Change log for lxc package in Debian

lxc (1:5.0.3-3) unstable; urgency=medium

  [ Aleksandr Mikhalitsyn ]
  * debian/tests: Addition of the "no-devel" test
  * debian/tests/unprivileged-containers: Fix and make work on Ubuntu

  [ Mathias Gibbens ]
  * d/control:
    - Update Build-Depends from systemd -> systemd-dev (Closes: #1060614)
    - Update Build-Depends from pkg-config -> pkgconf
  * Cherry-pick upstream fixes for d/tests/test-usernic
  * Update years in d/copyright

  [ Michael Biebl ]
  * Install PAM modules into /usr. (Closes: #1061490)
  * Drop Build-Depends on dh-exec, no longer necessary.

  [ Stéphane Graber ]
  * Cherry-pick upstream bugfixes:
    - 0013-cherry-pick-remove-broken-cgroup-tests.patch
    - 0014-cherry-pick-lxc-copy-apparmor.patch
  * Add Ubuntu-specific patch (for now):
    - Handle AppArmor ABI 4 with userns extension
  * debian/rules
    - Add lxc-copy apparmor profile
    - Apply Ubuntu-specific patch

 -- Mathias Gibbens <email address hidden>  Sat, 30 Mar 2024 00:45:04 +0000

lxc (1:5.0.3-2.1) unstable; urgency=medium

  * Non-maintainer upload.
  * Rename libraries for 64-bit time_t transition.  Closes: #1062679

 -- Graham Inggs <email address hidden>  Thu, 29 Feb 2024 10:37:01 +0000

lxc (1:5.0.3-2.1~exp1) experimental; urgency=medium

  * Non-maintainer upload.
  * Rename libraries for 64-bit time_t transition.

 -- Graham Inggs <email address hidden>  Fri, 02 Feb 2024 16:52:06 +0000

lxc (1:5.0.2-1+deb12u2) bookworm; urgency=medium

  * Cherry-pick upstream fix for creating ephemeral copies (See #1001713)

 -- Mathias Gibbens <email address hidden>  Thu, 30 Nov 2023 01:17:33 +0000

lxc (1:5.0.3-2) unstable; urgency=medium

  * Switch default branch to debian/sid
  * Add criu as a Suggests for bin:lxc (Closes: #947334)
  * Cherry-pick upstream fix for creating ephemeral copies (Closes: #1001713)

 -- Mathias Gibbens <email address hidden>  Thu, 30 Nov 2023 01:04:13 +0000

lxc (1:5.0.2-1+deb12u1) bookworm; urgency=medium

  * Cherry-pick upstream "fix nftables syntax for IPv6 NAT" (Closes: #1049976)
  * Adjust branch in d/gbp.conf

 -- Mathias Gibbens <email address hidden>  Fri, 22 Sep 2023 16:35:52 +0000

lxc (1:5.0.3-1) unstable; urgency=medium

  [ Ceppo ]
  * Add Italian debconf translation (Closes: #1050106)

  [ Gioele Barabucci ]
  * d/tests/control: Remove unnecessary dependency on lsb-release

  [ Helmut Grohne ]
  * Fix FTBFS when systemdsystemunitdir changes in systemd.pc (Closes: #1052379)

  [ Mathias Gibbens ]
  * New upstream release
  * Add translator information to d/copyright
  * d/control:
    - Remove liblua5.2-dev from Build-Depends (Closes: #1050519)
    - Remove lsb-base from Depends
  * Add d/clean to fix failing to build twice in a row (Closes: #1046733)

  [ Remus-Gabriel Chelu ]
  * Add Romanian debconf translation (Closes: #1032345)

 -- Mathias Gibbens <email address hidden>  Fri, 22 Sep 2023 14:53:31 +0000

lxc (1:4.0.6-2+deb11u2) bullseye; urgency=medium

  * Backport fix for CVE-2022-47952

 -- Mathias Gibbens <email address hidden>  Sun, 19 Feb 2023 22:15:53 +0000

lxc (1:5.0.2-1) unstable; urgency=medium

  * New upstream release
    - Fixes CVE-2022-47952
    - Drop glibc 2.36 patch applied upstream
  * Bump Standards-Version in d/control (no changes needed)
  * Refresh d/copyright

