git.ipfire.org Git - thirdparty/lxc.git/log

]> git.ipfire.org Git - thirdparty/lxc.git/log

Breno Leitao [Mon, 12 Jun 2017 18:45:52 +0000 (13:45 -0500)]

lxc-alpine: Add support for ppc64le

Starting at version 3.6, Alpine Linux has support for ppc64le
architecture. Adding the new keys also.

Signed-off-by: Breno Leitao <breno.leitao@gmail.com>

commit | commitdiff | tree

Stéphane Graber [Tue, 6 Jun 2017 22:47:29 +0000 (16:47 -0600)]

Merge pull request #1588 from brauner/2017-05-26/update_opensuse_template

lxc-opensuse: add Tumbleweed as supported release

commit | commitdiff | tree

Christian Brauner [Tue, 6 Jun 2017 05:09:26 +0000 (23:09 -0600)]

Merge pull request #1578 from 0x0916/export-seccomp-filter-to-log

seccomp: export the seccomp filter after load it into kernel successful

commit | commitdiff | tree

0x0916 [Sat, 20 May 2017 02:49:06 +0000 (10:49 +0800)]

seccomp: export the seccomp filter after load it into kernel successful

when the log level is TRACE, this patch export the seccomp
filter to log file.

the ouput of `seccomp_export_pfc()` is human readable and this feature
is useful for user to make sure their `seccomp configuration file` is
right.

Output for he default ubuntu container's seccomp filter is the
following:

```
      lxc-start ubuntu 20170520024159.412 INFO     lxc_apparmor - lsm/apparmor.c:apparmor_process_label_set:238 - changed apparmor profile to lxc-container-default-cgns
if ($arch == 3221225534)
  # filter for syscall "finit_module" (313) [priority: 65535]
  if ($syscall == 313)
    action ERRNO(1);
  # filter for syscall "open_by_handle_at" (304) [priority: 65535]
  if ($syscall == 304)
    action ERRNO(1);
  # filter for syscall "kexec_load" (246) [priority: 65535]
  if ($syscall == 246)
    action ERRNO(1);
  # filter for syscall "delete_module" (176) [priority: 65535]
  if ($syscall == 176)
    action ERRNO(1);
  # filter for syscall "init_module" (175) [priority: 65535]
  if ($syscall == 175)
    action ERRNO(1);
  # filter for syscall "umount2" (166) [priority: 65533]
  if ($syscall == 166)
    if ($a1.hi32 & 0x00000000 == 0)
      if ($a1.lo32 & 0x00000001 == 1)
        action ERRNO(13);
  # default action
  action ALLOW;
if ($arch == 1073741827)
  # filter for syscall "finit_module" (350) [priority: 65535]
  if ($syscall == 350)
    action ERRNO(1);
  # filter for syscall "open_by_handle_at" (342) [priority: 65535]
  if ($syscall == 342)
    action ERRNO(1);
  # filter for syscall "kexec_load" (283) [priority: 65535]
  if ($syscall == 283)
    action ERRNO(1);
  # filter for syscall "delete_module" (129) [priority: 65535]
  if ($syscall == 129)
    action ERRNO(1);
  # filter for syscall "init_module" (128) [priority: 65535]
  if ($syscall == 128)
    action ERRNO(1);
  # filter for syscall "umount2" (52) [priority: 65534]
  if ($syscall == 52)
    if ($a1 & 0x00000001 == 1)
      action ERRNO(13);
  # default action
  action ALLOW;
if ($arch == 3221225534)
  # filter for syscall "kexec_load" (1073742352) [priority: 65535]
  if ($syscall == 1073742352)
    action ERRNO(1);
  # filter for syscall "finit_module" (1073742137) [priority: 65535]
  if ($syscall == 1073742137)
    action ERRNO(1);
  # filter for syscall "open_by_handle_at" (1073742128) [priority: 65535]
  if ($syscall == 1073742128)
    action ERRNO(1);
  # filter for syscall "delete_module" (1073742000) [priority: 65535]
  if ($syscall == 1073742000)
    action ERRNO(1);
  # filter for syscall "init_module" (1073741999) [priority: 65535]
  if ($syscall == 1073741999)
    action ERRNO(1);
  # filter for syscall "umount2" (1073741990) [priority: 65534]
  if ($syscall == 1073741990)
    if ($a1 & 0x00000001 == 1)
      action ERRNO(13);
  # default action
  action ALLOW;
action KILL;
      lxc-start ubuntu 20170520024159.412 NOTICE   lxc_start - start.c:start:1470 - Exec'ing "/sbin/init".
```

Signed-off-by: 0x0916 <w@laoqinren.net>

commit | commitdiff | tree

Stéphane Graber [Mon, 5 Jun 2017 23:52:46 +0000 (19:52 -0400)]

