packages/utils/lxc, branch master

lxc: update to 6.0.6

2026-02-28T15:21:08Z

6.0.5 is a bug fix release, see: https://discuss.linuxcontainers.org/t/lxc-6-0-6-lts-has-been-released/26294 Full changelog: https://github.com/lxc/lxc/compare/v6.0.5...v6.0.6 Build system: x86/64 Build-tested: x86/64-glibc Run-tested: x86/64-glibc (Intel N150 based box) Signed-off-by: John Audia

lxc-auto: add optional dnsmasq dep wait on startup

2026-02-21T15:51:20Z

Add opt-in support for waiting for dnsmasq to be fully initialized before starting LXC containers. This addresses issues where containers that depend on DNS resolution (e.g., AdGuardHome) start before dnsmasq has loaded its DHCP lease table, resulting in hostnames not being resolved to IP addresses. The feature is controlled by two new optional UCI config options in /etc/config/lxc-auto whose usage is commented therein. No new depends are introduced with this change. Signed-off-by: John Audia

lxc: fix meson.build on esoteric host systems

2026-01-25T12:55:23Z

When building lxc's meson.build tries to infer something for the target system out of the host build OS. This isn't reproducible and can actually fail on some OS' like NixOS. The failure looked like this, early in the building stage of lxc: > ../../../../build_dir/target-aarch64_cortex-a53_musl/lxc-6.0.5/meson.build:166:8: ERROR: Problem encountered: "distrosysconfdir" is not set The /etc/default seems to be something that is derived on most host systems, so use that as the explicit config. This fixes building lxc on NixOS and similar. This also makes the build more pure and reproducible. Before this commit building the same set of checkouts, same config would yield different lxc artifacts on RedHat and Ubuntu. It was probably harmless though. This also removes inactive maintainer from the Makefile. Signed-off-by: Michal Kazior

lxc: update to 6.0.5

2025-08-19T16:25:39Z

6.0.5 is a bug fix release, see: https://discuss.linuxcontainers.org/t/lxc-6-0-5-lts-has-been-released/24438 Full changelog: https://github.com/lxc/lxc/compare/v6.0.4...v6.0.5 Build system: x86/64 Build-tested: x86/64-glibc Run-tested: x86/64-glibc (Intel N150 based box) Signed-off-by: John Audia

lxc: update to 6.0.4

2025-04-16T16:53:16Z

Added upstream patch to fix starting containers with complex hooks. No existing patches needed to be rebased/simple version bump to 6.0.4. Build system: x86/64 Build-tested: x86/64 Run-tested: x86/64 Signed-off-by: John Audia

lxc: add two files to default backup list

2025-03-15T13:32:58Z

Users running unprivileged containers will need to create /etc/subgid and /etc/subuid and want to have them preserved across updates. This commit adds them to the default backup set. Signed-off-by: John Audia Co-authored-by: Tianling Shen

lxc: lxc-checkconfig fix typo

2025-03-15T12:38:08Z

Fix a typo introduced in https://github.com/openwrt/packages/pull/25719/commits/fd686a32209f74cd12ca434bc3245ef0f7589c46 which partially broke lxc-checkconfig Build system: x86/64 Build-tested: bcm27xx/bcm2712 Run-tested: bcm27xx/bcm2712 Signed-off-by: John Audia

lxc: fix decompression of rootfs tarballs

2025-02-24T16:20:14Z

Modified 025-remove-unsupported-option.patch to both remove the bsdtar command as it ends in errors, see below, and to circumvent an error when extracting to overlayfs[1]. Error when extracting rootfs tarball with bsdtar: tar --absolute-names --numeric-owner '--xattrs-include=*' -xpJf /var/cache/lxc//download/archlinux/current/amd64//default/rootfs.tar.xz -C /mnt/data/lxc/test/rootfs ./usr/bin/newgidmap: Cannot restore extended attributes on this system: Illegal byte sequence lxc-create: test: ../src/lxc/lxccontainer.c: create_run_template: 1589 Failed to create container from template lxc-create: test: ../src/lxc/tools/lxc_create.c: lxc_create_main: 318 Failed to create container test 1. https://github.com/openwrt/openwrt/issues/15888 Signed-off-by: John Audia Build system: x86/64 Build-tested: x86/64/AMD Cezanne Run-tested: x86/64/AMD Cezanne Signed-off-by: John Audia

lxc: add gnu-tar as a depends to fix lxc-create

2025-02-24T16:20:14Z

Add gnu-tar as a dependency for lxc-create which is needed to properly extract the root file system tarball. Without it, symlink target of /bin/tar is busybox and it lacks proper support to extract with xattrs. The default gnu-tar is actually built without this support as well, but it is able to extract the rootfs tarballs with a warning not an error which is not the case with busybox which ends in an error. Signed-off-by: John Audia Build system: x86/64 Build-tested: x86/64/AMD Cezanne Run-tested: x86/64/AMD Cezanne

lxc: add missing deps

2025-02-24T08:08:31Z

Several deps are missing based the output of lxc-checkconfig shown below before this commit is applied. CONFIG_IP_NF_TARGET_MASQUERADE and CONFIG_IP6_NF_TARGET_MASQUERADE are only needed for lxc-net which we do not package. % lxc-checkconfig | grep missing Cgroup device: missing CONFIG_IP_NF_TARGET_MASQUERADE: missing CONFIG_IP6_NF_TARGET_MASQUERADE: missing CONFIG_NETFILTER_XT_TARGET_CHECKSUM: missing FUSE (for use with lxcfs): missing checkpoint restore: missing CONFIG_UNIX_DIAG: missing CONFIG_INET_DIAG: missing CONFIG_PACKET_DIAG: missing CONFIG_NETLINK_DIAG: missing Additionally, two new patches have been added which remove checks for options that OpenWrt currently does not package and can serve are false positives for missing items from our kernel config, namely: lxc-net and lxc-checkpoint After applying this commit, below is the output showing that the kernel config[1] should pass all tests for functionality: % CONFIG=config ./lxc-checkconfig LXC version 6.0.3 --- Namespaces --- Namespaces: enabled Utsname namespace: enabled Ipc namespace: enabled Pid namespace: enabled User namespace: enabled Network namespace: enabled Namespace limits: cgroup: 383849 ipc: 383849 mnt: 383849 net: 383849 pid: 383849 time: 383849 user: 383849 uts: 383849 --- Control groups --- Cgroups: enabled Cgroup namespace: enabled Cgroup v1 mount points: Cgroup v2 mount points: - /sys/fs/cgroup Cgroup device: enabled Cgroup sched: enabled Cgroup cpu account: enabled Cgroup memory controller: enabled Cgroup cpuset: enabled --- Misc --- Veth pair device: enabled, loaded Macvlan: enabled, not loaded Vlan: enabled, not loaded Bridges: enabled, loaded Advanced netfilter: enabled, loaded CONFIG_NETFILTER_XT_TARGET_CHECKSUM: enabled, not loaded CONFIG_NETFILTER_XT_MATCH_COMMENT: enabled, loaded --- Checkpoint/Restore --- checkpoint restore: missing CONFIG_FHANDLE: enabled CONFIG_EVENTFD: enabled CONFIG_EPOLL: enabled CONFIG_UNIX_DIAG: enabled CONFIG_INET_DIAG: enabled CONFIG_PACKET_DIAG: enabled CONFIG_NETLINK_DIAG: enabled File capabilities: enabled 1. Generated on 23-Feb-2025 running bcm27xx/bcm2712 on r28869+1 Signed-off-by: John Audia