[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Serge Hallyn: Work items changed: Work items: [serge-hallyn] (Dwight is pushing this, but has no lp id) Push fix for XFS and user namespaces: DONE [serge-hallyn] Fix lxc-net to be nestable with no user interaction: DONE [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: DONE [serge-hallyn] Exploit stacked apparmor profiles for container nesting: BLOCKED [serge-hallyn] Ask jjohansen about any apparmor kernel/userspace packages we can put in ubuntu-lxc ppa for testing stacked (0.5): DONE [serge-hallyn] Bisect kernel signal delivery bug affecting lxc: DONE [serge-hallyn] Improve cgroup support in nested case: DONE [serge-hallyn] write POC of nestable cgroup manager: POSTPONED [serge-hallyn] Pursue subuid patchset for shadow: DONE [serge-hallyn] Enable unprivileged container creation: DONE [serge-hallyn] Write a privileged helper to facilitate unprivileged networked container: DONE [serge-hallyn] Enable unprivileged container starting (network): POSTPONED [serge-hallyn] Enable unprivileged container starting (cgroups): DONE [serge-hallyn] Enable unprivileged container starting (complete): POSTPONED [serge-hallyn] Add console support to API (Dwight): DONE [serge-hallyn] Add attach support to API (Christian): DONE [serge-hallyn] Convert create to API: DONE [serge-hallyn] Convert stop to API: DONE [serge-hallyn] Convert destroy to API: DONE [serge-hallyn] List lxc programs to be converted to API (https://wiki.ubuntu.com/LxcAPIConversion): DONE [serge-hallyn] Update locking in API to handle killed programs: DONE [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): DONE [serge-hallyn] Improve thread safety in API: DONE [serge-hallyn] Discuss upstream stable branches with upstream (sent email to list): DONE [serge-hallyn] Get CONFIG_USER_NS=y into kernel (as soon as saucy+1 opens): POSTPONED [serge-hallyn] Merge qemu 1.5.0: DONE [serge-hallyn] Write loopback backingstore driver: DONE [serge-hallyn] Write qemu-nbd backingstore driver: POSTPONED [serge-hallyn] Investigate openvswitch bridges by default in libvirt (1): DONE [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): POSTPONED [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: POSTPONED [smoser] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: DONE [serge-hallyn] start live block migration testing using juju of libvirt+kvm with local storage (1): DONE [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: POSTPONED [zulcss] Merge libvirt 1.0.6: DONE [serge-hallyn] no-change libvirt push to pick up new xen libraries (0): BLOCKED [smb] Pick up upstream Xen-4.3 release: DONE [smb] Refresh Debian/Ubuntu patches against Xen: DONE [smb] Decide how to include qemu-upstream: DONE [smb] Update packaging to allow libvirt to build the libxl driver: DONE [smb] Unit testing with xm and xl stack (native and libvirt): DONE [smb] Enable Xen compile for armhf: DONE [smb] Merge xen 4.3: DONE [zulcss] Write a nova using the lxc API: INPROGRESS Work items for ubuntu-13.09: [serge-hallyn] Work distro lxc tests upstream (2 @ sep 25): DONE [serge-hallyn] Address monitor versioning in lxc (1): DONE [zulcss] Push nova-lxc driver upstream: TODO [serge-hallyn] Add snapshot support to API (3): DONE [serge-hallyn] Discuss API versioning of library and (python, lua, etc) hooks at plumbers (3 @ sep 17): DONE [serge-hallyn] complete live block migration testing (using juju?) of libvirt+kvm with local storage (1 @ sep 23): DONE [zulcss] Follow up with Citrix's plans for xcp: TODO [smb] PUsh xen 4.3 to archive: DONE Work items for ubuntu-13.10: [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables (3 @ oct 7): POSTPONED - [serge-hallyn] live block migration testing using juju of libvirt+kvm with ceph (2 @ oct 2): INPROGRESS + [serge-hallyn] live block migration testing using juju of libvirt+kvm with ceph (2 @ oct 2): POSTPONED [zulcss] Fix apparmor bug preventing libvirt-lxc from mounting blockdevs: TODO -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Serge Hallyn: Work items changed: Work items: [serge-hallyn] (Dwight is pushing this, but has no lp id) Push fix for XFS and user namespaces: DONE [serge-hallyn] Fix lxc-net to be nestable with no user interaction: DONE [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: DONE [serge-hallyn] Exploit stacked apparmor profiles for container nesting: BLOCKED [serge-hallyn] Ask jjohansen about any apparmor kernel/userspace packages we can put in ubuntu-lxc ppa for testing stacked (0.5): DONE [serge-hallyn] Bisect kernel signal delivery bug affecting lxc: DONE [serge-hallyn] Improve cgroup support in nested case: DONE [serge-hallyn] write POC of nestable cgroup manager: POSTPONED [serge-hallyn] Pursue subuid patchset for shadow: DONE [serge-hallyn] Enable unprivileged container creation: DONE [serge-hallyn] Write a privileged helper to facilitate unprivileged networked container: DONE [serge-hallyn] Enable unprivileged container starting (network): POSTPONED [serge-hallyn] Enable unprivileged container starting (cgroups): DONE [serge-hallyn] Enable unprivileged container starting (complete): POSTPONED [serge-hallyn] Add console support to API (Dwight): DONE [serge-hallyn] Add attach support to API (Christian): DONE [serge-hallyn] Convert create to API: DONE [serge-hallyn] Convert stop to API: DONE [serge-hallyn] Convert destroy to API: DONE [serge-hallyn] List lxc programs to be converted to API (https://wiki.ubuntu.com/LxcAPIConversion): DONE [serge-hallyn] Update locking in API to handle killed programs: DONE [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): DONE [serge-hallyn] Improve thread safety in API: DONE [serge-hallyn] Discuss upstream stable branches with upstream (sent email to list): DONE [serge-hallyn] Get CONFIG_USER_NS=y into kernel (as soon as saucy+1 opens): POSTPONED [serge-hallyn] Merge qemu 1.5.0: DONE [serge-hallyn] Write loopback backingstore driver: DONE [serge-hallyn] Write qemu-nbd backingstore driver: POSTPONED [serge-hallyn] Investigate openvswitch bridges by default in libvirt (1): DONE [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): POSTPONED [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: POSTPONED [smoser] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: DONE [serge-hallyn] start live block migration testing using juju of libvirt+kvm with local storage (1): DONE [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: POSTPONED [zulcss] Merge libvirt 1.0.6: DONE [serge-hallyn] no-change libvirt push to pick up new xen libraries (0): BLOCKED [smb] Pick up upstream Xen-4.3 release: DONE [smb] Refresh Debian/Ubuntu patches against Xen: DONE [smb] Decide how to include qemu-upstream: DONE [smb] Update packaging to allow libvirt to build the libxl driver: DONE [smb] Unit testing with xm and xl stack (native and libvirt): DONE [smb] Enable Xen compile for armhf: DONE [smb] Merge xen 4.3: DONE [zulcss] Write a nova using the lxc API: INPROGRESS Work items for ubuntu-13.09: [serge-hallyn] Work distro lxc tests upstream (2 @ sep 25): DONE [serge-hallyn] Address monitor versioning in lxc (1): DONE [zulcss] Push nova-lxc driver upstream: TODO [serge-hallyn] Add snapshot support to API (3): DONE [serge-hallyn] Discuss API versioning of library and (python, lua, etc) hooks at plumbers (3 @ sep 17): DONE [serge-hallyn] complete live block migration testing (using juju?) of libvirt+kvm with local storage (1 @ sep 23): DONE [zulcss] Follow up with Citrix's plans for xcp: TODO [smb] PUsh xen 4.3 to archive: DONE Work items for ubuntu-13.10: - [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables (3 @ oct 7): TODO - [serge-hallyn] live block migration testing using juju of libvirt+kvm with ceph (2 @ oct 2): TODO + [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables (3 @ oct 7): POSTPONED + [serge-hallyn] live block migration testing using juju of libvirt+kvm with ceph (2 @ oct 2): INPROGRESS [zulcss] Fix apparmor bug preventing libvirt-lxc from mounting blockdevs: TODO -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Serge Hallyn: Work items changed: Work items: [serge-hallyn] (Dwight is pushing this, but has no lp id) Push fix for XFS and user namespaces: DONE [serge-hallyn] Fix lxc-net to be nestable with no user interaction: DONE [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: DONE [serge-hallyn] Exploit stacked apparmor profiles for container nesting: BLOCKED [serge-hallyn] Ask jjohansen about any apparmor kernel/userspace packages we can put in ubuntu-lxc ppa for testing stacked (0.5): DONE [serge-hallyn] Bisect kernel signal delivery bug affecting lxc: DONE [serge-hallyn] Improve cgroup support in nested case: DONE [serge-hallyn] write POC of nestable cgroup manager: POSTPONED [serge-hallyn] Pursue subuid patchset for shadow: DONE [serge-hallyn] Enable unprivileged container creation: DONE [serge-hallyn] Write a privileged helper to facilitate unprivileged networked container: DONE [serge-hallyn] Enable unprivileged container starting (network): POSTPONED [serge-hallyn] Enable unprivileged container starting (cgroups): DONE [serge-hallyn] Enable unprivileged container starting (complete): POSTPONED [serge-hallyn] Add console support to API (Dwight): DONE [serge-hallyn] Add attach support to API (Christian): DONE [serge-hallyn] Convert create to API: DONE [serge-hallyn] Convert stop to API: DONE [serge-hallyn] Convert destroy to API: DONE [serge-hallyn] List lxc programs to be converted to API (https://wiki.ubuntu.com/LxcAPIConversion): DONE [serge-hallyn] Update locking in API to handle killed programs: DONE [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): DONE [serge-hallyn] Improve thread safety in API: DONE [serge-hallyn] Discuss upstream stable branches with upstream (sent email to list): DONE [serge-hallyn] Get CONFIG_USER_NS=y into kernel (as soon as saucy+1 opens): POSTPONED [serge-hallyn] Merge qemu 1.5.0: DONE [serge-hallyn] Write loopback backingstore driver: DONE [serge-hallyn] Write qemu-nbd backingstore driver: POSTPONED [serge-hallyn] Investigate openvswitch bridges by default in libvirt (1): DONE [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): POSTPONED [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: POSTPONED [smoser] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: DONE [serge-hallyn] start live block migration testing using juju of libvirt+kvm with local storage (1): DONE [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: POSTPONED [zulcss] Merge libvirt 1.0.6: DONE [serge-hallyn] no-change libvirt push to pick up new xen libraries (0): BLOCKED [smb] Pick up upstream Xen-4.3 release: DONE [smb] Refresh Debian/Ubuntu patches against Xen: DONE [smb] Decide how to include qemu-upstream: DONE [smb] Update packaging to allow libvirt to build the libxl driver: DONE [smb] Unit testing with xm and xl stack (native and libvirt): DONE [smb] Enable Xen compile for armhf: DONE [smb] Merge xen 4.3: DONE [zulcss] Write a nova using the lxc API: INPROGRESS Work items for ubuntu-13.09: - [serge-hallyn] Work distro lxc tests upstream (2 @ sep 25): INPROGRESS + [serge-hallyn] Work distro lxc tests upstream (2 @ sep 25): DONE [serge-hallyn] Address monitor versioning in lxc (1): DONE [zulcss] Push nova-lxc driver upstream: TODO [serge-hallyn] Add snapshot support to API (3): DONE [serge-hallyn] Discuss API versioning of library and (python, lua, etc) hooks at plumbers (3 @ sep 17): DONE [serge-hallyn] complete live block migration testing (using juju?) of libvirt+kvm with local storage (1 @ sep 23): DONE [zulcss] Follow up with Citrix's plans for xcp: TODO [smb] PUsh xen 4.3 to archive: DONE Work items for ubuntu-13.10: [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables (3 @ oct 7): TODO [serge-hallyn] live block migration testing using juju of libvirt+kvm with ceph (2 @ oct 2): TODO [zulcss] Fix apparmor bug preventing libvirt-lxc from mounting blockdevs: TODO -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Serge Hallyn: Work items changed: Work items: [serge-hallyn] (Dwight is pushing this, but has no lp id) Push fix for XFS and user namespaces: DONE [serge-hallyn] Fix lxc-net to be nestable with no user interaction: DONE [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: DONE [serge-hallyn] Exploit stacked apparmor profiles for container nesting: BLOCKED [serge-hallyn] Ask jjohansen about any apparmor kernel/userspace packages we can put in ubuntu-lxc ppa for testing stacked (0.5): DONE [serge-hallyn] Bisect kernel signal delivery bug affecting lxc: DONE [serge-hallyn] Improve cgroup support in nested case: DONE [serge-hallyn] write POC of nestable cgroup manager: POSTPONED [serge-hallyn] Pursue subuid patchset for shadow: DONE [serge-hallyn] Enable unprivileged container creation: DONE [serge-hallyn] Write a privileged helper to facilitate unprivileged networked container: DONE [serge-hallyn] Enable unprivileged container starting (network): POSTPONED [serge-hallyn] Enable unprivileged container starting (cgroups): DONE [serge-hallyn] Enable unprivileged container starting (complete): POSTPONED [serge-hallyn] Add console support to API (Dwight): DONE [serge-hallyn] Add attach support to API (Christian): DONE [serge-hallyn] Convert create to API: DONE [serge-hallyn] Convert stop to API: DONE [serge-hallyn] Convert destroy to API: DONE [serge-hallyn] List lxc programs to be converted to API (https://wiki.ubuntu.com/LxcAPIConversion): DONE [serge-hallyn] Update locking in API to handle killed programs: DONE [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): DONE [serge-hallyn] Improve thread safety in API: DONE [serge-hallyn] Discuss upstream stable branches with upstream (sent email to list): DONE [serge-hallyn] Get CONFIG_USER_NS=y into kernel (as soon as saucy+1 opens): POSTPONED [serge-hallyn] Merge qemu 1.5.0: DONE [serge-hallyn] Write loopback backingstore driver: DONE [serge-hallyn] Write qemu-nbd backingstore driver: POSTPONED [serge-hallyn] Investigate openvswitch bridges by default in libvirt (1): DONE [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): POSTPONED [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: POSTPONED [smoser] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: DONE [serge-hallyn] start live block migration testing using juju of libvirt+kvm with local storage (1): DONE [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: POSTPONED [zulcss] Merge libvirt 1.0.6: DONE [serge-hallyn] no-change libvirt push to pick up new xen libraries (0): BLOCKED [smb] Pick up upstream Xen-4.3 release: DONE [smb] Refresh Debian/Ubuntu patches against Xen: DONE [smb] Decide how to include qemu-upstream: DONE [smb] Update packaging to allow libvirt to build the libxl driver: DONE [smb] Unit testing with xm and xl stack (native and libvirt): DONE [smb] Enable Xen compile for armhf: DONE [smb] Merge xen 4.3: DONE [zulcss] Write a nova using the lxc API: INPROGRESS Work items for ubuntu-13.09: - [serge-hallyn] Work distro lxc tests upstream (2 @ sep 25): TODO + [serge-hallyn] Work distro lxc tests upstream (2 @ sep 25): INPROGRESS [serge-hallyn] Address monitor