summaryrefslogtreecommitdiffstats
path: root/recipes-containers/lxc
Commit message (Collapse)AuthorAgeFilesLines
* lxc: Fix meson build issuePawan Badganchi2024-07-221-2/+1
| | | | | | | | | | | | | Build is failing during do_configure stage for lxc as meson does not support --with-systemdsystemunitdir config parameter. Error: meson: error: unrecognized arguments: --with-systemdsystemunitdir=/etc/systemd/system/ Hence, use -Dsystemd-unitdir config parameter instead. Signed-off-by: Pawan Badganchi <badganchipv@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: fix broken test casesXiangyu Chen2024-04-093-0/+166
| | | | | | | | Upstream dropped cgroup handling in lxc-test-usernic lxc-test-unpriv and lxc-test-apparmor-mount to fix the broken cases. Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: adjust the lxc-test-unpriv running orderXiangyu Chen2024-01-191-1/+24
| | | | | | | | | | Some of lxc test cases can not full clean the system environment, that cause lxc-test-unpriv cannot execute successfully. Since those code in lxc are using for tests, so just adjust the cases order. Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: add distrosysconfdir option to make sure the lxc configuration in ↵Xiangyu Chen2023-12-041-1/+1
| | | | | | | | | | | | | | | | correct folder After the commit[1] "meson.build: allow explicit distrosysconfdir", the config of lxc would install to distrosysconfdir[2], if this value not set, it might set to /etc/sysconfig, that cause lxc-net configuration cannot be found[3] due to our bb file install the lxc-net to /etc/default folder. Ref: [1] https://github.com/lxc/lxc/commit/16ebb29dccb35bf74e8a19e8c45d2513f927476f [2] https://github.com/lxc/lxc/blob/main/config/sysconfig/meson.build#L9 [3] https://github.com/lxc/lxc/blob/main/config/sysconfig/lxc.in#L28 Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* recipes/classes/scripts: Drop SRCPV usageBruce Ashfield2023-08-241-1/+1
| | | | | | | | | bitbake has been enhanced such that SRCPV is no longer needed in PV to handle updating git hashes and task signatures. We can simplify our PV by dropping SRCPV Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: update to 5.0.3Bruce Ashfield2023-08-241-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping lxc to version lxc-5.0.3, which comprises the following commits: cb8e38aca Release LXC 5.0.3 85d3f4b1d github: Update for main branch d195603e3 CONTRIBUTING: add a note on AI generated code 54227bdb1 get_hierarchy: dont WARN about no usable controller be7efff35 github: Add DCO/target tests 8751cd208 explicitly convert *mainloop_handler to __u64 c16bb5b71 tests: fix parse_config_file seccomp test 95ef57c73 src/tests: Fix container creation errors 30c79f8a7 rename functions which clash with libsystemd's 3801a6a3d mainloop: io_uring: disable IORING_POLL_ADD_MULTI fba0ae071 terminal: make a terminal FDs non-blocking 1af412d2f file_utils: add fd_make_nonblocking helper eaaf041f6 file_utils: rename fd_make_nonblocking to fd_make_blocking d05fb8a45 setproctitle(): Handle potential NULL return from strrchr() 709d42691 make setproctitle()'s /proc/pid/stat parsing safe b183d437b console-log test: make sure container is stopped before restarting d638d5951 tree-wide: convert fcntl(FD_CLOEXEC) to SOCK_CLOEXEC c12c0acb0 Allow fuse mounts in apparmor start-container. c93418d98 Add support for squashfs images in oci via atomfs 3754e803f apparmor: don't try to mmap empty files 706ee25cd initutils: use PRIu64 for uint64_t in setproctitle 3cdd5078c lxc-net.in: fix nftables syntax for IPv6 NAT 97bf62247 Fix strlcat's return value checks 7c81572af Fix typo: bev_type -> bdev_type 727adc052 drop broken lxc-test-fuzzers Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: update to 5.0.2-tipBruce Ashfield2023-04-051-1/+1
| | | | | | | | | Bumping lxc to version lxc-5.0.2-1-g727adc052, which comprises the following commits: 727adc052 drop broken lxc-test-fuzzers d57173681 Release LXC 5.0.2 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: templates/lxc-busybox.in: if busybox contains init then use itXiangyu Chen2023-03-172-0/+46
| | | | | Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: add -L option for curl in templates-use-curl-instead-of-wget.patchXiangyu Chen2023-03-171-1/+1
| | | | | | | | | | | | | | Add support of redirect option for curl, the linuxcontainers.org sometimes redirect to other mirror site such like us.lxd.images.canonical.com, this would cause the lxc-download script report download failed. Reproduce and verified on following command: lxc-create -t download -n test -- --dist archlinux --release current --arch arm64 Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: skip lxc-test-apparmor-mount and lxc-test-get_item in ptestXiangyu Chen2023-03-081-0/+3
| | | | | | | | | lxc-test-apparmor-mount and lxc-test-get_item related to apparmor, since the lxc-test-apparmor has been already skipped, so also skip those two cases. Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* treewide: bulk update patches with status fieldBruce Ashfield2023-01-275-0/+10
| | | | | | | | | | | | | | | While the insane.bbclass upstream-status check hasn't been made default, users of meta-virtualization may have it enabled in their distros .. so the effect is the same. We must have this tracking tag in out patches. This is a bulk update to add the tag and silence the QA message. As packages get updated, the normal/routine process of checking the patches will continue, and the status fields may (or may not) get more useful. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: update to v5.0.2Bruce Ashfield2023-01-192-53/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We drop a patch that has been merged upsream, and also bump the version to lxc-5.0.2, which comprises the following commits: d57173681 Release LXC 5.0.2 17c85aac6 Fix build error on sparc64 caused by using the gold linker b7dfb1312 lxc-default-cgns apparmor profile: allow overlay mounts 5cde898f4 lxc_user_nic: fix get_mtu() error handling 80553b5b4 Patching an incoming CVE (CVE-2022-47952) 1089f49c5 build: force linking against liblxc 0d2a03118 checkconfig: Fix filesystem capability check e17429580 checkconfig: Tweak cgroup handling 4ab76611d checkconfig: Tweak layout 0bca9bb18 checkconfig: Hide version if no lxc-start 957e0a5d9 checkconfig: Fix mixed tabs/spaces 4916a16bd src/lxc/meson.build: fix build without apparmor a330126b4 build: use cc.get_define to detect FS_CONFIG_* symbols c89be8325 cgroups: fix cgroup layout detection in __initialize_cgroups 7802f3647 state: additional check in lxc_wait to prevent OOB 4b434bf52 cgroups: check snprintf retval in unpriv_systemd_create_scope 0eca8d2ea cgroups: fix buffer out-of-bounds access in enable_controllers_delegation 4ce8345d6 network: always initialize struct nl_handler 28a1591cd apparmor: properly check lxc_strmmap ret value bd56c89ea github: fix coverity (add libpam-dev) a1ead0dcc github: fix coverity build 9e35b3ecd conf: ensure mount tunnel is a dependent mount 2ff447445 apparmor: allow shared mounts in start-container.in 58e878209 conf: create separate peer group for container's root 06b4612ee cgroups: only allocate user namespace if we have to 2662959b8 cgroups: use userns_exec_full() during cgroup removal 4dcc84c6b README: remove lgtm 748720ceb tests: lxc-test-reboot: Fix build on ia64 5749e2e20 Unroll IN_SET since the max usage is 2 elements check 495b1bbf4 tests: lxc-test-checkpoint-restore: use trap to do cleanup 77e08b887 tools: lxc-destroy: update help message for --force 9165ff1ed lxc/attach: Detect EACCES from execvp and convert to 126 exit status 011faff36 lxc-attach: Fix lost return codes of spawned processes that are killed 931693945 Update README.md a6287882e conf: allow cross-device links 8fa6d765a build(deps): bump actions/checkout from 2 to 3 e08c1b740 Update cifuzz.yml 0e9e64db8 fix error message when use tools with -? option f1a61a5f0 use sd_bus_call_method_async to replace the asyncv one ca863bd72 tree-wide: split open helpers into open_utils.h 02900160c build: prevent the inclusion of linux/mount.h with a hack 51b8763b0 mount_utils: remove conf.h include 460243f40 mount: move mount utilities from syscall_wrappers.h into mount_utils.h d5d7e2036 tree-wide: minimize liburing.h inclusion e2b8776bb meson: fix docbook2x detection d1dfce9c5 