Permalink
Commits on Apr 28, 2017
  1. Merge pull request #1528 from brauner/2017-04-28/close_fd_in_lxc_setu…

    …p_devpts
    
    conf: close fd in lxc_setup_devpts()
    hallyn committed on GitHub Apr 28, 2017
  2. conf: close fd in lxc_setup_devpts()

    This left the file descriptor to the underlying /dev/ptmx file open which
    confused the hell out of criu. Let's close it.
    
    Closes lxc/lxd#3243.
    
    Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
    brauner committed Apr 28, 2017
Commits on Apr 25, 2017
  1. Merge pull request #1527 from tenforward/japanese

    doc: add lxc.limit to lxc.container.conf(5)
    brauner committed on GitHub Apr 25, 2017
  2. doc: add lxc.limit to lxc.container.conf(5)

    Update for commit 93f9e90
    
    Signed-off-by: KATOH Yasufumi <karma@jazz.email.ne.jp>
    tenforward committed Apr 25, 2017
Commits on Apr 24, 2017
  1. Merge pull request #1526 from brauner/2017-04-24/build_lxc_with_musl

    confile: fix musl build
    stgraber committed on GitHub Apr 24, 2017
Commits on Apr 23, 2017
  1. confile: fix musl build

    Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
    brauner committed Apr 23, 2017
  2. Merge pull request #1523 from brauner/2017-04-23/improve_cgfsng_debug

    cgroups: improve cgfsng debugging
    stgraber committed on GitHub Apr 23, 2017
  3. issue template: fix typo

    Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
    brauner committed Apr 23, 2017
  4. cgroups: improve cgfsng debugging

    In a lot of cases we need a list of the writeable cgroup controllers detected
    by the cgfsng driver.
    
    Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
    brauner committed Apr 23, 2017
  5. Merge pull request #1520 from brauner/2017-04-22/improve_loop

    utils: use loop device helpers from LXD
    stgraber committed on GitHub Apr 23, 2017
  6. Merge pull request #1522 from brauner/2017-04-22/lxc_issue_template

    create ISSUE_TEMPLATE.md
    stgraber committed on GitHub Apr 23, 2017
Commits on Apr 22, 2017
  1. create ISSUE_TEMPLATE.md

    Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
    brauner committed Apr 22, 2017
  2. utils: use loop device helpers from LXD

    Use the loop device helpers I wrote for LXD in LXC as well. They should be more
    efficient.
    
    Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
    brauner committed Apr 22, 2017
  3. conf: non-functional changes

    Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
    brauner committed Apr 22, 2017
  4. Merge pull request #1519 from brauner/2017-04-21/setup_pts

    conf: use bind-mount for /dev/ptmx
    stgraber committed on GitHub Apr 22, 2017
Commits on Apr 21, 2017
  1. conf: use bind-mount for /dev/ptmx

    AppArmor will refuse on /dev/ptmx being a symlink.
    
    Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
    brauner committed Apr 21, 2017
  2. conf: non-functional changes to setup_pts()

    Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
    brauner committed Apr 21, 2017
Commits on Apr 19, 2017
  1. Merge pull request #1514 from brauner/2017-04-18/autoconf_cap_get_file

    autotools: check for cap_get_file
    hallyn committed on GitHub Apr 19, 2017
Commits on Apr 18, 2017
  1. caps: return false if caps are not supported

    Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
    brauner committed Apr 18, 2017
  2. autotools: check for cap_get_file

    Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
    brauner committed Apr 18, 2017
  3. Merge pull request #1513 from brauner/2017-04-17/skip_cap_get_file_on…

    …_android
    
    caps: skip file capability checks on android
    stgraber committed on GitHub Apr 18, 2017
Commits on Apr 17, 2017
  1. caps: skip file capability checks on android

    Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
    brauner committed Apr 17, 2017
  2. Merge pull request #1512 from 0x0916/fix-comment

    attach|unshare: fix the wrong comment
    brauner committed on GitHub Apr 17, 2017
  3. attach|unshare: fix the wrong comment

    Signed-off-by: 0x0916 <w@laoqinren.net>
    0x0916 committed Apr 17, 2017
  4. Merge pull request #1511 from evgeni/typo

    fix typo introduced in #1509
    brauner committed on GitHub Apr 17, 2017
  5. fix typo introduced in #1509

    Signed-off-by: Evgeni Golov <evgeni@debian.org>
    evgeni committed Apr 17, 2017
Commits on Apr 16, 2017
  1. Merge pull request #1509 from brauner/2017-04-15/improve_lxc_id_map

    idmap improvements
    hallyn committed on GitHub Apr 16, 2017
  2. Merge pull request #1510 from 0x0916/fix-ls

    ls: simplify the judgment condition when list active containers
    brauner committed on GitHub Apr 16, 2017
  3. ls: simplify the judgment condition when list active containers

    Signed-off-by: 0x0916 <w@laoqinren.net>
    0x0916 committed Apr 16, 2017
Commits on Apr 15, 2017
  1. conf: improve log when mounting rootfs

    Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
    brauner committed Apr 15, 2017
  2. conf: check for {filecaps,setuid} on new{g,u}idmap

    The new{g,u}idmap binaries where a source of trouble for users when they lacked
    sufficient privileges. This commit adds code to check for sufficient privilege.
    It checks whether new{g,u}idmap is root owned and has the setuid bit set and if
    it doesn't it checks whether new{g,u}idmap is root owned and has CAP_SETUID in
    its CAP_PERMITTED and CAP_EFFECTIVE set.
    
    Closes #296.
    
    Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
    brauner committed Apr 15, 2017
  3. caps: add lxc_{proc,file}_cap_is_set()

    Add two new helpers that allow to determine whether a given proc or file has a
    capability in the given set and move lxc_cap_is_set() to static function that
    both call internally.
    
    Closes #296.
    
    Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
    brauner committed Apr 15, 2017
  4. conf: lxc_map_ids() non-functional changes

    Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
    brauner committed Apr 15, 2017
Commits on Apr 14, 2017
  1. Merge pull request #1508 from brauner/2017-04-14/add_prlimit_implemen…

    …tation_for_bionic
    
    android: add prlimit implementation for 32bit
    stgraber committed on GitHub Apr 14, 2017
  2. android: add prlimit implementation for 32bit

    Signed-off-by: Christian Brauner <christian.brauner@ubuntu.com>
    brauner committed Apr 14, 2017