versioning in lxc (1): DONE [zulcss] Push nova-lxc driver upstream: TODO [serge-hallyn] Add snapshot support to API (3): DONE [serge-hallyn] Discuss API versioning of library and (python, lua, etc) hooks at plumbers (3 @ sep 17): DONE [serge-hallyn] complete live block migration testing (using juju?) of libvirt+kvm with local storage (1 @ sep 23): DONE [zulcss] Follow up with Citrix's plans for xcp: TODO [smb] PUsh xen 4.3 to archive: DONE Work items for ubuntu-13.10: [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables (3 @ oct 7): TODO [serge-hallyn] live block migration testing using juju of libvirt+kvm with ceph (2 @ oct 2): TODO [zulcss] Fix apparmor bug preventing libvirt-lxc from mounting blockdevs: TODO -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Stefan Bader: Work items changed: Work items: [serge-hallyn] (Dwight is pushing this, but has no lp id) Push fix for XFS and user namespaces: DONE [serge-hallyn] Fix lxc-net to be nestable with no user interaction: DONE [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: DONE [serge-hallyn] Exploit stacked apparmor profiles for container nesting: BLOCKED [serge-hallyn] Ask jjohansen about any apparmor kernel/userspace packages we can put in ubuntu-lxc ppa for testing stacked (0.5): DONE [serge-hallyn] Bisect kernel signal delivery bug affecting lxc: DONE [serge-hallyn] Improve cgroup support in nested case: DONE [serge-hallyn] write POC of nestable cgroup manager: POSTPONED [serge-hallyn] Pursue subuid patchset for shadow: DONE [serge-hallyn] Enable unprivileged container creation: DONE [serge-hallyn] Write a privileged helper to facilitate unprivileged networked container: DONE [serge-hallyn] Enable unprivileged container starting (network): POSTPONED [serge-hallyn] Enable unprivileged container starting (cgroups): DONE [serge-hallyn] Enable unprivileged container starting (complete): POSTPONED [serge-hallyn] Add console support to API (Dwight): DONE [serge-hallyn] Add attach support to API (Christian): DONE [serge-hallyn] Convert create to API: DONE [serge-hallyn] Convert stop to API: DONE [serge-hallyn] Convert destroy to API: DONE [serge-hallyn] List lxc programs to be converted to API (https://wiki.ubuntu.com/LxcAPIConversion): DONE [serge-hallyn] Update locking in API to handle killed programs: DONE [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): DONE [serge-hallyn] Improve thread safety in API: DONE [serge-hallyn] Discuss upstream stable branches with upstream (sent email to list): DONE [serge-hallyn] Get CONFIG_USER_NS=y into kernel (as soon as saucy+1 opens): POSTPONED [serge-hallyn] Merge qemu 1.5.0: DONE [serge-hallyn] Write loopback backingstore driver: DONE [serge-hallyn] Write qemu-nbd backingstore driver: POSTPONED [serge-hallyn] Investigate openvswitch bridges by default in libvirt (1): DONE [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): POSTPONED [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: POSTPONED [smoser] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: DONE [serge-hallyn] start live block migration testing using juju of libvirt+kvm with local storage (1): DONE [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: POSTPONED [zulcss] Merge libvirt 1.0.6: DONE [serge-hallyn] no-change libvirt push to pick up new xen libraries (0): BLOCKED [smb] Pick up upstream Xen-4.3 release: DONE [smb] Refresh Debian/Ubuntu patches against Xen: DONE [smb] Decide how to include qemu-upstream: DONE [smb] Update packaging to allow libvirt to build the libxl driver: DONE [smb] Unit testing with xm and xl stack (native and libvirt): DONE [smb] Enable Xen compile for armhf: DONE [smb] Merge xen 4.3: DONE [zulcss] Write a nova using the lxc API: INPROGRESS Work items for ubuntu-13.09: [serge-hallyn] Work distro lxc tests upstream (2 @ sep 25): TODO [serge-hallyn] Address monitor versioning in lxc (1): DONE [zulcss] Push nova-lxc driver upstream: TODO [serge-hallyn] Add snapshot support to API (3): DONE [serge-hallyn] Discuss API versioning of library and (python, lua, etc) hooks at plumbers (3 @ sep 17): DONE [serge-hallyn] complete live block migration testing (using juju?) of libvirt+kvm with local storage (1 @ sep 23): DONE [zulcss] Follow up with Citrix's plans for xcp: TODO - [smb] PUsh xen 4.3 to archive: TODO + [smb] PUsh xen 4.3 to archive: DONE Work items for ubuntu-13.10: [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables (3 @ oct 7): TODO [serge-hallyn] live block migration testing using juju of libvirt+kvm with ceph (2 @ oct 2): TODO [zulcss] Fix apparmor bug preventing libvirt-lxc from mounting blockdevs: TODO -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Serge Hallyn: Work items changed: Work items: [serge-hallyn] (Dwight is pushing this, but has no lp id) Push fix for XFS and user namespaces: DONE [serge-hallyn] Fix lxc-net to be nestable with no user interaction: DONE [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: DONE [serge-hallyn] Exploit stacked apparmor profiles for container nesting: BLOCKED [serge-hallyn] Ask jjohansen about any apparmor kernel/userspace packages we can put in ubuntu-lxc ppa for testing stacked (0.5): DONE [serge-hallyn] Bisect kernel signal delivery bug affecting lxc: DONE [serge-hallyn] Improve cgroup support in nested case: DONE [serge-hallyn] write POC of nestable cgroup manager: POSTPONED [serge-hallyn] Pursue subuid patchset for shadow: DONE [serge-hallyn] Enable unprivileged container creation: DONE [serge-hallyn] Write a privileged helper to facilitate unprivileged networked container: DONE [serge-hallyn] Enable unprivileged container starting (network): POSTPONED [serge-hallyn] Enable unprivileged container starting (cgroups): DONE [serge-hallyn] Enable unprivileged container starting (complete): POSTPONED [serge-hallyn] Add console support to API (Dwight): DONE [serge-hallyn] Add attach support to API (Christian): DONE [serge-hallyn] Convert create to API: DONE [serge-hallyn] Convert stop to API: DONE [serge-hallyn] Convert destroy to API: DONE [serge-hallyn] List lxc programs to be converted to API (https://wiki.ubuntu.com/LxcAPIConversion): DONE [serge-hallyn] Update locking in API to handle killed programs: DONE [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): DONE [serge-hallyn] Improve thread safety in API: DONE [serge-hallyn] Discuss upstream stable branches with upstream (sent email to list): DONE [serge-hallyn] Get CONFIG_USER_NS=y into kernel (as soon as saucy+1 opens): POSTPONED [serge-hallyn] Merge qemu 1.5.0: DONE [serge-hallyn] Write loopback backingstore driver: DONE [serge-hallyn] Write qemu-nbd backingstore driver: POSTPONED [serge-hallyn] Investigate openvswitch bridges by default in libvirt (1): DONE [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): POSTPONED [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: POSTPONED [smoser] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: DONE [serge-hallyn] start live block migration testing using juju of libvirt+kvm with local storage (1): DONE [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: POSTPONED [zulcss] Merge libvirt 1.0.6: DONE [serge-hallyn] no-change libvirt push to pick up new xen libraries (0): BLOCKED [smb] Pick up upstream Xen-4.3 release: DONE [smb] Refresh Debian/Ubuntu patches against Xen: DONE [smb] Decide how to include qemu-upstream: DONE [smb] Update packaging to allow libvirt to build the libxl driver: DONE [smb] Unit testing with xm and xl stack (native and libvirt): DONE [smb] Enable Xen compile for armhf: DONE [smb] Merge xen 4.3: DONE [zulcss] Write a nova using the lxc API: INPROGRESS Work items for ubuntu-13.09: [serge-hallyn] Work distro lxc tests upstream (2 @ sep 25): TODO [serge-hallyn] Address monitor versioning in lxc (1): DONE [zulcss] Push nova-lxc driver upstream: TODO [serge-hallyn] Add snapshot support to API (3): DONE - [serge-hallyn] Discuss API versioning of library and (python, lua, etc) hooks at plumbers (3 @ sep 17): TODO + [serge-hallyn] Discuss API versioning of library and (python, lua, etc) hooks at plumbers (3 @ sep 17): DONE [serge-hallyn] complete live block migration testing (using juju?) of libvirt+kvm with local storage (1 @ sep 23): DONE [zulcss] Follow up with Citrix's plans for xcp: TODO [smb] PUsh xen 4.3 to archive: TODO Work items for ubuntu-13.10: [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables (3 @ oct 7): TODO [serge-hallyn] live block migration testing using juju of libvirt+kvm with ceph (2 @ oct 2): TODO [zulcss] Fix apparmor bug preventing libvirt-lxc from mounting blockdevs: TODO -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Serge Hallyn: Work items changed: Work items: [serge-hallyn] (Dwight is pushing this, but has no lp id) Push fix for XFS and user namespaces: DONE [serge-hallyn] Fix lxc-net to be nestable with no user interaction: DONE [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: DONE [serge-hallyn] Exploit stacked apparmor profiles for container nesting: BLOCKED [serge-hallyn] Ask jjohansen about any apparmor kernel/userspace packages we can put in ubuntu-lxc ppa for testing stacked (0.5): DONE [serge-hallyn] Bisect kernel signal delivery bug affecting lxc: DONE [serge-hallyn] Improve cgroup support in nested case: DONE [serge-hallyn] write POC of nestable cgroup manager: POSTPONED [serge-hallyn] Pursue subuid patchset for shadow: DONE [serge-hallyn] Enable unprivileged container creation: DONE [serge-hallyn] Write a privileged helper to facilitate unprivileged networked container: DONE [serge-hallyn] Enable unprivileged container starting (network): POSTPONED [serge-hallyn] Enable unprivileged container starting (cgroups): DONE [serge-hallyn] Enable unprivileged container starting (complete): POSTPONED [serge-hallyn] Add console support to API (Dwight): DONE [serge-hallyn] Add attach support to API (Christian): DONE [serge-hallyn] Convert create to API: DONE [serge-hallyn] Convert stop to API: DONE [serge-hallyn] Convert destroy to API: DONE [serge-hallyn] List lxc programs to be converted to API (https://wiki.ubuntu.com/LxcAPIConversion): DONE [serge-hallyn] Update locking in API to handle killed programs: DONE [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): DONE [serge-hallyn] Improve thread safety in API: DONE [serge-hallyn] Discuss upstream stable branches with upstream (sent email to list): DONE [serge-hallyn] Get CONFIG_USER_NS=y into kernel (as soon as saucy+1 opens): POSTPONED [serge-hallyn] Merge qemu 1.5.0: DONE [serge-hallyn] Write loopback backingstore driver: DONE [serge-hallyn] Write qemu-nbd backingstore driver: POSTPONED [serge-hallyn] Investigate openvswitch bridges by default in libvirt (1): DONE [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): POSTPONED [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: POSTPONED [smoser] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: DONE [serge-hallyn] start live block migration testing using juju of libvirt+kvm with local storage (1): DONE [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: POSTPONED [zulcss] Merge libvirt 1.0.6: DONE [serge-hallyn] no-change libvirt push to pick up new xen libraries (0): BLOCKED [smb] Pick up upstream Xen-4.3 release: DONE [smb] Refresh Debian/Ubuntu patches against Xen: DONE [smb] Decide how to include qemu-upstream: DONE [smb] Update packaging to allow libvirt to build the libxl driver: DONE [smb] Unit testing with xm and xl stack (native and libvirt): DONE [smb] Enable Xen compile for armhf: DONE [smb] Merge xen 4.3: DONE [zulcss] Write a nova using the lxc API: INPROGRESS Work items for ubuntu-13.09: [serge-hallyn] Work distro lxc tests upstream (2 @ sep 25): TODO [serge-hallyn] Address monitor versioning in lxc (1): DONE [zulcss] Push nova-lxc driver upstream: TODO [serge-hallyn] Add snapshot support to API (3): DONE [serge-hallyn] Discuss API versioning of library and (python, lua, etc) hooks at plumbers (3 @ sep 17): TODO - [serge-hallyn] complete live block migration testing (using juju?) of libvirt+kvm with local storage (1 @ sep 23): TODO + [serge-hallyn] complete live block migration testing (using juju?) of libvirt+kvm with local storage (1 @ sep 23): DONE [zulcss] Follow up with Citrix's plans for xcp: TODO [smb] PUsh xen 4.3 to archive: TODO Work items for ubuntu-13.10: [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables (3 @ oct 7): TODO [serge-hallyn] live block migration testing using juju of libvirt+kvm with ceph (2 @ oct 2): TODO [zulcss] Fix apparmor bug preventing libvirt-lxc from mounting blockdevs: TODO -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Serge Hallyn: Work items changed: Work items: [serge-hallyn] (Dwight is pushing this, but has no lp id) Push fix for XFS and user namespaces: DONE [serge-hallyn] Fix lxc-net to be nestable with no user interaction: DONE [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: DONE [serge-hallyn] Exploit stacked apparmor profiles for container nesting: BLOCKED [serge-hallyn] Ask jjohansen about any apparmor kernel/userspace packages we can put in ubuntu-lxc ppa for testing stacked (0.5): DONE [serge-hallyn] Bisect kernel signal delivery bug affecting lxc: DONE [serge-hallyn] Improve cgroup support in nested case: DONE [serge-hallyn] write POC of nestable cgroup manager: POSTPONED [serge-hallyn] Pursue subuid patchset for shadow: DONE [serge-hallyn] Enable unprivileged container creation: DONE [serge-hallyn] Write a privileged helper to facilitate unprivileged networked container: DONE [serge-hallyn] Enable unprivileged container starting (network): POSTPONED [serge-hallyn] Enable unprivileged container starting (cgroups): DONE [serge-hallyn] Enable unprivileged container starting (complete): POSTPONED [serge-hallyn] Add console support to API (Dwight): DONE [serge-hallyn] Add attach support to API (Christian): DONE [serge-hallyn] Convert create to API: DONE [serge-hallyn] Convert stop to API: DONE [serge-hallyn] Convert destroy to API: DONE [serge-hallyn] List lxc programs to be converted to API (https://wiki.ubuntu.com/LxcAPIConversion): DONE [serge-hallyn] Update locking in API to handle killed programs: DONE [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): DONE [serge-hallyn] Improve thread safety in API: DONE [serge-hallyn] Discuss upstream stable branches with upstream (sent email to list): DONE [serge-hallyn] Get CONFIG_USER_NS=y into kernel (as soon as saucy+1 opens): POSTPONED [serge-hallyn] Merge qemu 1.5.0: DONE [serge-hallyn] Write loopback backingstore driver: DONE [serge-hallyn] Write qemu-nbd backingstore driver: POSTPONED [serge-hallyn] Investigate openvswitch bridges by default in libvirt (1): DONE [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): POSTPONED [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: POSTPONED [smoser] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: DONE [serge-hallyn] start live block migration testing using juju of libvirt+kvm with local storage (1): DONE [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: POSTPONED [zulcss] Merge libvirt 1.0.6: DONE [serge-hallyn] no-change libvirt push to pick up new xen libraries (0): BLOCKED [smb] Pick up upstream Xen-4.3 release: DONE [smb] Refresh Debian/Ubuntu patches against Xen: DONE [smb] Decide how to include qemu-upstream: DONE [smb] Update packaging to allow libvirt to build the libxl driver: DONE [smb] Unit testing with xm and xl stack (native and libvirt): DONE [smb] Enable Xen compile for armhf: DONE [smb] Merge xen 4.3: DONE [zulcss] Write a nova using the lxc API: INPROGRESS Work items for ubuntu-13.09: [serge-hallyn] Work distro lxc tests upstream (2 @ sep 25): TODO [serge-hallyn] Address monitor versioning in lxc (1): DONE [zulcss] Push nova-lxc driver upstream: TODO - [serge-hallyn] Add snapshot support to API (3): INPROGRESS + [serge-hallyn] Add snapshot support to API (3): DONE [serge-hallyn] Discuss API versioning of library and (python, lua, etc) hooks at plumbers (3 @ sep 17): TODO [serge-hallyn] complete live block migration testing (using juju?) of libvirt+kvm with local storage (1 @ sep 23): TODO [zulcss] Follow up with Citrix's plans for xcp: TODO [smb] PUsh xen 4.3 to archive: TODO Work items for ubuntu-13.10: [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables (3 @ oct 7): TODO [serge-hallyn] live block migration testing using juju of libvirt+kvm with ceph (2 @ oct 2): TODO [zulcss] Fix apparmor bug preventing libvirt-lxc from mounting blockdevs: TODO -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Serge Hallyn: Work items changed: Work items: [serge-hallyn] (Dwight is pushing this, but has no lp id) Push fix for XFS and user namespaces: DONE [serge-hallyn] Fix lxc-net to be nestable with no user interaction: DONE [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: DONE [serge-hallyn] Exploit stacked apparmor profiles for container nesting: BLOCKED [serge-hallyn] Ask jjohansen about any apparmor kernel/userspace packages we can put in ubuntu-lxc ppa for testing stacked (0.5): DONE [serge-hallyn] Bisect kernel signal delivery bug affecting lxc: DONE [serge-hallyn] Improve cgroup support in nested case: DONE [serge-hallyn] write POC of nestable cgroup manager: POSTPONED [serge-hallyn] Pursue subuid patchset for shadow: DONE [serge-hallyn] Enable unprivileged container creation: DONE [serge-hallyn] Write a privileged helper to facilitate unprivileged networked container: DONE [serge-hallyn] Enable unprivileged container starting (network): POSTPONED [serge-hallyn] Enable unprivileged container starting (cgroups): DONE [serge-hallyn] Enable unprivileged container starting (complete): POSTPONED [serge-hallyn] Add console support to API (Dwight): DONE [serge-hallyn] Add attach support to API (Christian): DONE [serge-hallyn] Convert create to API: DONE [serge-hallyn] Convert stop to API: DONE [serge-hallyn] Convert destroy to API: DONE [serge-hallyn] List lxc programs to be converted to API (https://wiki.ubuntu.com/LxcAPIConversion): DONE [serge-hallyn] Update locking in API to handle killed programs: DONE [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): DONE [serge-hallyn] Improve thread safety in API: DONE [serge-hallyn] Discuss upstream stable branches with upstream (sent email to list): DONE [serge-hallyn] Get CONFIG_USER_NS=y into kernel (as soon as saucy+1 opens): POSTPONED [serge-hallyn] Merge qemu 1.5.0: DONE [serge-hallyn] Write loopback backingstore driver: DONE [serge-hallyn] Write qemu-nbd backingstore driver: POSTPONED [serge-hallyn] Investigate openvswitch bridges by default in libvirt (1): DONE [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): POSTPONED [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: POSTPONED [smoser] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: DONE [serge-hallyn] start live block migration testing using juju of libvirt+kvm with local storage (1): DONE [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: POSTPONED [zulcss] Merge libvirt 1.0.6: DONE [serge-hallyn] no-change libvirt push to pick up new xen libraries (0): BLOCKED [smb] Pick up upstream Xen-4.3 release: DONE [smb] Refresh Debian/Ubuntu patches against Xen: DONE [smb] Decide how to include qemu-upstream: DONE [smb] Update packaging to allow libvirt to build the libxl driver: DONE [smb] Unit testing with xm and xl stack (native and libvirt): DONE [smb] Enable Xen compile for armhf: DONE [smb] Merge xen 4.3: DONE [zulcss] Write a nova using the lxc API: INPROGRESS Work items for ubuntu-13.09: [serge-hallyn] Work distro lxc tests upstream (2): TODO - [serge-hallyn] Solve monitor versioning in lxc (1): TODO [zulcss] Push nova-lxc driver upstream: TODO - [serge-hallyn] Add snapshot support to API (3): TODO + [serge-hallyn] Add snapshot support to API (3): INPROGRESS [serge-hallyn] Discuss API versioning of library and (python, lua, etc) hooks at plumbers: TODO [serge-hallyn] complete live block migration testing (using juju?) of libvirt+kvm with local storage (1): TODO [zulcss] Follow up with Citrix's plans for xcp: TODO [smb] PUsh xen 4.3 to archive: TODO Work items for ubuntu-13.10: [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables (3): TODO [serge-hallyn] live block migration testing using juju of libvirt+kvm with ceph (2): TODO [zulcss] Fix apparmor bug preventing libvirt-lxc from mounting blockdevs: TODO -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Serge Hallyn: Whiteboard changed: [USER STORIES] Abe would like to run untrusted workloads in a container. Billy would like for his users to be able to use containers without giving them root access. Charlie would like to confine users with flexible cgroups. Denise is writing an application using containers, and wants to re-use the tested core lxc API. Erica would like openstack-lxc users to have all the advanced features of lxc (apparmor protection, nesting, etc). [ASSUMPTIONS] A fix is accepted upstream to allow user namespaces to be used alongside XFS. [USER ACCEPTANCE] Set up a user with subuids and use it to create and run a container. [RELEASE NOTE/BLOG] User namespaces, apparmor, and seccomp are now leveraged to provide a secure container environment. Containers can now be created and used by unprivileged users. There is built-in support for boot-time configuration of control groups. + + [NOTES] + + Note that work items targetd to ubuntu-13.09 and ubuntu-13.10 are + targeted for completion upstream during saucy cycle, but not to + hit saucy. Note that ovmf work will not be complete upstream, + this item is to investigate and organize (pursue). -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Serge Hallyn: Work items changed: Work items: [serge-hallyn] (Dwight is pushing this, but has no lp id) Push fix for XFS and user namespaces: DONE [serge-hallyn] Fix lxc-net to be nestable with no user interaction: DONE [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: DONE [serge-hallyn] Exploit stacked apparmor profiles for container nesting: BLOCKED [serge-hallyn] Ask jjohansen about any apparmor kernel/userspace packages we can put in ubuntu-lxc ppa for testing stacked (0.5): DONE [serge-hallyn] Bisect kernel signal delivery bug affecting lxc: DONE [serge-hallyn] Improve cgroup support in nested case: DONE [serge-hallyn] write POC of nestable cgroup manager: POSTPONED [serge-hallyn] Pursue subuid patchset for shadow: DONE [serge-hallyn] Enable unprivileged container creation: DONE [serge-hallyn] Write a privileged helper to facilitate unprivileged networked container: DONE [serge-hallyn] Enable unprivileged container starting (network): POSTPONED [serge-hallyn] Enable unprivileged container starting (cgroups): DONE [serge-hallyn] Enable unprivileged container starting (complete): POSTPONED [serge-hallyn] Add console support to API (Dwight): DONE [serge-hallyn] Add attach support to API (Christian): DONE [serge-hallyn] Convert create to API: DONE [serge-hallyn] Convert stop to API: DONE [serge-hallyn] Convert destroy to API: DONE [serge-hallyn] List lxc programs to be converted to API (https://wiki.ubuntu.com/LxcAPIConversion): DONE [serge-hallyn] Update locking in API to handle killed programs: DONE [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): DONE [serge-hallyn] Improve thread safety in API: DONE [serge-hallyn] Discuss upstream stable branches with upstream (sent email to list): DONE [serge-hallyn] Get CONFIG_USER_NS=y into kernel (as soon as saucy+1 opens): POSTPONED [serge-hallyn] Merge qemu 1.5.0: DONE [serge-hallyn] Write loopback backingstore driver: DONE [serge-hallyn] Write qemu-nbd backingstore driver: POSTPONED [serge-hallyn] Investigate openvswitch bridges by default in libvirt (1): DONE [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): POSTPONED [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: POSTPONED [smoser] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: DONE [serge-hallyn] start live block migration testing using juju of libvirt+kvm with local storage (1): DONE [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: POSTPONED [zulcss] Merge libvirt 1.0.6: DONE [serge-hallyn] no-change libvirt push to pick up new xen libraries (0): BLOCKED [smb] Pick up upstream Xen-4.3 release: DONE [smb] Refresh Debian/Ubuntu patches against Xen: DONE [smb] Decide how to include qemu-upstream: DONE [smb] Update packaging to allow libvirt to build the libxl driver: DONE [smb] Unit testing with xm and xl stack (native and libvirt): DONE [smb] Enable Xen compile for armhf: DONE [smb] Merge xen 4.3: DONE [zulcss] Write a nova using the lxc API: INPROGRESS Work items for ubuntu-13.09: - [serge-hallyn] Work distro lxc tests upstream (2): TODO [serge-hallyn] Address monitor versioning in lxc (1): DONE [zulcss] Push nova-lxc driver upstream: TODO [serge-hallyn] Add snapshot support to API (3): INPROGRESS - [serge-hallyn] Discuss API versioning of library and (python, lua, etc) hooks at plumbers: TODO - [serge-hallyn] complete live block migration testing (using juju?) of libvirt+kvm with local storage (1): TODO [zulcss] Follow up with Citrix's plans for xcp: TODO [smb] PUsh xen 4.3 to archive: TODO Work items for ubuntu-13.10: - [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables (3): TODO - [serge-hallyn] live block migration testing using juju of libvirt+kvm with ceph (2): TODO [zulcss] Fix apparmor bug preventing libvirt-lxc from mounting blockdevs: TODO -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Serge Hallyn: Work items changed: Work items: [serge-hallyn] (Dwight is pushing this, but has no lp id) Push fix for XFS and user namespaces: DONE [serge-hallyn] Fix lxc-net to be nestable with no user interaction: DONE [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: DONE [serge-hallyn] Exploit stacked apparmor profiles for container nesting: BLOCKED [serge-hallyn] Ask jjohansen about any apparmor kernel/userspace packages we can put in ubuntu-lxc ppa for testing stacked (0.5): DONE [serge-hallyn] Bisect kernel signal delivery bug affecting lxc: DONE [serge-hallyn] Improve cgroup support in nested case: DONE [serge-hallyn] write POC of nestable cgroup manager: POSTPONED [serge-hallyn] Pursue subuid patchset for shadow: DONE [serge-hallyn] Enable unprivileged container creation: DONE [serge-hallyn] Write a privileged helper to facilitate unprivileged networked container: DONE [serge-hallyn] Enable unprivileged container starting (network): POSTPONED [serge-hallyn] Enable unprivileged container starting (cgroups): DONE [serge-hallyn] Enable unprivileged container starting (complete): POSTPONED [serge-hallyn] Add console support to API (Dwight): DONE [serge-hallyn] Add attach support to API (Christian): DONE + + Work items for ubuntu-13.09: [serge-hallyn] Add snapshot support to API (3): TODO [serge-hallyn] Solve monitor versioning in lxc (1): TODO [serge-hallyn] Discuss API versioning of library and (python, lua, etc) hooks at plumbers: TODO + + Work items: [serge-hallyn] Convert create to API: DONE [serge-hallyn] Convert stop to API: DONE [serge-hallyn] Convert destroy to API: DONE [serge-hallyn] List lxc programs to be converted to API (https://wiki.ubuntu.com/LxcAPIConversion): DONE [serge-hallyn] Update locking in API to handle killed programs: DONE [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): DONE [serge-hallyn] Improve thread safety in API: DONE + + Work items for ubuntu-13.09: [serge-hallyn] Work distro lxc tests upstream (2): TODO + + Work items: [serge-hallyn] Discuss upstream stable branches with upstream (sent email to list): DONE [serge-hallyn] Get CONFIG_USER_NS=y into kernel (as soon as saucy+1 opens): POSTPONED [serge-hallyn] Merge qemu 1.5.0: DONE [zulcss] Write a nova using the lxc API: INPROGRESS + + Work items for ubuntu-13.09: [zulcss] Push nova-lxc driver upstream: TODO + + Work items: [serge-hallyn] Write loopback backingstore driver: DONE [serge-hallyn] Write qemu-nbd backingstore driver: POSTPONED + + Work items for ubuntu-13.10: [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables (3): TODO + + Work items: [serge-hallyn] Investigate openvswitch bridges by default in libvirt (1): DONE [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): POSTPONED [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: POSTPONED [smoser] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: DONE + + Work items for ubuntu-13.10: [serge-hallyn] live block migration testing using juju of libvirt+kvm with ceph (2): TODO + + Work items: [serge-hallyn] start live block migration testing using juju of libvirt+kvm with local storage (1): DONE + + Work items for ubuntu-13.09: [serge-hallyn] complete live block migration testing (using juju?) of libvirt+kvm with local storage (1): TODO + + Work items: [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: POSTPONED + + Work items for ubuntu-13.10: [zulcss] Fix apparmor bug preventing libvirt-lxc from mounting blockdevs: TODO + + Work items: [zulcss] Merge libvirt 1.0.6: DONE + + Work items for ubuntu-13.09: [zulcss] Follow up with Citrix's plans for xcp: TODO - [smb] Merge xen 4.3: INPROGRESS + + Work items: + [smb] Merge xen 4.3: DONE + + Work items for ubuntu-13.09: [smb] PUsh xen 4.3 to archive: TODO + + Work items: [serge-hallyn] no-change libvirt push to pick up new xen libraries (0): BLOCKED [smb] Pick up upstream Xen-4.3 release: DONE [smb] Refresh Debian/Ubuntu patches against Xen: DONE [smb] Decide how to include qemu-upstream: DONE [smb] Update packaging to allow libvirt to build the libxl driver: DONE [smb] Unit testing with xm and xl stack (native and libvirt): DONE [smb] Enable Xen compile for armhf: DONE -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Serge Hallyn: Work items changed: Work items: [serge-hallyn] (Dwight is pushing this, but has no lp id) Push fix for XFS and user namespaces: DONE [serge-hallyn] Fix lxc-net to be nestable with no user interaction: DONE [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: DONE [serge-hallyn] Exploit stacked apparmor profiles for container nesting: BLOCKED - [serge-hallyn] Ask jjohansen about any apparmor kernel/userspace packages we can put in ubuntu-lxc ppa for testing stacked (0.5): TODO + [serge-hallyn] Ask jjohansen about any apparmor kernel/userspace packages we can put in ubuntu-lxc ppa for testing stacked (0.5): DONE [serge-hallyn] Bisect kernel signal delivery bug affecting lxc: DONE [serge-hallyn] Improve cgroup support in nested case: DONE [serge-hallyn] write POC of nestable cgroup manager: POSTPONED [serge-hallyn] Pursue subuid patchset for shadow: DONE [serge-hallyn] Enable unprivileged container creation: DONE [serge-hallyn] Write a privileged helper to facilitate unprivileged networked container: DONE [serge-hallyn] Enable unprivileged container starting (network): POSTPONED [serge-hallyn] Enable unprivileged container starting (cgroups): DONE [serge-hallyn] Enable unprivileged container starting (complete): POSTPONED [serge-hallyn] Add console support to API (Dwight): DONE [serge-hallyn] Add attach support to API (Christian): DONE [serge-hallyn] Add snapshot support to API (3): TODO [serge-hallyn] Solve monitor versioning in lxc (1): TODO [serge-hallyn] Discuss API versioning of library and (python, lua, etc) hooks at plumbers: TODO [serge-hallyn] Convert create to API: DONE [serge-hallyn] Convert stop to API: DONE [serge-hallyn] Convert destroy to API: DONE [serge-hallyn] List lxc programs to be converted to API (https://wiki.ubuntu.com/LxcAPIConversion): DONE [serge-hallyn] Update locking in API to handle killed programs: DONE [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): DONE [serge-hallyn] Improve thread safety in API: DONE [serge-hallyn] Work distro lxc tests upstream (2): TODO [serge-hallyn] Discuss upstream stable branches with upstream (sent email to list): DONE [serge-hallyn] Get CONFIG_USER_NS=y into kernel (as soon as saucy+1 opens): POSTPONED [serge-hallyn] Merge qemu 1.5.0: DONE [zulcss] Write a nova using the lxc API: INPROGRESS [zulcss] Push nova-lxc driver upstream: TODO [serge-hallyn] Write loopback backingstore driver: DONE [serge-hallyn] Write qemu-nbd backingstore driver: POSTPONED [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables (3): TODO - [serge-hallyn] Investigate openvswitch bridges by default in libvirt (1): TODO + [serge-hallyn] Investigate openvswitch bridges by default in libvirt (1): DONE [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): POSTPONED [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: POSTPONED [smoser] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: DONE [serge-hallyn] live block migration testing using juju of libvirt+kvm with ceph (2): TODO [serge-hallyn] start live block migration testing using juju of libvirt+kvm with local storage (1): DONE [serge-hallyn] complete live block migration testing (using juju?) of libvirt+kvm with local storage (1): TODO [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: POSTPONED [zulcss] Fix apparmor bug preventing libvirt-lxc from mounting blockdevs: TODO [zulcss] Merge libvirt 1.0.6: DONE [zulcss] Follow up with Citrix's plans for xcp: TODO [smb] Merge xen 4.3: INPROGRESS [smb] PUsh xen 4.3 to archive: TODO [serge-hallyn] no-change libvirt push to pick up new xen libraries (0): BLOCKED [smb] Pick up upstream Xen-4.3 release: DONE [smb] Refresh Debian/Ubuntu patches against Xen: DONE [smb] Decide how to include qemu-upstream: DONE [smb] Update packaging to allow libvirt to build the libxl driver: DONE [smb] Unit testing with xm and xl stack (native and libvirt): DONE [smb] Enable Xen compile for armhf: DONE -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Scott Moser: Work items changed: Work items: [serge-hallyn] (Dwight is pushing this, but has no lp id) Push fix for XFS and user namespaces: DONE [serge-hallyn] Fix lxc-net to be nestable with no user interaction: DONE [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: DONE [serge-hallyn] Exploit stacked apparmor profiles for container nesting: BLOCKED [serge-hallyn] Bisect kernel signal delivery bug affecting lxc: DONE [serge-hallyn] Improve cgroup support in nested case: DONE [serge-hallyn] write POC of nestable cgroup manager: POSTPONED [serge-hallyn] Pursue subuid patchset for shadow: DONE [serge-hallyn] Enable unprivileged container creation: DONE [serge-hallyn] Write a privileged helper to facilitate unprivileged networked container: DONE [serge-hallyn] Enable unprivileged container starting (network): POSTPONED [serge-hallyn] Enable unprivileged container starting (cgroups): DONE [serge-hallyn] Enable unprivileged container starting (complete): POSTPONED [serge-hallyn] Add console support to API (Dwight): DONE [serge-hallyn] Add attach support to API (Christian): DONE [serge-hallyn] Add snapshot support to API: TODO [serge-hallyn] Convert create to API: DONE [serge-hallyn] Convert stop to API: DONE [serge-hallyn] Convert destroy to API: DONE [serge-hallyn] List lxc programs to be converted to API (https://wiki.ubuntu.com/LxcAPIConversion): DONE [serge-hallyn] Update locking in API to handle killed programs: DONE [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): DONE [serge-hallyn] Improve thread safety in API: DONE [serge-hallyn] Work distro lxc tests upstream: TODO [serge-hallyn] Discuss upstream stable branches with upstream (sent email to list): DONE [serge-hallyn] Get CONFIG_USER_NS=y into kernel (requires XFS issue resolved): BLOCKED [serge-hallyn] Merge qemu 1.5.0: DONE [zulcss] Write a nova using the lxc API: INPROGRESS [serge-hallyn] Write loopback backingstore driver: DONE [serge-hallyn] Write qemu-nbd backingstore driver: POSTPONED [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables: TODO [serge-hallyn] Investigate openvswitch bridges by default in libvirt: TODO [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): BLOCKED [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: POSTPONED [smoser] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: DONE [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with ceph: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with local storage: INPROGRESS - [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: TODO + [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: POSTPONED [zulcss] Fix apparmor bug preventing libvirt-lxc from mounting blockdevs: TODO [zulcss] (or serge-hallyn) Write openstack patch to enable the new libvirt lxc-api driver: TODO [zulcss] Merge libvirt 1.0.6: TODO [zulcss] Follow up with Citrix's plans for xcp: TODO [smb] Merge xen 4.3: INPROGRESS [smb] Pick up upstream Xen-4.3 release: DONE [smb] Refresh Debian/Ubuntu patches against Xen: DONE [smb] Decide how to include qemu-upstream: DONE [smb] Update packaging to allow libvirt to build the libxl driver: DONE [smb] Unit testing with xm and xl stack (native and libvirt): DONE [smb] Enable Xen compile for armhf: DONE -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Serge Hallyn: Work items changed: Work items: [serge-hallyn] (Dwight is pushing this, but has no lp id) Push fix for XFS and user namespaces: DONE [serge-hallyn] Fix lxc-net to be nestable with no user interaction: DONE [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: DONE [serge-hallyn] Exploit stacked apparmor profiles for container nesting: BLOCKED [serge-hallyn] Bisect kernel signal delivery bug affecting lxc: DONE [serge-hallyn] Improve cgroup support in nested case: DONE [serge-hallyn] write POC of nestable cgroup manager: POSTPONED [serge-hallyn] Pursue subuid patchset for shadow: DONE [serge-hallyn] Enable unprivileged container creation: DONE [serge-hallyn] Write a privileged helper to facilitate unprivileged networked container: DONE [serge-hallyn] Enable unprivileged container starting (network): POSTPONED [serge-hallyn] Enable unprivileged container starting (cgroups): DONE [serge-hallyn] Enable unprivileged container starting (complete): POSTPONED [serge-hallyn] Add console support to API (Dwight): DONE [serge-hallyn] Add attach support to API (Christian): DONE - [serge-hallyn] Add snapshot support to API: TODO [serge-hallyn] Convert create to API: DONE [serge-hallyn] Convert stop to API: DONE [serge-hallyn] Convert destroy to API: DONE [serge-hallyn] List lxc programs to be converted to API (https://wiki.ubuntu.com/LxcAPIConversion): DONE [serge-hallyn] Update locking in API to handle killed programs: DONE [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): DONE [serge-hallyn] Improve thread safety in API: DONE - [serge-hallyn] Work distro lxc tests upstream: TODO [serge-hallyn] Discuss upstream stable branches with upstream (sent email to list): DONE - [serge-hallyn] Get CONFIG_USER_NS=y into kernel (requires XFS issue resolved): BLOCKED [serge-hallyn] Merge qemu 1.5.0: DONE [zulcss] Write a nova using the lxc API: INPROGRESS [serge-hallyn] Write loopback backingstore driver: DONE [serge-hallyn] Write qemu-nbd backingstore driver: POSTPONED - [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables: TODO - [serge-hallyn] Investigate openvswitch bridges by default in libvirt: TODO - [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): BLOCKED + [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): POSTPONED [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: POSTPONED [smoser] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: DONE - [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with ceph: TODO - [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with local storage: INPROGRESS [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: POSTPONED [zulcss] Fix apparmor bug preventing libvirt-lxc from mounting blockdevs: TODO - [zulcss] (or serge-hallyn) Write openstack patch to enable the new libvirt lxc-api driver: TODO - [zulcss] Merge libvirt 1.0.6: TODO + [zulcss] Merge libvirt 1.0.6: DONE [zulcss] Follow up with Citrix's plans for xcp: TODO [smb] Merge xen 4.3: INPROGRESS [smb] Pick up upstream Xen-4.3 release: DONE [smb] Refresh Debian/Ubuntu patches against Xen: DONE [smb] Decide how to include qemu-upstream: DONE [smb] Update packaging to allow libvirt to build the libxl driver: DONE [smb] Unit testing with xm and xl stack (native and libvirt): DONE [smb] Enable Xen compile for armhf: DONE -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Serge Hallyn: Work items changed: Work items: [serge-hallyn] (Dwight is pushing this, but has no lp id) Push fix for XFS and user namespaces: INPROGRESS [serge-hallyn] Fix lxc-net to be nestable with no user interaction: DONE [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: DONE [serge-hallyn] Exploit stacked apparmor profiles for container nesting: BLOCKED - [serge-hallyn] Bisect kernel signal delivery bug affecting lxc: INPROGRESS - [serge-hallyn] Improve cgroup support in nested case: INPROGRESS + [serge-hallyn] Bisect kernel signal delivery bug affecting lxc: DONE + [serge-hallyn] Improve cgroup support in nested case: DONE [serge-hallyn] write POC of nestable cgroup manager: POSTPONED [serge-hallyn] Pursue subuid patchset for shadow: DONE [serge-hallyn] Enable unprivileged container creation: DONE - [serge-hallyn] Enable unprivileged container starting (network): INPROGRESS + [serge-hallyn] Enable unprivileged container starting (network): POSTPONED [serge-hallyn] Enable unprivileged container starting (cgroups): DONE - [serge-hallyn] Enable unprivileged container starting (complete): TODO + [serge-hallyn] Enable unprivileged container starting (complete): POSTPONED [serge-hallyn] Add console support to API (Dwight): DONE - [serge-hallyn] Add attach support to API (Christian): TODO + [serge-hallyn] Add attach support to API (Christian): DONE [serge-hallyn] Add snapshot support to API: TODO [serge-hallyn] Convert create to API: DONE [serge-hallyn] Convert stop to API: DONE [serge-hallyn] Convert destroy to API: DONE - [serge-hallyn] List all other lxc-* programs to be converted to use the API: TODO [serge-hallyn] Update locking in API to handle killed programs: DONE [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): DONE [serge-hallyn] Improve thread safety in API: DONE [serge-hallyn] Work distro lxc tests upstream: TODO [serge-hallyn] Discuss upstream stable branches with upstream (sent email to list): DONE [serge-hallyn] Get CONFIG_USER_NS=y into kernel (requires XFS issue resolved): BLOCKED [serge-hallyn] Merge qemu 1.5.0: DONE - [zulcss] Write a nova using the lxc API: TODO + [zulcss] Write a nova using the lxc API: INPROGRESS [serge-hallyn] Write loopback backingstore driver: DONE [serge-hallyn] Write qemu-nbd backingstore driver: POSTPONED [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables: TODO [serge-hallyn] Investigate openvswitch bridges by default in libvirt: TODO [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): BLOCKED - [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: TODO + [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: POSTPONED [smoser] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: DONE [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with ceph: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with local storage: INPROGRESS [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: TODO [zulcss] Fix apparmor bug preventing libvirt-lxc from mounting blockdevs: TODO [zulcss] (or serge-hallyn) Write openstack patch to enable the new libvirt lxc-api driver: TODO [zulcss] Merge libvirt 1.0.6: TODO [zulcss] Follow up with Citrix's plans for xcp: TODO [smb] Merge xen 4.3: INPROGRESS [smb] Pick up upstream Xen-4.3 release: DONE [smb] Refresh Debian/Ubuntu patches against Xen: DONE [smb] Decide how to include qemu-upstream: DONE [smb] Update packaging to allow libvirt to build the libxl driver: DONE [smb] Unit testing with xm and xl stack (native and libvirt): DONE [smb] Enable Xen compile for armhf: DONE -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Serge Hallyn: Work items changed: Work items: - [serge-hallyn] (Dwight is pushing this, but has no lp id) Push fix for XFS and user namespaces: INPROGRESS + [serge-hallyn] (Dwight is pushing this, but has no lp id) Push fix for XFS and user namespaces: DONE [serge-hallyn] Fix lxc-net to be nestable with no user interaction: DONE [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: DONE [serge-hallyn] Exploit stacked apparmor profiles for container nesting: BLOCKED [serge-hallyn] Bisect kernel signal delivery bug affecting lxc: DONE [serge-hallyn] Improve cgroup support in nested case: DONE [serge-hallyn] write POC of nestable cgroup manager: POSTPONED [serge-hallyn] Pursue subuid patchset for shadow: DONE [serge-hallyn] Enable unprivileged container creation: DONE [serge-hallyn] Write a privileged helper to facilitate unprivileged networked container: DONE [serge-hallyn] Enable unprivileged container starting (network): POSTPONED [serge-hallyn] Enable unprivileged container starting (cgroups): DONE [serge-hallyn] Enable unprivileged container starting (complete): POSTPONED [serge-hallyn] Add console support to API (Dwight): DONE [serge-hallyn] Add attach support to API (Christian): DONE [serge-hallyn] Add snapshot support to API: TODO [serge-hallyn] Convert create to API: DONE [serge-hallyn] Convert stop to API: DONE [serge-hallyn] Convert destroy to API: DONE [serge-hallyn] List lxc programs to be converted to API (https://wiki.ubuntu.com/LxcAPIConversion): DONE [serge-hallyn] Update locking in API to handle killed programs: DONE [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): DONE [serge-hallyn] Improve thread safety in API: DONE [serge-hallyn] Work distro lxc tests upstream: TODO [serge-hallyn] Discuss upstream stable branches with upstream (sent email to list): DONE [serge-hallyn] Get CONFIG_USER_NS=y into kernel (requires XFS issue resolved): BLOCKED [serge-hallyn] Merge qemu 1.5.0: DONE [zulcss] Write a nova using the lxc API: INPROGRESS [serge-hallyn] Write loopback backingstore driver: DONE [serge-hallyn] Write qemu-nbd backingstore driver: POSTPONED [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables: TODO [serge-hallyn] Investigate openvswitch bridges by default in libvirt: TODO [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): BLOCKED [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: POSTPONED [smoser] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: DONE [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with ceph: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with local storage: INPROGRESS [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: TODO [zulcss] Fix apparmor bug preventing libvirt-lxc from mounting blockdevs: TODO [zulcss] (or serge-hallyn) Write openstack patch to enable the new libvirt lxc-api driver: TODO [zulcss] Merge libvirt 1.0.6: TODO [zulcss] Follow up with Citrix's plans for xcp: TODO [smb] Merge xen 4.3: INPROGRESS [smb] Pick up upstream Xen-4.3 release: DONE [smb] Refresh Debian/Ubuntu patches against Xen: DONE [smb] Decide how to include qemu-upstream: DONE [smb] Update packaging to allow libvirt to build the libxl driver: DONE [smb] Unit testing with xm and xl stack (native and libvirt): DONE [smb] Enable Xen compile for armhf: DONE -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Serge Hallyn: Work items changed: Work items: [serge-hallyn] (Dwight is pushing this, but has no lp id) Push fix for XFS and user namespaces: INPROGRESS [serge-hallyn] Fix lxc-net to be nestable with no user interaction: DONE [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: DONE [serge-hallyn] Exploit stacked apparmor profiles for container nesting: BLOCKED [serge-hallyn] Bisect kernel signal delivery bug affecting lxc: INPROGRESS + [serge-hallyn] Improve cgroup support in nested case: INPROGRESS [serge-hallyn] write POC of nestable cgroup manager: TODO [serge-hallyn] Pursue subuid patchset for shadow: DONE [serge-hallyn] Enable unprivileged container creation: DONE [serge-hallyn] Enable unprivileged container starting (network): TODO [serge-hallyn] Enable unprivileged container starting (cgroups): DONE [serge-hallyn] Enable unprivileged container starting (complete): TODO [serge-hallyn] Add console support to API (Dwight): DONE [serge-hallyn] Add attach support to API (Christian): TODO [serge-hallyn] Add snapshot support to API: TODO [serge-hallyn] Convert create to API: DONE [serge-hallyn] Convert stop to API: DONE [serge-hallyn] Convert destroy to API: DONE [serge-hallyn] List all other lxc-* programs to be converted to use the API: TODO [serge-hallyn] Update locking in API to handle killed programs: DONE [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): DONE [serge-hallyn] Improve thread safety in API: DONE [serge-hallyn] Work distro lxc tests upstream: TODO [serge-hallyn] Discuss upstream stable branches with upstream (sent email to list): DONE [serge-hallyn] Get CONFIG_USER_NS=y into kernel (requires XFS issue resolved): BLOCKED [serge-hallyn] Merge qemu 1.5.0: DONE [zulcss] Write a nova using the lxc API: TODO [serge-hallyn] Write loopback backingstore driver: DONE [serge-hallyn] Write qemu-nbd backingstore driver: POSTPONED [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables: TODO [serge-hallyn] Investigate openvswitch bridges by default in libvirt: TODO [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): BLOCKED [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: TODO [serge-hallyn] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with ceph: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with local storage: INPROGRESS [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: TODO [zulcss] Fix apparmor bug preventing libvirt-lxc from mounting blockdevs: TODO [zulcss] (or serge-hallyn) Write openstack patch to enable the new libvirt lxc-api driver: TODO [zulcss] Merge libvirt 1.0.6: TODO [zulcss] Follow up with Citrix's plans for xcp: TODO [smb] Merge xen 4.3: INPROGRESS [smb] Pick up upstream Xen-4.3 release: DONE [smb] Refresh Debian/Ubuntu patches against Xen: DONE [smb] Decide how to include qemu-upstream: DONE [smb] Update packaging to allow libvirt to build the libxl driver: DONE [smb] Unit testing with xm and xl stack (native and libvirt): DONE [smb] Enable Xen compile for armhf: DONE -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Serge Hallyn: Work items changed: Work items: [serge-hallyn] (Dwight is pushing this, but has no lp id) Push fix for XFS and user namespaces: INPROGRESS [serge-hallyn] Fix lxc-net to be nestable with no user interaction: DONE [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: DONE [serge-hallyn] Exploit stacked apparmor profiles for container nesting: BLOCKED [serge-hallyn] Bisect kernel signal delivery bug affecting lxc: INPROGRESS [serge-hallyn] Improve cgroup support in nested case: INPROGRESS - [serge-hallyn] write POC of nestable cgroup manager: TODO + [serge-hallyn] write POC of nestable cgroup manager: POSTPONED [serge-hallyn] Pursue subuid patchset for shadow: DONE [serge-hallyn] Enable unprivileged container creation: DONE - [serge-hallyn] Enable unprivileged container starting (network): TODO + [serge-hallyn] Enable unprivileged container starting (network): INPROGRESS [serge-hallyn] Enable unprivileged container starting (cgroups): DONE [serge-hallyn] Enable unprivileged container starting (complete): TODO [serge-hallyn] Add console support to API (Dwight): DONE [serge-hallyn] Add attach support to API (Christian): TODO [serge-hallyn] Add snapshot support to API: TODO [serge-hallyn] Convert create to API: DONE [serge-hallyn] Convert stop to API: DONE [serge-hallyn] Convert destroy to API: DONE [serge-hallyn] List all other lxc-* programs to be converted to use the API: TODO [serge-hallyn] Update locking in API to handle killed programs: DONE [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): DONE [serge-hallyn] Improve thread safety in API: DONE [serge-hallyn] Work distro lxc tests upstream: TODO [serge-hallyn] Discuss upstream stable branches with upstream (sent email to list): DONE [serge-hallyn] Get CONFIG_USER_NS=y into kernel (requires XFS issue resolved): BLOCKED [serge-hallyn] Merge qemu 1.5.0: DONE [zulcss] Write a nova using the lxc API: TODO [serge-hallyn] Write loopback backingstore driver: DONE [serge-hallyn] Write qemu-nbd backingstore driver: POSTPONED [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables: TODO [serge-hallyn] Investigate openvswitch bridges by default in libvirt: TODO [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): BLOCKED [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: TODO [smoser] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: DONE [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with ceph: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with local storage: INPROGRESS [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: TODO [zulcss] Fix apparmor bug preventing libvirt-lxc from mounting blockdevs: TODO [zulcss] (or serge-hallyn) Write openstack patch to enable the new libvirt lxc-api driver: TODO [zulcss] Merge libvirt 1.0.6: TODO [zulcss] Follow up with Citrix's plans for xcp: TODO [smb] Merge xen 4.3: INPROGRESS [smb] Pick up upstream Xen-4.3 release: DONE [smb] Refresh Debian/Ubuntu patches against Xen: DONE [smb] Decide how to include qemu-upstream: DONE [smb] Update packaging to allow libvirt to build the libxl driver: DONE [smb] Unit testing with xm and xl stack (native and libvirt): DONE [smb] Enable Xen compile for armhf: DONE -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Serge Hallyn: Work items changed: Work items: [serge-hallyn] (Dwight is pushing this, but has no lp id) Push fix for XFS and user namespaces: INPROGRESS [serge-hallyn] Fix lxc-net to be nestable with no user interaction: DONE [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: DONE [serge-hallyn] Exploit stacked apparmor profiles for container nesting: BLOCKED [serge-hallyn] Bisect kernel signal delivery bug affecting lxc: INPROGRESS [serge-hallyn] Improve cgroup support in nested case: INPROGRESS [serge-hallyn] write POC of nestable cgroup manager: TODO [serge-hallyn] Pursue subuid patchset for shadow: DONE [serge-hallyn] Enable unprivileged container creation: DONE [serge-hallyn] Enable unprivileged container starting (network): TODO [serge-hallyn] Enable unprivileged container starting (cgroups): DONE [serge-hallyn] Enable unprivileged container starting (complete): TODO [serge-hallyn] Add console support to API (Dwight): DONE [serge-hallyn] Add attach support to API (Christian): TODO [serge-hallyn] Add snapshot support to API: TODO [serge-hallyn] Convert create to API: DONE [serge-hallyn] Convert stop to API: DONE [serge-hallyn] Convert destroy to API: DONE [serge-hallyn] List all other lxc-* programs to be converted to use the API: TODO [serge-hallyn] Update locking in API to handle killed programs: DONE [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): DONE [serge-hallyn] Improve thread safety in API: DONE [serge-hallyn] Work distro lxc tests upstream: TODO [serge-hallyn] Discuss upstream stable branches with upstream (sent email to list): DONE [serge-hallyn] Get CONFIG_USER_NS=y into kernel (requires XFS issue resolved): BLOCKED [serge-hallyn] Merge qemu 1.5.0: DONE [zulcss] Write a nova using the lxc API: TODO [serge-hallyn] Write loopback backingstore driver: DONE [serge-hallyn] Write qemu-nbd backingstore driver: POSTPONED [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables: TODO [serge-hallyn] Investigate openvswitch bridges by default in libvirt: TODO [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): BLOCKED [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: TODO - [serge-hallyn] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: TODO + [smoser] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: DONE [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with ceph: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with local storage: INPROGRESS [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: TODO [zulcss] Fix apparmor bug preventing libvirt-lxc from mounting blockdevs: TODO [zulcss] (or serge-hallyn) Write openstack patch to enable the new libvirt lxc-api driver: TODO [zulcss] Merge libvirt 1.0.6: TODO [zulcss] Follow up with Citrix's plans for xcp: TODO [smb] Merge xen 4.3: INPROGRESS [smb] Pick up upstream Xen-4.3 release: DONE [smb] Refresh Debian/Ubuntu patches against Xen: DONE [smb] Decide how to include qemu-upstream: DONE [smb] Update packaging to allow libvirt to build the libxl driver: DONE [smb] Unit testing with xm and xl stack (native and libvirt): DONE [smb] Enable Xen compile for armhf: DONE -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Serge Hallyn: Work items changed: Work items: - [ebiederm] Push fix for XFS and user namespaces: TODO + [serge-hallyn] (Dwight is pushing this, but has no lp id) Push fix for XFS and user namespaces: INPROGRESS [serge-hallyn] Fix lxc-net to be nestable with no user interaction: DONE [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: DONE [serge-hallyn] Exploit stacked apparmor profiles for container nesting: BLOCKED [serge-hallyn] Bisect kernel signal delivery bug affecting lxc: INPROGRESS - [serge-hallyn] write POC of nestable cgroup manager: INPROGRESS + [serge-hallyn] write POC of nestable cgroup manager: TODO [serge-hallyn] Pursue subuid patchset for shadow: DONE - [serge-hallyn] Enable unprivileged container creation: INPROGRESS + [serge-hallyn] Enable unprivileged container creation: DONE [serge-hallyn] Enable unprivileged container starting (network): TODO - [serge-hallyn] Enable unprivileged container starting (cgroups): TODO + [serge-hallyn] Enable unprivileged container starting (cgroups): DONE [serge-hallyn] Enable unprivileged container starting (complete): TODO [serge-hallyn] Add console support to API (Dwight): DONE [serge-hallyn] Add attach support to API (Christian): TODO [serge-hallyn] Add snapshot support to API: TODO [serge-hallyn] Convert create to API: DONE [serge-hallyn] Convert stop to API: DONE [serge-hallyn] Convert destroy to API: DONE [serge-hallyn] List all other lxc-* programs to be converted to use the API: TODO [serge-hallyn] Update locking in API to handle killed programs: DONE [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): DONE [serge-hallyn] Improve thread safety in API: DONE [serge-hallyn] Work distro lxc tests upstream: TODO - [serge-hallyn] Discuss upstream stable branches with upstream: TODO + [serge-hallyn] Discuss upstream stable branches with upstream (sent email to list): DONE [serge-hallyn] Get CONFIG_USER_NS=y into kernel (requires XFS issue resolved): BLOCKED [serge-hallyn] Merge qemu 1.5.0: DONE - [serge-hallyn] Write a libvirt drive using the lxc API: TODO + [zulcss] Write a nova using the lxc API: TODO [serge-hallyn] Write loopback backingstore driver: DONE - [serge-hallyn] Write qemu-nbd backingstore driver: TODO + [serge-hallyn] Write qemu-nbd backingstore driver: POSTPONED [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables: TODO [serge-hallyn] Investigate openvswitch bridges by default in libvirt: TODO [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): BLOCKED [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: TODO [serge-hallyn] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with ceph: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with local storage: INPROGRESS [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: TODO [zulcss] Fix apparmor bug preventing libvirt-lxc from mounting blockdevs: TODO [zulcss] (or serge-hallyn) Write openstack patch to enable the new libvirt lxc-api driver: TODO [zulcss] Merge libvirt 1.0.6: TODO [zulcss] Follow up with Citrix's plans for xcp: TODO [smb] Merge xen 4.3: INPROGRESS [smb] Pick up upstream Xen-4.3 release: DONE [smb] Refresh Debian/Ubuntu patches against Xen: DONE [smb] Decide how to include qemu-upstream: DONE [smb] Update packaging to allow libvirt to build the libxl driver: DONE [smb] Unit testing with xm and xl stack (native and libvirt): DONE [smb] Enable Xen compile for armhf: DONE -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Stefan Bader: Work items changed: Work items: [ebiederm] Push fix for XFS and user namespaces: TODO [serge-hallyn] Fix lxc-net to be nestable with no user interaction: DONE [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: DONE [serge-hallyn] Exploit stacked apparmor profiles for container nesting: BLOCKED [serge-hallyn] Bisect kernel signal delivery bug affecting lxc: INPROGRESS [serge-hallyn] write POC of nestable cgroup manager: INPROGRESS [serge-hallyn] Pursue subuid patchset