]>
git.proxmox.com Git - mirror_lxc.git/log
Stéphane Graber [Tue, 14 Jun 2022 01:27:46 +0000 (21:27 -0400)]
meson: Fix bad strerror_r check
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Mon, 13 Jun 2022 14:12:07 +0000 (10:12 -0400)]
Merge pull request #4146 from brauner/2022-06-13.fixes
build: fixes
Christian Brauner [Mon, 13 Jun 2022 13:46:33 +0000 (15:46 +0200)]
build: map autotools options to meson options in meson_options.txt
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
Christian Brauner [Mon, 13 Jun 2022 13:36:13 +0000 (15:36 +0200)]
README: reflect meson in the documentation
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
Christian Brauner [Mon, 13 Jun 2022 13:31:36 +0000 (15:31 +0200)]
build: add missing memfd-rexec option
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
Christian Brauner [Mon, 13 Jun 2022 11:46:15 +0000 (13:46 +0200)]
build: support thread-safety enforcement as option
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
Christian Brauner [Mon, 13 Jun 2022 09:04:17 +0000 (11:04 +0200)]
build: use cc.links() to check for static libcap
Fixes: #4144
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
Stéphane Graber [Thu, 9 Jun 2022 21:35:34 +0000 (17:35 -0400)]
Merge pull request #4142 from brauner/2022-06-09.build.fixes
tests: fix oss-fuzz port to meson
Christian Brauner [Thu, 9 Jun 2022 16:15:41 +0000 (18:15 +0200)]
oss-fuzz: cleanup build flags
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
Christian Brauner [Thu, 9 Jun 2022 16:15:12 +0000 (18:15 +0200)]
oss-fuzz: ensure binaries are zipped
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
Christian Brauner [Thu, 9 Jun 2022 16:14:45 +0000 (18:14 +0200)]
oss-fuzz: adapt options to oss-fuzz build
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
Christian Brauner [Thu, 9 Jun 2022 16:14:13 +0000 (18:14 +0200)]
oss-fuzz: handle dependencies
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
Christian Brauner [Thu, 9 Jun 2022 16:12:54 +0000 (18:12 +0200)]
build: separate oss-fuzz tests from regular test builds
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
Christian Brauner [Thu, 9 Jun 2022 16:12:25 +0000 (18:12 +0200)]
github/workflows/cifuzz: update to Ubuntu 22.04
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
Christian Brauner [Thu, 9 Jun 2022 16:11:37 +0000 (18:11 +0200)]
build: add oss-fuzz switch
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
Christian Brauner [Thu, 9 Jun 2022 16:10:27 +0000 (18:10 +0200)]
build: add seccomp build option
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
Christian Brauner [Thu, 9 Jun 2022 16:08:27 +0000 (18:08 +0200)]
build: fix build with various options turned off
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
Christian Brauner [Thu, 9 Jun 2022 16:07:35 +0000 (18:07 +0200)]
build: tweak build flags
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
Stéphane Graber [Thu, 9 Jun 2022 06:02:41 +0000 (02:02 -0400)]
Merge pull request #4141 from lxc/dependabot/github_actions/actions/upload-artifact-3
build(deps): bump actions/upload-artifact from 1 to 3
dependabot[bot] [Thu, 9 Jun 2022 06:01:55 +0000 (06:01 +0000)]
build(deps): bump actions/upload-artifact from 1 to 3
Bumps [actions/upload-artifact](https://github.com/actions/upload-artifact) from 1 to 3.
- [Release notes](https://github.com/actions/upload-artifact/releases)
- [Commits](https://github.com/actions/upload-artifact/compare/v1...v3)
---
updated-dependencies:
- dependency-name: actions/upload-artifact
dependency-type: direct:production
update-type: version-update:semver-major
...
Signed-off-by: dependabot[bot] <support@github.com>
Stéphane Graber [Thu, 9 Jun 2022 06:01:31 +0000 (02:01 -0400)]
Merge pull request #4140 from turrisxyz/Dependabot-GitHub-Actions
chore: Included githubactions in the dependabot config
naveen [Thu, 9 Jun 2022 01:29:39 +0000 (01:29 +0000)]
chore: Included githubactions in the dependabot config
This should help with keeping the GitHub actions updated on new releases. This will also help with keeping it secure.
