api-extensions: add "pidfd" api extension

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

diff --git a/doc/api-extensions.md b/doc/api-extensions.md
index 9413c7df9a61325fd2eb3772d2514688da57b9f2..75069659500850634f711095576a6c615f587f68 100644 (file)
--- a/doc/api-extensions.md
+++ b/doc/api-extensions.md
@@ -124,3 +124,7 @@ a pure unified cgroup layout.
 # init\_pidfd
 
 This adds a new API function `init_pidfd()` which allows to retrieve a pidfd for the container's init process allowing process management interactions such as sending signal to be completely reliable and rac-e free.
+
+# pidfd
+
+When running on kernels that support pidfds LXC will rely on them for most operations. This makes interacting with containers not just more reliable it also makes it significantly safer and eliminates various races inherent to PID-based kernel APIs. LXC will require that the running kernel at least support `pidfd_send_signal()`, `CLONE_PIDFD`, `P_PIDFD`, and pidfd polling support. Any kernel starting with `Linux 5.4` should have full support for pidfds.