for shadow: DONE [serge-hallyn] Enable unprivileged container creation: INPROGRESS [serge-hallyn] Enable unprivileged container starting (network): TODO [serge-hallyn] Enable unprivileged container starting (cgroups): TODO [serge-hallyn] Enable unprivileged container starting (complete): TODO [serge-hallyn] Add console support to API (Dwight): DONE [serge-hallyn] Add attach support to API (Christian): TODO [serge-hallyn] Add snapshot support to API: TODO [serge-hallyn] Convert create to API: DONE [serge-hallyn] Convert stop to API: DONE [serge-hallyn] Convert destroy to API: DONE [serge-hallyn] List all other lxc-* programs to be converted to use the API: TODO [serge-hallyn] Update locking in API to handle killed programs: DONE [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): DONE [serge-hallyn] Improve thread safety in API: DONE [serge-hallyn] Work distro lxc tests upstream: TODO [serge-hallyn] Discuss upstream stable branches with upstream: TODO [serge-hallyn] Get CONFIG_USER_NS=y into kernel (requires XFS issue resolved): BLOCKED [serge-hallyn] Merge qemu 1.5.0: DONE [serge-hallyn] Write a libvirt drive using the lxc API: TODO [serge-hallyn] Write loopback backingstore driver: DONE [serge-hallyn] Write qemu-nbd backingstore driver: TODO [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables: TODO [serge-hallyn] Investigate openvswitch bridges by default in libvirt: TODO [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): BLOCKED [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: TODO [serge-hallyn] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with ceph: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with local storage: INPROGRESS [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: TODO [zulcss] Fix apparmor bug preventing libvirt-lxc from mounting blockdevs: TODO [zulcss] (or serge-hallyn) Write openstack patch to enable the new libvirt lxc-api driver: TODO [zulcss] Merge libvirt 1.0.6: TODO [zulcss] Follow up with Citrix's plans for xcp: TODO [smb] Merge xen 4.3: INPROGRESS [smb] Pick up upstream Xen-4.3 release: DONE [smb] Refresh Debian/Ubuntu patches against Xen: DONE [smb] Decide how to include qemu-upstream: DONE [smb] Update packaging to allow libvirt to build the libxl driver: DONE - [smb] Unit testing with xm and xl stack (native and libvirt): INPROGRESS + [smb] Unit testing with xm and xl stack (native and libvirt): DONE -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Stefan Bader: Work items changed: Work items: [ebiederm] Push fix for XFS and user namespaces: TODO [serge-hallyn] Fix lxc-net to be nestable with no user interaction: DONE [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: DONE [serge-hallyn] Exploit stacked apparmor profiles for container nesting: BLOCKED [serge-hallyn] Bisect kernel signal delivery bug affecting lxc: INPROGRESS [serge-hallyn] write POC of nestable cgroup manager: INPROGRESS [serge-hallyn] Pursue subuid patchset for shadow: DONE [serge-hallyn] Enable unprivileged container creation: INPROGRESS [serge-hallyn] Enable unprivileged container starting (network): TODO [serge-hallyn] Enable unprivileged container starting (cgroups): TODO [serge-hallyn] Enable unprivileged container starting (complete): TODO [serge-hallyn] Add console support to API (Dwight): DONE [serge-hallyn] Add attach support to API (Christian): TODO [serge-hallyn] Add snapshot support to API: TODO [serge-hallyn] Convert create to API: DONE [serge-hallyn] Convert stop to API: DONE [serge-hallyn] Convert destroy to API: DONE [serge-hallyn] List all other lxc-* programs to be converted to use the API: TODO [serge-hallyn] Update locking in API to handle killed programs: DONE [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): DONE [serge-hallyn] Improve thread safety in API: DONE [serge-hallyn] Work distro lxc tests upstream: TODO [serge-hallyn] Discuss upstream stable branches with upstream: TODO [serge-hallyn] Get CONFIG_USER_NS=y into kernel (requires XFS issue resolved): BLOCKED [serge-hallyn] Merge qemu 1.5.0: DONE [serge-hallyn] Write a libvirt drive using the lxc API: TODO [serge-hallyn] Write loopback backingstore driver: DONE [serge-hallyn] Write qemu-nbd backingstore driver: TODO [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables: TODO [serge-hallyn] Investigate openvswitch bridges by default in libvirt: TODO [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): BLOCKED [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: TODO [serge-hallyn] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with ceph: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with local storage: INPROGRESS [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: TODO [zulcss] Fix apparmor bug preventing libvirt-lxc from mounting blockdevs: TODO [zulcss] (or serge-hallyn) Write openstack patch to enable the new libvirt lxc-api driver: TODO [zulcss] Merge libvirt 1.0.6: TODO [zulcss] Follow up with Citrix's plans for xcp: TODO [smb] Merge xen 4.3: INPROGRESS [smb] Pick up upstream Xen-4.3 release: DONE [smb] Refresh Debian/Ubuntu patches against Xen: DONE [smb] Decide how to include qemu-upstream: DONE [smb] Update packaging to allow libvirt to build the libxl driver: DONE [smb] Unit testing with xm and xl stack (native and libvirt): DONE + [smb] Enable Xen compile for armhf: DONE -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Stefan Bader: Work items changed: Work items: [ebiederm] Push fix for XFS and user namespaces: TODO [serge-hallyn] Fix lxc-net to be nestable with no user interaction: DONE [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: DONE [serge-hallyn] Exploit stacked apparmor profiles for container nesting: BLOCKED [serge-hallyn] Bisect kernel signal delivery bug affecting lxc: INPROGRESS [serge-hallyn] write POC of nestable cgroup manager: INPROGRESS [serge-hallyn] Pursue subuid patchset for shadow: DONE [serge-hallyn] Enable unprivileged container creation: INPROGRESS [serge-hallyn] Enable unprivileged container starting (network): TODO [serge-hallyn] Enable unprivileged container starting (cgroups): TODO [serge-hallyn] Enable unprivileged container starting (complete): TODO [serge-hallyn] Add console support to API (Dwight): DONE [serge-hallyn] Add attach support to API (Christian): TODO [serge-hallyn] Add snapshot support to API: TODO [serge-hallyn] Convert create to API: DONE [serge-hallyn] Convert stop to API: DONE [serge-hallyn] Convert destroy to API: DONE [serge-hallyn] List all other lxc-* programs to be converted to use the API: TODO [serge-hallyn] Update locking in API to handle killed programs: DONE [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): DONE [serge-hallyn] Improve thread safety in API: DONE [serge-hallyn] Work distro lxc tests upstream: TODO [serge-hallyn] Discuss upstream stable branches with upstream: TODO [serge-hallyn] Get CONFIG_USER_NS=y into kernel (requires XFS issue resolved): BLOCKED [serge-hallyn] Merge qemu 1.5.0: DONE [serge-hallyn] Write a libvirt drive using the lxc API: TODO [serge-hallyn] Write loopback backingstore driver: DONE [serge-hallyn] Write qemu-nbd backingstore driver: TODO [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables: TODO [serge-hallyn] Investigate openvswitch bridges by default in libvirt: TODO [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): BLOCKED [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: TODO [serge-hallyn] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with ceph: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with local storage: INPROGRESS [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: TODO [zulcss] Fix apparmor bug preventing libvirt-lxc from mounting blockdevs: TODO [zulcss] (or serge-hallyn) Write openstack patch to enable the new libvirt lxc-api driver: TODO [zulcss] Merge libvirt 1.0.6: TODO [zulcss] Follow up with Citrix's plans for xcp: TODO [stefan-bader-canonical] Merge xen 4.3: INPROGRESS [stefan-bader-canonical] Pick up upstream Xen-4.3 release: DONE [stefan-bader-canonical] Refresh Debian/Ubuntu patches against Xen: DONE - [stefan-bader-canonical] Decide how to include qemu-upstream: INPROGRESS + [stefan-bader-canonical] Decide how to include qemu-upstream: DONE [stefan-bader-canonical] Update packaging to allow libvirt to build the libxl driver: DONE [stefan-bader-canonical] Unit testing with xm and xl stack (native and libvirt): INPROGRESS -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Stefan Bader: Work items changed: Work items: [ebiederm] Push fix for XFS and user namespaces: TODO [serge-hallyn] Fix lxc-net to be nestable with no user interaction: DONE [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: DONE [serge-hallyn] Exploit stacked apparmor profiles for container nesting: BLOCKED [serge-hallyn] Bisect kernel signal delivery bug affecting lxc: INPROGRESS [serge-hallyn] write POC of nestable cgroup manager: INPROGRESS [serge-hallyn] Pursue subuid patchset for shadow: DONE [serge-hallyn] Enable unprivileged container creation: INPROGRESS [serge-hallyn] Enable unprivileged container starting (network): TODO [serge-hallyn] Enable unprivileged container starting (cgroups): TODO [serge-hallyn] Enable unprivileged container starting (complete): TODO [serge-hallyn] Add console support to API (Dwight): DONE [serge-hallyn] Add attach support to API (Christian): TODO [serge-hallyn] Add snapshot support to API: TODO [serge-hallyn] Convert create to API: DONE [serge-hallyn] Convert stop to API: DONE [serge-hallyn] Convert destroy to API: DONE [serge-hallyn] List all other lxc-* programs to be converted to use the API: TODO [serge-hallyn] Update locking in API to handle killed programs: DONE [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): DONE [serge-hallyn] Improve thread safety in API: DONE [serge-hallyn] Work distro lxc tests upstream: TODO [serge-hallyn] Discuss upstream stable branches with upstream: TODO [serge-hallyn] Get CONFIG_USER_NS=y into kernel (requires XFS issue resolved): BLOCKED [serge-hallyn] Merge qemu 1.5.0: DONE [serge-hallyn] Write a libvirt drive using the lxc API: TODO [serge-hallyn] Write loopback backingstore driver: DONE [serge-hallyn] Write qemu-nbd backingstore driver: TODO [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables: TODO [serge-hallyn] Investigate openvswitch bridges by default in libvirt: TODO [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): BLOCKED [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: TODO [serge-hallyn] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with ceph: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with local storage: INPROGRESS [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: TODO [zulcss] Fix apparmor bug preventing libvirt-lxc from mounting blockdevs: TODO [zulcss] (or serge-hallyn) Write openstack patch to enable the new libvirt lxc-api driver: TODO [zulcss] Merge libvirt 1.0.6: TODO [zulcss] Follow up with Citrix's plans for xcp: TODO [stefan-bader-canonical] Merge xen 4.3: INPROGRESS + [stefan-bader-canonical] Pick up upstream Xen-4.3 release: DONE + [stefan-bader-canonical] Refresh Debian/Ubuntu patches against Xen: DONE + [stefan-bader-canonical] Decide how to include qemu-upstream: INPROGRESS + [stefan-bader-canonical] Update packaging to allow libvirt to build the libxl driver: DONE + [stefan-bader-canonical] Unit testing with xm and xl stack (native and libvirt): INPROGRESS -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Serge Hallyn: Work items changed: Work items: [ebiederm] Push fix for XFS and user namespaces: TODO [serge-hallyn] Fix lxc-net to be nestable with no user interaction: DONE [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: DONE [serge-hallyn] Exploit stacked apparmor profiles for container nesting: BLOCKED - [serge-hallyn] Pursue subuid patchset for shadow: TODO + [serge-hallyn] Bisect kernel signal delivery bug affecting lxc: INPROGRESS + [serge-hallyn] write POC of nestable cgroup manager: INPROGRESS + [serge-hallyn] Pursue subuid patchset for shadow: DONE + [serge-hallyn] Enable unprivileged container creation: INPROGRESS + [serge-hallyn] Enable unprivileged container starting (network): TODO + [serge-hallyn] Enable unprivileged container starting (cgroups): TODO + [serge-hallyn] Enable unprivileged container starting (complete): TODO [serge-hallyn] Add console support to API (Dwight): DONE [serge-hallyn] Add attach support to API (Christian): TODO [serge-hallyn] Add snapshot support to API: TODO [serge-hallyn] Convert create to API: DONE [serge-hallyn] Convert stop to API: DONE [serge-hallyn] Convert destroy to API: DONE [serge-hallyn] List all other lxc-* programs to be converted to use the API: TODO [serge-hallyn] Update locking in API to handle killed programs: DONE [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): DONE [serge-hallyn] Improve thread safety in API: DONE [serge-hallyn] Work distro lxc tests upstream: TODO [serge-hallyn] Discuss upstream stable branches with upstream: TODO [serge-hallyn] Get CONFIG_USER_NS=y into kernel (requires XFS issue resolved): BLOCKED [serge-hallyn] Merge qemu 1.5.0: DONE [serge-hallyn] Write a libvirt drive using the lxc API: TODO [serge-hallyn] Write loopback backingstore driver: DONE [serge-hallyn] Write qemu-nbd backingstore driver: TODO [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables: TODO [serge-hallyn] Investigate openvswitch bridges by default in libvirt: TODO [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): BLOCKED [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: TODO [serge-hallyn] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with ceph: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with local storage: INPROGRESS [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: TODO [zulcss] Fix apparmor bug preventing libvirt-lxc from mounting blockdevs: TODO [zulcss] (or serge-hallyn) Write openstack patch to enable the new libvirt lxc-api driver: TODO [zulcss] Merge libvirt 1.0.6: TODO [zulcss] Follow up with Citrix's plans for xcp: TODO [stefan-bader-canonical] Merge xen 4.3: INPROGRESS -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Stefan Bader: Work items changed: Work items: [ebiederm] Push fix for XFS and user namespaces: TODO [serge-hallyn] Fix lxc-net to be nestable with no user interaction: DONE [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: DONE [serge-hallyn] Exploit stacked apparmor profiles for container nesting: BLOCKED [serge-hallyn] Pursue subuid patchset for shadow: TODO [serge-hallyn] Add console support to API (Dwight): DONE [serge-hallyn] Add attach support to API (Christian): TODO [serge-hallyn] Add snapshot support to API: TODO [serge-hallyn] Convert create to API: DONE [serge-hallyn] Convert stop to API: DONE [serge-hallyn] Convert destroy to API: DONE [serge-hallyn] List all other lxc-* programs to be converted to use the API: TODO [serge-hallyn] Update locking in API to handle killed programs: DONE [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): DONE [serge-hallyn] Improve thread safety in API: DONE [serge-hallyn] Work distro lxc tests upstream: TODO [serge-hallyn] Discuss upstream stable branches with upstream: TODO [serge-hallyn] Get CONFIG_USER_NS=y into kernel (requires XFS issue resolved): BLOCKED [serge-hallyn] Merge qemu 1.5.0: DONE [serge-hallyn] Write a libvirt drive using the lxc API: TODO [serge-hallyn] Write loopback backingstore driver: DONE [serge-hallyn] Write qemu-nbd backingstore driver: TODO [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables: TODO [serge-hallyn] Investigate openvswitch bridges by default in libvirt: TODO [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): BLOCKED [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: TODO [serge-hallyn] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with ceph: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with local storage: INPROGRESS [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: TODO [zulcss] Fix apparmor bug preventing libvirt-lxc from mounting blockdevs: TODO [zulcss] (or serge-hallyn) Write openstack patch to enable the new libvirt lxc-api driver: TODO [zulcss] Merge libvirt 1.0.6: TODO [zulcss] Follow up with Citrix's plans for xcp: TODO - [stefan-bader-canonical] Merge xen 4.3: TODO + [stefan-bader-canonical] Merge xen 4.3: INPROGRESS -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Serge Hallyn: Work items changed: Work items: [ebiederm] Push fix for XFS and user namespaces: TODO [serge-hallyn] Fix lxc-net to be nestable with no user interaction: DONE [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: DONE [serge-hallyn] Exploit stacked apparmor profiles for container nesting: BLOCKED [serge-hallyn] Pursue subuid patchset for shadow: TODO [serge-hallyn] Add console support to API (Dwight): DONE [serge-hallyn] Add attach support to API (Christian): TODO [serge-hallyn] Add snapshot support to API: TODO [serge-hallyn] Convert create to API: DONE [serge-hallyn] Convert stop to API: DONE [serge-hallyn] Convert destroy to API: DONE [serge-hallyn] List all other lxc-* programs to be converted to use the API: TODO [serge-hallyn] Update locking in API to handle killed programs: DONE [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): DONE [serge-hallyn] Improve thread safety in API: DONE [serge-hallyn] Work distro lxc tests upstream: TODO [serge-hallyn] Discuss upstream stable branches with upstream: TODO [serge-hallyn] Get CONFIG_USER_NS=y into kernel (requires XFS issue resolved): BLOCKED [serge-hallyn] Merge qemu 1.5.0: DONE [serge-hallyn] Write a libvirt drive using the lxc API: TODO [serge-hallyn] Write loopback backingstore driver: DONE [serge-hallyn] Write qemu-nbd backingstore driver: TODO [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables: TODO [serge-hallyn] Investigate openvswitch bridges by default in libvirt: TODO [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): BLOCKED [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: TODO [serge-hallyn] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with ceph: TODO - [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with local storage: TODO + [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with local storage: INPROGRESS [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: TODO [zulcss] Fix apparmor bug preventing libvirt-lxc from mounting blockdevs: TODO [zulcss] (or serge-hallyn) Write openstack patch to enable the new libvirt lxc-api driver: TODO [zulcss] Merge libvirt 1.0.6: TODO [zulcss] Follow up with Citrix's plans for xcp: TODO [stefan-bader-canonical] Merge xen 4.3: TODO -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Serge Hallyn: Work items changed: Work items: [ebiederm] Push fix for XFS and user namespaces: TODO [serge-hallyn] Fix lxc-net to be nestable with no user interaction: DONE [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: DONE [serge-hallyn] Exploit stacked apparmor profiles for container nesting: BLOCKED [serge-hallyn] Pursue subuid patchset for shadow: TODO - [serge-hallyn] Add console support to API (Dwight): TODO + [serge-hallyn] Add console support to API (Dwight): DONE [serge-hallyn] Add attach support to API (Christian): TODO [serge-hallyn] Add snapshot support to API: TODO [serge-hallyn] Convert create to API: DONE [serge-hallyn] Convert stop to API: DONE [serge-hallyn] Convert destroy to API: DONE [serge-hallyn] List all other lxc-* programs to be converted to use the API: TODO [serge-hallyn] Update locking in API to handle killed programs: DONE [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): DONE - [serge-hallyn] Improve thread safety in API: TODO + [serge-hallyn] Improve thread safety in API: DONE [serge-hallyn] Work distro lxc tests upstream: TODO [serge-hallyn] Discuss upstream stable branches with upstream: TODO [serge-hallyn] Get CONFIG_USER_NS=y into kernel (requires XFS issue resolved): BLOCKED [serge-hallyn] Merge qemu 1.5.0: DONE [serge-hallyn] Write a libvirt drive using the lxc API: TODO - [serge-hallyn] Write loopback backingstore driver: INPROGRESS + [serge-hallyn] Write loopback backingstore driver: DONE [serge-hallyn] Write qemu-nbd backingstore driver: TODO [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables: TODO [serge-hallyn] Investigate openvswitch bridges by default in libvirt: TODO [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): BLOCKED [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: TODO [serge-hallyn] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with ceph: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with local storage: TODO [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: TODO [zulcss] Fix apparmor bug preventing libvirt-lxc from mounting blockdevs: TODO [zulcss] (or serge-hallyn) Write openstack patch to enable the new libvirt lxc-api driver: TODO [zulcss] Merge libvirt 1.0.6: TODO [zulcss] Follow up with Citrix's plans for xcp: TODO [stefan-bader-canonical] Merge xen 4.3: TODO -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Serge Hallyn: Work items changed: Work items: [ebiederm] Push fix for XFS and user namespaces: TODO [serge-hallyn] Fix lxc-net to be nestable with no user interaction: DONE [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: DONE [serge-hallyn] Exploit stacked apparmor profiles for container nesting: BLOCKED [serge-hallyn] Pursue subuid patchset for shadow: TODO [serge-hallyn] Add console support to API (Dwight): TODO [serge-hallyn] Add attach support to API (Christian): TODO [serge-hallyn] Add snapshot support to API: TODO [serge-hallyn] Convert create to API: DONE [serge-hallyn] Convert stop to API: DONE [serge-hallyn] Convert destroy to API: DONE [serge-hallyn] List all other lxc-* programs to be converted to use the API: TODO [serge-hallyn] Update locking in API to handle killed programs: DONE [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): DONE [serge-hallyn] Improve thread safety in API: TODO [serge-hallyn] Work distro lxc tests upstream: TODO [serge-hallyn] Discuss upstream stable branches with upstream: TODO [serge-hallyn] Get CONFIG_USER_NS=y into kernel (requires XFS issue resolved): BLOCKED [serge-hallyn] Merge qemu 1.5.0: DONE [serge-hallyn] Write a libvirt drive using the lxc API: TODO - [serge-hallyn] Write loopback backingstore driver: TODO + [serge-hallyn] Write loopback backingstore driver: INPROGRESS [serge-hallyn] Write qemu-nbd backingstore driver: TODO [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables: TODO [serge-hallyn] Investigate openvswitch bridges by default in libvirt: TODO [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): BLOCKED [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: TODO [serge-hallyn] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with ceph: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with local storage: TODO [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: TODO [zulcss] Fix apparmor bug preventing libvirt-lxc from mounting blockdevs: TODO [zulcss] (or serge-hallyn) Write openstack patch to enable the new libvirt lxc-api driver: TODO [zulcss] Merge libvirt 1.0.6: TODO [zulcss] Follow up with Citrix's plans for xcp: TODO [stefan-bader-canonical] Merge xen 4.3: TODO -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Serge Hallyn: Work items changed: Work items: [ebiederm] Push fix for XFS and user namespaces: TODO [serge-hallyn] Fix lxc-net to be nestable with no user interaction: DONE - [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: TODO + [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: DONE [serge-hallyn] Exploit stacked apparmor profiles for container nesting: BLOCKED [serge-hallyn] Pursue subuid patchset for shadow: TODO [serge-hallyn] Add console support to API (Dwight): TODO [serge-hallyn] Add attach support to API (Christian): TODO [serge-hallyn] Add snapshot support to API: TODO [serge-hallyn] Convert create to API: DONE [serge-hallyn] Convert stop to API: DONE [serge-hallyn] Convert destroy to API: DONE [serge-hallyn] List all other lxc-* programs to be converted to use the API: TODO - [serge-hallyn] Update locking in API to handle killed programs: INPROGRESS - [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): TODO + [serge-hallyn] Update locking in API to handle killed programs: DONE + [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): DONE [serge-hallyn] Improve thread safety in API: TODO [serge-hallyn] Work distro lxc tests upstream: TODO [serge-hallyn] Discuss upstream stable branches with upstream: TODO [serge-hallyn] Get CONFIG_USER_NS=y into kernel (requires XFS issue resolved): BLOCKED [serge-hallyn] Merge qemu 1.5.0: DONE [serge-hallyn] Write a libvirt drive using the lxc API: TODO [serge-hallyn] Write loopback backingstore driver: TODO [serge-hallyn] Write qemu-nbd backingstore driver: TODO [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables: TODO [serge-hallyn] Investigate openvswitch bridges by default in libvirt: TODO [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): BLOCKED [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: TODO [serge-hallyn] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with ceph: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with local storage: TODO [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: TODO [zulcss] Fix apparmor bug preventing libvirt-lxc from mounting blockdevs: TODO [zulcss] (or serge-hallyn) Write openstack patch to enable the new libvirt lxc-api driver: TODO [zulcss] Merge libvirt 1.0.6: TODO [zulcss] Follow up with Citrix's plans for xcp: TODO [stefan-bader-canonical] Merge xen 4.3: TODO -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Dave Walker: Drafter: Serge Hallyn = Ubuntu Server Team -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Dave Walker: Definition Status: Review = Approved -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Serge Hallyn: Work items changed: Work items: [ebiederm] Push fix for XFS and user namespaces: TODO [serge-hallyn] Fix lxc-net to be nestable with no user interaction: DONE [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: TODO [serge-hallyn] Exploit stacked apparmor profiles for container nesting: BLOCKED [serge-hallyn] Pursue subuid patchset for shadow: TODO [serge-hallyn] Add console support to API (Dwight): TODO [serge-hallyn] Add attach support to API (Christian): TODO [serge-hallyn] Add snapshot support to API: TODO - [serge-hallyn] Convert create to API: TODO - [serge-hallyn] Convert stop to API: TODO - [serge-hallyn] Convert destroy to API: TODO + [serge-hallyn] Convert create to API: DONE + [serge-hallyn] Convert stop to API: DONE + [serge-hallyn] Convert destroy to API: DONE [serge-hallyn] List all other lxc-* programs to be converted to use the API: TODO [serge-hallyn] Update locking in API to handle killed programs: INPROGRESS [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): TODO [serge-hallyn] Improve thread safety in API: TODO [serge-hallyn] Work distro lxc tests upstream: TODO [serge-hallyn] Discuss upstream stable branches with upstream: TODO [serge-hallyn] Get CONFIG_USER_NS=y into kernel (requires XFS issue resolved): BLOCKED [serge-hallyn] Merge qemu 1.5.0: INPROGRESS [serge-hallyn] Write a libvirt drive using the lxc API: TODO [serge-hallyn] Write loopback backingstore driver: TODO [serge-hallyn] Write qemu-nbd backingstore driver: TODO [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables: TODO [serge-hallyn] Investigate openvswitch bridges by default in libvirt: TODO [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): BLOCKED [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: TODO [serge-hallyn] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with ceph: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with local storage: TODO [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: TODO [zulcss] Fix apparmor bug preventing libvirt-lxc from mounting blockdevs: TODO [zulcss] (or serge-hallyn) Write openstack patch to enable the new libvirt lxc-api driver: TODO [zulcss] Merge libvirt 1.0.6: TODO [zulcss] Follow up with Citrix's plans for xcp: TODO [stefan-bader-canonical] Merge xen 4.3: TODO -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Serge Hallyn: Work items changed: Work items: [ebiederm] Push fix for XFS and user namespaces: TODO [serge-hallyn] Fix lxc-net to be nestable with no user interaction: DONE [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: TODO [serge-hallyn] Exploit stacked apparmor profiles for container nesting: BLOCKED [serge-hallyn] Pursue subuid patchset for shadow: TODO [serge-hallyn] Add console support to API (Dwight): TODO [serge-hallyn] Add attach support to API (Christian): TODO [serge-hallyn] Add snapshot support to API: TODO [serge-hallyn] Convert create to API: DONE [serge-hallyn] Convert stop to API: DONE [serge-hallyn] Convert destroy to API: DONE [serge-hallyn] List all other lxc-* programs to be converted to use the API: TODO [serge-hallyn] Update locking in API to handle killed programs: INPROGRESS [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): TODO [serge-hallyn] Improve thread safety in API: TODO [serge-hallyn] Work distro lxc tests upstream: TODO [serge-hallyn] Discuss upstream stable branches with upstream: TODO [serge-hallyn] Get CONFIG_USER_NS=y into kernel (requires XFS issue resolved): BLOCKED - [serge-hallyn] Merge qemu 1.5.0: INPROGRESS + [serge-hallyn] Merge qemu 1.5.0: DONE [serge-hallyn] Write a libvirt drive using the lxc API: TODO [serge-hallyn] Write loopback backingstore driver: TODO [serge-hallyn] Write qemu-nbd backingstore driver: TODO [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables: TODO [serge-hallyn] Investigate openvswitch bridges by default in libvirt: TODO [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): BLOCKED [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: TODO [serge-hallyn] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with ceph: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with local storage: TODO [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: TODO [zulcss] Fix apparmor bug preventing libvirt-lxc from mounting blockdevs: TODO [zulcss] (or serge-hallyn) Write openstack patch to enable