Index index by Group index by Distribution index by Vendor index by creation date index by Name Mirrors Help Search

lxc-4.0.12-1.1 RPM for i586

From OpenSuSE Tumbleweed for i586

Name: lxc Distribution: openSUSE Tumbleweed
Version: 4.0.12 Vendor: openSUSE
Release: 1.1 Build date: Thu Feb 24 18:29:32 2022
Group: System/Management Build host: old-atreju2
Size: 1209035 Source RPM: lxc-4.0.12-1.1.src.rpm
Packager: https://bugs.opensuse.org
Url: http://linuxcontainers.org/
Summary: Userspace tools for Linux kernel containers
LXC is the well-known and heavily tested low-level Linux container runtime.

Provides

Requires

License

LGPL-2.1-or-later

Changelog

* Tue Feb 22 2022 Johannes Kastl <kastl@b1-systems.de>
  - update to 4.0.12:
    Bugfixes¶
    * Fixed CRIU restoration of containers with pre-created veth interfaces
    * Fixed issue with kernels lacking SMT support
    * Extended cgroup2 config options in lxc.mount.auto (cgroup2)
    * lxc-download now relies on HTTPS for validation (avoids GPG issues)
  - drop patch 0003-templates-lxc-download.in-use-GPG-option-receive-key.patch as
    upstream remove the GPG functionality
* Tue Feb 22 2022 Johannes Kastl <kastl@b1-systems.de>
  - update to 4.0.11:
    Bugfixes
    * Core scheduling support (lxc.sched.core)
    * riscv64 support in lxc.arch
    * Significantly improved bash completion profile
    * Greater use of the new VFS mount API (when supported by the kernel)
    * Fix containers with empty network namespaces
    * Handle kernels that lack TIOCGPTPEER
    * Improve CPU bitmask/id handling (handle skipped CPU numbers)
    * Reworked the tests to run offline
* Tue Oct 12 2021 Johannes Kastl <kastl@b1-systems.de>
  - use --withpamdir and use pam macros to fix UsrMerge problems
  - update to 4.0.10
    Bugfixes
    * Fix issues with less common architectures
    * Support for additional idmap mounts
    * nft support in lxc-net
    * Cleaner mount entries for sys:mixed
    * Switched GPG server to keyserver.ubuntu.com
* Mon May 31 2021 Johannes Kastl <kastl@b1-systems.de>
  - fix wrong Source URLs in spec
* Mon May 24 2021 Johannes Kastl <kastl@b1-systems.de>
  -update to 4.0.9:
    * You may have noticed the sudden jump from 4.0.6 to 4.0.9,
    that's because 4.0.7 and 4.0.8 both included regressions that were
    reported by early users and were considered bad enough to require a new release.
    * Testing improvements including fixes from oss-fuzz
    * Rework of the attach codepath
    * Cgroup handling rework
    * for full list of changes see
    https://discuss.linuxcontainers.org/t/lxc-4-0-9-lts-has-been-released/10999
* Mon May 24 2021 Johannes Kastl <kastl@b1-systems.de>
  - update to 4.0.6:
    * Improve handling for compatibility architectures for seccomp
    * Harden seccomp notifier implementation
    * Rework parsing of /proc/<pid>/mountinfo to handle kernel regression https://bugzilla.kernel.org/show_bug.cgi?id=209971
    * Improve network device restoration
    * Significantly cleanup and harden config file parsing
    * Support new capabilities CAP_PERFORM, CAP_BPF, and CAP_CHECKPOINT_RESTORE
    * Harden containers started without CAP_NET_ADMIN
    * for full list of changes see
    https://discuss.linuxcontainers.org/t/lxc-4-0-6-lts-has-been-released/9926
* Thu Nov 05 2020 Dirk Mueller <dmueller@suse.com>
  - update to 4.0.5:
    * Support allocating PTS devices from within the container
    * Harden more path/mount handling logics
    * Rework LSM logic to limit initializer use
    * for full list of changes see
    https://discuss.linuxcontainers.org/t/lxc-4-0-5-lts-has-been-released/9269
  - remove 0001-templates-lxc-download.in-fix-wrong-if-condition-use.patch,
    0002-templates-lxc-download.in-make-shellcheck-happy.patch (upstream)
