[lxc-devel] [PATCH] doc: Update Japanese lxc-clone(1)

2014-02-17 Thread KATOH Yasufumi
Update for commit f9ae4107f7ec6d193c3751744e28c9009aaebfbb Signed-off-by: KATOH Yasufumi --- doc/ja/lxc-clone.sgml.in | 11 ++- 1 file changed, 6 insertions(+), 5 deletions(-) diff --git a/doc/ja/lxc-clone.sgml.in b/doc/ja/lxc-clone.sgml.in index e05df51..1cdc259 100644 --- a/doc/ja/lxc

Re: [lxc-devel] Error "unshare: Operation not permitted" when trying to create user container

2014-02-17 Thread Brian Campbell
On Feb 18, 2014, at 12:16 AM, Serge Hallyn wrote: >> Ah, that's the ticket: >> >> lambda@gherkin:~$ cat /proc/sys/kernel/unprivileged_userns_clone >> 0 >> >> Looks like this is a Debian specific patch, > > *cough* pls not to ask how i knew to query it kthx > >> which is why looking at the ups

Re: [lxc-devel] Error "unshare: Operation not permitted" when trying to create user container

2014-02-17 Thread Serge Hallyn
Quoting Brian Campbell (lam...@continuation.org): > On Feb 17, 2014, at 11:11 AM, Serge Hallyn wrote: > > > Quoting Brian Campbell (lam...@continuation.org): > >> I tried the demo_userns.c example code from this LWN article > >> https://lwn.net/Articles/532593/ and got the same result: > >> > >

[lxc-devel] [lxc/lxc] f9ae41: doc: Fix broken grammar.

2014-02-17 Thread GitHub
Branch: refs/heads/master Home: https://github.com/lxc/lxc Commit: f9ae4107f7ec6d193c3751744e28c9009aaebfbb https://github.com/lxc/lxc/commit/f9ae4107f7ec6d193c3751744e28c9009aaebfbb Author: Stéphane Graber Date: 2014-02-17 (Mon, 17 Feb 2014) Changed paths: M doc/lxc-clo

[lxc-devel] [lxc/lxc] 407905: don't skip setting network properties in unpriv ca...

2014-02-17 Thread GitHub
Branch: refs/heads/master Home: https://github.com/lxc/lxc Commit: 4079055377e727cc9b884372c0389c88d05c9214 https://github.com/lxc/lxc/commit/4079055377e727cc9b884372c0389c88d05c9214 Author: Serge Hallyn Date: 2014-02-17 (Mon, 17 Feb 2014) Changed paths: M src/lxc/conf.c

Re: [lxc-devel] [PATCH 1/1] don't skip setting network properties in unpriv case

2014-02-17 Thread Stéphane Graber
On Mon, Feb 17, 2014 at 10:33:20PM -0600, Serge Hallyn wrote: > Signed-off-by: Serge Hallyn Yay, my last unprivileged LXC bug bites the dust! Signed-off-by: Stéphane Graber > --- > src/lxc/conf.c | 19 --- > 1 file changed, 12 insertions(+), 7 deletions(-) > > diff --git a/sr

[lxc-devel] [PATCH 1/1] don't skip setting network properties in unpriv case

2014-02-17 Thread Serge Hallyn
Signed-off-by: Serge Hallyn --- src/lxc/conf.c | 19 --- 1 file changed, 12 insertions(+), 7 deletions(-) diff --git a/src/lxc/conf.c b/src/lxc/conf.c index 8529a43..d40e3e0 100644 --- a/src/lxc/conf.c +++ b/src/lxc/conf.c @@ -2374,16 +2374,19 @@ static int setup_netdev(struct lx

[lxc-devel] [Passed] lxc/lxc#273 (lxc-1.0.0.rc3 - f338fa8)

2014-02-17 Thread Travis CI
Build Update for lxc/lxc - Build: #273 Status: Passed Duration: 1 minute and 35 seconds Commit: f338fa8 (lxc-1.0.0.rc3) Author: Stéphane Graber Message: change version to 1.0.0.rc3 in configure.ac Signed-off-by: Stéphane Graber View the changeset: https://gi

[lxc-devel] [lxc/lxc]

2014-02-17 Thread GitHub
Branch: refs/tags/lxc-1.0.0.rc3 Home: https://github.com/lxc/lxc ___ lxc-devel mailing list lxc-devel@lists.linuxcontainers.org http://lists.linuxcontainers.org/listinfo/lxc-devel

