GitHub | 22 Oct 17:55 2014

[lxc/lxc] 9fd376: lxc-start: return 0 rather than error if container...

  Branch: refs/heads/master
  Home:   https://github.com/lxc/lxc
  Commit: 9fd376e8bc2afbcd7af818cd99afbe50744628e9
      https://github.com/lxc/lxc/commit/9fd376e8bc2afbcd7af818cd99afbe50744628e9
  Author: Serge Hallyn <serge.hallyn@...>
  Date:   2014-10-22 (Wed, 22 Oct 2014)

  Changed paths:
    M src/lxc/lxc_start.c

  Log Message:
  -----------
  lxc-start: return 0 rather than error if container is already running

Signed-off-by: Serge Hallyn <serge.hallyn@...>

_______________________________________________
lxc-devel mailing list
lxc-devel <at> lists.linuxcontainers.org
http://lists.linuxcontainers.org/listinfo/lxc-devel
GitHub | 22 Oct 16:35 2014

[lxc/lxc] 3d8b68: Fix another gentoo template typo

  Branch: refs/heads/master
  Home:   https://github.com/lxc/lxc
  Commit: 3d8b68b1d5be415544a71b18df9635deceb2fd8a
      https://github.com/lxc/lxc/commit/3d8b68b1d5be415544a71b18df9635deceb2fd8a
  Author: Dark Templar <dark_templar@...>
  Date:   2014-10-22 (Wed, 22 Oct 2014)

  Changed paths:
    M templates/lxc-gentoo.in

  Log Message:
  -----------
  Fix another gentoo template typo

I've found one more typo in the gentoo template, configuration in the
generated file /etc/conf.d/hostname was not valid, but it didn't impact
me due to "lxc.utsname" being set in the configuration file of container
and hostname service being not used. Anyway, I've made a patch and
sending it with this mail.

Signed-off-by: Dark Templar <dark_templar@...>
Signed-off-by: Serge Hallyn <serge.hallyn@...>

_______________________________________________
lxc-devel mailing list
lxc-devel <at> lists.linuxcontainers.org
http://lists.linuxcontainers.org/listinfo/lxc-devel
(Continue reading)

GitHub | 22 Oct 16:18 2014

[lxc/lxc] a542dd: busybox template: support for unprivileged contain...

  Branch: refs/heads/master
  Home:   https://github.com/lxc/lxc
  Commit: a542dd3c1aca8b6674f631d625d888eb13ae3a4d
      https://github.com/lxc/lxc/commit/a542dd3c1aca8b6674f631d625d888eb13ae3a4d
  Author: Bogdan Purcareata <bogdan.purcareata@...>
  Date:   2014-10-22 (Wed, 22 Oct 2014)

  Changed paths:
    M templates/lxc-busybox.in

  Log Message:
  -----------
  busybox template: support for unprivileged containers

Apply the changes found in templates/lxc-download to the busybox template as
well. Change ownership of the config and fstab files to the unprivileged user,
and the ownership of the rootfs to root in the new user namespace.

Eliminate the "unsupported for userns" flag.

Signed-off-by: Bogdan Purcareata <bogdan.purcareata@...>
Acked-by: Serge E. Hallyn <serge.hallyn@...>

  Commit: 12c3b43fbeacd9cc471adf565ecea3263e37e353
      https://github.com/lxc/lxc/commit/12c3b43fbeacd9cc471adf565ecea3263e37e353
  Author: Bogdan Purcareata <bogdan.purcareata@...>
  Date:   2014-10-22 (Wed, 22 Oct 2014)

  Changed paths:
    M templates/lxc-busybox.in
(Continue reading)

Luka Perkov | 22 Oct 11:10 2014
Picon

containers on OpenWrt

Dear list readers,

I'd just like to inform you that we now have running containers on
OpenWrt. More or less everything is pushed upstream to OpenWrt, we are
still doing some final tweaking on the OpenWrt's LuCI web interface.

Users are able to use either lxc-* tools directly [1] or use ubus API
where we provide basic functionality by integrating liblxc in a rpcd [2]
plugin [3]. At the moment we are using latest stable release 1.0.6.

We are also going to send few patches to lxc project as well since we
would like to add support for installing OpenWrt via lxc-create.

Comments are welcomed.

Regards,
Luka

PS. For those of you who are interested, linux containers work with C
libraries such as uClibc, eglibc and musl.

[1] https://github.com/openwrt/packages/tree/master/utils/lxc
[2] http://nbd.name/gitweb.cgi?p=luci2/rpcd.git;a=summary
[3] https://github.com/openwrt/packages/tree/master/utils/rpcd-mod-lxc
_______________________________________________
lxc-devel mailing list
lxc-devel <at> lists.linuxcontainers.org
http://lists.linuxcontainers.org/listinfo/lxc-devel
GitHub | 20 Oct 23:45 2014

[lxc/lxc] 0c3720: lxc-config can show lxc.cgroup.(use|pattern)

  Branch: refs/heads/master
  Home:   https://github.com/lxc/lxc
  Commit: 0c3720a336461d8e09bcb51b7003ecfed7581bb6
      https://github.com/lxc/lxc/commit/0c3720a336461d8e09bcb51b7003ecfed7581bb6
  Author: KATOH Yasufumi <karma@...>
  Date:   2014-10-20 (Mon, 20 Oct 2014)

  Changed paths:
    M src/lxc/lxc_config.c

  Log Message:
  -----------
  lxc-config can show lxc.cgroup.(use|pattern)

Signed-off-by: KATOH Yasufumi <karma@...>
Signed-off-by: Serge Hallyn <serge.hallyn@...>

