aboutsummaryrefslogtreecommitdiff
digraph "Guix package" {
  "72851008" [label = "coreutils-8.25", shape = box, fontname = "dejavu sans"];
  "72851008" -> "49728512" [color = darkseagreen];
  "72851008" -> "74872512" [color = darkseagreen];
  "72851008" -> "53180864" [color = darkseagreen];
  "72851008" -> "75199232" [color = darkseagreen];
  "49728512" [label = "perl-5.24.0", shape = box, fontname = "dejavu sans"];
  "74872512" [label = "acl-2.2.52", shape = box, fontname = "dejavu sans"];
  "74872512" -> "74873280" [color = red];
  "74872512" -> "49728512" [color = red];
  "74872512" -> "74872704" [color = red];
  "74873280" [label = "gettext-minimal-0.19.8.1", shape = box, fontname = "dejavu sans"];
  "74873280" -> "41550784" [color = cyan3];
  "41550784" [label = "expat-2.2.0", shape = box, fontname = "dejavu sans"];
  "74872704" [label = "attr-2.4.47", shape = box, fontname = "dejavu sans"];
  "74872704" -> "74873280" [color = cyan3];
  "74872704" -> "49728512" [color = cyan3];
  "53180864" [label = "gmp-6.1.1", shape = box, fontname = "dejavu sans"];
  "53180864" -> "50262784" [color = darkgoldenrod];
  "50262784" [label = "m4-1.4.17", shape = box, fontname = "dejavu sans"];
  "75199232" [label = "libcap-2.24", shape = box, fontname = "dejavu sans"];
  "75199232" -> "49728512" [color = blue];
  "75199232" -> "74872704" [color = blue];

}
>linux-container: Add #:child-is-pid1? parameter to 'call-with-container'....* gnu/build/linux-container.scm (wait-child-process) (status->exit-status): New procedures. (call-with-container): Add #:child-is-pid1? parameter and honor it. [thunk*]: New variable. Pass it to 'run-container'. Ludovic Courtès 2022-05-01linux-container: Ensure signal-handling asyncs get a chance to run....Previously we could enter the blocking 'waitpid' call and miss an opportunity to run the signal handler async. * gnu/build/linux-container.scm (call-with-container) [periodically-schedule-asyncs]: New procedure. [install-signal-handlers]: Call it. Ludovic Courtès 2022-05-01linux-container: 'call-with-container' relays SIGTERM and SIGINT....* gnu/build/linux-container.scm (call-with-container): Add #:relayed-signals. [install-signal-handlers]: New procedure. Call it. Ludovic Courtès 2022-01-05linux-container: Handle CLONE_NEWCGROUP and use it by default....Adds low-level support for launching Linux containers with cgroup namespaces. * gnu/build/linux-container.scm (%namespaces): Add 'cgroup. (namespaces->bit-mask): Handle it. * guix/build/syscalls.scm (CLONE_NEWCGROUP): New variable. Signed-off-by: Ludovic Courtès <ludo@gnu.org> Ryan Sundberg 2020-12-06Revert "linux-container: Correct test for unprivileged user namespace support."...This broke 'guix environment --container' on non-Debian distributions. Fixes <https://bugs.gnu.org/45066>. Reported by luhux <luhux@outlook.com>. This reverts commit 8bc5ca5160db3d82bd5b6b2b7ed80c96f42bd33e. Marius Bakke 2020-12-03linux-container: Correct test for unprivileged user namespace support....Fixes <https://bugs.gnu.org/31977>. Reported by Paul Garlick <pgarlick@tourbillion-technology.com>. * gnu/build/linux-container.scm (unprivileged-user-namespace-supported?): Return #f when the 'userns-file' does not exist. Paul Garlick 2020-10-01linux-container: Reset jailed root permissions....* gnu/build/linux-container.scm (mount-file-systems): Add 'chmod' call. * tests/containers.scm ("call-with-container, mnt namespace, root permissions"): New test. Jelle Licht 2020-09-10build: linux-container: Fix run-container....This is a follow-up of 5316dfc0f125b658e4a2acf7f00f49501663d943. Some users of run-container may expect that the container is jailed, even if there are no mounts. This is the case for some Guix tests. * gnu/build/linux-container.scm (run-container): Do not jail the container when the requested root is "/". Mathieu Othacehe