LXCFS 6.0 LTS has been released

News
,
1

Introduction

The LXCFS team is pleased to announce the release of LXCFS 6.0 LTS!

This is the result of two years of work since the LXCFS 5.0 release and is the fifth LTS release for the LXCFS project. This release will be supported until June 2029.

Highlights

New --enable-cgroup option

LXCFS can provide a virtual cgroupfs (v1) tree for use by containers.
This feature was implemented prior to cgroup namespaces being implemented in the kernel and effectively allow providing a similar experience on kernels lacking that feature.

As most supported Linux distributions now all feature a kernel supporting cgroup namespaces and most new distros have even switched away from cgroupv1, it didn’t make sense to keep this feature enabled by default. As a result, it has now been moved behind a new startup argument, --enable-cgroup.

CPUs no longer masked in /sys/devices/system/cpu

LXCFS 5.0 shipped with logic to filter out entries in /sys/devices/system/cpu based on what CPUs were allowed in the caller’s cpuset. This behavior doesn’t actually reflect the behavior on normal systems where even offline CPUs still show up in /sys/devices/system/cpu.

As a result, LXCFS 6.0 reversed that logic and is now only making sure to keep the list of online/offline CPUs up to date while the individual CPU directories all remain accessible.

Full changelog

Changelog
  • lxcfs_fuse: ensure lxcfs_fuse_compat.h is included after including fuse header
  • tree-wide: remove struct stat argument from DIR_FILLER and make it static inline
  • tree-wide: ensure that file information is set even with legacy fuse
  • tests: add test for issue #522
  • meson: Include documentation
  • workflows: disable documentation generation
  • sysfs: Don’t incorrectly filter entries
  • tests: Fix sysfs test
  • utils: add and use opathdir()
  • sysfs_fuse: fix indendation
  • sysfs_fuse: generate file info for cpu entries as well
  • meson: bump fuse version
  • github: add fuse3 tests
  • meson: handle fuse versions with buggy dt_type handling
  • init/meson: Use libdir instead of hardcoded /lib path
  • Query systemd system unit dir.
  • support explicit fuse version choice
  • github: Re-organize Github Actions
  • tests: Skip sysfs test on older FUSE versions
  • init: Fix install paths for sysvinit and openrc
  • meson: Support multiple init systems
  • meson: Syntax nit
  • proc_fuse: extra space in /proc/stat
  • util: remove doubled comment
  • sysfs: correct file size of /sys/devices/system/cpu/online.
  • sysfs: cleanup sys_devices_system_cpu_online_getsize
  • cgroup v2: return cpuset cpu count when no quota is set
  • re-initialize library after reload
  • replace opathdir with opendir_flags
  • github: Restrict permissions
  • github: Validate target branch
  • fix reinitialization with fuse3
  • set oom_score_adj of lxcfs process to -1000
  • init: respect --prefix when installing systemd unit files
  • Fix build on ia64
  • doc: guide for mount /sys/devices/system/cpu in docker demo
  • utils: add safe_uint32() helper
  • macro.h: add strnprintf macro
  • utils: add get_task_personality helper
  • cpuview: paththrough personality when reading cpuinfo
  • cpuview: fix possible use-after-free in find_proc_stat_node
  • github: make coverity workflow work with meson
  • README: how to build with sanitizers
  • cpuset_parse: check input string in cpuset_nexttok
  • github: enable ASAN and UBSAN during PR tests
  • lxcfs: explicitly enable direct_IO for libfuse3
  • lxcfs: fix copypaste typo in error message
  • /proc/stat: render physical cpu number in non-view mode
  • sysfs: don’t mask cpus in /sys/devices/system/cpu
  • lxcfs: handle NULL path in lxcfs_releasedir/lxcfs_release
  • cpuview: fix ABBA deadlock in find_proc_stat_node
  • build: tools: keep trailing newline in jinja2 renderer
  • Revert “init: respect --prefix when installing systemd unit files”
  • proc: fix /proc/diskstats output format
  • github: start using ubuntu-22.04 image
  • github: remove ubuntu-18.04
  • tests: adapt for cgroup2
  • cpuview: resolve cpu cgroup path separately from cpuset the cgroup path is different in kubernetes with containerd runtime.
  • lxcfs: preparation for FUSE_INTERRUPT support
  • lxcfs: add fuse interruptible locks
  • cpuview: start to use interruptible lock primitives
  • github: Update for main branch
  • proc_loadavg: fix ABBA deadlock between read/refresh
  • proc: Fix /proc/cpuinfo not respecting personality
  • proc_loadavg.c: Fix incompatible integer to pointer conversion
  • cgroups: cleanup and remove unused cgroup2_devices code
  • loadavg: make cleanup of start_loadavg
  • cpuview: pass a correct argument to lxcfs_debug
  • lxcfs: Add startup message
  • proc: fix MemAvailable in /proc/meminfo to exclude tmpfs files
  • systemd: mkdir -p the target mount dir
  • typofix: fix incorrect printing in lxcfs help interface
  • Add macro pivot&bpf for loongarch64
  • lxc.mount.hook: Skip cpu sysfs logic if missing target
  • sysfs: forbid write()
  • lxcfs: introduce new option --enable-cgroup
  • tests: use --enable-cgroup for tests
  • github: workaround CI issue with ASAN
  • Revert “github: workaround CI issue with ASAN”
  • proc_fuse: Fix get_swap_info typo swtotal == 0 → *swtotal == 0
  • proc: Fix swap handling for cgroups v2 (can_use_swap)
  • proc: Fix swap handling for cgroups v2 (zero limits)
  • cgroup_utils: explicitly check for cgroup2 FDs in cgroup_walkup_to_root

Support and upgrade

LXCFS 6.0 will be supported until June 2029 and our current LTS release, LXCFS 5.0 will now switch to a slower maintenance pace, only getting critical bugfixes and security updates.

We strongly recommend all LXCFS users to plan an upgrade to the 6.0 branch.

Future release cadence

To make new LXCFS features more readily available to users, we have decided to start producing non-LTS releases again. The planned interval is every 6 months with LXCFS 6.1 planned for October.

Those releases will not benefit from the LTS guarantees around stability, support and security maintenance and will only be supported until the next release comes out.

Production users will likely want to remain on an LTS release.

Downloads

Contributors

The LXCFS 6.0 release was brought to you by a total of 25 contributors.

4 Likes