* Wed Jul 08 2020 Johannes Kastl <kastl@b1-systems.de>
  - add patches from upstream:
    * 0001-templates-lxc-download.in-fix-wrong-if-condition-use.patch
    * 0002-templates-lxc-download.in-make-shellcheck-happy.patch
    * 0003-templates-lxc-download.in-use-GPG-option-receive-key.patch
* Tue May 12 2020 Pavol Cupka <palica@liguros.net>
  - Update to LXC 4.0.2
    - https://discuss.linuxcontainers.org/t/lxc-4-0-2-lts-has-been-released/7449
* Tue Apr 14 2020 Paolo Stivanin <info@paolostivanin.com>
  - Update to LXC 4.0.1:
    + Tweak systemd ordering (start after remote-fs.target)
    + Fix various issues around attach and cgroups
    + Fix shutdown timeout not working on pidfd systems
    + Fix cgroup issue on 4.9 kernel
    + Fix write issues in /dev/stdout
  - Remove 0001-autotools-don-t-install-run-coccinelle.sh.patch
  - Remove 0002-cgroups-fix-uninitialized-transient_len-warning.patch
  - Remove 0003-cgroups-fix-build-warning-on-GCC-7.patch
* Tue Apr 07 2020 Aleksa Sarai <asarai@suse.com>
  - Fix mis-use of %suse_version when we actually want to check against
    %sle_version when determining whether lxc-user-nic should be setuid.
* Thu Apr 02 2020 Aleksa Sarai <asarai@suse.com>
  - Add backport of https://github.com/lxc/lxc/pull/3347 and
    https://github.com/lxc/lxc/pull/3349 to fix builds on Leap.
    + 0002-cgroups-fix-uninitialized-transient_len-warning.patch
    + 0003-cgroups-fix-build-warning-on-GCC-7.patch
* Wed Apr 01 2020 Aleksa Sarai <asarai@suse.com>
  - Update to LXC 4.0.0. The full upstream changelog is available from:
    https://discuss.linuxcontainers.org/t/lxc-4-0-lts-has-been-released/7182
    Related to the LXD 4.0.0 update (boo#1168338).
    + cgroups: Full cgroup2 support
    + cgroups: Freezer support in CGroup2
    + cgroups: eBPF device controller support in CGroup2
    + AppArmor: Deny access to /proc/acpi/**
    + config: Add lxc.autodev.tmpfs.size configuration key
    + config: Add lxc.selinux.context.keyring key
    + config: Add lxc.keyring.session
    + seccomp: Add s390 support
    * network: Improved network device creation and removal
    + network: Allow moving wireless devices
  - Add backport of patch to fix build:
    + 0001-autotools-don-t-install-run-coccinelle.sh.patch
  - Remove upstreamed patches:
    - lxc-3.2.1-cgroups-init-cpuset-properly.patch
    - 0001-tree-wide-initialize-all-auto-cleanup-variables.patch
* Mon Feb 03 2020 Dominique Leuenberger <dimstar@opensuse.org>
  - BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
    shortcut through the -mini flavors.
* Sun Feb 02 2020 Aleksa Sarai <asarai@suse.com>
  - Fix bash-completion paths to match the binary names (and to avoid conflicts
    with LXD). boo#1162426
* Mon Nov 11 2019 Pavol Cupka <palica@liguros.net>
  - adding a patch to fix "Containers fail to start regression lxc 3.2"
    - patch name: lxc-3.2.1-cgroups-init-cpuset-properly.patch
    - upstream issue - https://github.com/lxc/lxc/issues/3108
* Thu Sep 12 2019 Aleksa Sarai <asarai@suse.com>
  - Add backport of https://github.com/lxc/lxc/pull/3102 to fix build failures on
    openSUSE Leap.
    + 0001-tree-wide-initialize-all-auto-cleanup-variables.patch
  - Update to lxc 3.2.1. The changelog can be found at
    https://discuss.linuxcontainers.org/t/lxc-3-2-1-has-been-released/5322
    + seccomp: support syscall forwarding to userspace
    + add lxc.seccomp.allow_nesting
    + pidfd: Add initial support for the new pidfd api
    * Many hardening improvements.
    * Use /sys/kernel/cgroup/delegate file for cgroup v2.
    * Fix CVE-2019-5736 equivalent bug.
* Sat Apr 20 2019 Aleksa Sarai <asarai@suse.com>
  - Rework /var/adm/update-messages handling to be far less complicated, and more
