The release announcement finally got pushed out here:
https://discuss.linuxcontainers.org/t/lxc-4-0-lts-has-been-released/7182

The main new features are:
 - cgroups: Full cgroup2 support
 - cgroups: Freezer support in CGroup2
 - cgroups: eBPF device controller support in CGroup2
 - config: Add lxc.autodev.tmpfs.size configuration key
 - config: Add lxc.selinux.context.keyring key
 - config: Add lxc.keyring.session 
 - file utils: Add fopen_cached() and fdopen_cached 
 - api: Add new init_pidfd() member
 - memory utils: Add new cleanup api
 - lxc-usernsexec: Make it easy to map own uid
 - seccomp: Add s390 support
 - syscalls: Improve manual syscall implementations
 - network: Improved network device creation and removal
 - network: Allow moving wireless devices


Only one symbol was added compared to 3.2.1:
 - init_pidfd (to retrieve the pidfd of the init process)

And a total of 5 since 3.0.0:
 - mount (to inject mounts into a running container)
 - umount (to remove mounts from a running container)
 - seccomp_notify_fd (to support syscall interception)
 - init_pidfd (to retrieve the pidfd of the init process)
 - lxc_has_api_extension (to check whether particular feature/options are 
present)


No rebuilds are needed and all reverse dependencies of liblxc are know to work 
properly.
LXC upstream has auto-generated PPAs that are used on all of our CI systems 
(running 18.04) so we have been testing those upgrades continuously and don't 
expect any issue.

No configuration keys were removed in this release (unlike 3.0) and so
no config updates are required for our users. Existing 3.0 users can
upgrade to 4.0, running containers will keep working and the default
configurations used by 4.0 are even backward compatible to 3.0, so a
downgrade is even an option if needed.

As mentioned above, the main benefit of getting 4.0 in Ubuntu is to get
the 5 years of upstream security updates. Even though LXC is in
universe, it's still quite widely used and actively maintained in Ubuntu
by us.


It's also worth noting that we've had all LXD users running the LXD snap run 
LXC 4.0 for the past week with only one regression found in the attach logic. 
This has since been fixed and will be cherry-picked in the package that's to be 
uploaded to Ubuntu.


We realize we're getting late in the cycle, ideally we'd like this uploaded as 
soon as possible so it can get built, go through autopkgtest and land in the 
archive as soon as the freeze lifts (if it's covered by the freeze at all, not 
sure).

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1867535

Title:
  [FFe] LXC 4.0.0 LTS

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1867535/+subscriptions

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to