From: "Aaron Bauman" <bman@gentoo.org>
To: gentoo-commits@lists.gentoo.org
Subject: [gentoo-commits] repo/gentoo:master commit in: app-emulation/lxc/
Date: Wed, 22 Feb 2017 10:49:55 +0000 (UTC) [thread overview]
Message-ID: <1487760579.db0cb2620b129e83e26f87d64f33d9a03a8596df.bman@gentoo> (raw)
commit: db0cb2620b129e83e26f87d64f33d9a03a8596df
Author: Aaron Bauman <bman <AT> gentoo <DOT> org>
AuthorDate: Wed Feb 22 10:48:37 2017 +0000
Commit: Aaron Bauman <bman <AT> gentoo <DOT> org>
CommitDate: Wed Feb 22 10:49:39 2017 +0000
URL: https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=db0cb262
app-emulation/lxc: cleanup vulnerable wrt bug #556310
Package-Manager: portage-2.3.3
app-emulation/lxc/Manifest | 1 -
app-emulation/lxc/lxc-1.0.7.ebuild | 189 -------------------------------------
2 files changed, 190 deletions(-)
diff --git a/app-emulation/lxc/Manifest b/app-emulation/lxc/Manifest
index 8b894397e8..720dad3a06 100644
--- a/app-emulation/lxc/Manifest
+++ b/app-emulation/lxc/Manifest
@@ -1,4 +1,3 @@
-DIST lxc-1.0.7.tar.gz 564985 SHA256 a0b1b09592e076e270dcb3ba004616d9ac3147f9de0b78ca39a30f8956b0a8f2 SHA512 e6ff42a7b41177e1be0d2cd47d4c554565c7fc35355f3aa8aeba00d4adc7a0f364ecd060ddb6c97b2fe5968329c4e4c4b3cb022bffd2da145f30880f077264a8 WHIRLPOOL f07e5e9efb8ff394aa9cdd6c3e725b453c8137ec221399cbf910d57dbc9268fc84e7227273567792821415dc14e774942b76a58a1a478de57d5c82e545702000
DIST lxc-1.0.8.tar.gz 575127 SHA256 399ac3eb4e0a89d657fb2e2a57f686ed061d3f1ea4733e7521b1539e9906c7ee SHA512 f552a4f48bb47d26c6b9ddaf8221a439c0848e3f54ec41b77d54717c21bddd56193941046cc96c699790e8265e762a926469c25ee687adcf7795f2906b1c260a WHIRLPOOL 72cd0b8b0345692dd9a3ed8785ee27f5e575794a96c515db1f1d073c29be4c06ae8c1ee24fa375a5ede2bba2494704916710b2e8814ed991d43330a40dff3d56
DIST lxc-2.0.3.tar.gz 772448 SHA256 635afa330088fea57883018da326fc72f85460b5a6c7802ad68044381aff14f3 SHA512 df714f189ec7aa681710fbd58405b8958740102032c0130d8a0eaaae0341a9bc91a215136203c404ad79773800f620bf6f71f811b3effe559aed66efa4f34fef WHIRLPOOL 89ce2f6762c7279e24658c1154b5c2960d3db32e0ec3724b338f5d30da77cc0b33a2376e5eebe6d9c356bdd34c2aa9da1e2434aecd7e428fa4b729389e35b862
DIST lxc-2.0.4.tar.gz 775634 SHA256 57d40234aeecf5b60fb29d563e5a09d6a04c89e1267eb22a6704388ac8573e7b SHA512 3f985bba5aaa8a70f0329316ea4f42ab135d58c47611154c62e103718212a4b2c5e4f25fd45c372424db1fbf40afdc8269ae98655fb3bc8e31085a5d948f702b WHIRLPOOL b001c75d67d676e75b203d789cf2c0643ba9a47aa31965441340b66f28e18371415b9d44ce752e35102bc8677688eec6e586d800a33a2a965c8a046c091ebc06
diff --git a/app-emulation/lxc/lxc-1.0.7.ebuild b/app-emulation/lxc/lxc-1.0.7.ebuild
deleted file mode 100644
index b5128ed6c5..0000000000
--- a/app-emulation/lxc/lxc-1.0.7.ebuild
+++ /dev/null
@@ -1,189 +0,0 @@
-# Copyright 1999-2015 Gentoo Foundation
-# Distributed under the terms of the GNU General Public License v2
-# $Id$
-
-EAPI="5"
-
-MY_P="${P/_/-}"
-PYTHON_COMPAT=( python3_4 )
-DISTUTILS_OPTIONAL=1
-