    packaging-friendly (by update-messages be owned by the rpm) as well as
    storing the update message in a autoconf-templated source file.
* Wed Apr 10 2019 Dirk Mueller <dmueller@suse.com>
  - fix apparmor dropin to be compatible with LXC 3.1.0 (bsc#1131762)
* Sun Apr 07 2019 Aleksa Sarai <asarai@suse.com>
  - Avoid wrong permissions warning by conditionally setting the setuid bit based
    on what version of permissions is available in that distribution (makes no
    difference but results in less confusion to users).
* Mon Apr 01 2019 Aleksa Sarai <asarai@suse.com>
  - Fix builds on SLE12, by depending on apparmor-profiles instead of
    apparmor-abstractions. In addition, remove the Requires on abstractions.
* Fri Mar 29 2019 Jan Engelhardt <jengelh@inai.de>
  - Trim project history from package description.
* Tue Mar 26 2019 Aleksa Sarai <asarai@suse.com>
  - Update to LXC 3.1.0. The changelog is far too long to include here, please
    look at the changelogs posted on https://linuxcontainers.org/. boo#1131762
    * Includes fixes for CVE-2019-5736 bsc#1122185.
    + pam_cgfs is now provided by this package, since upstream has moved the
      sources to LXC (it used to be part of lxcfs).
    * All of the patches have been upstreamed or are no longer relevant:
    - 0001-apparmor-Allow-usr-lib-paths-for-mount-and-pivot_roo.patch
    - 0001-utils-add-LXC_PROC_PID_FD_LEN.patch
    - 0001-lxc-user-nic-verify-file-descriptor-stable-2.0.patch
    - 0001-Backport-autodev-fix-from-lxc-master.patch
    - 0001-PyOS_AfterFork-python3.7.patch
  - Add a warning if lxc-user-nic is not setuid after set_permissions, to ensure
    users actually read the warning (which means we get to remove README.SUSE).
    It also supports people using paranoid mode, which is why it's done in
    post-install and isn't packaged. boo#988348
  - Quite a lot of the runtime helpers and configuration have been moved to
    liblxc, in order to allow LXD to make use of them (because, in truth, they
    were always a requirement of liblxc and not just the lxc-* tools).
  - Add workaround for pre-15 distros, where _sharedstatedir was inexplicably
    /usr/com, to use the correct directory of /var/lib.
* Tue Mar 26 2019 Aleksa Sarai <asarai@suse.com>
  - Rework packaging to be a more modern openSUSE-style.
* Mon Feb 04 2019 Bjoern Voigt <bjoernv@arcor.de>
  - compilation fixed for Python 3.7
    (PyOS_AfterFork() replaced with PyOS_AfterFork_Child())
    added patch 0001-PyOS_AfterFork-python3.7.patch
* Sat Sep 15 2018 Johannes Kastl <kastl@b1-systems.de>
  - fix for bsc#988348 (lxc: enable setuid bit on lxc-user-nic)
    - do not remove setuid bit for lxc-user-nic on releases with suse_version >=1550
    - remove setuid stuff from README.SUSE on releases with suse_version >=1550
* Fri Sep 14 2018 Johannes Kastl <kastl@b1-systems.de>
  - move bash completion file from /etc/bash_completion.d/lxc to
    /usr/share/bash-completion/completions/ to avoid warning
* Mon Aug 27 2018 bernd-obs@wachter.fi
  - 0001-Backport-autodev-fix-from-lxc-master.patch: fix unprivileged
    lxc containers on kernel >= 4.18
* Fri Aug 03 2018 matthias.gerstner@suse.com
  - 0001-utils-add-LXC_PROC_PID_FD_LEN.patch: prerequisite for applying the
    next patch
  - 0001-lxc-user-nic-verify-file-descriptor-stable-2.0.patch: fix information
    leak and possible open() side effects accessible to regular users via
    lxc-user-nic (bsc#988348, CVE-2018-6556)
* Thu Jul 19 2018 mchandras@suse.de
  - Add upstream patch to fix container start up problems when AppArmor
    is enabled (boo#1099239)
    * 0001-apparmor-Allow-usr-lib-paths-for-mount-and-pivot_roo.patch
* Wed Jun 13 2018 dcassany@suse.com
  - Make use of %license macro