Dependabot helps in keeping the supply chain secure https://docs.github.com/en/code-security/dependabot
GitHub actions up to date https://docs.github.com/en/code-security/dependabot/working-with-dependabot/keeping-your-actions-up-to-date-with-dependabot
https://github.com/ossf/scorecard/blob/main/docs/checks.md#dependency-update-tool
Signed-off-by: naveen <172697+naveensrinivasan@users.noreply.github.com>
Christian Brauner [Wed, 8 Jun 2022 22:46:28 +0000 (00:46 +0200)]
Merge pull request #4139 from stgraber/master
Github workflow fixes
Stéphane Graber [Wed, 8 Jun 2022 21:46:50 +0000 (17:46 -0400)]
github: Fix compiler version task for coverity
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Wed, 8 Jun 2022 21:44:08 +0000 (17:44 -0400)]
github: Fix bad syntax in cifuzz
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Christian Brauner [Wed, 8 Jun 2022 18:43:10 +0000 (20:43 +0200)]
Merge pull request #4137 from brauner/2022-06-08.stgraber.master
build: remove autotools and finish meson port
Christian Brauner [Wed, 8 Jun 2022 18:14:23 +0000 (20:14 +0200)]
github/workflows/sanitizers: port sanitizers builds to meson
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
Christian Brauner [Wed, 8 Jun 2022 18:12:22 +0000 (20:12 +0200)]
github/workflows: port all workflows to Ubuntu 22.04
So we have a new enough meson version everywhere.
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
Christian Brauner [Wed, 8 Jun 2022 18:10:52 +0000 (20:10 +0200)]
github/workflows/cifuzz: ensure necessary paths are added
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
Christian Brauner [Wed, 8 Jun 2022 18:08:47 +0000 (20:08 +0200)]
github/workflows/build: remove sanitizer build
We have a separate workflow for this.
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
Christian Brauner [Wed, 8 Jun 2022 18:07:21 +0000 (20:07 +0200)]
github/workflows/build: add -Db_lto_mode=default
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
Christian Brauner [Wed, 8 Jun 2022 18:06:41 +0000 (20:06 +0200)]
github/workflows/build: install lvvm as well
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
Christian Brauner [Wed, 8 Jun 2022 18:05:38 +0000 (20:05 +0200)]
oss-fuzz: more meson options
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
Christian Brauner [Wed, 8 Jun 2022 18:03:59 +0000 (20:03 +0200)]
build: lxc-init doesn't need to build the whole config infra
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
Christian Brauner [Wed, 8 Jun 2022 18:03:05 +0000 (20:03 +0200)]
build: add additional command line switches
In order to compile for fuzzers where we will need and want to turn a
bunch of things off add command line switches that allow us to do so.
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
Christian Brauner [Wed, 8 Jun 2022 18:00:38 +0000 (20:00 +0200)]
build: use liblxc_sources everywhere
The old split didn't buy us a lot and causes problems when buidling with
sanitizers enabled so just use the full sources.
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
Christian Brauner [Wed, 8 Jun 2022 16:15:08 +0000 (18:15 +0200)]
config: make lxc-{containers,net}.in executable
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
Stéphane Graber [Wed, 8 Jun 2022 05:26:59 +0000 (01:26 -0400)]
Merge pull request #4136 from turrisxyz/Pinned-Dependencies-GitHub
chore: Set permissions for GitHub actions
Stéphane Graber [Wed, 8 Jun 2022 05:00:51 +0000 (01:00 -0400)]
meson: Always defined IS_BIONIC
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Tue, 7 Jun 2022 20:21:10 +0000 (16:21 -0400)]
src: Don't use ifdef/defined for config.h
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Fri, 3 Jun 2022 19:51:09 +0000 (15:51 -0400)]
github: Update coverity workflow for meson
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Fri, 3 Jun 2022 19:43:42 +0000 (15:43 -0400)]
github: Update build test for meson
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Fri, 3 Jun 2022 19:37:05 +0000 (15:37 -0400)]
README: Update for meson
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Fri, 3 Jun 2022 19:35:35 +0000 (15:35 -0400)]
doc: Update for meson
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Fri, 29 Apr 2022 03:14:07 +0000 (23:14 -0400)]
meson: Add basic Makefile
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Fri, 29 Apr 2022 03:12:35 +0000 (23:12 -0400)]
Remove autotools
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
neilnaveen [Wed, 8 Jun 2022 01:08:12 +0000 (01:08 +0000)]
chore: Set permissions for GitHub actions
Restrict the GitHub token permissions only to the required ones; this way, even if the attackers will succeed in compromising your workflow, they won’t be able to do much.
- Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions
https://docs.github.com/en/actions/using-workflows/workflow-syntax-for-github-actions#permissions
https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs
[Keeping your GitHub Actions and workflows secure Part 1: Preventing pwn requests](https://securitylab.github.com/research/github-actions-preventing-pwn-requests/)
Signed-off-by: neilnaveen <42328488+neilnaveen@users.noreply.github.com>
Christian Brauner [Tue, 7 Jun 2022 21:51:34 +0000 (23:51 +0200)]
Merge pull request #4135 from stgraber/meson
More meson fixes
Stéphane Graber [Tue, 7 Jun 2022 21:16:08 +0000 (17:16 -0400)]
meson: Fix mntent include condition
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Tue, 7 Jun 2022 21:15:54 +0000 (17:15 -0400)]
lxc/rexec: Use HAVE_FEXECVE
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Tue, 7 Jun 2022 21:15:26 +0000 (17:15 -0400)]
meson: Add lxcmntent to unmount-namespace hook
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Tue, 7 Jun 2022 20:21:54 +0000 (16:21 -0400)]
meson: Add missing prlimit include
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Tue, 7 Jun 2022 20:21:42 +0000 (16:21 -0400)]
meson: Only build seccomp and selinux when needed
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Tue, 7 Jun 2022 20:19:57 +0000 (16:19 -0400)]
meson: Always define HAVE_LIBURING
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Tue, 7 Jun 2022 19:16:36 +0000 (15:16 -0400)]
meson: seccomp is optional
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Tue, 7 Jun 2022 19:16:11 +0000 (15:16 -0400)]
meson: Fix on shallow git trees
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Tue, 7 Jun 2022 19:14:01 +0000 (15:14 -0400)]
meson: Add bionic detection
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Tue, 7 Jun 2022 05:30:43 +0000 (01:30 -0400)]
meson: Fix RPM spec variables
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Tue, 7 Jun 2022 05:14:37 +0000 (01:14 -0400)]
meson: Make lxc-user-nic setuid
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Tue, 7 Jun 2022 05:05:35 +0000 (01:05 -0400)]
meson: Don't include lxc-test-fuzzers
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Mon, 6 Jun 2022 22:06:09 +0000 (18:06 -0400)]
meson: Skip static library when using sanitizer
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Fri, 3 Jun 2022 21:53:45 +0000 (17:53 -0400)]
meson: Cleanup and fix includes
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Fri, 3 Jun 2022 19:48:32 +0000 (15:48 -0400)]
meson: Add coverity flag
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Christian Brauner [Tue, 7 Jun 2022 11:20:05 +0000 (13:20 +0200)]
Merge pull request #4133 from dasteihn/sta/fallthrough
CODING_STYLE: add forgotten fallthrough
Philipp Stanner [Tue, 7 Jun 2022 11:06:56 +0000 (13:06 +0200)]
CODING_STYLE: add forgotten fallthrough
Signed-off-by: Philipp Stanner <stanner@posteo.de>
Christian Brauner [Fri, 3 Jun 2022 08:32:25 +0000 (10:32 +0200)]
Merge pull request #4130 from stgraber/master
Finalize the meson port
Stéphane Graber [Thu, 2 Jun 2022 20:49:37 +0000 (16:49 -0400)]
meson: Add RPM spec
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Thu, 2 Jun 2022 20:37:45 +0000 (16:37 -0400)]
meson: Rework configuration variables
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Thu, 2 Jun 2022 19:24:57 +0000 (15:24 -0400)]
meson: Tweak config for manpages
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Thu, 2 Jun 2022 17:57:32 +0000 (13:57 -0400)]
meson: Export more variables to doc
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Thu, 2 Jun 2022 17:57:02 +0000 (13:57 -0400)]
meson: Export LXC_DISTRO_SYSCONF
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Christian Brauner [Tue, 31 May 2022 07:17:31 +0000 (09:17 +0200)]
Merge pull request #4126 from stgraber/master
Complete meson port
Stéphane Graber [Mon, 30 May 2022 23:16:16 +0000 (19:16 -0400)]
meson: Add apparmor profiles
