github/linuxkit
1
0
Fork 0
mirror of https://github.com/linuxkit/linuxkit.git synced 2025-08-23 00:58:20 +00:00
Code Issues Projects Releases Wiki Activity

Update YAML files with new packages, config, and trust data

Browse Source 
- Update to packages using the Alpine 3.6 base image
- Remove config for packages which now supply it
- Update/add trust section

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
This commit is contained in:
Rolf Neugebauer 2017-05-26 15:37:31 +01:00
parent 157c07be15
commit 9bdfcb5b12
41 changed files with 408 additions and 438 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

52
examples/docker.yml
View File

@ -2,49 +2,31 @@ kernel:
image: "linuxkit/kernel:4.9.x" image: "linuxkit/kernel:4.9.x"
cmdline: "console=ttyS0 console=tty0 page_poison=1" cmdline: "console=ttyS0 console=tty0 page_poison=1"
init: init:
- linuxkit/init:cbd7ae748f0a082516501a3e914fa0c924ee941e - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
- linuxkit/runc:24dfe632ed3ff53a026ee3fac046fd544434e2d6 - linuxkit/runc:3a4e6cbf15470f62501b019b55e1caac5ee7689f
- linuxkit/containerd:f1130450206d4f64f0ddc13d15bb68435aa1ff61 - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
- linuxkit/ca-certificates:4e9a83e890e6477dcd25029fc4f1ced61d0642f4 - linuxkit/ca-certificates:75cf419fb58770884c3464eb687ec8dfc704169d
onboot: onboot:
- name: sysctl - name: sysctl
image: "linuxkit/sysctl:225c52c2d6f04a040663bac84cabf81825027f64" image: "linuxkit/sysctl:b16a483897dd5f71be7e0c04cd090b05f52682e1"
- name: sysfs - name: sysfs
image: linuxkit/sysfs:1cde5876d44117af61dfea629ad922defcd48808 image: linuxkit/sysfs:47367d0ef851e8bf2a9e2f80a05392c17f5c2c88
- name: binfmt - name: binfmt
image: "linuxkit/binfmt:603e5f064b3e8a64088c0fcf7a80d2783541ee1d" image: "linuxkit/binfmt:eb3977596d5fc9e847eee1d34cb3beb3f574cac9"
- name: format - name: format
image: "linuxkit/format:d78093e943f9c88386e30c00353f9476d34fb551" image: "linuxkit/format:55afe08816c2a4d8dbae3ee51ef53e0bee422d66"
binds:
- /dev:/dev
capabilities:
- CAP_SYS_ADMIN
- CAP_MKNOD
- name: mount - name: mount
image: "linuxkit/mount:fc7164d7c4e1fe5d1da395c7f949fb332cffe752" image: "linuxkit/mount:15e20f27abe69d276f796e4026531833ec5ff345"
binds:
- /dev:/dev
- /var:/var:rshared,rbind
capabilities:
- CAP_SYS_ADMIN
rootfsPropagation: shared
command: ["/mount.sh", "/var/lib/docker"] command: ["/mount.sh", "/var/lib/docker"]
services: services:
- name: rngd - name: rngd
image: "linuxkit/rngd:69f951ce2a3a9534dbbc7ba8119e1df4391f06c0" image: "linuxkit/rngd:b67c3151a52b05db50e6207b40876900f2208d14"
- name: dhcpcd - name: dhcpcd
image: "linuxkit/dhcpcd:ae03169274d19fe8841314fa5a6fea3c61adbf4e" image: "linuxkit/dhcpcd:7d2f17a0e5d1ef9a75a527821a9ab0d753b22e7e"
- name: ntpd - name: ntpd
image: "linuxkit/openntpd:ad834449a7eaf10dc022b3d8d2ed9faf7ec99d37" image: "linuxkit/openntpd:ad834449a7eaf10dc022b3d8d2ed9faf7ec99d37"
capabilities:
- CAP_SYS_TIME
- CAP_SYS_NICE
- CAP_SYS_CHROOT
- CAP_SETUID
- CAP_SETGID
net: host
- name: docker - name: docker
image: "linuxkit/docker-ce:261f93927d85001c65e5ce0f421eb6062f09c0a5" image: "linuxkit/docker-ce:668d62da6e3da081a8f8aca7db3e2a98adf5da59"
capabilities: capabilities:
- all - all
net: host net: host
@ -60,5 +42,15 @@ files:
trust: trust:
image: image:
- linuxkit/kernel - linuxkit/kernel
- linuxkit/init
- linuxkit/runc
- linuxkit/containerd
- linuxkit/ca-certificates
- linuxkit/sysctl
- linuxkit/sysfs
- linuxkit/binfmt - linuxkit/binfmt
- linuxkit/format
- linuxkit/mount
- linuxkit/rngd - linuxkit/rngd
- linuxkit/dhcpcd
- linuxkit/openntpd

27
examples/gcp.yml
View File

@ -2,15 +2,15 @@ kernel:
image: "linuxkit/kernel:4.9.x" image: "linuxkit/kernel:4.9.x"
cmdline: "console=ttyS0 page_poison=1" cmdline: "console=ttyS0 page_poison=1"
init: init:
- linuxkit/init:cbd7ae748f0a082516501a3e914fa0c924ee941e - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
- linuxkit/runc:24dfe632ed3ff53a026ee3fac046fd544434e2d6 - linuxkit/runc:3a4e6cbf15470f62501b019b55e1caac5ee7689f
- linuxkit/containerd:f1130450206d4f64f0ddc13d15bb68435aa1ff61 - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
- linuxkit/ca-certificates:4e9a83e890e6477dcd25029fc4f1ced61d0642f4 - linuxkit/ca-certificates:75cf419fb58770884c3464eb687ec8dfc704169d
onboot: onboot:
- name: sysctl - name: sysctl
image: "linuxkit/sysctl:225c52c2d6f04a040663bac84cabf81825027f64" image: "linuxkit/sysctl:b16a483897dd5f71be7e0c04cd090b05f52682e1"
- name: dhcpcd - name: dhcpcd
image: "linuxkit/dhcpcd:ae03169274d19fe8841314fa5a6fea3c61adbf4e" image: "linuxkit/dhcpcd:7d2f17a0e5d1ef9a75a527821a9ab0d753b22e7e"
command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"] command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
- name: metadata - name: metadata
image: "linuxkit/metadata:a810b68fec9c9282cf096eed50605ddd6b2f3142" image: "linuxkit/metadata:a810b68fec9c9282cf096eed50605ddd6b2f3142"
@ -23,14 +23,9 @@ onboot:
- CAP_SYS_ADMIN - CAP_SYS_ADMIN
services: services:
- name: rngd - name: rngd
image: "linuxkit/rngd:69f951ce2a3a9534dbbc7ba8119e1df4391f06c0" image: "linuxkit/rngd:b67c3151a52b05db50e6207b40876900f2208d14"
- name: sshd - name: sshd
image: "linuxkit/sshd:1613253e5def414e0dfd261acd0e191eadb5fedf" image: "linuxkit/sshd:ddce15b9fbde068941e31294acdcd22befa4fc20"
capabilities:
- all
net: host
pid: host
binds:
- /var/config/ssh/authorized_keys:/root/.ssh/authorized_keys - /var/config/ssh/authorized_keys:/root/.ssh/authorized_keys
- /tmp/etc/resolv.conf:/etc/resolv.conf - /tmp/etc/resolv.conf:/etc/resolv.conf
- name: nginx - name: nginx
@ -45,4 +40,10 @@ services:
trust: trust:
image: image:
- linuxkit/kernel - linuxkit/kernel
- linuxkit/init
- linuxkit/runc
- linuxkit/containerd
- linuxkit/ca-certificates
- linuxkit/sysctl
- linuxkit/dhcpcd
- linuxkit/rngd - linuxkit/rngd

12
examples/minimal.yml
View File

@ -2,13 +2,17 @@ kernel:
image: "linuxkit/kernel:4.9.x" image: "linuxkit/kernel:4.9.x"
cmdline: "console=ttyS0 console=tty0 page_poison=1" cmdline: "console=ttyS0 console=tty0 page_poison=1"
init: init:
- linuxkit/init:cbd7ae748f0a082516501a3e914fa0c924ee941e - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
- linuxkit/runc:24dfe632ed3ff53a026ee3fac046fd544434e2d6 - linuxkit/runc:3a4e6cbf15470f62501b019b55e1caac5ee7689f
- linuxkit/containerd:f1130450206d4f64f0ddc13d15bb68435aa1ff61 - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
onboot: onboot:
- name: dhcpcd - name: dhcpcd
image: "linuxkit/dhcpcd:ae03169274d19fe8841314fa5a6fea3c61adbf4e" image: "linuxkit/dhcpcd:7d2f17a0e5d1ef9a75a527821a9ab0d753b22e7e"
command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"] command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
trust: trust:
image: image:
- linuxkit/kernel - linuxkit/kernel
- linuxkit/init
- linuxkit/runc
- linuxkit/containerd
- linuxkit/dhcpcd

24
examples/node_exporter.yml
View File

@ -2,25 +2,21 @@ kernel:
image: "linuxkit/kernel:4.9.x" image: "linuxkit/kernel:4.9.x"
cmdline: "console=ttyS0 page_poison=1" cmdline: "console=ttyS0 page_poison=1"
init: init:
- linuxkit/init:cbd7ae748f0a082516501a3e914fa0c924ee941e - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
- linuxkit/runc:24dfe632ed3ff53a026ee3fac046fd544434e2d6 - linuxkit/runc:3a4e6cbf15470f62501b019b55e1caac5ee7689f
- linuxkit/containerd:f1130450206d4f64f0ddc13d15bb68435aa1ff61 - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
services: services:
- name: rngd - name: rngd
image: "linuxkit/rngd:69f951ce2a3a9534dbbc7ba8119e1df4391f06c0" image: "linuxkit/rngd:b67c3151a52b05db50e6207b40876900f2208d14"
- name: dhcpcd - name: dhcpcd
image: "linuxkit/dhcpcd:ae03169274d19fe8841314fa5a6fea3c61adbf4e" image: "linuxkit/dhcpcd:7d2f17a0e5d1ef9a75a527821a9ab0d753b22e7e"
- name: node_exporter - name: node_exporter
image: "linuxkit/node_exporter:bdb20b41855d0e2b4edeec44ef569d030ea3cc47" image: "linuxkit/node_exporter:29a85e9c5de1a1bd470a963878194303f6a7bd8c"
capabilities:
- all
net: host
pid: host
binds:
- /proc:/host/proc
- /sys:/host/sys
- /:/rootfs
trust: trust:
image: image:
- linuxkit/kernel - linuxkit/kernel
- linuxkit/init
- linuxkit/runc
- linuxkit/containerd
- linuxkit/rngd - linuxkit/rngd
- linuxkit/dhcpcd

