[lxc/lxc] 5628bf: seccomp: close seccomp notifier fd in cleanup handler

[Christian Brauner]

Branch: refs/heads/stable-4.0
Home: https://github.com/lxc/lxc
Commit: 5628bff79dd7735012dc571710e61ff544f9cb69
https://github.com/lxc/lxc/commit/5628bff79dd7735012dc571710e61ff544f9cb69
Author: Christian Brauner <christia...@ubuntu.com>
Date: 2022-01-27 (Thu, 27 Jan 2022)

Changed paths:
M src/lxc/seccomp.c

Log Message:
-----------
seccomp: close seccomp notifier fd in cleanup handler

Reported-by: Wolfgang Bumiller <w.bum...@proxmox.com>
Signed-off-by: Christian Brauner <christia...@ubuntu.com>


Commit: ce392e23098129eca0dc43b022d59abb5af350a2
https://github.com/lxc/lxc/commit/ce392e23098129eca0dc43b022d59abb5af350a2
Author: Serge Hallyn <se...@hallyn.com>
Date: 2022-01-27 (Thu, 27 Jan 2022)

Changed paths:
M src/lxc/af_unix.c

Log Message:
-----------
(trivial) Fix error message, failure was connect not bind

Signed-off-by: Serge Hallyn <se...@hallyn.com>


Commit: 733f9c909b59625fa5443cb566dbaa5a4e13e219
https://github.com/lxc/lxc/commit/733f9c909b59625fa5443cb566dbaa5a4e13e219
Author: Tim <tim....@vialect.com>
Date: 2022-01-27 (Thu, 27 Jan 2022)

Changed paths:
M src/lxc/cmd/lxc-checkconfig.in

Log Message:
-----------
lxc-checkconfig.in: CONFIG_NF_NAT_IPV4 was removed from the kernel 2019-03-03

Signed-off-by: Tim L <elat...@gmail.com>


Commit: dbef704fbcf1adf00b64ece68682950377060419
https://github.com/lxc/lxc/commit/dbef704fbcf1adf00b64ece68682950377060419
Author: Christian Brauner <christia...@ubuntu.com>
Date: 2022-01-27 (Thu, 27 Jan 2022)

Changed paths:
M src/lxc/commands.c

Log Message:
-----------
commands: log command during file descriptor retrieval

Signed-off-by: Christian Brauner <christia...@ubuntu.com>


Commit: 0b6b230e34062168e80f73090baae9737b679da6
https://github.com/lxc/lxc/commit/0b6b230e34062168e80f73090baae9737b679da6
Author: Christian Brauner <christia...@ubuntu.com>
Date: 2022-01-27 (Thu, 27 Jan 2022)

Changed paths:
M src/lxc/cgroups/cgfsng.c
M src/lxc/cgroups/cgroup.h
M src/lxc/commands.c

Log Message:
-----------
attach: don't pointlessly call cgroup_init()

We can let attach detect that it is running on a cgroup layout without
writable cgroup hierarchies. In that case attach can finish early and
doesn't need to run the heavy-handed cgroup parsing code.

Signed-off-by: Christian Brauner <christia...@ubuntu.com>


Commit: 199d2077c6be1bf6544233e74ffcfc5564b7c196
https://github.com/lxc/lxc/commit/199d2077c6be1bf6544233e74ffcfc5564b7c196
Author: Devin Norgarb <dnor...@gmail.com>
Date: 2022-01-27 (Thu, 27 Jan 2022)

Changed paths:
M README.md

Log Message:
-----------
Update README.md: Fix broken link (403 Forbidden)

Signed-off-by: Devin Norgarb dnor...@gmail.com


Commit: 7c70b0d14396d20748084b30bac3d89da30ed8e2
https://github.com/lxc/lxc/commit/7c70b0d14396d20748084b30bac3d89da30ed8e2
Author: Stéphane Graber <stgr...@ubuntu.com>
Date: 2022-01-27 (Thu, 27 Jan 2022)

Changed paths:
M templates/lxc-download.in

Log Message:
-----------
lxc-download: Rely on HTTPS only

GPG has been a major source of issues over the years with various
attacks on the key network as well as client side issues making it hard
to retrieve our keys.

Back when we introduced the image server, SSL certificates were still
expensive and annoying to setup, so not something we'd have expected
potential mirrors to setup for us. They were also issued for multiple
years, making a compromise of such a certificate quite problematic.

But things have changed since, we now have completely free, very easily
deployable SSL certificates everywhere with the majority of those being
shortlived and with good reporting of issued certificates.

