chore: Included githubactions in the dependabot config

This should help with keeping the GitHub actions updated on new releases. This will also help with keeping it secure.

Dependabot helps in keeping the supply chain secure https://docs.github.com/en/code-security/dependabot

GitHub actions up to date https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot

https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency-update-tool
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>

Merge pull request #4135 from stgraber/meson

More meson fixes

meson: Fix mntent include condition

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

lxc/rexec: Use HAVE_FEXECVE

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Add lxcmntent to unmount-namespace hook

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Add missing prlimit include

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Only build seccomp and selinux when needed

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Always define HAVE_LIBURING

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: seccomp is optional

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Fix on shallow git trees

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Add bionic detection

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Fix RPM spec variables

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Make lxc-user-nic setuid

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Don't include lxc-test-fuzzers

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Skip static library when using sanitizer

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Cleanup and fix includes

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Add coverity flag

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

Merge pull request #4133 from dasteihn/sta/fallthrough

CODING_STYLE: add forgotten fallthrough

CODING_STYLE: add forgotten fallthrough

Signed-off-by: Philipp Stanner <stanner@posteo.de>

Merge pull request #4130 from stgraber/master

Finalize the meson port

meson: Add RPM spec

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Rework configuration variables

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Tweak config for manpages

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Export more variables to doc

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Export LXC_DISTRO_SYSCONF

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

Merge pull request #4126 from stgraber/master

Complete meson port

meson: Add apparmor profiles

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Add sysconfig

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Add init scripts

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Rename want_io_uring

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Make docbook2man required if user requested doc

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

Merge pull request #4125 from stgraber/master

meson: Tweak docs

meson: More flexible doc handling

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Simplify if statements

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

Merge pull request #4124 from stgraber/master

More meson work

meson: Add manpages

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Only build tools when requested

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Add tools option

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Re-shuffle PAM

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson_options: Move entries around

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

Merge pull request #4120 from brauner/2022-05-18.meson.pam

build: add pam_cgfs to meson

Merge pull request #4121 from sitano/ivan_fix_pidfds_loglvl

lxc_can_use_pidfd: don't log error if pidfds not supported, trace

lxc_can_use_pidfd: don't log error if pidfds not supported, trace

Signed-off-by: Ivan Prisyazhnyy <john.koepi@gmail.com>

pam: fix compiler warnings

Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>

build: add pam_cgfs to meson

Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>

Merge pull request #4115 from terceiro/rename-completion

bash: rename main bash completion file

Merge pull request #4117 from stgraber/master

More meson coverage

meson: Add remaining scripts

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Re-organize dir variables

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Add init helper scripts

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Add common configs

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Add SELinux configs

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Add global config

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

bash: rename main bash completion file

Since the `lxc` binary is actually provided by lxd, the main
bash-completion file needs to be moved away to not conflict with a bash
completion file provided for the `lxc` binary by lxd.

Signed-off-by: Antonio Terceiro <terceiro@debian.org>

Merge pull request #4113 from stgraber/master

More meson tweaks

meson: Add doc examples

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Rework options

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

Merge pull request #4110 from stgraber/master

More meson fixes

meson: Use dependencies for pkgconfig

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Bump minimal version

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Simplify pc handling

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

Merge pull request #4109 from stgraber/master

More meson fixes

meson: Add bash completion

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Include the /var paths

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Include rootfs dir

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Setup pkgconfig

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Include headers

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Fix hook install locations

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Fix library version

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Add lxc-attach

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Fix internal binaries

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Fix template installation location

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Get test binaries to match autotools

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

Merge pull request #4108 from stgraber/master

Meson improvements

Update MAINTAINERS file

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Fix unix epoch

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Update run_command calls

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Install the test binaries

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Cleanup build configs

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

meson: Remove non-existent tests

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

Merge pull request #4101 from memnoth/fix-fail-exec-dnsmasq

lxc-net.in: fix failure executing dnsmasq

lxc-net.in: fix failure executing dnsmasq

Failure executing dnsmasq happens if misc dir is not existed as the
following error messages.

