doc: Update lxc-attach(1) * Add undocumented options (-v/--set-var, --keep-var, -f/--rcfile) * Change order of option in SYNOPSIS (-L that is placed after "command") * Add long options in SYNOPSIS Signed-off-by: KATOH Yasufumi <karma@jazz.email.ne.jp>

Fix typo found by lintian Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

lxc-attach: add logging option to manpage Signed-off-by: Christian Brauner <christian.brauner@mailbox.org>

fix spelling mistakes spotted by Debian's lintian Signed-off-by: Evgeni Golov <evgeni@debian.org>

lxc-attach: small improvements to manpage Explain that the pipe symbol needs to be escaped for -e and -s. Signed-off-by: Christian Brauner <christian.brauner@mailbox.org>

lxc-attach: rework pty allocation Previously we implemented two ways to get a pty for lxc-attach: 1. get a pty in the container 2. get a pty on the host Where 1. was the default and 2. was only tried after 1. failed. For safety and simplicity reasons, we remove 1. and just keep 2. around. Signed-off-by: Christian Brauner <christian.brauner@mailbox.org>

update manpages - add note to lxc-clone manpage that it is superseded by lxc-copy - add note to lxc-start-ephemeral manpage that it is superseded by lxc-copy - fix typo in lxc-attach manpage - fix some of my comments in lxc_ls.c Signed-off-by: Christian Brauner <christian.brauner@mailbox.org>

update lxc-attach manpage - explain rationale behind allocation of pty - briefly explain how a pty is allocated - add a short note that describes the changed behavior for lxc-attach when the user is not placed in a writeable cgroup at login Signed-off-by: Christian Brauner <christian.brauner@mailbox.org>

doc: Update man pages to the latest information * lxc-attach(1): Update to the status of kernel 3.8 or higher * lxc-create(1), lxc-destroy(1): Now lxc-ls don't have "-l" option, so remove * lxc(7): update description of lxc-ls and lxc-info to current version * see-also: fix lxc(1) to lxc(7) Signed-off-by: KATOH Yasufumi <karma@jazz.email.ne.jp> Acked-by: Stéphane Graber <stgraber@ubuntu.com>

lxc-attach: elevate specific privileges There are scenarios in which we want to execute process with specific privileges elevated. An example for this might be executing a process inside the container securely, with capabilities dropped, but not in container's cgroup so that we can have per process restrictions inside single container. Similar to namespaces, privileges to be elevated can be OR'd: lxc-attach --elevated-privileges='CAP|CGROUP' ... Backward compatibility with previous versions is retained. In case no privileges are specified behaviour is the same as before: all of them are elevated. Signed-off-by: Nikola Kotur <kotnick@gmail.com> Acked-By: Christian Seiler <christian@iwakd.de> Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

Fix typos identified by lintian Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

licensing: Add missing headers and FSF address Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

fix building docs Commit 69fe23ff added checking for the older docbook2man back into configure, but this breaks building the docs on at least Oracle Linux and Fedora when docbook2X is not installed as docbook2man will be found but the docs don't actually build with that tool. This change makes it so the docs can be built with either the older docbook2man or the newer 2X tools by using configure to set the dtd string to an appropriate value depending on use of docbook2man or db2x_docbook2man. Also fixed a small error in lxc-destroy.sgml.in that was noticed by the old tools. Signed-off-by: Dwight Engen <dwight.engen@oracle.com> Signed-off-by: Serge Hallyn <serge.hallyn@ubuntu.com>

lxc-attach: Implement --clear-env and --keep-env This patch introduces the --clear-env and --keep-env options for lxc-attach, that allows the user to specify whether the environment should be passed on inside the container or not. This is to be expanded upon in later versions, this patch only introduces the most basic functionality. Signed-off-by: Christian Seiler <christian@iwakd.de> Acked-by: Serge E. Hallyn <serge.hallyn@ubuntu.com>

Change author email address Signed-off-by: Daniel Lezcano <daniel.lezcano@free.fr>

Update documentation to Docbook 4.5 The package 'docbook-tools' [1] required to format Docbook 3.0 into man pages has been obsoleted a long time ago and can no longer be downloaded from its former homepage. Recent versions of that package -- now called 'docbook2X' --, cannot deal with that old markup format anymore (and don't support the '-w all' command line switch either). To remedy these issues, all SGML files have been updated to Docbook 4.5 so that recent versions of docbook2man can process them. [1] http://sources.redhat.com/docbook-tools/ [2] http://docbook2x.sourceforge.net/ Signed-off-by: Peter Simons <simons@cryp.to> Acked-by: Stéphane Graber <stgraber@ubuntu.com>

Revert "Update documentation to Docbook 4.5" This reverts commit 9a84044bc97098821cce2721ea40a1368f17a091. The changes made the branch to fail to build on Ubuntu/Debian, so reverting the commits and re-opening the pull request. Signed-off-by: Stéphane Graber <stgraber@ubuntu.com>

Update documentation to Docbook 4.5 The package 'docbook-tools' [1] required to format Docbook 3.0 into man pages has been obsoleted a long time ago and can no longer be downloaded from its former homepage. Recent versions of that package -- now called 'docbook2X' --, cannot deal with that old markup format anymore (and don't support the '-w all' command line switch either). To remedy these issues, all SGML files have been updated to Docbook 4.5 so that recent versions of docbook2man can process them. [1] http://sources.redhat.com/docbook-tools/ [2] http://docbook2x.sourceforge.net/ Signed-off-by: Peter Simons <simons@cryp.to>

fix minor spelling error Signed-off-by: Dwight Engen <dwight.engen@oracle.com>

lxc-attach: Add -R option to remount /sys and /proc when only partially attaching When attaching to only some namespaces of the container but not the mount namespace, the contents of /sys and /proc of the host system do not properly reflect the context of the container's pid and/or network namespaces, and possibly others. The introduced -R option adds the possibility to additionally unshare the mount namespace (when it is not being attached) and remount /sys and /proc in order for those filesystems to properly reflect the container's context even when only attaching to some of the namespaces. Signed-off-by: Christian Seiler <christian@iwakd.de> Acked-by: Serge Hallyn <serge.hallyn@canonical.com> Cc: Daniel Lezcano <daniel.lezcano@free.fr>

lxc-attach: Add -s option to select namespaces to attach to This patch allows the user to select any list of namespaces (network, pid, mount, uts, ipc, user) that lxc-attach should use when attaching to the container; all other namespaces will not be attached to. This allows the user to for example attach to just the network namespace and use the host's (and not the container's) network tools to reconfigure the network of the container. Signed-off-by: Christian Seiler <christian@iwakd.de> Cc: Daniel Lezcano <daniel.lezcano@free.fr> Acked-by: Serge Hallyn <serge.hallyn@canonical.com>

lxc-doc-synopsis-args I was getting raw nroff ".SH DESCRIPTION" in my man pages. This fixes the synopsis cmd args so that doesn't happen. Added replaceable to a few arguments. Signed-off-by: Dwight Engen <dwight.engen@oracle.com>

fix lxc-attach.sgml.in spurious variable list Signed-off-by: Daniel Lezcano <daniel.lezcano@free.fr>

Add man page for lxc-attach Signed-off-by: Daniel Lezcano <dlezcano@fr.ibm.com>