Commit Graph

11381 Commits

Author SHA1 Message Date
Stéphane Graber
554060879b
github: Fix compiler version task for coverity
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2022-06-08 17:46:50 -04:00
Stéphane Graber
59d1841165
github: Fix bad syntax in cifuzz
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2022-06-08 17:44:08 -04:00
Christian Brauner
0f8c8f89b3
Merge pull request #4137 from brauner/2022-06-08.stgraber.master
build: remove autotools and finish meson port
2022-06-08 20:43:10 +02:00
Christian Brauner
b4b1f1498c
github/workflows/sanitizers: port sanitizers builds to meson
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
2022-06-08 20:15:07 +02:00
Christian Brauner
0ab1a63461
github/workflows: port all workflows to Ubuntu 22.04
So we have a new enough meson version everywhere.

Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
2022-06-08 20:15:07 +02:00
Christian Brauner
272f1ee460
github/workflows/cifuzz: ensure necessary paths are added
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
2022-06-08 20:15:07 +02:00
Christian Brauner
2fb1430b3f
github/workflows/build: remove sanitizer build
We have a separate workflow for this.

Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
2022-06-08 20:15:07 +02:00
Christian Brauner
77b2a6c405
github/workflows/build: add -Db_lto_mode=default
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
2022-06-08 20:15:07 +02:00
Christian Brauner
47991ce753
github/workflows/build: install lvvm as well
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
2022-06-08 20:15:07 +02:00
Christian Brauner
b8b31ab36a
oss-fuzz: more meson options
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
2022-06-08 20:15:07 +02:00
Christian Brauner
d679f7d85f
build: lxc-init doesn't need to build the whole config infra
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
2022-06-08 20:03:59 +02:00
Christian Brauner
575d0e34ae
build: add additional command line switches
In order to compile for fuzzers where we will need and want to turn a
bunch of things off add command line switches that allow us to do so.

Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
2022-06-08 20:03:05 +02:00
Christian Brauner
5b726537aa
build: use liblxc_sources everywhere
The old split didn't buy us a lot and causes problems when buidling with
sanitizers enabled so just use the full sources.

Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
2022-06-08 20:01:26 +02:00
Christian Brauner
6bb8d4ce31
config: make lxc-{containers,net}.in executable
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
2022-06-08 18:52:14 +02:00
Stéphane Graber
bb97e07995
Merge pull request #4136 from turrisxyz/Pinned-Dependencies-GitHub
chore: Set permissions for GitHub actions
2022-06-08 01:26:59 -04:00
Stéphane Graber
cd3d65155b
meson: Always defined IS_BIONIC
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2022-06-08 01:00:51 -04:00
Stéphane Graber
6ae86a9c17
src: Don't use ifdef/defined for config.h
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2022-06-08 00:47:05 -04:00
Stéphane Graber
9c3a240bef
github: Update coverity workflow for meson
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2022-06-08 00:47:04 -04:00
Stéphane Graber
6f9fabfcb8
github: Update build test for meson
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2022-06-08 00:47:03 -04:00
Stéphane Graber
826cc3ddca
README: Update for meson
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2022-06-08 00:47:02 -04:00
Stéphane Graber
f2c06c6c2d
doc: Update for meson
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2022-06-08 00:47:01 -04:00
Stéphane Graber
62423c89e7
meson: Add basic Makefile
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2022-06-08 00:47:00 -04:00
Stéphane Graber
4c8139f9cf
Remove autotools
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2022-06-08 00:46:59 -04:00
neilnaveen
fe3add2ab8 chore: Set permissions for GitHub actions
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.

- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions

https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions

https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs

[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)

Signed-off-by: neilnaveen <42328488+neilnaveen@users.noreply.github.com>
2022-06-08 01:08:12 +00:00
Christian Brauner
099bd13ce5
Merge pull request #4135 from stgraber/meson
More meson fixes
2022-06-07 23:51:34 +02:00
Stéphane Graber
7eac83c1b1
meson: Fix mntent include condition
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2022-06-07 17:26:47 -04:00
Stéphane Graber
61c40023d0
lxc/rexec: Use HAVE_FEXECVE
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2022-06-07 17:26:46 -04:00
Stéphane Graber
faa4ae06ef
meson: Add lxcmntent to unmount-namespace hook
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2022-06-07 17:18:14 -04:00
Stéphane Graber
199241209f
meson: Add missing prlimit include
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2022-06-07 17:18:13 -04:00
Stéphane Graber
7a489adb89
meson: Only build seccomp and selinux when needed
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2022-06-07 17:18:12 -04:00
Stéphane Graber
4c96107d1e
meson: Always define HAVE_LIBURING
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2022-06-07 17:18:11 -04:00
Stéphane Graber
869deb9173
meson: seccomp is optional
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2022-06-07 17:18:10 -04:00
Stéphane Graber
f7de7d7adf
meson: Fix on shallow git trees
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2022-06-07 17:18:09 -04:00
Stéphane Graber
d5dff814ac
meson: Add bionic detection
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2022-06-07 17:18:08 -04:00
Stéphane Graber
e18dbec746
meson: Fix RPM spec variables
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2022-06-07 17:18:07 -04:00
Stéphane Graber
8135966d1d
meson: Make lxc-user-nic setuid
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2022-06-07 17:18:06 -04:00
Stéphane Graber
1ccdc25349
meson: Don't include lxc-test-fuzzers
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2022-06-07 17:18:05 -04:00
Stéphane Graber
5055c73d91
meson: Skip static library when using sanitizer
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2022-06-07 17:18:04 -04:00
Stéphane Graber
8d77f43f5c
meson: Cleanup and fix includes
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2022-06-07 17:18:04 -04:00
Stéphane Graber
4dd5e0cf13
meson: Add coverity flag
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2022-06-07 17:18:03 -04:00
Christian Brauner
3d24d295ce
Merge pull request #4133 from dasteihn/sta/fallthrough
CODING_STYLE: add forgotten fallthrough
2022-06-07 13:20:05 +02:00
Philipp Stanner
3bba8eade7 CODING_STYLE: add forgotten fallthrough
Signed-off-by: Philipp Stanner <stanner@posteo.de>
2022-06-07 13:06:56 +02:00
Christian Brauner
4cda46cb33
Merge pull request #4130 from stgraber/master
Finalize the meson port
2022-06-03 10:32:25 +02:00
Stéphane Graber
9c562440e5
meson: Add RPM spec
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2022-06-02 16:50:01 -04:00
Stéphane Graber
eba7f7a6bc
meson: Rework configuration variables
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2022-06-02 16:50:00 -04:00
Stéphane Graber
7991f60047
meson: Tweak config for manpages
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2022-06-02 16:49:59 -04:00
Stéphane Graber
f80af4e12b
meson: Export more variables to doc
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2022-06-02 16:49:58 -04:00
Stéphane Graber
299f3f80d2
meson: Export LXC_DISTRO_SYSCONF
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2022-06-02 16:49:58 -04:00
Christian Brauner
6e4796b4e3
Merge pull request #4126 from stgraber/master
Complete meson port
2022-05-31 09:17:31 +02:00
Stéphane Graber
6105cc7f53
meson: Add apparmor profiles
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
2022-05-30 19:16:42 -04:00