfgang Bumiller
e59455365d
bump version to 3.1.0-2
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-01-17 09:34:34 +01:00
Wolfgang Bumiller
352dbb681f
merge 2 fixups:
...
* Revert "conf: remove extra MS_BIND with sysfs:mixed"
This should let privileged Ubuntu 14.04 containers boot
again.
* conf: use SYSERROR on lxc_write_to_file errors
Slightly more useful error output in a specific error
case.
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-01-17 09:34:34 +01:00
Wolfgang Bumiller
ead59884ab
buildsys: use dpkg-parsechangelog
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-01-17 09:34:34 +01:00
Wolfgang Bumiller
834bb4d705
update to lxc-3.1.0
...
The default cgroup pattern was switched from lxc/%n to
lxc.payload/%n, so add a ./configure option to revert this
change as PVE expects containers in lxc/%n.
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-01-02 14:39:37 +01:00
Wolfgang Bumiller
b904dc2ca6
bump version to 3.0.2+pve1-5
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-01-02 09:05:24 +01:00
Wolfgang Bumiller
a232f194cc
Revert "d/control: bump compat to 10"
...
The new dh_systemd_start parameter behavior is stupid.
Might be less so with compat 11 later on...
This reverts commit 4d672101f1
.
2019-01-02 09:05:24 +01:00
Oguz Bektas
64ca2b12bb
fix typo in package description
...
Signed-off-by: Oguz Bektas <o.bektas@proxmox.com>
2018-11-20 10:13:38 +01:00
Wolfgang Bumiller
03d77c24c8
bump version to 3.0.2+pve1-4
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-11-16 12:13:16 +01:00
Wolfgang Bumiller
71a3cc63d4
apparmor: allow various ro,remount,bind mounts
...
Required to enable new systemd sandboxing mechanisms.
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-11-15 12:21:57 +01:00
Wolfgang Bumiller
7502ffe9e8
d/control: add missing build-dependencies
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-11-08 10:01:39 +01:00
Wolfgang Bumiller
2c4104dacd
d/control: set Source package to lxc-pve
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-11-08 09:42:05 +01:00
Wolfgang Bumiller
4d672101f1
d/control: bump compat to 10
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-11-08 09:42:05 +01:00
Wolfgang Bumiller
c63c177de1
buildsys: split deb target into deb and src
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-11-08 09:42:05 +01:00
Wolfgang Bumiller
dddc7ab89d
bump version to 3.0.2+pve1-3
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-10-11 11:52:30 +02:00
Wolfgang Bumiller
f62d31fd51
fixup patch names namespace separation patch
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-10-11 11:49:40 +02:00
Rhonda D'Vine
58777a9bf1
Add debian/SOURCE to docs to install
...
The lxc packages were missing the SOURCE file in the docs.
Signed-off-by: Rhonda D'Vine <rhonda@proxmox.com>
2018-09-06 09:28:59 +02:00
Wolfgang Bumiller
c9671e63ae
remove some non-default lxc.cap.drop entries
...
This really shouldn't be that much distro specific...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-09-04 15:00:18 +02:00
Wolfgang Bumiller
3d34e0e56c
bump version to 3.0.2+pve1-2
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-09-04 14:51:22 +02:00
Wolfgang Bumiller
ea36bf978f
remove .gitignore as it contains only 1 entry
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-08-27 11:49:29 +02:00
Wolfgang Bumiller
dec9e503ef
buildsys: remove update-template-configs target
...
Most of them aren't needed and we want to try to get rid of
these distro-specific configuration files in the long run.
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-08-27 11:48:09 +02:00
Thomas Lamprecht
612ec1f054
config: opensuse.common: unset lxc.tty.dir key
...
not needed for *suse containers and results in cases where we get two
agetty processes when using xterm.js/noVNC (e.g., one on /dev/tty1
and one on /dev/lxc/tty1)
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2018-08-27 11:47:31 +02:00
Wolfgang Bumiller
f46e8fbf9b
bump version to 3.0.2+pve1-1
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-08-20 11:51:46 +02:00
Fabian Grünbichler
289d480ec8
bump version to 3.0.1+pve2-1
2018-08-07 11:41:59 +02:00
Fabian Grünbichler
3aee60181b
cherry-pick CVE-2018-6556 fix
...
from upstream's stable-3.0 branch
2018-08-07 11:39:50 +02:00
Wolfgang Bumiller
2d8021b3bf
bump version to 3.0.1+pve1-1
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-07-26 14:46:33 +02:00
Wolfgang Bumiller
41a800cdc2
bump version to 3.0.0-3
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-05-02 10:50:37 +02:00
Wolfgang Bumiller
99be5c8cba
merge upstream bugfixes:
...
* fix some memory leaks
* fix temp file creation
* fix rootfs pinning with NFS
* drop supplementary groups on attach
* fix gid=5 mount option on /dev/pts
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-05-02 10:43:05 +02:00
Wolfgang Bumiller
5c8b444abd
bump version to 3.0.0-2
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-03-30 10:20:02 +02:00
Wolfgang Bumiller
9cd5bbf7b9
install lxc-template configs again
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-03-30 10:19:28 +02:00
Wolfgang Bumiller
f49c89aca7
update configs from lxc-templates
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-03-30 10:17:10 +02:00
Wolfgang Bumiller
e15af1ab9c
buildsys: GITVERSION fixup
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-03-30 09:50:10 +02:00
Wolfgang Bumiller
1513a0b50a
bump version to 3.0.0-1
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-03-28 14:05:46 +02:00
Fabian Grünbichler
dc45ad08e4
bump version to 2.1.1-3
...
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
2018-03-05 14:45:13 +01:00
Fabian Grünbichler
39840a317e
replace AA's feature-set with custom one
...
Debian's apparmor package introduced feature-set pinning in Debian
Stretch 9.4 to prevent problems with AA profiles packaged in Debian
Stretch which target Debian Stretch's 4.9 based kernel.
Since our LXC profiles rely on features not included in this feature
set, we need to replace the pinned feature-set with our own.
The features file is not a conf-file, so it is possible to just
dpkg-divert it on installation/upgrades.
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
2018-03-05 14:45:13 +01:00
Fabian Grünbichler
7bdcb5215d
add AA feature set for 4.13.13-6-pve
...
copied from /etc/apparmor.d/cache/.features with disabled
feature-pinning to obtain kernel feature set
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
2018-03-05 14:45:13 +01:00
Wolfgang Bumiller
ace8b8211d
bump version to 2.1.1-2
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2017-11-24 13:48:07 +01:00