Christian Brauner
|
309ae2876f
|
conf: add lxc_wants_cap() helper
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2021-01-04 11:16:31 +01:00 |
|
Christian Brauner
|
fa934e3e24
|
macro: define all capabilities
Fixes: #3612
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2021-01-04 11:16:31 +01:00 |
|
Christian Brauner
|
7b4cd4681d
|
conf: add new capabilities CAP_{BLOCK_SUSPEND,PERFMON,BPF,CAP_CHECKPOINT_RESTORE}
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2021-01-04 10:58:11 +01:00 |
|
Christian Brauner
|
f2da98c045
|
conf: define missing capabilities
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2021-01-04 10:50:07 +01:00 |
|
Christian Brauner
|
24b77f47ad
|
macro: use ascending order for capabilities
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2021-01-04 10:45:44 +01:00 |
|
Stéphane Graber
|
bfcd663fc7
|
Merge pull request #3608 from brauner/2020-12-27/no_rootfs
bugfixes
|
2020-12-28 05:39:53 -05:00 |
|
Christian Brauner
|
31b84c7a02
|
cgroup2: move bpf device cgroup program to struct cgroup_ops
Cc: stable-4.0
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-27 18:44:00 +01:00 |
|
Christian Brauner
|
c1c9193cfc
|
utils: allow cross-device resolution
This is needed to enable containers without a rootfs.
Fixes: #3607
Cc: stable-4.0
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-27 11:19:51 +01:00 |
|
Stéphane Graber
|
708e0653c8
|
Merge pull request #3603 from brauner/2020-12-15/bugfixes
confile: don't accidently alter lxc.cgroup.dir
|
2020-12-15 09:08:44 -05:00 |
|
Christian Brauner
|
c583072d67
|
confile: don't accidently alter lxc.cgroup.dir
Cc: stable-4.0
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-15 11:58:35 +01:00 |
|
Christian Brauner
|
667fcc0e3c
|
confile: cleanup set_config_hooks()
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-15 11:54:34 +01:00 |
|
Stéphane Graber
|
8a0e2272ac
|
Merge pull request #3601 from brauner/2020-12-14/bugfixes
conf: fix block-device based rootfs mounting
|
2020-12-14 17:42:29 -05:00 |
|
Christian Brauner
|
26ea5533c9
|
conf: fix block-device based rootfs mounting
Fixes: #3598
Cc: stable-4.0
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-14 17:52:44 +01:00 |
|
Christian Brauner
|
970c8d964d
|
Merge pull request #3600 from zhenr667/3091
unmounted proc/sys/net by dropping CAP_NET_ADMIN
|
2020-12-14 10:31:36 +01:00 |
|
zhenr667
|
e8b9c9ec6f
|
unmounted proc/sys/net if dropping CAP_NET_ADMIN
Signed-off-by: Henry Zhang <henryzhang99@gmail.com>
|
2020-12-13 16:00:59 -06:00 |
|
Stéphane Graber
|
3aa3407f34
|
Merge pull request #3595 from brauner/2020-12-08/fixes
tree-wide: fixes
|
2020-12-10 15:37:24 -05:00 |
|
Christian Brauner
|
c3e4896776
|
criu: cleanup load_tty_major_minor()
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-10 20:49:45 +01:00 |
|
Christian Brauner
|
1530e041bb
|
confile_utils: cleanup strprint()
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-10 20:41:56 +01:00 |
|
Christian Brauner
|
bcdeed91f0
|
confile: cleanup set_config_net_l2proxy()
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-10 20:39:55 +01:00 |
|
Christian Brauner
|
b41ff502ff
|
conf: fix unchecked return value
Fixes: Coverity: 1465854
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-10 20:39:55 +01:00 |
|
Christian Brauner
|
999f5140b7
|
utils: fix unchecked return value
Fixes: Coverity 1465853
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-10 20:39:55 +01:00 |
|
Christian Brauner
|
504ce601ba
|
cgroups/cgfsng: remove logically dead code
Fixes: Coverity 1461761
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-10 20:39:55 +01:00 |
|
Christian Brauner
|
ae9ad0309d
|
storage/btrfs: add missing return
Fixes: Coverity 1461749
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-10 20:39:55 +01:00 |
|
Christian Brauner
|
25619b9984
|
network: use empty initializer
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-10 20:39:55 +01:00 |
|
Christian Brauner