[lxc-devel] [lxc/lxc] f338fa: change version to 1.0.0.rc3 in configure.ac

2014-02-17 Thread GitHub
Branch: refs/heads/master Home: https://github.com/lxc/lxc Commit: f338fa89ef28b40f1607416042711d7eda614458 https://github.com/lxc/lxc/commit/f338fa89ef28b40f1607416042711d7eda614458 Author: Stéphane Graber Date: 2014-02-17 (Mon, 17 Feb 2014) Changed paths: M configure.a

[lxc-devel] [lxc/lxc] 03fadd: Add some missing newlines

2014-02-17 Thread GitHub
Branch: refs/heads/master Home: https://github.com/lxc/lxc Commit: 03fadd1656ce2bf994fc30617c5bb795803e0fde https://github.com/lxc/lxc/commit/03fadd1656ce2bf994fc30617c5bb795803e0fde Author: Stéphane Graber Date: 2014-02-17 (Mon, 17 Feb 2014) Changed paths: M src/lxc/cgm

[lxc-devel] [lxc/lxc] 14a666: cgmanager: lock around cgmanager-client calls

2014-02-17 Thread GitHub
Branch: refs/heads/master Home: https://github.com/lxc/lxc Commit: 14a666b577fcd1d9fe11209bd99f890e0fb9dfa5 https://github.com/lxc/lxc/commit/14a666b577fcd1d9fe11209bd99f890e0fb9dfa5 Author: Serge Hallyn Date: 2014-02-17 (Mon, 17 Feb 2014) Changed paths: M src/lxc/cgmana

Re: [lxc-devel] [PATCH] close correct side of the pipe and increase buffer size by one to handle \n

2014-02-17 Thread Serge Hallyn
Quoting S.Çağlar Onur (cag...@10ur.org): > Hey Serge, > > On Mon, Feb 17, 2014 at 6:03 PM, Serge Hallyn wrote: > > Quoting S.Çağlar Onur (cag...@10ur.org): > >> Signed-off-by: S.Çağlar Onur > > > > Thanks! One comment, > > > >> --- > >> src/lxc/conf.c | 9 + > >> 1 file changed, 5 inse

Re: [lxc-devel] [PATCH] close correct side of the pipe and increase buffer size by one to handle \n

2014-02-17 Thread S . Çağlar Onur
Hey Serge, On Mon, Feb 17, 2014 at 6:03 PM, Serge Hallyn wrote: > Quoting S.Çağlar Onur (cag...@10ur.org): >> Signed-off-by: S.Çağlar Onur > > Thanks! One comment, > >> --- >> src/lxc/conf.c | 9 + >> 1 file changed, 5 insertions(+), 4 deletions(-) >> >> diff --git a/src/lxc/conf.c b/s

Re: [lxc-devel] [PATCH] close correct side of the pipe and increase buffer size by one to handle \n

2014-02-17 Thread Serge Hallyn
Quoting S.Çağlar Onur (cag...@10ur.org): > Signed-off-by: S.Çağlar Onur Thanks! One comment, > --- > src/lxc/conf.c | 9 + > 1 file changed, 5 insertions(+), 4 deletions(-) > > diff --git a/src/lxc/conf.c b/src/lxc/conf.c > index 10f46ae..175a82f 100644 > --- a/src/lxc/conf.c > +++ b/

Re: [lxc-devel] [PATCH 1/1] seccomp: add 'lxc.seccomp.optional'

2014-02-17 Thread Serge Hallyn
Quoting Stéphane Graber (stgra...@ubuntu.com): > On Mon, Feb 17, 2014 at 05:16:51PM -0500, Stéphane Graber wrote: > > On Mon, Feb 17, 2014 at 02:05:10PM -0600, Serge Hallyn wrote: > > > If that is set, then if reading the policy failed, we continue > > > without trying to load seccomp. (If reading

[lxc-devel] [lxc/lxc] 442f5c: Typo fix

2014-02-17 Thread GitHub
Branch: refs/heads/master Home: https://github.com/lxc/lxc Commit: 442f5c0fdfe829d6e4baac224bf8df0bb74fc6eb https://github.com/lxc/lxc/commit/442f5c0fdfe829d6e4baac224bf8df0bb74fc6eb Author: Stéphane Graber Date: 2014-02-17 (Mon, 17 Feb 2014) Changed paths: M src/lxc/att

[lxc-devel] [lxc/lxc] e403a0: tests: Use trusty instead of lucid

2014-02-17 Thread GitHub
Branch: refs/heads/master Home: https://github.com/lxc/lxc Commit: e403a064231fd4cb852d0b752ef1dc07d7440aeb https://github.com/lxc/lxc/commit/e403a064231fd4cb852d0b752ef1dc07d7440aeb Author: Stéphane Graber Date: 2014-02-17 (Mon, 17 Feb 2014) Changed paths: M src/tests/c

