红联Linux门户
Linux帮助

LXC 2.0.0/2.0.1发布,Linux容器工具

发布时间:2016-05-20 09:30:59来源:红联作者:baihuo
4月份,LXC发布了LXC 2.0 包含很多新特性,5月16日,LXC 2.0.1发布,修补了一些bug。
LXC 2.0.0 新特性如下:

重要更新:

All main LXC commands have now been rewritten in C

lxc-ls

lxc-device

lxc-copy

New lxc-copy command taking over the role of lxc-clone and lxc-start-ephemeral

Much improved support for checkpoint/restore of containers

Completely reworked cgroup handling including support for the cgroup namespace

The various command line tools are now much more consistent

Re-organized storage backend implementation, including addition of a Ceph RBD backend

An enormous amount of bugfixes, most of which will be backported to 1.0 and 1.1 over the next few bugfix releases

The C API remains backward compatible with previous versions and is released as 1.2

This release was made possible by contributions (720 commits) from a total of 96 contributors.

更新配置选项

lxc.ephemeral: Controls whether the container is ephemeral and so will be destroyed on shutdown

lxc.rebootsignal: Allows to override the signal sent for container reboot

lxc.hook.destroy: New hook being called on container destruction

lxc.hook.stop: Run in the host context with references to the containers just before namespace teardown

lxc.init_uid: Used by lxc-execute to set an alternative user

lxc.init_gid: Used by lxc-execute to set an alternative group

lxc.monitor.unshare: Allows unsharing the mount namespace prior to running any hook

新特性:

API:

Add support for get_ips()

Add support for get_interfaces()

Add support for rename()

Support for passing the storage backend to create()

New migrate() symbol as an alternative to checkpoint() using a migrate_opts struct to simplify additions

API version is 1.2, fully backward compatible with 1.1 and 1.0

new symbols:

python3

lua

Core:

cgfsng: New cgroup backend driver for recent Linux kernel

cgroup: Partial support for the new cgroup hierarchy

cgroup: Support for the cgroup namespace

checkpoint: Support checkpoint/restore of default LXC containers

checkpoint: Support checkpoint/restore of unprivileged containers

checkpoint: Support for the page server

config: lxc.aa_profile: Now supports an "unchanged" value

config: lxc.init_cmd: Now supports arguments

config: lxc.network.macvlan.mode: Added support for the "passthru" mode

config: lxc.rootfs.backend: Allows to override the storage backend (bypasses auto-detection)

config: New nesting.conf configuration file to setup container nesting

hooks: New LXC_CGNS_AWARE environment variable, set to 1 if LXC supports the cgroup namespace (the kernel however may not)

hooks: New LXC_SRC_NAME environment variable is set in clone hook with the original container name

hooks: New LXC_TARGET environment variable is set with the container goal (stop or reboot)

logging: Updated logging timestamps to be a bit more readable

lxc-usernet: Support for containers usning a veth interface without bridging

lxc-usernet: Support for group-based quotas (use the @ prefix)

network: The bridge interface MTU is now used as the default container interface MTU

start: The process title is now renamed to be easier to read

storage: New Ceph RBD storage backend

Documentation:

Korean translation of all the man pages

Commands:

lxc-attach: Use an intermediate pts device to prevent attacks against the parent shell

lxc-clone: Support for renaming containers

lxc-start-ephemeral: Support for changing bind-mount targets

Init systems:

systemd: Support for instanced service units

Templates

New ALTLinux template

New Slackware template

New SPARCLinux template

alpine: Support installing extra packages

debian: Default to just "main" enabled, allow enabling other repositories through argument

oracle: Set the timezone in the container

openssh: Add OpenSSH support

ubuntu: New -v option allowing the user to set the debootstrap variant

ubuntu-cloud: Support for vendor-data passthrough

LXC 2.0.1 改进的地方如下:

bug修复:

apparmor: Also allow fstype=fuse for fuse filesystems

attach: adapt lxc-attach tests & add test for pty logging

attach: don't fail attach on failure to setup a SIGWINCH handler.

attach: fix a variety of lxc-attach pts handling issues

attach: switch console pty to raw mode (fixes ncurses-based programs)

attach: use raw settings of ssh for pty

bindings: fixed python-lxc reference to var before assignment in create()

bindings: set PyErr when Container.__init__ fails

cgfsng: defer to cgfs if needed subsystems are not available

cgfsng: don't require that systemd subsystem be mounted

core: Added missing type to keys in lxc_list_nicconfigs

core: Allow configuration file values to be quoted

core: log: remove duplicate definitons and bump buffer size

core: sync: properly fail on unexpected message sizes

core: Unshare netns after setting the userns mappings (fixes ownership of /proc/net)

core: various fixes as reported by static analysis

c/r: add an option to use faster inotify support in CRIU

c/r: rearrange things to pass struct migrate_opts all the way down

doc: ignore temporary files generated by doxygen

doc: tweak manpage generation date to be compatible with reproducible builds

doc: update MAINTAINERS

doc: update to translated manpages

init: add missing lsb headers to sysvinit scripts

init: don't make sysv init scripts dependant on distribution specifics

init: drop obsolete syslog.target from lxc.service.in

lxc-attach: add logging option to manpage

lxc-checkconfig: better render when stdout isn't a terminal

lxc-create: fix -B best option

lxc-destroy: avoid double print

lxc-ls: use fewer syscalls when doing ipc

templates: Add apt-transport-https to minbase variant of Ubuntu template

templates: fix a typo in the capabilities name for Gentoo (sys_resource)

templates: logic fix in the Centos template for RHEL7+ support

templates: tweak Alpine DHCP configuration to send its hostname

templates: tweak to network configuration of the Oracle template
下载地址:https://linuxcontainers.org/lxc/downloads/

来自:开源中国社区
文章评论

共有 0 条评论