Update for commit f9ae4107f7ec6d193c3751744e28c9009aaebfbb
Signed-off-by: KATOH Yasufumi
---
doc/ja/lxc-clone.sgml.in | 11 ++-
1 file changed, 6 insertions(+), 5 deletions(-)
diff --git a/doc/ja/lxc-clone.sgml.in b/doc/ja/lxc-clone.sgml.in
index e05df51..1cdc259 100644
--- a/doc/ja/lxc
On Feb 18, 2014, at 12:16 AM, Serge Hallyn wrote:
>> Ah, that's the ticket:
>>
>> lambda@gherkin:~$ cat /proc/sys/kernel/unprivileged_userns_clone
>> 0
>>
>> Looks like this is a Debian specific patch,
>
> *cough* pls not to ask how i knew to query it kthx
>
>> which is why looking at the ups
Quoting Brian Campbell (lam...@continuation.org):
> On Feb 17, 2014, at 11:11 AM, Serge Hallyn wrote:
>
> > Quoting Brian Campbell (lam...@continuation.org):
> >> I tried the demo_userns.c example code from this LWN article
> >> https://lwn.net/Articles/532593/ and got the same result:
> >>
> >
Branch: refs/heads/master
Home: https://github.com/lxc/lxc
Commit: f9ae4107f7ec6d193c3751744e28c9009aaebfbb
https://github.com/lxc/lxc/commit/f9ae4107f7ec6d193c3751744e28c9009aaebfbb
Author: Stéphane Graber
Date: 2014-02-17 (Mon, 17 Feb 2014)
Changed paths:
M doc/lxc-clo
Branch: refs/heads/master
Home: https://github.com/lxc/lxc
Commit: 4079055377e727cc9b884372c0389c88d05c9214
https://github.com/lxc/lxc/commit/4079055377e727cc9b884372c0389c88d05c9214
Author: Serge Hallyn
Date: 2014-02-17 (Mon, 17 Feb 2014)
Changed paths:
M src/lxc/conf.c
On Mon, Feb 17, 2014 at 10:33:20PM -0600, Serge Hallyn wrote:
> Signed-off-by: Serge Hallyn
Yay, my last unprivileged LXC bug bites the dust!
Signed-off-by: Stéphane Graber
> ---
> src/lxc/conf.c | 19 ---
> 1 file changed, 12 insertions(+), 7 deletions(-)
>
> diff --git a/sr
Signed-off-by: Serge Hallyn
---
src/lxc/conf.c | 19 ---
1 file changed, 12 insertions(+), 7 deletions(-)
diff --git a/src/lxc/conf.c b/src/lxc/conf.c
index 8529a43..d40e3e0 100644
--- a/src/lxc/conf.c
+++ b/src/lxc/conf.c
@@ -2374,16 +2374,19 @@ static int setup_netdev(struct lx
Build Update for lxc/lxc
-
Build: #273
Status: Passed
Duration: 1 minute and 35 seconds
Commit: f338fa8 (lxc-1.0.0.rc3)
Author: Stéphane Graber
Message: change version to 1.0.0.rc3 in configure.ac
Signed-off-by: Stéphane Graber
View the changeset: https://gi
Branch: refs/tags/lxc-1.0.0.rc3
Home: https://github.com/lxc/lxc
___
lxc-devel mailing list
lxc-devel@lists.linuxcontainers.org
http://lists.linuxcontainers.org/listinfo/lxc-devel
Branch: refs/heads/master
Home: https://github.com/lxc/lxc
Commit: f338fa89ef28b40f1607416042711d7eda614458
https://github.com/lxc/lxc/commit/f338fa89ef28b40f1607416042711d7eda614458
Author: Stéphane Graber
Date: 2014-02-17 (Mon, 17 Feb 2014)
Changed paths:
M configure.a
Branch: refs/heads/master
Home: https://github.com/lxc/lxc
Commit: 03fadd1656ce2bf994fc30617c5bb795803e0fde
https://github.com/lxc/lxc/commit/03fadd1656ce2bf994fc30617c5bb795803e0fde
Author: Stéphane Graber
