configure.ac: v0.10

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

fix symlink

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

lxc mount hook: implement stgraber's suggestions

revert to using sh and use symlinks instead of extra mounts.

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

Update lxc mount hook to ovver a mount per co-mounted controller

If cpu,cpuacct are comounted, then in addition to cpu,cpuacct make
mounts for 'cpu' and 'cpuacct'.

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

lxc mount hook: don't mount lxcfs fs for any controller already setup

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

don't thread

The pieces are there, but for now it's still not safe with libdbus

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

Return host's meminfo file if no memory cgroup

If memory cgroup is not available (that is, we can't find a
memory cgroup for the reading task), then just return the
contents of the host's /proc/meminfo.  (Same for all proc file
reads)

Closes #30

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

fix two threading issues

Make sure to prep dbus for threading before we start.

And use _exit() any time we are exiting from a forked child.  This is
to avoid calling the at_exit() functions.  Once a thread in the main
program has called nih_error_init(), this registers an at_exit fn which
asserts that the nih_context not be null - but after we fork, if libnih
is built with --enable-threading, then the nih_context is in fact null.
The only way to clear the atexit fns would be to exec().  So call
_exit() instead of exit(), because _exit() avoids calling the atexit
fns.

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

use threads when safe

libnih, when not built with --enable-threading, cannot be safely
used by a threaded application.  Detect whether it is built to be
threadsafe using a new libnih helper, and, if so, run threaded by
(a) not passing '-s' to fuse, and (b) making the dbus connection
and detected api version thread-local.

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

configure.ac: v0.9

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

Merge pull request #26 from mikemccracken/maybe-fix-24

Add error handling for snprintf calls inside *_read() funcs

inside *_read() funcs, return 0 for snprintf errors and truncations

Signed-off-by: Michael McCracken <mike.mccracken@canonical.com>

check return value from snprintf to avoid FUSE errors. Potentially fixes #24.

Signed-off-by: Michael McCracken <mike.mccracken@canonical.com>

configure.ac: release 0.8

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

implement --version

Because this is needed for help2man to determine the program name.

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

Fix the check for cpu being in cpuset range

Also add a testcase to make sure that the new function is correct.
In order to share the cpuset range checking code with with the
test, move it into cpuset.c.  Not sure whether we want that in a
utils.c instead.

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

Add some more sanity checks

Limit string size in sscanf, convert some sprintfs to snprintfs
(to make them future-proof), and free d in case of error.

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

free d at program end

to silence warnings from memory checkers

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

Make sure that that '/cgroup' and the controller are sep'd by /

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

cg_read: add ending newline

Closes #23

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

use direct_io

This will prevent a file read for over getattr.

File sizes show up as 0, but they do so in cgroupfs and procfs as well.

Closes #20.

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

Provide the fuse options we want ourselves

continue to allow the options which in the past we basically required
callers to provide ("-s -f -o allow_other"), exit on anything else.

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

Cleanup whitespace

and remove commented out debug statement

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

Merge pull request #22 from hustcat/cache.1

cache for proc file

info as parent when malloc memory for file buf
reduce one blank for /proc/stat

Signed-off-by: Ye Yin <eyniy@qq.com>

Merge pull request #19 from hallyn/cache.1

Cache.1

add cache for proc file, for support multiple read

Signed-off-by: Ye Yin <eyniy@qq.com>

LXC hook fixes

 - Detects whether cgroups are enabled in the container's config
 - Don't mount a second tmpfs on /sys/fs/cgroup

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

cache: use file_dir object as parent for alloc'ed objects

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

don't check for cgroup perms when opendir'ing /cgroup

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

add a file_info cache pointer for procfile reads

This doesn't actually use them yet, but now fi->fh->buf can be
used in https://github.com/lxc/lxcfs/pull/18

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

add cache types for each procfile type that we provide

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

check that file and dir entries don't get mixed up

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

cache verified controller/cgroup info at cg file read/write

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

cache opendir work and re-use it at readdir

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

release 0.7

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

be robust to glibc fork failures

kill child and retry when __glibc_fork() child hangs on an assert
(newpid != ppid) failure.