39
examples/packet.yml
View File

@ -2,31 +2,32 @@ kernel:
image: "linuxkit/kernel:4.9.x" image: "linuxkit/kernel:4.9.x"
cmdline: "console=ttyS1 page_poison=1" cmdline: "console=ttyS1 page_poison=1"
init: init:
- linuxkit/init:cbd7ae748f0a082516501a3e914fa0c924ee941e - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
- linuxkit/runc:24dfe632ed3ff53a026ee3fac046fd544434e2d6 - linuxkit/runc:3a4e6cbf15470f62501b019b55e1caac5ee7689f
- linuxkit/containerd:f1130450206d4f64f0ddc13d15bb68435aa1ff61 - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
- linuxkit/ca-certificates:4e9a83e890e6477dcd25029fc4f1ced61d0642f4 - linuxkit/ca-certificates:75cf419fb58770884c3464eb687ec8dfc704169d
onboot: onboot:
- name: sysctl - name: sysctl
image: "linuxkit/sysctl:225c52c2d6f04a040663bac84cabf81825027f64" image: "linuxkit/sysctl:b16a483897dd5f71be7e0c04cd090b05f52682e1"
services: services:
- name: rngd - name: rngd
image: "linuxkit/rngd:69f951ce2a3a9534dbbc7ba8119e1df4391f06c0" image: "linuxkit/rngd:b67c3151a52b05db50e6207b40876900f2208d14"
- name: dhcpcd - name: dhcpcd
image: "linuxkit/dhcpcd:ae03169274d19fe8841314fa5a6fea3c61adbf4e" image: "linuxkit/dhcpcd:7d2f17a0e5d1ef9a75a527821a9ab0d753b22e7e"
- name: sshd - name: sshd
image: "linuxkit/sshd:1613253e5def414e0dfd261acd0e191eadb5fedf" image: "linuxkit/sshd:ddce15b9fbde068941e31294acdcd22befa4fc20"
capabilities:
- all
net: host
pid: host
binds:
- /root/.ssh:/root/.ssh
- /etc/resolv.conf:/etc/resolv.conf
trust:
image:
- linuxkit/kernel
- linuxkit/rngd
files: files:
- path: root/.ssh/authorized_keys - path: root/.ssh/authorized_keys
contents: '#your ssh key here' contents: '#your ssh key here'
trust:
image:
- linuxkit/kernel
- linuxkit/init
- linuxkit/runc
- linuxkit/containerd
- linuxkit/ca-certificates
- linuxkit/sysctl
- linuxkit/rngd
- linuxkit/dhcpcd
- linuxkit/openntpd
- linuxkit/sshd

15
examples/redis-os.yml
View File

@ -4,12 +4,12 @@ kernel:
image: "linuxkit/kernel:4.9.x" image: "linuxkit/kernel:4.9.x"
cmdline: "console=ttyS0 console=tty0 page_poison=1" cmdline: "console=ttyS0 console=tty0 page_poison=1"
init: init:
- linuxkit/init:cbd7ae748f0a082516501a3e914fa0c924ee941e - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
- linuxkit/runc:24dfe632ed3ff53a026ee3fac046fd544434e2d6 - linuxkit/runc:3a4e6cbf15470f62501b019b55e1caac5ee7689f
- linuxkit/containerd:f1130450206d4f64f0ddc13d15bb68435aa1ff61 - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
onboot: onboot:
- name: dhcpcd - name: dhcpcd
image: "linuxkit/dhcpcd:ae03169274d19fe8841314fa5a6fea3c61adbf4e" image: "linuxkit/dhcpcd:7d2f17a0e5d1ef9a75a527821a9ab0d753b22e7e"
command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"] command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
services: services:
- name: redis - name: redis
@ -21,3 +21,10 @@ services:
- CAP_SETGID - CAP_SETGID
- CAP_DAC_OVERRIDE - CAP_DAC_OVERRIDE
net: host net: host
trust:
image:
- linuxkit/kernel
- linuxkit/init
- linuxkit/runc
- linuxkit/containerd
- linuxkit/dhcpcd

38
examples/sshd.yml
View File

@ -2,31 +2,31 @@ kernel:
image: "linuxkit/kernel:4.9.x" image: "linuxkit/kernel:4.9.x"
cmdline: "console=ttyS0 page_poison=1" cmdline: "console=ttyS0 page_poison=1"
init: init:
- linuxkit/init:cbd7ae748f0a082516501a3e914fa0c924ee941e - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
- linuxkit/runc:24dfe632ed3ff53a026ee3fac046fd544434e2d6 - linuxkit/runc:3a4e6cbf15470f62501b019b55e1caac5ee7689f
- linuxkit/containerd:f1130450206d4f64f0ddc13d15bb68435aa1ff61 - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
- linuxkit/ca-certificates:4e9a83e890e6477dcd25029fc4f1ced61d0642f4 - linuxkit/ca-certificates:75cf419fb58770884c3464eb687ec8dfc704169d
onboot: onboot:
- name: sysctl - name: sysctl
image: "linuxkit/sysctl:225c52c2d6f04a040663bac84cabf81825027f64" image: "linuxkit/sysctl:b16a483897dd5f71be7e0c04cd090b05f52682e1"
services: services:
- name: rngd - name: rngd
image: "linuxkit/rngd:69f951ce2a3a9534dbbc7ba8119e1df4391f06c0" image: "linuxkit/rngd:b67c3151a52b05db50e6207b40876900f2208d14"
- name: dhcpcd - name: dhcpcd
image: "linuxkit/dhcpcd:ae03169274d19fe8841314fa5a6fea3c61adbf4e" image: "linuxkit/dhcpcd:7d2f17a0e5d1ef9a75a527821a9ab0d753b22e7e"
- name: sshd - name: sshd
image: "linuxkit/sshd:1613253e5def414e0dfd261acd0e191eadb5fedf" image: "linuxkit/sshd:ddce15b9fbde068941e31294acdcd22befa4fc20"
capabilities:
- all
net: host
pid: host
binds:
- /root/.ssh:/root/.ssh
- /etc/resolv.conf:/etc/resolv.conf
trust:
image:
- linuxkit/kernel
- linuxkit/rngd
files: files:
- path: root/.ssh/authorized_keys - path: root/.ssh/authorized_keys
contents: '#your ssh key here' contents: '#your ssh key here'
trust:
image:
- linuxkit/kernel
- linuxkit/init
- linuxkit/runc
- linuxkit/containerd
- linuxkit/ca-certificates
- linuxkit/sysctl
- linuxkit/rngd
- linuxkit/dhcpcd
- linuxkit/sshd

49
examples/swap.yml
View File

@ -2,51 +2,29 @@ kernel:
image: "linuxkit/kernel:4.9.x" image: "linuxkit/kernel:4.9.x"
cmdline: "console=ttyS0 console=tty0 page_poison=1" cmdline: "console=ttyS0 console=tty0 page_poison=1"
init: init:
- linuxkit/init:42fe8cb1508b3afed39eb89821906e3cc7a70551 - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
- linuxkit/runc:24dfe632ed3ff53a026ee3fac046fd544434e2d6 - linuxkit/runc:3a4e6cbf15470f62501b019b55e1caac5ee7689f
- linuxkit/containerd:f1130450206d4f64f0ddc13d15bb68435aa1ff61 - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
- linuxkit/ca-certificates:eabc5a6e59f05aa91529d80e9a595b85b046f935 - linuxkit/ca-certificates:eabc5a6e59f05aa91529d80e9a595b85b046f935
onboot: onboot:
- name: sysctl - name: sysctl
image: "linuxkit/sysctl:225c52c2d6f04a040663bac84cabf81825027f64" image: "linuxkit/sysctl:b16a483897dd5f71be7e0c04cd090b05f52682e1"
- name: binfmt
image: "linuxkit/binfmt:603e5f064b3e8a64088c0fcf7a80d2783541ee1d"
- name: dhcpcd - name: dhcpcd
image: "linuxkit/dhcpcd:ae03169274d19fe8841314fa5a6fea3c61adbf4e" image: "linuxkit/dhcpcd:7d2f17a0e5d1ef9a75a527821a9ab0d753b22e7e"
command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"] command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
- name: format - name: format
image: "linuxkit/format:d78093e943f9c88386e30c00353f9476d34fb551" image: "linuxkit/format:55afe08816c2a4d8dbae3ee51ef53e0bee422d66"
binds:
- /dev:/dev
capabilities:
- CAP_SYS_ADMIN
- CAP_MKNOD
- name: mount - name: mount
image: "linuxkit/mount:fc7164d7c4e1fe5d1da395c7f949fb332cffe752" image: "linuxkit/mount:15e20f27abe69d276f796e4026531833ec5ff345"
binds:
- /dev:/dev
- /var:/var:rshared,rbind
capabilities:
- CAP_SYS_ADMIN
rootfsPropagation: shared
command: ["/mount.sh", "/var/external"] command: ["/mount.sh", "/var/external"]
- name: swap - name: swap
image: "linuxkit/swap:c4c723a3d6678dc49770181bbb231ec99b271c75" image: "linuxkit/swap:085f0088dd1ef2f994e707e438218ea4d41bad13"
net: host
pid: host
capabilities:
- CAP_SYS_ADMIN
- CAP_MKNOD
readonly: true
binds:
- /var:/var
- /dev:/dev
# to use unencrypted swap, use: # to use unencrypted swap, use:
# command: ["/swap.sh", "--path", "/var/external/swap", "--size", "1G"] # command: ["/swap.sh", "--path", "/var/external/swap", "--size", "1G"]
command: ["/swap.sh", "--path", "/var/external/swap", "--size", "1G", "--encrypt"] command: ["/swap.sh", "--path", "/var/external/swap", "--size", "1G", "--encrypt"]
services: services:
- name: rngd - name: rngd
image: "linuxkit/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9" image: "linuxkit/rngd:b67c3151a52b05db50e6207b40876900f2208d14"
- name: nginx - name: nginx
image: "nginx:alpine" image: "nginx:alpine"
capabilities: capabilities:
@ -59,3 +37,12 @@ services:
trust: trust:
image: image:
- linuxkit/kernel - linuxkit/kernel
- linuxkit/init
- linuxkit/runc
- linuxkit/containerd
- linuxkit/ca-certificates
- linuxkit/sysctl
- linuxkit/dhcpcd
- linuxkit/format
- linuxkit/mount
- linuxkit/rngd