Date: 2014-02-17 (Mon, 17 Feb 2014)
Changed paths:
M src/lxc/cgm
Branch: refs/heads/master
Home: https://github.com/lxc/lxc
Commit: 14a666b577fcd1d9fe11209bd99f890e0fb9dfa5
https://github.com/lxc/lxc/commit/14a666b577fcd1d9fe11209bd99f890e0fb9dfa5
Author: Serge Hallyn
Date: 2014-02-17 (Mon, 17 Feb 2014)
Changed paths:
M src/lxc/cgmana
Quoting S.Çağlar Onur (cag...@10ur.org):
> Hey Serge,
>
> On Mon, Feb 17, 2014 at 6:03 PM, Serge Hallyn wrote:
> > Quoting S.Çağlar Onur (cag...@10ur.org):
> >> Signed-off-by: S.Çağlar Onur
> >
> > Thanks! One comment,
> >
> >> ---
> >> src/lxc/conf.c | 9 +
> >> 1 file changed, 5 inse
Hey Serge,
On Mon, Feb 17, 2014 at 6:03 PM, Serge Hallyn wrote:
> Quoting S.Çağlar Onur (cag...@10ur.org):
>> Signed-off-by: S.Çağlar Onur
>
> Thanks! One comment,
>
>> ---
>> src/lxc/conf.c | 9 +
>> 1 file changed, 5 insertions(+), 4 deletions(-)
>>
>> diff --git a/src/lxc/conf.c b/s
Quoting S.Çağlar Onur (cag...@10ur.org):
> Signed-off-by: S.Çağlar Onur
Thanks! One comment,
> ---
> src/lxc/conf.c | 9 +
> 1 file changed, 5 insertions(+), 4 deletions(-)
>
> diff --git a/src/lxc/conf.c b/src/lxc/conf.c
> index 10f46ae..175a82f 100644
> --- a/src/lxc/conf.c
> +++ b/
Quoting Stéphane Graber (stgra...@ubuntu.com):
> On Mon, Feb 17, 2014 at 05:16:51PM -0500, Stéphane Graber wrote:
> > On Mon, Feb 17, 2014 at 02:05:10PM -0600, Serge Hallyn wrote:
> > > If that is set, then if reading the policy failed, we continue
> > > without trying to load seccomp. (If reading
Branch: refs/heads/master
Home: https://github.com/lxc/lxc
Commit: 442f5c0fdfe829d6e4baac224bf8df0bb74fc6eb
https://github.com/lxc/lxc/commit/442f5c0fdfe829d6e4baac224bf8df0bb74fc6eb
Author: Stéphane Graber
Date: 2014-02-17 (Mon, 17 Feb 2014)
Changed paths:
M src/lxc/att
Branch: refs/heads/master
Home: https://github.com/lxc/lxc
Commit: e403a064231fd4cb852d0b752ef1dc07d7440aeb
https://github.com/lxc/lxc/commit/e403a064231fd4cb852d0b752ef1dc07d7440aeb
Author: Stéphane Graber
Date: 2014-02-17 (Mon, 17 Feb 2014)
Changed paths:
M src/tests/c
On Mon, Feb 17, 2014 at 05:16:51PM -0500, Stéphane Graber wrote:
> On Mon, Feb 17, 2014 at 02:05:10PM -0600, Serge Hallyn wrote:
> > If that is set, then if reading the policy failed, we continue
> > without trying to load seccomp. (If reading the policy
> > succeeded, then we do not ignore failur
On Mon, Feb 17, 2014 at 03:08:18PM -0500, S.Çağlar Onur wrote:
> Signed-off-by: S.Çağlar Onur
Acked-by: Stéphane Graber
> ---
> src/lxc/conf.c | 9 +
> 1 file changed, 5 insertions(+), 4 deletions(-)
>
> diff --git a/src/lxc/conf.c b/src/lxc/conf.c
> index 10f46ae..175a82f 100644
> --
Branch: refs/heads/master
Home: https://github.com/lxc/lxc
Commit: fe1f672ff83129cb7be4b718831dcd512b22a171
https://github.com/lxc/lxc/commit/fe1f672ff83129cb7be4b718831dcd512b22a171
Author: S.Çağlar Onur
Date: 2014-02-17 (Mon, 17 Feb 2014)
Changed paths:
M src/lxc/conf.
