Commit Graph

8686 Commits

Author SHA1 Message Date
KATOH Yasufumi
0cf801fb65 doc: Add the lxc.net.[i].veth.mode option in Japanese lxc.container.conf(5)
Signed-off-by: KATOH Yasufumi <karma@jazz.email.ne.jp>
2019-09-20 18:16:47 +09:00
KATOH Yasufumi
6da6d73e44 doc: Add Japanese pam_cgfs(8) man page
* translate pam_cgfs(8)
* support --{enable,disable}-{commands,tools} in doc/ja

Signed-off-by: KATOH Yasufumi <karma@jazz.email.ne.jp>
2019-09-20 01:15:12 +09:00
Stéphane Graber
35b76c7b4b
Merge pull request #3141 from avhvr/man-pam_cgfs
doc: add man page for pam_cgfs
2019-09-18 17:26:18 +02:00
Venkata Harshavardhan Reddy Allu
a98ad25d3a doc: add man page for pam_cgfs
Signed-off-by: Venkata Harshavardhan Reddy Allu <venkataharshavardhan_ven@srmuniv.edu.in>
2019-09-18 18:38:23 +05:30
Christian Brauner
d62ac98582
Merge pull request #3134 from jcfaracco/loop
utils: Copying source filename to avoid missing info
2019-09-06 09:10:22 +02:00
Julio Faracco
a70c9e85a6 utils: Copying source filename to avoid missing info.
Some applications use information from LOOP_GET_STATUS64. The file
associated with loop device is pointed inside structure field
`lo_file_name`. The current code is setting up a loop device without
this information. A legacy example of code checking this is cryptsetup:

    static char *_ioctl_backing_file(const char *loop)
    {
        struct loop_info64 lo64 = {0};
        int loop_fd;

        loop_fd = open(loop, O_RDONLY);
        if (loop_fd < 0)
            return NULL;

        if (ioctl(loop_fd, LOOP_GET_STATUS64, &lo64) < 0) {
            close(loop_fd);
            return NULL;
        }

        lo64.lo_file_name[LO_NAME_SIZE-2] = '*';
        lo64.lo_file_name[LO_NAME_SIZE-1] = 0;

        close(loop_fd);
        return strdup((char*)lo64.lo_file_name);
    }

It will return an empty string because lo_file_name was not set.

Signed-off-by: Julio Faracco <jcfaracco@gmail.com>
2019-09-05 17:52:17 -03:00
Stéphane Graber
13a885dd10
Merge pull request #3132 from brauner/2019-09-02/cgroup_improvements
cgroups: unify cgfsng_{un}freeze()
2019-09-02 20:58:28 -06:00
Christian Brauner
ee3a77758d
cgroups: unify cgfsng_{un}freeze()
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
2019-09-02 23:51:19 +02:00
Stéphane Graber
f1e0e31261
Merge pull request #3130 from brauner/2019-08-30/cgroup_fixes
cgroup: bugfixes
2019-08-29 09:45:28 -06:00
Christian Brauner
c18c6b63b8
cgroups: initialize cgroup root directory - encore
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
2019-08-29 14:05:17 +02:00
Christian Brauner
81468ea7c0
cgroups: check for empty cgroups on freeze/unfreeze
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
2019-08-29 13:56:56 +02:00
Stéphane Graber
8ba5849018
Merge pull request #3129 from brauner/2019-08-28/fix_cgroup_braino
cgroups: initialize cgroup root directory
2019-08-28 12:53:45 -06:00
Christian Brauner
6607d6e91d
cgroups: initialize cgroup root directory
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
2019-08-28 20:33:39 +02:00
Christian Brauner
f327a062c2
Merge pull request #3112 from avkvl/fix_count_user_network_interfaces
try to fix search user instead of search substring
2019-08-28 13:46:09 +02:00
Christian Brauner
72f22067d9
Merge pull request #3055 from Rachid-Koucha/patch-3
Use file/directory names from macro.h
2019-08-27 22:50:34 +02:00
Stéphane Graber
b14cd8ac4f
Merge pull request #3120 from brauner/2019-08-15/cgroup2_freezer
cgroups: support cgroup2 freezer
2019-08-27 14:01:41 -06:00
Stéphane Graber
44c7d9c39c
Merge pull request #3097 from lpirl/proc-1-uid_map-permission-denied
suppress false-negative error in templates and nvidia hook
2019-08-27 13:38:57 -06:00
Stéphane Graber
61287e5241
Merge pull request #3122 from terceiro/lxc-attach-exit-status
lxc-attach: make sure exit status of command is returned
2019-08-27 13:36:04 -06:00
Stéphane Graber
082606980e
Merge pull request #3117 from P-EB/master
[aa-profile] Deny access to /proc/acpi/**
2019-08-27 13:34:28 -06:00
Pierre-Elliott Bécue
ec90f35b4c
[aa-profile] Deny access to /proc/acpi/**
Signed-off-by: Pierre-Elliott Bécue <becue@crans.org>
2019-08-27 16:07:13 +02:00
Antonio Terceiro
576b950f6c lxc-attach: make sure exit status of command is returned
Commit ae68cad763d5b39a6a9e51de2acd1ad128b720ca introduced a regression that
makes lxc-attach ignore the exit status of the executed command. This was first
identified in 3.0.4 LTS, while it worked on 3.0.3.

