summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
* nagios-core/nagios-nrpe: use update-alternatives for /var/nagiosChangqing Li2019-08-062-2/+9
| | | | | | | | | fix below error: Error: Transaction check error: file /var/nagios from install of nagios-core-4.4.3-r0.core2_64 conflicts with file from package nagios-nrpe-daemon-3.2.1-r0.core2_64 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* .gitignore: ignore .patch files in top dir of meta-virtualizationChen Qi2019-08-061-0/+1
| | | | | Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: Remove numactl from PACKAGECONFIG for armHe Zhe2019-07-311-1/+4
| | | | | | | | | | | b5b5def ("libvirt: add hook support") introduces a wrong check against KARCH which is not defined. This patch use TARGET_ARCH overrides to remove numactl from PACKAGECONFIG for 32-bit arm arches. Signed-off-by: He Zhe <zhe.he@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kubernetes: set COMPATIBLE_HOSTChen Qi2019-07-311-0/+2
| | | | | | | | | | | Currently kubernetes does not build for qemux86, qemumips, qemumips64, qemuppc. So set COMPATIBLE_HOST to make this clear. Otherwise we get build failure when trying to build like below. fatal error: bits/long-double-64.h: No such file or directory Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: Define override-able BUILD_TAGSAnoop Karollil2019-07-301-2/+3
| | | | | | | | | | | | | | | DOCKER_BUILDTAGS has tags that exclude btrfs and devicemapper graph drivers. To enable either, the tags have to be removed, but this isn't easily possible as DOCKER_BUILDTAGS can't be overridden via a bbappend. Define a BUILD_TAGS variable in the docker recipe that is set with the exclude tags, and use it for setting DOCKER_BUILDTAGS. This makes it possible for downstream to tweak BUILD_TAGS/DOCKER_BUILD_TAGS via a bbappend. Signed-off-by: Anoop Karollil <anoop.karollil@ge.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* meta-virtualization: add layer depends on selinuxMingli Yu2019-07-251-0/+1
| | | | | | | | | Since cri-o of meta-virtualization depends on libselinux which comes from selinux, add missing layer depends back. Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: Do not change /var/lib/libvirt/qemu for mips and mips64 in do_installHe Zhe2019-07-251-3/+12
| | | | | | | | qemu does not support mips and mips64 and thus /var/lib/libvirt/qemu is not generated. Do not change it. Signed-off-by: He Zhe <zhe.he@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: improve hardcoded CC for cross compileHongxu Jia2019-07-222-1/+63
| | | | | | | | | | | | | | | | Since commit applied in moby [61a3285 Support cross-compile for arm] it hardcoded var-CC to support cross-compile for arm Correct it with "${parameter:-word}" format, it is helpful for user define toolchains (Use Default Values. If parameter is unset or null, the expansion of word is substituted. Otherwise, the value of parameter is substituted.) https://github.com/moby/moby/commit/61a3285864d3f1b489f48f765b61b2c7bd300372 Signed-off-by: Hongxu Jia <hongxu.jia@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containers/go/build: don't override global package strip flagsBruce Ashfield2019-07-227-8/+0
| | | | | | | | | | | | | | | | | | When the go-lang container recipes were first created there were issues with strip and the resulting binaries. As such, strip was inhibited for the various packages. This variable is now set in the default classes, and tests show that strip works on the binaries (saving up to 2M on disk for some binaries) with no runtime issues found. So we drop our explicit set of the inhibit and let the build proceed by the defaults. If issues are found, we can re-enable the setting or bbappends can turn it back on for builds showing issues. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: libvirtd: Facilitate using tls connection modeHe Zhe2019-07-163-1/+189
