Skip to content
This repository

HTTPS clone URL

Subversion checkout URL

You can clone with HTTPS or Subversion.

Download ZIP
branch: master

Nov 22, 2011

  1. Sebastien Pahl

    lxc-init: only setup_fs if SYS_CAP_ADMIN is not set

    authored November 21, 2011

Nov 21, 2011

  1. Sebastien Pahl

    drop caps in lxc_attach

    authored November 21, 2011
  2. Sebastien Pahl

    imported patch patch_attach_cgroup_5of5_lxc_attach.c.patch

    authored November 21, 2011
  3. Sebastien Pahl

    imported patch patch_attach_cgroup_4of5_cgroup.c.patch

    authored November 21, 2011
  4. Sebastien Pahl

    imported patch patch_attach_cgroup_3of5_cgroup.c.patch

    authored November 21, 2011
  5. Sebastien Pahl

    imported patch patch_attach_cgroup_2of5_namespace.h.patch

    authored November 21, 2011
  6. Sebastien Pahl

    imported patch patch_attach_cgroup_1of5_namespace.c.patch

    authored November 21, 2011
  7. Merge git://lxc.git.sourceforge.net/gitroot/lxc/lxc

    authored November 21, 2011

Nov 18, 2011

  1. Daniel Lezcano

    Revert "lxc: use -iquote instead of -I"

    This reverts commit a2dea4e.
    authored November 18, 2011

Nov 10, 2011

  1. Stéphane Graber

    Ubuntu template: some tweaks

    Allow mknod (fixing udev upgrades) and drop mac_override and mac_admin 
    from lxc.cap.drop as apparmor has/will have support for namespaces
    
    Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
    authored November 10, 2011 dlezcano committed November 10, 2011
  2. lxc: use -iquote instead of -I

    To avoid name collisions between local and system header
    files. For example, if you try to include the <pty.h>
    system file, you end up including the one from lxc...
    
    Signed-off-by: Greg Kurz <gkurz@fr.ibm.com>
    Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
    authored November 10, 2011 dlezcano committed November 10, 2011
  3. lxc: fix erroneous includes

    The "" notation is preferrable if the header file is local.
    
    Signed-off-by: Greg Kurz <gkurz@fr.ibm.com>
    Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
    authored November 10, 2011 dlezcano committed November 10, 2011
  4. add lxc-archlinux template

    Hi, here's the patch which adds Arch linux container template
    
    Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
    authored November 10, 2011 dlezcano committed November 10, 2011
  5. Daniel Lezcano

    fix lxc-destroy

    Add missing 'localstatedir' directory definition.
    
    Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
    authored November 10, 2011 dlezcano committed November 10, 2011

Oct 28, 2011

  1. Tuomas Suutari

    lxc-fedora.in: Fix fetching of the fedora-release rpm

    The hardcoded URL seems to be broken and 404 error was not
    checked. Now the mirror is selected from mirrorlist (instead of
    hardcoding to funet.fi) and fetch errors are checked.
    
    Also added a retry loop (with 3 tries) to find a working mirror, since
    some of the mirrors are not OK.
    
    Signed-off-by: Tuomas Suutari <tuomas.suutari@gmail.com>
    Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
    authored October 28, 2011 dlezcano committed October 28, 2011
  2. Tuomas Suutari

    lxc-fedora.in: Use i386 instead of i686

    There is no i686 variant of Fedora, but Ubuntu seems to return i686
    from the arch command.
    
    Signed-off-by: Tuomas Suutari <tuomas.suutari@gmail.com>
    Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
    authored October 28, 2011 dlezcano committed October 28, 2011
  3. Tuomas Suutari

    lxc-fedora.in: Add missing default release variable

    The text says that 14 is default, but release=14 was not set anywhere
    in the script.
    
    Signed-off-by: Tuomas Suutari <tuomas.suutari@gmail.com>
    Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
    authored October 28, 2011 dlezcano committed October 28, 2011
  4. Frederic Crozat

    templates: update openSUSE template for openSUSE 12.1

    rely on "build" package, to ensure chroot can be created with
    distribution older than 12.1
    
    Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
    authored October 25, 2011 dlezcano committed October 28, 2011

Oct 24, 2011

  1. Drop resolvconf from oneiric container package list

    It prevents containers from getting a good resolv.conf without doing
    ifdown eth0; ifup eth0.
    
    (see pad.lv/880020)
    
    Signed-off-by: Serge Hallyn <serge.hallyn@canonical.com>
    Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
    authored October 25, 2011 dlezcano committed October 25, 2011
  2. extend the struct lxc_arguments

    This patch adds a private argument to extend the struct
    lxc_arguments. This is useful to develop custom lxc commands
    outside mainline lxc.
    
    Signed-off-by: Cedric Le Goater <clg@fr.ibm.com>
    Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
    authored October 24, 2011 dlezcano committed October 24, 2011
  3. lxc: introduce lxc_execute()

    This patch allows to create application containers with liblxc.so directly.
    
    Some code cleanups on the way:
    - separate ops for lxc_execute() and lxc_start(): the factorisation is wrong
      here as we may have specific things to do if we're running an application
      container. It deserves separate ops.
    - lxc_arguments_dup() is merged in the pre-exec operation: this is a first
      use for the execute op introduced just above. It's better to build the
      arguments to execvp() where they're really used.
    
    Signed-off-by: Greg Kurz <gkurz@fr.ibm.com>
    Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
    Cc: Cedric Le Goater <clg@fr.ibm.com>
    authored October 24, 2011 dlezcano committed October 24, 2011
  4. Frederic Crozat

    handle kernel 3.x in lxc-checkconfig

    Make sure to correctly detect kernel 3.x for file capabilities.
    
    Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
    authored October 13, 2011 dlezcano committed October 24, 2011
  5. shaba

    alt linux template

    Updates.
    
    Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
    --
    authored October 24, 2011 dlezcano committed October 24, 2011
  6. lxc-ubuntu: stop early if a bad user is specified in -b option

    Otherwise we end up with a bad container fstab and a container
    that won't boot.  See
    https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/879052
    
    Signed-off-by: Serge Hallyn <serge.hallyn@canonical.com>
    Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
    authored October 24, 2011 dlezcano committed October 24, 2011
  7. Don't list containers w/ active console sessions multiple times

    The lxc-ls shell script uses netstat -xa to get a listing of AF_UNIX
    sockets it then parses in order to determine the names of presently
    running containers. This is wrong because it will list the
    listening socket and all sockets created by accepting connections on
    that. This causes the script to display the names of containers with
    active lxc-console sessions 1 + n times, n being the number of active
    console sessions. The patch below fixes this by using netstat -xl
    instead which only displays the listening sockets.
    
    Signed-off-by: Rainer Weikusat <rweikusat@mobileactivedefense.com>
    Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
    authored October 24, 2011 dlezcano committed October 24, 2011
  8. ubuntu template: allow containers to create tap devices

    Thought I had sent this before, but I don't find it anywhere.
    
    Signed-off-by: Serge Hallyn <serge.hallyn@canonical.com>
    Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
    authored October 24, 2011 dlezcano committed October 24, 2011
  9. Accurately detect whether a system supports clone_children

    If multiple cgroups are mounted under /sys/fs/cgroup, then the
    original check ends up looking for /sys/fs/cgroup/cgroup.clone_children,
    which does not exist because that is just a tmpfs.
    
    So make sure to check an actual cgroupfs.
    
    Signed-off-by: Serge Hallyn <serge.hallyn@canonical.com>
    Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
    authored October 24, 2011 dlezcano committed October 24, 2011
  10. Let sshd template work on ubuntu systems.

    /dev/shm is a symlink to /run/shm, so we need /run/shm
    to exist in the container rootfs.  Also, /dev/mqueue does
    not exist on the host, and can't be created by the container.
    But we don't really need it so ignore that.
    
    Signed-off-by: Serge Hallyn <serge.hallyn@canonical.com>
    Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
    authored October 24, 2011 dlezcano committed October 24, 2011
  11. ubuntu template: disallow cap_sys_module (by popular demand)

    This isn't particularly reassuring, and will be moot with user
    namespaces, but as people are asking for it, turn off sys_module.
    While we're at it, turn off mac_admin and mac_override.
    
    Signed-off-by: Serge Hallyn <serge.hallyn@canonical.com>
    Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
    authored October 24, 2011 dlezcano committed October 24, 2011
  12. lxc-clone: fix dhclient.conf send hostname command

    End the command with ';', which is needed, and put the hostname in
    quotes (which doesn't really seem needed, but shown in man page).
    
    Signed-off-by: Serge Hallyn <serge.hallyn@canonical.com>
    Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
    authored October 24, 2011 dlezcano committed October 24, 2011
  13. fix more broken paths in lxc-*.in scripts

    There are still some sequels from commit:
    
    1c41ddc
    
    Signed-off-by: Greg Kurz <gkurz@fr.ibm.com>
    Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
    authored October 24, 2011 dlezcano committed October 24, 2011

Sep 20, 2011

  1. fix broken lxc-*.in scripts

    Commit 92c7f62 broke the following scipts:
    - lxc-setcap
    - lxc-setuid
    - lxc-create
    
    This patch adds the missing variables to be substitued by the configure
    script.
    
    Cheers.
    
    Signed-off-by: Greg Kurz <gkurz@fr.ibm.com>
    Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
    authored September 20, 2011 Daniel Lezcano committed September 20, 2011

Sep 13, 2011

  1. ctzafrir

    Set the utsname on the debian template

    Signed-off-by: Tzafrir Cohen <tzafrir@cohens.org.il>
    Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
    authored September 13, 2011 Daniel Lezcano committed September 13, 2011
  2. only warn for inherited file descriptors

    As discussed in thread:
    
    http://sourceforge.net/mailarchive/forum.php?thread_name=4E5618C3.5060507%40free.fr&forum_name=lxc-devel
    
    We think it's better for now to only warn the user about a fd leaking into
    the container. Also remove the call to readlink() as it isn't really useful
    now: since the container will start anyway, the user can look into /proc/../fd
    or use lsof or whatever.
    
    Signed-off-by: Greg Kurz <gkurz@fr.ibm.com>
    Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
    authored September 13, 2011 Daniel Lezcano committed September 13, 2011
  3. fixes for rpmbuild

    This patch fixes some makefile/specfile issues when running
    rpmbuild with the distributed lxc specfile:
    
    - fixes usage of installation directories for config files,
      rootfs, templates and lxc-init so that they're calculated
      at make time instead of configure time. Thanks to this,
      all installed items go under $RPM_BUILD_ROOT when running
      rpmbuild
    - introduce --disable-rpath option to configure to avoid
      check-rpaths errors when building non-root.
    - introduce a lxc-libs package in the default spec file
      to allow concurrent installation of 32 bit and 64 bit
      libraries.
    
    v2: - fix circular reference in lxc.pc
        - ship lxc.pc with lxc-devel
    
    Signed-off-by: Greg Kurz <gkurz@fr.ibm.com>
    Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>
    authored September 13, 2011 Daniel Lezcano committed September 13, 2011
Something went wrong with that request. Please try again.