luci/applications/luci-app-lxc/root, branch master

luci-app-lxc: fix authenticated path traversal and ACL bypass (host root)

2026-05-27T11:21:12Z

* ucode fixes: - tighten `is_valid_lxc_name` regex to `^[A-Za-z0-9_][A-Za-z0-9_-]{0,63}$` - apply the validator in `lxc_configuration_get` and `lxc_configuration_set` before any filesystem access - reject the `'lxc error: …'` sentinel string returned by `lxc_get_config_path()` on failure, rather than concatenating it into a path. - shellquote `LXC_URL` in `lxc_get_downloadable` and `lxc_create` * ACL fix: add `depends.acl = ["luci-app-lxc"]` to each of the five backend entries, so the routes share the same authorization gate as the view Signed-off-by: Dirk Brenken

luci-app-lxc: add permission to set lxc options

2026-04-09T16:48:09Z

Add set permission in acl.d file for luci-app-lxc to allow users to set lxc options in luci-app-lxc. (considering that user has write permission for this app) Signed-off-by: mdevolde

luci-app-lxc: convert to JS

2026-02-19T01:00:14Z

migrate away from the old luci-app lua control system. See: https://github.com/openwrt/luci/issues/7310 Signed-off-by: Paul Donald

treewide: stage ACL rules for legacy applications

2020-04-10T21:21:35Z

Fixes: #3866 Signed-off-by: Jo-Philipp Wich

luci-app-lxc: various changes

2018-04-21T12:35:26Z

1) Modify dependencies Add dependencies required for to be able use containers created from "images.linuxcontainers.org". Several of them require "lxc-attach" for set password so to be able login. None of them has SSH preinstalled so "lxc-console" is required to be able login and install SSH, for example. Remove dependency "xz", it seems incompatible with LXC_BUSYBOX_OPTIONS when both are enabled happens a build crash. 2) Change container image repository The repository "virtualwrt.org/containers/" seems to not work, I have change it by the official LXC container image repository. 3) Translate the arch Translate the local uname architecture to a valid "images.linuxcontainers.org" arch. Only tested with the platform "mvebu" (armv7l -> armhf). 4) Other minor fixes Use same server to list images and download the image. Disable GPG check when listing images. Reported-by: "Admin Localnet " [Squashed commits, cleaned up whitespace, refactor arch mapping, escape url setting, use system wide ubus helper, use uci model library] Closes: #1422 Signed-off-by: Jo-Philipp Wich

luci-app-lxc: initial commit

2017-02-21T08:17:36Z

Moved over here from the packages repository. Signed-off-by: Dan Luedtke