~stgraber/ubuntu/quantal/lxc/apparmor-profiles-rework : changes

~stgraber/ubuntu/quantal/lxc/apparmor-profiles-rework » Changes from revision 109

From Revision 109 to 90

Rev	Summary	Authors	Tags	Date
109	Apparmor rework Apparmor rework	Stéphane Graber		11 years ago
108	* 0086-lxc-unshare-zero-args: fix lxc-unshare segfaulting wh... * 0086-lxc-unshare-zero-args: fix lxc-unshare segfaulting when no command is given (LP: #1011603) * 0087-lxc-ls-dash: fix lxc-ls for containers whose names start with a dash (LP: #1006332) * 0088-ubuntu-template-flock: don't fail when flock is busy, just wait, so concurrent lxc-creates don't break. (LP: #1007483) * 0089-lxc-netstat-exec: fix lxc-netstat errors (LP: #1011739)	Serge Hallyn	0.8.0~rc1-4ubuntu13	11 years ago
107	Fix broken logic in lxc-ubuntu template where lxc.devttydir ... Fix broken logic in lxc-ubuntu template where lxc.devttydir would be set to 'lxc' only for releases that don't support it. (LP: #1007493)	Stéphane Graber	0.8.0~rc1-4ubuntu12	11 years ago
106	fix wrong use of syslog attach fix wrong use of syslog attach	Serge Hallyn	0.8.0~rc1-4ubuntu11	11 years ago
105	fix typo - mkdir under debian/lxc not debian/tmp fix typo - mkdir under debian/lxc not debian/tmp	Serge Hallyn		11 years ago
104	add apport hook add apport hook	Serge Hallyn		11 years ago
103	[ Serge Hallyn ] [ Serge Hallyn ] * 0084-lxc-ubuntu-drop-duplicate-code.patch: drop some duplicate code from the ubuntu template. (LP: #1004118) * 0085-pivot-dir: use a directory other than /mnt to put the pivot_root old dir into (LP: #986385) [ Stéphane Graber ] * Ship /etc/dnsmasq.d/lxc to configure an eventual system wide dnsmasq daemon not to listen on the LXC bridge interface. (LP: #928524) * Drop rm calls from postrm for apparmor rules, these were in the purge target so didn't really serve any purpose.	Stéphane Graber	0.8.0~rc1-4ubuntu10	11 years ago
102	debian/lxc-net.upstart: don't put '()' after call to cleanup... debian/lxc-net.upstart: don't put '()' after call to cleanup. (LP: #1000174)	Serge Hallyn	0.8.0~rc1-4ubuntu9	11 years ago
101	* Update lxc-ubuntu: * Update lxc-ubuntu: - Update list of extra packages for debootstrap to only include vim and ssh. The others were only relevant when we were still using the minbase variant. (LP: #996839) - Drop any hardcoded Ubuntu version check and replace by feature checks instead. - Format lxc-ubuntu to consistently use 4-spaces indent instead of mixed spaces/tabs. - Update default /etc/network/interfaces to include the header. - Update default /etc/hosts to match that of a regular Ubuntu system. - Drop support for end-of-life releases (gutsy on sparc). - Make sure /etc/resolv.conf is valid before running any apt command. - Update template help message for release and arch parameters. - Switch default Ubuntu version from lucid to precise. * Update lxc-start-ephemeral: - Remove lxc-ip and replace it by a call to "ip netns" until we have an extended lxc-attach we can use for that. - Fix a race in lxc-start-ephemeral where the container isn't yet running when trying to get its IPs. - Update a few calls so that lxc-start-ephemeral can be called as a user (ensure consistent usage of sudo across the script). * Add new lxc-default-with-nesting apparmor profile, allowing nested containers.	Stéphane Graber	0.8.0~rc1-4ubuntu8	11 years ago
100	[ Francesco Banconi ] [ Francesco Banconi ] * Introduced lxc-ip: retrieve the ip addresses of a container. * lxc-start-ephemeral: use lxc-ip to ssh to the container (LP: #994752).	Serge Hallyn	0.8.0~rc1-4ubuntu7	11 years ago
99	* debian/control: add apparmor to lxc Depends (LP: #997681) * debian/control: add apparmor to lxc Depends (LP: #997681) * debian/local/lxc-start-ephemeral: quote $line so its contents don't get expanded (LP: #997687)	Serge Hallyn	0.8.0~rc1-4ubuntu6	11 years ago
98	* 0082-umount-old-proc: fix proc auto-mount. If /proc is al... * 0082-umount-old-proc: fix proc auto-mount. If /proc is already mounted, make sure that /proc/self points to 1, since we are container init. Otherwise, assume proc is an old one, and umount it and remount our own. If we keep the old proc mounted, apparmor transitions will by tried for wrong task and fail. Also move check for whether apparmor is enabled so that it is called by lxc-execute. (LP: #993706) * update 0074-lxc-execute-find-init to look for lxc-init in LXCINITDIR/lxc/lxc-init * debian/control: add cloud-utils to lxc Recommends, as lxc-ubuntu-cloud needs it. (LP: 995361) * debian/lxc.upstart: load apparmor profiles before auto-starting containers. (LP: #989853) * pop 06-bash.patch and 0075-lxc-ls-bash. lxc-clone also has bashims, just stick to using bash until upstream is also converted (so we are safe against patches).	Serge Hallyn	0.8.0~rc1-4ubuntu5	11 years ago