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Mon, 30 May 2022 22:45:33 +0000 (18:45 -0400)]
meson: Add sysconfig
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Mon, 30 May 2022 22:29:52 +0000 (18:29 -0400)]
meson: Add init scripts
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Mon, 30 May 2022 22:08:04 +0000 (18:08 -0400)]
meson: Rename want_io_uring
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Mon, 30 May 2022 21:23:44 +0000 (17:23 -0400)]
meson: Make docbook2man required if user requested doc
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Christian Brauner [Mon, 30 May 2022 20:24:07 +0000 (22:24 +0200)]
Merge pull request #4125 from stgraber/master
meson: Tweak docs
Stéphane Graber [Mon, 30 May 2022 19:59:58 +0000 (15:59 -0400)]
meson: More flexible doc handling
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Mon, 30 May 2022 19:33:33 +0000 (15:33 -0400)]
meson: Simplify if statements
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Christian Brauner [Sat, 28 May 2022 06:27:12 +0000 (08:27 +0200)]
Merge pull request #4124 from stgraber/master
More meson work
Stéphane Graber [Sat, 28 May 2022 01:40:30 +0000 (21:40 -0400)]
meson: Add manpages
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Fri, 27 May 2022 23:56:05 +0000 (19:56 -0400)]
meson: Only build tools when requested
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Fri, 27 May 2022 23:54:40 +0000 (19:54 -0400)]
meson: Add tools option
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Fri, 27 May 2022 23:49:23 +0000 (19:49 -0400)]
meson: Re-shuffle PAM
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Fri, 27 May 2022 23:00:34 +0000 (19:00 -0400)]
meson_options: Move entries around
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Tue, 24 May 2022 14:26:38 +0000 (10:26 -0400)]
Merge pull request #4120 from brauner/2022-05-18.meson.pam
build: add pam_cgfs to meson
Christian Brauner [Sat, 21 May 2022 07:23:57 +0000 (09:23 +0200)]
Merge pull request #4121 from sitano/ivan_fix_pidfds_loglvl
lxc_can_use_pidfd: don't log error if pidfds not supported, trace
Ivan Prisyazhnyy [Fri, 20 May 2022 14:07:14 +0000 (16:07 +0200)]
lxc_can_use_pidfd: don't log error if pidfds not supported, trace
Signed-off-by: Ivan Prisyazhnyy <john.koepi@gmail.com>
Christian Brauner [Wed, 18 May 2022 15:51:10 +0000 (17:51 +0200)]
pam: fix compiler warnings
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
Christian Brauner [Wed, 18 May 2022 15:47:51 +0000 (17:47 +0200)]
build: add pam_cgfs to meson
Signed-off-by: Christian Brauner (Microsoft) <christian.brauner@ubuntu.com>
Stéphane Graber [Sun, 15 May 2022 20:58:16 +0000 (16:58 -0400)]
Merge pull request #4115 from terceiro/rename-completion
bash: rename main bash completion file
Christian Brauner [Thu, 12 May 2022 22:13:59 +0000 (00:13 +0200)]
Merge pull request #4117 from stgraber/master
More meson coverage
Stéphane Graber [Thu, 12 May 2022 16:57:17 +0000 (18:57 +0200)]
meson: Add remaining scripts
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Thu, 12 May 2022 16:56:56 +0000 (18:56 +0200)]
meson: Re-organize dir variables
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Thu, 12 May 2022 16:48:46 +0000 (18:48 +0200)]
meson: Add init helper scripts
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Thu, 12 May 2022 14:16:36 +0000 (16:16 +0200)]
meson: Add common configs
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Thu, 12 May 2022 14:06:23 +0000 (16:06 +0200)]
meson: Add SELinux configs
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Stéphane Graber [Thu, 12 May 2022 13:58:36 +0000 (15:58 +0200)]
meson: Add global config
Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>
Antonio Terceiro [Wed, 11 May 2022 19:49:35 +0000 (16:49 -0300)]
bash: rename main bash completion file
Since the `lxc` binary is actually provided by lxd, the main
bash-completion file needs to be moved away to not conflict with a bash
completion file provided for the `lxc` binary by lxd.
Signed-off-by: Antonio Terceiro <terceiro@debian.org>