Tâche #32877
Mis à jour par Daniel Dehennin il y a plus de 4 ans
Afin de prévenir d’un passage de noyau problématique en stable, il faudrait mettre en place l’utilisation de l’option *@--elevated-privileges@* de la commande *@lxc-attach@*.
Sur la branche *@2.7.2/master@*, je trouve ces références à la commande *@lxc-attach@* :
<pre>
~/src/eole$ rgrep lxc-attach
ead/backend/actions/scribe/tool/etablissements.py: cmd = ['lxc-attach', '-n', 'addc']
eole-ad-dc/diagnose/151-AD: cmd_wrapper="lxc-attach -n $container -- "
eole-ad-dc/bareos/restore/addc.py: cmd = ['lxc-attach', '-n', 'addc', '--'] + cmd
eole-workstation-manager/postservice/30-eole-workstation-manager: CONTAINER_EXEC='lxc-attach -n addc --'
gpo-script/eolead/postservice/07-eolead-gpo:lxc-attach -n addc -- /usr/share/eole/postservice/30-gposcript
scribe-ad/majauto/eolead:CONTAINER_EXEC='lxc-attach -n addc --set-var DEBIAN_FRONTEND=noninteractive --'
scribe-ad/scripts/eolead: lxc-attach -n addc -- /bin/journalctl --no-pager || /bin/true
scribe-ad/scripts/eolead: lxc-attach -n addc -- /bin/ps fax >>/var/log/samba/create_addc.log 2>&1 || /bin/true
scribe-ad/scripts/eolead: IS_RUNNING="$(lxc-attach -n addc -- /bin/systemctl is-system-running || /bin/true)"
scribe-ad/scripts/eolead:lxc-attach -n addc -- /bin/cat /etc/hostname
scribe-ad/scripts/eolead:lxc-attach -n addc -- /usr/sbin/userdel -r Ubuntu 2>/dev/null
scribe-ad/scripts/eolead:lxc-attach -n addc -- /usr/bin/apt-get update
scribe-ad/scripts/eolead:lxc-attach -n addc --set-var DEBIAN_FRONTEND=noninteractive -- /usr/bin/apt-get install eole-ad-pkg -y
scribe-ad/scripts/eolead:lxc-attach -n addc -- /usr/bin/apt-get clean
scribe-ad/postservice/07-eolead-wpad: CONTAINER_EXEC='lxc-attach -n addc --'
scribe-ad/postservice/10-eolead-inject-password: lxc-attach -n addc -- bash /tmp/injectpwd >/dev/null
scribe-ad/postservice/04-eolead-manage-samba:lxc-attach -n addc -- bash /usr/share/eole/samba/samba_configure "$1"
scribe-ad/schedule/scripts/addc:lxc-attach -n addc -- /usr/bin/addc_backup
eole-saslauthd/postservice/30-saslauthd: CONTAINER_EXEC='lxc-attach -n addc --'
eole-ad-dc-ou/postservice/24-ad-ou: lxc-attach -n addc -- samba-tool "$@"
eole-ad-dc-ou/postservice/24-ad-ou: lxc-attach -n addc -- ldbsearch -H /var/lib/samba/private/sam.ldb "$@"
eole-ad-dc-ou/postservice/24-ad-ou: lxc-attach -n addc -- ldbmodify -H /var/lib/samba/private/sam.ldb "$@"
</pre>
Sur la branche *@2.7.2/master@*, je trouve ces références à la commande *@lxc-attach@* :
<pre>
~/src/eole$ rgrep lxc-attach
ead/backend/actions/scribe/tool/etablissements.py: cmd = ['lxc-attach', '-n', 'addc']
eole-ad-dc/diagnose/151-AD: cmd_wrapper="lxc-attach -n $container -- "
eole-ad-dc/bareos/restore/addc.py: cmd = ['lxc-attach', '-n', 'addc', '--'] + cmd
eole-workstation-manager/postservice/30-eole-workstation-manager: CONTAINER_EXEC='lxc-attach -n addc --'
gpo-script/eolead/postservice/07-eolead-gpo:lxc-attach -n addc -- /usr/share/eole/postservice/30-gposcript
scribe-ad/majauto/eolead:CONTAINER_EXEC='lxc-attach -n addc --set-var DEBIAN_FRONTEND=noninteractive --'
scribe-ad/scripts/eolead: lxc-attach -n addc -- /bin/journalctl --no-pager || /bin/true
scribe-ad/scripts/eolead: lxc-attach -n addc -- /bin/ps fax >>/var/log/samba/create_addc.log 2>&1 || /bin/true
scribe-ad/scripts/eolead: IS_RUNNING="$(lxc-attach -n addc -- /bin/systemctl is-system-running || /bin/true)"
scribe-ad/scripts/eolead:lxc-attach -n addc -- /bin/cat /etc/hostname
scribe-ad/scripts/eolead:lxc-attach -n addc -- /usr/sbin/userdel -r Ubuntu 2>/dev/null
scribe-ad/scripts/eolead:lxc-attach -n addc -- /usr/bin/apt-get update
scribe-ad/scripts/eolead:lxc-attach -n addc --set-var DEBIAN_FRONTEND=noninteractive -- /usr/bin/apt-get install eole-ad-pkg -y
scribe-ad/scripts/eolead:lxc-attach -n addc -- /usr/bin/apt-get clean
scribe-ad/postservice/07-eolead-wpad: CONTAINER_EXEC='lxc-attach -n addc --'
scribe-ad/postservice/10-eolead-inject-password: lxc-attach -n addc -- bash /tmp/injectpwd >/dev/null
scribe-ad/postservice/04-eolead-manage-samba:lxc-attach -n addc -- bash /usr/share/eole/samba/samba_configure "$1"
scribe-ad/schedule/scripts/addc:lxc-attach -n addc -- /usr/bin/addc_backup
eole-saslauthd/postservice/30-saslauthd: CONTAINER_EXEC='lxc-attach -n addc --'
eole-ad-dc-ou/postservice/24-ad-ou: lxc-attach -n addc -- samba-tool "$@"
eole-ad-dc-ou/postservice/24-ad-ou: lxc-attach -n addc -- ldbsearch -H /var/lib/samba/private/sam.ldb "$@"
eole-ad-dc-ou/postservice/24-ad-ou: lxc-attach -n addc -- ldbmodify -H /var/lib/samba/private/sam.ldb "$@"
</pre>