[lxc-devel] [PATCH 1/2] lxc-alpine: run bootmisc and syslog at boot runlevel

2013-10-24 Thread Natanael Copa
The bootmisc script is needed to clean up various temp dirs like /tmp and migrate /var/run to /run if needed. The syslog service is started in 'boot' runlevel when running on real hardware so we do the same for containers. Signed-off-by: Natanael Copa nc...@alpinelinux.org ---

[lxc-devel] [PATCH 2/2] lxc-alpine: enable 4 consoles by default

2013-10-24 Thread Natanael Copa
We allow 4 consoles in the LXC config file so we can enable 4 in the inittab as well. Signed-off-by: Natanael Copa nc...@alpinelinux.org --- templates/lxc-alpine.in | 3 +++ 1 file changed, 3 insertions(+) diff --git a/templates/lxc-alpine.in b/templates/lxc-alpine.in index 2756b89..258eed4

[lxc-devel] [lxc/lxc] 09bbd7: strtoul: check errno

2013-10-24 Thread GitHub
Branch: refs/heads/master Home: https://github.com/lxc/lxc Commit: 09bbd74578af3a039325c273a3bd7e54c9c79482 https://github.com/lxc/lxc/commit/09bbd74578af3a039325c273a3bd7e54c9c79482 Author: Serge Hallyn serge.hal...@ubuntu.com Date: 2013-10-24 (Thu, 24 Oct 2013) Changed

Re: [lxc-devel] [PATCH 3/3] lxc-busybox: if in userns, don't try to mknod

2013-10-24 Thread Serge Hallyn
Quoting Stéphane Graber (stgra...@ubuntu.com): On Wed, Oct 23, 2013 at 01:02:59AM +, Serge Hallyn wrote: From: Serge Hallyn serge.hal...@ubuntu.com Signed-off-by: Serge Hallyn serge.hal...@ubuntu.com We really should be working on a shared set of functions all templates can source

[lxc-devel] [lxc/lxc] cf3ef1: container creation: support unpriv container creat...

2013-10-24 Thread GitHub
Branch: refs/heads/master Home: https://github.com/lxc/lxc Commit: cf3ef16dc479c102433a82b8ddbb4265d3818cce https://github.com/lxc/lxc/commit/cf3ef16dc479c102433a82b8ddbb4265d3818cce Author: Serge Hallyn serge.hal...@ubuntu.com Date: 2013-10-24 (Thu, 24 Oct 2013) Changed

[lxc-devel] [PATCH] lxc-ls: Rewrite nesting code to use the attach API

2013-10-24 Thread Stéphane Graber
Signed-off-by: Stéphane Graber stgra...@ubuntu.com --- src/lxc/lxc-ls | 32 +++- 1 file changed, 19 insertions(+), 13 deletions(-) diff --git a/src/lxc/lxc-ls b/src/lxc/lxc-ls index cc0a1e7..9d45400 100644 --- a/src/lxc/lxc-ls +++ b/src/lxc/lxc-ls @@ -35,7 +35,7 @@

Re: [lxc-devel] [PATCH] lxc-ls: Rewrite nesting code to use the attach API

2013-10-24 Thread Serge Hallyn
Quoting Stéphane Graber (stgra...@ubuntu.com): Signed-off-by: Stéphane Graber stgra...@ubuntu.com Acked-by: Serge E. Hallyn serge.hal...@ubuntu.com --- src/lxc/lxc-ls | 32 +++- 1 file changed, 19 insertions(+), 13 deletions(-) diff --git a/src/lxc/lxc-ls

Re: [lxc-devel] Kernel bug? Setuid apps and user namespaces

2013-10-24 Thread Sean Pajot
On 10/23/2013 12:54 AM, Eric W. Biederman wrote: Sean Pajot sean.pa...@execulink.com writes: On 10/22/2013 03:50 PM, Eric W. Biederman wrote: Serge Hallyn serge.hal...@ubuntu.com writes: Quoting Sean Pajot (sean.pa...@execulink.com): I've been playing with User Namespaces somewhat

Re: [lxc-devel] [PATCH 1/3] container creation: support unpriv container creation in user namespaces

2013-10-24 Thread Michael H. Warfield
On Wed, 2013-10-23 at 01:02 +, Serge Hallyn wrote: From: Serge Hallyn serge.hal...@ubuntu.com 1. lxcapi_create: don't try to unshare and mount for dir backed containers It's unnecessary, and breaks unprivileged lxc-create (since unpriv users cannot yet unshare(CLONE_NEWNS)). I saw this

Re: [lxc-devel] [PATCH 1/3] container creation: support unpriv container creation in user namespaces

2013-10-24 Thread Serge Hallyn
Quoting Michael H. Warfield (m...@wittsend.com): On Wed, 2013-10-23 at 01:02 +, Serge Hallyn wrote: From: Serge Hallyn serge.hal...@ubuntu.com 1. lxcapi_create: don't try to unshare and mount for dir backed containers It's unnecessary, and breaks unprivileged lxc-create (since