Branch: refs/heads/stable-1.0
Home: https://github.com/lxc/lxc
Commit: 6b3ed343a2325aed6e0261d2245ff2992899be8a
https://github.com/lxc/lxc/commit/6b3ed343a2325aed6e0261d2245ff2992899be8a
Author: Colin Watson <[email protected]>
Date: 2015-10-07 (Wed, 07 Oct 2015)
Changed paths:
M src/lxc/lxc-start-ephemeral.in
Log Message:
-----------
lxc-start-ephemeral: Parse passwd directly
On Ubuntu 15.04, lxc-start-ephemeral's call to pwd.getpwnam always
fails. While I haven't been able to prove it or track down an exact
cause, I strongly suspect that glibc does not guarantee that you can
call NSS functions after a context switch without re-execing. (Running
"id root" in a subprocess from the same point works fine.)
It's safer to use getent to extract the relevant line from the passwd
file and parse it directly.
Signed-off-by: Colin Watson <[email protected]>
Commit: 571a65bed4e243a462f4671104cc4deb9b6a6594
https://github.com/lxc/lxc/commit/571a65bed4e243a462f4671104cc4deb9b6a6594
Author: Bogdan Purcareata <[email protected]>
Date: 2015-10-07 (Wed, 07 Oct 2015)
Changed paths:
M src/lxc/seccomp.c
Log Message:
-----------
seccomp: add aarch64 support
Enable aarch64 seccomp support for LXC containers running on ARM64
architectures. Tested with libseccomp 2.2.0 and the default seccomp
policy example files delivered with the LXC package.
Signed-off-by: Bogdan Purcareata <[email protected]>
Acked-by: Serge E. Hallyn <[email protected]>
Commit: 377acfc692a53c48d45c08bebcf43e6d4bccf17e
https://github.com/lxc/lxc/commit/377acfc692a53c48d45c08bebcf43e6d4bccf17e
Author: Serge Hallyn <[email protected]>
Date: 2015-10-07 (Wed, 07 Oct 2015)
Changed paths:
M src/tests/lxc-test-symlink
Log Message:
-----------
lxc-test-symlink: add a test using absolute symlink
This would have caught the regression last night.
Signed-off-by: Serge Hallyn <[email protected]>
Acked-by: Stéphane Graber <[email protected]>
Commit: 906c1e6d3c06d25969fa9fabe0d85732e46a48df
https://github.com/lxc/lxc/commit/906c1e6d3c06d25969fa9fabe0d85732e46a48df
Author: KATOH Yasufumi <[email protected]>
Date: 2015-10-07 (Wed, 07 Oct 2015)
Changed paths:
M doc/ja/lxc.container.conf.sgml.in
Log Message:
-----------
doc: Add the note related mount in Japanese lxc.container.conf(5)
Update for commit 592fd47
Signed-off-by: KATOH Yasufumi <[email protected]>
Acked-by: Stéphane Graber <[email protected]>
Commit: 2e63b88ed4107c1ac83deca6ea85cb86984b0434
https://github.com/lxc/lxc/commit/2e63b88ed4107c1ac83deca6ea85cb86984b0434
Author: Serge Hallyn <[email protected]>
Date: 2015-10-07 (Wed, 07 Oct 2015)
Changed paths:
M src/lxc/conf.c
Log Message:
-----------
lxc_mount_auto_mounts: fix weirdness
The default_mounts[i].destination is never NULL except in the last
'stop here' entry. Coverity doesn't know about that and so is spewing
a warning. In any case, let's add a more stringent check in case someone
accidentally adds a NULL there later.
