Re: [lxc-devel] lxc-start: Invalid argument - pivot_root syscall failed

2013-10-18 Thread Peter Volkov
В Пт, 18/10/2013 в 00:22 +0400, Peter Volkov пишет: > В Чт, 10/10/2013 в 14:47 -0500, Serge Hallyn пишет: > > Quoting Peter Volkov (p...@gentoo.org): > > > I'm using 1.0.0.alpha1 although I've tried with 0.8.0 also and I'm > > > unable to start container with the following error: > > > > > > lxc-s

[lxc-devel] [PATCH 1/1] parse.c: don't print error message on callback rv > 0

2013-10-18 Thread Serge Hallyn
A callback return value < 0 means there was an error, so print out an error message. But a rv > 0 is used by the mount_unknown_fs functions to say "we found the one we want, stop here." Document this, and only print an error message if rv < 0. Otherwise, lxc-create -B lvm --fstype ext3

[lxc-devel] [PATCH 1/1] lxc-test-ubuntu: improve apparmor policy test

2013-10-18 Thread Serge Hallyn
Also allow the standard non-nested apparmor policy. Signed-off-by: Serge Hallyn --- src/tests/lxc-test-ubuntu | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/src/tests/lxc-test-ubuntu b/src/tests/lxc-test-ubuntu index c6573c1..7fa1c89 100755 --- a/src/tests/lxc-test-ubuntu ++

Re: [lxc-devel] lxc-start: Invalid argument - pivot_root syscall failed

2013-10-18 Thread Serge Hallyn
Quoting Peter Volkov (p...@gentoo.org): > В Пт, 18/10/2013 в 00:22 +0400, Peter Volkov пишет: > > В Чт, 10/10/2013 в 14:47 -0500, Serge Hallyn пишет: > > > Quoting Peter Volkov (p...@gentoo.org): > > > > I'm using 1.0.0.alpha1 although I've tried with 0.8.0 also and I'm > > > > unable to start cont

Re: [lxc-devel] [PATCH 1/1] parse.c: don't print error message on callback rv > 0

2013-10-18 Thread Stéphane Graber
On Fri, Oct 18, 2013 at 10:33:32AM -0500, Serge Hallyn wrote: > A callback return value < 0 means there was an error, so print > out an error message. But a rv > 0 is used by the mount_unknown_fs > functions to say "we found the one we want, stop here." > > Document this, and only print an error

Re: [lxc-devel] [PATCH 1/1] lxc-test-ubuntu: improve apparmor policy test

2013-10-18 Thread Stéphane Graber
On Fri, Oct 18, 2013 at 10:43:24AM -0500, Serge Hallyn wrote: > Also allow the standard non-nested apparmor policy. > > Signed-off-by: Serge Hallyn Acked-by: Stéphane Graber > --- > src/tests/lxc-test-ubuntu | 2 +- > 1 file changed, 1 insertion(+), 1 deletion(-) > > diff --git a/src/tests/l

Re: [lxc-devel] [PATCH v2 2/2] support setting lsm label at exec or immediately

2013-10-18 Thread Serge Hallyn
Quoting Dwight Engen (dwight.en...@oracle.com): > diff --git a/src/lxc/start.c b/src/lxc/start.c > index 7538403..2bf417e 100644 > --- a/src/lxc/start.c > +++ b/src/lxc/start.c > @@ -556,14 +556,10 @@ static int do_start(void *data) > if (lxc_sync_barrier_parent(handler, LXC_SYNC_CGROUP)) >

Re: [lxc-devel] [PATCH v2 2/2] support setting lsm label at exec or immediately

2013-10-18 Thread Serge Hallyn
Quoting Dwight Engen (dwight.en...@oracle.com): > - Add attach test cases > > - Moved setting of LSM label later to avoid failure of IPC between parent > and child during attach > > Signed-off-by: Dwight Engen > --- > v2: detect which lsm to test at runtime vs. compile time > > .gitignore

Re: [lxc-devel] [PATCH 1/2] add lsm op for getting name of enabled lsm

2013-10-18 Thread Serge Hallyn
Quoting Dwight Engen (dwight.en...@oracle.com): > Signed-off-by: Dwight Engen > --- > src/lxc/lsm/lsm.c | 9 - > src/lxc/lsm/lsm.h | 26 ++ > 2 files changed, 22 insertions(+), 13 deletions(-) > > diff --git a/src/lxc/lsm/lsm.c b/src/lxc/lsm/lsm.c > index f022de9

Re: [lxc-devel] [PATCH v2 2/2] support setting lsm label at exec or immediately

2013-10-18 Thread Serge Hallyn
Ok, so apart from the two comments I made, Acked-by: Serge E. Hallyn Please feel free to just ack/nack my suggestions, and I'll make those in followup trivial patches and simply apply the patches you've already sent. thanks, -serge -

[lxc-devel] [lxc/lxc] 6e7e54: Change configure, replacing mandriva by openmandri...