tree-wide: use struct open_how directly c9bca3326 tree-wide: use struct clone_args directly 497479ea3 tree-wide: wipe direct or indirect linux/mount.h inclusion 02f4bd00f build: check for FS_CONFIG_* header symbol in sys/mount.h c222fb567 gitignore: Simplify 22e8a7941 meson.build: strip newline for variable assignments d5600cf76 meson.build: strip newlines from git output 7d6b53438 src/lxc/meson.build: fix the static library path 1d5c7e771 build: drop build-time systemd dependency 59f69162c build: only build init.lxc.static if libcap is statically linkable 062c2d980 build: fix handling of dependancies to fix build on openSUSE 2a9743bba cgroups: fix -Waddress warning e510d6bd8 build: detect sys/pidfd.h availability b7b269680 build: detect where struct mount_attr is declared 5313e5048 meson.build: allow explicit distrosysconfdir 0539095ac Release LXC 5.0.1 a1329fefe README: update security mails 315d4cec6 meson.build: fix build without stack-protector aba631cd4 meson.build: fix build with -Dcapabilities=false c2ee9b440 src/lxc/log.h: fix STRERROR_R_CHAR_P d441ee585 meson: add remaining still-in-use config checks 00a79876b Store mount options in correct variable da0f35646 Fix off-by-one error constructing mount options 31bff905a add check for statvfs 242289b6b start: fix namespace sharing 41f602361 conf: fix append_ttyname() ea4fd7f85 start: record inherited namespaces earlier to make it available for idmapped rootfs setup e74fd55bc start: don't overwrite file descriptors during namespace preservation dcfd75bb4 conf: log file descriptors on error during idmapped mount setup c3e648700 fix for issue 4026: set broadcast to 0.0.0.0 for /31 and /32 cfcbdb75f use systemd dbus StartTransientUnit for unpriv cgroup2 28726f215 Fix uninitialized read in parse_cap when libcap is not used d663495ee meson: Generate compile commands by iterating over an array Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: fix compilation error for ARM/ARM64Chen Qi2022-08-252-0/+50
| | | | | | | | | | | | | | | | | There's compilation error when building lxc for ARM/ARM64 BSPs. The error message is as below: | ../git/src/lxc/cgroups/cgfsng.c:1234:111: error: incompatible type for argument 10 of 'sd_bus_call_method_asyncv' The 10th argument is of type va_list but NULL is supplied, thus causing compilation error. So we use sd_bus_call_method_async to replace the asyncv one to solve this issue. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: update to 5.x and mesonBruce Ashfield2022-08-257-173/+127
| | | | | | | | | | | | | | | | | This is a significant update to lxc as autotools has been replaced with meson. Not all existing autotools options have meson equivalents, so there may be differences in functionallity. As part of this update, and unused features have been dropped, mainly when the meson equivalent was not available. Basic / core functionality has been tested with systemd, sysvinit requires more work, and patches will be accepted to restore that capability. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: update to 4.0.12Bruce Ashfield2022-03-212-16/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We refresh our wget -> curl patch for context, but otherwise, no other changes are required. Bumping lxc to version lxc-4.0.12-8-g5ba5725cb, which comprises the following commits: 5ba5725cb cgroups: modify cgroup2 attach logic 1e4631641 ttys: ensure container_ttys= env variable is set correctly 8ef019a6c doc: Fix reverse allowlist/denylist in Japanese man page f1c4a17e7 cgroups: log fd of newly created cgroup f7446b4e1 cgroups: check that opened file descriptor is a cgroup filesystem 71ba7f656 doc: Fix reverse allowlist/denylist f314419d1 lxc-checkconfig: Fix bashism ca4c25c6e lxc-net: don't start by default inside lxc 7e37cc96b Release LXC 4.0.12 d678aa61e lxccontainer: allow xdev when creating the container dir bc61d2354 github: Clear default ACL on /home fb0e0b3dd github: add systemd-coredump 53e0d390c github: more detailed compilation instructions db84a8b6b github: log system info e9282b6a6 github: ensure system liblxc is wiped ad8a3bd68 lxccontainer: properly wrap lxcapi_create() bceb81cd2 build: simplify