Merge pull request #1613 from brauner/2017-06-03/af_unix

abstract lxc_abstract_unix_{send,recv}_fd, bugfixes, and improvements

commit | commitdiff | tree

Christian Brauner [Sat, 27 May 2017 00:52:35 +0000 (02:52 +0200)]

lxc-opensuse: add Tumbleweed as supported release

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Stéphane Graber [Mon, 5 Jun 2017 23:30:00 +0000 (19:30 -0400)]

Merge pull request #1611 from brauner/2017-06-02/enforce_config_item_method_implementation

tests: enforce all methods for config items being implemented

commit | commitdiff | tree

Christian Brauner [Mon, 5 Jun 2017 21:41:59 +0000 (23:41 +0200)]

conf: fix bionic builds

bionic seems to lack a definition of __S_ISTYPE().

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Mon, 5 Jun 2017 21:37:25 +0000 (23:37 +0200)]

conf: improve lxc_map_ids()

Closes https://github.com/lxc/lxd/issues/3384.

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Sun, 4 Jun 2017 20:33:48 +0000 (22:33 +0200)]

conf: improve tty shifting function

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Sun, 4 Jun 2017 16:01:41 +0000 (18:01 +0200)]

bdev: record output from mkfs.*

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Sun, 4 Jun 2017 14:45:12 +0000 (16:45 +0200)]

bdev: non-functional changes

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Sun, 4 Jun 2017 13:22:20 +0000 (15:22 +0200)]

doc: tweak lxc.container.conf a little

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Sun, 4 Jun 2017 11:59:34 +0000 (13:59 +0200)]

bdev: "detect" loop file

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Sun, 4 Jun 2017 11:25:23 +0000 (13:25 +0200)]

conf: remove dead mount code

The removed codepath was non-functional for a long time now. All mounting is
handled through bdev.{c,h} and if that fails the other codepath would
necessarily fail as well. So let's remove them. This makes it way clearer what
is going on and simplifies things massively.

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Sun, 4 Jun 2017 05:04:27 +0000 (07:04 +0200)]

af_unix: abstract lxc_abstract_unix_{send,recv}_fd

- Enable lxc_abstract_unix_{send,recv}_fd() to send and receive multiple fds at
once.
- lxc_abstract_unix_{send,recv}_fd() -> lxc_abstract_unix_{send,recv}_fds()
- Send tty fds from child to parent all at once.

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Stéphane Graber [Sat, 3 Jun 2017 23:13:11 +0000 (19:13 -0400)]

Merge pull request #1612 from brauner/2017-06-03/bugfixes

idmapping bugfixes

commit | commitdiff | tree

Christian Brauner [Sat, 3 Jun 2017 21:35:07 +0000 (23:35 +0200)]

tree-wide: log function called in userns_exec_1()

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Sat, 3 Jun 2017 18:28:13 +0000 (20:28 +0200)]

conf: avoid double-frees in userns_exec_1()

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Sat, 3 Jun 2017 17:14:45 +0000 (19:14 +0200)]

conf: non-functional changes

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Thu, 1 Jun 2017 03:40:59 +0000 (05:40 +0200)]

start: log sending and receiving of tty fds

This is a potentially security sensitive operation and I really want to keep an
eye on *when exactly* this is send. So add more logging on the TRACE() level.

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Stéphane Graber [Sat, 3 Jun 2017 00:43:38 +0000 (20:43 -0400)]

Merge pull request #1609 from brauner/2017-06-01/unit_test_idmap_parser

unit test idmap parser + userns_exec_1() rework

commit | commitdiff | tree

Christian Brauner [Fri, 2 Jun 2017 23:21:16 +0000 (17:21 -0600)]

Merge pull request #1608 from ss1h2a3tw/checkconfig

add probe status checking

commit | commitdiff | tree

Christian Brauner [Fri, 2 Jun 2017 22:39:50 +0000 (00:39 +0200)]

conf: rework userns_exec_1()

This also fixes a bug where we caused a double mapping, when the {u,g}id for
the user was mapped to container root {g,u}id.

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Fri, 2 Jun 2017 22:39:28 +0000 (00:39 +0200)]

conf: non-functional changes

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Thu, 1 Jun 2017 21:43:34 +0000 (23:43 +0200)]

tests: add unit tests for idmap parser

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Thu, 1 Jun 2017 21:43:16 +0000 (23:43 +0200)]

confile_utils: add new file

This adds confile_utils.{c,h} which will contain a helpers to parse lxc
configuration files.