|
af9bfc22e9
|
storage/lvm: cleanup do_lvm_create()
Fixes: Coverity 1461741
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-10 20:39:55 +01:00 |
|
Christian Brauner
|
8b961418b7
|
utils: cleanup get_rundir()
Fixes: Coverity 1461740
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-10 20:39:55 +01:00 |
|
Christian Brauner
|
f175de7c68
|
lxclock: cleanup lxclock_name()
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-10 20:39:55 +01:00 |
|
Christian Brauner
|
e00c91eb33
|
lxclock: cleanup dump_stacktrace()
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-10 20:39:54 +01:00 |
|
Christian Brauner
|
e442322914
|
lxclock: cleanup lxc_putlock()
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-10 20:39:54 +01:00 |
|
Christian Brauner
|
129c915f8d
|
lxclock: cleanup lxcunlock()
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-10 20:39:54 +01:00 |
|
Christian Brauner
|
2263fd997d
|
lxclock: cleanup lxclock()
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-10 20:39:54 +01:00 |
|
Christian Brauner
|
82c1fd646a
|
lxclock: cleanup lxclock_name()
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-10 20:39:54 +01:00 |
|
Christian Brauner
|
a04dc6376c
|
lxclock: cleanup lxc_newlock()
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-10 20:39:54 +01:00 |
|
Christian Brauner
|
3274bfb5f1
|
lxclock: logically dead code
Fixes: Coverity 1461722
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-10 20:39:54 +01:00 |
|
Christian Brauner
|
bc00122282
|
cmd/lxc_init: ignore return value
Fixes: Coverity 1440390
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-10 20:39:54 +01:00 |
|
Christian Brauner
|
546d016e56
|
confile_utils: cleanup sig_parse()
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-10 20:39:53 +01:00 |
|
Christian Brauner
|
2a169aec03
|
confile_utils: cleanup rt_sig_num()
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-10 20:39:53 +01:00 |
|
Christian Brauner
|
50692dc1d4
|
confile_utils: cleanup sig_num()
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-10 20:39:53 +01:00 |
|
Christian Brauner
|
a011ec99ba
|
confile_utils: cleanup lxc_inherit_namespace()
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-10 20:39:53 +01:00 |
|
Christian Brauner
|
fd47e5f1da
|
confile_utils: cleanup lxc_container_name_to_pid()
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-10 20:39:53 +01:00 |
|
Christian Brauner
|
49aaa7546f
|
lxc: add cleanup helpers
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-10 20:39:53 +01:00 |
|
Christian Brauner
|
f6261b4630
|
confile_utils: cleanup new_hwaddr()
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-10 20:39:53 +01:00 |
|
Christian Brauner
|
ffb7e0f6c3
|
confile_utils: cleanup network_ifname()
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-10 20:39:52 +01:00 |
|
Christian Brauner
|
4f3de2ac12
|
confile_utils: cleanup set_config_bool_item()
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-10 20:39:52 +01:00 |
|
Christian Brauner
|
21af2fbed1
|
confile_utils: cleanup set_config_string_item_max()
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-10 20:39:52 +01:00 |
|
Christian Brauner
|
f4d287eaa2
|
confile_utils: cleanup set_config_string_item()
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-10 20:39:52 +01:00 |
|
Christian Brauner
|
6998880b52
|
confile_utils: cleanup lxc_ipvlan_flag_to_isolation()
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-10 20:39:52 +01:00 |
|
Christian Brauner
|
f2713131ea
|
confile_utils: cleanup lxc_ipvlan_isolation_to_flag()
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-10 20:39:52 +01:00 |
|
Christian Brauner
|
11e5a00f73
|
confile_utils: cleanup lxc_ipvlan_isolation
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-10 20:39:52 +01:00 |
|
Christian Brauner
|
c789d1625d
|
confile_utils: cleanup lxc_ipvlan_flag_to_mode()
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
|
2020-12-10 20:39:52 +01:00 |
|