thread local storage handling 919da35b0 build: only enable LTO for regular builds d0a1e9c44 lxccontainer: simplify partial file creation 62b5c0051 lxccontainer: improve create_partial() bfe24cb6a lxccontainer: improve do_lxcapi_create() 1a5c236ac lxccontainer: improve do_lxcapi_save_config() bae0d7196 conf: log termination status 4eb09aaad conf: improve userns_exec_mapped_root() 928943280 github: stop installing gnupg now that it's unused 7c70b0d14 lxc-download: Rely on HTTPS only 199d2077c Update README.md: Fix broken link (403 Forbidden) 0b6b230e3 attach: don't pointlessly call cgroup_init() dbef704fb commands: log command during file descriptor retrieval 733f9c909 lxc-checkconfig.in: CONFIG_NF_NAT_IPV4 was removed from the kernel 2019-03-03 ce392e230 (trivial) Fix error message, failure was connect not bind 5628bff79 seccomp: close seccomp notifier fd in cleanup handler 1f2af83a9 seccomp: only guard seccomp notify behind HAVE_DECL_SECCOMP_NOTIFY_FD 9451303d5 api-extensions: don't advertise seccomp notify support if it's not compiled in 23d07c315 use 2 sysfs instances for sys:mixed 0dd3258bd Revert "api: ->save_config() doesn't need to create container dir" 93edd510a api: ->save_config() doesn't need to create container dir 28b2e04f1 cgroups: fix compiler warning 15515f9a3 Revert "initutils: use vfork() in lxc_container_init()" 41d2530d1 macro: ensure necessary io_uring flags are defined fc4e948c9 autotools: Avoid multiple liblxc.so with --enable-pam a616a311a build: refuse to compile with unsupported liburing version 93be4e512 tests: add lxc.proc.* test d8027e49c tests: add lxc.sysctls.* test 6f580343e test: improve logging helpers a10ff3418 conf: improve logging setting sysctl and /proc/<pid>/ parameters 334cf7beb conf: apply /proc/sys and /proc/<pid>/ parameters 1b74e01ad tests: include config.h c36379431 build: move _FILE_OFFSET_BITS to common option f24c234ee start: log signal name and number 4915c9112 process_utils: add signal_name() helper 78baec37d build: improve liburing support detection 1a102b310 mainloop: make ifdefs easier to follow cf931928f Replace last occurence of 'which' with 'command -v' 1ec5939b4 Replace deprecated backticks with $() construct fdfb4a13d Replace 'which' with 'command -v' in tests too 71743e811 start: check event loop type before closing fd f69e6b4d3 mainloop: make sure that descr->ring is allocated 1a8895855 Replace 'which' with 'command -v' 9219277cc build: add io-uring-event-loop option d04eb166c build: add static libcap to output bc51048b7 confile: don't use path_simplify() on lxc.{execute,init}.cmd 48728e988 conf: add cgroup2, cgroup2:ro, cgroup2:force, cgroup2:ro:force options 4d3aad49d AUTHORS: Update to point to git history e328a988e conf: handle kernels without or not using SMT d40b0deb4 doc: fix typo in English lxc.container.conf(5) 49fab27fc doc: Add lxc.sched.core to Japanese lxc.container.conf(5) 1ad1cab80 doc: add loglevels to ja and ko common options 1505f0780 conf: make it more obvious how auto-mount flags are defined 429233cf0 criu: support restoring containers with pre-created veth devices 48e079bf3 Release LXC 4.0.11 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* global: update licence values to SPDX valuesBruce Ashfield2022-02-181-1/+1
| | | | | | | | | | These changes are the result of running the convert-spdx-licenses.py oe-core script. There's no impact to the build, but we will avoid issues when interacting with core QA by the alignment. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* global: convert github SRC_URIs to use https protocolBruce Ashfield2021-11-021-1/+1
| | | | | | | | | | | github is removing git:// access, and fetches will start experiencing interruptions in service, and eventually will fail completely. bitbake will also begin to warn on github src_uri's that don't use https. So we convert the meta-virt instances to use protocol=https (done using the oe-core contrib conversion script) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: update to 4.0.11Xu, Yanfei2021-11-025-182/+15
