api-extensions: don't advertise seccomp notify support if it's not compiled in

Link: https://discuss.linuxcontainers.org/t/runtimeerror-failed-to-read-zi-bytes-from-dev-urandom
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

diff --git a/src/lxc/api_extensions.h b/src/lxc/api_extensions.h
index 1cf399352002b856e3363a2edff88513e3945cd9..282066cc31dfb6b8fc6db9299f8df2859a9d3216 100644 (file)
--- a/src/lxc/api_extensions.h
+++ b/src/lxc/api_extensions.h
@@ -27,7 +27,9 @@ static char *api_extensions[] = {
        "cgroup_relative",
        "mount_injection_file",
        "seccomp_allow_nesting",
+#ifdef HAVE_SECCOMP_NOTIFY
        "seccomp_notify",
+#endif /* HAVE_SECCOMP_NOTIFY */
        "network_veth_routes",
        "network_ipvlan",
        "network_l2proxy",
@@ -39,8 +41,10 @@ static char *api_extensions[] = {
        "pidfd",
        "seccomp_allow_deny_syntax",
        "devpts_fd",
+#ifdef HAVE_SECCOMP_NOTIFY
        "seccomp_notify_fd_active",
        "seccomp_proxy_send_notify_fd",
+#endif /* HAVE_SECCOMP_NOTIFY */
        "idmapped_mounts",
        "idmapped_mounts_v2",
        "core_scheduling",