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Shane Chen [Thu, 1 Jun 2017 16:14:01 +0000 (00:14 +0800)]

add probe status checking

Signed-off-by: Shane Chen <ss1ha3tw@gmail.com>

commit | commitdiff | tree

Christian Brauner [Fri, 2 Jun 2017 00:42:42 +0000 (02:42 +0200)]

tests: enforce all methods for config items

This adds a test that checks LXC's configuration jump table whether all methods
for a given configuration item are implemented. If it is not, we'll error out.
This should provide additional safety since a) the API can now be sure that
dereferencing the pointer for a given method in the config struct is safe and
b) when users implement new configuration keys and forget to implement a
required method we'll see it right away.

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Fri, 2 Jun 2017 00:42:19 +0000 (02:42 +0200)]

confile: add dummy getter for lxc.include

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Serge Hallyn [Thu, 1 Jun 2017 22:29:55 +0000 (17:29 -0500)]

Merge pull request #1592 from brauner/2017-05-28/idmap_handling

idmap improvements

commit | commitdiff | tree

Serge Hallyn [Thu, 1 Jun 2017 22:12:58 +0000 (17:12 -0500)]

Merge pull request #1599 from brauner/2017-05-30/use_minimal_idmap_set

conf: use minimal {g,u}id map

commit | commitdiff | tree

Christian Brauner [Mon, 29 May 2017 09:21:29 +0000 (11:21 +0200)]

conf: use minimal {g,u}id map

Afaict, userns_exec_1() is only used to operate based on privileges for the
user's own {g,u}id on the host and for the container root's unmapped {g,u}id.
This means we require only to establish a mapping from:
- the container root {g,u}id as seen from the host -> user's host {g,u}id
- the container root -> some sub{g,u}id

The former we add, if the user did not specifiy a mapping. The latter we
retrieve from the ontainer's configured {g,u}id mappings.

Closes #1598.

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Serge Hallyn [Thu, 1 Jun 2017 21:17:11 +0000 (16:17 -0500)]

Merge pull request #1596 from brauner/2017-05-29/fix_parsing

confile: fix parsing

commit | commitdiff | tree

Christian Brauner [Thu, 1 Jun 2017 10:25:09 +0000 (20:25 +1000)]

Merge pull request #1607 from ss1h2a3tw/master

adding warning for mtu ignoring

commit | commitdiff | tree

Shane Chen [Thu, 1 Jun 2017 05:36:41 +0000 (13:36 +0800)]

adding warning for mtu ignoring

Signed-off-by: Shane Chen <ss1ha3tw@gmail.com>

commit | commitdiff | tree

Christian Brauner [Thu, 1 Jun 2017 02:10:00 +0000 (04:10 +0200)]

tests: comp retval to exp val whenever we can

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Thu, 1 Jun 2017 02:09:43 +0000 (04:09 +0200)]

confile: performance tweaks

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 22:40:40 +0000 (08:40 +1000)]

Merge pull request #1605 from decomposite/systemd_unit_stop

Use lxc-stop to stop systemd service

commit | commitdiff | tree

JD Friedrikson [Wed, 31 May 2017 16:41:41 +0000 (12:41 -0400)]

Use lxc-stop to stop systemd service

Ever since 8eb62c2, systemd has not been able to cleanly stop lxc
containers (via lxc@) because it's still using SIGPWR for systemd-based
containers.

We should now use the nice logic in 330ae3d to stop the containers
instead.

Signed-off-by: JD Friedrikson <yours@decompo.site>

commit | commitdiff | tree

Stéphane Graber [Wed, 31 May 2017 17:17:36 +0000 (13:17 -0400)]

Merge pull request #1601 from brauner/2017-05-30/veth_fixes

network: don't delete net devs we didn't create

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 16:59:29 +0000 (18:59 +0200)]

lxccontainer: switch api to new clearer callbacks

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 16:45:51 +0000 (18:45 +0200)]

confile: add clearer for lxc.include

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 16:36:03 +0000 (18:36 +0200)]

confile: add clearer for lxc.include

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 16:33:08 +0000 (18:33 +0200)]

confile: add clearer for lxc.limit{.*}

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 16:31:20 +0000 (18:31 +0200)]

confile: add clearer for lxc.no_new_privs

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 16:30:10 +0000 (18:30 +0200)]

confile: add clearer for lxc.ephemeral

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 16:28:57 +0000 (18:28 +0200)]

confile: add clearer for lxc.init_gid

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 16:28:01 +0000 (18:28 +0200)]

confile: add clearer for lxc.init_uid

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 16:26:55 +0000 (18:26 +0200)]

confile: add clearer for lxc.init_cmd

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 16:25:51 +0000 (18:25 +0200)]

confile: add clearer for lxc.environment

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 16:23:36 +0000 (18:23 +0200)]

confile: add clearer for lxc.group

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 16:22:27 +0000 (18:22 +0200)]

confile: add clearer for lxc.monitor.unshare

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 16:21:20 +0000 (18:21 +0200)]