| | | | | | | | | | | | | | update to 4.0.11 1.drop two patches that have been integrated to upstream repo. 2.drop tests-add-no-validate-when-using-download-template.patch because it is no longer appropriate as the "download" has been replaced with "busybox" 3.fix the apply failure of templates-use-curl-instead-of-wget.patch 4.update lxc from 4.0.10 to 4.0.11 Signed-off-by: Yanfei Xu <yanfei.xu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: Fix -c command for lxc-attachsana kazi2021-09-162-0/+37
| | | | | | | | | | Added fix_c_command.patch the -c command seems to be broken because the passed context is ignored and always overwritten by the context specified in the config file. Signed-off-by: Sana Kazi <Sana.Kazi@kpit.com> Signed-off-by: Sana Kazi <sanakazisk19@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: update to 4.0.10 and switch to gitBruce Ashfield2021-09-161-6/+4
| | | | | | | | To more easily pull in fixes / backports from newer versions, switching to git. This also allows bisecting and easier support when we run into upgrade issues. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: Enable seccomp support for lxcsana kazi2021-09-092-0/+48
| | | | | | | | | | | Enabled seccomp support for lxc. Also added a patch to enable seccomp.profile only when compiled with libseccomp. Currently, seccomp.profile is silently ignored. This could lead to the false impression that the seccomp filter is applied while it actually isn't. Signed-off-by: Sana Kazi <Sana.Kazi@kpit.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* global: overrides syntax conversionBruce Ashfield2021-08-021-26/+26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | OEcore/bitbake are moving to use the clearer ":" as an overrides separator. This is pass one of updating the meta-virt recipes to use that syntax. This has only been minimally build/runtime tested, more changes will be required for missed overrides, or incorrect conversions Note: A recent bitbake is required: commit 75fad23fc06c008a03414a1fc288a8614c6af9ca Author: Richard Purdie <richard.purdie@linuxfoundation.org> Date: Sun Jul 18 12:59:15 2021 +0100 bitbake: data_smart/parse: Allow ':' characters in variable/function names It is becomming increasingly clear we need to find a way to show what is/is not an override in our syntax. We need to do this in a way which is clear to users, readable and in a way we can transition to. The most effective way I've found to this is to use the ":" charater to directly replace "_" where an override is being specified. This includes "append", "prepend" and "remove" which are effectively special override directives. This patch simply adds the character to the parser so bitbake accepts the value but maps it back to "_" internally so there is no behaviour change. This change is simple enough it could potentially be backported to older version of bitbake meaning layers using the new syntax/markup could work with older releases. Even if other no other changes are accepted at this time and we don't backport, it does set us on a path where at some point in future we could require a more explict syntax. I've tested this patch by converting oe-core/meta-yocto to the new syntax for overrides (9000+ changes) and then seeing that builds continue to work with this patch. (Bitbake rev: 0dbbb4547cb2570d2ce607e9a53459df3c0ac284) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: update to 4.0.9Bruce Ashfield2021-07-124-128/+29
| | | | | | | | | Bumping lxc to a newer 4.0 -stable release. We drop two patches that have been integrated to the upstream repo, but otherwise, things are the same. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: add upstream-status to patchBruce Ashfield2021-04-181-0/+2
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc-recipe: Fix compilation without seccomp when libseccomp is installedRameshkrishnanX Geddy Sekar2021-04-183-0/+97
| | | | | | | Original URL: https://github.com/lxc/lxc/pull/3623 Signed-off-by: RameshkrishnanX Geddy Sekar <rameshkrishnanx.geddy.sekar@intel.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: change download folderRobi Buranyi2021-03-111-1/+1
| | | | | | | | | The URI has been changed to 'https://linuxcontainers.org/downloads/lxc' by the site maintainers recently. Updating the recipe to reflect the new path. Signed-off-by: Robi Buranyi <rburanyi@google.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: update to 4.0.6Bruce Ashfield2021-02-073-70/+2
| | | | | | | | | Updating to the next minor revision in the LTS. We also drop two patches that are included in the main repository as partof this bump. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: Fix postinstall script for read-only rootfsDaniel Dragomir2021-01-101-4/+4
| | | | | | | | Ensure postinstall script for lxc-networking package can run at build time for a read-only rootfs (with sysvinit). Signed-off-by: Daniel Dragomir <Daniel.Dragomir@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: remove deprecated options in lxc*.serviceMingli Yu2020-10-013-0/+68
| | | | | | | | | | | Remove deprecated options in lxc*.service to silence below warning: # systemctl status lxc [snip] /usr/lib/systemd/system/lxc.service:17: Standard output type syslog is obsolete, automatically updating to journal. Please update your unit file, and consider removing the setting altogether. /usr/lib/systemd/system/lxc.service:18: Standard output type syslog is obsolete, automatically updating to journal. Please update your unit file, and consider removing the setting altogether. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: Disable warnings as errorsKhem Raj2020-08-271-3/+1
| | | | | | | | Instead of disabling particular warnings, its better to use configure switch, since some of these warnings could be compiler specific Signed-off-by: Khem Raj <raj.khem@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: update to v4.0.4Bruce Ashfield2020-08-183-6/+9
| | | | | | | While we are updating, we refresh one patch to remove fuzz, otherwise there are no significant changes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: upgrade 4.0.2 > 4.0.3Wang Mingyu2020-07-061-2/+2
| | | | | Signed-off-by: Wang Mingyu <wangmy@cn.fujitsu.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: fix compile failure on gcc10hongxu2020-05-191-1/+1
| | | | | | | | | | | | | | | Since oe-core is upgrading gcc to 10.1, there is a compile failure ... |../../../lxc-4.0.2/src/lxc/cgroups/cgfsng.c:2100:10: error: writing 1 byte into a region of size 0 [-Werror=stringop-overflow=] | 2100 | *slash = '\0'; ... Add gcc option `-Werror=stringop-overflow' to workaround the issue Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: Update python3.5 reference to latest python versionSai Hari Chandana Kalluri2020-05-021-2/+2
| | | | | | | | Python3.5 is no longer supported, update references to latest python version using variables from python3-dir bbclass Signed-off-by: Sai Hari Chandana Kalluri <chandana.kalluri@xilinx.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: Upgrade to 4.0.2Mingli Yu2020-04-261-2/+2
| | | | | Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: correct the LIC_FILES_CHKSUM and LICENSE fieldsYanfei Xu2020-04-141-2/+5
| | | | | | | | | License changes from lxc3.2.1 to lxc4.0.1: 1.File COPYING is renamed to LICENSE.LGPL2.1 2.Add a new file LICENSE.GPL2 Signed-off-by: Yanfei Xu <yanfei.xu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: refresh patches to remove fuzzBruce Ashfield2020-04-149-27/+28
| | | | | | | The recent uprev of lxc left some fuzz in a patches. devtool refresh cleans this up, and no runtime issues have been detected. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: uprev from 3.2.1 to 4.0.1Yanfei Xu2020-04-135-639/+3
| | | | | | | | Update to the just released 4.0.1. And drop some patches contained in this released. Signed-off-by: Yanfei Xu <yanfei.xu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: Backport patch that renames memfd_create() functionOleksii Kurochko2020-02-272-0/+47
