commit 561e1f117080893d018d72cea8bb733c208eec8f33faf8659278523b8adc0cd8 Author: Johannes Kastl Date: Tue Sep 24 14:22:50 2024 +0000 update to 6.0.2 OBS-URL: https://build.opensuse.org/package/show/Virtualization:containers/lxcfs?expand=0&rev=55 diff --git a/.gitattributes b/.gitattributes new file mode 100644 index 0000000..9b03811 --- /dev/null +++ b/.gitattributes @@ -0,0 +1,23 @@ +## Default LFS +*.7z filter=lfs diff=lfs merge=lfs -text +*.bsp filter=lfs diff=lfs merge=lfs -text +*.bz2 filter=lfs diff=lfs merge=lfs -text +*.gem filter=lfs diff=lfs merge=lfs -text +*.gz filter=lfs diff=lfs merge=lfs -text +*.jar filter=lfs diff=lfs merge=lfs -text +*.lz filter=lfs diff=lfs merge=lfs -text +*.lzma filter=lfs diff=lfs merge=lfs -text +*.obscpio filter=lfs diff=lfs merge=lfs -text +*.oxt filter=lfs diff=lfs merge=lfs -text +*.pdf filter=lfs diff=lfs merge=lfs -text +*.png filter=lfs diff=lfs merge=lfs -text +*.rpm filter=lfs diff=lfs merge=lfs -text +*.tbz filter=lfs diff=lfs merge=lfs -text +*.tbz2 filter=lfs diff=lfs merge=lfs -text +*.tgz filter=lfs diff=lfs merge=lfs -text +*.ttf filter=lfs diff=lfs merge=lfs -text +*.txz filter=lfs diff=lfs merge=lfs -text +*.whl filter=lfs diff=lfs merge=lfs -text +*.xz filter=lfs diff=lfs merge=lfs -text +*.zip filter=lfs diff=lfs merge=lfs -text +*.zst filter=lfs diff=lfs merge=lfs -text diff --git a/.gitignore b/.gitignore new file mode 100644 index 0000000..57affb6 --- /dev/null +++ b/.gitignore @@ -0,0 +1 @@ +.osc diff --git a/lxcfs-6.0.0.tar.gz b/lxcfs-6.0.0.tar.gz new file mode 100644 index 0000000..8c4bff7 --- /dev/null +++ b/lxcfs-6.0.0.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:15bda2ed0398f91d4342326120375a94d2d6aed414e14834013b4674b8a4c5ee +size 103369 diff --git a/lxcfs-6.0.0.tar.gz.asc b/lxcfs-6.0.0.tar.gz.asc new file mode 100644 index 0000000..d2b175a --- /dev/null +++ b/lxcfs-6.0.0.tar.gz.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCgAdFiEEYC9WdmPlk7y9FPM4xjiXTWR5LWcFAmYE2akACgkQxjiXTWR5 +LWfhQRAAzNxJGBZk4zC07MzJIJfDSI9cGyrq9UwJ3yyD15Xf8iz8lZ3X1TiW+u2V +DL7yVxDeQSSWKr6hgxvbb32Qp3n0VTSeu1qZ3VmmZDslC/POs54cUyi1/VzmiiLQ +fb+fmwM1x41CrRVnrMcwUX8Op02EIJImKtEHJWmsuWBvHgOJC8frA7RBjcDxHs7y +hZ5F34qCBsIEN0XgzgiIPKQ0/eEyTCdw2YLeTWsAMDoym5zCZYQvshi/fBwy9sN2 +Buot2Qj2F49ztIL1YyapY7cw1qd7kUdcfEfhdRQKnNSqIrVVRzxe/xIrLhH7VZ7a +PNakhv9tbKkfuePJwQY4cBO86N1jWFld4QYVBoS3Xjkkpvs3LoaBSCvjdo/i1iNf ++8TVONIEeA5ctpO6KaUuUnpsvUPjfCrr/AJI+4CgcG+jZDWzTeHHv8y3izU+6rZC +TmTeWfwl7bBA7hbe9c4TPzyhm6MY9bKCWlKTdU0+IeN959/pIgUuQtdB//kebrjA +93b3zDf1oeaWkuiZv6vfjarCheVfUGvmc4+a6tRVfKKML9nb7MQg1q7v9bRM0clp +M8RtjAdkWqbScz9MI2tcsA+2zIQDvHfp38DAAbidMEOu141HvXbEiGrWKM2ihKHa +kPnQQlw7BmFpblTVvraPLaRgivjhBbuJcKYOlmb5adg/9JpyWFw= +=GePB +-----END PGP SIGNATURE----- diff --git a/lxcfs-6.0.1.tar.gz b/lxcfs-6.0.1.tar.gz new file mode 100644 index 0000000..226a80c --- /dev/null +++ b/lxcfs-6.0.1.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:898eae241e1f7c5bfad72a04e28bdf78b6f33a2d8f6c6922d78c85b7b6b82bec +size 105761 diff --git a/lxcfs-6.0.1.tar.gz.asc b/lxcfs-6.0.1.tar.gz.asc new file mode 100644 index 0000000..715123e --- /dev/null +++ b/lxcfs-6.0.1.tar.gz.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCgAdFiEEYC9WdmPlk7y9FPM4xjiXTWR5LWcFAmZ7feoACgkQxjiXTWR5 +LWcE8w//XXQJ5Ouo8DYABSGOSKynV070br4h91+fwJjQM6GHzVF4GVOkEaXaUuno +YYgsdSc7taosZS+9lJkBzsiNWQI7ufhag9GTTwRTiQMIdNa0zXpX94wIzLDFDUvc +J5ntXharFW2n8QRzuX+0k1OUgPsJT3bA3wtnf7VJ9B1FeHRcLBg1A9h/i347TjGs +nhW91Ip6Nuxq4MaE6l5X5YgD5+3CMahZa4La3PwMIuSl1b/2c9a5weOC6PL6wwNc +UGH9nV06+4gkK/1H/zwo9Ur8TVHW3l+DkfuCJG89o5N5Ux29KpDoLs8MDhmpFiUj +zxWCxRBNbaYgXX0Jr0jsL2LiGgdMWEHyuxEGxvgbMQpC3NzneT5CabFkxR8lWB3s +LLAfStlYnA0suwGHh8gifoVukTnfRoEOXZXaNCyi17rbeQhkj05WoEz2rSsPwGTF +miX/VMdq82FiLamxG+Rhh7Utoa8pLVzN5eJpW7xsDPL2bx1V1q04eCE23oxgfybb +XuvWitKVmSLql6b82B7dOUvCANnGKcrRXuqORzQZeJbvA5PNvxWrr27IOajZJVzV +vCvAO5L38ul69IY7mz6GPS2F9vGu8s8JcAMTCctm0nJeSTHbfBw6H9vcJVr8ZmJ6 +MR/0SHmwuoSBqRnXwn8f+tBAlioVVaa74U3UKpMGeNRkgXgJYJQ= +=Byrd +-----END PGP SIGNATURE----- diff --git a/lxcfs-6.0.2.tar.gz b/lxcfs-6.0.2.tar.gz new file mode 100644 index 0000000..fcc06e0 --- /dev/null +++ b/lxcfs-6.0.2.