20
examples/vmware.yml
View File

@ -2,18 +2,18 @@ kernel:
image: "linuxkit/kernel:4.9.x" image: "linuxkit/kernel:4.9.x"
cmdline: "console=tty0 page_poison=1" cmdline: "console=tty0 page_poison=1"
init: init:
- linuxkit/init:cbd7ae748f0a082516501a3e914fa0c924ee941e - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
- linuxkit/runc:24dfe632ed3ff53a026ee3fac046fd544434e2d6 - linuxkit/runc:3a4e6cbf15470f62501b019b55e1caac5ee7689f
- linuxkit/containerd:f1130450206d4f64f0ddc13d15bb68435aa1ff61 - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
- linuxkit/ca-certificates:4e9a83e890e6477dcd25029fc4f1ced61d0642f4 - linuxkit/ca-certificates:75cf419fb58770884c3464eb687ec8dfc704169d
onboot: onboot:
- name: sysctl - name: sysctl
image: "linuxkit/sysctl:225c52c2d6f04a040663bac84cabf81825027f64" image: "linuxkit/sysctl:b16a483897dd5f71be7e0c04cd090b05f52682e1"
services: services:
- name: rngd - name: rngd
image: "linuxkit/rngd:69f951ce2a3a9534dbbc7ba8119e1df4391f06c0" image: "linuxkit/rngd:b67c3151a52b05db50e6207b40876900f2208d14"
- name: dhcpcd - name: dhcpcd
image: "linuxkit/dhcpcd:ae03169274d19fe8841314fa5a6fea3c61adbf4e" image: "linuxkit/dhcpcd:7d2f17a0e5d1ef9a75a527821a9ab0d753b22e7e"
- name: nginx - name: nginx
image: "nginx:alpine" image: "nginx:alpine"
capabilities: capabilities:
@ -26,4 +26,10 @@ services:
trust: trust:
image: image:
- linuxkit/kernel - linuxkit/kernel
- linuxkit/init
- linuxkit/runc
- linuxkit/containerd
- linuxkit/ca-certificates
- linuxkit/sysctl
- linuxkit/rngd - linuxkit/rngd
- linuxkit/dhcpcd

22
linuxkit.yml
View File

@ -2,21 +2,21 @@ kernel:
image: "linuxkit/kernel:4.9.x" image: "linuxkit/kernel:4.9.x"
cmdline: "console=ttyS0 console=tty0 page_poison=1" cmdline: "console=ttyS0 console=tty0 page_poison=1"
init: init:
- linuxkit/init:cbd7ae748f0a082516501a3e914fa0c924ee941e - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
- linuxkit/runc:24dfe632ed3ff53a026ee3fac046fd544434e2d6 - linuxkit/runc:3a4e6cbf15470f62501b019b55e1caac5ee7689f
- linuxkit/containerd:f1130450206d4f64f0ddc13d15bb68435aa1ff61 - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
- linuxkit/ca-certificates:4e9a83e890e6477dcd25029fc4f1ced61d0642f4 - linuxkit/ca-certificates:75cf419fb58770884c3464eb687ec8dfc704169d
onboot: onboot:
- name: sysctl - name: sysctl
image: "linuxkit/sysctl:225c52c2d6f04a040663bac84cabf81825027f64" image: "linuxkit/sysctl:b16a483897dd5f71be7e0c04cd090b05f52682e1"
- name: binfmt - name: binfmt
image: "linuxkit/binfmt:603e5f064b3e8a64088c0fcf7a80d2783541ee1d" image: "linuxkit/binfmt:eb3977596d5fc9e847eee1d34cb3beb3f574cac9"
- name: dhcpcd - name: dhcpcd
image: "linuxkit/dhcpcd:ae03169274d19fe8841314fa5a6fea3c61adbf4e" image: "linuxkit/dhcpcd:7d2f17a0e5d1ef9a75a527821a9ab0d753b22e7e"
command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"] command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
services: services:
- name: rngd - name: rngd
image: "linuxkit/rngd:69f951ce2a3a9534dbbc7ba8119e1df4391f06c0" image: "linuxkit/rngd:b67c3151a52b05db50e6207b40876900f2208d14"
- name: nginx - name: nginx
image: "nginx:alpine" image: "nginx:alpine"
capabilities: capabilities:
@ -32,5 +32,11 @@ files:
trust: trust:
image: image:
- linuxkit/kernel - linuxkit/kernel
- linuxkit/init
- linuxkit/runc
- linuxkit/containerd
- linuxkit/ca-certificates
- linuxkit/sysctl
- linuxkit/binfmt - linuxkit/binfmt
- linuxkit/dhcpcd
- linuxkit/rngd - linuxkit/rngd

13
projects/clear-containers/clear-containers.yml
View File

@ -2,23 +2,12 @@ kernel:
image: "linuxkit/kernel-clear-containers:4.9.x" image: "linuxkit/kernel-clear-containers:4.9.x"
cmdline: "root=/dev/pmem0p1 rootflags=dax,data=ordered,errors=remount-ro rw rootfstype=ext4 tsc=reliable no_timer_check rcupdate.rcu_expedited=1 i8042.direct=1 i8042.dumbkbd=1 i8042.nopnp=1 i8042.noaux=1 noreplace-smp reboot=k panic=1 console=hvc0 console=hvc1 initcall_debug iommu=off quiet cryptomgr.notests page_poison=on" cmdline: "root=/dev/pmem0p1 rootflags=dax,data=ordered,errors=remount-ro rw rootfstype=ext4 tsc=reliable no_timer_check rcupdate.rcu_expedited=1 i8042.direct=1 i8042.dumbkbd=1 i8042.nopnp=1 i8042.noaux=1 noreplace-smp reboot=k panic=1 console=hvc0 console=hvc1 initcall_debug iommu=off quiet cryptomgr.notests page_poison=on"
init: init:
- linuxkit/init:cbd7ae748f0a082516501a3e914fa0c924ee941e - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
onboot: onboot:
- name: sysctl - name: sysctl
image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c" image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
net: host
pid: host
ipc: host
capabilities:
- CAP_SYS_ADMIN
readonly: true
services: services:
- name: rngd - name: rngd
image: "mobylinux/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9"
capabilities:
- CAP_SYS_ADMIN
oomScoreAdj: -800
readonly: true
files: files:
- path: etc/docker/daemon.json - path: etc/docker/daemon.json
contents: '{"debug": true}' contents: '{"debug": true}'

59
projects/etcd/etcd.yml
View File

@ -2,31 +2,20 @@ kernel:
image: "linuxkit/kernel:4.9.x" image: "linuxkit/kernel:4.9.x"
cmdline: "console=ttyS0 console=tty0 page_poison=1" cmdline: "console=ttyS0 console=tty0 page_poison=1"
init: init:
- linuxkit/init:cbd7ae748f0a082516501a3e914fa0c924ee941e - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
- linuxkit/runc:24dfe632ed3ff53a026ee3fac046fd544434e2d6 - linuxkit/runc:3a4e6cbf15470f62501b019b55e1caac5ee7689f
- linuxkit/containerd:f1130450206d4f64f0ddc13d15bb68435aa1ff61 - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
- linuxkit/ca-certificates:4e9a83e890e6477dcd25029fc4f1ced61d0642f4 - linuxkit/ca-certificates:75cf419fb58770884c3464eb687ec8dfc704169d
onboot: onboot:
- name: sysctl - name: sysctl
image: "linuxkit/sysctl:225c52c2d6f04a040663bac84cabf81825027f64" image: "linuxkit/sysctl:b16a483897dd5f71be7e0c04cd090b05f52682e1"
- name: format - name: format
image: "linuxkit/format:d78093e943f9c88386e30c00353f9476d34fb551" image: "linuxkit/format:55afe08816c2a4d8dbae3ee51ef53e0bee422d66"
binds:
- /dev:/dev
capabilities:
- CAP_SYS_ADMIN
- CAP_MKNOD
- name: mount - name: mount
image: "linuxkit/mount:fc7164d7c4e1fe5d1da395c7f949fb332cffe752" image: "linuxkit/mount:15e20f27abe69d276f796e4026531833ec5ff345"
binds:
- /dev:/dev
- /var:/var:rshared,rbind
capabilities:
- CAP_SYS_ADMIN
rootfsPropagation: shared
command: ["/mount.sh", "/var/lib/etcd"] command: ["/mount.sh", "/var/lib/etcd"]
- name: dhcpcd - name: dhcpcd
image: "linuxkit/dhcpcd:ae03169274d19fe8841314fa5a6fea3c61adbf4e" image: "linuxkit/dhcpcd:7d2f17a0e5d1ef9a75a527821a9ab0d753b22e7e"
command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"] command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
- name: metadata - name: metadata
image: "linuxkit/metadata:a810b68fec9c9282cf096eed50605ddd6b2f3142" image: "linuxkit/metadata:a810b68fec9c9282cf096eed50605ddd6b2f3142"
@ -39,26 +28,11 @@ onboot:
- CAP_SYS_ADMIN - CAP_SYS_ADMIN
services: services:
- name: rngd - name: rngd
image: "linuxkit/rngd:f5e5be43e730ea819c3293d5c6dcbfa7f4c5c314" image: "linuxkit/rngd:b67c3151a52b05db50e6207b40876900f2208d14"
- name: ntpd - name: ntpd
image: "linuxkit/openntpd:ad834449a7eaf10dc022b3d8d2ed9faf7ec99d37" image: "linuxkit/openntpd:ad834449a7eaf10dc022b3d8d2ed9faf7ec99d37"
capabilities:
- CAP_SYS_TIME
- CAP_SYS_NICE
- CAP_SYS_CHROOT
- CAP_SETUID
- CAP_SETGID
net: host
- name: node_exporter - name: node_exporter
image: "linuxkit/node_exporter:bdb20b41855d0e2b4edeec44ef569d030ea3cc47" image: "linuxkit/node_exporter:29a85e9c5de1a1bd470a963878194303f6a7bd8c"
capabilities:
- all
net: host
pid: host
binds:
- /proc:/host/proc
- /sys:/host/sys
- /:/rootfs
- name: etcd - name: etcd
image: "moby/etcd" image: "moby/etcd"
capabilities: capabilities:
@ -72,3 +46,16 @@ services:
binds: binds:
- /var/lib/etcd:/var/lib/etcd - /var/lib/etcd:/var/lib/etcd
- /var/config/etcd:/etc/etcd - /var/config/etcd:/etc/etcd
trust:
- images:
- linuxkit/kernel
- linuxkit/init
- linuxkit/runc
- linuxkit/containerd
- linuxkit/ca-certificates
- linuxkit/sysctl
- linuxkit/format
- linuxkit/mount
- linuxkit/dhcpcd
- linuxkit/rngd
- linuxkit/openntpd