| | | | | | | | | | | | | | | | | | | | | | tls is the default network connection mode of libvirtd upstream, though we use tcp mode as default. tls requires necessary keys and certificates of certificate authority, server and client to be properly generated and deployed. Otherwise servers and clients cannot be connected. This patch, - integrates sample keys and certificats of certificate authority, server and client for users to be able to use tls mode out of box. - sets default server IP address to 127.0.0.1 for users to use local client out of box. - integrates certtool and provides gnutls-help.py for users to generate keys and certificates on targets in their own ways. - adds a PACKAGECONFIG option "gnutls" to control all of the above integration but disables it to keep the same default behavior as before. Signed-off-by: He Zhe <zhe.he@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: Only add polkit to PACKAGECONFIG if polkit is in DISTRO_FEATURESMingli Yu2019-07-161-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | At first, the polkit support is always enabled in PACKAGECONFIG and since Feb 27 2014, use x11 DISTRO_FEATURES to control the polkit support with below commit. ========================================================= commit ce991a62d5f2ce006074ee4b8a97c6029308548c Author: Jonas Eriksson <jonas.eriksson@enea.com> Date: Thu Feb 27 17:10:09 2014 +0100 libvirt: Disable polkit driver when there is no x11 To avoid having the default build of libvirt depend on virtual/x11 through polkit and consolekit, check for x11 in DISTRO_FEATURES before enabling the polkit support in the default PKG_CONFIG. Signed-off-by: Jonas Eriksson <jonas.eriksson@enea.com> Acked-by: Bruce Ashfield <bruce.ashfield@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@windriver.com> diff --git a/recipes-extended/libvirt/libvirt_1.2.1.bb b/recipes-extended/libvirt/libvirt_1.2.1.bb index 5365b8d..4c9cf36 100644 --- a/recipes-extended/libvirt/libvirt_1.2.1.bb +++ b/recipes-extended/libvirt/libvirt_1.2.1.bb @@ -109,10 +109,11 @@ INITSCRIPT_PARAMS_${PN}-libvirtd = "defaults 72" #PACKAGECONFIG ??= "xen libxl xen-inotify test remote libvirtd" # full config -PACKAGECONFIG ??= "qemu yajl uml openvz vmware vbox esx iproute2 polkit lxc test \ +PACKAGECONFIG ??= "qemu yajl uml openvz vmware vbox esx iproute2 lxc test \ remote macvtap libvirtd netcf udev python ebtables \ ${@base_contains('DISTRO_FEATURES', 'selinux', 'selinux', '', d)} \ ${@base_contains('DISTRO_FEATURES', 'xen', 'xen libxl xen-inotify', '', d)} \ + ${@base_contains('DISTRO_FEATURES', 'x11', 'polkit', '', d)} \ " ========================================================= After below commits to add polkit as a required distro feature in meta-oe, we should unify altogether to enable polkit if polkit distro feature is set. 97a1a55 polkit: add polkit as a required distro feature c049e02 polkit: inherit distro_features_check Signed-off-by: Mingli Yu <Mingli.Yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: uprev to 5.5.xBruce Ashfield2019-07-123-27/+24
| | | | | | | | | Upgrading to 5.5.x for libvirt. One pach refresh is required, but otherwise, build and runtime behaviour is identical to 5.3.x. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k8s: update to 1.16+Bruce Ashfield2019-07-121-2/+2
| | | | | | | Upgrading kubernetes to the 1.16 series. This is currently in alpha, but will be released before the feature freeze. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k8s: update CNI to 0.7.xBruce Ashfield2019-07-121-3/+3
| | | | | | Updating the CNI and plugins to 0.7.x series. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o: update to 1.15Bruce Ashfield2019-07-122-14/+51
| | | | | | | | | | | | | | | | | Updating to the 1.15 release. With this update there are significant new build constraints and dependencies. As such, the cross binaries are now being be built by default, with the old (non-cross) build being kept around as an optional way to build the components. There are still issues with the non-cross build, so it will require more work in the future. We also document the requirement for selinux and seccomp in the README as dependencies if you build cri-o. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to 0.2.7Bruce Ashfield2019-07-121-2/+2
| | | | | | | Updating to the latest containerd 0.2.x release. No build changes were required, and runtime behaviour is the same. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containers: update oci-systemd-hook to 0.2.0Bruce Ashfield2019-07-123-26/+31
| | | | | | | | | | Updating to the latest oci-systemd-hook version. We also refresh the patches, specifically the selinux patch, for the updated context. The additional cgroups mount patch needed to be tweaks for new required parameters, but is otherwise unchanged. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containers/runtime-spec: update to v1.01Bruce Ashfield2019-07-121-2/+2
| | | | | | | Updating the reference spec to v1.01. No functional or runtime changes are expected from this. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce: update to v19.03-rcBruce Ashfield2019-07-121-11/+11
| | | | | | | | | | | | Updating the docker community edition to the 19.03 series. The build changes are minor (mainly cleanup), but otherwise, we are changing branches and setting new SRCREVs. The LICENSE checksum tweak is due to copyright year changes in the files. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker/moby: update to v19.03-rcBruce Ashfield2019-07-121-6/+6
| | | | | | | | | | | | | updating the full community build (moby) of the docker engine, cli and networking components to the 19.03 release series. The changes are minimal, versioning, branch selection, but otherwise everything in the build is the same as the previous versions. The SRCREVs are selected through an audit of moby and docker-ce to synchronize the build points for the various components. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* oci-image-tools: refresh to tip of masterBruce Ashfield2019-07-123-323/+1
| | | | | | | | Updating the oci-image-tools to the tip of the master branch. This gets us official integrations of some backported patches (along with other associated minor fixes). Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* oci-image-spec: uprev to v1.0.1Bruce Ashfield2019-07-121-7/+7
| | | | | | | | | | | Updating the reference/source package of the oci-image-spec to v1.0.1. We also cleanup the install rule to be a bit simpler (by using --parents), and remove the .tool directory (which is new to this version), since it won't be package by default (and hence throws a QA error) and we don't need the .tool/* files. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc: update to -rc8Bruce Ashfield2019-07-122-4/+4
| | | | | | | | | | Updating both the pure opencontainers runc and the docker opencontainers variants to -rc8. We track the tip of master for opencontainers and for docker we match the -ce and moby -rc8 commit hashes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-distribution: remove docker-distribution-ptest dependenciesChangqing Li2019-07-031-0/+2
| | | | | | | | | | | after commit https://git.openembedded.org/openembedded-core/ commit/meta/classes/ptest.bbclass?id=b47194b57d94260b4e6438c5bf74914027f0b520 package ${PN}-ptest will depend on ${PN} by default, but for docker-distribution, ${PN} is empty package, remove it from dependency to avoid image do rootfs failure since nothing provides error. Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: make docker-init a runtime dependency by defaultStefan Agner2019-07-031-1/+2
| | | | | | | | | | | | | | | If docker run --init is used docker expects docker-init to be present, if not Docker fails to start the container with the following error: docker: Error response from daemon: exec: "docker-init": executable file not found in $PATH. However, docker-init does not get deployed by default since commit d19fda374317 ("docker: consolidate common depends/options"). Readd docker-init through a PACKAGECONFIG RDEPENDS to make sure it gets deployed by default again. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* singularity: openssl cert configs path fixed.Cevat Bostancioglu2019-07-031-2/+2
| | | | | | openssl recipe moves ssl-1.1 directory as ssl , singularity recipe cannot find ssl-1.1 path. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* irqbalance: use git repo for sourceJoe Slater2019-06-272-14/+18
| | | | | | | Avoid src-uri-bad qa warning when getting source from github.com/../archive. Signed-off-by: Joe Slater <joe.slater@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kvmtool: Werror Disabled PatchCevat Bostancioglu2019-06-252-0/+25
| | | | | | Couple of compile time warnings(sizeof-pointer-memaccess, format-truncation) turned into errors before with Werror command, this patch disables this feature. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kernel: Add conditional inclusion of linux-yocto_virtualization.inc for rt ↵He Zhe2019-06-171-0/+1
| | | | | | | | | kernel This is the same as other kernel bbappend. Signed-off-by: He Zhe <zhe.he@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* nagios-nrpe: fix systemd service start failedChangqing Li2019-06-101-2/+1
| | | | | | | | | | | | | | | Jun 06 01:44:51 qemux86 systemd[1]: Started Nagios nrpe plugin. Jun 06 01:44:51 qemux86 nrpe[1263]: Starting up daemon Jun 06 01:44:51 qemux86 nrpe[1263]: Cannot write to pidfile '/var/nagios/nrpe.pid' - check your privileges. Jun 06 01:44:51 qemux86 systemd[1]: nagios-nrpe.service: Main process exited, code=exited, status=2/INVALIDARGUMENT Jun 06 01:44:51 qemux86 systemd[1]: nagios-nrpe.service: Failed with result 'exit-code' In configuration file /etc/nagios/nrpe.cfg, the pidfile is under /var/nagios. fix by stop rm the /var/nagios, and include it into daemon packages Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* criu: fix dump error on Intel Apollo Lake SOCDengke Du2019-05-292-0/+49
| | | | | | | | | | | | | | | Fix dump error when executing: criu dump -D checkpoint -t pid ------------------------------------------------- Error (criu/arch/x86/crtools.c:362): x86: Corruption in XFEATURE_YMM area (expected 64 but 0 obtained) Error (criu/cr-dump.c:1280): Can't infect (pid: 2874) with parasite Error (criu/cr-dump.c:1732): Dumping FAILED. ------------------------------------------------- Backport upstream patch on criu-dev branch to fix this: [https://github.com/checkpoint-restore/criu/commit/5a52e34655636a8f00a664cf42716e1439ea2ef0] Signed-off-by: Dengke Du <dengke.du@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: update packaging for pkgconfig files in libdirChristopher Clark2019-05-211-0/+19
| | | | | | | | Xen commit a0f98145 changed the installation directory for pkgconfig files, so update recipe to include the .pc files at their new location. Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* libvirt: upgrade to 5.3.0Dengke Du2019-05-105-66/+52
| | | | | | | | 1. remove the uml configure option because new version libvirt drop it 2. rebase three patches for new source codes Signed-off-by: Dengke Du <dengke.du@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* nagios-core: add CVE_PRODUCTChen Qi2019-05-101-0/+2
| | | | | Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* ceph: set CVE_PRODUCTChen Qi2019-05-061-0/+2
| | | | | Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* netns: Upgrade to v0.5.3Paul Barker2019-05-014-198/+23
| | | | | | | | | Drop obsolete patches and forward-port the remaining required patch. We also need to fix up permissions after the build so that we can clean the build directory without errors if needed. Signed-off-by: Paul Barker <paul@betafive.co.uk> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: make the dev86-native dependency specific to x86-64 targetChristopher Clark2019-04-181-1/+1
| | | | | | | Remove the requirement for x86 tools when building for ARM platforms. Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: upgrade to 4.12.0Christopher Clark2019-04-189-377/+34
| | | | | Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* xen: remove recipes for stubdoms and dependent componentsChristopher Clark2019-04-1830-4641/+0
| | | | | | | | | Retiring these as the components are not in use and work on updating the recipes to build with the OE native tools rather than host tools has been discontinued. Signed-off-by: Christopher Clark <christopher.clark6@baesystems.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* Revert "sysvinit-inittab_xen.inc: fix hypervisor console"Bruce Ashfield2019-04-121-1/+4
| | | | | | | Temporarily reverting this commit, since it has broken some Xen boot usecases. We'll revisit this in the future. This reverts commit 50cdecca7b2a0e1bb5eacbec132f26b802f950fc.
* cri-o: build crio-config natively to generate conmon/config.hMark Asselstine2019-04-122-1/+50
| | | | | | | | | | | | | | | | | | | | | | | | Part of building cri-o is the generation of the 'conmon/config.h' file. The content of this file is dynamic in that it has buffer sizes and a socket path which will depend on constants that are set in other parts of the code. For example the socket path can be setup for Windows or for Linux. To generate 'conmon/config.h' a small GO application is built and run called crio-config. This isn't really suitable for a -native package but we do have to run crio-config on the build host so we don't want to cross compile it. We therefor use the native GO to build this. This change allows things to work when the build host arch and the target arch don't match. A small update to the Makefile avoids mixing build host arch and target arch GO packages. Finally, We drop the crio-config binary from the install as it is only used to create the conmon/config.h as part of the build. This is consistent with the Makefile's install rule which does not install this binary as it has no use on the target. Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o: fixup buildMark Asselstine2019-04-121-19/+0
| | | | | | | | | | | | | | | | | | After oe-core commits 5f48939e2640 [goarch.bbclass: use MACHINEOVERRIDES and simplify go_map_arm()] 6300c4a83f7c [go.bbclass:Export more GO* environment variables] we see a build failure with cri-o: | go build runtime/cgo: attempting to install package runtime/cgo into read-only GOROOT | Makefile:112: recipe for target 'conmon/config.h' failed | make: *** [conmon/config.h] Error 1 to avoid this we should not overwrite the GO* environment being setup by the go.bbclass, so we drop most of our GO* exports here. Signed-off-by: Mark Asselstine <mark.asselstine@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kernel: drop 4.18 bbappendBruce Ashfield2019-04-091-1/+0
| | | | | | | 4.18 has been removed from oe-core master, so we no longer need this bbappend. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* container-base: Allow building with a specific kernel bindingJason Wessel2019-04-071-0/+3
| | | | | | | | | | | | The oe-core layer sets a variable which intends that linux-dummy is set for container building. This commit would allow you to have a specific kernel and board setup as well as generate multiple containers by turrning off the linux-dummy check found in: oe-core/meta/classes/image-container.bbclass Signed-off-by: Jason Wessel <jason.wessel@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* conf: add warrior to layer compatBruce Ashfield2019-04-021-1/+1
| | | | | | | In preparation for the spring release, we drop sumo and add warrior to the layer compat variable. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* criu: upgrade to 3.11Dengke Du2019-03-242-45/+2
| | | | | | | | Remove the following patch, because the 3.11 version already contain it. 0001-kdat-Don-t-open-run-criu.kdat-if-doesn-t-exists.patch Signed-off-by: Dengke Du <dengke.du@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* sysvinit-inittab_xen.inc: fix hypervisor consoleManjukumar Matha2019-03-241-4/+1
| | | | | | | | | | This commit switches over to using existing SERIAL_CONSOLES mechanism for hvc0 inittab entry generation. This then results in /bin/start_getty wrapper being used, which avoids the getty failure seen when running a xen capable rootfs natively on linux. Signed-off-by: Manjukumar Matha <manjukumar.harthikote-matha@xilinx.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: consolidate common depends/optionsBruce Ashfield2019-03-213-106/+62
| | | | | | | | | | | | | | | | | | | The split between docker-ce and docker (moby) was initially quite different, and docker-ce was more of a reference versus a supported / working package. Upstream has evolved such that both are valid options, and may be chosen due to different requirements. Rather than duplicating all the settings, we can move the dependencies, init, rdepends, users, etc, into a .inc file and share them. For now, we keep the build separate, since depending on the uprev status, they still can require different build options and packaging. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: fixup redepends and clean rsuggestsBruce Ashfield2019-03-211-3/+20
| | | | | | | | | | | | | | | | | With the 5.0 kernel and docker 18.09 you can run into issues pulling from docker hub due to an invalid/unknown certificate. We fix that by adding ca-certifcates as a runtime dependency. There can also be isuses setting up the network bridge, so we add bridge-utils to the rdepends. We also add some comments about this recipe and how it should be updated using moby (and why it is like it is). Finally, no one wants rt-tests and lxc when installing docker, so we drop them from the rsuggests. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce: fixup redepends and clean rsuggestsBruce Ashfield2019-03-211-1/+2
| | | | | | | | | | | | | | With the 5.0 kernel and docker 18.09 you can run into issues pulling from docker hub due to an invalid/unknown certificate. We fix that by adding ca-certifcates as a runtime dependency. There can also be isuses setting up the network bridge, so we add bridge-utils to the rdepends. Finally, no one wants rt-tests and lxc when installing docker, so we drop them from the rsuggests. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>