Files

/etc/apparmor.d/usr.bin.lxc-start
/etc/default/lxc
/etc/lxc
/etc/lxc/default.conf
/usr/bin/lxc-attach
/usr/bin/lxc-autostart
/usr/bin/lxc-cgroup
/usr/bin/lxc-checkconfig
/usr/bin/lxc-checkpoint
/usr/bin/lxc-config
/usr/bin/lxc-console
/usr/bin/lxc-copy
/usr/bin/lxc-create
/usr/bin/lxc-createconfig
/usr/bin/lxc-destroy
/usr/bin/lxc-device
/usr/bin/lxc-execute
/usr/bin/lxc-freeze
/usr/bin/lxc-info
/usr/bin/lxc-ls
/usr/bin/lxc-monitor
/usr/bin/lxc-snapshot
/usr/bin/lxc-start
/usr/bin/lxc-stop
/usr/bin/lxc-top
/usr/bin/lxc-unfreeze
/usr/bin/lxc-unshare
/usr/bin/lxc-update-config
/usr/bin/lxc-usernsexec
/usr/bin/lxc-wait
/usr/lib/systemd/system/lxc-net.service
/usr/lib/systemd/system/lxc.service
/usr/lib/systemd/system/lxc@.service
/usr/sbin/init.lxc
/usr/sbin/rclxc
/usr/sbin/rclxc-net
/usr/share/doc/packages/lxc
/usr/share/doc/packages/lxc/FAQ.txt
/usr/share/lxc
/usr/share/lxc/config
/usr/share/lxc/config/common.conf
/usr/share/lxc/config/common.conf.d
/usr/share/lxc/config/common.conf.d/30-openSUSE-apparmor.conf
/usr/share/lxc/config/common.conf.d/README
/usr/share/lxc/config/common.seccomp
/usr/share/lxc/config/nesting.conf
/usr/share/lxc/config/oci.common.conf
/usr/share/lxc/config/userns.conf
/usr/share/lxc/hooks
/usr/share/lxc/hooks/clonehostname
/usr/share/lxc/hooks/dhclient
/usr/share/lxc/hooks/dhclient-script
/usr/share/lxc/hooks/mountecryptfsroot
/usr/share/lxc/hooks/nvidia
/usr/share/lxc/hooks/squid-deb-proxy-client
/usr/share/lxc/hooks/ubuntu-cloud-prep
/usr/share/lxc/lxc-patch.py
/usr/share/lxc/lxc.functions
/usr/share/lxc/selinux
/usr/share/lxc/selinux/lxc.if
/usr/share/lxc/selinux/lxc.te
/usr/share/lxc/templates
/usr/share/lxc/templates/lxc-busybox
/usr/share/lxc/templates/lxc-download
/usr/share/lxc/templates/lxc-local
/usr/share/lxc/templates/lxc-oci
/usr/share/man/man1/lxc-attach.1.gz
/usr/share/man/man1/lxc-autostart.1.gz
/usr/share/man/man1/lxc-cgroup.1.gz
/usr/share/man/man1/lxc-checkconfig.1.gz
/usr/share/man/man1/lxc-checkpoint.1.gz
/usr/share/man/man1/lxc-config.1.gz
/usr/share/man/man1/lxc-console.1.gz
/usr/share/man/man1/lxc-copy.1.gz
/usr/share/man/man1/lxc-create.1.gz
/usr/share/man/man1/lxc-destroy.1.gz
/usr/share/man/man1/lxc-device.1.gz
/usr/share/man/man1/lxc-execute.1.gz
/usr/share/man/man1/lxc-freeze.1.gz
/usr/share/man/man1/lxc-info.1.gz
/usr/share/man/man1/lxc-ls.1.gz
/usr/share/man/man1/lxc-monitor.1.gz
/usr/share/man/man1/lxc-snapshot.1.gz
/usr/share/man/man1/lxc-start.1.gz
/usr/share/man/man1/lxc-stop.1.gz
/usr/share/man/man1/lxc-top.1.gz
/usr/share/man/man1/lxc-unfreeze.1.gz
/usr/share/man/man1/lxc-unshare.1.gz
/usr/share/man/man1/lxc-update-config.1.gz
/usr/share/man/man1/lxc-user-nic.1.gz
/usr/share/man/man1/lxc-usernsexec.1.gz
/usr/share/man/man1/lxc-wait.1.gz
/usr/share/man/man5/lxc-usernet.5.gz
/usr/share/man/man5/lxc.conf.5.gz
/usr/share/man/man5/lxc.container.conf.5.gz
/usr/share/man/man5/lxc.system.conf.5.gz
/usr/share/man/man7/lxc.7.gz
/usr/share/man/man8/pam_cgfs.8.gz


Generated by rpm2html 1.8.1

Fabrice Bellet, Mon Jun 6 23:23:49 2022