Name: | lxc |
---|---|
Version: | 1.0.7 |
Release: | 2.0.8.el7 |
Architecture: | x86_64 |
Group: | Applications/System |
Size: | 685096 |
License: | LGPLv2+ |
RPM: | lxc-1.0.7-2.0.8.el7.x86_64.rpm |
Source RPM: | lxc-1.0.7-2.0.8.el7.src.rpm |
Build Date: | Thu Aug 13 2015 |
Build Host: | x86-ol7-builder-02.us.oracle.com |
Vendor: | Oracle America |
URL: | http://linuxcontainers.org |
Summary: | Linux Containers userspace tools |
Description: | Containers are insulated areas inside a system, which have their own namespace for filesystem, network, PID, IPC, CPU and memory allocation and which can be created using the Control Group and Namespace features included in the Linux kernel. This package provides the lxc-* tools, which can be used to start a single daemon in a container, or to boot an entire "containerized" system, and to manage and debug your containers. |
- [Orabug 21603129] mount /proc/sys/kernel/msgmni as r/w in container - [Orabug 21418260] using OL6/7 OVM templates to create container - Includes the lxc-lib dependency when upgrading LXC.
- [Orabug 21533491] CVE-2015-1334: Don't use the container's /proc during attach
- [Orabug 21526922] CVE-2015-1331: LXCLOCK: USE /RUN/LXC/LOCK RATHER THAN /RUN/LOCK/LXC
- [Orabug 21267882] Make some of the global parameters as read-only inside the container.
- [Orabug 21233392] Oracle Linux Container enhancement. We are introducing 3 enhancements (introducing --privileged flag for lxc-oracle, new configuration file for more privileged lxc use case and dynamic RT management script).
- [Orabug 20465908] Go ahead and backport upstream commit 18aa217b. The symlink workaround was too hackish. With this change, the lock file names in /run/lock/lxc/container change from <name> to .<name> but snapshots need <name> to now be a directory so we remove any old lock files that might be there in %post.
- [Orabug 20465908] Introduce a workaround for creating btrfs snapshots by symlinking /containersnaps to a dir in /container. Snapshots will thus be created in the same btrfs. The real fix is upstream commit 18aa217b, but that is too invasive to backport to 1.0.x.
- update to upstream 1.0.7
- update to upstream 1.0.6 - explicitly mention lxc-autostart-helper in %files to match upstream
- add libselinux-devel to BuildRequires so that lxc detects SELinux in the build environment and builds support for it