Re: [lxc-devel] [PATCH 1/1] seccomp: add 'lxc.seccomp.optional'

2014-02-17 Thread Stéphane Graber
On Mon, Feb 17, 2014 at 05:16:51PM -0500, Stéphane Graber wrote: > On Mon, Feb 17, 2014 at 02:05:10PM -0600, Serge Hallyn wrote: > > If that is set, then if reading the policy failed, we continue > > without trying to load seccomp. (If reading the policy > > succeeded, then we do not ignore failur

Re: [lxc-devel] [PATCH] close correct side of the pipe and increase buffer size by one to handle \n

2014-02-17 Thread Stéphane Graber
On Mon, Feb 17, 2014 at 03:08:18PM -0500, S.Çağlar Onur wrote: > Signed-off-by: S.Çağlar Onur Acked-by: Stéphane Graber > --- > src/lxc/conf.c | 9 + > 1 file changed, 5 insertions(+), 4 deletions(-) > > diff --git a/src/lxc/conf.c b/src/lxc/conf.c > index 10f46ae..175a82f 100644 > --

[lxc-devel] [lxc/lxc] fe1f67: close correct side of the pipe and increase buffer...

2014-02-17 Thread GitHub
Branch: refs/heads/master Home: https://github.com/lxc/lxc Commit: fe1f672ff83129cb7be4b718831dcd512b22a171 https://github.com/lxc/lxc/commit/fe1f672ff83129cb7be4b718831dcd512b22a171 Author: S.Çağlar Onur Date: 2014-02-17 (Mon, 17 Feb 2014) Changed paths: M src/lxc/conf.

Re: [lxc-devel] [PATCH 1/1] seccomp: add 'lxc.seccomp.optional'

2014-02-17 Thread Stéphane Graber
On Mon, Feb 17, 2014 at 02:05:10PM -0600, Serge Hallyn wrote: > If that is set, then if reading the policy failed, we continue > without trying to load seccomp. (If reading the policy > succeeded, then we do not ignore failure to load the policy; > we could consider doing that as well, however the

[lxc-devel] [lxc/lxc] 44bbab: configure.ac: Fix cgmanager detection

2014-02-17 Thread GitHub
Branch: refs/heads/master Home: https://github.com/lxc/lxc Commit: 44bbab8cdf856b3b30cd35c2c0c6aa65e6d6 https://github.com/lxc/lxc/commit/44bbab8cdf856b3b30cd35c2c0c6aa65e6d6 Author: Stéphane Graber Date: 2014-02-17 (Mon, 17 Feb 2014) Changed paths: M configure.a

[lxc-devel] [PATCH] close correct side of the pipe and increase buffer size by one to handle \n

2014-02-17 Thread S . Çağlar Onur
Signed-off-by: S.Çağlar Onur --- src/lxc/conf.c | 9 + 1 file changed, 5 insertions(+), 4 deletions(-) diff --git a/src/lxc/conf.c b/src/lxc/conf.c index 10f46ae..175a82f 100644 --- a/src/lxc/conf.c +++ b/src/lxc/conf.c @@ -3011,13 +3011,14 @@ void lxc_delete_network(struct lxc_handler *

[lxc-devel] [PATCH 1/1] seccomp: add 'lxc.seccomp.optional'

2014-02-17 Thread Serge Hallyn
If that is set, then if reading the policy failed, we continue without trying to load seccomp. (If reading the policy succeeded, then we do not ignore failure to load the policy; we could consider doing that as well, however the goal here is to have a generic container configuration work whether t

[lxc-devel] [lxc/lxc] 58e0f5: support get_config_item(lxc.seccomp) and clear_con...

2014-02-17 Thread GitHub
Branch: refs/heads/master Home: https://github.com/lxc/lxc Commit: 58e0f57da4daa5f41a0402916bce139fd49f9b80 https://github.com/lxc/lxc/commit/58e0f57da4daa5f41a0402916bce139fd49f9b80 Author: Serge Hallyn Date: 2014-02-17 (Mon, 17 Feb 2014) Changed paths: M src/lxc/confil

Re: [lxc-devel] [PATCH 1/2] support get_config_item(lxc.seccomp) and clear_config_item(lxc.seccomp)

2014-02-17 Thread Stéphane Graber
On Mon, Feb 17, 2014 at 12:46:30PM -0600, Serge Hallyn wrote: > Signed-off-by: Serge Hallyn Acked-by: Stéphane Graber > --- > src/lxc/confile.c | 7 +++ > 1 file changed, 7 insertions(+) > > diff --git a/src/lxc/confile.c b/src/lxc/confile.c > index fa263ef..afc9e32 100644 > --- a/src/lxc

