packages/utils/lxc, branch master

lxc: update to 7.0.0

2026-06-21T15:25:02Z

Swtich to upstream recommended 7.0 LTS branch[1] which includes a fix for CVE-2026-39402. Full changelog: https://github.com/lxc/lxc/releases/tag/v7.0.0 - Removed patches/021-remove-legacy-cgroup-support.patch due upstream deprecated CGroupV1 support. - Modified files/lxc-auto.init to remove the boot() function which mounted legacy cgroup1 stuff as well. This PR will superceed https://github.com/openwrt/packages/pull/27757 as a result. - Added a version check script for the CI. - Fix another CI failure with -Dmemfd-rexec=false Note this release adds the ability to introduce landlock-sandboxing the monitor process but that would depend on CONFIG_SECURITY_LANDLOCK in the kernel. This can be added in a future PR if there is interest. 1. https://discuss.linuxcontainers.org/t/lxc-7-0-lts-has-been-released/26612#p-90585-support-and-upgrade-8 Build system: x86/64 Build-tested: x86/64-glibc Run-tested: x86/64-glibc Signed-off-by: John Audia

treewide: set me where PKG_MAINTAINER empty

2026-04-16T18:48:36Z

Seems a lot of packages are just getting abandoned by people. Will pick these up and see them through. Signed-off-by: Alexandru Ardelean

lxc: update to 6.0.6

2026-02-28T15:21:08Z

6.0.5 is a bug fix release, see: https://discuss.linuxcontainers.org/t/lxc-6-0-6-lts-has-been-released/26294 Full changelog: https://github.com/lxc/lxc/compare/v6.0.5...v6.0.6 Build system: x86/64 Build-tested: x86/64-glibc Run-tested: x86/64-glibc (Intel N150 based box) Signed-off-by: John Audia

lxc-auto: add optional dnsmasq dep wait on startup

2026-02-21T15:51:20Z

Add opt-in support for waiting for dnsmasq to be fully initialized before starting LXC containers. This addresses issues where containers that depend on DNS resolution (e.g., AdGuardHome) start before dnsmasq has loaded its DHCP lease table, resulting in hostnames not being resolved to IP addresses. The feature is controlled by two new optional UCI config options in /etc/config/lxc-auto whose usage is commented therein. No new depends are introduced with this change. Signed-off-by: John Audia

lxc: fix meson.build on esoteric host systems

2026-01-25T12:55:23Z

When building lxc's meson.build tries to infer something for the target system out of the host build OS. This isn't reproducible and can actually fail on some OS' like NixOS. The failure looked like this, early in the building stage of lxc: > ../../../../build_dir/target-aarch64_cortex-a53_musl/lxc-6.0.5/meson.build:166:8: ERROR: Problem encountered: "distrosysconfdir" is not set The /etc/default seems to be something that is derived on most host systems, so use that as the explicit config. This fixes building lxc on NixOS and similar. This also makes the build more pure and reproducible. Before this commit building the same set of checkouts, same config would yield different lxc artifacts on RedHat and Ubuntu. It was probably harmless though. This also removes inactive maintainer from the Makefile. Signed-off-by: Michal Kazior

lxc: update to 6.0.5

2025-08-19T16:25:39Z

6.0.5 is a bug fix release, see: https://discuss.linuxcontainers.org/t/lxc-6-0-5-lts-has-been-released/24438 Full changelog: https://github.com/lxc/lxc/compare/v6.0.4...v6.0.5 Build system: x86/64 Build-tested: x86/64-glibc Run-tested: x86/64-glibc (Intel N150 based box) Signed-off-by: John Audia

lxc: update to 6.0.4

2025-04-16T16:53:16Z

Added upstream patch to fix starting containers with complex hooks. No existing patches needed to be rebased/simple version bump to 6.0.4. Build system: x86/64 Build-tested: x86/64 Run-tested: x86/64 Signed-off-by: John Audia

lxc: add two files to default backup list

2025-03-15T13:32:58Z

Users running unprivileged containers will need to create /etc/subgid and /etc/subuid and want to have them preserved across updates. This commit adds them to the default backup set. Signed-off-by: John Audia Co-authored-by: Tianling Shen

lxc: lxc-checkconfig fix typo

2025-03-15T12:38:08Z

Fix a typo introduced in https://github.com/openwrt/packages/pull/25719/commits/fd686a32209f74cd12ca434bc3245ef0f7589c46 which partially broke lxc-checkconfig Build system: x86/64 Build-tested: bcm27xx/bcm2712 Run-tested: bcm27xx/bcm2712 Signed-off-by: John Audia

lxc: fix decompression of rootfs tarballs

2025-02-24T16:20:14Z

Modified 025-remove-unsupported-option.patch to both remove the bsdtar command as it ends in errors, see below, and to circumvent an error when extracting to overlayfs[1]. Error when extracting rootfs tarball with bsdtar: tar --absolute-names --numeric-owner '--xattrs-include=*' -xpJf /var/cache/lxc//download/archlinux/current/amd64//default/rootfs.tar.xz -C /mnt/data/lxc/test/rootfs ./usr/bin/newgidmap: Cannot restore extended attributes on this system: Illegal byte sequence lxc-create: test: ../src/lxc/lxccontainer.c: create_run_template: 1589 Failed to create container from template lxc-create: test: ../src/lxc/tools/lxc_create.c: lxc_create_main: 318 Failed to create container test 1. https://github.com/openwrt/openwrt/issues/15888 Signed-off-by: John Audia Build system: x86/64 Build-tested: x86/64/AMD Cezanne Run-tested: x86/64/AMD Cezanne Signed-off-by: John Audia