Changelog for lxc-libs-1.0.11-2.1.x86_64.rpm :
Tue Oct 31 13:00:00 2017 opensuse_buildserviceAATTojkastl.de
- LXC 1.0.11 release announcement 19th of October 2017
This is the eleventh bugfix release for LXC 1.0.
Bugfixes:
apparmor: Allow containers to start in AppArmor namespaces
apparmor: Drop useless apparmor denies
conf: Fix building without libcap
conf: Free netdev->downscript
conf: Improve write_id_mapping()
conf: Non-functional changes
conf: Refactor most of the parsing functions
console: Non-functional change
core: Remove the __func__ macro
core: Use strerror(errno) instead of %m
doc: Add CII Best Practices badge to README
doc: Add missing translations for commands
doc: Fix a typo
doc: Fix regex-typo in Japanese and Korean lxc-monitor(1)
doc: Fix regex-typo in lxc-monitor.sgml.in
doc: Reword idmap restrictions when unpriv
doc: Update API for get_config_item
doc: Update README
init: Add comment for exclude 32 and 33 signals
liblxc: Use snprintf()
lock: Non-functional changes
lock: Return the right error when open lock file failed
monitor: Remove unlink operation in af_unix
network: Adding warning for mtu ignoring
network: Non-functional changes
seccomp: Print action name in log
seccomp: s/n-new-privs/no-new-privs/g
seccomp: Update comment for function parse_config
state: Remove lxc_rmstate declaration
storage: Enable building with gcc7
template/archlinux: Change locale \"en-US.UTF-8\" to \"en_US.UTF-8\"
template/centos: Add cronie to the pkg list
template/centos: Use altarch mirror for CentOS on arches other than i386 and x86_64
template/debian: Add aarch64 -> arm64 mapping
template/debian: Add buster as a valid release
template/debian: Use deb.debian.org as the default Debian mirror
template/opensuse: getty.target.wants does not always exists
template/ubuntu: Conditionally move upstart ssh job, as it is now optional.
template: Use \"rsync -SHaAX\" to copy the cached rootfs into place
tests: Avoid NULL pointer dereference
tests: Remove temp lxcpath for attach testcase
tools/usernsexec: Remove dead assignments
tools: Use \"which\"
travis: Fix builds
utils: Close parent end in child process after fork
utils: Duplicate stderr as well in lxc_popen()
utils: Fix lxc_popen()/lxc_pclose()
utils: Fix mem leak with realpath
utils: Fix some cppcheck warnings
utils: Fix the bug of \'ts->stdoutfd\' did not fill with parameters \'stdoutfd\'
utils: Remove dead assignments in lxc_popen()
- LXC 1.0.10 release announcement 11th of May 2017
This is the tenth bugfix release for LXC 1.0.
Important:

* Security fix for CVE-2016-10124

* Security fix for CVE-2017-5985
Bugfixes:

* attach: simplify lsm_openat()

* commands: improve logging

* utils: add macro __LXC_NUMSTRLEN

* tests; Don\'t cause test failures on cleanup errors

* conf: clearly report to either use drop or keep

* attach: close lsm label file descriptor

* conf, attach: save errno across call to close

* templates/lxc-debian.in: Fix typo in calling dpkg with --print-foreign-architectures option

* templates/lxc-debian.in: handle ppc hostarch -> powerpc

* Fix regression in errno handling cherry-pick

* don\'t try to get stuff from /usr/lib/systemd on the host

* lxc-opensuse: rm poweroff.target -> sigpwr.target copy

* Add --enable-gnutls option

* tests: skip unpriv tests on broken overlay module

* Use AC_HEADER_MAJOR to detect major()/minor()/makedev()

* Make lxc-start-ephemeral Python 3.2-compatible

* systemd: enable delegate in service file

* confile: clear lxc.network..ipv{4,6} when empty

* seccomp: allow x32 guests on amd64 hosts.

* squeeze is not a supported release anymore, drop the key

* seccomp: set SCMP_FLTATR_ATL_TSKIP if available

* lxc-checkconfig: verify new[ug]idmap are setuid-root

* python3: Deal with potential NULL char
*

* lxc-download.in / allow setting keyserver from env

* lxc-download.in / Document keyserver change in help

* Change variable check to match existing style

* tests: Support running on IPv6 networks

* tests: Kill containers (don\'t wait for shutdown)

* Fix opening wrong file in suggest_default_idmap

* lxc_setup_tios(): Ignore SIGTTOU and SIGTTIN signals

* Increased buffer length in print_stats()

* remove obsolete note about api stability

* conf: less error prone pointer access

* create ISSUE_TEMPLATE.md

* issue template: fix typo

* conf: order mount options

* commands: avoid NULL pointer dereference

* commands: non-functional changes

* lxccontainer: avoid NULL pointer dereference
- removed patch 0020-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch

Thu Mar 30 14:00:00 2017 opensuse_buildserviceAATTojkastl.de
- added three patches to allow builds on Tumbleweed
0015-added-sys-sysmacros.h-to-src-lxc-bdev.c.patch
0016-added-sys-sysmacros.h-to-src-lxc-lxccontainer.c.patch
0017-added-sys-sysmacros.h-to-src-lxc-conf.c.patch

Thu Mar 30 14:00:00 2017 opensuse_buildserviceAATTojkastl.de
- fix for boo#1028264
added patch 0020-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch

Sat Nov 26 13:00:00 2016 opensuse_buildserviceAATTojkastl.de
- update to version 1.0.9
Important:
Security fix for CVE-2016-8649
Bugfixes:
doc: change \"-t\" option of lxc-create(1) to being required
ubuntu-cloud: Various fixes
coverity: avoid null pointer dereference in cgmanager
Use /usr/bin/env python3 instead of /usr/bin/python3 project-wide
Fetch Debian archive GPG keyrings when they\'re not available
seccomp: handle inverted arch
Better handle preserve_ns behavior
Revert \"seccomp: handle inverted arch\"
lxc_container struct: add comment about moving member fns
debian: Fix container creation on missing cache
lxc: let lxc-start support wlan phys
apparmor: support lxc.aa_profile = unchanged
seccomp: support 32-bit arm on arm64, and 32-bit ppc on ppc64
Conditional compilation for ARM and PPC
prune_init_cgroup: don\'t dereference NULL
fix \'lxc.mount.entry\' key when clearing unexpanded config
Update get_item test after the lxc.mount.entry fix
Fix seccomp profile on attach of undefined container
Return immediately in save_phys_nics if not run as root Physical nic is not instantiated in lxc_create_network
lxc-checkconfig: remove zgrep dependency
Refactoring conditional directives.
Fix swap calculation
python-lxc: Call PyOS_AfterFork after attaching to a container
fix buffer overflow in ifaddrs.c
Documenting valueless lxc.cap.drop behaviour
NULL pointer deference if nlmsg_reserve() returns NULL for ifi
Don\'t try to change aa label if we are already apparmor-confined
coverity: preserve_ns returns bool, not int
apparmor: recognize \'unconfined\' as unconfined.
bash completion: the \'have\' command was deprecated in favor of \'_have\'
Set the right variable to NULL when unsetting ipv6_gateway
preserve inherited fds for stop hook
avoid printing null string in error message
Fix Comment inside Fedora Template
doc: Add valueless lxc.cap.drop behaviour to Japanese man page
Document clear behaviour of list options
fix lockpath removal in Python lxc-ls
Document network clear option
open_without_symlink: Account when prefix is empty string
lxc_setup_fs: Create /dev/shm folder if it doesn\'t exist
cgmanager: don\'t make tasks + cgroup.procs +x
cleanup: lxc_container::want_
* comment descriptions
Fix echo statement inside fedora template
Use ${utsname} instead of ${UTSNAME} because latter variable is not defined.
Ignore any container with a name starting by \'.\'
increase /dev size to 500k ( issue #781)
cgfs: prune the init scope from paths
doc: add clear behaviour of list options to Japanese lxc.container.conf(5)
doc: Add network clear option to Japanese lxc.container.conf(5)
apparmor: allow binding /run/{,lock/} -> /var/run/{,lock/}
log.c:__lxc_log_set_file: fname cannot be null
log.c:__lxc_log_set_file: completely close log file when overriding
Allow sysfs remount by mountall
cgroups: do not fail if setting devices cgroup fails due to EPERM
cgfs: also check for EACCES when writing devices
lxc: cgfs: handle lxcfs
Fix typo in lxc manpage
cgfs: make sure we use valid cgroup mountpoints
cgfs: be less verbose
doc: improve Japanese lxc-attach(1)
doc: improve lxc-unshare(1)
open_without_symlink: Don\'t SYSERROR on something else than ELOOP
lxc-busybox: Touch /etc/fstab in the container rootfs
sync: add LXC_SYNC_ERROR to report errors from another process.
start: use LXC_SYNC_ERROR to report errors.
lxc-busybox: Remove warning for dynamically linked Busybox
Fix installation of out-of-tree (VPATH) builds
use httpredir.debian.org as the default Debian mirror
always provide a default mirror for debootstraping Ubuntu
lxc-ubuntu: Fix building on secondary architectures
update Debian release names
fix btrfs_recursive_destroy
store errno immediately after ioctl
fix spelling mistakes spotted by Debian\'s lintian
netlink_open: close socket on error
lxc_mount_auto_mounts(): free memory on failure
Ignore temporary files generated by doxygen
nicer date format and support for SOURCE_DATE_EPOCH in LXC_GENERATE_DATE
drop obsolete syslog.target from lxc.service.in
Update maintainers
Check if stdout is a terminal in lxc-checkconfig
Fixed - set PyErr when Container.__init__ fails
Added type to keys in lxc_list_nicconfigs
Force DHCP client to send hostname
sync: fail on unexpected message sizes
sync.c: use correct types
Added OR statement for cases of ID = rhel in RHEL 7+
Unshare netns after setting the userns mappings
Allow configuration file values to be quoted
Also allow fstype=fuse for fuse filesystems
Fix hostname in interface config for apline template
Fix redefinition of struct in6_addr
lxc-debian: make sure init is installed
plamo: Improve Plamo template
AppArmor: add make-rslave to usr.bin.lxc-start
Include all lxcmntent.h function declarations on Bionic
lxc-debian: fix regression when creating wheezy containers
Set up MTU for vlan-type interfaces.
templates: avoid noisy perl warnings caused by missing locales
Add a prefix to the lxc.pc
conf: set pty_info to NULL after free
apparmor: Refresh generated file
tools: add missing newline in lxc-create output
Use full GPG fingerprint instead of long IDs.
utils: Add mips signalfd syscall numbers
seccomp: Implement MIPS seccomp handling
seccomp: Add mips and mips64 entries to lxc_config_parse_arch
seccomp: fix strerror()
confile: add more archs to lxc_config_parse_arch()
seccomp: add support for s390x
seccomp: remove double include and order includes
seccomp: non functional changes
templates: fedora requires openssl binary
set FULL_PATH_NAMES=NO in doc/api/Doxyfile
console: use correct log name
lxczfs: small fixes
make rsync deal with sparse files efficiently
lxc-create -t debian fails on ppc64el arch
utils: fix lxc_string_split()
Fix spelling of CentOS in the templates
mark the python examples as having utf-8 encoding
log: sanity check the returned value from snprintf()
archlinux: Do DHCP on eth0
archlinux: Fix resolving
Drop leftover references to lxc_strerror().
s390x: Fix seccomp handling of personalities
ubuntu: Fix package upgrades requiring proc
use python3_sitearch for including the python code
cgfs: fix invalid free()
cgfs: add print_cgfs_init_debuginfo()
cgfs: skip empty entries under /proc/self/cgroup
tools: use correct exit code for lxc-stop
conf: merge network namespace move & rename on shutdown
create symlink for /var/run
cgfs: explicitly check for NULL
templates: add squashfs support to lxc-ubuntu-cloud.in
install bash completion where pkg-config tells us to
conf: do not use %m format specifier
debian: Don\'t depend on libui-dialog-perl
Replace \'index\' by \'strchr\' for Android build
tree-wide: replace readdir_r() with readdir()
Merge pull request #1310 from brauner/2016-11-22/tree_wide_replace_readdir_r
attach: do not send procfd to attached process