Re: [lxc-devel] [PATCH 2/2] attach: try to use the container's seccomp policy

2014-02-17 Thread Stéphane Graber
On Mon, Feb 17, 2014 at 12:47:35PM -0600, Serge Hallyn wrote: > We can't get the actual policy (in the case where the policy file > has changed) from the container, but at least we can use the > seccomp policy file listed in the container config file. > > (If anyone wants to further improve this,

[lxc-devel] [PATCH 2/2] attach: try to use the container's seccomp policy

2014-02-17 Thread Serge Hallyn
We can't get the actual policy (in the case where the policy file has changed) from the container, but at least we can use the seccomp policy file listed in the container config file. (If anyone wants to further improve this, it may be better to get the seccomp policy over the cmd api; not sure t

[lxc-devel] [PATCH 1/2] support get_config_item(lxc.seccomp) and clear_config_item(lxc.seccomp)

2014-02-17 Thread Serge Hallyn
Signed-off-by: Serge Hallyn --- src/lxc/confile.c | 7 +++ 1 file changed, 7 insertions(+) diff --git a/src/lxc/confile.c b/src/lxc/confile.c index fa263ef..afc9e32 100644 --- a/src/lxc/confile.c +++ b/src/lxc/confile.c @@ -44,6 +44,7 @@ #include "log.h" #include "conf.h" #include "networ

Re: [lxc-devel] Error "unshare: Operation not permitted" when trying to create user container

2014-02-17 Thread Brian Campbell
On Feb 17, 2014, at 11:11 AM, Serge Hallyn wrote: > Quoting Brian Campbell (lam...@continuation.org): >> I tried the demo_userns.c example code from this LWN article >> https://lwn.net/Articles/532593/ and got the same result: >> >> lambda@gherkin:userns$ ./demo_userns >> clone: Operation not p

[lxc-devel] [lxc/lxc] f74e08: download: Support nested containers in unpriv

2014-02-17 Thread GitHub
Branch: refs/heads/master Home: https://github.com/lxc/lxc Commit: f74e080cf75f958b3e52dff9e858fd722f66301e https://github.com/lxc/lxc/commit/f74e080cf75f958b3e52dff9e858fd722f66301e Author: Stéphane Graber Date: 2014-02-17 (Mon, 17 Feb 2014) Changed paths: M templates/l

Re: [lxc-devel] [PATCH] download: Support nested containers in unpriv

2014-02-17 Thread Serge Hallyn
Quoting Stéphane Graber (stgra...@ubuntu.com): > This adds detection for the case where we are root in an unprivileged > container and then run LXC from there. In this case, we want to download > to the system location, ignore the missing uid/gid ranges and run > templates that are userns-ready. >

[lxc-devel] [lxc/lxc] a7242d: fill missing netdev fields for unprivileged contai...

2014-02-17 Thread GitHub
Branch: refs/heads/master Home: https://github.com/lxc/lxc Commit: a7242d9a58ac7efef9fb97dcdf760bd13230 https://github.com/lxc/lxc/commit/a7242d9a58ac7efef9fb97dcdf760bd13230 Author: S.Çağlar Onur Date: 2014-02-17 (Mon, 17 Feb 2014) Changed paths: M src/lxc/conf.

Re: [lxc-devel] Error "unshare: Operation not permitted" when trying to create user container

2014-02-17 Thread Serge Hallyn
Quoting Brian Campbell (lam...@continuation.org): > I tried the demo_userns.c example code from this LWN article > https://lwn.net/Articles/532593/ and got the same result: > > lambda@gherkin:userns$ ./demo_userns > clone: Operation not permitted > > So it looks like something is preventing me f

Re: [lxc-devel] [PATCH] fill missing netdev fields for unprivileged containers

2014-02-17 Thread Serge Hallyn
Quoting S.Çağlar Onur (cag...@10ur.org): > lxc-user-nic now returns the names of the interfaces and > unpriv_assign_nic function parses that information to fill > missing netdev->veth_attr.pair and netdev->name. > > With this patch get_running_config_item started to provide > correct information;

[lxc-devel] [PATCH] download: Support nested containers in unpriv

2014-02-17 Thread Stéphane Graber
This adds detection for the case where we are root in an unprivileged container and then run LXC from there. In this case, we want to download to the system location, ignore the missing uid/gid ranges and run templates that are userns-ready. Signed-off-by: Stéphane Graber --- templates/lxc-downl