6
projects/etcd/prom-us-central1-f.yml
View File

@ -2,15 +2,15 @@ kernel:
image: "mobylinux/kernel:4.9.x" image: "mobylinux/kernel:4.9.x"
cmdline: "console=ttyS0 page_poison=1" cmdline: "console=ttyS0 page_poison=1"
init: init:
- linuxkit/init:cbd7ae748f0a082516501a3e914fa0c924ee941e - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
- mobylinux/runc:b0fb122e10dbb7e4e45115177a61a3f8d68c19a9 - mobylinux/runc:b0fb122e10dbb7e4e45115177a61a3f8d68c19a9
- mobylinux/containerd:18eaf72f3f4f9a9f29ca1951f66df701f873060b - mobylinux/containerd:18eaf72f3f4f9a9f29ca1951f66df701f873060b
- mobylinux/ca-certificates:eabc5a6e59f05aa91529d80e9a595b85b046f935 - mobylinux/ca-certificates:eabc5a6e59f05aa91529d80e9a595b85b046f935
onboot: onboot:
- name: sysctl - name: sysctl
image: "linuxkit/sysctl:225c52c2d6f04a040663bac84cabf81825027f64" image: "linuxkit/sysctl:b16a483897dd5f71be7e0c04cd090b05f52682e1"
- name: dhcpcd - name: dhcpcd
image: "linuxkit/dhcpcd:ae03169274d19fe8841314fa5a6fea3c61adbf4e" image: "linuxkit/dhcpcd:7d2f17a0e5d1ef9a75a527821a9ab0d753b22e7e"
command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"] command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
- name: metadata - name: metadata
image: "linuxkit/metadata:a810b68fec9c9282cf096eed50605ddd6b2f3142" image: "linuxkit/metadata:a810b68fec9c9282cf096eed50605ddd6b2f3142"

35
projects/ima-namespace/ima-namespace.yml
View File

@ -3,36 +3,21 @@ kernel:
cmdline: "console=ttyS0 console=tty0 page_poison=1 ima_appraise=enforce_ns" cmdline: "console=ttyS0 console=tty0 page_poison=1 ima_appraise=enforce_ns"
init: init:
- linuxkit/init:b3740303f3d1e5689a84c87b7dfb48fd2a40a192 - linuxkit/init:b3740303f3d1e5689a84c87b7dfb48fd2a40a192
- linuxkit/runc:47b1c38d63468c0f3078f8b1b055d07965a1895d - linuxkit/runc:3a4e6cbf15470f62501b019b55e1caac5ee7689f
- linuxkit/containerd:cf2614f5a96c569a0bd4bd54e054a65ba17d167f - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
- linuxkit/ca-certificates:3344cdca1bc59fdfa17bd7f0fcbf491b9dbaa288 - linuxkit/ca-certificates:75cf419fb58770884c3464eb687ec8dfc704169d
- linuxkit/ima-utils:fe119c7dac08884f4144cd106dc279ddd8b37517 - linuxkit/ima-utils:fe119c7dac08884f4144cd106dc279ddd8b37517
onboot: onboot:
- name: sysctl - name: sysctl
image: "linuxkit/sysctl:225c52c2d6f04a040663bac84cabf81825027f64" image: "linuxkit/sysctl:b16a483897dd5f71be7e0c04cd090b05f52682e1"
- name: binfmt - name: binfmt
image: "linuxkit/binfmt:131026c0cf6084467316395fed3b358f64bda00c" image: "linuxkit/binfmt:eb3977596d5fc9e847eee1d34cb3beb3f574cac9"
binds:
- /proc/sys/fs/binfmt_misc:/binfmt_misc
readonly: true
- name: dhcpcd - name: dhcpcd
image: "linuxkit/dhcpcd:2def74ab3f9233b4c09ebb196ba47c27c08b0ed8" image: "linuxkit/dhcpcd:7d2f17a0e5d1ef9a75a527821a9ab0d753b22e7e"
binds:
- /var:/var
- /tmp/etc:/etc
capabilities:
- CAP_NET_ADMIN
- CAP_NET_BIND_SERVICE
- CAP_NET_RAW
net: host
command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"] command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
services: services:
- name: rngd - name: rngd
image: "linuxkit/rngd:61a07ced77a9747708223ca16a4aec621eacf518" image: "linuxkit/rngd:b67c3151a52b05db50e6207b40876900f2208d14"
capabilities:
- CAP_SYS_ADMIN
oomScoreAdj: -800
readonly: true
- name: nginx - name: nginx
image: "nginx:alpine" image: "nginx:alpine"
capabilities: capabilities:
@ -48,5 +33,11 @@ files:
trust: trust:
image: image:
- linuxkit/kernel - linuxkit/kernel
- linuxkit/init
- linuxkit/runc
- linuxkit/containerd
- linuxkit/ca-certificates
- linuxkit/sysctl
- linuxkit/binfmt - linuxkit/binfmt
- linuxkit/dhcpcd
- linuxkit/rngd - linuxkit/rngd

2
projects/kubernetes/image-cache/Dockerfile
View File

@ -1,4 +1,4 @@
FROM linuxkit/docker-ce:261f93927d85001c65e5ce0f421eb6062f09c0a5 FROM linuxkit/docker-ce:668d62da6e3da081a8f8aca7db3e2a98adf5da59
ADD . /images ADD . /images
ENTRYPOINT [ "/bin/sh", "-c" ] ENTRYPOINT [ "/bin/sh", "-c" ]
CMD [ "for image in /images/*.tar ; do docker image load -i $image && rm -f $image ; done" ] CMD [ "for image in /images/*.tar ; do docker image load -i $image && rm -f $image ; done" ]

42
projects/kubernetes/kube-master.yml
View File

@ -2,24 +2,19 @@ kernel:
image: "linuxkit/kernel:4.9.x" image: "linuxkit/kernel:4.9.x"
cmdline: "console=ttyS0 console=tty0 page_poison=1" cmdline: "console=ttyS0 console=tty0 page_poison=1"
init: init:
- linuxkit/init:cbd7ae748f0a082516501a3e914fa0c924ee941e - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
- linuxkit/runc:24dfe632ed3ff53a026ee3fac046fd544434e2d6 - linuxkit/runc:3a4e6cbf15470f62501b019b55e1caac5ee7689f
- linuxkit/containerd:f1130450206d4f64f0ddc13d15bb68435aa1ff61 - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
- linuxkit/ca-certificates:4e9a83e890e6477dcd25029fc4f1ced61d0642f4 - linuxkit/ca-certificates:75cf419fb58770884c3464eb687ec8dfc704169d
onboot: onboot:
- name: sysctl - name: sysctl
image: "linuxkit/sysctl:225c52c2d6f04a040663bac84cabf81825027f64" image: "linuxkit/sysctl:b16a483897dd5f71be7e0c04cd090b05f52682e1"
- name: sysfs - name: sysfs
image: linuxkit/sysfs:1cde5876d44117af61dfea629ad922defcd48808 image: linuxkit/sysfs:47367d0ef851e8bf2a9e2f80a05392c17f5c2c88
- name: binfmt - name: binfmt
image: "linuxkit/binfmt:603e5f064b3e8a64088c0fcf7a80d2783541ee1d" image: "linuxkit/binfmt:eb3977596d5fc9e847eee1d34cb3beb3f574cac9"
- name: format - name: format
image: "linuxkit/format:d78093e943f9c88386e30c00353f9476d34fb551" image: "linuxkit/format:55afe08816c2a4d8dbae3ee51ef53e0bee422d66"
binds:
- /dev:/dev
capabilities:
- CAP_SYS_ADMIN
- CAP_MKNOD
- name: mounts - name: mounts
image: "linuxkit/kubernetes:latest-mounts" image: "linuxkit/kubernetes:latest-mounts"
capabilities: capabilities:
@ -31,28 +26,15 @@ onboot:
- /var:/var:rshared,rbind - /var:/var:rshared,rbind
services: services:
- name: rngd - name: rngd
image: "linuxkit/rngd:f5e5be43e730ea819c3293d5c6dcbfa7f4c5c314" image: "linuxkit/rngd:b67c3151a52b05db50e6207b40876900f2208d14"
- name: dhcpcd - name: dhcpcd
image: "linuxkit/dhcpcd:ae03169274d19fe8841314fa5a6fea3c61adbf4e" image: "linuxkit/dhcpcd:7d2f17a0e5d1ef9a75a527821a9ab0d753b22e7e"
- name: ntpd - name: ntpd
image: "linuxkit/openntpd:ad834449a7eaf10dc022b3d8d2ed9faf7ec99d37" image: "linuxkit/openntpd:ad834449a7eaf10dc022b3d8d2ed9faf7ec99d37"
capabilities:
- CAP_SYS_TIME
- CAP_SYS_NICE
- CAP_SYS_CHROOT
- CAP_SETUID
- CAP_SETGID
net: host
- name: sshd - name: sshd
image: "linuxkit/sshd:1613253e5def414e0dfd261acd0e191eadb5fedf" image: "linuxkit/sshd:ddce15b9fbde068941e31294acdcd22befa4fc20"
capabilities:
- all
net: host
pid: host
binds:
- /root/.ssh:/root/.ssh
- name: docker - name: docker
image: "linuxkit/docker-ce:261f93927d85001c65e5ce0f421eb6062f09c0a5" image: "linuxkit/docker-ce:668d62da6e3da081a8f8aca7db3e2a98adf5da59"
capabilities: capabilities:
- all - all
net: host net: host

