[Devel] [PATCH] iptables: Enable xt_match_u32

2023-02-02 Thread Nikolay Borisov
This module is used by the vzt-ipt-autoload test so it must be enabled. https://jira.sw.ru/browse/PSBM-144990 Signed-off-by: Nikolay Borisov --- redhat/configs/ark/generic/CONFIG_NETFILTER_XT_MATCH_U32 | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/redhat/configs/ark/generic

[Devel] [PATCH rh7 1/2] kmsg: Virtualize timestamps in /dev/ksmg output

2023-02-02 Thread Konstantin Khorenko
Internally log messages contain the timestamps relative to the Host boot time, while Container could start much later than the Host boots and the timestamps should be shifted accordingly. Otherwise "dmesg -H" reports data from the future. https://jira.sw.ru/browse/PSBM-145263 Signed-off-by: Kons

[Devel] [PATCH rh7 2/2] syslog: Virtualize timestamps in the data reported

2023-02-02 Thread Konstantin Khorenko
Internally log messages contain the timestamps relative to the Host boot time, while Container could start much later than the Host boots and the timestamps should be shifted accordingly. Otherwise syslog() syscall reports incorrect timestamps. https://jira.sw.ru/browse/PSBM-145263 Signed-off-by

[Devel] [PATCH v2 vz9 2/2] ve/cgroups: drop lock when stopping workqueue to avoid dead lock

2023-02-02 Thread Alexander Atanasov
Rework is_running variable into state to avoid guessing the state, be able to do more strict checks in what state the ve is in and verify state transitions. This allows to reduce the size of critical sections that needs to take lock. All entry points check for good state before proceeding. The de

[Devel] [PATCH vz9 v2 1/2] ve/cgroups: fix a potential use after free in ve_exit_ns

2023-02-02 Thread Alexander Atanasov
Release the lock before dropping the reference to ve in ve_exit_ns which can lead to a call to ve_destroy which in turn can free the ve. In current code there are other places holding the reference so it is not happening but to be correct mutex must be released before the reference. This probably