{"push_id":675327445,"size":2,"distinct_size":2,"ref":"refs/heads/master","head":"fe4478860810c6db680181e67f65c3a15e97fc15","before":"88e3899351cf9bef7b1285ed96c525cbadc0a420","commits":[{"sha":"ced03a017b2d72b44bd76ee195fd2c953120f49b","author":{"email":"3df611b026e4639bee8aef7a4beb2e39fcebb313@ubuntu.com","name":"Serge Hallyn"},"message":"attach: mount a sane prox for LSM setup\n\nTo set lsm labels, a namespace-local proc mount is needed.\n\nIf a container does not have a lxc.mount.auto = proc set, then\ntasks in the container do not have a correct /proc mount until\ninit feels like doing the mount.  At startup we handlie this\nby mounting a temporary /proc if needed.  We weren't doing this\nat attach, though, so that\n\nlxc-start -n $container\nlxc-wait -t 5 -s RUNNING -n $container\nlxc-attach -n $container -- uname -a\n\ncould in a racy way fail with something like\n\nlxc-attach: lsm/apparmor.c: apparmor_process_label_set: 183 No such file or directory - failed to change apparmor profile to lxc-container-default\n\nThanks to Chris Townsend for finding this bug at\nhttps://bugs.launchpad.net/ubuntu/+source/lxc/+bug/1452451\n\nSigned-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>\nAcked-by: Stéphane Graber <stgraber@ubuntu.com>","distinct":true,"url":"https://api.github.com/repos/lxc/lxc/commits/ced03a017b2d72b44bd76ee195fd2c953120f49b"},{"sha":"fe4478860810c6db680181e67f65c3a15e97fc15","author":{"email":"3df611b026e4639bee8aef7a4beb2e39fcebb313@ubuntu.com","name":"Serge Hallyn"},"message":"proc update - don't assume we are pid 1\n\n(I erred in the first patch, causing every lxc-attach to unmount the\ncontainer-'s /proc)\n\nSince we now use mount_proc_if_needed() from attach, as opposed to only\nfrom start, we cannot assume we are pid 1.  So fix the check for whether\nto mount a new proc.\n\nSigned-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>\nAcked-by: Stéphane Graber <stgraber@ubuntu.com>","distinct":true,"url":"https://api.github.com/repos/lxc/lxc/commits/fe4478860810c6db680181e67f65c3a15e97fc15"}]}