42
projects/kubernetes/kube-node.yml
View File

@ -2,24 +2,19 @@ kernel:
image: "linuxkit/kernel:4.9.x" image: "linuxkit/kernel:4.9.x"
cmdline: "console=ttyS0 console=tty0 page_poison=1" cmdline: "console=ttyS0 console=tty0 page_poison=1"
init: init:
- linuxkit/init:cbd7ae748f0a082516501a3e914fa0c924ee941e - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
- linuxkit/runc:24dfe632ed3ff53a026ee3fac046fd544434e2d6 - linuxkit/runc:3a4e6cbf15470f62501b019b55e1caac5ee7689f
- linuxkit/containerd:f1130450206d4f64f0ddc13d15bb68435aa1ff61 - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
- linuxkit/ca-certificates:4e9a83e890e6477dcd25029fc4f1ced61d0642f4 - linuxkit/ca-certificates:75cf419fb58770884c3464eb687ec8dfc704169d
onboot: onboot:
- name: sysctl - name: sysctl
image: "linuxkit/sysctl:225c52c2d6f04a040663bac84cabf81825027f64" image: "linuxkit/sysctl:b16a483897dd5f71be7e0c04cd090b05f52682e1"
- name: sysfs - name: sysfs
image: linuxkit/sysfs:1cde5876d44117af61dfea629ad922defcd48808 image: linuxkit/sysfs:47367d0ef851e8bf2a9e2f80a05392c17f5c2c88
- name: binfmt - name: binfmt
image: "linuxkit/binfmt:603e5f064b3e8a64088c0fcf7a80d2783541ee1d" image: "linuxkit/binfmt:eb3977596d5fc9e847eee1d34cb3beb3f574cac9"
- name: format - name: format
image: "linuxkit/format:d78093e943f9c88386e30c00353f9476d34fb551" image: "linuxkit/format:55afe08816c2a4d8dbae3ee51ef53e0bee422d66"
binds:
- /dev:/dev
capabilities:
- CAP_SYS_ADMIN
- CAP_MKNOD
- name: mounts - name: mounts
image: "linuxkit/kubernetes:latest-mounts" image: "linuxkit/kubernetes:latest-mounts"
capabilities: capabilities:
@ -31,28 +26,15 @@ onboot:
- /var:/var:rshared,rbind - /var:/var:rshared,rbind
services: services:
- name: rngd - name: rngd
image: "linuxkit/rngd:f5e5be43e730ea819c3293d5c6dcbfa7f4c5c314" image: "linuxkit/rngd:b67c3151a52b05db50e6207b40876900f2208d14"
- name: dhcpcd - name: dhcpcd
image: "linuxkit/dhcpcd:ae03169274d19fe8841314fa5a6fea3c61adbf4e" image: "linuxkit/dhcpcd:7d2f17a0e5d1ef9a75a527821a9ab0d753b22e7e"
- name: ntpd - name: ntpd
image: "linuxkit/openntpd:ad834449a7eaf10dc022b3d8d2ed9faf7ec99d37" image: "linuxkit/openntpd:ad834449a7eaf10dc022b3d8d2ed9faf7ec99d37"
capabilities:
- CAP_SYS_TIME
- CAP_SYS_NICE
- CAP_SYS_CHROOT
- CAP_SETUID
- CAP_SETGID
net: host
- name: sshd - name: sshd
image: "linuxkit/sshd:1613253e5def414e0dfd261acd0e191eadb5fedf" image: "linuxkit/sshd:ddce15b9fbde068941e31294acdcd22befa4fc20"
capabilities:
- all
net: host
pid: host
binds:
- /root/.ssh:/root/.ssh
- name: docker - name: docker
image: "linuxkit/docker-ce:261f93927d85001c65e5ce0f421eb6062f09c0a5" image: "linuxkit/docker-ce:668d62da6e3da081a8f8aca7db3e2a98adf5da59"
capabilities: capabilities:
- all - all
net: host net: host

2
projects/kubernetes/mounts.rb
View File

@ -1,6 +1,6 @@
import 'common.rb' import 'common.rb'
from "linuxkit/mount:fc7164d7c4e1fe5d1da395c7f949fb332cffe752" from "linuxkit/mount:15e20f27abe69d276f796e4026531833ec5ff345"
script = [ script = [
mount_bind_hostns_self("/etc/cni"), mount_make_hostns_rshared("/etc/cni"), mount_bind_hostns_self("/etc/cni"), mount_make_hostns_rshared("/etc/cni"),

21
projects/landlock/landlock.yml
View File

@ -2,23 +2,22 @@ kernel:
image: "mobylinux/kernel-landlock:4.9.x" image: "mobylinux/kernel-landlock:4.9.x"
cmdline: "console=ttyS0 page_poison=1" cmdline: "console=ttyS0 page_poison=1"
init: init:
- linuxkit/init:cbd7ae748f0a082516501a3e914fa0c924ee941e - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
- mobylinux/runc:b0fb122e10dbb7e4e45115177a61a3f8d68c19a9 - mobylinux/runc:b0fb122e10dbb7e4e45115177a61a3f8d68c19a9
- mobylinux/containerd:18eaf72f3f4f9a9f29ca1951f66df701f873060b - mobylinux/containerd:18eaf72f3f4f9a9f29ca1951f66df701f873060b
- mobylinux/ca-certificates:eabc5a6e59f05aa91529d80e9a595b85b046f935 - mobylinux/ca-certificates:eabc5a6e59f05aa91529d80e9a595b85b046f935
onboot: onboot:
- name: sysctl - name: sysctl
image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c" image: "mobylinux/sysctl:2cf2f9d5b4d314ba1bfc22b2fe931924af666d8c"
net: host
pid: host
ipc: host
capabilities:
- CAP_SYS_ADMIN
readonly: true
services: services:
- name: rngd - name: rngd
image: "mobylinux/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9" image: "mobylinux/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9"
capabilities: trust:
- CAP_SYS_ADMIN image:
oomScoreAdj: -800 - linuxkit/kernel
readonly: true - linuxkit/init
- linuxkit/runc
- linuxkit/containerd
- linuxkit/ca-certificates
- linuxkit/sysctl
- linuxkit/rngd

26
projects/logging/examples/logging.yml
View File

@ -2,22 +2,22 @@ kernel:
image: "linuxkit/kernel:4.9.x" image: "linuxkit/kernel:4.9.x"
cmdline: "console=ttyS0 console=tty0 page_poison=1" cmdline: "console=ttyS0 console=tty0 page_poison=1"
init: init:
- linuxkit/init:062e57b1d1e017e44c6339fc2b4cd41f3f10b2a9 # with runc, logwrite, startmemlogd - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480 # with runc, logwrite, startmemlogd
- linuxkit/runc:24dfe632ed3ff53a026ee3fac046fd544434e2d6 - linuxkit/runc:3a4e6cbf15470f62501b019b55e1caac5ee7689f
- linuxkit/containerd:f1130450206d4f64f0ddc13d15bb68435aa1ff61 - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
- linuxkit/ca-certificates:4e9a83e890e6477dcd25029fc4f1ced61d0642f4 - linuxkit/ca-certificates:75cf419fb58770884c3464eb687ec8dfc704169d
- linuxkit/memlogd:9b5834189f598f43c507f6938077113906f51012 - linuxkit/memlogd:9b5834189f598f43c507f6938077113906f51012
onboot: onboot:
- name: sysctl - name: sysctl
image: "linuxkit/sysctl:225c52c2d6f04a040663bac84cabf81825027f64" image: "linuxkit/sysctl:b16a483897dd5f71be7e0c04cd090b05f52682e1"
- name: binfmt - name: binfmt
image: "linuxkit/binfmt:603e5f064b3e8a64088c0fcf7a80d2783541ee1d" image: "linuxkit/binfmt:eb3977596d5fc9e847eee1d34cb3beb3f574cac9"
- name: dhcpcd - name: dhcpcd
image: "linuxkit/dhcpcd:ae03169274d19fe8841314fa5a6fea3c61adbf4e" image: "linuxkit/dhcpcd:7d2f17a0e5d1ef9a75a527821a9ab0d753b22e7e"
command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"] command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
services: services:
- name: rngd - name: rngd
image: "linuxkit/rngd:69f951ce2a3a9534dbbc7ba8119e1df4391f06c0" image: "linuxkit/rngd:b67c3151a52b05db50e6207b40876900f2208d14"
- name: nginx - name: nginx
image: "nginx:alpine" image: "nginx:alpine"
capabilities: capabilities:
@ -32,4 +32,12 @@ files:
contents: '{"debug": true}' contents: '{"debug": true}'
trust: trust:
image: image:
- mobylinux/kernel - linuxkit/kernel
- linuxkit/init
- linuxkit/runc
- linuxkit/containerd
- linuxkit/ca-certificates
- linuxkit/sysctl
- linuxkit/binfmt
- linuxkit/dhcpcd
- linuxkit/rngd

7
projects/miragesdk/examples/mirage-dhcp.yml
View File

@ -8,15 +8,10 @@ init:
- mobylinux/ca-certificates:eabc5a6e59f05aa91529d80e9a595b85b046f935 - mobylinux/ca-certificates:eabc5a6e59f05aa91529d80e9a595b85b046f935
onboot: onboot:
- name: sysctl - name: sysctl
image: "linuxkit/sysctl:225c52c2d6f04a040663bac84cabf81825027f64" image: "linuxkit/sysctl:b16a483897dd5f71be7e0c04cd090b05f52682e1"
- name: binfmt
services: services:
- name: rngd - name: rngd
image: mobylinux/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9 image: mobylinux/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9
capabilities:
- CAP_SYS_ADMIN
oomScoreAdj: -800
readonly: true
- name: dhcp-client - name: dhcp-client
image: mobylinux/dhcp-client:a7a6b49b0ff51ffa2f44ac848cd649e29f946e0c image: mobylinux/dhcp-client:a7a6b49b0ff51ffa2f44ac848cd649e29f946e0c
net: host net: host

23
projects/okernel/examples/okernel_simple.yaml
View File

@ -2,27 +2,20 @@ kernel:
image: "linuxkit/okernel:latest" image: "linuxkit/okernel:latest"
cmdline: "console=ttyS0 console=tty0 page_poison=1" cmdline: "console=ttyS0 console=tty0 page_poison=1"
init: init:
- linuxkit/init:cbd7ae748f0a082516501a3e914fa0c924ee941e - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
- linuxkit/runc:24dfe632ed3ff53a026ee3fac046fd544434e2d6 - linuxkit/runc:3a4e6cbf15470f62501b019b55e1caac5ee7689f
- linuxkit/containerd:f1130450206d4f64f0ddc13d15bb68435aa1ff61 - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
- linuxkit/ca-certificates:4e9a83e890e6477dcd25029fc4f1ced61d0642f4 - linuxkit/ca-certificates:75cf419fb58770884c3464eb687ec8dfc704169d
onboot: onboot:
- name: sysctl - name: sysctl
image: "linuxkit/sysctl:225c52c2d6f04a040663bac84cabf81825027f64" image: "linuxkit/sysctl:b16a483897dd5f71be7e0c04cd090b05f52682e1"
services: services:
- name: rngd - name: rngd
image: "linuxkit/rngd:3dad6dd43270fa632ac031e99d1947f20b22eec9" image: "linuxkit/rngd:b67c3151a52b05db50e6207b40876900f2208d14"
- name: dhcpcd - name: dhcpcd
image: "linuxkit/dhcpcd:ae03169274d19fe8841314fa5a6fea3c61adbf4e" image: "linuxkit/dhcpcd:7d2f17a0e5d1ef9a75a527821a9ab0d753b22e7e"
- name: sshd - name: sshd
image: "linuxkit/sshd:1613253e5def414e0dfd261acd0e191eadb5fedf" image: "linuxkit/sshd:ddce15b9fbde068941e31294acdcd22befa4fc20"
capabilities:
- all
net: host
pid: host
binds:
- /root/.ssh:/root/.ssh
- /etc/resolv.conf:/etc/resolv.conf
files: files:
- path: root/.ssh/authorized_keys - path: root/.ssh/authorized_keys
contents: '#your ssh key here' contents: '#your ssh key here'