 -- Mathias Gibbens <email address hidden>  Tue, 17 Jan 2023 02:53:00 +0000

lxc (1:5.0.1-2) unstable; urgency=medium

  * d/control:
    - Add myself to Uploaders
    - Bump Standards-Version (no changes needed)
    - Set minimum required meson version in Build-Depends (Closes: #1016523)
    - Update list of architectures missing libseccomp-dev
    - Add Rules-Requires-Root: binary-targets
  * Add myself to d/copyright
  * d/liblxc1.symbols:
    - Avoid build failure due to missing symbols on architectures without
      libseccomp-dev (Closes: #922545)
  * Drop d/patches/0006-adjust-pam-dir.patch and modify d/libpam-cgfs.install
    to directly install pam_cgfs.so
  * Cherry-pick upstream fixes for building with glibc 2.36 (Closes: #1023437)
  * Add d/upstream/metadata
  * Remove asterisk from NEWS file to silence lintian tag

 -- Mathias Gibbens <email address hidden>  Fri, 04 Nov 2022 19:54:47 +0000

lxc (1:5.0.1-1) unstable; urgency=medium

  * Team upload

  [ Mathias Gibbens ]
  * New upstream release 5.0.1 (Closes: #1005099, #1010843, #1006353)
    - Switch to meson build system and update d/rules as needed
    - Update Build-Depends and Depends in d/control
    - Drop patches no longer needed / applied upstream
    - Add patch to fix installed location of libpam_cgfs.so
    - Update d/liblxc-common.lintian-overrides
    - Update d/liblxc1.symbols

  [ Antonio Terceiro ]
  * debian/rules: drop handling of bash completion links

  [ Pierre-Elliott Bécue ]
  * Apply Janitor's changes on d/control constraints.
  * Fix debian/liblxc1.symbols
  * d/p/0004: Add a patch to make systemd security features working in nesting
    apparmor profile.
    This can cause security risks in privileged containers, so it's only in
    nesting profile. (Closes: #995350)

 -- Mathias Gibbens <email address hidden>  Mon, 01 Aug 2022 22:46:52 +0200

lxc (1:4.0.6-2+deb11u1) bullseye; urgency=medium

  * lxc-download: Switch GPG server.
    The default server used to download gpg keys from has been deprecated,
    and therefore creating containers using the `download` template is now
    broken. This is fixed with an upstream patch by Stéphane Graber that
    points to a valid server. (Closes: #991615)

 -- Antonio Terceiro <email address hidden>  Thu, 13 Jan 2022 16:57:39 -0300

lxc (1:4.0.11-1) unstable; urgency=medium

  * Backporting changes from experimental to unstable
  * d/control: Move from Conflicts + Breaks to Breaks + Replaces

 -- Pierre-Elliott Bécue <email address hidden>  Mon, 14 Feb 2022 00:22:35 +0100

lxc (1:4.0.11-1~exp4) experimental; urgency=medium

  * d/copyright: Clean the mess and extract as much as possible from the files
    in the repo (Closes: #1004978)
  * wrap-and-sort

 -- Pierre-Elliott Bécue <email address hidden>  Fri, 04 Feb 2022 23:06:35 +0100

lxc (1:4.0.11-1~exp3) experimental; urgency=medium

  * d/control: Update the dependency of lxc from liblxc1 to liblxc-common.

 -- Pierre-Elliott Bécue <email address hidden>  Wed, 02 Feb 2022 22:37:20 +0100

lxc (1:4.0.10-2) unstable; urgency=medium

  [ Antonio Terceiro ]
  * debian/rules: re-enable installation of lxc-top (Closes: #1003591)
  * Drop dependency on bridge-utils (Closes: #1004733)
  * lxc-net: don't start by default inside lxc
  * autopkgtest: add basic create/destroy test

  [ Diederik de Haas ]
  * Replace deprecated 'which' with 'command -v'

 -- Antonio Terceiro <email address hidden>  Wed, 02 Feb 2022 15:45:10 -0300

lxc (1:4.0.10-1) unstable; urgency=medium

  * New upstream version 4.0.10
    - Builds fine against autoconf 2.70 (Closes: #978862)
  * Refresh patches.
    0007-conf-fix-containers-retaining-CAP_NET_ADMIN.patch dropped, applied
    upstream.
  * Update debian/liblxc1.symbols