97	Fix Ubuntu template to install the host architecture of the ... Fix Ubuntu template to install the host architecture of the required mutli-arch packages (when using qemu-user-static) instead of hardcoded "amd64" version.	Stéphane Graber	0.8.0~rc1-4ubuntu4	11 years ago
96	* Add support for quantal in lxc-ubuntu and lxc-ubuntucloud * Add support for quantal in lxc-ubuntu and lxc-ubuntucloud * Drop support for maverick in lxc-ubuntu and lxc-ubuntucloud	Stéphane Graber	0.8.0~rc1-4ubuntu3	11 years ago
95	lxc-clone: put quotes around $line to avoid expansion (LP: #... lxc-clone: put quotes around $line to avoid expansion (LP: #993515)	Serge Hallyn	0.8.0~rc1-4ubuntu2	11 years ago
94	* Merge from unstable. Remaining changes: * Merge from unstable. Remaining changes: - control: - update maintainer - Build-Depends: add dh-apparmor and libapparmor-dev - lxc Depends: add bridge-utils, dnsmasq-base, iptables, rsync - lxc Recommends: add cgroup-lite \| cgroup-bin, openssl - lxc Suggests: add btrfs-tools, lvm2, qemu-user-static - lxc Conflicts: remove (cgroup-bin) - Add lxc-start-ephemeral and lxc-wait to debian/local - apparmor: - add lxc.apparmor, lxc-containers.apparmor, lxc-default.apparmor, and new lxc.apparmor.in - add debian/lxc.conf (default container creation config file) - debian/lxc.install.in: * add lxc-start-ephemeral * add debian/lxc.conf * skip lxc-debconf* * skip lxc-ls (Use upstream's) - debian/lxc.install.in: use '', not @DEB_HOST_MULTIARCH@ - Use our own completely different lxc.postinst and lxc.postrm - remove lxc.templates - debian/rules: * add DEB_DH_INSTALLINIT_ARGS = --upstart-only * don't do debconf stuff * add debian/.apparmor.in to files processed under override_dh_auto_clean don't comment out ubuntu or busybox templates * do apparmor stuff and install our own lxc-wait under override_dh_install * install our upstart scripts in override_dh_installinit - add lxc.default, lxc.lxc-net.upstart, lxc.upstart under debian/ * patches kept: - 0013-lxc-create-use-default-config.patch (needed manual rebase) - 0030-ubuntu-template-fail.patch - 0031-ubuntu-template-resolvconf.patch - 0044-lxc-destroy-rm-autos - debian/patches/0045-fix-other-templates - debian/patches/0046-lxc-clone-change-hwaddr - debian/patches/0047-bindhome-check-shell - debian/patches/0049-ubuntu-template-sudo-and-cleanup - debian/patches/0050-clone-lvm-sizes - debian/patches/0052-ubuntu-bind-user-conflict - debian/patches/0053-lxc-start-pin-rootfs - debian/patches/0054-ubuntu-debug - debian/patches/0055-ubuntu-handle-badgrp - debian/patches/0056-dont-watch-utmp - debian/patches/0057-update-manpages - debian/patches/0058-fixup-ubuntu-cloud - debian/patches/0059-reenable-daily-cloudimg - debian/patches/0060-lxc-shutdown - debian/patches/0061-lxc-start-apparmor - debian/patches/0062-templates-relative-paths - debian/patches/0063-check-apparmor-enabled - debian/patches/0064-apparmor-mount-proc - debian/patches/0065-fix-bindhome-relpath - debian/patches/0066-confile-typo - debian/patches/0067-templates-lxc-profile - debian/patches/0068-fix-lxc-config-layout - debian/patches/0069-ubuntu-cloud-fix - debian/patches/0070-templates-rmdir-dev-shm - debian/patches/0071-ubuntu-cloud-fix-image-extraction - debian/patches/0072-lxc-shutdown-help - debian/patches/0073-lxc-destroy-waits-before-destroy - mark all patches which have been forwarded as such, refresh all * 0074-lxc-execute-find-init: lxc-init had moved. Introduce a function in lxc-execute to go find it. Otherwise lxc-execute for any older releases will fail. * 0075-lxc-ls-bash: lxc-ls needs bash, not sh * add debian/lxc.apparmor.in so DEB_HOST_MULTIARCH can be expanded * 0076-fix-sprintfs: - check return values for all sprintfs and snprintfs which could overflow (LP: #988918) * 0077-execute-without-rootfs: let lxc-execute succeed with no rootfs (LP: #981955)	Serge Hallyn	0.8.0~rc1-4ubuntu1	12 years ago
93	[ Ben Howard ] [ Ben Howard ] * Fixed image extraction for old releases (LP: #979996). [ Timothy Chen ] * 0072-lxc-shutdown-help: display usage when passed help. (LP: #980905) * 0073-lxc-destroy-waits-before-destroy: lxc-shutdown waits for the container to fully stop before it destroys it. (LP: #980902)	Serge Hallyn	0.7.5-3ubuntu52	12 years ago
92	0070-templates-rmdir-dev-shm: in precise containers, rmdir $... 0070-templates-rmdir-dev-shm: in precise containers, rmdir $rootfs/dev/shm and and create it as a symbolic link to /run/shm. (LP: #974584)	Serge Hallyn	0.7.5-3ubuntu51	12 years ago
91	[ Stéphane Graber ] [ Stéphane Graber ] * Minor ubuntu template tweak to add missing space after lxc.network.hwaddr. [ Ben Howard ] * Fixed ubuntu-cloud template user-data handling (LP: 977376)	Ben Howard	0.7.5-3ubuntu50	12 years ago
90	debian/lxc-default.apparmor: add mediate_deleted flag (LP: #... debian/lxc-default.apparmor: add mediate_deleted flag (LP: #969299)	Serge Hallyn	0.7.5-3ubuntu49	12 years ago

Older »