34
projects/swarmd/swarmd.yml
View File

@ -2,31 +2,20 @@ kernel:
image: "linuxkit/kernel:4.9.x" image: "linuxkit/kernel:4.9.x"
cmdline: "console=ttyS0 console=tty0 page_poison=1" cmdline: "console=ttyS0 console=tty0 page_poison=1"
init: init:
- linuxkit/init:cbd7ae748f0a082516501a3e914fa0c924ee941e - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
- linuxkit/runc:2649198589ef0020d99f613adaeda45ce0093a38 - linuxkit/runc:2649198589ef0020d99f613adaeda45ce0093a38
- linuxkit/containerd:f1130450206d4f64f0ddc13d15bb68435aa1ff61 - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
- linuxkit/ca-certificates:4e9a83e890e6477dcd25029fc4f1ced61d0642f4 - linuxkit/ca-certificates:75cf419fb58770884c3464eb687ec8dfc704169d
onboot: onboot:
- name: sysctl - name: sysctl
image: "linuxkit/sysctl:225c52c2d6f04a040663bac84cabf81825027f64" image: "linuxkit/sysctl:b16a483897dd5f71be7e0c04cd090b05f52682e1"
- name: dhcpcd - name: dhcpcd
image: "linuxkit/dhcpcd:ae03169274d19fe8841314fa5a6fea3c61adbf4e" image: "linuxkit/dhcpcd:7d2f17a0e5d1ef9a75a527821a9ab0d753b22e7e"
command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"] command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
- name: format - name: format
image: "linuxkit/format:d78093e943f9c88386e30c00353f9476d34fb551" image: "linuxkit/format:55afe08816c2a4d8dbae3ee51ef53e0bee422d66"
binds:
- /dev:/dev
capabilities:
- CAP_SYS_ADMIN
- CAP_MKNOD
- name: mount - name: mount
image: "linuxkit/mount:fc7164d7c4e1fe5d1da395c7f949fb332cffe752" image: "linuxkit/mount:15e20f27abe69d276f796e4026531833ec5ff345"
binds:
- /dev:/dev
- /var:/var:rshared,rbind
capabilities:
- CAP_SYS_ADMIN
rootfsPropagation: shared
command: ["/mount.sh", "/var/lib/swarmd"] command: ["/mount.sh", "/var/lib/swarmd"]
- name: metadata - name: metadata
image: "linuxkit/metadata:a810b68fec9c9282cf096eed50605ddd6b2f3142" image: "linuxkit/metadata:a810b68fec9c9282cf096eed50605ddd6b2f3142"
@ -39,16 +28,9 @@ onboot:
- CAP_SYS_ADMIN - CAP_SYS_ADMIN
services: services:
- name: rngd - name: rngd
image: "linuxkit/rngd:69f951ce2a3a9534dbbc7ba8119e1df4391f06c0" image: "linuxkit/rngd:b67c3151a52b05db50e6207b40876900f2208d14"
- name: ntpd - name: ntpd
image: "linuxkit/openntpd:ad834449a7eaf10dc022b3d8d2ed9faf7ec99d37" image: "linuxkit/openntpd:ad834449a7eaf10dc022b3d8d2ed9faf7ec99d37"
capabilities:
- CAP_SYS_TIME
- CAP_SYS_NICE
- CAP_SYS_CHROOT
- CAP_SETUID
- CAP_SETGID
net: host
- name: swarmd - name: swarmd
image: "linuxkit/swarmd:a2f57f14f07fb6d7cded7832b2dabe878b28554e" image: "linuxkit/swarmd:a2f57f14f07fb6d7cded7832b2dabe878b28554e"
command: ["/usr/bin/swarmd", "--containerd-addr=/run/containerd/containerd.sock", "--log-level=debug", "--state-dir=/var/lib/swarmd"] command: ["/usr/bin/swarmd", "--containerd-addr=/run/containerd/containerd.sock", "--log-level=debug", "--state-dir=/var/lib/swarmd"]

12
test/cases/000_build/000_outputs/test.yml
View File

@ -2,13 +2,17 @@ kernel:
image: "linuxkit/kernel:4.9.x" image: "linuxkit/kernel:4.9.x"
cmdline: "console=ttyS0 console=tty0 page_poison=1" cmdline: "console=ttyS0 console=tty0 page_poison=1"
init: init:
- linuxkit/init:cbd7ae748f0a082516501a3e914fa0c924ee941e - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
- linuxkit/runc:24dfe632ed3ff53a026ee3fac046fd544434e2d6 - linuxkit/runc:3a4e6cbf15470f62501b019b55e1caac5ee7689f
- linuxkit/containerd:f1130450206d4f64f0ddc13d15bb68435aa1ff61 - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
onboot: onboot:
- name: dhcpcd - name: dhcpcd
image: "linuxkit/dhcpcd:ae03169274d19fe8841314fa5a6fea3c61adbf4e" image: "linuxkit/dhcpcd:7d2f17a0e5d1ef9a75a527821a9ab0d753b22e7e"
command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"] command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
trust: trust:
image: image:
- linuxkit/kernel - linuxkit/kernel
- linuxkit/init
- linuxkit/runc
- linuxkit/containerd
- linuxkit/dhcpcd

10
test/cases/010_platforms/000_qemu/000_run_kernel/test.yml
View File

@ -2,9 +2,9 @@ kernel:
image: "linuxkit/kernel:4.9.x" image: "linuxkit/kernel:4.9.x"
cmdline: "console=ttyS0 console=tty0 page_poison=1" cmdline: "console=ttyS0 console=tty0 page_poison=1"
init: init:
- linuxkit/init:f71c3b30ac1ba4ef16c160c89610fa4976f9752f - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
- linuxkit/runc:b0fb122e10dbb7e4e45115177a61a3f8d68c19a9 - linuxkit/runc:3a4e6cbf15470f62501b019b55e1caac5ee7689f
- linuxkit/containerd:60e2486a74c665ba4df57e561729aec20758daed - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
onboot: onboot:
- name: poweroff - name: poweroff
image: "linuxkit/poweroff:a8f1e4ad8d459f1fdaad9e4b007512cb3b504ae8" image: "linuxkit/poweroff:a8f1e4ad8d459f1fdaad9e4b007512cb3b504ae8"
@ -12,3 +12,7 @@ onboot:
trust: trust:
image: image:
- linuxkit/kernel - linuxkit/kernel
- linuxkit/init
- linuxkit/runc
- linuxkit/containerd

10
test/cases/010_platforms/000_qemu/010_run_iso/test.yml
View File

@ -2,9 +2,9 @@ kernel:
image: "linuxkit/kernel:4.9.x" image: "linuxkit/kernel:4.9.x"
cmdline: "console=ttyS0 console=tty0 page_poison=1" cmdline: "console=ttyS0 console=tty0 page_poison=1"
init: init:
- linuxkit/init:f71c3b30ac1ba4ef16c160c89610fa4976f9752f - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
- linuxkit/runc:b0fb122e10dbb7e4e45115177a61a3f8d68c19a9 - linuxkit/runc:3a4e6cbf15470f62501b019b55e1caac5ee7689f
- linuxkit/containerd:60e2486a74c665ba4df57e561729aec20758daed - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
onboot: onboot:
- name: poweroff - name: poweroff
image: "linuxkit/poweroff:a8f1e4ad8d459f1fdaad9e4b007512cb3b504ae8" image: "linuxkit/poweroff:a8f1e4ad8d459f1fdaad9e4b007512cb3b504ae8"
@ -12,3 +12,7 @@ onboot:
trust: trust:
image: image:
- linuxkit/kernel - linuxkit/kernel
- linuxkit/init
- linuxkit/runc
- linuxkit/containerd

9
test/cases/010_platforms/000_qemu/020_run_efi/test.yml
View File

@ -2,9 +2,9 @@ kernel:
image: "linuxkit/kernel:4.9.x" image: "linuxkit/kernel:4.9.x"
cmdline: "console=ttyS0 console=tty0 page_poison=1" cmdline: "console=ttyS0 console=tty0 page_poison=1"
init: init:
- linuxkit/init:f71c3b30ac1ba4ef16c160c89610fa4976f9752f - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
- linuxkit/runc:b0fb122e10dbb7e4e45115177a61a3f8d68c19a9 - linuxkit/runc:3a4e6cbf15470f62501b019b55e1caac5ee7689f
- linuxkit/containerd:60e2486a74c665ba4df57e561729aec20758daed - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
onboot: onboot:
- name: poweroff - name: poweroff
image: "linuxkit/poweroff:a8f1e4ad8d459f1fdaad9e4b007512cb3b504ae8" image: "linuxkit/poweroff:a8f1e4ad8d459f1fdaad9e4b007512cb3b504ae8"
@ -12,3 +12,6 @@ onboot:
trust: trust:
image: image:
- linuxkit/kernel - linuxkit/kernel
- linuxkit/init
- linuxkit/runc
- linuxkit/containerd

9
test/cases/010_platforms/000_qemu/030_run_qcow/test.yml
View File

@ -2,9 +2,9 @@ kernel:
image: "linuxkit/kernel:4.9.x" image: "linuxkit/kernel:4.9.x"
cmdline: "console=ttyS0 console=tty0 page_poison=1" cmdline: "console=ttyS0 console=tty0 page_poison=1"
init: init:
- linuxkit/init:f71c3b30ac1ba4ef16c160c89610fa4976f9752f - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
- linuxkit/runc:b0fb122e10dbb7e4e45115177a61a3f8d68c19a9 - linuxkit/runc:3a4e6cbf15470f62501b019b55e1caac5ee7689f
- linuxkit/containerd:60e2486a74c665ba4df57e561729aec20758daed - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
onboot: onboot:
- name: poweroff - name: poweroff
image: "linuxkit/poweroff:a8f1e4ad8d459f1fdaad9e4b007512cb3b504ae8" image: "linuxkit/poweroff:a8f1e4ad8d459f1fdaad9e4b007512cb3b504ae8"
@ -12,3 +12,6 @@ onboot:
trust: trust:
image: image:
- linuxkit/kernel - linuxkit/kernel
- linuxkit/init
- linuxkit/runc
- linuxkit/containerd