 -- Antonio Terceiro <email address hidden>  Fri, 27 Aug 2021 09:15:30 -0300

lxc (1:4.0.6-2) unstable; urgency=medium

  * d/contrib/lxc-net: Add a commented dnsmasq reference for the users to be
    able to use this configuration if needed.
  * d/contrib/bin/lxc-unpriv-{start,attach} helper scripts to make
    unprivileged containers easier to start manually
  * d/README.Debian: Added some intel about how to handle properly
    unprivileged containers and systemd user sessions, and potential
    filesystem ACL issues/implications
    (Closes: #989317, 987293)
  * d/p/0007: Makes the containers able to have /proc/sys/net rw
    (Closes: #981980)

 -- Pierre-Elliott Bécue <email address hidden>  Fri, 11 Jun 2021 21:43:41 +0200

lxc (1:4.0.6-1) unstable; urgency=medium

  * New upstream version 4.0.6
  * Refresh patches; drop patches applied upstream
  * Remove unreliable test for unprivileged containers
  * Move lxc-net dependencies from Recommends to Depends
    - Moved from Recommends: to Depends bridge-utils, dnsmasq-base,
      iptables, iproute2
    - Recommends: drop nftables; lxc-net uses iptables only, and nothing in
      lxc even references nftables.
  * Document and add new autopkgtest for unprivileged containers
  * Recommends: add wget, needed by the download template

 -- Antonio Terceiro <email address hidden>  Sun, 31 Jan 2021 14:29:40 -0300

lxc (1:4.0.5-2) unstable; urgency=medium

  * Add upstream patch to fix reboots in autopkgtest under cgroupv2
    (Closes: #978425)

 -- Antonio Terceiro <email address hidden>  Wed, 30 Dec 2020 10:17:51 -0300

lxc (1:4.0.5-1) unstable; urgency=medium

  * New upstream version 4.0.5
  * Refresh patches; drop patches already applied upstream
  * Add upstream patch to fix container startup on Linux 5.10 (Closes: #977923)
  * liblxc1.symbols: update

 -- Antonio Terceiro <email address hidden>  Tue, 22 Dec 2020 21:50:20 -0300

lxc (1:4.0.4-6) unstable; urgency=medium

  * autopkgtest: switch unpriv test to the new Architecture: field

 -- Antonio Terceiro <email address hidden>  Wed, 28 Oct 2020 16:59:41 -0300

lxc (1:4.0.4-5) unstable; urgency=medium

  * Team upload.
  * d/tests/unpriv: skip on arm64 as the test (right now) only works on amd64

 -- Johannes 'josch' Schauer <email address hidden>  Fri, 02 Oct 2020 21:34:46 +0200

lxc (1:4.0.4-4) unstable; urgency=medium

  * d/tests/unpriv: Adds dnsmasq-base to the qemu VM filesystem hosting the
    unprivileged containers tested

 -- Pierre-Elliott Bécue <email address hidden>  Thu, 01 Oct 2020 18:54:52 +0200

lxc (1:4.0.4-3) unstable; urgency=medium

  * d/p/0007: patch to avoid compilers complaints regarding short writes in
    the cgroup cgfsng, mitigating security risks of a buffer overrun.
  * d/control: For liblxc1: demote cgroupfs-mount | systemd from Depends to
    Suggests. Closes: #968404

 -- Pierre-Elliott Bécue <email address hidden>  Fri, 25 Sep 2020 14:12:38 +0200

lxc (1:4.0.4-2) unstable; urgency=medium

  * d/p/0005: patch to avoid lxc_stop failure if cgroup unfreeze fails
    Closes: #961584
  * d/lxc.lintian-overrides: Drop postinst-has-useless-call-to-ldconfig which
    is not a valid tag anymore

 -- Pierre-Elliott Bécue <email address hidden>  Sat, 19 Sep 2020 23:18:02 +0200

lxc (1:4.0.4-1) unstable; urgency=medium

  * New upstream release 4.0.4-1
    Closes: #969229, #966998
  * d/p/0003: Remove obsolete configurations from lxc.service.
    Closes: #968169
  * d/liblxc1.symbols: updated
  * d/lxc-test.lintian-overrides updated

 -- Pierre-Elliott Bécue <email address hidden>  Sat, 05 Sep 2020 23:21:40 +0200

lxc (1:4.0.2-1) unstable; urgency=medium

  * Rebuild for unstable

  [ Pierre-Elliott Bécue ]
  * Enable lxc-test-apparmor in autopkgtest (Closes: #958406)
  * Bump debhelper-compat level to 13
  * Add a debian-branch entry in debian/gbp.conf

