CasperSecurity
needrestart - container support
===============================
If needrestart has found a process using obsolete binaries it checks if
the process is part of a container. If the process is part of a container
it might not be possible to restart it using Sys-V/systemd.
There are special packages (NeedRestart::CONT::*) implementing the
container detection and restarting.
NeedRestart::CONT::docker
-------------------------
Recognized by: cgroup path (`/system.slice/docker-*.scope` || `/docker/*`)
Docker containers are ignored (needrestart 2.12+) since there are no updates
within docker containers by design.
NeedRestart::CONT::LXC
----------------------
Recognized by: cgroup path (`/lxc/*` || `/lxc.payload/*`)
For each container which should be restarted needrestart calls
`lxc-stop --reboot --name $NAME`.
This package also supports LXD containers, which are restarted by `lxc restart
$NAME` or `lxc restart --project=$PROJECT $NAME` for containers in projects.
NeedRestart::CONT::machined
---------------------------
Recognized by: cgroup path (`/machine.slice/machine-*.scope`)
For each container which should be restarted needrestart calls
`machinectl reboot $NAME`.