9
test/cases/010_platforms/000_qemu/100_container/test.yml
View File

@ -2,9 +2,9 @@ kernel:
image: "linuxkit/kernel:4.9.x" image: "linuxkit/kernel:4.9.x"
cmdline: "console=ttyS0 console=tty0 page_poison=1" cmdline: "console=ttyS0 console=tty0 page_poison=1"
init: init:
- linuxkit/init:cbd7ae748f0a082516501a3e914fa0c924ee941e - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
- linuxkit/runc:24dfe632ed3ff53a026ee3fac046fd544434e2d6 - linuxkit/runc:3a4e6cbf15470f62501b019b55e1caac5ee7689f
- linuxkit/containerd:f1130450206d4f64f0ddc13d15bb68435aa1ff61 - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
onboot: onboot:
- name: poweroff - name: poweroff
image: "linuxkit/poweroff:a8f1e4ad8d459f1fdaad9e4b007512cb3b504ae8" image: "linuxkit/poweroff:a8f1e4ad8d459f1fdaad9e4b007512cb3b504ae8"
@ -12,3 +12,6 @@ onboot:
trust: trust:
image: image:
- linuxkit/kernel - linuxkit/kernel
- linuxkit/init
- linuxkit/runc
- linuxkit/containerd

9
test/cases/010_platforms/010_hyperkit/000_run_kernel/test.yml
View File

@ -2,9 +2,9 @@ kernel:
image: "linuxkit/kernel:4.9.x" image: "linuxkit/kernel:4.9.x"
cmdline: "console=ttyS0 console=tty0 page_poison=1" cmdline: "console=ttyS0 console=tty0 page_poison=1"
init: init:
- linuxkit/init:f71c3b30ac1ba4ef16c160c89610fa4976f9752f - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
- linuxkit/runc:b0fb122e10dbb7e4e45115177a61a3f8d68c19a9 - linuxkit/runc:3a4e6cbf15470f62501b019b55e1caac5ee7689f
- linuxkit/containerd:60e2486a74c665ba4df57e561729aec20758daed - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
onboot: onboot:
- name: poweroff - name: poweroff
image: "linuxkit/poweroff:a8f1e4ad8d459f1fdaad9e4b007512cb3b504ae8" image: "linuxkit/poweroff:a8f1e4ad8d459f1fdaad9e4b007512cb3b504ae8"
@ -12,3 +12,6 @@ onboot:
trust: trust:
image: image:
- linuxkit/kernel - linuxkit/kernel
- linuxkit/init
- linuxkit/runc
- linuxkit/containerd

12
test/cases/020_kernel/000_config_4.4.x/test-kernel-config.yml
View File

@ -2,9 +2,9 @@ kernel:
image: "linuxkit/kernel:4.4.x" image: "linuxkit/kernel:4.4.x"
cmdline: "console=ttyS0" cmdline: "console=ttyS0"
init: init:
- linuxkit/init:cbd7ae748f0a082516501a3e914fa0c924ee941e - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
- linuxkit/runc:24dfe632ed3ff53a026ee3fac046fd544434e2d6 - linuxkit/runc:3a4e6cbf15470f62501b019b55e1caac5ee7689f
- linuxkit/containerd:f1130450206d4f64f0ddc13d15bb68435aa1ff61 - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
onboot: onboot:
- name: check-kernel-config - name: check-kernel-config
image: "linuxkit/test-kernel-config:ecff41279ccbc408079a3996a956432651c6eb9c" image: "linuxkit/test-kernel-config:ecff41279ccbc408079a3996a956432651c6eb9c"
@ -12,3 +12,9 @@ onboot:
- name: poweroff - name: poweroff
image: "linuxkit/poweroff:a8f1e4ad8d459f1fdaad9e4b007512cb3b504ae8" image: "linuxkit/poweroff:a8f1e4ad8d459f1fdaad9e4b007512cb3b504ae8"
command: ["/bin/sh", "/poweroff.sh", "3"] command: ["/bin/sh", "/poweroff.sh", "3"]
trust:
image:
- linuxkit/kernel
- linuxkit/init
- linuxkit/runc
- linuxkit/containerd

12
test/cases/020_kernel/001_config_4.9.x/test-kernel-config.yml
View File

@ -2,9 +2,9 @@ kernel:
image: "linuxkit/kernel:4.9.x" image: "linuxkit/kernel:4.9.x"
cmdline: "console=ttyS0" cmdline: "console=ttyS0"
init: init:
- linuxkit/init:cbd7ae748f0a082516501a3e914fa0c924ee941e - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
- linuxkit/runc:24dfe632ed3ff53a026ee3fac046fd544434e2d6 - linuxkit/runc:3a4e6cbf15470f62501b019b55e1caac5ee7689f
- linuxkit/containerd:f1130450206d4f64f0ddc13d15bb68435aa1ff61 - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
onboot: onboot:
- name: check-kernel-config - name: check-kernel-config
image: "linuxkit/test-kernel-config:ecff41279ccbc408079a3996a956432651c6eb9c" image: "linuxkit/test-kernel-config:ecff41279ccbc408079a3996a956432651c6eb9c"
@ -12,3 +12,9 @@ onboot:
- name: poweroff - name: poweroff
image: "linuxkit/poweroff:a8f1e4ad8d459f1fdaad9e4b007512cb3b504ae8" image: "linuxkit/poweroff:a8f1e4ad8d459f1fdaad9e4b007512cb3b504ae8"
command: ["/bin/sh", "/poweroff.sh", "3"] command: ["/bin/sh", "/poweroff.sh", "3"]
trust:
image:
- linuxkit/kernel
- linuxkit/init
- linuxkit/runc
- linuxkit/containerd

12
test/cases/020_kernel/002_config_4.10.x/test-kernel-config.yml
View File

@ -2,9 +2,9 @@ kernel:
image: "linuxkit/kernel:4.10.x" image: "linuxkit/kernel:4.10.x"
cmdline: "console=ttyS0" cmdline: "console=ttyS0"
init: init:
- linuxkit/init:cbd7ae748f0a082516501a3e914fa0c924ee941e - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
- linuxkit/runc:24dfe632ed3ff53a026ee3fac046fd544434e2d6 - linuxkit/runc:3a4e6cbf15470f62501b019b55e1caac5ee7689f
- linuxkit/containerd:f1130450206d4f64f0ddc13d15bb68435aa1ff61 - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
onboot: onboot:
- name: check-kernel-config - name: check-kernel-config
image: "linuxkit/test-kernel-config:ecff41279ccbc408079a3996a956432651c6eb9c" image: "linuxkit/test-kernel-config:ecff41279ccbc408079a3996a956432651c6eb9c"
@ -12,3 +12,9 @@ onboot:
- name: poweroff - name: poweroff
image: "linuxkit/poweroff:a8f1e4ad8d459f1fdaad9e4b007512cb3b504ae8" image: "linuxkit/poweroff:a8f1e4ad8d459f1fdaad9e4b007512cb3b504ae8"
command: ["/bin/sh", "/poweroff.sh", "3"] command: ["/bin/sh", "/poweroff.sh", "3"]
trust:
image:
- linuxkit/kernel
- linuxkit/init
- linuxkit/runc
- linuxkit/containerd

12
test/cases/020_kernel/003_config_4.11.x/test-kernel-config.yml
View File

@ -2,9 +2,9 @@ kernel:
image: "linuxkit/kernel:4.11.x" image: "linuxkit/kernel:4.11.x"
cmdline: "console=ttyS0" cmdline: "console=ttyS0"
init: init:
- linuxkit/init:cbd7ae748f0a082516501a3e914fa0c924ee941e - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
- linuxkit/runc:24dfe632ed3ff53a026ee3fac046fd544434e2d6 - linuxkit/runc:3a4e6cbf15470f62501b019b55e1caac5ee7689f
- linuxkit/containerd:f1130450206d4f64f0ddc13d15bb68435aa1ff61 - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
onboot: onboot:
- name: check-kernel-config - name: check-kernel-config
image: "linuxkit/test-kernel-config:ecff41279ccbc408079a3996a956432651c6eb9c" image: "linuxkit/test-kernel-config:ecff41279ccbc408079a3996a956432651c6eb9c"
@ -12,3 +12,9 @@ onboot:
- name: poweroff - name: poweroff
image: "linuxkit/poweroff:a8f1e4ad8d459f1fdaad9e4b007512cb3b504ae8" image: "linuxkit/poweroff:a8f1e4ad8d459f1fdaad9e4b007512cb3b504ae8"
command: ["/bin/sh", "/poweroff.sh", "3"] command: ["/bin/sh", "/poweroff.sh", "3"]
trust:
image:
- linuxkit/kernel
- linuxkit/init
- linuxkit/runc
- linuxkit/containerd

12
test/cases/020_kernel/010_kmod_4.9.x/kmod.yml
View File

@ -2,9 +2,9 @@ kernel:
image: "linuxkit/kernel:4.9.x" image: "linuxkit/kernel:4.9.x"
cmdline: "console=ttyS0" cmdline: "console=ttyS0"
init: init:
- linuxkit/init:cbd7ae748f0a082516501a3e914fa0c924ee941e - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
- linuxkit/runc:24dfe632ed3ff53a026ee3fac046fd544434e2d6 - linuxkit/runc:3a4e6cbf15470f62501b019b55e1caac5ee7689f
- linuxkit/containerd:f1130450206d4f64f0ddc13d15bb68435aa1ff61 - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
onboot: onboot:
- name: check - name: check
image: "kmod-test" image: "kmod-test"
@ -16,3 +16,9 @@ onboot:
- name: poweroff - name: poweroff
image: "linuxkit/poweroff:a8f1e4ad8d459f1fdaad9e4b007512cb3b504ae8" image: "linuxkit/poweroff:a8f1e4ad8d459f1fdaad9e4b007512cb3b504ae8"
command: ["/bin/sh", "/poweroff.sh", "3"] command: ["/bin/sh", "/poweroff.sh", "3"]
trust:
image:
- linuxkit/kernel
- linuxkit/init
- linuxkit/runc
- linuxkit/containerd