  [ Antonio Terceiro ]
  * Enable LXC networking by default

  [ Johannes Schauer ]
  * Add autopkgtest testing unprivileged containers

  [ Camaleón ]
  * Add Spanish translation for the Debconf template (Closes: #959080)

 -- Pierre-Elliott Bécue <email address hidden>  Mon, 25 May 2020 18:15:10 +0200

lxc (1:4.0.2-1~1) experimental; urgency=medium

  * New upstream release 4.0.2 (Closes: #956014)
    - CGroup2 support (Closes: #944389, #946172, #947335)
    - Infrastructure for system call interception
    - PIDfd support
    - Improved network handling
    - Hardening and refactoring throughout the codebase, fixing very many issues

    + Patches rebased accordingly
  * Bump Standards-Version to 4.5.0
  * Labels liblxc1 and libpam-cgfs as Multi-Arch: same

 -- Pierre-Elliott Bécue <email address hidden>  Sun, 19 Apr 2020 00:31:46 +0200

lxc (1:3.1.0+really3.0.4-3) unstable; urgency=medium

  * Apply upstream patch to fix removal of containers that contain imutable
    files when using the plain directory backend.

 -- Antonio Terceiro <email address hidden>  Sat, 11 Apr 2020 17:20:29 -0300

lxc (1:3.1.0+really3.0.4-2) unstable; urgency=medium

  * 0009-lxc-attach-make-sure-exit-status-of-command-is-retur.patch: ensure
    lxc-attach returns the exit status of executed command (Closes: 934983)
  * debian/rules: fix dh_fixperms exception for lxc-user-nic (Closes: #934155)
  * debian/liblxc1.symbols: fix versioning information for sha1sum_file

 -- Antonio Terceiro <email address hidden>  Mon, 19 Aug 2019 21:42:25 -0300

lxc (1:3.1.0+really3.0.4-1.1) unstable; urgency=medium

  * Non-maintainer upload.
  * cgroups: Properly handle cpuset initialization
    d/p/0007: cgroups: hande cpuset initialization race
    d/p/0008: cgroups: initialize cpuset properly
   (Closes: #934387)

 -- Salvatore Bonaccorso <email address hidden>  Wed, 14 Aug 2019 16:40:03 +0200

lxc (1:3.1.0+really3.0.4-1) unstable; urgency=medium

  * New upstream release 3.0.4
    + Drop patches 0004 and 0005 as the fix for runC CVE-2019-5736 is now
      upstream.
    + Fixes lxc-cgroup giving no output. (Closes: #929926)
  * d/p/0004: Prevent access to /proc/acpi via apparmor. (Closes: #906805)
  * d/p/0005: lxc.service: starts after remote-fs.target to avoid some
    failures for containers with their FS accessible via a remote fs
  * d/p/0006: Strips a non-expanded tag from lxc.pc.in
  * d/control:
    - Bump Standards-Version to 4.4.0
    - Update debheler-compat to 12
  * d/rules: Drop dh_strip override as it's not needed anymore.
  * d/lxc.lintian-overrides: Dropped a setuid-binary warning that was a false
    positive.

 -- Pierre-Elliott Bécue <email address hidden>  Tue, 06 Aug 2019 15:33:36 +0200

lxc (1:3.1.0+really3.0.3-8) unstable; urgency=medium

  * d/control:
    - bin:lxc sets AppArmor as a Recommend instead of a Dependency
  * d/README.Debian:
    - Update the documentation to explain how to manage containers not
      starting if AppArmor is missing.

 -- Pierre-Elliott Bécue <email address hidden>  Sun, 14 Apr 2019 15:46:47 +0200

lxc (1:3.1.0+really3.0.3-7) unstable; urgency=medium

  * d/ccontrol:
    - Add a dependency to AppArmor for lxc package as the default.conf file
      includes an AppArmor profile.
  * d/{NEWS,README.Debian}:
    - Add appropriate documentation for unprivileged containers
      (Closes: #925899)

 -- Pierre-Elliott Bécue <email address hidden>  Tue, 09 Apr 2019 02:03:05 +0200

lxc (1:3.1.0+really3.0.3-6) unstable; urgency=medium

  * d/patches/0005: Tweaks the 0004 patch for CVE-2019-5736 (Closes: #923932)
  * d/NEWS: summary of the important changes since LXC2.

