[Bug 1004069] Re: lxc-start-ephemeral doesn't fully work when started as non-root
** Also affects: lxc (Ubuntu Quantal) Importance: Undecided Status: Fix Released ** Changed in: lxc (Ubuntu Precise) Status: In Progress => Fix Committed -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1004069 Title: lxc-start-ephemeral doesn't fully work when started as non-root To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1004069/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1004069] Re: lxc-start-ephemeral doesn't fully work when started as non-root
** Description changed: lxc-start-ephemeral is supposed to be working as non-root by calling sudo where needed but some actions (writing to conf files) still require root. In Quantal, I fixed lxc-start-ephemeral so that it uses "sudo tee" in such case, making it work as expected, this should be SRUed to Precise. - Testcase: - 1) sudo lxc-create -t ubuntu -n p1 - 2) lxc-start-ephemeral -o p1 + [impact] + lxc-start-ephemeral only partly works when run as non-root, this isn't the expected behaviour. + + [development fix] + The SRU is a copy of the template from development + + [stable fix] + The SRU is a copy of the template from development + + [test case] + 1) sudo lxc-create -t ubuntu -n p1 + 2) lxc-start-ephemeral -o p1 If 2) works properly without any error message (operation not permitted/permission denied), then the fix works. + + [regression potential] + Can't get much worse than a command blowing up at the middle of run time with files being owned by root and an half started container. ** Description changed: lxc-start-ephemeral is supposed to be working as non-root by calling sudo where needed but some actions (writing to conf files) still require root. In Quantal, I fixed lxc-start-ephemeral so that it uses "sudo tee" in such case, making it work as expected, this should be SRUed to Precise. + + [impact] lxc-start-ephemeral only partly works when run as non-root, this isn't the expected behaviour. [development fix] The SRU is a copy of the template from development [stable fix] The SRU is a copy of the template from development [test case] 1) sudo lxc-create -t ubuntu -n p1 2) lxc-start-ephemeral -o p1 If 2) works properly without any error message (operation not permitted/permission denied), then the fix works. [regression potential] Can't get much worse than a command blowing up at the middle of run time with files being owned by root and an half started container. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1004069 Title: lxc-start-ephemeral doesn't fully work when started as non-root To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1004069/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1004069] Re: lxc-start-ephemeral doesn't fully work when started as non-root
** Description changed: lxc-start-ephemeral is supposed to be working as non-root by calling sudo where needed but some actions (writing to conf files) still require root. In Quantal, I fixed lxc-start-ephemeral so that it uses "sudo tee" in such case, making it work as expected, this should be SRUed to Precise. [impact] lxc-start-ephemeral only partly works when run as non-root, this isn't the expected behaviour. - [development fix] - The SRU is a copy of the template from development - - [stable fix] - The SRU is a copy of the template from development - [test case] 1) sudo lxc-create -t ubuntu -n p1 2) lxc-start-ephemeral -o p1 If 2) works properly without any error message (operation not permitted/permission denied), then the fix works. [regression potential] Can't get much worse than a command blowing up at the middle of run time with files being owned by root and an half started container. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1004069 Title: lxc-start-ephemeral doesn't fully work when started as non-root To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1004069/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1004069] Re: lxc-start-ephemeral doesn't fully work when started as non-root
Hello Stéphane, or anyone else affected, Accepted lxc into precise-proposed. The package will build now and be available in a few hours. Please test and give feedback here. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Thank you in advance! ** Tags added: verification-needed -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1004069 Title: lxc-start-ephemeral doesn't fully work when started as non-root To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1004069/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1004069] Re: lxc-start-ephemeral doesn't fully work when started as non-root
** Branch linked: lp:ubuntu/precise-proposed/lxc -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1004069 Title: lxc-start-ephemeral doesn't fully work when started as non-root To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1004069/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1004069] Re: lxc-start-ephemeral doesn't fully work when started as non-root
fix confirmed ** Tags removed: verification-needed ** Tags added: verification-done -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1004069 Title: lxc-start-ephemeral doesn't fully work when started as non-root To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1004069/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1004069] Re: lxc-start-ephemeral doesn't fully work when started as non-root
This bug was fixed in the package lxc - 0.7.5-3ubuntu58 --- lxc (0.7.5-3ubuntu58) precise-proposed; urgency=low * Fix broken logic in lxc-ubuntu template where lxc.devttydir would be set to 'lxc' only for releases that don't support it. (LP: #1007493) lxc (0.7.5-3ubuntu57) precise-proposed; urgency=low [ Serge Hallyn ] * 0083-always-close-all-fds.patch: Have lxc-start always run with --close-all-fds. There is no advantage to having lxc-start fail with inherited fds. (LP: #1003583) * debian/lxc-net.upstart: don't put '()' after call to cleanup. (LP: #1000174) [ Stéphane Graber ] * Sync lxc-ubuntu with the one in Quantal: - Bugfixes: + Update list of extra packages for debootstrap to only include vim and ssh. The others were only relevant when we were still using the minbase variant. (LP: #996839) + Update default /etc/hosts to match that of a regular Ubuntu system. (adds missing ipv6 aliases) (LP: #1004108) + Make sure /etc/resolv.conf is valid before running any apt command. Fixes a potential race condition (no report of it at this time). - Improvements we get by pulling the whole patch from Quantal. These don't contain any user behaviour change but will make cherry-picking any further change much easier. + Drop any hardcoded Ubuntu version check and replace by feature checks instead. This removes the need for SRUs whenever we release a new Ubuntu. + Format lxc-ubuntu to consistently use 4-spaces indent instead of mixed spaces/tabs. + Update default /etc/network/interfaces to include the header. + Drop support for never supported releases (gutsy on sparc). + Update template help message for release and arch parameters. Old string was only listing i386 and amd64, which is no longer accurate (as of 12.04). (This string isn't translated) + Switch default Ubuntu version from lucid to precise for systems that don't have lsb_release (won't affect Ubuntu) * Sync lxc-start-ephemeral with the one in Quantal: - Switch lxc-start-ephemeral from unreliable parsing of DHCP lease files to using "ip netns" to retrieve the IP from the container's network namespace. (LP: #994752) - Fix a race in lxc-start-ephemeral where the container isn't yet running when trying to get its IPs. - Update a few calls so that lxc-start-ephemeral can be called as a user (ensure consistent usage of sudo across the script). (LP: #1004069) -- Stephane GraberFri, 01 Jun 2012 11:46:50 -0400 ** Changed in: lxc (Ubuntu Precise) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to lxc in Ubuntu. https://bugs.launchpad.net/bugs/1004069 Title: lxc-start-ephemeral doesn't fully work when started as non-root To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1004069/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
