[lxc-devel] [PATCH] lxc-alpine: enable loopback interface by default

2013-10-16 Thread Natanael Copa
It was probably disabled by a mistake Signed-off-by: Natanael Copa --- templates/lxc-alpine.in | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/templates/lxc-alpine.in b/templates/lxc-alpine.in index 05aec74..5fdf36f 100644 --- a/templates/lxc-alpine.in +++ b/templates/lxc-a

Re: [lxc-devel] [PATCH] Make 'make dist' match git content

2013-10-16 Thread Serge Hallyn
Quoting Stéphane Graber (stgra...@ubuntu.com): > This fixes a few obvious issues when comparing the make dist output with > the git tree. > > - Make all templates non-executable in git > - Remove unused files: >- src/lxc/list.c (empty, only includes the list.h header) >- src/lxc/lxc-dest

[lxc-devel] [lxc/lxc] f10e04: Make 'make dist' match git content

2013-10-16 Thread GitHub
Branch: refs/heads/master Home: https://github.com/lxc/lxc Commit: f10e04e36170dbd0faae3a667d53f0af1ef6a13a https://github.com/lxc/lxc/commit/f10e04e36170dbd0faae3a667d53f0af1ef6a13a Author: Stéphane Graber Date: 2013-10-16 (Wed, 16 Oct 2013) Changed paths: R src/lxc/lis

Re: [lxc-devel] [PATCH] add more detail in automount error message

2013-10-16 Thread Serge Hallyn
Quoting Dwight Engen (dwight.en...@oracle.com): > Signed-off-by: Dwight Engen Acked-by: Serge E. Hallyn > --- > src/lxc/conf.c | 3 ++- > 1 file changed, 2 insertions(+), 1 deletion(-) > > diff --git a/src/lxc/conf.c b/src/lxc/conf.c > index ecbcf41..457fa26 100644 > --- a/src/lxc/conf.c > ++

[lxc-devel] [lxc/lxc] c414be: add more detail in automount error message

2013-10-16 Thread GitHub
Branch: refs/heads/master Home: https://github.com/lxc/lxc Commit: c414be2526c8f9aae28f485ff542c85e335d50ad https://github.com/lxc/lxc/commit/c414be2526c8f9aae28f485ff542c85e335d50ad Author: Dwight Engen Date: 2013-10-16 (Wed, 16 Oct 2013) Changed paths: M src/lxc/conf.c

[lxc-devel] [lxc/lxc] 67e5a2: Improper pty permissions - missing mode=0620, gid=...

2013-10-16 Thread GitHub
Branch: refs/heads/master Home: https://github.com/lxc/lxc Commit: 67e5a20ad1b5579a571f43f7dd8a1556a8bea7a1 https://github.com/lxc/lxc/commit/67e5a20ad1b5579a571f43f7dd8a1556a8bea7a1 Author: Stéphane Graber Date: 2013-10-16 (Wed, 16 Oct 2013) Changed paths: M src/lxc/con

Re: [lxc-devel] [PATCH] Improper pty permissions - missing mode=0620, gid=5

2013-10-16 Thread Serge Hallyn
Quoting Stéphane Graber (stgra...@ubuntu.com): > This fix is coming from Debian bug: > http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=720122 > > The reason for the hardcoded gid= and mode= is because of the fix for > CVE-2013-2207 which removes pt_chown from glibc and so requires proper > write

Re: [lxc-devel] [PATCH 1/3] fix busybox template for use with AppArmor

2013-10-16 Thread Serge Hallyn
Quoting Dwight Engen (dwight.en...@oracle.com): > Ensure /proc and /sys are mounted in the container, otherwise > apparmor_enabled() will fail to find > /sys/module/apparmor/parameters/enabled > > Signed-off-by: Dwight Engen Acked-by: Serge E. Hallyn > --- > templates/lxc-busybox.in | 4 +++-

Re: [lxc-devel] [PATCH 2/3] add lsm op for checking if an lsm is present/enabled

2013-10-16 Thread Serge Hallyn
Quoting Dwight Engen (dwight.en...@oracle.com): > Signed-off-by: Dwight Engen Acked-by: Serge E. Hallyn I do wonder if the name should be more precise (host_lsm_enabled() or host_lsm_enforcing() or something). Just the name 'enabled' could lead some to believe that it means it is enabled for t

Re: [lxc-devel] [PATCH 3/3] support setting lsm label at exec or immediately

2013-10-16 Thread Serge Hallyn
Quoting Dwight Engen (dwight.en...@oracle.com): > - Add attach test cases > > - Moved setting of LSM label later to avoid failure of IPC between parent > and child during attach ... > diff --git a/src/tests/attach.c b/src/tests/attach.c > new file mode 100644 > index 000..76a1f1f > --- /de

Re: [lxc-devel] [PATCH 3/3] support setting lsm label at exec or immediately

2013-10-16 Thread Dwight Engen
On Wed, 16 Oct 2013 13:17:08 -0500 Serge Hallyn wrote: > Quoting Dwight Engen (dwight.en...@oracle.com): > > - Add attach test cases > > > > - Moved setting of LSM label later to avoid failure of IPC between > > parent and child during attach > > ... > > > diff --git a/src/tests/attach.c b/src

Re: [lxc-devel] lxc: Use Jessie and http.debian.net by default in Jessie/Sid?

2013-10-16 Thread Petter Reinholdtsen
Hi. The Debian maintainer of lxc suggested I contacted this mailing list, so here is my initial try. :) Please check out the patch proposal for the lxc-debian template on http://bugs.debian.org/725187 > and see if it something you want to include upstream. -- Happy hacking Petter Reinholdtsen

Re: [lxc-devel] [PATCH 3/3] support setting lsm label at exec or immediately

2013-10-16 Thread Serge Hallyn
Quoting Dwight Engen (dwight.en...@oracle.com): > On Wed, 16 Oct 2013 13:17:08 -0500 > Serge Hallyn wrote: > > > Quoting Dwight Engen (dwight.en...@oracle.com): > > > - Add attach test cases > > > > > > - Moved setting of LSM label later to avoid failure of IPC between > > > parent and child dur

Re: [lxc-devel] [PATCH 3/3] support setting lsm label at exec or immediately

2013-10-16 Thread Dwight Engen
On Wed, 16 Oct 2013 14:43:00 -0500 Serge Hallyn wrote: > Quoting Dwight Engen (dwight.en...@oracle.com): > > On Wed, 16 Oct 2013 13:17:08 -0500 > > Serge Hallyn wrote: > > > > > Quoting Dwight Engen (dwight.en...@oracle.com): > > > > - Add attach test cases > > > > > > > > - Moved setting of L

[lxc-devel] [PATCH] introduce snapshot_destroy

2013-10-16 Thread S . Çağlar Onur
Signed-off-by: S.Çağlar Onur --- src/lxc/lxccontainer.c | 32 src/lxc/lxccontainer.h | 7 +++ 2 files changed, 39 insertions(+) diff --git a/src/lxc/lxccontainer.c b/src/lxc/lxccontainer.c index 6f97879..73a71ce 100644 --- a/src/lxc/lxccontainer.c +++ b/src/

[lxc-devel] [PATCH] use snapshot_destroy in tests/snapshot.c and clean containers after the test

2013-10-16 Thread S . Çağlar Onur
Signed-off-by: S.Çağlar Onur --- src/tests/snapshot.c | 13 - 1 file changed, 12 insertions(+), 1 deletion(-) diff --git a/src/tests/snapshot.c b/src/tests/snapshot.c index 8f16548..ef3f9c2 100644 --- a/src/tests/snapshot.c +++ b/src/tests/snapshot.c @@ -118,8 +118,19 @@ int main(int