 -- Pierre-Elliott Bécue <email address hidden>  Sat, 09 Mar 2019 15:49:21 +0100

lxc (1:3.1.0+really3.0.3-5) unstable; urgency=medium

  [ Christian Kastner ]
  * /etc/default/lxc.conf Change back to lxc.net.0.type
    (Closes: #923395)

  [ Frans Spiesschaert ]
  * debian/po/nl.po: Add Dutch translation of debconf messages
    (Closes: #923328)

 -- Antonio Terceiro <email address hidden>  Sat, 02 Mar 2019 12:33:08 -0300

lxc (1:3.1.0+really3.0.3-4) unstable; urgency=medium

  [ Lev Lamberov ]
  * d/po/ru.po: Add russian translation for debconf templates (Closes: #920916)

  [ Américo Monteiro ]
  * d/po/pt.po: Add portuguese translation for debconf templates (Closes:
    #919221)

  [ Adriano Rafael Gomes ]
  * d/po/pr_BR.po: Add brazilian portuguese translation for debconf templates
    (Closes: #920543)

  [ Pierre-Elliott Bécue ]
  * d/patches/0004: Import the fix for CVE-2019-5736. (Closes: #922169)

 -- Pierre-Elliott Bécue <email address hidden>  Sat, 16 Feb 2019 16:21:41 +0100

lxc (1:3.1.0+really3.0.3-3) unstable; urgency=medium

  * d/lxc.postinst:
    - Add a fallback method to handle the cases where apparmor_parser may
      fail while present. (nested virt or whatever else) (Closes: #921667)
  * d/patches:
    - Backports 3 patches from lxc 3.1 to have Apparmor confinement working
      properly with systemd 240. (Closes: #916639)
  * d/tests/exercise:
    - Update the configuration to match lxc 3 standards
  * d/contrib/default.conf:
    - Provide a minimalist default.conf including appropriate apparmor
      parameters.

 -- Pierre-Elliott Bécue <email address hidden>  Mon, 11 Feb 2019 23:03:53 +0100

lxc (1:3.1.0+really3.0.3-2) unstable; urgency=medium

  [ Chris Leick ]
  * d/po/de.po:
    - Added German Debconf translation (Closes: #916263)

  [ Pierre-Elliott Bécue ]
  * d/lxc.postinst:
    - Add a call to apparmor_parser if present to ensure lxc containers work
      with apparmor after an upgrade. (Closes: #918842)
    - Add a check to make sure we're on a proper upgrade or a proper install
      to decide whether or not some code blocks are executed.
  * d/lxc.config:
    - Asks for the upgrade of configuration only when lxc is actually upgraded
      and not installed.

 -- Pierre-Elliott Bécue <email address hidden>  Fri, 11 Jan 2019 01:12:41 +0100

lxc (1:3.1.0+really3.0.3-1) unstable; urgency=medium

  * Rollback to version 3.0.3 as this is a LTS release.
  * Revert symbols file.
  * d/control:
    - Bump Standards-Version to 4.3.0

 -- Pierre-Elliott Bécue <email address hidden>  Thu, 10 Jan 2019 23:26:47 +0100

lxc (1:3.1.0-1) unstable; urgency=medium

  [ Pierre-Elliott Bécue ]
  * New upstream release 3.1.0

  [ Shengjing Zhu ]
  * d/liblxc1.symbols: Fix liblxc1 symbol version, missing the Debian epoch.
    Closes: #916362

 -- Pierre-Elliott Bécue <email address hidden>  Sat, 22 Dec 2018 22:56:16 +0100

lxc (1:3.0.3-1) unstable; urgency=medium

  * New upstream version: 3.0.3
  * d/liblxc1.symbols: Updated symbols table
  * d/lxc.postinst: no absolute path for lxc-update-config (it's in the PATH)
  * d/copyright: remove statement for src/includes/ifaddrs.{c, h} as they're
    not shipped anymore
  * Release to unstable.