Sat Nov 26 13:00:00 2016 opensuse_buildserviceAATTojkastl.de
- deleted patch 0002-replaced-she-bangs-containing-usr-bin-python3-with-t.patch
- split up the deleted patch in single patches to make it easier to maintain
- 0002-Changed-shebang-in-src-lxc-lxc-device-to-use-python3.patch
- 0003-Changed-shebang-in-src-lxc-lxc-ls.in-use-python3.4-i.patch
- 0004-Changed-shebang-in-src-lxc-lxc-start-ephemeral.in-us.patch
- 0005-Changed-shebang-in-src-python-lxc-setup.py.in-use-py.patch
- 0006-Changed-shebang-in-src-python-lxc-examples-pyconsole.patch
- 0007-Changed-shebang-in-src-python-lxc-examples-pyconsole.patch
- 0008-Changed-shebang-in-src-python-lxc-examples-api_test..patch

Sat Dec 19 13:00:00 2015 opensuse_buildserviceAATTojkastl.de
- added %{_libexecdir}/%{name}/lxc-monitord to %files section, also now %{_libexecdir}/%{name} with %dir

Sat Dec 19 13:00:00 2015 opensuse_buildserviceAATTojkastl.de
- use lxc-createconfig on all systems, not only on openSUSE/SUSE

Fri Dec 18 13:00:00 2015 opensuse_buildserviceAATTojkastl.de
- renamed patches to differ between patches for CentOS/RHEL-python3-vs-python3.4 and backported patches

Mon Dec 14 13:00:00 2015 opensuse_buildserviceAATTojkastl.de
- changed rpm macro \'centos_version\' to \'rhel\' to allow building for RHEL as well (untested)

Sat Dec 12 13:00:00 2015 opensuse_buildserviceAATTojkastl.de
- added BuildRequires for automake; autogen.sh now called not only on CentOS, and called in a better way...

Fri Dec 11 13:00:00 2015 opensuse_buildserviceAATTojkastl.de
- patch all files with she-bangs containing /usr/bin/python3 to work with /usr/bin/python3.4 on CentOS_7

Tue Dec 8 13:00:00 2015 opensuse_buildserviceAATTojkastl.de
- changed Requires: and BuildRequires: on CentOS to python34 instead of python3

Tue Dec 8 13:00:00 2015 opensuse_buildserviceAATTojkastl.de
- fixed patch for configure.ac on CentOS; added autogen.sh to spec to use the patched configure.ac

Tue Dec 8 13:00:00 2015 opensuse_buildserviceAATTojkastl.de
- now compiling on CentOS7 with python support should work. Probably...

Tue Dec 8 13:00:00 2015 opensuse_buildserviceAATTojkastl.de
- renamed patch 0006-... to 0007-...

Tue Dec 8 13:00:00 2015 opensuse_buildserviceAATTojkastl.de
- add additional PYTHON=python34 argument to configure, when building for CentOS with python enabled

Mon Dec 7 13:00:00 2015 opensuse_buildserviceAATTojkastl.de
- added patch 0006-fixing-PKG_CHECK_MODULES-to-work-with-python-3.4-on-.patch

* changes one line in configure.ac to allow building on CentOS_7,
where python3 is only available from EPEL as package python34,
which installs /usr/bin/python3.4

Sat Dec 5 13:00:00 2015 opensuse_buildserviceAATTojkastl.de
- fixed missing %if-statement

Sat Dec 5 13:00:00 2015 opensuse_buildserviceAATTojkastl.de
- no apparmor stuff on not-openSUSE

Wed Dec 2 13:00:00 2015 opensuse_buildserviceAATTojkastl.de
- enable building with_python on RHEL/CentOS

Tue Nov 24 13:00:00 2015 opensuse_buildserviceAATTojkastl.de
- package apparmor stuff only if suse_version is set

Fri Nov 13 13:00:00 2015 opensuse_buildserviceAATTojkastl.de
- nice and smooth definition of with_python on openSUSE

Thu Nov 12 13:00:00 2015 opensuse_buildserviceAATTojkastl.de
- enabled building with python support to get a usable output of lxc-ls

Thu Nov 12 13:00:00 2015 opensuse_buildserviceAATTojkastl.de
- update to version 1.0.8
Important:

* Security fix for CVE-2015-1331

* Security fix for CVE-2015-1334
Core:
Add a nesting.conf which can be included to support nesting containers
Add support for CAP_AUDIT_READ and CAP_BLOCK_SUSPEND
Allow autodev without a rootfs
Also drop caps in unpriv containers
apparmor: Block access to /proc/kcore
apparmor: Fix slave bind mounts
apparmor: Sync with current git master
attach: use _exit() instead of exit() in the intermediate child process
aufs: Support unprivileged clone, mount
Call /lib/apparmor/profile-load directly instead of the wrapper
cgmanager: attach: never use \'all\' controller
cgmanager: free line at end of check_supports_multiple_controllers
cgmanager: put unprivileged containers under $(curcgroup)/lxc/$(container0
Change lxc-clone to use \'rsync -aH\' instead of just \'rsync -a\' for cloning to fix Launchpad Bug #1441307.
clone_paths: use \'rootfs\' for destination directory
config: add miscellaneous signals for lxc.
*signal
daemonized start: exit children on failure, don\'t return
Define MS_REC and MS_SLAVE for Android in bdev.c
Define MS_RELATIME for Android
Define O_PATH and O_NOFOLLOW for Android
detect whether cgmanager_list_controllers is available
do_lxcap_stop: wait until container is stopped
don\'t close std
* fd if opentty fails
Enable seccomp by default for unprivileged users.
Factorize handle of create=dir and create=file
Fix Android build due to missing constant
Fix automatic mounts without a rootfs
fix build on mpc85xx
Fix clearing IPv4/IPv6 addresses
Fix container creation without a rootfs
Fix control tty issues on attach
Fix /dev symlinks without a rootfs
Fix dropped fs caps when cloning a container
Fix error message when cannot find an lxc-init
Fix incomplete destruction of unprivileged ephemeral containers
Fix instantiation of multiple vlan interfaces with same id
Fix reversed args in mount call
Fix verification of start hook without a rootfs
Ignore trailing /init.scope in init cgroups
Init error_num to 1
init: Support older apparmor
In lxc.mount.auto, skip on ENONENT
lxc_monitor: fix memory leak on AATTfds and close fds
lxc_monitor: free AATTpreg on error
lxc_mount_auto_mounts: fix weirdness
make cgmanager follow lxc.cgroup.use
Make LXC_CLONE_KEEPNAME work
Make mount_entry_create_
*_dirs() more robust
Make overlayfs mounts work directly
Only mount /proc if needed, even without a rootfs
only re-open fds if stdin is a tty
Only use LOGPATH if lxcpath is unset or default
overlay: create workdir if it doesn\'t exist
pass on reboot flag and delete old veth on reboot
Prevent from error on umount /proc if userns are used.
Remove btrfs subvolumes
rpm: added dependency to lxc-libs to lxc package
seccomp: add aarch64 support
seccomp: add ppc support
seccomp: add rule to reject umount -f
seccomp: simplify and fix rule parsing
Skip control tty code for non-ttys
Sort the cgroup memory settings before applying
Support unprivileged ephemeral container using aufs
Tear down network devices during container halt
Uniformly nullify std fds
Use /dev/loop-control if it exists
Use \'overlay\' as fs name when needed
use poll instead of select when possible
Use POSIX-compliant function names in bash completion
Use rdepends when non-thinpool LVM container is cloned
When creating container, save configuration if rootfs already exists
Documentation:
Add the note related mount in Japanese lxc.container.conf(5)
Add about zfs, aufs, overlayfs to \'-s\' option of lxc-clone(1)
Add doc for optional, create=dir and create=file in lxc.container.conf man
Add long option for -P in documentation
Add LXC-specific mount option in Japanese lxc.container.conf(5)
Add options of \'loop\' backingstore to lxc-create(1)
Add -P lxcpath and --version to lxc-ls manpage
Add \'--storage-type\' option to lxc-start-ephemeral(1)
Add the description for -P and --version to English and Japanese lxc-ls(1)
Add the description for --version to English and Japanese common_options
Add the use of \'attach\' to lxc-start-ephemeral(1)
clarify the description of the veth network type in the manpage.
Fix the mistranslation about lxc.group in Japanese lxc.container.conf(5)
Fresh CONTRIBUTING
Remove unnecessary common options from lxc-user-nic(1)
Translate untranslated section titles in Japanese man pages
Update MAINTAINERS
Update the description of -L option in lxc-autostart(1)
Update the description of the veth in the Japanese lxc.container.conf(5)
Bindings:
lua: Fix 5.3 compatibility code.
lua: fix crash on missing blkio
lua: Small fix for 5.3 compatibility.
Tests:
enable cgmanager support for Travis CI
lxc-test-apparmor: flush the pipe before exiting child
lxc-test-symlink: add a test using absolute symlink
Update Travis configuration
Use \'cgm listcontrollers\' list rather than /proc/self/cgroups
Config:
lxc-net.conf: use +e at teardown
Templates:
lxc-alpine: avoid GNU BRE extensions for better portability
lxc-alpine: create /dev/shm before mounting
lxc-alpine: fix verification of apk.static binary
lxc-alpine: use getopt to parse options
lxc-alpine: use yaml for detection of latest release
lxc-altlinux: fix parsing of option \"--clean\": it takes no argument
lxc-altlinux: protect possibly unset variable with quotes for -z check
lxc-archlinux: Fix systemd-sysctl service
lxc-busybox: fix unprivileged containers
lxc-centos: Added a more reliable test for yum --releasever
lxc-{centos|fedora}: Respect --rootfs
lxc-centos: fix big big login delays in Centos 7
lxc-centos: Fix booting a Centos 6 container
lxc-centos: fix parsing of option \"--clean\": it takes no argument
lxc-centos: fix tab/space mixup in help text.
lxc-centos: pass releasever parameter to yum
lxc-centos: protect possibly unset variable with quotes for -z check
lxc-centos: use hostname for DHCP_HOSTNAME in ifcfg-eth0
lxc-debian: Alternative test for dpkg multiarch support
lxc-debian: debootstrap failed when $GREP_OPTIONS is set
lxc-debian: document \"--clean\" in the usage.
lxc-debian: Fixed errors if dbus is not installed
lxc-debian: fix parsing of option \"--clean\": it takes no argument.
lxc-debian: improve help text
lxc-debian: protect possibly unset variable with quotes for -z check
lxc-debian: reconfigure locales
lxc-debian: skip security updates for unstable/sid
lxc-debian: support stretch (Debian 9) images
lxc-debian: Test dpkg for multiarch support
lxc-download: fix typo in help text.
lxc-download: improve help text.
lxc-download: make --list more useful.
lxc-fedora: Add support for \"--mask-tmp\"
lxc-fedora: Default to 22 but use 20 squashfs
lxc-fedora: Default to Fedora 21 as 22 no longer uses yum
lxc-fedora: fix parsing of option \"--clean\": it takes no argument
lxc-fedora: In fedora21, the fedora-repos package is needed.
lxc-fedora: let help text fit into 80 columns
lxc-fedora: manage secondary architectures
lxc-fedora: protect possibly unset variable with quotes for -z check
lxc-fedora: when using systemd, set lxc.kmsg = 0 in the config
lxc-gentoo: Add a hwaddr if there is only one veth
lxc-gentoo: Add /dev/shm tmpfs mount entry
lxc-gentoo: Fix creation of dev/mqueue and dev/shm
lxc-gentoo: Fix the --auth-key flag
lxc-gentoo: Fix wget
lxc-openmandriva: fix parsing of option \"--clean\": it takes no argument
lxc-openmandriva: protect possibly unset variable with quotes in -z check
lxc-opensuse: default release changed to 13.1, as 12.3 reaches end-of-life soon
lxc-opensuse: Disable building openSUSE containers on 13.2/Tumbleweed only if wrong version of build package is installed
lxc-opensuse: fix parsing of option \"--clean\": it takes no argument
lxc-opensuse: protect possibly unset variable with quotes in -z check
lxc-opensuse: use rpm to determine build version
lxc-oracle: Fix /dev/shm
lxc-ubuntu-cloud: Never exit 0 when no container is created
lxc-ubuntu-cloud: Replace .tar.gz by .tar.xz and don\'t auto-generate missing tarballs
lxc-ubuntu: Drop lucid support and refresh releases list
Commands:
Fix grammar in some of the executables \"NAME for name of the container\" becomes \"NAME of the container\"
lxc-autostart: Fix broken output
lxc-checkconfig: Update to work with kernel versions > 3
lxc-create: Fix -h with absolute template path
lxc-create: Require --template be passed
lxc-destroy: actually work if underlying fs is overlayfs
lxc-start: added pid parameter
lxc-start-ephemeral: fix pep-8 and pyflakes3
lxc-start-ephemeral: handle the overlayfs workdir option (v2)
lxc-start-ephemeral: Parse passwd directly
lxc-usernsexec: reopen fds 0,1,2 separately