-inherit autotools bash-completion-r1 distutils-r1 eutils linux-info versionator flag-o-matic systemd
-
-DESCRIPTION="LinuX Containers userspace utilities"
-HOMEPAGE="https://linuxcontainers.org/"
-SRC_URI="https://github.com/lxc/lxc/archive/${MY_P}.tar.gz"
-
-KEYWORDS="amd64 ~arm ~arm64 ppc64 x86"
-
-LICENSE="LGPL-3"
-SLOT="0"
-IUSE="doc examples lua python seccomp"
-
-RDEPEND="net-libs/gnutls
- sys-libs/libcap
- lua? ( >=dev-lang/lua-5.1:= )
- python? ( ${PYTHON_DEPS} )
- seccomp? ( sys-libs/libseccomp )"
-
-DEPEND="${RDEPEND}
- doc? ( app-text/docbook-sgml-utils )
- >=sys-kernel/linux-headers-3.2"
-
-RDEPEND="${RDEPEND}
- sys-apps/util-linux
- app-misc/pax-utils
- virtual/awk"
-
-CONFIG_CHECK="~CGROUPS ~CGROUP_DEVICE
- ~CPUSETS ~CGROUP_CPUACCT
- ~RESOURCE_COUNTERS
- ~CGROUP_SCHED
-
- ~NAMESPACES
- ~IPC_NS ~USER_NS ~PID_NS
-
- ~DEVPTS_MULTIPLE_INSTANCES
- ~CGROUP_FREEZER
- ~UTS_NS ~NET_NS
- ~VETH ~MACVLAN
-
- ~POSIX_MQUEUE
- ~!NETPRIO_CGROUP
-
- ~!GRKERNSEC_CHROOT_MOUNT
- ~!GRKERNSEC_CHROOT_DOUBLE
- ~!GRKERNSEC_CHROOT_PIVOT
- ~!GRKERNSEC_CHROOT_CHMOD
- ~!GRKERNSEC_CHROOT_CAPS
- ~!GRKERNSEC_PROC
-"
-
-ERROR_DEVPTS_MULTIPLE_INSTANCES="CONFIG_DEVPTS_MULTIPLE_INSTANCES: needed for pts inside container"
-
-ERROR_CGROUP_FREEZER="CONFIG_CGROUP_FREEZER: needed to freeze containers"
-
-ERROR_UTS_NS="CONFIG_UTS_NS: needed to unshare hostnames and uname info"
-ERROR_NET_NS="CONFIG_NET_NS: needed for unshared network"
-
-ERROR_VETH="CONFIG_VETH: needed for internal (host-to-container) networking"
-ERROR_MACVLAN="CONFIG_MACVLAN: needed for internal (inter-container) networking"
-
-ERROR_POSIX_MQUEUE="CONFIG_POSIX_MQUEUE: needed for lxc-execute command"
-
-ERROR_NETPRIO_CGROUP="CONFIG_NETPRIO_CGROUP: as of kernel 3.3 and lxc 0.8.0_rc1 this causes LXCs to fail booting."
-
-ERROR_GRKERNSEC_CHROOT_MOUNT=":CONFIG_GRKERNSEC_CHROOT_MOUNT some GRSEC features make LXC unusable see postinst notes"
-ERROR_GRKERNSEC_CHROOT_DOUBLE=":CONFIG_GRKERNSEC_CHROOT_DOUBLE some GRSEC features make LXC unusable see postinst notes"
-ERROR_GRKERNSEC_CHROOT_PIVOT=":CONFIG_GRKERNSEC_CHROOT_PIVOT some GRSEC features make LXC unusable see postinst notes"
-ERROR_GRKERNSEC_CHROOT_CHMOD=":CONFIG_GRKERNSEC_CHROOT_CHMOD some GRSEC features make LXC unusable see postinst notes"
-ERROR_GRKERNSEC_CHROOT_CAPS=":CONFIG_GRKERNSEC_CHROOT_CAPS some GRSEC features make LXC unusable see postinst notes"
-ERROR_GRKERNSEC_PROC=":CONFIG_GRKERNSEC_PROC: this GRSEC feature is incompatible with unprivileged containers"
-
-DOCS=(AUTHORS CONTRIBUTING MAINTAINERS NEWS README doc/FAQ.txt)
-
-S="${WORKDIR}/${PN}-${MY_P}"
-
-REQUIRED_USE="python? ( ${PYTHON_REQUIRED_USE} )"
-
-src_prepare() {
- sed -i 's/AM_CONFIG_HEADER/AC_CONFIG_HEADERS/g' configure.ac || die
- if [[ -n ${BACKPORTS} ]]; then
- epatch "${WORKDIR}"/patches/*
- fi
-
- epatch "${FILESDIR}"/${PN}-1.0.6-bash-completion.patch
-
- eautoreconf
-}
-
-src_configure() {
- append-flags -fno-strict-aliasing