 -- Pierre-Elliott Bécue <email address hidden>  Tue, 04 Dec 2018 08:04:18 +0100

lxc (1:3.0.2-1~exp+4) experimental; urgency=medium

  * d/rules: strip unnecessary DPKG_EXPORT_BUILDFLAGS and include that are not
    needed since dh compat 9
  * d/templates, d/po/*: updated templates and translation
  * d/lxc.config: refactor the config script a little

 -- Pierre-Elliott Bécue <email address hidden>  Thu, 29 Nov 2018 22:24:03 +0100

lxc (1:3.0.2-1~exp+3) experimental; urgency=medium

  * d/control:
    - Update Recommends to suggest more recent tools.
      Replaces iptables => nftables | iptables
      Add iproute2 for more precise bridge manipulation
  * d/lxc{.config,.postinst}, d/templates, d/po/*
    - Implement a maintainer script allowing an auto-upgrade of lxc
      configuration files

 -- Pierre-Elliott Bécue <email address hidden>  Thu, 29 Nov 2018 01:07:02 +0100

lxc (1:2.0.9-7) unstable; urgency=medium

  * debian/rules: pass --disable-werror to ./configure. Fixes FTBFS against
    python3 3.7

 -- Antonio Terceiro <email address hidden>  Tue, 27 Nov 2018 14:53:56 -0200

lxc (1:3.0.2-1~exp+2) experimental; urgency=medium

  * d/control:
    - Add explicit Recommend on lxc-templates
    - Version the Recommends
    - Update the Breaks on liblxc1
    - Add myself to uploaders

 -- Pierre-Elliott Bécue <email address hidden>  Sun, 18 Nov 2018 23:57:26 +0100

lxc (1:3.0.2-1~exp+1) experimental; urgency=medium

  * Team upload
  * New upstream release: 3.0.2
  * d/p/000[1-3]*:
    - Dropped because Debian template got out of lxc release
  * d/p/000[4-7]*:
    - Upstream fixes taken into account into this release
  * d/control:
    - Drop packages lua-lxc and python3-lxc, as they got extracted from there
      by upstream
    - Raise debhelper dependency to 11
    - Bump Standards-Version to 4.2.1. No change required
    - Update VCS fields
    - Add libpam-cgfs that was previously in src:lxcfs
  * d/compat raised to 11
  * d/copyright:
    - Use HTTPS url for the copyright format link
    - Updated copyrights
  * d/watch:
    - Updated version and regex
  * d/libpam-cgfs* d/pam-cgfs.config added with pam-cgfs inclusion in the
    package
  * d/liblxc1.symbols added

 -- Pierre-Elliott Bécue <email address hidden>  Sat, 17 Nov 2018 09:23:20 +0100

lxc (1:2.0.9-6.2) unstable; urgency=medium

  * Non-maintainer upload.
  * autodev: adapt to changes in Linux 4.18 (Closes: #908223)

 -- Salvatore Bonaccorso <email address hidden>  Mon, 22 Oct 2018 23:18:55 +0200

lxc (1:2.0.9-6.1) unstable; urgency=medium

  * Non-maintainer upload.
  * utils: add LXC_PROC_PID_FD_LEN
  * CVE 2018-6556: verify netns fd in lxc-user-nic (Closes: #905586)

 -- Salvatore Bonaccorso <email address hidden>  Wed, 29 Aug 2018 15:22:46 +0200

lxc (1:2.0.7-2+deb9u2) stretch; urgency=medium

  * 0005-debian-Use-iproute2-instead-of-iproute.patch: pull iproute2 instead
    of iproute, fixing the creation of testing and unstable containers after
    the iproute binary package was dropped.

 -- Antonio Terceiro <email address hidden>  Mon, 29 Jan 2018 20:23:36 -0200

lxc (1:2.0.9-6) unstable; urgency=medium

  * 0004-debian-Use-iproute2-instead-of-iproute.patch: fix creation of
    containers after the iproute binary has been removed.

 -- Antonio Terceiro <email address hidden>  Sat, 27 Jan 2018 12:44:36 -0200

lxc (1:2.0.9-5) unstable; urgency=medium

  * Drop installation of disable-apparmor.conf. The issue that prevented lxc
    containers from starting with apparmor was fixed in apparmor 2.11.1-4.
  * debian/rules: drop --with autotools_dev in favor of debhelper built-in
    support for updating autotools files during build
  * Bump Standards-Version to 4.1.2; no changes needed
  * Drop debian/lxc-dev.lintian-overrides; false positive has been fixed in
    lintian.