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

timeout the reception of a scm_cred

Else if the peer is killed at a strange time we will hang forever waiting.

Also don't kill children - always just let them time out

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

nih_local's must be initialized as NULL

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

Merge pull request #16 from hustcat/diskstats

Add /proc/diskstats

Add /proc/diskstats
Signed-off-by: Ye Yin <eyniy@qq.com>

Merge pull request #15 from steelbrain/master

Fix formatting of README

Fix formatting of README
Signed-off-by: Anees Iqbal <aneesiqbalbhatti@gmail.com>

Fix test_proc following the stat fix

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

Release LXCFS 0.6

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

Show cpu-average in /proc/stat and start cup numbering at 0

Signed-off-by: Christian Brauner <christianvanbrauner@gmail.com>
Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

clean up after several functions

which weren't freeing line of closing an open file.

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

Update README

Close #10

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

Release LXCFS 0.5

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

hook: Don't spam /etc/mtab

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

Make the LXC hook more robust

Don't fail if /sys/fs/cgroup or some proc files don't exist.

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

Update gitignore

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

Better detect the cgmanager version

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

Release LXCFS 0.4

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

Remount / recursive ms-slave in our new mntns

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

Revert "remount / ms-slave"

This will affect the hostns, let's go with my implementation instead :)

This reverts commit 1ff1e28c04267064c73c5b968d31f6e5f2e1f3fa.

remount / ms-slave

to avoid propagating proc mounts from get_pid1_time() back to host

Signed-ff-by: Serge Hallyn <serge.hallyn@ubuntu.com>

Release LXCFS 0.3

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

Fix LXC config install path

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

Release LXCFS 0.2

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

Update the lxc hook and add a LXC config file

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

tests: Fix return value

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

Release LXCFS 0.1

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

Fix autotools

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

test: Introduce a basic cgroup tree test

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

test: Introduce a basic proc tree test

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

update docs

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

add lxcfs container hook and comment

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

write: make sure to null terminate the buffer

We are passed a size, respect it.

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

Add some more missing newlines

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

fix up pid conversion algorithm

Mainly when the pid conversion task gets a ESRCH from sendmsg,
then it should send send the next message (with v='1' meaning
error) without first waiting for a ping from its peer, since
the peer already sent one and has gotten no response.

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

Update README

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

Add some more information to error messages

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

convert pids at write to tasks and cgroup.procs files

we're not yet distinguishing between thread vs threadgroup moving.

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

Merge branch 'readtasks.pass.creds.2' into m.2

read: translate pids into the reader's pidns

When reading a cgroupfs 'tasks' or 'cgroup.procs' file, we must translate
all pids from our namespace into the reader's.

TODO - convert writes

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

Add missing line breaks

Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

implement read of /proc/uptime

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

add comment describing how we'll do uptime

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

implement read for meminfo

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

implement read for /proc/stat

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

move comment about caching open results

hoping to implement this soon

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

implement cat of proc/cpuinfo

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

add boilerplate for the /proc file readdir+reads.

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

check for permission at opendir

So we don't surprise the caller at readdir

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

fix some error codes

userspace is looking for EACCES not EPERM for common perm deny.
Also return einval for bad names, not eio.

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

don't try to build lxcfs.1 if help2man is not available

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

remove stmt in lxcfs.c

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

Hide cgroups not under caller's own cgroup

For a directory, we show an empty directory.  For any attempt to getattr
a file, we return -ENOENT.

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

implement chmod

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

remove some debug output

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

implement rmdir

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

Implement chown

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

implement write

Also fix the permission checking function.

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

Implement mkdir

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

Add support for file read

To make 'cat /var/lib/lxcfs/cgroup/freezer/tasks' work, we also need for
getattr to actually give a file size.  So, do that.

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

getattr: fill in ownership of cgroup dirs.

Also check for privilege in uid namespaces over file uids.

And remove some extra debugging printfs.

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

Merge pull request #1 from hallyn/serge.2

Implement basic getattr/readdir

Add base lxcfs.c

So far it just does getattr and readdir for /cgroup/*

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

add autoconf boilerplate and cgmanager fns

Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>