confile: add clearer for lxc.syslog

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 16:19:23 +0000 (18:19 +0200)]

confile: add clearer for lxc.start.*

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 16:14:50 +0000 (18:14 +0200)]

confile: add clearer for lxc.stopsignal

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 16:13:50 +0000 (18:13 +0200)]

confile: add clearer for lxc.rebootsignal

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 16:12:45 +0000 (18:12 +0200)]

confile: add clearer for lxc.haltsignal

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 16:11:08 +0000 (18:11 +0200)]

confile: add clearer for lxc.autodev

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 16:09:24 +0000 (18:09 +0200)]

confile: add clearer for lxc.seccomp

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 16:08:13 +0000 (18:08 +0200)]

confile: add clearer for lxc.console.logfile

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 16:06:54 +0000 (18:06 +0200)]

confile: add clearer for lxc.console

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 16:05:13 +0000 (18:05 +0200)]

confile: add clearer for lxc.cap.keep

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 16:03:38 +0000 (18:03 +0200)]

confile: add clearer for lxc.cap.drop

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 16:02:08 +0000 (18:02 +0200)]

confile: add clearer for lxc.network

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 16:00:40 +0000 (18:00 +0200)]

confile: add clearer for lxc.network.*

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 15:57:57 +0000 (17:57 +0200)]

confile: add clearer for lxc.hook{.*}

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 15:54:53 +0000 (17:54 +0200)]

confile: add clearer for lxc.utsname

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 15:52:17 +0000 (17:52 +0200)]

confile: add dummy clearer for lxc.pivotdir

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 15:50:59 +0000 (17:50 +0200)]

confile: add clearer for lxc.rootfs.backend

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 15:49:39 +0000 (17:49 +0200)]

confile: add clearer for lxc.rootfs.options

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 15:48:14 +0000 (17:48 +0200)]

confile: add clearer for lxc.rootfs.mount

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 15:46:06 +0000 (17:46 +0200)]

confile: add clearer for lxc.rootfs

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 13:20:55 +0000 (15:20 +0200)]

confile: add clearer for lxc.mount

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 13:19:23 +0000 (15:19 +0200)]

confile: add clearer for lxc.mount.auto

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 13:18:00 +0000 (15:18 +0200)]

confile: add clearer for lxc.mount.entry

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 13:15:05 +0000 (15:15 +0200)]

confile: add clearer for lxc.logfile

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 13:13:55 +0000 (15:13 +0200)]

confile: add clearer for lxc.loglevel

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 13:12:18 +0000 (15:12 +0200)]

confile: add clearer for lxc.id_map

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 13:07:17 +0000 (15:07 +0200)]

confile: add clearer for lxc.cgroup

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 13:03:26 +0000 (15:03 +0200)]

confile: add clearer for lxc.se_context

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 13:02:21 +0000 (15:02 +0200)]

confile: add clearer for lxc.lsm_aa_allow_incomplete

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 13:00:17 +0000 (15:00 +0200)]

confile: add clearer for lxc.aa_profile

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 12:59:03 +0000 (14:59 +0200)]

confile: add clearer for lxc.kmsg

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 12:57:55 +0000 (14:57 +0200)]

confile: add clearer for lxc.devttydir

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 12:56:53 +0000 (14:56 +0200)]

confile: add clearer for lxc.tty

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 12:55:37 +0000 (14:55 +0200)]

confile: add clearer for lxc.pts

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 12:53:55 +0000 (14:53 +0200)]

confile: add clearer for lxc.personality

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 12:53:29 +0000 (14:53 +0200)]

confile: implement config item clear callback

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 11:40:39 +0000 (13:40 +0200)]

confile: final cleanups

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Mon, 29 May 2017 14:33:22 +0000 (16:33 +0200)]

test: add item clear and config file tests

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 08:02:22 +0000 (10:02 +0200)]

confile: dump lxc_get_config_item()

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 08:02:05 +0000 (10:02 +0200)]

commands: switch api to new callback system

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 07:54:26 +0000 (09:54 +0200)]

confile: adapt layout of getter callback

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 03:33:34 +0000 (05:33 +0200)]

lxccontainer: switch api to new callback system

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 07:27:25 +0000 (09:27 +0200)]

confile: add getter for lxc.limit{.*}

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 07:21:41 +0000 (09:21 +0200)]

confile: add getter for lxc.no_new_privs

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 07:19:58 +0000 (09:19 +0200)]

confile: add getter for lxc.ephemeral

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 07:18:14 +0000 (09:18 +0200)]

confile: add getter for lxc.init_gid

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

commit | commitdiff | tree

Christian Brauner [Wed, 31 May 2017 07:16:37 +0000 (09:16 +0200)]

confile: add getter for lxc.init_uid

Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

Mirror of https://github.com/lxc/lxc.git

RSS Atom