localhost.localdomain systemd[1]: Starting LXC network bridge setup...
localhost.localdomain lxc-net[5754]: dnsmasq: cannot open or create lease file /usr/local/var/lib/misc/dnsmasq.lxcbr0.leases: No such file or directory
localhost.localdomain dnsmasq[5754]: cannot open or create lease file /usr/local/var/lib/misc/dnsmasq.lxcbr0.leases: No such file or directory
localhost.localdomain dnsmasq[5754]: FAILED to start up
localhost.localdomain lxc-net[5727]: Failed to setup lxc-net.
localhost.localdomain lxc-net[5727]: Failed to setup lxc-net.
localhost.localdomain systemd[1]: lxc-net.service: Main process exited, code=exited, status=1/FAILURE
localhost.localdomain systemd[1]: lxc-net.service: Failed with result 'exit-code'.
localhost.localdomain systemd[1]: Failed to start LXC network bridge setup.

Modify 'lxc-net' script to call 'mkdir -p' command if the directory is not
existed before executing dnsmasq daemon.

Signed-off-by: Leesoo Ahn <lsahn@ooseel.net>

Merge pull request #4099 from corubba/feature/stop-order

tools: lxc-autostart: Reverse order on stop

tools: lxc-autostart: Reverse order on stop

As it was already discussed in lxc/lxd#2082, containers should be
stopped in the opposite order they are started in. LXD does so already,
lxc should do the same.

Signed-off-by: Corubba Smith <corubba@gmx.de>

Merge pull request #4098 from memnoth/mnth/fastpath-mkdir_p

utils: add fastpath routine on mkdir_p function

utils: add fastpath routine on mkdir_p function

Call 'access' to examine whether 'dir' is already existed or not instead
of directly calling 'mkdir' on each dir name separated by slash '/' even though
'dir' is existed.

Signed-off-by: Leesoo Ahn <lsahn@ooseel.net>

Merge pull request #4096 from brauner/2022-03-22.meson

build: add more tests to meson

build: add more tests to meson

Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>

tests: fix include statements

Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>

Merge pull request #4095 from brauner/2022-03-22.meson

build: add tests to meson

build: add tests to meson

Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>

Merge pull request #4091 from JamiKettunen/non-modular-kernels

lxc-checkconfig: Only check probed modules if /proc/modules exists

lxc-checkconfig: Only check probed modules if /proc/modules exists

Kernels can be built with CONFIG_MODULES=n which results in
is_probed() telling the module isn't probed and lsmod spamming the
following to stderr each time it's called:

  libkmod: kmod_module_new_from_loaded: could not open /proc/modules: No such file or directory
  Error: could not get list of modules: No such file or directory

Fix this by "stubbing" is_probed() when /proc/modules doesn't exist
as it's always called after a is_enabled() anyway.

Signed-off-by: Jami Kettunen <jami.kettunen@protonmail.com>

Merge pull request #4090 from brauner/2022-02-22.fixes.4

cgroups: modify cgroup2 attach logic

cgroups: modify cgroup2 attach logic

Recent kernels have seen various permission checking fixes when moving
processes into cgroups. So we're forced to modify how we attach to
containers.

Link: https://discuss.linuxcontainers.org/t/lxd-4-23-unable-to-start-nested-containers
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

Merge pull request #4089 from brauner/2022-02-22.fixes

ttys: ensure container_ttys= env variable is set correctly

ttys: ensure container_ttys= env variable is set correctly

Fixes: #4088
Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>

Merge pull request #4087 from tenforward/japanese

doc: Fix reverse allowlist/denylist in Japanese man page

doc: Fix reverse allowlist/denylist in Japanese man page

Update for commit 2965130c45124a01f017144512c39fc39fa8717c

Signed-off-by: KATOH Yasufumi <karma@jazz.email.ne.jp>

Merge pull request #4085 from brauner/2022-02-20.cgroup.fixes

cgroups: fixes