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:81016140b70e3b0977e637651197d2c29d02dd73d824e94cd97c19e64c74071c +size 105748 diff --git a/lxcfs-6.0.2.tar.gz.asc b/lxcfs-6.0.2.tar.gz.asc new file mode 100644 index 0000000..1f05b41 --- /dev/null +++ b/lxcfs-6.0.2.tar.gz.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCgAdFiEEYC9WdmPlk7y9FPM4xjiXTWR5LWcFAmboVkkACgkQxjiXTWR5 +LWc7whAAttpJBYz8b9mOGBa9jndPoX495Wkat0MfxGGWIH3BBO6I/r/J++8ln9vM +4F093x7HscdQbCFzOJ8caRS2jbYFbF4IFGIad8ZfL2TqvVWkgcHZOleLrz4oD8wj +GOxYrIhhoeo7DK3xTWW0Q1xQ30SnH6edzcl7403oKdmQIqBjXPYnTJZaOPBWetTl +CJTVPw+76m5PWNZEyBqJD3yJfWN9wBlcuw82QwSZ3d4QZgEFf/bHX+axyG3i5iQS +pPsJ3EBetgplkEnTwbFIu60P11KoI8qdfr+Ia0Wcvy9TahShbYH4Sxne8NH2zaZ6 +hCHmghYp1PGhs+4cYGwY1X5Q58AIg5rRFggneWYKvahkFqefRU0iSFG24UJJqzi4 +TsUSnHC9gC4v4ZrWTGtXByDaHO70lT9xCDNGSnvY059r7CbiHzWuXiytsDrmwYXt +CbHbnxhJG6tQvMZ8z/+QZDeY2OwF5dDa+lOeNrxjP/DJsFReG1fN6x0pSlh0tJIb +w5HLQnJfCdMlGZyj0oc99arO0tUvGzF8TdRQEZ20Xmp7SVQL9yHaqsCmjMzvHIYM +K1goZODwsKU14gcLkMmwiJ5J6nnXIkulpxB/hTBBFOaCUoHZrvj8RHlR0RVeeEid +IRDevUbfzb6yv3CyV9iHUjithgaA+MPQFNA6wJGGZcX/aYM8RUo= +=kSWh +-----END PGP SIGNATURE----- diff --git a/lxcfs.changes b/lxcfs.changes new file mode 100644 index 0000000..c221397 --- /dev/null +++ b/lxcfs.changes @@ -0,0 +1,464 @@ +------------------------------------------------------------------- +Sat Sep 21 16:20:11 UTC 2024 - Johannes Kastl + +- update to 6.0.2 LTS: + * This is the second bugfix release for LXCFS 6.0 which is + supported until June 2029. + * Some of the highlights for this release are: + - Fix building of LXCFS on musl systems (missing include) + * Detailed changelog + - Add missing linux/limits.h include + +------------------------------------------------------------------- +Sat Jul 13 10:58:47 UTC 2024 - Johannes Kastl + +- update to 6.0.1 LTS: + * Some of the highlights for this release are: + - Support for running multiple instances of LXCFS + (--runtime-dir) + - Detect systems that has a Yama policy preventing reading + process personalities + * Detailed changelog + - github: add lxcfs live upgrade compatibility test + - proc: checks system security policy before trying to get + personalities + - lxcfs/bindings: Refactor RUNTIME_PATH so that it can be + overridden on startup + - lxcfs/bindings: add a flag for overriding the runtime dir + - github: update coverity test to use Ubuntu 22.04 + - README.md: add info about how to collect a core dump + - github: add ISSUE_TEMPLATE.md + - tests: Update for multiple runtime paths + +------------------------------------------------------------------- +Sun Apr 14 08:28:30 UTC 2024 - Johannes Kastl + +- update to 6.0.0: + The LXCFS team is pleased to announce the release of LXCFS 6.0 + LTS! + This is the result of two years of work since the LXCFS 5.0 + release and is the fifth LTS release for the LXCFS project. This + release will be supported until June 2029. + https://discuss.linuxcontainers.org/t/lxcfs-6-0-lts-has-been-released/19546 + * New --enable-cgroup option + LXCFS can provide a virtual cgroupfs (v1) tree for use by + containers. + This feature was implemented prior to cgroup namespaces being + implemented in the kernel and effectively allow providing a + similar experience on kernels lacking that feature. + As most supported Linux distributions now all feature a kernel + supporting cgroup namespaces and most new distros have even + switched away from cgroupv1, it didn't make sense to keep this + feature enabled by default. As a result, it has now been moved + behind a new startup argument, --enable-cgroup. + * CPUs no longer masked in /sys/devices/system/cpu + LXCFS 5.0 shipped with logic to filter out entries in + /sys/devices/system/cpu based on what CPUs were allowed in the + caller's cpuset. This behavior doesn't actually reflect the + behavior on normal systems where even offline CPUs still show + up in /sys/devices/system/cpu. + As a result, LXCFS 6.0 reversed that logic and is now only + making sure to keep the list of online/offline CPUs up to date + while the individual CPU directories