  # lxc-attach --version
  3.0.4
  # lxc-attach -n test false; echo $?
  0

Signed-off-by: Antonio Terceiro <terceiro@debian.org>
Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=934983
2019-08-26 16:10:51 -03:00
Christian Brauner
772900e7d2
Merge pull request #3124 from qianfan-Zhao/lxc-create-abs-path
lxc-create: check absoule path for param '--dir'
2019-08-26 17:15:13 +02:00
Christian Brauner
8d661d380f
cgfsng: mount pure unified cgroup layout correctly
When pure cgroup unified mode is used we cannot pre-mount a tmpfs as this
confuses systemd.
Users should also set lxc.mount.auto = cgroup:force to ensure that systemd in
the container and on the host use identical cgroup layouts.

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
2019-08-26 16:40:51 +02:00
qianfan Zhao
14aab2c733 lxc-create: check absoule path for param '--dir'
Fix: #3123

Signed-off-by: qianfan Zhao <qianfanguijin@163.com>
2019-08-19 10:00:08 +08:00
Christian Brauner
942e193ef9
cgroups: support cgroup2 freezer
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
2019-08-15 20:00:14 +02:00
Christian Brauner
faec88e5ac
Merge pull request #3119 from Blub/2019-08-13/fix_lxc_attach_getent_stderr
attach: don't close stdout of getent
2019-08-13 14:38:42 +02:00
Wolfgang Bumiller
59f0e209cc attach: don't close stdout of getent
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-08-13 14:24:30 +02:00
Christian Brauner
2ffda4c4f1
Merge pull request #3113 from jcfaracco/clang
utils: Fix wrong integer of a function parameter.
2019-08-03 10:33:30 -04:00
Julio Faracco
7c3d3976fa utils: Fix wrong integer of a function parameter.
If SSL is enabled, utils will include function `do_sha1_hash()` to
generate a sha1 encrypted buffer. Last function argument of
`EVP_DigestFinal_ex()` requires a `unsigned int` but the current
parameter is an `integer` type.

See error:
utils.c:350:38: error: passing 'int *' to parameter of type 'unsigned int *' converts between pointers to integer types with different sign
      [-Werror,-Wpointer-sign]
        EVP_DigestFinal_ex(mdctx, md_value, md_len);
                                            ^~~~~~
/usr/include/openssl/evp.h:549:49: note: passing argument to parameter 's' here
                                  unsigned int *s);