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | When Autotools makes configuration of LXC, the check of the memfd_create() function fails because __stub_memfd_create and __stub___memfd_create (The GNU C library defines this for functions which it implements to always fail with ENOSYS) are defined in Glibc, which leads to the fact that the macro HAVE_MEMFD_CREATE is not defined and LXC provides defintion of the memfd_create() function as static inline which in turn conflicts with a definition from the <bits/mman-shared.h> file and causes an error: | In file included from ../../../lxc-3.2.1/src/lxc/conf.c:79: | <src_path>//lxc/syscall_wrappers.h:77:19: error: static declaration | of 'memfd_create' follows non-static declaration | | static inline int memfd_create(const char *name, unsigned int flags) { | | ^~~~~~~~~~~~ | In file included from /usr/include/bits/mman-linux.h:111, | from /usr/include/bits/mman.h:34, | from /usr/include/sys/mman.h:41, | from <src_path>/lxc-3.2.1/src/lxc/conf.c:42: | /usr/include/bits/mman-shared.h:50:5: note: previous declaration | of 'memfd_create' was here | | int memfd_create (const char *__name, unsigned int __flags) __THROW; | | ^~~~~~~~~~~~ Upstream PR: https://github.com/lxc/lxc/pull/3168 (merged) Signed-off-by: Oleksii Kurochko <olkuroch@cisco.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: Backport patches for keyring optionsMaximilian Blenk2020-02-133-0/+494
| | | | | | | | | | | | | | The added patches allow to set the SELinux context for the session keyring that is created by lxc. In addition it is possible to disable the creation of a new session keyring completely. Upstream PR: https://github.com/lxc/lxc/pull/3260 (merged) If lxc is executed on a SELinux enabled system, these options can be used to assign the expected label to the session keyring. Signed-off-by: Maximilian Blenk <maximilian.blenk@bmw.de> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* templates/lxc-download.in: Use curl instead of wgetJoakim Roubert2019-09-182-1/+51
| | | | | | | | | When curl's MIT license is preferable to wget's GPLv3. Which it is in several situations. Change-Id: I72ee1ce66493c564557b73fae80f5219ef83af6d Signed-off-by: Joakim Roubert <joakimr@axis.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: restore the ability to move nl80211 deviceYunguo Wei2019-09-142-0/+95
| | | | | | | | | | | | | | | | nl80211 device can't be moved to another namespace due to e389f2afd8509(start: unify and simplify network creation), and lxc community has fixed this issue with: commit 3dd7829433f63b2ec1323a1f237efa7d67ea6e2b lxc upstream This patch is grabbing the commit above, and should be abandoned with lxc uprev afterwards. See more details here: https://github.com/lxc/lxc/issues/3105 Signed-off-by: Yunguo Wei <yunguo.wei@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: upgrade 3.1.0 -> 3.2.1Yuan Chao2019-08-121-2/+2
| | | | | Signed-off-by: Yuan Chao <yuanc.fnst@cn.fujitsu.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: remove perl-module-warnings-register from RDEPENDSOleksandr Kravchuk2019-02-211-1/+0
| | | | | | | This module is part of the perl package now and is shipped by default. Signed-off-by: Oleksandr Kravchuk <oleksandr.kravchuk@pelagicore.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: uprev from 3.0.3 to 3.1.0Mark Asselstine2019-01-101-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Minor updates and fixes. Improved ptest results per below. root@cube-essential:/usr/lib64/lxc/ptest# ./run-ptest ### Starting LXC ptest ### FAIL: lxc-test-api-reboot SKIPPED: lxc-test-apparmor PASS: lxc-test-attach PASS: lxc-test-automount PASS: lxc-test-autostart PASS: lxc-test-basic PASS: lxc-test-cgpath PASS: lxc-test-cloneconfig PASS: lxc-test-clonetest PASS: lxc-test-concurrent PASS: lxc-test-config-jump-table PASS: lxc-test-console PASS: lxc-test-console-log PASS: lxc-test-containertests PASS: lxc-test-createconfig PASS: lxc-test-createtest PASS: lxc-test-criu-check-feature PASS: lxc-test-destroytest PASS: lxc-test-device-add-remove PASS: lxc-test-get_item PASS: lxc-test-getkeys PASS: lxc-test-list PASS: lxc-test-locktests PASS: lxc-test-lxcpath PASS: lxc-test-may-control PASS: lxc-test-mount-injection PASS: lxc-test-no-new-privs PASS: lxc-test-parse-config-file PASS: lxc-test-raw-clone PASS: lxc-test-reboot PASS: lxc-test-rootfs PASS: lxc-test-saveconfig PASS: lxc-test-share-ns PASS: lxc-test-shortlived SKIPPED: lxc-test-shutdowntest PASS: lxc-test-snapshot PASS: lxc-test-startone SKIPPED: lxc-test-state-server PASS: lxc-test-utils Results: PASSED = 35 