all remain accessible. + +------------------------------------------------------------------- +Mon Jul 31 12:32:38 UTC 2023 - Dirk Müller + +- update to 5.0.4: + * Fixed the output format of /proc/diskstats + * Fixed an issue with cpuset path tracking when used with containerd + +------------------------------------------------------------------- +Tue Feb 28 16:36:27 UTC 2023 - Callum Farmer + +- Correct BR from python3-jinja2 to python3-Jinja2, fixes + dependency resolving on older distros + +------------------------------------------------------------------- +Sat Oct 29 00:02:49 UTC 2022 - Aleksa Sarai + +- Update to LXCFS 5.0.2. The full upstream changelog is available from: + https://discuss.linuxcontainers.org/t/lxcfs-5-0-lts-has-been-released/13535 + https://discuss.linuxcontainers.org/t/lxcfs-5-0-1-has-been-released/14709 + https://discuss.linuxcontainers.org/t/lxcfs-5-0-2-has-been-released/14811 + boo#1204842 + + LXCFS 5.0.2: + * Fix crash during load/reload on FUSE 3 + + LXCFS 5.0.1: + * Fixes to /sys/devices/system/cpu handling on FUSE 2 + * Fix for a formatting issue in /proc/stat + * Fix for a cgroup2 issue in handling cgroups with no CPU limits + * Fix for library reload logic + + LXCFS 5.0: + * Switch to meson + + Complete cgroup2 support + + /proc/slabinfo support + + /sys/devices/system/cpu support +- Drop no-longer needed patches. + - include-fixes.patch + +------------------------------------------------------------------- +Fri Sep 30 20:50:08 UTC 2022 - Dirk Müller + +- add include-fixes.patch +- reenable FORTIFY_SOURCE=3 + +------------------------------------------------------------------- +Sun Sep 25 17:00:54 UTC 2022 - Johannes Kastl + +- fix build by using FORTIFY_SOURCE=2 +- fix Supplements syntax + +------------------------------------------------------------------- +Tue Feb 22 08:02:32 UTC 2022 - Johannes Kastl + +- update to 4.0.12: + * CPU sum in /proc/stat is now preserved on cpuset changes + * Expose an empty cgroup tree when host system is on a unified hierarchy + https://discuss.linuxcontainers.org/t/lxcfs-4-0-12-has-been-released/13287 + +------------------------------------------------------------------- +Tue Feb 22 08:00:25 UTC 2022 - Johannes Kastl + +- update to 4.0.11: + NOTE: This was originally released as LXCFS 4.0.10 but a bug caused the published release tarball to be missing a file. LXCFS 4.0.11 includes that fix. + * Fixed a potential deadlock in the cpuinfo handler + * Reduced daemon verbosity + https://discuss.linuxcontainers.org/t/lxcfs-4-0-11-has-been-released/12426 + +------------------------------------------------------------------- +Tue Feb 22 07:58:42 UTC 2022 - Johannes Kastl + +- update to 4.0.9: + * Improve libfuse2/libfuse3 handling + https://discuss.linuxcontainers.org/t/lxcfs-4-0-9-lts-has-been-released/11617 + +------------------------------------------------------------------- +Mon May 24 06:38:24 UTC 2021 - Johannes Kastl + +- update to 4.0.8: + * Correct file size for proc files + * for full list of changes see + https://discuss.linuxcontainers.org/t/lxcfs-4-0-8-lts-has-been-released/10998 + +------------------------------------------------------------------- +Mon May 24 06:35:56 UTC 2021 - Johannes Kastl + +- update to 4.0.7: + * Consistent swap behavior (documented in README) + * for full list of changes see + https://discuss.linuxcontainers.org/t/lxcfs-4-0-7-lts-has-been-released/9893 + +------------------------------------------------------------------- +Mon May 24 06:34:21 UTC 2021 - Johannes Kastl + +- update to 4.0.6: + * Add support for fuse3 + * Update for new diskstats fields + * Fix some build issues + * for full list of changes see + https://discuss.linuxcontainers.org/t/lxcfs-4-0-6-lts-has-been-released/9236 + +------------------------------------------------------------------- +Wed Aug 12 04:44:02 UTC 2020 - Pavol Cupka + +- update to LXCFS 4.0.5 + detailed changelog: + https://discuss.linuxcontainers.org/t/lxcfs-4-0-5-lts-has-been-released/8602 + +------------------------------------------------------------------- +Sat Jun 27 06:20:52 UTC 2020 - Pavol