2013-10-18 Thread GitHub
Branch: refs/heads/master Home: https://github.com/lxc/lxc Commit: 6e7e54d902c7d8bb791fdc26303908a94c18be1f https://github.com/lxc/lxc/commit/6e7e54d902c7d8bb791fdc26303908a94c18be1f Author: Alexander Khryukin Date: 2013-10-18 (Fri, 18 Oct 2013) Changed paths: M configur

[lxc-devel] [lxc/lxc] 8daccd: parse.c: don't print error message on callback rv ...

2013-10-18 Thread GitHub
Branch: refs/heads/master Home: https://github.com/lxc/lxc Commit: 8daccdb4d07d135f65516f095bb63e2bc988f208 https://github.com/lxc/lxc/commit/8daccdb4d07d135f65516f095bb63e2bc988f208 Author: Serge Hallyn Date: 2013-10-18 (Fri, 18 Oct 2013) Changed paths: M src/lxc/parse.

[lxc-devel] [PATCH] lxc-start-ephemeral: Fix broken mount logic

2013-10-18 Thread Stéphane Graber
This reworks the mount logic for lxc-start-ephemeral to be as follow: - Any real (non-bind) entry gets copied to the target fstab - Any bind-mount from a virtual fs gets copied to the target fstab - Any remaining bind-mount if confirmed to be valid gets setup as an overlay. Extra bind-mounts

Re: [lxc-devel] [PATCH 1/2] add lsm op for getting name of enabled lsm

2013-10-18 Thread Dwight Engen
On Fri, 18 Oct 2013 11:19:20 -0500 Serge Hallyn wrote: > Quoting Dwight Engen (dwight.en...@oracle.com): > > Signed-off-by: Dwight Engen > > --- > > src/lxc/lsm/lsm.c | 9 - > > src/lxc/lsm/lsm.h | 26 ++ > > 2 files changed, 22 insertions(+), 13 deletions(-) >

[lxc-devel] [PATCH v2 1/2] add lsm op for getting name of enabled lsm

2013-10-18 Thread Dwight Engen
Signed-off-by: Dwight Engen --- v2: return "none" when there is no lsm driver src/lxc/lsm/lsm.c | 9 - src/lxc/lsm/lsm.h | 26 ++ 2 files changed, 22 insertions(+), 13 deletions(-) diff --git a/src/lxc/lsm/lsm.c b/src/lxc/lsm/lsm.c index f022de9..066102b 100644

[lxc-devel] [PATCH] use proper config item depending on which lsm is enabled

2013-10-18 Thread Dwight Engen
On a system with AppArmor enabled, if lxc.se_context is configured but lxc.aa_profile is not (because the user just wants to use the default AppArmor profile) lxc was passing the lxc.se_context to be set as the new AppArmor profile. Determine which configuration item to use based on which lsm is en

Re: [lxc-devel] [PATCH v2 2/2] support setting lsm label at exec or immediately

2013-10-18 Thread Dwight Engen
On Fri, 18 Oct 2013 11:18:17 -0500 Serge Hallyn wrote: > Quoting Dwight Engen (dwight.en...@oracle.com): > > - Add attach test cases > > > > - Moved setting of LSM label later to avoid failure of IPC between > > parent and child during attach > > > > Signed-off-by: Dwight Engen > > --- > > v2:

Re: [lxc-devel] [PATCH v2 2/2] support setting lsm label at exec or immediately

2013-10-18 Thread Dwight Engen
On Fri, 18 Oct 2013 11:14:07 -0500 Serge Hallyn wrote: > Quoting Dwight Engen (dwight.en...@oracle.com): > > diff --git a/src/lxc/start.c b/src/lxc/start.c > > index 7538403..2bf417e 100644 > > --- a/src/lxc/start.c > > +++ b/src/lxc/start.c > > @@ -556,14 +556,10 @@ static int do_start(void *dat

Re: [lxc-devel] [PATCH] lxc-start-ephemeral: Fix broken mount logic

2013-10-18 Thread Serge Hallyn
Quoting Stéphane Graber (stgra...@ubuntu.com): > This reworks the mount logic for lxc-start-ephemeral to be as follow: > - Any real (non-bind) entry gets copied to the target fstab > - Any bind-mount from a virtual fs gets copied to the target fstab > - Any remaining bind-mount if confirmed to b

[lxc-devel] [lxc/lxc] 01dae5: lxc-start-ephemeral: Fix broken mount logic

2013-10-18 Thread GitHub
Branch: refs/heads/master Home: https://github.com/lxc/lxc Commit: 01dae5c455f77fe11c5902f899885eddecd84514 https://github.com/lxc/lxc/commit/01dae5c455f77fe11c5902f899885eddecd84514 Author: Stéphane Graber Date: 2013-10-18 (Fri, 18 Oct 2013) Changed paths: M src/lxc/lxc

Re: [lxc-devel] [PATCH v2 1/2] add lsm op for getting name of enabled lsm

2013-10-18 Thread Serge Hallyn
Quoting Dwight Engen (dwight.en...@oracle.com): > Signed-off-by: Dwight Engen Thanks. (You're probably right about it having been safe anyway, but this is more comfortable :) Acked-by: Serge E. Hallyn > --- > v2: return "none" when there is no lsm driver > > src/lxc/lsm/lsm.c | 9 -

Re: [lxc-devel] [PATCH] lxc-alpine: enable loopback interface by default

2013-10-18 Thread Stéphane Graber
On Wed, Oct 16, 2013 at 02:55:31PM +0200, Natanael Copa wrote: > It was probably disabled by a mistake > > Signed-off-by: Natanael Copa Acked-by: Stéphane Graber > --- > templates/lxc-alpine.in | 3 +-- > 1 file changed, 1 insertion(+), 2 deletions(-) > > diff --git a/templates/lxc-alpine.in

[lxc-devel] [lxc/lxc] 3d460a: lxc-alpine: enable loopback interface by default

2013-10-18 Thread GitHub
Branch: refs/heads/master Home: https://github.com/lxc/lxc Commit: 3d460a3856376a043b3fa9addee50f89d21fa747 https://github.com/lxc/lxc/commit/3d460a3856376a043b3fa9addee50f89d21fa747 Author: Natanael Copa Date: 2013-10-18 (Fri, 18 Oct 2013) Changed paths: M templates/lxc

Re: [lxc-devel] lxc: Use Jessie and http.debian.net by default in Jessie/Sid?

2013-10-18 Thread Stéphane Graber
On Sun, Oct 13, 2013 at 11:04:27AM +0200, Petter Reinholdtsen wrote: > Hi. The Debian maintainer of lxc suggested I contacted this mailing > list, so here is my initial try. :) > > Please check out the patch proposal for the lxc-debian template on > http://bugs.debian.org/725187 > and see if it s

[lxc-devel] what happened to the autostart proposals?

2013-10-18 Thread Harald Dunkel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Hi folks, there were several proposals on this mailing list about how to start and stop a group of LXC containers, e.g. at boot or shutdown time. Are there any news about this? Regards Harri -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.15 (

[lxc-devel] [lxc/lxc] 41ca89: add lsm op for getting name of enabled lsm

2013-10-18 Thread GitHub
Branch: refs/heads/master Home: https://github.com/lxc/lxc Commit: 41ca89087a8700aaa7992cbfe9bc8f93da15343b https://github.com/lxc/lxc/commit/41ca89087a8700aaa7992cbfe9bc8f93da15343b Author: Dwight Engen Date: 2013-10-18 (Fri, 18 Oct 2013) Changed paths: M src/lxc/lsm/ls

Re: [lxc-devel] what happened to the autostart proposals?

2013-10-18 Thread Stéphane Graber
On Fri, Oct 18, 2013 at 08:26:53PM +0200, Harald Dunkel wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA256 > > Hi folks, > > there were several proposals on this mailing list about how > to start and stop a group of LXC containers, e.g. at boot or > shutdown time. > > Are there any news

[lxc-devel] [lxc/lxc] f99c38: Add a --thinpool argument to lxc-create, to use th...

