| Patch | Description | Author | Forwarded | Bugs | Origin | Last update |
|---|---|---|---|---|---|---|
| 0004-apparmor.d-Sets-container-base-accordingly-to-container-base.in.patch | [apparmor.d] Sets container-base accordingly to container-base.in | =?utf-8?q?Pierre-Elliott_B=C3=A9cue?= <peb@debian.org> | no | 2019-08-05 | ||
| 0004-nesting-Extend-mount-permissions-in-apparmor-to-allo.patch | [nesting] Extend mount permissions in apparmor to allow systemd services' restrictions to work These options allow systemd security features to work. In particular cases, it helps with systemd-logind and program like this It's only added in nesting profile as it could pose security risks on privileged containers. mount options=(rw,rbind) -> /run/systemd/unit-root/, mount options=(rw,rbind) -> /run/systemd/unit-root/**, mount options=(rw,rshared) -> /, mount options=(rw,nosuid,nodev,noexec) proc -> /run/systemd/unit-root/proc/, |
=?utf-8?q?Pierre-Elliott_B=C3=A9cue?= <peb@debian.org> | no | 2022-08-01 | ||
| 0005-lxc.service-Starts-after-remote-fs.target.patch | [lxc.service] Starts after remote-fs.target | =?utf-8?q?Pierre-Elliott_B=C3=A9cue?= <peb@debian.org> | no | 2019-08-05 | ||
| 0010-cherry-pick-fix-ephemeral-copies.patch | [PATCH] conf: fix ephemeral copies Don't rely on rootfs->bdev_type because that may be NULL. Use storage->type instead which can't be NULL. |
Christian Brauner <brauner@kernel.org> | no | 2023-11-29 | ||
| 0011-cherry-pick-test-usernic-fixesA.patch | [PATCH 1/2] test-usernic: don't use ifconfig ifconfig is not available on many modern systems. Use ip instead. Maybe it would be better to detect what's available, but that could become brittle. |
Serge Hallyn <serge@hallyn.com> | no | 2024-02-02 | ||
| 0012-cherry-pick-test-usernic-fixesB.patch | [PATCH] tests: lxc-test-usernic: use iproute tool instead of brctl This is required to fix autopkgtest failures. |
Alexander Mikhalitsyn <aleksandr.mikhalitsyn@canonical.com> | no | 2024-02-15 | ||
| 0013-cherry-pick-remove-broken-cgroup-tests.patch | tests: remove old and broken cgroup handling code from tests | Alexander Mikhalitsyn <aleksandr.mikhalitsyn@canonical.com> | no | https://github.com/lxc/lxc/commit/8f9733d756361ff8f8d8d589f286c0e064b1195d | ||
| 0014-cherry-pick-lxc-copy-apparmor.patch | config: apparmor: add AppArmor profile for lxc-copy Upstream commit: https://github.com/lxc/lxc/commit/d51ea224e89f937131342ea71b8010c1c810dcd3 |
Alexander Mikhalitsyn <aleksandr.mikhalitsyn@canonical.com> | no |