Sat Jan 31 13:00:00 2015 opensuse_buildserviceAATTojkastl.de
- added patches from lxc package in Virtualization:
0003-lxc-opensuse-template-now-understands-release-argume.patch

* opensuse template: creating containers with 13.1 or 13.2 is now possible
0004-lxc-opensuse.in-Added-explanation-on-how-to-use-the-.patch

* opensuse template: updated usage to include release selection
0005-lxc-opensuse.in-Check-if-given-argument-is-a-valid-r.patch

* opensuse template: check if the argument given is a valid release
0006-lxc-opensuse-default-release-changed-to-13.1-as-12.3.patch

* opensuse template: as 12.3 is end-of-life, 13.1 is the new default release
0007-lxc-opensuse-Disabling-builds-on-13.2-Tumbleweed-onl.patch

* opensuse template: disable creating opensuse containers, when the faulty version of build package is installed (bnc#905638)

Fri Jan 30 13:00:00 2015 opensuse_buildserviceAATTojkastl.de
- adjusted spec to upstream spec, bringing the changes in shape to be sent upstream; no more excludes for stuff in %{_libexecdir}/%{name}/

Wed Jan 28 13:00:00 2015 opensuse_buildserviceAATTojkastl.de
- lxc now depends on lxc-libs on the corresponding version release

Fri Jan 16 13:00:00 2015 opensuse_buildserviceAATTojkastl.de
- openSUSE/SUSE related stuff without version check, except systemd-related things

Fri Jan 16 13:00:00 2015 opensuse_buildserviceAATTojkastl.de
- rpmlint errors for lxc service files fixed

Sun Dec 7 13:00:00 2014 opensuse_buildserviceAATTojkastl.de
- update to 1.0.7

Thu Oct 30 13:00:00 2014 opensuse_buildserviceAATTojkastl.de
- added patch 0001-added-upstream-action-fallback-create-directory-loca.patch

* lxc-autostart-helper: checks if \"$localstatedir\"/lock/subsys exists, if not it is created

* ported back upstream fallback for missing action command in lxc-autostart-helper