Signed-off-by: Serge Hallyn <[email protected]>
Acked-by: Stéphane Graber <[email protected]>
Commit: a39f6dd056550b61638e4e18300929af8939aadf
https://github.com/lxc/lxc/commit/a39f6dd056550b61638e4e18300929af8939aadf
Author: Stéphane Graber <[email protected]>
Date: 2015-10-07 (Wed, 07 Oct 2015)
Changed paths:
M src/lxc/conf.c
Log Message:
-----------
Fix the type of i in lxc_mount_auto_mounts
Signed-off-by: Stéphane Graber <[email protected]>
Commit: ebf92c86e8d7ead10a3f9d5a78a552da92279c5a
https://github.com/lxc/lxc/commit/ebf92c86e8d7ead10a3f9d5a78a552da92279c5a
Author: Christian Brauner <[email protected]>
Date: 2015-10-07 (Wed, 07 Oct 2015)
Changed paths:
M src/lxc/conf.c
Log Message:
-----------
Make overlayfs mounts work directly
When users wanted to mount overlay directories with lxc.mount.entry they had to
create upperdirs and workdirs beforehand in order to mount them. To create it
for them we add the functions mount_entry_create_overlay_dirs() and
mount_entry_create_aufs_dirs() which do this for them. User can now simply
specify e.g.:
lxc.mount.entry = /lower merged overlay
lowerdir=/lower,upper=/upper,workdir=/workdir,create=dir
and /upper and /workdir will be created for them. /upper and /workdir need to
be absolute paths to directories which are created under the containerdir (e.g.
under $lxcpath/CONTAINERNAME/). Relative mountpoints, mountpoints outside the
containerdir, and mountpoints within the container's rootfs are ignored. (The
latter *might* change in the future should it be considered safe/useful.)
Specifying
lxc.mount.entry = /lower merged overlay lowerdir=/lower:/lower2,create=dir
will lead to a read-only overlay mount in accordance with the
kernel-documentation.
Specifying
lxc.mount.entry = /lower merged overlay lowerdir=/lower,create=dir
will fail when no upperdir and workdir options are given.
Signed-off-by: Christian Brauner <[email protected]>
Acked-by: Serge E. Hallyn <[email protected]>
Commit: ff3bdd2356cd75b5ea5ed389f27853cd83d1b5dc
https://github.com/lxc/lxc/commit/ff3bdd2356cd75b5ea5ed389f27853cd83d1b5dc
Author: Wolfgang Bumiller <[email protected]>
Date: 2015-10-07 (Wed, 07 Oct 2015)
Changed paths:
M src/lxc/start.c
Log Message:
-----------
start.c:preserve_ns: added pid parameter
Signed-off-by: Wolfgang Bumiller <[email protected]>
Acked-by: Serge E. Hallyn <[email protected]>
Commit: 063a6e2312144e79993e4955d5f40ea01b10667d
https://github.com/lxc/lxc/commit/063a6e2312144e79993e4955d5f40ea01b10667d
Author: Wolfgang Bumiller <[email protected]>
Date: 2015-10-07 (Wed, 07 Oct 2015)
Changed paths:
M src/lxc/start.c
M src/lxc/start.h
Log Message:
-----------
preserve container namespace
Signed-off-by: Wolfgang Bumiller <[email protected]>
Acked-by: Serge E. Hallyn <[email protected]>
Commit: c94ee7a0d54d189713c0d4775e8f8fbd27dc0e2a
https://github.com/lxc/lxc/commit/c94ee7a0d54d189713c0d4775e8f8fbd27dc0e2a
Author: Stéphane Graber <[email protected]>
Date: 2015-10-14 (Wed, 14 Oct 2015)
Changed paths:
M config/apparmor/abstractions/start-container
M config/apparmor/profiles/lxc-default-with-nesting
Log Message:
-----------
apparmor: Sync with current git master
This makes stable-1.0, stable-1.1 and master all be in sync with regard
to apparmor. This has the nice added benefit of fixing an apparmor
regression with /dev/pts handling in some older kernels.
Signed-off-by: Stéphane Graber <[email protected]>
Compare: https://github.com/lxc/lxc/compare/27ec06f902d4...c94ee7a0d54d_______________________________________________
lxc-devel mailing list
[email protected]
http://lists.linuxcontainers.org/listinfo/lxc-devel