Cupka + +- update to LXCFS 4.0.4 (released on the 18th of June 2020) + detailed changelog: + https://discuss.linuxcontainers.org/t/lxcfs-4-0-4-lts-has-been-released/8212 + +------------------------------------------------------------------- +Sun May 10 05:58:58 UTC 2020 - Pavol Cupka + +- update to LXCFS 4.0.3 (released on the 17th of April 2020) + detailed changelog: + https://discuss.linuxcontainers.org/t/lxcfs-4-0-3-lts-has-been-released/7470 + +------------------------------------------------------------------- +Wed Apr 1 14:23:25 UTC 2020 - Aleksa Sarai + +- Update to LXCFS 4.0.1. The full upstream changelog is available from: + https://discuss.linuxcontainers.org/t/lxcfs-4-0-lts-has-been-released/7031 + https://discuss.linuxcontainers.org/t/lxcfs-4-0-1-lts-has-been-released/7130 + Related to the LXD 4.0.0 update (boo#1168338). + + cgroup2: Support for the new unified cgroup hierarchy + + /proc/cpuinfo and cpu output in /proc/stat based on cpu shares + + /proc/loadavg virtualization + + pidfd supported process tracking + * Improved command line options + * Compiler based hardening + * Minimal compiler based resource management +- Clean up %if macro. + +------------------------------------------------------------------- +Mon Feb 3 15:02:33 UTC 2020 - Dominique Leuenberger + +- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to + shortcut through the -mini flavors. + +------------------------------------------------------------------- +Thu Sep 19 09:53:15 UTC 2019 - Pavol Cupka + +- update to version 3.1.2 (released on the 24th of July 2019) + + New Features: + * Add support for per-container cpu usage in /proc/stat + * Add support for load average (loadavg) virtualization + * Display cpus in /proc/cpuinfo based on cpu quotas + * Allow to disable swap in /proc/meminfo output + * Virtualize /sys/devices/system/cpu/online + * Enable higher precision output in /proc/uptime + * Add support for FUSE nonempty option + + Bugfixes: + * bindings: ensure that opts is non NULL + * Makefile: Fix typo in file name + * remove unused functions + * sys dirs do not need to implement 'read' method + * lxcfs: coding style update + * config: Adds RPM spec file. + * config: Adds reload mode to sysvinit and systemd scripts. + * bindings: prevent NULL pointer dereference + * stat: check for out of bound access to cpuacct usage data + * calc_hash(): do not apply modulo LOAD_SIZE + * tests: include missing sys/sysmacros.h header + * bindings: prevent double free + * bindings: better logging for write_string() + * meminfo: set ShmemHugePages and ShmemPmdMapped to zero + * bindings: fix memory leak in calc_pid() + * travis: fix .travis.yml + * bindings: fix memory leak in proc_loadavg_read() + +------------------------------------------------------------------- +Sun Jun 9 08:19:21 UTC 2019 - Aleksa Sarai + +- Make lxcfs-hooks-lxc supplement liblxc1 instead of lxc, since there are other + liblxc1 users (such as LXD). + +------------------------------------------------------------------- +Tue Mar 26 02:28:48 UTC 2019 - Aleksa Sarai + +- Update to version 3.0.3. The changelog is fairly significant from 2.x, but + the main difference is tha the PAM module has been moved to the LXC project, + and is no longer hosted in lxcfs. +- Add workaround for pre-15 distros, where _sharedstatedir was inexplicably + /usr/com, to use the correct directory of /var/lib. + +------------------------------------------------------------------- +Tue Mar 26 00:09:22 UTC 2019 - Aleksa Sarai + +- Rework packaging to be a more modern openSUSE-style. + +------------------------------------------------------------------- +Wed Jun 13 12:50:43 UTC 2018 - dcassany@suse.com + +- Make use of %license macro + +------------------------------------------------------------------- +Tue Oct 31 19:34:47 UTC 2017 - opensuse_buildservice@ojkastl.de + +- update to version 2.0.8 + This is the eigth bugfix release for LXCFS 2.0. This includes the following bugfixes: + * bindings: Add mountpoint for unified hierarchy + * bindings: Calculate uptime via proc//stat + * bindings: Revert virtualization