- 24 Feb, 2016 23 commits
-
-
Cyrill Gorcunov authored
Everytime we build the executable we've to check all the deps and sources for changes, thus don't protvide criu/criu on toplevel as a target file (my bug in 496b51b6). Instead bring this target as a phony back but drop phony from criu/Makefile itself, as it should be from the beginning. Same time remove unneeded phonies over the targets which are real files. Signed-off-by:
Cyrill Gorcunov <gorcunov@openvz.org> Tested-by:
Tycho Andersen <tycho.andersen@canonical.com> Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Laurent Dufour authored
The nmk framework now references PowerPC 64 bits architectures as ppc64. This applies for both little endian, and the future supported big endian one. Acked-by:
Cyrill Gorcunov <gorcunov@gmail.com> Signed-off-by:
Laurent Dufour <ldufour@linux.vnet.ibm.com> Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Laurent Dufour authored
This is usual to reference PowerPC 64 bits architectures as 'ppc64', and let 'powerpc' define PowerPC 32 bits ones. Acked-by:
Cyrill Gorcunov <gorcunov@gmail.com> Signed-off-by:
Laurent Dufour <ldufour@linux.vnet.ibm.com> Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Kir Kolyshkin authored
This is handy whenever we want to print size_t or ssize_t. Signed-off-by:
Kir Kolyshkin <kir@openvz.org> Acked-by:
Tycho Andersen <tycho.andersen@canonical.com> Acked-by:
Andrew Vagin <avagin@virtuozzo.com> Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Pavel Emelyanov authored
Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Kir Kolyshkin authored
These packages are needed for proper build: * git-core: to get CRIU version (see Makefile) * pkg-config, libselinux-dev: to check for selinux (see criu/Makefile.config) Signed-off-by:
Kir Kolyshkin <kir@openvz.org> Acked-by:
Andrew Vagin <avagin@virtuozzo.com> Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Kir Kolyshkin authored
Make the Makefile leaner and cleaner. Signed-off-by:
Kir Kolyshkin <kir@openvz.org> Acked-by:
Andrew Vagin <avagin@virtuozzo.com> Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Kir Kolyshkin authored
Commit db6cb693 mistakenly removed Makefile.local from .gitignore. Restore it back. See commit 43fb9484 for more info. Cc: Cyrill Gorcunov <gorcunov@openvz.org> Signed-off-by:
Kir Kolyshkin <kir@openvz.org> Acked-by:
Cyrill Gorcunov <gorcunov@openvz.org> Acked-by:
Andrew Vagin <avagin@virtuozzo.com> Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Andrey Vagin authored
Reported-by: Mr Jenkins Signed-off-by:
Andrey Vagin <avagin@openvz.org> Acked-by:
Cyrill Gorcunov <gorcunov@openvz.org> Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Tycho Andersen authored
https://travis-ci.org/xemul/criu/jobs/110616491Signed-off-by:
Tycho Andersen <tycho.andersen@canonical.com> Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Andrew Vagin authored
We can't execute userns tests, because a kernel is too old there. Signed-off-by:
Andrew Vagin <avagin@virtuozzo.com> Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Andrew Vagin authored
Signed-off-by:
Andrew Vagin <avagin@virtuozzo.com> Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Andrew Vagin authored
Otherwise a default actions for this step will be executed: $ ./configure && make && make test /home/travis/build.sh: line 45: ./configure: No such file or directory Signed-off-by:
Andrew Vagin <avagin@virtuozzo.com> Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Andrew Vagin authored
Signed-off-by:
Andrew Vagin <avagin@virtuozzo.com> Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Dmitry Safonov authored
That will complement existing CFLAGS_ and ASFLAGS_. As no one use it yet (I will use it, do not remove) - no need for convert-everything patch. Cc: Cyrill Gorcunov <gorcunov@openvz.org> Signed-off-by:
Dmitry Safonov <dsafonov@virtuozzo.com> Acked-by:
Cyrill Gorcunov <gorcunov@openvz.org> Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Andrew Vagin authored
It was replaced by zdtm.py. v2: remove zdtm.sh from other scripts remove fault-injection, because nobody uses it Signed-off-by:
Andrew Vagin <avagin@virtuozzo.com> Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Andrew Vagin authored
Signed-off-by:
Andrew Vagin <avagin@virtuozzo.com> Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Andrew Vagin authored
Currently we use int for them, but uid_t and gid_t is unsigned int. Signed-off-by:
Andrew Vagin <avagin@virtuozzo.com> Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Tycho Andersen authored
Signed-off-by:
Tycho Andersen <tycho.andersen@canonical.com> Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Tycho Andersen authored
Signed-off-by:
Tycho Andersen <tycho.andersen@canonical.com> Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Tycho Andersen authored
While this commit is logically part of the "implement cgns support" commit, it's worth noting this separately I think: since cgns requires each task to look at its own proc file, we can now no longer dump unprivileged tasks whose /proc doesn't belong to them. This is because unprivileged tasks can't mount /proc, so if their /proc doesn't belong to them and they need to read it (because they're in a cgns), the pie code can't do anything about it. For cgns, we could solve this problem by simply fork()ing and setns()ing to the tasks pid and cgroup namespaces, and then reading the /proc from that task instead. (And perhaps we should implement it that way so we can still dump tasks whose /proc doesn't belong to them, although I don't think that's a common case.) Signed-off-by:
Tycho Andersen <tycho.andersen@canonical.com> Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Tycho Andersen authored
cgroup namespaces are imminent to be merged into the kernel (indeed, they went into and out of 4.5 for minor issues), and will be carried as a patchset in the ubuntu 16.04 kernel. Here's an attempt at c/r. There are essentially three key steps: * on dump, in parse_task_cgroup, we should ask the task what cgroups it thinks it is in (unless it has the same cgroup ns id as its parent, then we should just take the prefixes from the parent's set), and set the prefix on the cg set * add a new restore step, prepare_cgroup_namespace(), which happens in prepare_task_cgroup() that does an unshare() if necessary * when restoring, in move_in_cgroup, if we're going to restore via usernsd, leave the full path. if not, use (cgset->path + len(cgset->cgns_prefix) as the path, since we will have already moved into the cgns_prefix and unshared. Another observation here is that we can support nesting, since these are restored heirarchically by nature. v2: * store cgns prefix length instead of full prefix in images * set has_cgroup_ns_id conditionally * drop unused argument to move_in_cgroup * add extra comments about what is happening when unsharing() on restore * add extra comments about what is happening when computing the actual cgns prefix Signed-off-by:
Tycho Andersen <tycho.andersen@canonical.com> Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Tycho Andersen authored
v2: print a warning when cgroup ns is not present. Signed-off-by:
Tycho Andersen <tycho.andersen@canonical.com> Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
- 20 Feb, 2016 17 commits
-
-
Andrey Vagin authored
v2: create a separate job for each arch Signed-off-by:
Andrey Vagin <avagin@openvz.org> Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Andrey Vagin authored
Fixes: afae962c ("dockerfile: extract a common part in one file") Signed-off-by:
Andrey Vagin <avagin@openvz.org> Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Tycho Andersen authored
precise's libc headers are extremly old and don't define SYS_*. trusty's do, so let's run the travis tests there. Signed-off-by:
Tycho Andersen <tycho.andersen@canonical.com> Signed-off-by:
Andrey Vagin <avagin@openvz.org> Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Pavel Emelyanov authored
Tests are often run in VMs and 5 seconds on loaded environments might be not enough to catch transition zdtm tests. Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Pavel Emelyanov authored
Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Cyrill Gorcunov authored
Current zdtm building procedure depends on impilcit make fules, so bring them back until we moved to nmk build engine. Reported-by:
Andrey Vagin <avagin@openvz.org> Signed-off-by:
Cyrill Gorcunov <gorcunov@openvz.org> Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Cyrill Gorcunov authored
Otherwise linking may be executed twice as a forced target. Signed-off-by:
Cyrill Gorcunov <gorcunov@openvz.org> Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Ivan Shapovalov authored
Signed-off-by:
Ivan Shapovalov <intelfx@intelfx.name> Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Ivan Shapovalov authored
Signed-off-by:
Ivan Shapovalov <intelfx@intelfx.name> Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Ivan Shapovalov authored
AIO rings internally are memory mappings, so they may have restorable madvise bits on them. Create the mappings before restoring their properties. Signed-off-by:
Ivan Shapovalov <intelfx@intelfx.name> Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Pavel Emelyanov authored
Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Cyrill Gorcunov authored
Fixes #95 Signed-off-by:
Cyrill Gorcunov <gorcunov@openvz.org> Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Andrew Vagin authored
Cc: Jann Horn <jann@thejh.net> Reporte-by:
Jann Horn <jann@thejh.net> Signed-off-by:
Andrew Vagin <avagin@virtuozzo.com> Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Andrew Vagin authored
> 21.01.2016 02:56, Jann Horn writes: > Call chain: > > cr_dump_tasks -> collect_namespaces(true) -> > collect_user_namespaces(true) -> walk_namespaces -> collect_user_ns > -> dump_user_ns -> check_user_ns > > This method enters a user namespace with unknown owner with > euid==(kuid 0). Linux does not guarantee that this is safe; with > the current upstream kernel, the namespace owner can attach to the > CRIU process via ptrace and use it to write into /etc/shadow or > whatever. Cc: Jann Horn <jann@thejh.net> Reported-by:
Jann Horn <jann@thejh.net> Signed-off-by:
Andrew Vagin <avagin@virtuozzo.com> Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Pavel Emelyanov authored
Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Pavel Emelyanov authored
Move static and transition into zdtm top. We can't move all the micro tests themselves, as we need to distinguish static from non static (zdtm.py makes additional checks on static ones). Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-
Pavel Emelyanov authored
These two sets are the same -- they test something and ask to be C/R-ed at the time they do it. No other differences. Signed-off-by:
Pavel Emelyanov <xemul@virtuozzo.com>
-