2013-10-18 Thread GitHub
Branch: refs/heads/master Home: https://github.com/lxc/lxc Commit: f99c386b60e7f635c2f95a2e3256f21e751fb50b https://github.com/lxc/lxc/commit/f99c386b60e7f635c2f95a2e3256f21e751fb50b Author: Sidnei da Silva Date: 2013-10-18 (Fri, 18 Oct 2013) Changed paths: M src/lxc/arg

[lxc-devel] New LXC website

2013-10-18 Thread Stéphane Graber
Hey everyone, Just a quick e-mail to announce that http://linuxcontainers.org is now the official project website! I've setup a redirect from the old SourceForge hosted website, so hopefully everyone will end up on the right one. Anyone can help update the content by submitting patches against:

[lxc-devel] [lxc/lxc] 6c1b2b: lsm.h: Fix inline definition

2013-10-18 Thread GitHub
Branch: refs/heads/master Home: https://github.com/lxc/lxc Commit: 6c1b2b1db911a340eec609affc037955c93466d3 https://github.com/lxc/lxc/commit/6c1b2b1db911a340eec609affc037955c93466d3 Author: Stéphane Graber Date: 2013-10-18 (Fri, 18 Oct 2013) Changed paths: M src/lxc/lsm

[lxc-devel] [lxc/lxc] 0f8f9c: lxccontainer.c: Replace rindex by strrchr (bionic)

2013-10-18 Thread GitHub
Branch: refs/heads/master Home: https://github.com/lxc/lxc Commit: 0f8f9c8aa41b0db9a1896e8eff5a4b810f123cd5 https://github.com/lxc/lxc/commit/0f8f9c8aa41b0db9a1896e8eff5a4b810f123cd5 Author: Stéphane Graber Date: 2013-10-18 (Fri, 18 Oct 2013) Changed paths: M src/lxc/lxc

[lxc-devel] [lxc/lxc]

2013-10-18 Thread GitHub
Branch: refs/tags/lxc-1.0.0.alpha2 Home: https://github.com/lxc/lxc -- October Webinars: Code for Performance Free Intel webinars can help you accelerate application performance. Explore tips for MPI, OpenMP, advance

[lxc-devel] [lxc/lxc] 8b54fb: change version to 1.0.0.alpha2 in configure.ac

2013-10-18 Thread GitHub
Branch: refs/heads/master Home: https://github.com/lxc/lxc Commit: 8b54fb4de8097d719a595c019c08a99bd458de0d https://github.com/lxc/lxc/commit/8b54fb4de8097d719a595c019c08a99bd458de0d Author: Stéphane Graber Date: 2013-10-18 (Fri, 18 Oct 2013) Changed paths: M configure.a

[lxc-devel] [PATCH] Fix following compile error on ubuntu 12.10

2013-10-18 Thread S . Çağlar Onur
[...] make[3]: Entering directory `/home/caglar/Projects/lxc/src/tests' depbase=`echo attach.o | sed 's|[^/]*$|.deps/&|;s|\.o$||'`;\ gcc -DHAVE_CONFIG_H -I. -I../../src-I../../src -DLXCROOTFSMOUNT=\"/usr/lib/x86_64-linux-gnu/lxc/rootfs\" -DLXCPATH=\"/var/lib/lxc\" -DLXC_GLOBAL_CONF=\"

[lxc-devel] [PATCH] call lxc_container_put when needed in lxc_destroy.c

2013-10-18 Thread S . Çağlar Onur
Signed-off-by: S.Çağlar Onur --- src/lxc/lxc_destroy.c | 9 - 1 file changed, 8 insertions(+), 1 deletion(-) diff --git a/src/lxc/lxc_destroy.c b/src/lxc/lxc_destroy.c index 9983241..1d1e687 100644 --- a/src/lxc/lxc_destroy.c +++ b/src/lxc/lxc_destroy.c @@ -108,5 +108,12 @@ int main(int

[lxc-devel] [PATCH] introduce snapshot_destroy

2013-10-18 Thread S . Çağlar Onur
Signed-off-by: S.Çağlar Onur --- src/lxc/lxccontainer.c | 33 + src/lxc/lxccontainer.h | 7 +++ 2 files changed, 40 insertions(+) diff --git a/src/lxc/lxccontainer.c b/src/lxc/lxccontainer.c index c46adf3..c8ecef3 100644 --- a/src/lxc/lxccontainer.c +++ b/src

[lxc-devel] [PATCH] use snapshot_destroy in tests/snapshot.c and clean up containers after the test run

2013-10-18 Thread S . Çağlar Onur
Signed-off-by: S.Çağlar Onur --- src/tests/snapshot.c | 18 +++--- 1 file changed, 15 insertions(+), 3 deletions(-) diff --git a/src/tests/snapshot.c b/src/tests/snapshot.c index 8f16548..1f6d115 100644 --- a/src/tests/snapshot.c +++ b/src/tests/snapshot.c @@ -118,13 +118,25 @@ int m