With that, we can now deprecate the GPG validation, disable the fallback
to non-HTTPS download and rely on our indices being accurate because
they've been downloaded from a server with a valid certificate.

This puts LXC more in line with what LXD has done since the beginning
and should offer a more reliable user experience.

Signed-off-by: Stéphane Graber <stgr...@ubuntu.com>


Commit: 928943280568b059f3e70e70a9c6494fc23e51b2
https://github.com/lxc/lxc/commit/928943280568b059f3e70e70a9c6494fc23e51b2
Author: Simon Deziel <simon....@canonical.com>
Date: 2022-01-27 (Thu, 27 Jan 2022)

Changed paths:
M .github/workflows/sanitizers.sh

Log Message:
-----------
github: stop installing gnupg now that it's unused

Signed-off-by: Simon Deziel <simon....@canonical.com>


Commit: 4eb09aaad494e559785842792ea7f1dd1ed653c4
https://github.com/lxc/lxc/commit/4eb09aaad494e559785842792ea7f1dd1ed653c4
Author: Christian Brauner <christia...@ubuntu.com>
Date: 2022-01-27 (Thu, 27 Jan 2022)

Changed paths:
M src/lxc/conf.c

Log Message:
-----------
conf: improve userns_exec_mapped_root()

As we do in all other places, first drop groups, then use
setres{g,u}id().

Signed-off-by: Christian Brauner <christia...@ubuntu.com>


Commit: bae0d71965a0ad9dfc65a3e2ba8babf43f1747d3
https://github.com/lxc/lxc/commit/bae0d71965a0ad9dfc65a3e2ba8babf43f1747d3
Author: Christian Brauner <christia...@ubuntu.com>
Date: 2022-01-27 (Thu, 27 Jan 2022)

Changed paths:
M src/lxc/conf.c

Log Message:
-----------
conf: log termination status

Signed-off-by: Christian Brauner <christia...@ubuntu.com>


Commit: 1a5c236acfc2cc8ab883f22a65685dc9a36d0881
https://github.com/lxc/lxc/commit/1a5c236acfc2cc8ab883f22a65685dc9a36d0881
Author: Christian Brauner <christia...@ubuntu.com>
Date: 2022-01-27 (Thu, 27 Jan 2022)

Changed paths:
M src/lxc/lxccontainer.c

Log Message:
-----------
lxccontainer: improve do_lxcapi_save_config()

Signed-off-by: Christian Brauner <christia...@ubuntu.com>


Commit: bfe24cb6acf9ad12d70bbd55ecdb0bbdf05251cb
https://github.com/lxc/lxc/commit/bfe24cb6acf9ad12d70bbd55ecdb0bbdf05251cb
Author: Christian Brauner <christia...@ubuntu.com>
Date: 2022-01-27 (Thu, 27 Jan 2022)

Changed paths:
M src/lxc/conf.c
M src/lxc/lxccontainer.c
M src/lxc/utils.c
M src/lxc/utils.h

Log Message:
-----------
lxccontainer: improve do_lxcapi_create()

Signed-off-by: Christian Brauner <christia...@ubuntu.com>


Commit: 62b5c005105643d016132d0d25eefcd40076371e
https://github.com/lxc/lxc/commit/62b5c005105643d016132d0d25eefcd40076371e
Author: Christian Brauner <christia...@ubuntu.com>
Date: 2022-01-27 (Thu, 27 Jan 2022)

Changed paths:
M src/lxc/lxccontainer.c

Log Message:
-----------
lxccontainer: improve create_partial()

Signed-off-by: Christian Brauner <christia...@ubuntu.com>


Commit: d0a1e9c44b0ed3bf732eb95848b6da43404187ca
https://github.com/lxc/lxc/commit/d0a1e9c44b0ed3bf732eb95848b6da43404187ca
Author: Christian Brauner <christia...@ubuntu.com>
Date: 2022-01-27 (Thu, 27 Jan 2022)

Changed paths:
M src/lxc/lxccontainer.c

Log Message:
-----------
lxccontainer: simplify partial file creation

Signed-off-by: Christian Brauner <christia...@ubuntu.com>


Commit: 919da35b0398af9a41b0213174e166f17f0b7a0c
https://github.com/lxc/lxc/commit/919da35b0398af9a41b0213174e166f17f0b7a0c
Author: Christian Brauner <christia...@ubuntu.com>
Date: 2022-01-27 (Thu, 27 Jan 2022)

Changed paths:
M configure.ac

Log Message:
-----------
build: only enable LTO for regular builds

Signed-off-by: Christian Brauner <christia...@ubuntu.com>


Commit: bceb81cd26cb6e8a72424905675dcd091d172c17
https://github.com/lxc/lxc/commit/bceb81cd26cb6e8a72424905675dcd091d172c17
Author: Christian Brauner <christia...@ubuntu.com>
Date: 2022-01-27 (Thu, 27 Jan 2022)

Changed paths:
R config/tls.m4
M configure.ac
M src/lxc/compiler.h

Log Message:
-----------
build: simplify thread local storage handling

Signed-off-by: Christian Brauner <christia...@ubuntu.com>


Commit: ad8a3bd68a5ea16605235c2384c38ab43a6981f4
https://github.com/lxc/lxc/commit/ad8a3bd68a5ea16605235c2384c38ab43a6981f4
Author: Christian Brauner <christia...@ubuntu.com>
Date: 2022-01-27 (Thu, 27 Jan 2022)

Changed paths:
M src/lxc/lxccontainer.c

Log Message:
-----------
lxccontainer: properly wrap lxcapi_create()

Signed-off-by: Christian Brauner <christia...@ubuntu.com>


Commit: e9282b6a6e11848944e62ae7120a0e6cf70e00ea
https://github.com/lxc/lxc/commit/e9282b6a6e11848944e62ae7120a0e6cf70e00ea
Author: Christian Brauner <christia...@ubuntu.com>
Date: 2022-01-27 (Thu, 27 Jan 2022)

Changed paths:
M .github/workflows/sanitizers.sh

Log Message:
-----------
github: ensure system liblxc is wiped

Signed-off-by: Christian Brauner <christia...@ubuntu.com>


Commit: db84a8b6b0260f6ee6b559ecedf9a64cc59b4214
https://github.com/lxc/lxc/commit/db84a8b6b0260f6ee6b559ecedf9a64cc59b4214
Author: Christian Brauner <christia...@ubuntu.com>
Date: 2022-01-27 (Thu, 27 Jan 2022)

Changed paths:
M .github/workflows/build.yml
M .github/workflows/coverity.yml
M .github/workflows/sanitizers.yml

Log Message:
-----------
github: log system info

Signed-off-by: Christian Brauner <christia...@ubuntu.com>


Commit: 53e0d390ccc44f6c7f5c45510ed2aff6c92fbdf7
https://github.com/lxc/lxc/commit/53e0d390ccc44f6c7f5c45510ed2aff6c92fbdf7
Author: Christian Brauner <christia...@ubuntu.com>
Date: 2022-01-27 (Thu, 27 Jan 2022)

Changed paths:
M .github/workflows/sanitizers.sh

Log Message:
-----------
github: more detailed compilation instructions

Signed-off-by: Christian Brauner <christia...@ubuntu.com>


Commit: fb0e0b3dd25e4183a6d87fab725bd2bb6970f9cd
https://github.com/lxc/lxc/commit/fb0e0b3dd25e4183a6d87fab725bd2bb6970f9cd
Author: Christian Brauner <christia...@ubuntu.com>
Date: 2022-01-27 (Thu, 27 Jan 2022)

Changed paths:
M .github/workflows/sanitizers.sh

Log Message:
-----------
github: add systemd-coredump

Signed-off-by: Christian Brauner <christia...@ubuntu.com>


Commit: bc61d2354b282d521aa2b3ed72dbf9b14bf64b0a
https://github.com/lxc/lxc/commit/bc61d2354b282d521aa2b3ed72dbf9b14bf64b0a
Author: Stéphane Graber <stgr...@ubuntu.com>
Date: 2022-01-27 (Thu, 27 Jan 2022)

Changed paths:
M .github/workflows/sanitizers.sh

Log Message:
-----------
github: Clear default ACL on /home

Signed-off-by: Stéphane Graber <stgr...@ubuntu.com>


Commit: d678aa61e0282ebd39cb663fbbf803f53159d529
https://github.com/lxc/lxc/commit/d678aa61e0282ebd39cb663fbbf803f53159d529
Author: Christian Brauner <christia...@ubuntu.com>
Date: 2022-01-27 (Thu, 27 Jan 2022)

Changed paths:
M src/lxc/lxccontainer.c

Log Message:
-----------
lxccontainer: allow xdev when creating the container dir

Signed-off-by: Christian Brauner <christia...@ubuntu.com>


Compare: https://github.com/lxc/lxc/compare/1f2af83a99ed...d678aa61e028