 -- Antonio Terceiro <email address hidden>  Tue, 19 Dec 2017 10:02:34 -0200

lxc (1:2.0.7-2+deb9u1) stretch; urgency=medium

  * 0003-lxc-debian-don-t-hardcode-valid-releases.patch: don't
    hardcode list of valid Debian releases. Allows creating stable, buster,
    testing, and unstable containers.
  * 0004-lxc-debian-don-t-write-C.-locales-to-etc-locale.gen.patch: don't
    insert C.* locales into /etc/locale.gen (Closes: #879595)

 -- Antonio Terceiro <email address hidden>  Fri, 27 Oct 2017 15:13:31 -0200

lxc (1:2.0.9-4) unstable; urgency=medium

  * Install disable-apparmor.conf disabling apparmor for all containers, until
    we can make it work. See #880502

 -- Antonio Terceiro <email address hidden>  Thu, 02 Nov 2017 12:49:57 -0200

lxc (1:2.0.9-3) unstable; urgency=medium

  * 0002-lxc-debian-don-t-write-C.-locales-to-etc-locale.gen.patch: don't add
    C.UTF-8 to /etc/locale.gen (Closes: #879595)
  * 0003-lxc-debian-don-t-hardcode-valid-releases.patch: don't hardcode list
    of valid Debian releases

 -- Antonio Terceiro <email address hidden>  Sat, 28 Oct 2017 09:12:47 -0200

lxc (1:2.0.9-2) unstable; urgency=medium

  * Add patch 0001-lxc-debian-allow-creating-testing-and-unstable.patch to
    allow creating `testing` and `unstable` containers.

 -- Antonio Terceiro <email address hidden>  Thu, 26 Oct 2017 20:50:14 -0200

lxc (1:2.0.9-1) unstable; urgency=medium

  [ Evgeni Golov ]
  * New upstream version 2.0.9
  * track LTS release
  * drop use-lxc-stop-to-stop-systemd-service.patch, applied upstream
  * drop cgroups-workaround-gcc-7-bug.patch, applied upstream
  * drop the symbols file again

  [ Nicholas D Steeves ]
  * Update Suggests: btrfs-tools to btrfs-progs (Closes: #878908)

 -- Evgeni Golov <email address hidden>  Sat, 21 Oct 2017 17:20:45 +0200

lxc (1:2.0.8-3) unstable; urgency=medium

  * Rebuild against python 3.6 (Closes: #878246)
  * Drop build-dependency on the deprecated dh-systemd package
  * Bump Standards-Version to 4.1.1; no changes needed
  * Add symbols file for liblxc1

 -- Antonio Terceiro <email address hidden>  Wed, 11 Oct 2017 19:57:54 -0300

lxc (1:2.0.8-2) unstable; urgency=medium

  * Add cgroups-workaround-gcc-7-bug.patch from upstream to make lxc build
    against gcc 7 (Closes: #853531)

 -- Antonio Terceiro <email address hidden>  Fri, 25 Aug 2017 18:20:29 -0300

lxc (1:2.0.8-1) unstable; urgency=medium

  [ Evgeni Golov ]
  * New upstream version 2.0.8
    + Make lxc-net return non-zero on failure (Closes: #854591)
  * drop old patches, all were cherry-picks from upstream
  * Use lxc-stop to stop systemd service (Closes: #863850)

  [ Baptiste Jonglez ]
  * Increase the maximum number of inotify listeners (Closes: #860974)

 -- Evgeni Golov <email address hidden>  Sun, 18 Jun 2017 15:33:06 +0200

lxc (1:1.0.6-6+deb8u6) jessie; urgency=medium

  * CVE-2017-5985: Ensure target netns is caller-owned (Closes: #857295)

 -- Evgeni Golov <email address hidden>  Sat, 11 Mar 2017 10:42:30 +0100

lxc (1:2.0.7-2) unstable; urgency=high

  * use bash-completion's pkg-config support and don't move files around
  * ignore lxc-test-cloneconfig if kernel has no overlay support
  * CVE-2017-5985: Ensure target netns is caller-owned (Closes: #857295)

 -- Evgeni Golov <email address hidden>  Sat, 11 Mar 2017 09:47:20 +0100

lxc (1:2.0.7-1) unstable; urgency=medium

  * New upstream version 2.0.7
    + Closes: #847909, #847894, #847466

 -- Evgeni Golov <email address hidden>  Mon, 23 Jan 2017 22:03:24 +0100

lxc (1:1.0.6-6+deb8u5) jessie; urgency=medium

  * attach: do not send procfd to attached process
    Closes: #845465
    CVE-2016-8649