On Mon, Feb 17, 2014 at 02:05:10PM -0600, Serge Hallyn wrote:
> If that is set, then if reading the policy failed, we continue
> without trying to load seccomp. (If reading the policy
> succeeded, then we do not ignore failure to load the policy;
> we could consider doing that as well, however the
Branch: refs/heads/master
Home: https://github.com/lxc/lxc
Commit: 44bbab8cdf856b3b30cd35c2c0c6aa65e6d6
https://github.com/lxc/lxc/commit/44bbab8cdf856b3b30cd35c2c0c6aa65e6d6
Author: Stéphane Graber
Date: 2014-02-17 (Mon, 17 Feb 2014)
Changed paths:
M configure.a
Signed-off-by: S.Çağlar Onur
---
src/lxc/conf.c | 9 +
1 file changed, 5 insertions(+), 4 deletions(-)
diff --git a/src/lxc/conf.c b/src/lxc/conf.c
index 10f46ae..175a82f 100644
--- a/src/lxc/conf.c
+++ b/src/lxc/conf.c
@@ -3011,13 +3011,14 @@ void lxc_delete_network(struct lxc_handler *
If that is set, then if reading the policy failed, we continue
without trying to load seccomp. (If reading the policy
succeeded, then we do not ignore failure to load the policy;
we could consider doing that as well, however the goal here
is to have a generic container configuration work whether
t
Branch: refs/heads/master
Home: https://github.com/lxc/lxc
Commit: 58e0f57da4daa5f41a0402916bce139fd49f9b80
https://github.com/lxc/lxc/commit/58e0f57da4daa5f41a0402916bce139fd49f9b80
Author: Serge Hallyn
Date: 2014-02-17 (Mon, 17 Feb 2014)
Changed paths:
M src/lxc/confil
On Mon, Feb 17, 2014 at 12:46:30PM -0600, Serge Hallyn wrote:
> Signed-off-by: Serge Hallyn
Acked-by: Stéphane Graber
> ---
> src/lxc/confile.c | 7 +++
> 1 file changed, 7 insertions(+)
>
> diff --git a/src/lxc/confile.c b/src/lxc/confile.c
> index fa263ef..afc9e32 100644
> --- a/src/lxc
On Mon, Feb 17, 2014 at 12:47:35PM -0600, Serge Hallyn wrote:
> We can't get the actual policy (in the case where the policy file
> has changed) from the container, but at least we can use the
> seccomp policy file listed in the container config file.
>
> (If anyone wants to further improve this,
We can't get the actual policy (in the case where the policy file
has changed) from the container, but at least we can use the
seccomp policy file listed in the container config file.
(If anyone wants to further improve this, it may be better to get
the seccomp policy over the cmd api; not sure t
Signed-off-by: Serge Hallyn
---
src/lxc/confile.c | 7 +++
1 file changed, 7 insertions(+)
diff --git a/src/lxc/confile.c b/src/lxc/confile.c
index fa263ef..afc9e32 100644
--- a/src/lxc/confile.c
+++ b/src/lxc/confile.c
@@ -44,6 +44,7 @@
#include "log.h"
#include "conf.h"
#include "networ
On Feb 17, 2014, at 11:11 AM, Serge Hallyn wrote:
> Quoting Brian Campbell (lam...@continuation.org):
>> I tried the demo_userns.c example code from this LWN article
>> https://lwn.net/Articles/532593/ and got the same result:
>>
>> lambda@gherkin:userns$ ./demo_userns
>> clone: Operation not p
Branch: refs/heads/master
Home: https://github.com/lxc/lxc
Commit: f74e080cf75f958b3e52dff9e858fd722f66301e
https://github.com/lxc/lxc/commit/f74e080cf75f958b3e52dff9e858fd722f66301e
Author: Stéphane Graber
Date: 2014-02-17 (Mon, 17 Feb 2014)
Changed paths:
M templates/l
Quoting Stéphane Graber (stgra...@ubuntu.com):
> This adds detection for the case where we are root in an unprivileged
> container and then run LXC from there. In this case, we want to download
> to the system location, ignore the missing uid/gid ranges and run
> templates that are userns-ready.
>
Branch: refs/heads/master
Home: https://github.com/lxc/lxc
Commit: a7242d9a58ac7efef9fb97dcdf760bd13230
https://github.com/lxc/lxc/commit/a7242d9a58ac7efef9fb97dcdf760bd13230
Author: S.Çağlar Onur
Date: 2014-02-17 (Mon, 17 Feb 2014)
Changed paths:
M src/lxc/conf.
Quoting Brian Campbell (lam...@continuation.org):
> I tried the demo_userns.c example code from this LWN article
> https://lwn.net/Articles/532593/ and got the same result:
>
> lambda@gherkin:userns$ ./demo_userns
> clone: Operation not permitted
>
> So it looks like something is preventing me f
Quoting S.Çağlar Onur (cag...@10ur.org):
> lxc-user-nic now returns the names of the interfaces and
> unpriv_assign_nic function parses that information to fill
> missing netdev->veth_attr.pair and netdev->name.
>
> With this patch get_running_config_item started to provide
> correct information;
This adds detection for the case where we are root in an unprivileged
container and then run LXC from there. In this case, we want to download
to the system location, ignore the missing uid/gid ranges and run
templates that are userns-ready.
Signed-off-by: Stéphane Graber
---
templates/lxc-downl
37 matches
Mail list logo