FAILED = 1 SKIPPED = 3 (for details check individual test log in ./logs directory) ### LXC ptest complete ### Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* lxc: uprev from 3.0.2 to 3.0.3Mark Asselstine2018-11-291-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update to the just released v3.0.3. This release is a collection of minor changes, bug fixes, logging updates, documentation cleanup, code cleanup and some new tests. We have an improved outlook as far as ptests is concerned as well: ### Starting LXC ptest ### FAIL: lxc-test-api-reboot SKIPPED: lxc-test-apparmor PASS: lxc-test-attach PASS: lxc-test-automount FAIL: lxc-test-autostart PASS: lxc-test-basic PASS: lxc-test-cgpath PASS: lxc-test-cloneconfig PASS: lxc-test-clonetest PASS: lxc-test-concurrent PASS: lxc-test-config-jump-table PASS: lxc-test-console PASS: lxc-test-console-log PASS: lxc-test-containertests PASS: lxc-test-createconfig PASS: lxc-test-createtest PASS: lxc-test-criu-check-feature PASS: lxc-test-destroytest PASS: lxc-test-device-add-remove PASS: lxc-test-get_item PASS: lxc-test-getkeys PASS: lxc-test-list PASS: lxc-test-locktests PASS: lxc-test-lxcpath PASS: lxc-test-may-control FAIL: lxc-test-no-new-privs PASS: lxc-test-parse-config-file PASS: lxc-test-raw-clone PASS: lxc-test-reboot PASS: lxc-test-rootfs PASS: lxc-test-saveconfig PASS: lxc-test-share-ns PASS: lxc-test-shortlived SKIPPED: lxc-test-shutdowntest PASS: lxc-test-snapshot PASS: lxc-test-startone SKIPPED: lxc-test-state-server PASS: lxc-test-utils Results: PASSED = 32 FAILED = 3 SKIPPED = 3 (for details check individual test log in ./logs directory) ### LXC ptest complete ### Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com>
* lxc: Upgrade to 3.0.2Mingli Yu2018-10-229-54/+48
| | | | | | | | | | | | | | | * Refresh patch to avoid fuzz warnings * Update to 3.0.2 as lxc-destroy failed when system boot in nfs rootfs in lxc 3.0.1 as below: # lxc-destroy -n test9 lxc-destroy: test9: utils.c: _recursive_rmdir: 149 Failed to delete /var/lib/lxc/test9 lxc-destroy: test9: lxccontainer.c: container_destroy: 2946 Failed to destroy directory "/var/lib/lxc/test9" for "test9" Destroying test9 failed Update to 3.0.2 to fix the above issue Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* lxc: make error report compatible with ptestSinan Kaya2018-10-161-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ptest puts the test status at the beginning of the test. Follow the style. BEGIN: /usr/lib/lxc/ptest ### Starting LXC ptest ### SKIPPED: lxc-test-apparmor FAIL: lxc-test-attach PASS: lxc-test-automount FAIL: lxc-test-autostart PASS: lxc-test-cgpath PASS: lxc-test-cloneconfig PASS: lxc-test-clonetest PASS: lxc-test-concurrent FAIL: lxc-test-console PASS: lxc-test-containertests PASS: lxc-test-createconfig FAIL: lxc-test-createtest FAIL: lxc-test-destroytest PASS: lxc-test-device-add-remove PASS: lxc-test-get_item PASS: lxc-test-getkeys PASS: lxc-test-list PASS: lxc-test-locktests PASS: lxc-test-lxcpath PASS: lxc-test-may-control PASS: lxc-test-reboot PASS: lxc-test-saveconfig SKIPPED: lxc-test-shutdowntest PASS: lxc-test-snapshot PASS: lxc-test-startone PASS: lxc-test-utils Results: PASSED = 19 FAILED = 5 SKIPPED = 2 (for details check individual test log in ./logs directory) ### LXC ptest complete ### END: /usr/lib/lxc/ptest Signed-off-by: Sinan Kaya <okaya@kernel.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* lxc: add runtime depends for util-linux-getoptDengke Du2018-08-141-0/+1
| | | | | | | | | | | | | When runing: lxc-create -t download -n test The system reports that the getopt command can't find. This is because the lxc-download template depends on getopt command. So add the runtime depends on util-linux-getopt for lxc. Signed-off-by: Dengke Du <dengke.du@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
* lxc: uprev 3.0.1Jeremy Puhlman2018-06-112-9/+7
| | | | | | | | | | - Bug fix release - Fixes gcc8 build failures - Update patch for fuzz issues. - remove --disable-python and --disable-lua as they have been removed Signed-off-by: Jeremy Puhlman <jpuhlman@mvista.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-07-23 20:15:16 +0000