44
test/cases/030_security/000_docker-bench/test-docker-bench.yml
View File

@ -2,40 +2,29 @@ kernel:
image: "linuxkit/kernel:4.9.x" image: "linuxkit/kernel:4.9.x"
cmdline: "console=ttyS0 console=tty0 page_poison=1" cmdline: "console=ttyS0 console=tty0 page_poison=1"
init: init:
- linuxkit/init:cbd7ae748f0a082516501a3e914fa0c924ee941e - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
- linuxkit/runc:24dfe632ed3ff53a026ee3fac046fd544434e2d6 - linuxkit/runc:3a4e6cbf15470f62501b019b55e1caac5ee7689f
- linuxkit/containerd:f1130450206d4f64f0ddc13d15bb68435aa1ff61 - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
- linuxkit/ca-certificates:4e9a83e890e6477dcd25029fc4f1ced61d0642f4 - linuxkit/ca-certificates:75cf419fb58770884c3464eb687ec8dfc704169d
onboot: onboot:
- name: sysctl - name: sysctl
image: "linuxkit/sysctl:225c52c2d6f04a040663bac84cabf81825027f64" image: "linuxkit/sysctl:b16a483897dd5f71be7e0c04cd090b05f52682e1"
- name: sysfs - name: sysfs
image: "linuxkit/sysfs:1cde5876d44117af61dfea629ad922defcd48808" image: "linuxkit/sysfs:47367d0ef851e8bf2a9e2f80a05392c17f5c2c88"
- name: binfmt - name: binfmt
image: "linuxkit/binfmt:603e5f064b3e8a64088c0fcf7a80d2783541ee1d" image: "linuxkit/binfmt:eb3977596d5fc9e847eee1d34cb3beb3f574cac9"
- name: format - name: format
image: "linuxkit/format:d78093e943f9c88386e30c00353f9476d34fb551" image: "linuxkit/format:55afe08816c2a4d8dbae3ee51ef53e0bee422d66"
binds:
- /dev:/dev
capabilities:
- CAP_SYS_ADMIN
- CAP_MKNOD
- name: mount - name: mount
image: "linuxkit/mount:fc7164d7c4e1fe5d1da395c7f949fb332cffe752" image: "linuxkit/mount:15e20f27abe69d276f796e4026531833ec5ff345"
binds:
- /dev:/dev
- /var:/var:rshared,rbind
capabilities:
- CAP_SYS_ADMIN
rootfsPropagation: shared
command: ["/mount.sh", "/var/lib/docker"] command: ["/mount.sh", "/var/lib/docker"]
services: services:
- name: rngd - name: rngd
image: "linuxkit/rngd:69f951ce2a3a9534dbbc7ba8119e1df4391f06c0" image: "linuxkit/rngd:b67c3151a52b05db50e6207b40876900f2208d14"
- name: dhcpcd - name: dhcpcd
image: "linuxkit/dhcpcd:ae03169274d19fe8841314fa5a6fea3c61adbf4e" image: "linuxkit/dhcpcd:7d2f17a0e5d1ef9a75a527821a9ab0d753b22e7e"
- name: docker - name: docker
image: "linuxkit/docker-ce:261f93927d85001c65e5ce0f421eb6062f09c0a5" image: "linuxkit/docker-ce:668d62da6e3da081a8f8aca7db3e2a98adf5da59"
capabilities: capabilities:
- all - all
net: host net: host
@ -58,5 +47,14 @@ services:
trust: trust:
image: image:
- linuxkit/kernel - linuxkit/kernel
- linuxkit/init
- linuxkit/runc
- linuxkit/containerd
- linuxkit/ca-certificates
- linuxkit/sysctl
- linuxkit/sysfs
- linuxkit/binfmt - linuxkit/binfmt
- linuxkit/format
- linuxkit/mount
- linuxkit/rngd - linuxkit/rngd
- linuxkit/dhcpcd

15
test/cases/040_packages/000_sysctl/test-sysctl.yml
View File

@ -2,13 +2,12 @@ kernel:
image: "linuxkit/kernel:4.9.x" image: "linuxkit/kernel:4.9.x"
cmdline: "console=ttyS0 page_poison=1" cmdline: "console=ttyS0 page_poison=1"
init: init:
- linuxkit/init:cbd7ae748f0a082516501a3e914fa0c924ee941e - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
- linuxkit/runc:24dfe632ed3ff53a026ee3fac046fd544434e2d6 - linuxkit/runc:3a4e6cbf15470f62501b019b55e1caac5ee7689f
- linuxkit/containerd:1c71f95fa36040ea7e987deb98a7a2a363853f01 - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
- linuxkit/ca-certificates:4e9a83e890e6477dcd25029fc4f1ced61d0642f4
onboot: onboot:
- name: sysctl - name: sysctl
image: "linuxkit/sysctl:225c52c2d6f04a040663bac84cabf81825027f64" image: "linuxkit/sysctl:b16a483897dd5f71be7e0c04cd090b05f52682e1"
- name: test - name: test
image: "linuxkit/test-sysctl:c4df4c4d692904d6245dcdef1f4a79389bd3d894" image: "linuxkit/test-sysctl:c4df4c4d692904d6245dcdef1f4a79389bd3d894"
- name: poweroff - name: poweroff
@ -16,5 +15,7 @@ onboot:
trust: trust:
image: image:
- linuxkit/kernel - linuxkit/kernel
- linuxkit/binfmt - linuxkit/init
- linuxkit/rngd - linuxkit/runc
- linuxkit/containerd
- linuxkit/sysctl

13
test/cases/040_packages/001_mkimage/mkimage.yml
View File

@ -2,12 +2,12 @@ kernel:
image: "linuxkit/kernel:4.9.x" image: "linuxkit/kernel:4.9.x"
cmdline: "console=ttyS0" cmdline: "console=ttyS0"
init: init:
- linuxkit/init:cbd7ae748f0a082516501a3e914fa0c924ee941e - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
- linuxkit/runc:24dfe632ed3ff53a026ee3fac046fd544434e2d6 - linuxkit/runc:3a4e6cbf15470f62501b019b55e1caac5ee7689f
- linuxkit/containerd:f1130450206d4f64f0ddc13d15bb68435aa1ff61 - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
onboot: onboot:
- name: mkimage - name: mkimage
image: "linuxkit/mkimage:8bb18fe306afaca9ba50fe3148ec12570586c2a6" image: "linuxkit/mkimage:a3fd615543b84733ac8ba6f7e1927727665ef404"
- name: poweroff - name: poweroff
image: "linuxkit/poweroff:a8f1e4ad8d459f1fdaad9e4b007512cb3b504ae8" image: "linuxkit/poweroff:a8f1e4ad8d459f1fdaad9e4b007512cb3b504ae8"
files: files:
@ -20,5 +20,6 @@ files:
trust: trust:
image: image:
- linuxkit/kernel - linuxkit/kernel
- linuxkit/binfmt - linuxkit/init
- linuxkit/rngd - linuxkit/runc
- linuxkit/containerd

9
test/cases/040_packages/001_mkimage/run.yml
View File

@ -2,15 +2,12 @@ kernel:
image: "linuxkit/kernel:4.9.x" image: "linuxkit/kernel:4.9.x"
cmdline: "console=ttyS0" cmdline: "console=ttyS0"
init: init:
- linuxkit/init:cbd7ae748f0a082516501a3e914fa0c924ee941e - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
- linuxkit/runc:24dfe632ed3ff53a026ee3fac046fd544434e2d6 - linuxkit/runc:3a4e6cbf15470f62501b019b55e1caac5ee7689f
- linuxkit/containerd:1c71f95fa36040ea7e987deb98a7a2a363853f01 - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
- linuxkit/ca-certificates:4e9a83e890e6477dcd25029fc4f1ced61d0642f4
onboot: onboot:
- name: poweroff - name: poweroff
image: "linuxkit/poweroff:a8f1e4ad8d459f1fdaad9e4b007512cb3b504ae8" image: "linuxkit/poweroff:a8f1e4ad8d459f1fdaad9e4b007512cb3b504ae8"
trust: trust:
image: image:
- linuxkit/kernel - linuxkit/kernel
- linuxkit/binfmt
- linuxkit/rngd

13
test/hack/test-ltp.yml
View File

@ -2,10 +2,9 @@ kernel:
image: "linuxkit/kernel:4.9.x" image: "linuxkit/kernel:4.9.x"
cmdline: "console=ttyS0" cmdline: "console=ttyS0"
init: init:
- linuxkit/init:cbd7ae748f0a082516501a3e914fa0c924ee941e - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
- linuxkit/runc:24dfe632ed3ff53a026ee3fac046fd544434e2d6 - linuxkit/runc:3a4e6cbf15470f62501b019b55e1caac5ee7689f
- linuxkit/containerd:f1130450206d4f64f0ddc13d15bb68435aa1ff61 - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
- linuxkit/ca-certificates:4e9a83e890e6477dcd25029fc4f1ced61d0642f4
onboot: onboot:
- name: ltp - name: ltp
image: "linuxkit/test-ltp-20170116:81229df2d25065b06f0a3071faaace8d66c87e67" image: "linuxkit/test-ltp-20170116:81229df2d25065b06f0a3071faaace8d66c87e67"
@ -20,3 +19,9 @@ onboot:
files: files:
- path: /etc/ltp/baseline - path: /etc/ltp/baseline
contents: "100" contents: "100"
trust:
image:
- linuxkit/kernel
- linuxkit/init
- linuxkit/runc
- linuxkit/containerd

14
test/hack/test.yml
View File

@ -4,13 +4,12 @@ kernel:
image: "linuxkit/kernel:4.9.x" image: "linuxkit/kernel:4.9.x"
cmdline: "console=ttyS0" cmdline: "console=ttyS0"
init: init:
- linuxkit/init:deea956a9ab07bf262083e93a86930bdc610cc2f - linuxkit/init:4fc8aa82ab34d62d510575c8fbe0c58b7ba9c480
- linuxkit/runc:2649198589ef0020d99f613adaeda45ce0093a38 - linuxkit/runc:2649198589ef0020d99f613adaeda45ce0093a38
- linuxkit/containerd:f1130450206d4f64f0ddc13d15bb68435aa1ff61 - linuxkit/containerd:b1766e4c4c09f63ac4925a6e4612852a93f7e73b
- linuxkit/ca-certificates:4e9a83e890e6477dcd25029fc4f1ced61d0642f4
onboot: onboot:
- name: dhcpcd - name: dhcpcd
image: "linuxkit/dhcpcd:ae03169274d19fe8841314fa5a6fea3c61adbf4e" image: "linuxkit/dhcpcd:7d2f17a0e5d1ef9a75a527821a9ab0d753b22e7e"
command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"] command: ["/sbin/dhcpcd", "--nobackground", "-f", "/dhcpcd.conf", "-1"]
- name: check-kernel-config - name: check-kernel-config
image: "linuxkit/test-kernel-config:ecff41279ccbc408079a3996a956432651c6eb9c" image: "linuxkit/test-kernel-config:ecff41279ccbc408079a3996a956432651c6eb9c"
@ -18,3 +17,10 @@ onboot:
- name: poweroff - name: poweroff
image: "linuxkit/poweroff:a8f1e4ad8d459f1fdaad9e4b007512cb3b504ae8" image: "linuxkit/poweroff:a8f1e4ad8d459f1fdaad9e4b007512cb3b504ae8"
command: ["/bin/sh", "/poweroff.sh", "3"] command: ["/bin/sh", "/poweroff.sh", "3"]
trust:
image:
- linuxkit/kernel
- linuxkit/init
- linuxkit/runc
- linuxkit/containerd
- linuxkit/dhcpcd