-
- econf \
- --localstatedir=/var \
- --bindir=/usr/sbin \
- --docdir=/usr/share/doc/${PF} \
- --with-config-path=/etc/lxc \
- --with-rootfs-path=/usr/lib/lxc/rootfs \
- --with-distro=gentoo \
- $(use_enable doc) \
- --disable-apparmor \
- $(use_enable examples) \
- $(use_enable lua) \
- $(use_enable seccomp) \
- --disable-python
-}
-
-python_compile() {
- distutils-r1_python_compile build_ext -I ../ -L ../${PN}
-}
-
-src_compile() {
- default
-
- if use python; then
- pushd "${S}/src/python-${PN}" > /dev/null
- distutils-r1_src_compile
- popd > /dev/null
- fi
-}
-
-src_install() {
- default
-
- mv "${ED}"/usr/share/bash-completion/completions/${PN} "${ED}"/$(get_bashcompdir)/${PN}-start || die
- bashcomp_alias ${PN}-start \
- ${PN}-{attach,cgroup,clone,console,create,destroy,device,execute,freeze,info,monitor,snapshot,start-ephemeral,stop,unfreeze,wait}
-
- if use python; then
- pushd "${S}/src/python-lxc" > /dev/null
- # Unset DOCS. This has been handled by the default target
- unset DOCS
- distutils-r1_src_install
- popd > /dev/null
- fi
-
- keepdir /etc/lxc /usr/lib/lxc/rootfs /var/log/lxc
-
- find "${D}" -name '*.la' -delete
-
- # Gentoo-specific additions!
- # Use initd.3 per #517144
- newinitd "${FILESDIR}/${PN}.initd.3" ${PN}
-
- # lxc-devsetup script
- exeinto /usr/libexec/${PN}
- doexe config/init/systemd/${PN}-devsetup
- # Use that script with the systemd service (Similar to upstream
- # Makefile.am
- cp "${FILESDIR}"/${PN}_at.service ${PN}_at.service || die
- sed -i \
- "/Restart=always/a ExecStartPre=/usr/libexec/${PN}/${PN}-devsetup" \
- ${PN}_at.service \
- || die "Failed to add ${PN}-devsetup to the systemd service file"
- systemd_newunit ${PN}_at.service "lxc@.service"
-}
-
-pkg_postinst() {
- elog "There is an init script provided with the package now; no documentation"
- elog "is currently available though, so please check out /etc/init.d/lxc ."
- elog "You _should_ only need to symlink it to /etc/init.d/lxc.configname"
- elog "to start the container defined into /etc/lxc/configname.conf ."
- elog "For further information about LXC development see"
- elog "http://blog.flameeyes.eu/tag/lxc" # remove once proper doc is available
- elog ""
- ewarn "With version 0.7.4, the mountpoint syntax came back to the one used by 0.7.2"
- ewarn "and previous versions. This means you'll have to use syntax like the following"
- ewarn ""
- ewarn " lxc.rootfs = /container"
- ewarn " lxc.mount.entry = /usr/portage /container/usr/portage none bind 0 0"
- ewarn ""
- ewarn "To use the Fedora, Debian and (various) Ubuntu auto-configuration scripts, you"
- ewarn "will need sys-apps/yum or dev-util/debootstrap."
- ewarn ""
- ewarn "Some GrSecurity settings in relation to chroot security will cause LXC not to"
- ewarn "work, while others will actually make it much more secure. Please refer to"
- ewarn "Diego Elio Pettenò's weblog at http://blog.flameeyes.eu/tag/lxc for further"
- ewarn "details."