Thu Oct 16 14:00:00 2014 opensuse_buildserviceAATTojkastl.de
- update to 1.0.6
rootfs_is_blockdev: don\'t run if no rootfs is specified
confile: sanity-check netdev->type before setting netdev->priv elements
Fix typo in previous patch
Remove mention of mountcgroups in ubuntu.common config
remove mountcgroup hook entirely
Add SIGPWR support to lxc_init
Sysvinit script fixes
unprivileged containers: use next available nic name if unspecified
fix typo in btrfs error msg
apparmor: Allow slave bind mounts
provide an example SELinux policy for older releases
print a helpful message if creating unpriv container with no idmap
use non-thread-safe getpwuid and getpwgid for android
btrfs: support recursive subvolume deletion (v2)
fix \'--log-priority\' --> \'--logpriority\' in main
Fix a file descriptor leak in the daemonization
Fix a file descriptor leak in the monitord spawn
Ensure /dev/pts directory exists on pts setup
Do not allow snapshots of LVM backed containers
add lxc.console.logpath
coverity: don\'t use newname after null check
coverity: malloc the right size for btrs_node tree
introduce --with-distro=raspbian
cgmanager get/set: clean up child (v2)
Add extra debugging
Fix typo in the previous commit...
do_mount_entry: add nexec, nosuid, nodev, rdonly flags if needed at remount
command socket: use hash if needed
monitor: fix sockname calculation for long lxcpaths
show additional info if btrfs subvolume deletion fails (issue #315)
ignore SIGKILL (CTRL-C) and SIGQUIT (CTRL-\\) - issue #313
chmod container dir to 0770 (v2)
build: Fix support for split build and source dirs
mount_entry: use statvfs
lxc_mount_auto_mounts: honor existing nodev etc at remounts
statvfs: do nothing if statvfs does not exist (android/bionic)
Prevent compiler warning by initializing ifindex
build: don\'t remove configuration template on clean
build: Make setup.py run from srcdir to avoid distutils errors
handle hashed command socket names (v2)
lxc-cgm: fix issue with nested chowning
Report container exit status to monitord
support use of \'all\' containers when cgmanager supports it
log: fix quiet mode
Fix build error(ISO C90 specs violation) in lxc.c
lxc_map_ids: don\'t do bogus chekc for newgidmap
lxc_map_ids: add a comment
clean autodev dir on container exit
As discussed on ML, do not clean autodev dir on reboot
Fix build failure due to slightly different rmdir
Fix presentation of IPv6 addresses and gateway
lxc-start: Add -F (foreground) option
all: Discontinue the use of in-line comments (stable)
all: Include hostname in DHCP requests
all: Switch from arch command to uname -m
altlinux: bugfixes
archlinux: Properly set default locale in /etc/locale.conf
centos template: prevent mingetty from calling vhangup(2)
download: Have wget retry 3 times
download: Make --keyserver actually work
gentoo: keep original uid/gid of files/dirs when installing
gentoo: Use portageq to determine portage distdir
plamo: keep original uid/gid of files/dirs when installing
plamo: bugfix template
ssh: send hostname to dhcp server
ubuntu: don\'t check for $rootfs/run/shm
ubuntu: add help string
lxc-test-{unpriv,usernic.in}: make sure to chgrp as well
lxc-test-unpriv: test lxc-clone -s
tests: Call sync before testing a shutdown
tests: Copy the download cache when available [v2]
Fix the unprivileged tests cgroup management
doc: Mention that veth.pair is ignored for unpriv
doc: Add mention that veth.pair is ignored for unpriv in Japanese man
doc: Add -F option to Japanese lxc-start(1)
doc: Update the description of SELinux in Japanese lxc.container.conf(5)
doc: Add \'zfs\' to the parameter of -B option in lxc-create(1)
doc: add lxc.console.logpath to Japanese lxc.container.conf(5)
doc: language correction
doc: Fix Japanese translation of lxc.container.conf(5)
doc: Add destroy option to lxc-snapshot(1)
doc: Add description about ignoring lxc.cgroup.use when using cgmanager

Thu Oct 16 14:00:00 2014 opensuse_buildserviceAATTojkastl.de
- added include for lxc-monitord in file-section of libs-package, this time correctly...

Thu Oct 16 14:00:00 2014 opensuse_buildserviceAATTojkastl.de
- removed lxc-monitord in files section again

Thu Oct 16 14:00:00 2014 opensuse_buildserviceAATTojkastl.de
- added lxc-monitord for libs-package

Thu Aug 14 14:00:00 2014 opensuse_buildserviceAATTojkastl.de
- cleaned up unnecessary stuff

Thu Aug 14 14:00:00 2014 opensuse_buildserviceAATTojkastl.de
- multiple Requires and BuildRequires instead of single lines

Wed Aug 13 14:00:00 2014 opensuse_buildserviceAATTojkastl.de
- some more cleaning up / messing around

Wed Aug 13 14:00:00 2014 opensuse_buildserviceAATTojkastl.de
- clarified some %if-clauses
- more %if-clause for CentOS/RHEL

Wed Aug 13 14:00:00 2014 opensuse_buildserviceAATTojkastl.de
- disabled docbook2x-dependency on RHEL/CENTOS

Tue Aug 12 14:00:00 2014 opensuse_buildserviceAATTojkastl.de
- further adjustments to avoid rpmlint warnings
- try to get it to build on Fedora/RHEL/CentOS

Tue Aug 12 14:00:00 2014 opensuse_buildserviceAATTojkastl.de
- getting rid of some rpmlint warnings

Tue Aug 12 14:00:00 2014 opensuse_buildserviceAATTojkastl.de
- update to 1.0.5
- cleaned up spec to handle SUSE-specifics with %if-blocks

Fri Jun 13 14:00:00 2014 opensuse_buildserviceAATTojkastl.de
- deleted two lines to stop /var/lib and /var/cache from being owned by lxc

Fri Jun 13 14:00:00 2014 opensuse_buildserviceAATTojkastl.de
- update to 1.0.4

Mon May 19 14:00:00 2014 opensuse_buildserviceAATTojkastl.de
- deleted two commented lines

Mon May 19 14:00:00 2014 opensuse_buildserviceAATTojkastl.de
- lxc-top is now in package lua

Mon May 19 14:00:00 2014 opensuse_buildserviceAATTojkastl.de
- added if-clause for fedora/rhel7 and define buildrequires

Mon May 19 14:00:00 2014 opensuse_buildserviceAATTojkastl.de
- enabled with_lua

Sun May 18 14:00:00 2014 opensuse_buildserviceAATTojkastl.de
- now being properly built without setuid for lxc-user-nic

Sun May 18 14:00:00 2014 opensuse_buildserviceAATTojkastl.de
- using upstream spec and splitting packages like upstream

Sun May 18 14:00:00 2014 opensuse_buildserviceAATTojkastl.de
- some more changes to spec to reduce rpmlint warnings

Sun May 18 14:00:00 2014 opensuse_buildserviceAATTojkastl.de
- changed package name to lxc-vanilla and based it on upstream spec file

Sat May 17 14:00:00 2014 opensuse_buildserviceAATTojkastl.de
- added --enable-lua to compile lxc with lua support (for lxc-top)

Sat May 17 14:00:00 2014 opensuse_buildserviceAATTojkastl.de
- added \"Requires: lua\", as lxc-top needs it

Mon May 5 14:00:00 2014 opensuse_buildserviceAATTojkastl.de
- added file /usr/sbin/rxlcx that links to /usr/sbin/service

Mon May 5 14:00:00 2014 opensuse_buildserviceAATTojkastl.de
- upgrade to version 1.0.3
- deleted patch patch_bash_completion.d_lxc.patch, as it is included upstream already
- added file /usr/sbin/init.lxc

Sun Mar 2 13:00:00 2014 opensuse_buildserviceAATTojkastl.de
- patch now including headers and signoff

Sun Mar 2 13:00:00 2014 opensuse_buildserviceAATTojkastl.de
- updated sources to 1.0.0
- added dirs and files in /etc/apparmor.d/ and /etc/bash_completion.d/ to spec file
- autogenned.patch: removed
- added patch patch_bash_completion.d_lxc.patch, to remove shebang from bash_completion-file
- The patch patch_bash_completion.d_lxc.patch has been sent upstream additionally

Tue Jan 14 13:00:00 2014 jslabyAATTsuse.com
- update to lxc-1.0 beta

* we use a later snapshot than beta1
- drop support for older distros than 12.3 (it does not build there)
- config_ipv6-run-inet_pton-on-the-addr-value-without-.patch: Removed
- configure-find-seccomp-using-pkg-config.patch: Removed
- configure-support-suse-s-docbook-to-man.patch: Removed
- lxc-opensuse-add-perl-base-to-prerequisities.patch: Removed
- opensuse-systemd-shutdown.patch: Removed

Thu Jan 9 13:00:00 2014 jslabyAATTsuse.com
- config_ipv6-run-inet_pton-on-the-addr-value-without-.patch:
config_ipv6: run inet_pton on the addr value without mask
(bnc#851760)

Fri Sep 20 14:00:00 2013 jslabyAATTsuse.com
- lxc-opensuse-add-perl-base-to-prerequisities.patch: lxc-opensuse:
add perl-base to prerequisities (bnc#839873)

Tue Sep 10 14:00:00 2013 cbosdonnatAATTsuse.com
- opensuse-systemd-shutdown.patch: Fixed opensuse template to
workaround lxc-shutdown problem with systemd (bnc#839388)

Wed Apr 24 14:00:00 2013 jslabyAATTsuse.com
- update to 0.9.0

* configure-support-suse-s-docbook-to-man.patch: added to support
our docbook-to-man

* configure-find-seccomp-using-pkg-config.patch: add support for
our libsseccomp being under /usr/include/libseccomp...

* autogenned.patch: the two above applied by autogen.sh to the sources

* remove a ton of patches which are upstream now:
0001-Ensure-btrfs-subvolume-is-destroyed-on-error.patch
lxc-autodev.patch
lxc-cgroup-already-running.patch
lxc-opensuse-12.2.patch
lxc-opensuse-12.3.patch
lxc-opensuse-clonefixes.patch
lxc-opensuse-extend-base.patch
lxc-opensuse-proper-failure.patch
lxc-opensuse-tmpfs.patch
pivot-root_shared.patch
- Remove obsolete info from README.SUSE

Thu Mar 7 13:00:00 2013 fcrozatAATTsuse.com
- Ensure update repository directory is correctly created
(bnc#804435).

Tue Feb 26 13:00:00 2013 mvyskocilAATTsuse.com
- clean cache if a distro version in template does not match
with files in a cache (bnc#804435#c19)

Tue Feb 26 13:00:00 2013 mvyskocilAATTsuse.com
- run zypper ar only if .repo file does not exists
fixes a partial created repos (bnc#804435#c16)

Wed Feb 20 13:00:00 2013 fcrozatAATTsuse.com
- Add lxc-opensuse-12.3.patch: update template to openSUSE 12.3

Tue Feb 19 13:00:00 2013 jslabyAATTsuse.com
- lxc-opensuse-extend-base.patch: lxc-opensuse: extend base
(bnc#804232)
- lxc-opensuse-proper-failure.patch: lxc-opensuse: proper failure
- remove change-hwaddr-on-clone.patch as it was fixed upstream
already

Mon Jan 21 13:00:00 2013 fcrozatAATTsuse.com
- Update pivot-root_shared.patch with upstream patch to build with
old version of kernel headers.
- Check for /etc/init.d/boot.cgroup presence before starting it in
%post.

Fri Jan 11 13:00:00 2013 fcrozatAATTsuse.com
- Release 0.8.0:
+ add support for autodetection of gateway address
+ add support for LVM2 and btrfs snapshot in lxc-clone
+ add support for apparmor
+ support nested cgroups
+ lxc no longer depends on perl
+ add support for container hooks (pre-start, mount, start, stop,
umount, post-stop)
+ templates are moved to /usr/share/lxc/templates
- Remove
Accurately-detect-whether-a-system-supports-clone_children.patch:
merged upstream.
- Add lxc-opensuse-clonefixes.patch: fix openSUSE template
regarding cloning.
- Add 0001-Ensure-btrfs-subvolume-is-destroyed-on-error.patch: fix
btrfs subvolume when removing a container.
- Add lxc-autodev.patch: fill /dev when starting container (needed
for systemd).
- Update lxc-opensuse-12.2.patch: switch to systemd in container.

Fri Jan 11 13:00:00 2013 fcrozatAATTsuse.com
- Add lxc-opensuse-12.1-fixbuild.patch: fix openSUSE 12.1 container
build.
- Add lxc-opensuse-12.2.patch:
+ switch openSUSE template to 12.2
+ install iputils in the default configuration
+ autoconfigure gateway if possible
+ detect if network is set to 0.0.0.0 and configure DHCP
+ bind mount /etc/resolv.conf in container
- Add use-relative-paths-for-container.patch,
fix-lxc-clone-mount-entries.patch and update sles
template: use relative paths for container mount points, fixes
lxc-clone dropping some lxc.mount entries (bnc#789387).
- Add Requires(post) dependency on aaa_base (bnc#786970) for
openSUSE < 12.3.
- Add dhcpcd in default installation in openSUSE template (bnc#776169).
- Add change-hwaddr-on-clone.patch: modify MAC address when cloning
a container (git)
- Add wait-until-container-is-stopped.patch: if destroying a
running container, wait until it is stopped before destroying it.
- Ensure lxc-createconfig uses opensuse template by default.
- Ensure lxc-createconfig correctly detect cidr (bnc#773234).
- Add pivot-root_shared.patch: fix pivot root when / is mounted as
shared (default on 12.3 and later).

Fri Apr 20 14:00:00 2012 fcrozatAATTsuse.com
- Add various fixes to opensuse template :
+ create /etc/hostname as symlink to /etc/HOSTNAME
(lxc-clone fix)
+ fix inadequate space in lxc.mount config (lxc-clone fix)
+ disable network in container if not configured
+ configure network scripts properly
- Add lxc-snapshot-btrfs-lvm.patch: backport snapshot support,
using btrfs or lvm2.
- Add lxc-opensuse-tmpfs.patch: ensure container shutting down is
correctly detected by LXC.

Fri Apr 13 14:00:00 2012 fcrozatAATTsuse.com
- Add lxc-createconfig script to easy LXC configuration
(bnc#723950).

Tue Mar 6 13:00:00 2012 jslabyAATTsuse.de
- Accurately detect whether a system supports clone_children
(bnc#750470)

Tue Jan 10 13:00:00 2012 fcrozatAATTsuse.com
- Drop lxc-file_caps.patch, it is SLES specific, since openSUSE is
now shipping with file capabilities enabled.

Fri Jan 6 13:00:00 2012 fcrozatAATTsuse.com
- Update lxc-opensuse-12.1.patch to correctly generate containers
on x86 (bnc#739315).
- Backport some fixes from SLES 11 SP2:
- Add lxc-checkconfig-kernel-3.patch and lxc-file_caps.patch:
fix detection of kernel 3.x and file capabilities (bnc#720845).
- Fix example path in manpages (bnc#723946).

Tue Oct 25 14:00:00 2011 fcrozatAATTsuse.com
- Add console to opensuse securetty, since we are in a container.

Tue Oct 25 14:00:00 2011 fcrozatAATTsuse.com
- Add lxc-opensuse-12.1.patch: create openSUSE 12.1 containers now
- Add Recommends on build package, which is used by opensuse
template.
- Update README.SUSE to current status for cgroups mountpoint

Fri Sep 2 14:00:00 2011 fcrozatAATTsuse.com
- Fix license tag, it is LGPLv2.1+ (using LGPLv2+ tag to be
consistent).

Wed Aug 31 14:00:00 2011 fcrozatAATTsuse.com
- Update to 0.7.5:
- add initial lxc-clone feature
- add arm as supported srcarch
- opensuse template is merged
- improve other distribution templates
- support cgroups mounted in multiple places

Fri Jun 24 14:00:00 2011 jslabyAATTsuse.de
- kill _service

Fri Jun 24 14:00:00 2011 fcrozatAATTsuse.com
- Add lxc-opensuse template.
- package /var/lib/lxc.

Fri May 27 14:00:00 2011 jslabyAATTsuse.de
- update to 0.7.4.2
- exit if allocation fails
- ensure monitored container name is null terminated
- do not put devpts in fstab

Thu Mar 24 13:00:00 2011 brianAATTaljex.com
- update to 0.7.4.1
- fix mount path
- rename physical device to the original name

Mon Feb 28 13:00:00 2011 jslabyAATTsuse.de
- update to 0.7.4 final
- fix support for >= 2.6.37 kernels
- update README.SUSE file -- it contained obsolete information

Mon Feb 21 13:00:00 2011 jslabyAATTsuse.de
- update to 0.7.4-rc1+
- fix cgroups collision with systemd (bnc#673821)
- lxc-start output-to-file support
- better error reporting
- suppress udev log output
- many fixes

Mon Dec 20 13:00:00 2010 jslabyAATTsuse.de
- update to 0.7.3
- mount the rootfs to the mount directory first
- update the lxc.conf man page
- fix compilation and link errors
- don\'t play with the capabilities when we are root

Wed Oct 6 14:00:00 2010 jslabyAATTsuse.de
- update to 0.7.2

Mon Jul 5 14:00:00 2010 jslabyAATTsuse.de
- update to 0.7.1

* full list of changes since 0.6.5 at http://lxc.git.sourceforge.net

Fri Mar 5 13:00:00 2010 lnusselAATTsuse.de
- add README.SUSE
- add %dir /var/lib/lxc

Thu Mar 4 13:00:00 2010 jslabyAATTsuse.de
- update to 0.6.5

Wed Aug 19 14:00:00 2009 jslabyAATTsuse.de
- remove stddef.h workaround, linux-kernel-headers are fixed now

Tue Aug 18 14:00:00 2009 jslabyAATTsuse.de
- remove mkdir /var/lxc from %post rpm script

Mon Aug 17 14:00:00 2009 jslabyAATTsuse.de
- Remove old lxc hack from specfile
- Fix factory build due to broken linux-kernel-headers
(add stddef.h to includes in configure.ac) and lxc automake file

Thu Aug 13 14:00:00 2009 adrianAATTsuse.de
- Add Requires to ensure that lxc-setcap is working

Mon Aug 10 14:00:00 2009 jslabyAATTsuse.de
- update to 0.6.3
- add pkgconfig file to devel package

Tue Jun 23 14:00:00 2009 jslabyAATTsuse.de
- add linux-kernel-headers to build prereqs

Mon May 4 14:00:00 2009 jslabyAATTsuse.de
- update to 0.6.2: fixes creation scripts for several distros,
adds logging, adds lxc-setcap

Fri Apr 17 14:00:00 2009 crrodriguezAATTsuse.de
- remove static libraries