LXD weekly status #43

Introduction

This week’s focus was on bugfixes with a good number of clustering related fixes and improvements as well as some tweaks and fixes to other recently added features.

On the feature development front, the current focus is on improving the database tooling in LXD and adding a new backup feature to the API to implement container export/import.

Upcoming conferences and events

• NorthSec (Montreal, May 2018)

Ongoing projects

The list below is feature or refactoring work which will span several weeks/months and can’t be tied directly to a single Github issue or pull request.

• Database management improvements
• Container backup and restore
• Switching distribution building over to distrobuilder
• Various kernel work
• Stable release work for LXC, LXCFS and LXD

Upstream changes

The items listed below are highlights of the work which happened upstream over the past week and which will be included in the next release.

LXD

• Fixed passing --no-profiles to lxc init and lxc launch
• Fixed pulling files from a remote server
• Tweaked the userns-idmap documentation
• Fixed some permission issues with storage pools
• Added code to deal with older NVIDIA drivers
• Added a new internal function to retrieve all containers for the local cluster node
• Improved cluster logging for raft-http
• Added logic to automatically promote a new node as database node
• Update the backup documentation
• Added a root requirement for interactively joining a cluster through lxd init
• Improved logging on daemon failure
• Fixed querying non-JSON endpoints in lxc query

LXC

• Fix rootfs pinning handling on NFS
• Changed lxc-attach to always drop supplementary groups
• Tweaked lxc-attach supplementary group logic
• Fixed devpts mount in containers that don’t have a uid 5
• Fixed net type checks in run_script_argv
• Fixed handling of mixed personalities in seccomp
• Improved seccomp error handling

LXCFS

• Nothing to report this week

Distrobuilder

• Fixed cache directory handling

Distribution work

This section is used to track the work done in downstream Linux distributions to ship the latest LXC, LXD and LXCFS as well as work to get various software to work properly inside containers.

Ubuntu

• Nothing to report this week

Snap

• Reverted the change to make lxcfs run in its own mount namespace