-}
next reply other threads:[~2017-02-22 10:49 UTC|newest]
Thread overview: 105+ messages / expand[flat|nested] mbox.gz Atom feed top
2017-02-22 10:49 Aaron Bauman [this message]
-- strict thread matches above, loose matches on Subject: below --
2021-12-16 20:22 [gentoo-commits] repo/gentoo:master commit in: app-emulation/lxc/ Joonas Niilola
2021-12-02 3:39 Sam James
2021-12-01 7:05 Joonas Niilola
2021-12-01 7:05 Joonas Niilola
2021-10-29 7:14 Joonas Niilola
2021-10-22 15:19 Joonas Niilola
2021-10-22 8:39 Joonas Niilola
2021-10-22 8:39 Joonas Niilola
2021-08-26 6:42 Joonas Niilola
2021-08-26 6:42 Joonas Niilola
2021-07-26 8:07 Yixun Lan
2021-07-19 11:15 Joonas Niilola
2021-07-19 11:15 Joonas Niilola
2021-06-01 8:43 Joonas Niilola
2021-06-01 8:43 Joonas Niilola
2021-05-05 5:11 Joonas Niilola
2021-05-05 5:11 Joonas Niilola
2021-05-01 5:38 Joonas Niilola
2021-05-01 5:38 Joonas Niilola
2021-04-30 19:04 Mikle Kolyada
2021-04-30 7:01 Joonas Niilola
2021-01-30 6:38 Joonas Niilola
2021-01-30 6:38 Joonas Niilola
2021-01-30 6:38 Joonas Niilola
2021-01-14 3:39 Joonas Niilola
2021-01-09 12:43 Joonas Niilola
2020-11-25 12:27 Joonas Niilola
2020-11-21 6:58 Joonas Niilola
2020-11-21 6:58 Joonas Niilola
2020-10-22 7:44 Joonas Niilola
2020-10-22 7:15 Joonas Niilola
2020-09-22 6:54 Joonas Niilola
2020-09-14 5:11 Joonas Niilola
2020-09-04 5:47 Joonas Niilola
2020-09-04 5:47 Joonas Niilola
2020-08-05 6:44 Joonas Niilola
2020-08-05 6:44 Joonas Niilola
2020-08-04 16:50 Joonas Niilola
2020-08-04 16:50 Joonas Niilola
2020-08-04 16:50 Joonas Niilola
2020-06-29 6:09 Joonas Niilola
2020-06-21 17:02 Joonas Niilola
2020-06-21 17:02 Joonas Niilola
2020-05-29 13:15 Joonas Niilola
2020-05-29 13:15 Joonas Niilola
2020-05-26 10:16 Joonas Niilola
2020-05-20 13:10 Joonas Niilola
2020-05-19 15:27 Stefan Strogin
2020-05-19 13:27 Joonas Niilola
2020-05-19 7:56 Joonas Niilola
2020-05-18 13:39 Joonas Niilola
2020-05-15 5:20 Joonas Niilola
2019-10-12 18:35 Mikle Kolyada
2019-07-05 19:05 Virgil Dupras
2019-02-17 17:59 Sergei Trofimovich
2018-12-31 18:55 Virgil Dupras
2018-12-31 18:55 Virgil Dupras
2018-12-23 15:52 Virgil Dupras
2018-11-26 1:50 Virgil Dupras
2018-10-06 23:05 Thomas Deutschmann
2018-10-05 12:49 Virgil Dupras
2018-08-23 17:54 Virgil Dupras
2018-08-22 12:35 Virgil Dupras
2018-08-13 0:55 Virgil Dupras
2018-08-07 8:50 Agostino Sarubbo
2018-08-06 22:20 Thomas Deutschmann
2018-07-30 21:17 Mikle Kolyada
2018-07-29 10:35 Sergei Trofimovich
2018-07-28 13:24 Thomas Deutschmann
2018-06-26 2:18 Virgil Dupras
2018-06-26 2:12 Virgil Dupras
2018-06-16 2:21 Virgil Dupras
2018-06-14 0:30 Virgil Dupras
2018-05-14 9:46 Mike Frysinger
2018-04-26 1:36 Matthias Maier
2018-04-15 19:39 Sergei Trofimovich
2018-04-15 18:58 Thomas Deutschmann
2018-04-14 17:58 Aaron Bauman
2018-04-04 21:05 Matthias Maier
2018-02-28 22:23 Sergei Trofimovich
2018-01-30 17:01 Matthias Maier
2017-12-20 13:09 Agostino Sarubbo
2017-12-19 15:46 Thomas Deutschmann
2017-12-16 0:24 Matthias Maier
2017-12-16 0:24 Matthias Maier
2017-12-16 0:24 Matthias Maier
2017-12-16 0:24 Matthias Maier
2017-12-15 22:58 Matthias Maier
2017-12-15 22:58 Matthias Maier
2017-12-15 22:58 Matthias Maier
2017-07-26 14:56 Matt Thode
2017-06-19 17:03 Agostino Sarubbo
2017-05-29 13:46 Sergei Trofimovich
2017-02-03 8:51 Yixun Lan
2017-02-03 8:51 Yixun Lan
2016-12-08 9:39 Yixun Lan
2016-11-25 18:54 Agostino Sarubbo
2016-11-25 18:27 Agostino Sarubbo
2016-08-24 10:38 Pacho Ramos
2015-10-31 11:11 Michał Górny
2015-10-18 11:34 Markos Chandras
2015-10-05 17:11 Markos Chandras
2015-10-05 17:11 Markos Chandras
2015-09-23 12:51 Agostino Sarubbo
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=1487760579.db0cb2620b129e83e26f87d64f33d9a03a8596df.bman@gentoo \
--to=bman@gentoo.org \
--cc=gentoo-commits@lists.gentoo.org \
--cc=gentoo-dev@lists.gentoo.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox