needrestart - container support
===============================

If needrestart has found a process using obsolete binaries it checks if
the process is part of a container. If the process is part of a container
it might not be possible to restart it using Sys-V/systemd.

There are special packages (NeedRestart::CONT::*) implementing the
container detection and restarting.


NeedRestart::CONT::docker
-------------------------

Recognized by:	cgroup path (`/system.slice/docker-*.scope` || `/docker/*`)

Docker containers are ignored (needrestart 2.12+) since there are no updates
within docker containers by design.


NeedRestart::CONT::LXC
----------------------

Recognized by:	cgroup path (`/lxc/*` || `/lxc.payload/*`)

For each container which should be restarted needrestart calls
`lxc-stop --reboot --name $NAME`.

This package also supports LXD containers, which are restarted by `lxc restart
$NAME` or `lxc restart --project=$PROJECT $NAME` for containers in projects,
and Incus containers, which are restarted by `incus restart $NAME` or `incus
restart --project=$PROJECT $NAME` for containers in projects.

NeedRestart::CONT::machined
---------------------------

Recognized by:	cgroup path (`/machine.slice/machine-*.scope`)

For each container which should be restarted needrestart calls
`machinectl reboot $NAME`.