Signed-off-by: Julio Faracco <jcfaracco@gmail.com>
2019-08-03 02:16:13 -03:00
Alexander Kriventsov
9ed8c96ffb try to fix search user instead of search substring
Signed-off-by: Alexander Kriventsov <akriventsov@nic.ru>
2019-07-30 12:39:52 +03:00
Christian Brauner
df78878351
Merge pull request #3107 from tomponline/tp-wlan-detach
lxccontainer: do_lxcapi_detach_interface to support detaching wlan devs
2019-07-29 12:10:46 -04:00
Thomas Parrott
e4103cf63f lxccontainer: do_lxcapi_detach_interface to support detaching wlan devices
Signed-off-by: Thomas Parrott <thomas.parrott@canonical.com>
2019-07-29 16:54:27 +01:00
Stéphane Graber
f9f15a7a76
Merge pull request #3109 from brauner/2019-07-28/bugfixes
cgroups: initialize cpuset properly
2019-07-28 23:43:24 -04:00
Christian Brauner
b31d62b847
cgroups: initialize cpuset properly
Closes #3108.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
2019-07-28 23:13:26 +02:00
Wolfgang Bumiller
9af779ca32
Merge pull request #3102 from brauner/2019-07-22/bugfixes
tree-wide: initialize all auto-cleanup variables
2019-07-28 19:07:21 +02:00
Stéphane Graber
299d022db7
Merge pull request #3106 from brauner/2019-07-25/bugfixes
network: restore ability to move nl80211 devices
2019-07-26 09:36:24 -04:00
Christian Brauner
3dd7829433
network: restore ability to move nl80211 devices
Closes #3105.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
2019-07-26 09:20:40 +02:00
Christian Brauner
d0b950440a
Merge pull request #3103 from tych0/info-on-enosys
pidfds: don't print a scary warning on ENOSYS
2019-07-23 17:48:12 +02:00
Tycho Andersen
9c57920566 pidfds: don't print a scary warning on ENOSYS
Most kernels don't have this functionality yet, and so the warning is
printed a lot. Our people are scared of warnings, so let's make it INFO
instead in this case.

Signed-off-by: Tycho Andersen <tycho@tycho.ws>
2019-07-23 09:43:38 -06:00
Christian Brauner
6453ba565e
tree-wide: initialize all auto-cleanup variables
Closes: #3101.
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
2019-07-23 16:41:46 +02:00
Stéphane Graber
5c338ef44e
Re-enable devel flag
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2019-07-22 18:42:42 -04:00
Stéphane Graber
ad48c77c50
Release LXC 3.2.1
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2019-07-22 18:32:29 -04:00
Stéphane Graber
65123ff553
Release LXC 3.2.0
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2019-07-22 18:24:40 -04:00
Stéphane Graber
23f4d86859
lxc-download: Pre-release bump of compat
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2019-07-22 18:23:48 -04:00
Lukas Pirl
16a312e118
suppress false-negative error in templates and nvidia hook
``/proc`` might be mounted with ``hidepid=2``.
This makes ``/proc/1/…`` appear absent for non-root users.
When using the templates or the nvidia hook as a non-root user
(e.g., when creating unprivileged containers) the error
"/proc/1/uid_map: No such file or directory" is printed.
Since the script works correctly despite the error, this error
message might be confusing for users.

Signed-off-by: Lukas Pirl <git@lukas-pirl.de>
2019-07-22 14:39:23 +02:00
Christian Brauner
57c73b9f90
Merge pull request #3092 from Blub/seccomp-mem-rdwr
seccomp: open memfd read-write
2019-07-16 15:17:11 +02:00
Wolfgang Bumiller
aad859c42c seccomp: open memfd read-write
Makes it easier to implement syscalls which need to write to
a buffer passed by user space as a pointer.

Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-07-16 14:59:18 +02:00
Christian Brauner
8b4aaf8b53
Merge pull request #2921 from tomponline/tp-2019-03-26/routedveth
Adds veth router mode
2019-07-11 14:41:00 +02:00
tomponline
3e5c2e691b doc: Documents the lxc.net.[i].veth.mode option
Signed-off-by: Thomas Parrott <thomas.parrott@canonical.com>
2019-07-11 12:37:23 +01:00
Thomas Parrott
6dfa9581af network: Adds veth router mode static routes and proxy entries
Signed-off-by: Thomas Parrott <thomas.parrott@canonical.com>
2019-07-11 12:37:23 +01:00