2016-February/035726.html
Sincerely,
L.
--
Leonid Isaev
GPG fingerprints: DA92 034D B4A8 EC51 7EA6 20DF 9291 EE8A 043C B8C4
C0DF 20D0 C075 C3F1 E1BE 775A A7AE F6CB 164B 5A6D
___
lxc-devel mailing list
lxc-devel@lists.linu
tring.
Signed-off-by: Leonid Isaev
---
src/lxc/lxccontainer.c | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/src/lxc/lxccontainer.c b/src/lxc/lxccontainer.c
index 9f12ca2..50cfc69 100644
--- a/src/lxc/lxccontainer.c
+++ b/src/lxc/lxccontainer.c
@@ -670,7 +670,7 @@ static
as to do trivial configuration like setting the hostname and
TZ...
Best,
L.
--
Leonid Isaev
GPG fingerprints: DA92 034D B4A8 EC51 7EA6 20DF 9291 EE8A 043C B8C4
C0DF 20D0 C075 C3F1 E1BE 775A A7AE F6CB 164B 5A6D
signature.asc
Description: PGP signature
___
Hi,
On Wed, 7 May 2014 13:25:04 -0500
Stéphane Graber wrote:
> On Wed, May 07, 2014 at 01:11:39PM -0500, Leonid Isaev wrote:
> > Hi,
> >
> > Unless I am missing something, I see multiple issues with this
> > change:
> >
> > 1. The template stil
-stop)
>
> archlinux is using systemd and systemd's configuration does not have any
> services setup to handle sigpwr hook which is sent by lxc-stop command. By
> enabling sigpwr service we make sure that lxc-stop will work.
>
> Signed-off-by: Edvinas Klovas
> Acked-by: St
them
> for automation and it's really quite simple to script a password change
> to something safer before you start the container.
>
Thanks,
--
Leonid Isaev
GPG fingerprints: DA92 034D B4A8 EC51 7EA6 20DF 9291 EE8A 043C B8C4
C0DF 20D0 C075 C3F1 E1BE 775A A7AE F6CB
On Fri, 4 Apr 2014 19:02:34 -0400
Stéphane Graber wrote:
> On Mon, Mar 31, 2014 at 05:14:34PM -0400, Leonid Isaev wrote:
> > Cleanups:
> > 1. Do not modify container's /etc/hosts (archlinux uses /etc/nsswitch.conf)
> > 2. Remove duplicate lines from config
> >
Cleanups:
1. Do not modify container's /etc/hosts (archlinux uses /etc/nsswitch.conf)
2. Remove duplicate lines from config
3. Print a nicer final message
4. Get rid of some grep's
Signed-off-by: Leonid Isaev
---
templates/lxc-archlinux.in | 33 -
1 fi
Do not cherry-pick packages for the default install to avoid dependency
issues. Instead, install the base group modulo blacklisted packages.
Signed-off-by: Leonid Isaev
---
templates/lxc-archlinux.in | 32 ++--
1 file changed, 6 insertions(+), 26 deletions(-)
diff
On Mon, 31 Mar 2014 20:43:01 -0400
Stéphane Graber wrote:
> On Mon, Mar 31, 2014 at 08:33:51PM -0400, Leonid Isaev wrote:
> > On Mon, 31 Mar 2014 18:34:13 -0500
> > Serge Hallyn wrote:
> >
> > > Quoting Leonid Isaev (lis...@umail.iu.edu):
> > > > D
On Mon, 31 Mar 2014 18:34:13 -0500
Serge Hallyn wrote:
> Quoting Leonid Isaev (lis...@umail.iu.edu):
> > Do not cherry-pick packages for the default install to avoid dependency
> > issues. Instead, install the base group modulo blacklisted packages.
> >
> > Signed-of
Cleanups:
1. Do not modify container's /etc/hosts (archlinux uses /etc/nsswitch.conf)
2. Remove duplicate lines from config
3. Print a nicer final message
4. Get rid of some grep's in favor of bash regex
Signed-off-by: Leonid Isaev
---
templates/lxc-archlin
Do not copy the pacman master key from the host, as this opens it to attacks;
generate a new secret hostkey.
Signed-off-by: Leonid Isaev
---
templates/lxc-archlinux.in | 6 +-
1 file changed, 5 insertions(+), 1 deletion(-)
diff --git a/templates/lxc-archlinux.in b/templates/lxc
Do not cherry-pick packages for the default install to avoid dependency issues.
Instead, install the base group modulo blacklisted packages.
Signed-off-by: Leonid Isaev
---
templates/lxc-archlinux.in | 32 ++--
1 file changed, 6 insertions(+), 26 deletions(-)
diff
e quite
rapidly).
I would suggest removing the ${base_packages} array and just installing the
entire base group plus a few (~O(1)) packages like ldns which do not belong in
base.
I can send the relevant patch along with other changes which I am testing right
now, but not until early next week.
mandriva.
FYI, there are no releases/versions in archlinux, so -r/-R are not applicable.
Cheers,
Leonid.
--
Leonid Isaev
GnuPG key: 0x164B5A6D
Fingerprint: C0DF 20D0 C075 C3F1 E1BE 775A A7AE F6CB 164B 5A6D
signature.asc
Description: PGP signature
_
s to use
> lxc.include for their config).
>
>
> With all that said, I'll start working on the implementation of this and
> hope to have the server working with ubuntu and debian images published
> over the next few days.
> If any other distro is intere
On Thu, 2 Jan 2014 10:14:41 -0600
Serge Hallyn wrote:
> Quoting Leonid Isaev (lis...@umail.iu.edu):
> > Multiple fixes for the ArchLinux template:
> >
> > 1. Add some packages from base group to the pkg install list.
> >
> > 2. Better comment and clean up the
ssions 600 root:root, alongside the config file. Clearly, this will not
compromise any security.
>
> [Snip]
>
> Regards,
> Mike
Happy holidays,
Leonid.
--
Leonid Isaev
GnuPG key: 0x164B5A6D
Fingerprint: C0DF 20D0 C075 C3F1 E1BE 775A A7AE F6CB 164B 5A6D
signature.asc
Description: PGP signature
___
lxc-devel mailing list
lxc-devel@lists.linuxcontainers.org
http://lists.linuxcontainers.org/listinfo/lxc-devel
*
+* THIS CONTAINER IS VULNERABLE.*
+* There is *NO* default root password. *
+* It is highly recommended that you set it on first login. *
+*
20 matches
Mail list logo