of 'btime' field due to regressions in ps + * doc: Update README + * init: Add cgroupfs-mount to Should-Start/Stop sysvinit LSB headers + * lib: Add common fallback dlopen for liblxcfs.so + * lib: Fix the installation directory for liblxcfs to ${libdir}/lxcfs + * pam: Add a 'all' option for -c + * pam: Chown cgroup.procs file on unified hierarchy + * pam: Report back when we find a unified hierarchy + * tests: Fix invalid comparison + * uptime: Fix a problem with subsequent reads + +------------------------------------------------------------------- +Wed May 17 10:44:25 UTC 2017 - opensuse_buildservice@ojkastl.de + +- update to version 2.0.7 + This is the seventh bugfix release for LXCFS 2.0. This includes the following bugfixes: + * Remove unused variable + * Also check next variable for NULL on cg_rmdir + * virtualize the 'btime' field of /proc/stat + * cleanup: return false instead of NULL as bool + * Limit memswlimit by TotalSwap + * pam_cgfs: remove dead assignment + * pam_cgfs: return created directly + * pam_cgfs: make sure that **p is not NULL + * bindings: Want space for ints? Call sizeof(int)! + * pam_cgfs: make trim() safer + * pam_cgfs: error out on failure in cgv2_init() + * pam_cgfs: remove dead assignment + * bindings: implement guest nice + * bindings: increase reserved buffer size a little + +- added signature verification + +------------------------------------------------------------------- +Fri Jan 27 15:31:13 UTC 2017 - opensuse_buildservice@ojkastl.de + +- deleted patches 0001 to 00024, as they are upstream already + - 0001-Fix-test_reload-for-lxcfs-chroot.patch + - 0002-Virtualize-more-of-the-meminfo-fields.patch + - 0003-pam-fix-race-in-cgroup-creation.patch + - 0004-meminfo-don-t-show-negative-swapfree.patch + - 0005-bindings-improve-debugging.patch + - 0006-bindings-use-openat-fd-for-fstatat-unlinkat.patch + - 0007-bindings-close-open-fds-on-error.patch + - 0008-bindings-grant-access-to-var-lib-lxcfs.patch + - 0009-bindings-enable-access-to-var-lib-lxcfs-cgroup.patch + - 0010-bindings-allow-access-to-var-lib-lxcfs-proc.patch + - 0011-lxcfs-bindings-show-.-and-.-dir-entries.patch + - 0012-lxcfs-better-fs-behavior-on-var-lib-lxcfs.patch + - 0013-bindings-non-functional-changes.patch + - 0014-bindings-set-errno-in-pick_controller_from_path.patch + - 0015-bindings-more-consistent-fs-behavior.patch + - 0016-add-pld-linux-support.patch + - 0017-don-t-use-argv-0-in-usage-output.patch + - 0018-bindings-revert-cgroup-check.patch + - 0019-bindings-improve-returned-errnos.patch + - 0020-bindings-make-rmdir-behave-more-consistently.patch + - 0021-libtool-do-not-link-lxcfs-against-liblxcfs.patch + - 0022-bindings-lxcfs-improve-debugging.patch + - 0023-bindings-fix-debug-macro.patch + - 0024-bindings-restore-original-working-directory.patch + +------------------------------------------------------------------- +Wed Jan 25 09:10:46 UTC 2017 - opensuse_buildservice@ojkastl.de + +- update to version 2.0.6 + This is the sixth bugfix release for LXCFS 2.0. This includes the following bugfixes: + Fix swap values with nested cgroups + tests: Fix run on ppc64el + Fix wrong scanning of memory.stat + +- update to version 2.0.5 + This is the fifth bugfix release for LXCFS 2.0. This includes the following bugfixes: + Add Documentation key to systemd unit + bindings: allow getattr on O_WRONLY files + bindings: remove noop check + fix Active/Inactive /proc/meminfo + macro: add header for shared macros + pam_cgfs: reimplement and add cgroupfs v2 support + pam_cgfs: re-use cgroups that already belong to us + pam_cgfs: handle cgroupfs v1 cpuset controller + pam_cgfs: improve logging + cgroups: handle non-existent isolcpus file + +- update to version 2.0.4 + This is the fourth bugfix release for LXCFS 2.0. This includes the following bugfixes: + Fix test_reload for lxcfs chroot + Virtualize more of the meminfo fields + pam: fix race in cgroup creation + meminfo: don't show negative swapfree + bindings: improve debugging + bindings: use openat fd for fstatat(), unlinkat() + bindings: close open fds on error + bindings: grant access to /var/lib/lxcfs + bindings: enable access to /var/lib/lxcfs/cgroup + bindings: allow access to /var/lib/lxcfs/proc + lxcfs, bindings: show "." and ".." dir entries + lxcfs: better fs behavior on /var/lib/lxcfs + bindings: non functional changes + bindings: set errno in pick_controller_from_path() + bindings: more consistent fs behavior + add pld linux support + don't use argv[0] in usage output + bindings: revert cgroup check + bindings: improve returned errnos + bindings: make rmdir behave more consistently + libtool: do not link lxcfs against liblxcfs + bindings, lxcfs: improve debugging + bindings: fix debug macro + autotools: add -avoid-version + bindings: restore original working directory + bindings: add function to check fs type + bindings: agnostic naming + bindings: use chroot() on ramfs + bindings: fix type weirdness with statfs f_type + bindings: make pivot_enter() contain all its code + +------------------------------------------------------------------- +Wed Aug 31 11:43:16 UTC 2016 - cbrauner@suse.de + +- update lxcfs to 2.0.3 +- add 0001-Fix-test_reload-for-lxcfs-chroot.patch +- add 0002-Virtualize-more-of-the-meminfo-fields.patch +- add 0003-pam-fix-race-in-cgroup-creation.patch +- add 0004-meminfo-don-t-show-negative-swapfree.patch +- add 0005-bindings-improve-debugging.patch +- add 0006-bindings-use-openat-fd-for-fstatat-unlinkat.patch +- add 0007-bindings-close-open-fds-on-error.patch +- add 0008-bindings-grant-access-to-var-lib-lxcfs.patch +- add 0009-bindings-enable-access-to-var-lib-lxcfs-cgroup.patch +- add 0010-bindings-allow-access-to-var-lib-lxcfs-proc.patch +- add 0011-lxcfs-bindings-show-.-and-.-dir-entries.patch +- add 0012-lxcfs-better-fs-behavior-on-var-lib-lxcfs.patch +- add 0013-bindings-non-functional-changes.patch +- add 0014-bindings-set-errno-in-pick_controller_from_path.patch +- add 0015-bindings-more-consistent-fs-behavior.patch +- add 0016-add-pld-linux-support.patch +- add 0017-don-t-use-argv-0-in-usage-output.patch +- add 0018-bindings-revert-cgroup-check.patch +- add 0019-bindings-improve-returned-errnos.patch +- add 0020-bindings-make-rmdir-behave-more-consistently.patch +- add 0021-libtool-do-not-link-lxcfs-against-liblxcfs.patch +- add 0022-bindings-lxcfs-improve-debugging.patch +- add 0023-bindings-fix-debug-macro.patch +- add 0024-bindings-restore-original-working-directory.patch + +------------------------------------------------------------------- +Wed Aug 31 11:37:18 UTC 2016 - cbrauner@suse.de + +- remove 0001-skip-empty-entries-under-proc-self-cgroup.patch + +------------------------------------------------------------------- +Sat Jul 23 09:09:44 UTC 2016 - cbrauner@suse.com + +- remove explicit Provides for pam_cgfs subpackage + +------------------------------------------------------------------- +Mon Jul 11 11:22:24 UTC 2016 - cbrauner@suse.de + +- install pam_cgfs.so with the pam_cgfs subpackage + +------------------------------------------------------------------- +Sun Jul 10 09:34:39 UTC 2016 - cbrauner@suse.com + +- add 0001-skip-empty-entries-under-proc-self-cgroup.patch + +------------------------------------------------------------------- +Thu Jul 7 16:13:57 UTC 2016 - cbrauner@suse.de + +- Remove lxcfs-devel. +- Install shared library liblxcfs.so into /usr/lib/lxcfs as it is not supposed + to be used by any other program. + +------------------------------------------------------------------- +Thu Jul 7 13:40:24 UTC 2016 - cbrauner@suse.de + +- rename devel package from liblxcfs-devel to lxcfs-devel + +------------------------------------------------------------------- +Thu Jul 7 13:29:53 UTC 2016 - cbrauner@suse.de + +- make sure that lxcfs install the shared library liblxcfs.so: + The lxcfs executable requires liblxcfs.so be installed. It calls dlopen() to + dynamically reload the shared library on upgrade. This is important. Do *not* + split into a separate package and do not turn this into a versioned shared + library! (This shared library allows lxcfs to be updated without having to + restart running containers!) + +------------------------------------------------------------------- +Thu