the new libvirt lxc-api driver: TODO [zulcss] Merge libvirt 1.0.6: TODO [zulcss] Follow up with Citrix's plans for xcp: TODO [stefan-bader-canonical] Merge xen 4.3: TODO -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Serge Hallyn: Whiteboard changed: - This blueprint is broken into 3 sections - libcgroup, lxc, and - qemu+libvirt. + [USER STORIES] - Background on libcgroup - libcgroup is a package which provides: - a. Flexible boot-time setup of cgroups - b. Command line tools to configure and use cgroups - c. A deamon to auto-reclassify tasks into cgroups + Abe would like to run untrusted workloads in a container. - There were two important bugs in libcgroup: - 1. Cgroup setup was done too late, after some daemons had - started. This was solvable. However there was an attitude that - it could simply reclassify daemons which had already started. - It couldn't do that right. - 2. Auto-reclassifying tasks into cgroups cannot be done - correctly with current kernel support + Billy would like for his users to be able to use containers without + giving them root access. - Because properly mounted cgroups are crucial to libvirt and lxc, we - temporarily worked around this by introducing cgroup-lite, which - introduces tiny, inflexible upstart jobs to mount cgroups. This was - meant as a temporary step until libcgroup could be improved. + Charlie would like to confine users with flexible cgroups. - In the meantime, a few things have happened - 1. libcgroup functionality is being moved into systemd. - 2. libcgroup has dropped its faulty startup scripts so that it be - installed alongside cgroup-lite - 3. Upstream kernel cgroup maintainer wants userspace to stop dealing - with cgroupfs, and use a new (not yet designed) library instead + Denise is writing an application using containers, and wants to re-use + the tested core lxc API. - In the medium term we wanted to - 1. Write sysvinit scripts to mirror the cgroup-lite upstart jobs, and - provide them together in libcgroup. - 2. Support some flexible boot-time cgroup setup. This is especially - required so that users can be confined by memory cgroup in the face - of unprivileged user namespace cloning. + Erica would like openstack-lxc users to have all the advanced features + of lxc (apparmor protection, nesting, etc). - That way cgroup-lite could then be replaced by libcgroup again. + [ASSUMPTIONS] - We should also begin working with wider communities on designing the - cgroup library interface to be used above cgroupfs. This design should - account for clean nesting in containers, so that the library running in - a container can forward requests (i.e. cgroup creation and - configuration) to the library on the host. + A fix is accepted upstream to allow user namespaces to be used alongside + XFS. - https://lkml.org/lkml/2013/4/5/535 - https://lkml.org/lkml/2013/4/9/651 + [USER ACCEPTANCE] - Background on LXC + Set up a user with subuids and use it to create and run a container. - Over the past several cycles we have been working toward a specific - vision of where we want LXC to be for 14.04 LTS. This has been - laid out in several places, and has also been codified in the form - of a roadmap toward the upcoming 1.0 LXC release. That roadmap can - be seen at + [RELEASE NOTE/BLOG] - https://wiki.ubuntu.com/LXC/1.0-roadmap + User namespaces, apparmor, and seccomp are now leveraged to provide a + secure container environment. - For 13.10, we intend to focus on the harder, more fundamental pieces, - which will be scarier during an LTS cycle. This includes the core - of the remaining user namespace, completing the most-wanted features - in the API, and monitor and control socket work. + Containers can now be created and used by unprivileged users. - Specific pieces which would best be completed in 13.10 include - unprivileged use of user namespaces - full user namespace support in kernel - attach, clone, and console support in API - userns patches merged into upstream shadow package - ability to use lxc-fuse in ubuntu package - libvirt driver based on lxc api - lxc.hook.clone (and lxc-create/destroy hooks) - lxc-snapshot in the api - stable lxc trees? (v0.7.5, v0.8.0, v0.9.0, etc) - - Background on qemu and libvirt - - Libvirt is doing quite well. Libvirt-lxc offers a challenge for us - it - has recently been better supported than in the past, with support for - qemu-nbd devices being added. However, it does not currently have a good - apparmor profile, and uses a completely different code base from upstream - lxc. We might have to choose between filling in missing features in - the libvirt-lxc, and implementing a new driver using the upstream lxc - api. We may do both and let users choose, however beside additional - development work it also provides duplication for testing and bug - control. - - The edk2 package which provides a bios capable of UEFI secure boot - currently works, but has no way to save/restore nvvars across qemu - runs (vm reboot is ok). If that feature were
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Serge Hallyn: Work items set to: Work items: [serge-hallyn] (ebiederman) Push fix for XFS and user namespaces: TODO [serge-hallyn] Fix lxc-net to be nestable with no user interaction: DONE [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: TODO [serge-hallyn] Exploit stacked apparmor profiles for container nesting: BLOCKED [serge-hallyn] Pursue subuid patchset for shadow: TODO [serge-hallyn] Add console support to API (Dwight): TODO [serge-hallyn] Add attach support to API (Christian): TODO [serge-hallyn] Add snapshot support to API: TODO [serge-hallyn] Convert create to API: TODO [serge-hallyn] Convert stop to API: TODO [serge-hallyn] Convert destroy to API: TODO [serge-hallyn] List all other lxc-* programs to be converted to use the API: TODO [serge-hallyn] Update locking in API to handle killed programs: INPROGRESS [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): TODO [serge-hallyn] Improve thread safety in API: TODO [serge-hallyn] Work distro lxc tests upstream: TODO [serge-hallyn] Discuss upstream stable branches with upstream: TODO [serge-hallyn] Get CONFIG_USER_NS=y into kernel (requires XFS issue resolved): BLOCKED [serge-hallyn] Merge qemu 1.5.0: INPROGRESS [serge-hallyn] Write a libvirt drive using the lxc API: TODO [serge-hallyn] Write loopback backingstore driver: TODO [serge-hallyn] Write qemu-nbd backingstore driver: TODO [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables: TODO [serge-hallyn] Investigate openvswitch bridges by default in libvirt: TODO [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): BLOCKED [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: TODO [serge-hallyn] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with ceph: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with local storage: TODO [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: TODO [zulcss] Fix apparmor bug preventing libvirt-lxc from mounting blockdevs: TODO [zulcss] (or serge-hallyn) Write openstack patch to enable the new libvirt lxc-api driver: TODO [zulcss] Merge libvirt 1.0.6: TODO [zulcss] Follow up with Citrix's plans for xcp: TODO [stefan-bader-canonical] Merge xen 4.3: TODO -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Serge Hallyn: Work items changed: Work items: - [serge-hallyn] (ebiederman) Push fix for XFS and user namespaces: TODO + [ebiederm] Push fix for XFS and user namespaces: TODO [serge-hallyn] Fix lxc-net to be nestable with no user interaction: DONE [serge-hallyn] Write sysctl to disable unprivileged CLONE_NEWUSER: TODO [serge-hallyn] Exploit stacked apparmor profiles for container nesting: BLOCKED [serge-hallyn] Pursue subuid patchset for shadow: TODO [serge-hallyn] Add console support to API (Dwight): TODO [serge-hallyn] Add attach support to API (Christian): TODO [serge-hallyn] Add snapshot support to API: TODO [serge-hallyn] Convert create to API: TODO [serge-hallyn] Convert stop to API: TODO [serge-hallyn] Convert destroy to API: TODO [serge-hallyn] List all other lxc-* programs to be converted to use the API: TODO [serge-hallyn] Update locking in API to handle killed programs: INPROGRESS [serge-hallyn] Update container creation to handle SIGKILL (using 'partial' file): TODO [serge-hallyn] Improve thread safety in API: TODO [serge-hallyn] Work distro lxc tests upstream: TODO [serge-hallyn] Discuss upstream stable branches with upstream: TODO [serge-hallyn] Get CONFIG_USER_NS=y into kernel (requires XFS issue resolved): BLOCKED [serge-hallyn] Merge qemu 1.5.0: INPROGRESS [serge-hallyn] Write a libvirt drive using the lxc API: TODO [serge-hallyn] Write loopback backingstore driver: TODO [serge-hallyn] Write qemu-nbd backingstore driver: TODO [serge-hallyn] Pursue patch for ovmf to provide save/restore of nvvars to support boot variables: TODO [serge-hallyn] Investigate openvswitch bridges by default in libvirt: TODO [serge-hallyn] Merge cgroup-lite into libcgroup (depends on libcgroup sysvinit scripts): BLOCKED [serge-hallyn] Default-off support for per-user cgroup configuration at boot/login: TODO [serge-hallyn] Ensure that lxc-ubuntu-cloud can be used with cloudinit for openstack: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with ceph: TODO [serge-hallyn] live block migration testing (using juju?) of libvirt+kvm with local storage: TODO [smoser] use simplestreams to provide secure ubuntu-cloud deliver to lxc: TODO [zulcss] Fix apparmor bug preventing libvirt-lxc from mounting blockdevs: TODO [zulcss] (or serge-hallyn) Write openstack patch to enable the new libvirt lxc-api driver: TODO [zulcss] Merge libvirt 1.0.6: TODO [zulcss] Follow up with Citrix's plans for xcp: TODO [stefan-bader-canonical] Merge xen 4.3: TODO -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Serge Hallyn: Definition Status: Drafting = Review -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Serge Hallyn: Definition Status: Discussion = Drafting -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Serge Hallyn:
Whiteboard changed:
This blueprint is broken into 3 sections - libcgroup, lxc, and
qemu+libvirt.
Background on libcgroup
libcgroup is a package which provides:
-a. Flexible boot-time setup of cgroups
-b. Command line tools to configure and use cgroups
-c. A deamon to auto-reclassify tasks into cgroups
+ a. Flexible boot-time setup of cgroups
+ b. Command line tools to configure and use cgroups
+ c. A deamon to auto-reclassify tasks into cgroups
There were two important bugs in libcgroup:
-1. Cgroup setup was done too late, after some daemons had
- started. This was solvable. However there was an attitude that
- it could simply reclassify daemons which had already started.
- It couldn't do that right.
-2. Auto-reclassifying tasks into cgroups cannot be done
- correctly with current kernel support
+ 1. Cgroup setup was done too late, after some daemons had
+ started. This was solvable. However there was an attitude that
+ it could simply reclassify daemons which had already started.
+ It couldn't do that right.
+ 2. Auto-reclassifying tasks into cgroups cannot be done
+ correctly with current kernel support
Because properly mounted cgroups are crucial to libvirt and lxc, we
temporarily worked around this by introducing cgroup-lite, which
introduces tiny, inflexible upstart jobs to mount cgroups. This was
meant as a temporary step until libcgroup could be improved.
In the meantime, a few things have happened
-1. libcgroup functionality is being moved into systemd.
-2. libcgroup has dropped its faulty startup scripts so that it be
- installed alongside cgroup-lite
-3. Upstream kernel cgroup maintainer wants userspace to stop dealing
- with cgroupfs, and use a new (not yet designed) library instead
+ 1. libcgroup functionality is being moved into systemd.
+ 2. libcgroup has dropped its faulty startup scripts so that it be
+ installed alongside cgroup-lite
+ 3. Upstream kernel cgroup maintainer wants userspace to stop dealing
+ with cgroupfs, and use a new (not yet designed) library instead
In the medium term we wanted to
-1. Write sysvinit scripts to mirror the cgroup-lite upstart jobs, and
- provide them together in libcgroup.
-2. Support some flexible boot-time cgroup setup. This is especially
- required so that users can be confined by memory cgroup in the face
- of unprivileged user namespace cloning.
+ 1. Write sysvinit scripts to mirror the cgroup-lite upstart jobs, and
+ provide them together in libcgroup.
+ 2. Support some flexible boot-time cgroup setup. This is especially
+ required so that users can be confined by memory cgroup in the face
+ of unprivileged user namespace cloning.
That way cgroup-lite could then be replaced by libcgroup again.
We should also begin working with wider communities on designing the
cgroup library interface to be used above cgroupfs. This design should
account for clean nesting in containers, so that the library running in
a container can forward requests (i.e. cgroup creation and
configuration) to the library on the host.
- https://lkml.org/lkml/2013/4/5/535
- https://lkml.org/lkml/2013/4/9/651
+ https://lkml.org/lkml/2013/4/5/535
+ https://lkml.org/lkml/2013/4/9/651
Background on LXC
Over the past several cycles we have been working toward a specific
vision of where we want LXC to be for 14.04 LTS. This has been
laid out in several places, and has also been codified in the form
of a roadmap toward the upcoming 1.0 LXC release. That roadmap can
be seen at
https://wiki.ubuntu.com/LXC/1.0-roadmap
For 13.10, we intend to focus on the harder, more fundamental pieces,
which will be scarier during an LTS cycle. This includes the core
of the remaining user namespace, completing the most-wanted features
in the API, and monitor and control socket work.
Specific pieces which would best be completed in 13.10 include
- unprivileged use of user namespaces
- full user namespace support in kernel
- attach, clone, and console support in API
- userns patches merged into upstream shadow package
- ability to use lxc-fuse in ubuntu package
- libvirt driver based on lxc api
- lxc.hook.clone (and lxc-create/destroy hooks)
- lxc-snapshot in the api
- stable lxc trees? (v0.7.5, v0.8.0, v0.9.0, etc)
+ unprivileged use of user namespaces
+ full user namespace support in kernel
+ attach, clone, and console support in API
+ userns patches merged into upstream shadow package
+ ability to use lxc-fuse in ubuntu package
+ libvirt driver based on lxc api
+ lxc.hook.clone (and lxc-create/destroy hooks)
+ lxc-snapshot in the api
+ stable lxc trees? (v0.7.5, v0.8.0, v0.9.0, etc)
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Dave Walker: Assignee: (none) = Ubuntu Server Team -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Dave Walker: Definition Status: New = Discussion -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Blueprint servercloud-s-virtstack] Virtualization Stack Work for Saucy
Blueprint changed by Dave Walker: Priority: Undefined = High -- Virtualization Stack Work for Saucy https://blueprints.launchpad.net/ubuntu/+spec/servercloud-s-virtstack -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