  Commit: 5e1c5795a3080804ad57657b7041b9119cfff105
      https://github.com/lxc/lxc/commit/5e1c5795a3080804ad57657b7041b9119cfff105
  Author: KATOH Yasufumi <karma@...>
  Date:   2014-10-20 (Mon, 20 Oct 2014)

  Changed paths:
    M src/lxc/cgfs.c
    M src/lxc/cgmanager.c
    M src/lxc/utils.c

  Log Message:
  -----------
  lxc_global_config_value can return the default lxc.cgroup.pattern whether root or non-root
(Continue reading)

GitHub | 20 Oct 23:39 2014

[lxc/lxc] 416710: Fix typo in lxc-gentoo template

  Branch: refs/heads/master
  Home:   https://github.com/lxc/lxc
  Commit: 4167102e93571e776dc7248a21145e753acdc3b8
      https://github.com/lxc/lxc/commit/4167102e93571e776dc7248a21145e753acdc3b8
  Author: Dark Templar <dark_templar@...>
  Date:   2014-10-20 (Mon, 20 Oct 2014)

  Changed paths:
    M templates/lxc-gentoo.in

  Log Message:
  -----------
  Fix typo in lxc-gentoo template

Signed-off-by: Dark Templar <dark_templar@...>
Signed-off-by: Serge Hallyn <serge.hallyn@...>

_______________________________________________
lxc-devel mailing list
lxc-devel <at> lists.linuxcontainers.org
http://lists.linuxcontainers.org/listinfo/lxc-devel
GitHub | 20 Oct 23:35 2014

[lxc/lxc] 7196c7: apparmor: check for mount feature at a better time

  Branch: refs/heads/master
  Home:   https://github.com/lxc/lxc
  Commit: 7196c7b37c4dec6fc206fe4240eca8ef63119e42
      https://github.com/lxc/lxc/commit/7196c7b37c4dec6fc206fe4240eca8ef63119e42
  Author: Serge Hallyn <serge.hallyn@...>
  Date:   2014-10-20 (Mon, 20 Oct 2014)

  Changed paths:
    M src/lxc/lsm/apparmor.c

  Log Message:
  -----------
  apparmor: check for mount feature at a better time

Check for it when we check for apparmor being enabled, rather
than doing it during the middle of a container setup.

This avoid the need to try mounting /sys and /sys/kernel/security
in the middle of startup, which we may not be allowed to anyway.

Signed-off-by: Serge Hallyn <serge.hallyn@...>
Acked-by: Dwight Engen <dwight.engen@...>

_______________________________________________
lxc-devel mailing list
lxc-devel <at> lists.linuxcontainers.org
http://lists.linuxcontainers.org/listinfo/lxc-devel
(Continue reading)

SF Markus Elfring | 20 Oct 20:35 2014
Picon
Picon

Patching with Coccinelle?: Deletion of unnecessary checks before specific function calls

Hello,

Several functions perform input parameter validation before their
implementations will try further actions with side effects. Some calling
functions perform similar safety checks.

Functions which release a system resource are occasionally documented in the way
that they tolerate the passing of a null pointer for example.
I do not see a need because of this fact that a function caller repeats a
corresponding check.

Now I would like to propose such a change again.

1. Extension of the test infrastructure for the analysis tool "Coccinelle"
   Semantic patch patterns can help to identify update candidates also in the
LXC source file hierarchy.
   http://coccinelle.lip6.fr/

2. Clarification for some automated update suggestions
   My source code search approach found 19 affected source files with the help
of the software "Coccinelle 1.0.0-rc22" at least which might need another review
and corresponding corrections. Further software development will point even more
potentially open issues out.
   https://github.com/lxc/lxc/issues/158

Regards,
Markus
_______________________________________________
lxc-devel mailing list
lxc-devel <at> lists.linuxcontainers.org
(Continue reading)

SF Markus Elfring | 20 Oct 20:00 2014
Picon
Picon

Check return codes everywhere

Hello,

A few return values are still overlooked in the source files.
Would you like to improve this situation with ideas from the bug report
"Completion of error handling"?
https://github.com/lxc/lxc/issues/83

Regards,
Markus
_______________________________________________
lxc-devel mailing list
lxc-devel <at> lists.linuxcontainers.org
http://lists.linuxcontainers.org/listinfo/lxc-devel
Bogdan Purcareata | 20 Oct 21:56 2014

[PATCH 0/2] busybox template: enable to use with unpriv containers

Since Busybox containers are built using components on the host system, there's
no real need to rely on lxc-download to initialize a specific pre-built rootfs.
There is no maintained Busybox rootfs anyway, and the present template requires
minor tweaks to work with user namespaces as well.

Complete the previously started support for user namespaces and eliminate the
initial "fail if in userns" check. Also add an entry in the container config to
do the corresponding bind-mounts for the tty devices.

Bogdan Purcareata (2):
  busybox template: support for unprivileged containers
  busybox template: mount fstab when available

 templates/lxc-busybox.in | 40 ++++++++++++++++++++++++++++++----------
 1 file changed, 30 insertions(+), 10 deletions(-)

--

-- 
1.9.rc1

_______________________________________________
lxc-devel mailing list
lxc-devel <at> lists.linuxcontainers.org
http://lists.linuxcontainers.org/listinfo/lxc-devel
Dark Templar | 19 Oct 10:37 2014
Picon

[PATCH] update legacy lxc-ls

Hi,

I'm sending one more patch for lxc, this one updates legacy lxc-ls tool
to work with symlinks to directories in the /etc/lxc/, i.e. to work in
cases when /etc/lxc/something is a symlink to some directory with lxc
container configs and data. Patch is attached to this mail.

Thanks
_______________________________________________
lxc-devel mailing list
lxc-devel <at> lists.linuxcontainers.org
http://lists.linuxcontainers.org/listinfo/lxc-devel

Gmane