 -- Evgeni Golov <email address hidden>  Thu, 24 Nov 2016 08:14:36 +0100

lxc (1:2.0.6-1) unstable; urgency=high

  * New upstream version 2.0.6
    + attach: do not send procfd to attached process
      Closes: #845465
      CVE-2016-8649
  * liblxc1: add depends on cgroupfs-mount | systemd (Closes: #844086)
  * drop patches applied/imported upstream
  * debian/tests: add iptables to tests depends

 -- Evgeni Golov <email address hidden>  Thu, 24 Nov 2016 08:07:02 +0100

lxc (1:2.0.5-3) unstable; urgency=medium

  * add python3:Depends for lxc, so it gets a depends on python3
  * lxc-tests replace lxc-dev, not lxc
  * add a lintian override that the tests do not have a manpage
  * register lxc-dev docs with doc-base
  * add lintian override for ldconfig-trigger in lua-lxc
  * s/LUA/Lua/g in d/control

 -- Evgeni Golov <email address hidden>  Sun, 06 Nov 2016 14:33:14 +0100

lxc (1:2.0.5-2) experimental; urgency=medium

  * split lua and python3 bindings in their own packages
  * split tests into their own package
  * only add bash completion links for commands we actually complete
  * backport two patches from Ubuntu
  * kill all the .la files, we do not need them
  * enable ALL the hardening flags
  * autopkgtest: only reboot if the memory cgroup is not activated yet
  * replace our lxc-dbg package by the autogenerated dbgsym one

 -- Evgeni Golov <email address hidden>  Sun, 30 Oct 2016 17:59:32 +0100

lxc (1:2.0.5-1) unstable; urgency=medium

  * New upstream version 2.0.5
  * drop cgmanager support
    it's orphaned and upstream does recommend lxcfs instead
  * fix execution of tests on systems which do not have overlay.ko
  * add depends on lsb-base, thanks lintian

 -- Evgeni Golov <email address hidden>  Sat, 08 Oct 2016 14:03:16 +0200

lxc (1:1.0.6-6+deb8u3) jessie; urgency=medium

  * 0023-lxc-debian-make-sure-init-is-installed.patch: make sure stretch/sid
    containers have an init system, after init 1.34 dropped the `Essential:
    yes` header.

 -- Antonio Terceiro <email address hidden>  Mon, 20 Jun 2016 16:58:05 -0300

lxc (1:2.0.4-1) unstable; urgency=medium

  [ Antonio Terceiro ]
  * debian/rules: create symlinks for each lxc-* binary in
    /usr/share/bash-completion/completions/ so that bash completion actually
    works

  [ Evgeni Golov ]
  * Imported Upstream version 2.0.4
    + Uses SIGRTMIN+3 for systemd containers (Closes: #831691, #799541)
    + The debian template properly generates locaes (Closes: #806746)
  * drop 0020-fix-regression-when-creating-wheezy-containers.patch
  * rebase patches ontop of 2.0.4
  * add gnupg and dirmngr to recommends
  * improve autopkgtest execution, making most autopkgtest run properly

 -- Evgeni Golov <email address hidden>  Thu, 25 Aug 2016 19:52:33 +0200

lxc (1:2.0.3-1) unstable; urgency=medium

  * Imported Upstream version 2.0.3
    - Fixes Inconsistent settings in lxc@.service (Closes: #826100)
  * drop patch hunks that were applied in 2.0.3
  * document how to change passwords in the container (Closes: #829239)

 -- Evgeni Golov <email address hidden>  Sat, 16 Jul 2016 11:52:47 +0200

lxc (1:2.0.1-3) unstable; urgency=medium

  * 0020-lxc-debian-make-sure-init-is-installed.patch: update to fix
    regression when creating wheezy containers.

 -- Antonio Terceiro <email address hidden>  Wed, 29 Jun 2016 15:10:57 -0300

lxc (1:2.0.1-2) unstable; urgency=medium

  * 0020-lxc-debian-make-sure-init-is-installed.patch: make sure init is
    included in Debain containers, since as of 1.34 it is not Essential
    anymore.

 -- Antonio Terceiro <email address hidden>  Sat, 18 Jun 2016 09:16:43 -0300

lxc (1:2.0.1-1) unstable; urgency=medium

  * Imported Upstream version 2.0.1
  * drop patches applied upstream:
  * demote apparmor to suggests (Closes: #824120)

 -- Evgeni Golov <email address hidden>  Sun, 22 May 2016 22:04:19 +0200