IF YOU WOULD LIKE TO GET AN ACCOUNT, please write an
email to Administrator. User accounts are meant only to access repo
and report issues and/or generate pull requests.
This is a purpose-specific Git hosting for
BaseALT
projects. Thank you for your understanding!
Только зарегистрированные пользователи имеют доступ к сервису!
Для получения аккаунта, обратитесь к администратору.
Merge: attach: always use getent
Commit message:
In debian buster, some libnss plugins (if installed) can
cause getpwent to segfault instead of erroring out cleanly.
To avoid this, stick to always using getent.
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
Otherwise the upgrade from -3 to -4 issues the
reload-or-try-restart on the old service which has no
ExecReload yet.
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
* Revert "conf: remove extra MS_BIND with sysfs:mixed"
This should let privileged Ubuntu 14.04 containers boot
again.
* conf: use SYSERROR on lxc_write_to_file errors
Slightly more useful error output in a specific error
case.
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
The default cgroup pattern was switched from lxc/%n to
lxc.payload/%n, so add a ./configure option to revert this
change as PVE expects containers in lxc/%n.
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
The new dh_systemd_start parameter behavior is stupid.
Might be less so with compat 11 later on...
This reverts commit 4d672101f14f9e5358b8b79bd11c3d9b783af482.
* fix some memory leaks
* fix temp file creation
* fix rootfs pinning with NFS
* drop supplementary groups on attach
* fix gid=5 mount option on /dev/pts
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
Debian's apparmor package introduced feature-set pinning in Debian
Stretch 9.4 to prevent problems with AA profiles packaged in Debian
Stretch which target Debian Stretch's 4.9 based kernel.
Since our LXC profiles rely on features not included in this feature
set, we need to replace the pinned feature-set with our own.
The features file is not a conf-file, so it is possible to just
dpkg-divert it on installation/upgrades.
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
copied from /etc/apparmor.d/cache/.features with disabled
feature-pinning to obtain kernel feature set
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
