ChangesEdit
This kernel adds Docker support inside containers, see Docker inside CT.
Since 042stab104.1:
- rst: Make sure a timeout does not become negative in poll restart block (PSBM-32112)
- cpt: Skip dumping flocks on NFS4 (PSBM-31618)
- ve: Switch lockdep off in get_ve_by_id() (PSBM-32194)
- capset: fix lost capabilities in substitution
- net: add ctl_name for /net/ipv6/neigh sysctl table (PSBM-31781)
- ioctl: allow change net-device name with CAP_VE_NET_ADMIN (PSBM-31819, PSBM-29808)
- capset: in substitution replace task bounding set to ve one (PSBM-29814)
- bc: memcontrol -- Fix UB ref leak on task_work_cancel, v2 (PSBM-31771)
- prctl: add PR_{SET,GET}_CHILD_SUBREAPER to allow simple process supervision (PSBM-30878)
- cpt: fsnotify - walk over marks without lock taken (PSBM-32134)
- cpt: Save/restore ve's ve_cap_bset (PSBM-31923)
- fuse: fix deadlock in invalidate_inode_pages2() by setting req->page_cache=1 in fuse_prepare_write() (PSBM-32128)
- proc: fix memory leak on proc_ns_follow_link error path (PSBM-32065)
- ploop: force FUA of nullified blocks for BAT grow (PSBM-31969)
- drop_caches: add some documentation and info message (PSBM-32033)
- rst: Don't forget to mark swap page as cached in dontread_swap_cache, v5 (PSBM-31995)
- ploop: added printk of function, line, backtrace before ploop_set_error
- netfilter: nf_nat: don't check for port change on ICMP tuples (PSBM-28672)
- extra skb_init_brmark() in veth_xmit() (PSBM-28672)
- net: route -- Bring back route/src_check (PSBM-31818)
- cpt: init state component bitmap when restoring xsave state from fxsave (PSBM-31721)
- cpt: Do not transform symlink target in dumptmpfs() (PSBM-31748)
- child_subreaper: initialize is_child_subreaper with 0 (PSBM-31867)
- net: add ctl_name for /net/ipv6/neigh sysctl table (PSBM-31781)
- ioctl: allow change net-device name with CAP_VE_NET_ADMIN (PSBM-31819, PSBM-29808)
- capset: in substitution replace task bounding set to ve one (PSBM-29814)
- bc: memcontrol -- Fix UB ref leak on task_work_cancel, v2 (PSBM-31771)
- prctl: add PR_{SET,GET}_CHILD_SUBREAPER to allow simple process supervision (PSBM-30878)
- caps: Do not lost CAP_SETPCAP bit after capset (PSBM-31494)
- net: sysfs -- Fix sysctls ordering to avoid kernel WARN (PSBM-31657)
- ve: net, sysfs -- Drop redundant net_ipv4_route_path (#3039)
- ve: show /sys/kernel/profiling in CT (read-only) (PSBM-30878)
- net: fix IPv6 bridged networks (PSBM-31496)
- net-sysfs: Don't forget to put kobj reference in __dev_change_net_namespace (PSBM-31632)
- cpt: cleanup pgrp/sid fixup
- cpt: alloc pids carefully (PSBM-29874, #3171)
- cpt/inotify: take @mark_lock lock when walking over @mark_entries chain (PSBM-31567)
- cpt/inotify: dump mark path relative to VEs root_path (PSBM-31567)
- ve: allow to reassociate process with namespace inside a container (PSBM-31505)
- fs: writeback_single_inode dirty flags cleanup logic restore
- net: Track netfilter modules per net-namespace, v3 (PSBM-31451)
- ploop: Do FUA/fsync after ploop clusters relocation (PSBM-31222, PSBM-31225, PSBM-31321)
- cpt: iterative: always flush transfer after checkpointing shared pages (PSBM-31208)
- cpt: iterative: fix race between rst_iteration and vmscan (PSBM-31340)
- ub: handle NULL in top_beancounter() (PSBM-31468)
- ext4: fix potential use after free during resize V3 (PSBM-29229)
- vfs: add find_inode_nowait() function (PSBM-20411)
- cgroups: save space for the terminator
- sysfs: obtain super block from sysfs_dirent (PSBM-31275)
- ve: remove struct ve_nf_conntrack
- idr: export idr_get_next() (PSBM-31320)
- cpt: iterative: flush tlb before submitting page (PSBM-31208)
- vzcpt: Fixup delayed flock owner (PSBM-31121)
- ve: don't call copy_namespaces twice during creating VE
- mm: ClearPageCheckpointed on vswap-in (PSBM-31208)
- ub: only dec ub_count if removing ub from the hash
- ub: simplify ub->top initialization
- ub: ub_attach: do not rollback attach to the blkio cgroup if ub_cgroup=NULL
- ub: memcg: pass nodemask=NULL to gang_page_stat
- vfs: add support for a lazytime mount option (PSBM-20411)
- capset: ignore setting wrong caps with CAP_SETPCAP (PSBM-29814)
- capset: do substitutions from system to corresponding ve capabilities (PSBM-29814)
- cpuset: add fake cpuset for containers (PSBM-30878)