Jul 7 11:44:02 UTC 2016 - cbrauner@suse.de + +- add lxcfs package diff --git a/lxcfs.keyring b/lxcfs.keyring new file mode 100644 index 0000000..332d35b --- /dev/null +++ b/lxcfs.keyring @@ -0,0 +1,69 @@ +pub rsa4096/0xC638974D64792D67 2010-10-23 [SC] + 602F567663E593BCBD14F338C638974D64792D67 +uid [ unknown] Stéphane Graber +uid [ unknown] Stéphane Graber +sub rsa4096/0x9E4B2A99D7B3258F 2010-10-23 [E] + +-----BEGIN PGP PUBLIC KEY BLOCK----- + +mQINBEzDJtYBEADeY2GjCIHiP69HyT6dea1bcBYKHzGusmPjUGfNExAgseCgkFGo +xROSpjt5ez8FGyvjvSevVTtWTO955eLrhj7fUzfcN8ot+Lj5EeCeyX6evR/jv/Kw +dJZfKNHEKFlsRL74NEodSIvxDxANsu4iggpPWe+RMcZt7yP/4j5j7/yfZHCtDNVe +6vYr6FvR9YmJ1TK3SudKQ0eLYBgW75V45xtgl1dzcTfmmnQKRq0NBgGHQ9P+VdA5 +TTaKDxDyVGuGL3eSBABLKiOTVxn8cLK75NOHH920PbOIKAfXh0StvIRbHL0EcwNj +4nrSHHsDqFwQaieVueEpxaL3OfKXlF/4KdkCz8J1fXMiKd7MrOaVCGfriU4J9H3V +2JUPzHCv1QOLlJFkzyfbAh/62xRuUKihqBnLvMStl1wCesbMSAUxZZs2u+emqjD7 +wqf7bj5u34bCb/7eBnirBhk7fCPrWeiw+tyr8focN3TB9ZjoFba+lzReP+ehYpFI +15ro7wJ82VvEYw3/UIOyUhGBdGWZzwoag6Y2sm7zY84YGtNV44LsaKpJYZUi7er4 +2JQZ6PN68lfkGgTyjd3eFQ4la7pmhOWDZt9ldy8rz8dw0K8gKRP+b5NNmaPznCcM +tg8s+mQqcjWpeqwmq93JrgbxGwgiI2qw9P+dZI0jn+Aoth+DDki3MC6ZXwARAQAB +tCZTdMOpcGhhbmUgR3JhYmVyIDxzdGdyYWJlckB1YnVudHUuY29tPokCNwQTAQoA +IQUCTMMuOgIbAwULCQgHAwUVCgkICwUWAgMBAAIeAQIXgAAKCRDGOJdNZHktZ35S +D/434tFecFY622NY/YLjQUN++bSvP+mbeCeOXnOULZozURQTuQzneTWFgkPOL7Uv +RIrw0WznQEwhUMai7PUF3SbOYcj7iYSXJM6t3aNfW0zmjS185Ny2bRB7URihTAyE +eM4Jpk6oMTmhqmH2OHnFQuNqmCl1tiH44KVv/sQAEzN/txjxj64YSq5NSzkQKlMG +/n7QfLL+RhoB4db1wY8vhnrryP7vUx5DR1A5z9MYfFTIJb75vsQM6r4s3sVtwSTG +kozJMUZAs0EXbI2Tgx2Wd7t2ix21lBu0PDb/RINpXQV0pyhT1kQxa1ZKfpLoM2LR +Wp6ctqmU+qkryaW8cLEHkYmDKEQIgQ7/DrOJPrPgjfBIC9LOcXgI1LbIh1L7tNFA +OiOVS/e4C3zxBowCS4VCWq9m0LrmC531sFF46cmAMhrmtStWqJpn/Yaxn8VmhhTU +zIVOUr3gL9RzbynYGIiSif+LXsrPLzEaDTGjmKm3oFvDadUHmb6HyuQ0M9UCgLQK +kWiOvybx6Q16doFm61VQsJMqHDSpLBjOc5cSHO9PiXlYzkK0dv8h8e0LG2MORHCJ +K4s8SfsPAXBCJwoZufcohaO0DD/fx93ErcAyNlDiwL2TxrQ4wEMHj73lt18A/HqP +VpU0zTWDpNDe/N12a3sfTfs9IdB/izq6k2kTzZwHmqgpKbQoU3TDqXBoYW5lIEdy +YWJlciA8c3RncmFiZXJAc3RncmFiZXIub3JnPokCOgQTAQoAJAIbAwULCQgHAwUV +CgkICwUWAgMBAAIeAQIXgAUCTMMuYQIZAQAKCRDGOJdNZHktZyTdEACcaGpJvqa8 +uDiVrmbyaK/LDWhKdVE9JujTg4g05xtRpEE/yQKwHXKKxQfe8wQRuNOXWLj66w4o +UBKJs7Rc/DdNEM/RfYiTJD0dZ2fPq3GcU5rbZos1Tvmdpc1qVOyEMf3VJQ/vZEEy +7SM+i+jHx7lCx8lE0D6TsdrLVyh9cvr5+MwiqcVQXqK0aqGKjCdbEjUtsPz1d5Cu +Mq95ZQff6W6m1yNlxMnRMxdreYXCrjtv78RzlQi8dTgboaOOBC3TYQQwHx9ZrLGM +3WuPmUl9uecPTOSxIqoZHEpvz5fUQ0DhnlcxCd3R2qgPneEq0yEuaZrq8UZNyp/o +4iQAAz9BH/I7i34HySBuEzkCOSgRd1zMmuXGyrgg67kSMUFs8zyMqyjgups+ig1f +x8mKmwykVdH5Wgc310sy2W9wG5lWET45Z7gCDiu9x8B+3l6Qwn4WNffSI39ryTG4 +aPGbQ/Z3+Ipm+uEV98Gm8TDcj0GUhL5XmsQ9DEcftGfw/Kxt4vaDtCOFaSZqmsoV +b325sKF+LhCZTUwZVCHrkSIC75bJ0JtxRWu+4qWtBgbFTgx5jpr1zWP524x+c0a7 +aLGrsB1lAnmFqFoipzvfj2grNgtY7zDf3rcf/lBwt6VKGTCPuoJW0iRLhJQGK3AZ +Nkeu4F9t4IC5XcNKSnWJNQg0PiF0sfxTFbkCDQRMwybWARAApvNuefvVycI47ABo +T7AzBsHf0lbt4ihMpugZ+GfubzK98kn8pDRprUAfACx6+NLkxuAf9WyL7CFoFLSJ +je1m7ZhYeeNckrF5Ir1VRsF+6DueantQzawL8tq6o/sr+4/F5e0jwpXAbHNKiuqj +Q/DbLVPEmln29aYtJT3Vtm1eVzK2XkxicSlRROKHrGbaGSHEJgWr/7zqNcDPY9Ss +/pms2lqGCWK7MMG/PGVhYIJ9LKNK4yGQtxD51UuruAy6MmRfu1cKDzJ4frQjJTkr +c746uofRzK7F/uTQYFpXXd2uQ2/xi+dRnTyoqszvlS7Cm5/V2AhblbnUVE+gWgcR +lg3WXetJmI/jMwPCYSy1wxWFwZGYs/VTXcimHBcOZWu7cAur8zDNkm6uQaMaFRrq +LmkkLjoY0e8cXZIkcmQfvlWHdDkebQevRvKlNWIJChRXLU7SAKjrIe5y1lxyzy3y +dS8saK1nt7swubf737jHahQkNev9QwZ3r9ZxsyRXXRkXpKOoHQ2MVqyId+6Nk8Pn +/0yE6RPN+t01je/I731fLUZzsCs6y2e5d+xxQzQSTGBiJfxfHodBts3D6r3sxxYn +nvIe3H2Trzv34lNmiwX6RhxqPGiHBSvRxoTXz4luydDKIrBdaN+sgTkMINa3KDhf +VMmbdnwTOQbW2pi3qUCbjA0TI+EAEQEAAYkCHwQYAQoACQUCTMMm1gIbDAAKCRDG +OJdNZHktZxrrD/97bryBoLKJNc4tAtDY8umo+phdL/kUTx9gVeKHpZZVoymHW7pS +3stXC9UJigHuaDjkdvHq1v9fUdIp9mD8uqWgGJNO+hV99ARZSEkXfAFtNHYw0gVi +izz0J0FEmMibJJBjj4kDi9Z/2fWRKsvNfwQ6UKrKtYkkM1DWNnqhNJVDVNJ+4Mr5 +Y8wbkItPV07f5L3kdYFE90K08IJh/pvalt383RuNmuqFwNGjStLcfo2YRpTyjmWA +oR7qaGflTAKm0+Qj/vx8vfHu7WAfcdcAT6ftZ5Q7C0LcPPuNkTBGFUyvJwW+7AV5 +3Pln6vsbZg451J4iFQ0FTAYys40LbkLKYSAXfvfYHXY9ZOCvoZvsoeDG8zDUEGj5 +EnsiJNlJx2xCRwjIrCzujUs91HdxQoVtXWwtlknZNwO46x433+ukhkTGJGQ7YFao +x/JxkvQOhndYJBKm5C1P7ZlLmcRndv7Lrld9rVsYGk4/lCLDPXb/ZJ0jmZLYNqez +2z0Pcd0m+jtbVVuMxuIMI2NOFIccVsQxlrtWCdhnGfs+KH1D1eyLNB7PpzWq01yI +z3pNBo5YYOLovpu0wVB0vxLTkDxmcl4aoM6MGkbnDfK4al+RQ+hDJlCAW+z3hUxH +2CmlO+WHtRJyXqE37QX6y9xmflvckMvo+CB+gopGyzMJuLqkBL2sFHZbIw== +=JVth +-----END PGP PUBLIC KEY BLOCK----- diff --git a/lxcfs.spec b/lxcfs.spec new file mode 100644 index 0000000..245005d --- /dev/null +++ b/lxcfs.spec @@ -0,0 +1,128 @@ +# +# spec file for package lxcfs +# +# Copyright (c) 2024 SUSE LLC +# +# All modifications and additions to the file contributed by third parties +# remain the property of their copyright owners, unless otherwise agreed +# upon. The license for this file, and modifications and additions to the +# file, is the same license as for the pristine package itself (unless the +# license for the pristine package is not an Open Source License, in which +# case the license is the MIT License). An "Open Source License" is a +# license that conforms to the Open Source Definition (Version 1.9) +# published by the Open Source Initiative. + +# Please submit bugfixes or comments via https://bugs.opensuse.org/ +# + + +# On pre-15 SLE versions, _sharedstatedir was /usr/com -- which is just wrong. +%if 0%{?suse_version} < 1500 +%define _sharedstatedir /var/lib +%endif + +Name: lxcfs +Version: 6.0.2 +Release: 0 +Summary: FUSE filesystem for LXC +License: Apache-2.0 +Group: System/Management +URL: https://linuxcontainers.org/lxcfs +Source: https://linuxcontainers.org/downloads/%{name}/%{name}-%{version}.tar.gz +Source1: https://linuxcontainers.org/downloads/%{name}/%{name}-%{version}.tar.gz.asc +Source2: %{name}.keyring +BuildRequires: fdupes +BuildRequires: help2man +BuildRequires: libtool +BuildRequires: meson >= 0.50 +BuildRequires: pam-devel +BuildRequires: pkg-config +BuildRequires: python3 +BuildRequires: python3-Jinja2 +BuildRequires: pkgconfig(fuse) +BuildRequires: pkgconfig(systemd) +%{?systemd_requires} + +%description +LXCFS is a small FUSE filesystem written with the intention of making Linux +containers feel more like a virtual machine. It started as a side-project of +LXC but is usable by any runtime. + +%package hooks-lxc +Summary: LXC hooks for %{name} +Group: System/Management +Requires: %{name} = %{version} +%if 0%{?sle_version} < 150000 +Supplements: packageand(%{name}:liblxc1) +%else +Supplements: (%{name} and liblxc1) +%endif +BuildArch: noarch + +%description hooks-lxc +Configuration to add hooks for %{name} so that it automatically interoperates +with LXC for all containers. + +%prep +%autosetup -p1 + +%build +%meson \ + -D init-script=systemd \ + -D runtime-path=%{_rundir} \ + %{nil} +%meson_build + +%install +# The shared library liblxcfs.so used by lxcfs is not supposed to be used by +# any other program. lxcfs will automatically install it to {_libdir}/{name} +# which is out of the way of any other users. +%meson_install +install -d -m 0755 %{buildroot}%{_sharedstatedir}/%{name} + +# systemd service and sysv-init compat wrapper. +mkdir -p %{buildroot}%{_sbindir} +ln -s %{_sbindir}/service %{buildroot}%{_sbindir}/rc%{name} + +# Clean up. +find %{buildroot} -type f -name '*.la' -delete +%fdupes %{buildroot} + +%pre +%service_add_pre lxcfs.service + +%post +%service_add_post lxcfs.service + +%preun +%service_del_preun lxcfs.service + +%postun +%service_del_postun lxcfs.service + +%files +%defattr(-,root,root) +%doc AUTHORS README* +%license COPYING +%{_sbindir}/* +%{_bindir}/* +%{_datadir}/%{name} +%{_mandir}/man1/* +%{_unitdir}/* + +# Mountpoint for lxcfs. +%dir %{_sharedstatedir}/%{name} + +# The lxcfs executable requires liblxcfs.so be installed. It calls dlopen() to +# dynamically reload the shared library on upgrade. This is important. Do *not* +# split into a separate package and do not turn this into a versioned shared +# library! (This shared library allows lxcfs to be updated without having to +# restart it which is good when you have important system containers running!) +%dir %{_libdir}/%{name} +%{_libdir}/%{name}/liblxcfs.so + +%files hooks-lxc +%defattr(-,root,root) +%{_datadir}/lxc + +%changelog