Introduction

This past week the mount syscall interception has been implemented in LXD’s seccomp feature, and some of the work for restructuring LXD’s storage engine to accommodate virtual machine support has landed. As part of this focus, several storage and migration related bugs have been fixed.

In LXC a security improvement in the apparmor rules was added to prevent writes to /proc/acpi/** and a memory leak in the terminal state was fixed.

On the Distrobuilder side, we’ve released version 1.0 and added support for building Oracle 8 images.

This week @stgraber and @brauner are at the Open Source Summit in Lyon, details of their presentations are below.

Contribute to LXD

Ever wanted to contribute to LXD but not sure where to start?

We’ve recently gone through some effort to properly tag issues suitable for new contributors on Github: https://github.com/lxc/lxd/labels/Easy

You can also find a slightly longer, more detailed list here: LXD Contribution

FOSDEM 2020 - containers devroom

We will once again be running the containers devroom at the upcoming FOSDEM conference in Brussels, Belgium. This year it’s going to be over the weekend of the 1st and 2nd of February.

The detailed call for papers can be found here: FOSDEM 2020 containers devroom: Call for papers

Upcoming events

Ongoing projects

The list below is feature or refactoring work which will span several weeks/months and can’t be tied directly to a single Github issue or pull request.

Virtual machine support

Rework of internal LXD storage handling

Distrobuilder 1.0 release

Various kernel work

Stable release work for LXC, LXCFS and LXD

Upstream changes

The items listed below are highlights of the work which happened upstream over the past week and which will be included in the next release.

LXD

LXC

LXCFS

Nothing to report this week

Distrobuilder

Distribution work

This section is used to track the work done in downstream Linux distributions to ship the latest LXC, LXD and LXCFS as well as work to get various software to work properly inside containers.

Ubuntu

Nothing to report this week

Snap