Commit Graph

392 Commits

Author SHA1 Message Date
Riyaz Faizullabhoy
c06f0547b1 Include brief primer doc on signing
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-05-25 11:06:08 -07:00
thebsdbox
58829874d1 open-vm-tools package/documentation
Signed-off-by: Dan Finneran <daniel.finneran@gmail.com>
2017-05-25 16:15:15 +01:00
Rolf Neugebauer
f02efdccc5 Merge pull request #1888 from rneugeba/qemu
cmd: Unify disk command line options for local hypervisors
2017-05-24 16:28:59 +01:00
Rolf Neugebauer
f90fde5a6f cmd: Unify disk command line options for local hypervisors
- '-disk-size' is now defaults to MB (but can be GB when appending 'G')
- The disk will be created if it doesn't exist (didn't happen in qemu)

Update the documentation.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-05-24 16:05:06 +01:00
Tycho Andersen
90c7047973 docs: add a blurb about CVE-2017-1000363
As of the time of this patch, the CVE was not available yet in the mitre
db.

Signed-off-by: Tycho Andersen <tycho@docker.com>
2017-05-23 16:03:00 -06:00
Rolf Neugebauer
6bea56c185 Update all YAML files to use the new packages
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-05-18 18:55:22 +01:00
Rolf Neugebauer
cd354c2ab1 docs: Improve testing.md
- Add 'rtf list'
- Add section about test logs
- Fis a few typos

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-05-17 14:46:28 +01:00
Justin Cormack
2aec868710 Merge pull request #1840 from dave-tucker/ci-docs
Document the CI setup
2017-05-16 15:36:28 +01:00
Dave Tucker
562b12a639 Document the CI setup
Signed-off-by: Dave Tucker <dt@docker.com>
2017-05-16 13:02:31 +01:00
Rolf Neugebauer
6c4722d4a9 docs: Add a section on custom kernel builds
fixes #1835

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-05-16 10:09:22 +01:00
Rolf Neugebauer
122267c6f8 Merge pull request #1803 from ijc25/mkmetadata
Add `linuxkit metadata create` command
2017-05-11 20:09:52 +01:00
Ian Campbell
36eaa44d7e Add linuxkit metadata command
Only subcommand is currently `create` which is a thin wrapper to create an iso
file in the format expected by `pkg/metadata`.

Currently very basic and just takes the content on the command line but could
be extended to read from a file etc.

Signed-off-by: Ian Campbell <ian.campbell@docker.com>
2017-05-11 19:25:27 +01:00
Ian Campbell
800badea42 metadata: Allow simple string keys
If a file is a simple string (as opposed to a map) then write it with the
default perms. This makes for slightly terser metadata when creating a simple
datafile.

Signed-off-by: Ian Campbell <ian.campbell@docker.com>
2017-05-11 01:39:03 +01:00
Jeffrey Hogan
50875c5a21
Correct gcp.yml example URL path
Signed-off-by: Jeffrey Hogan <jeff.hogan1@gmail.com>
2017-05-09 13:12:35 -05:00
Justin Cormack
da72655886 Merge pull request #1777 from deitch/document-container-mount-options
Add docs how to use mount options for special mounting containers
2017-05-08 20:32:15 +01:00
Avi Deitcher
a9e9958d7c Add docs how to use mount options for special mounting containers
Signed-off-by: Avi Deitcher <avi@deitcher.net>
2017-05-08 15:15:01 -04:00
Avi Deitcher
ff7de6e532 Add docs on how to use external disk
Signed-off-by: Avi Deitcher <avi@deitcher.net>
2017-05-08 14:47:45 -04:00
Rolf Neugebauer
c9c0c16490 docs: Add a section on how to compile kernel modules
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-05-03 16:46:12 +01:00
Rolf Neugebauer
f44421042e kernel: Fix DEBUG builds and add default debug targets/images
Building debug kernels (with additional run time checks and debugging)
was broken a few commits back. This adds back support for building debug
kernels.

In addition, it builds and uploads debug kernels for selected kernel
series (4.9.x LTS and latest stable). The tag for these kernels has
a "_dbg" suffix.

Update documentation.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-05-02 14:17:01 +01:00
solidnerd
c252305cda
Fix typo in docs/kernels.md
Signed-off-by: solidnerd <niclas@mietz.io>
2017-05-01 13:21:35 +02:00
Rolf Neugebauer
721ffeeccd docs: Update kernel doc with info about supported kernels
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-04-30 12:51:32 +01:00
Rolf Neugebauer
6b61e50876 docs: Clarify hyperkit networking
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-04-27 01:40:35 +01:00
Rolf Neugebauer
35045cdb6b docs: Update kernel documentation
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-04-26 22:29:47 +01:00
Rolf Neugebauer
43d981094d kernel: Rework the kernel build
- Use multi-stage builds
- Use a single Dockerfile for all kernels
  Kernel version and series are passed in as arguments
- Use a separate kernel config per kernel version
  These have been copied from kernel_config and ran
  through oldconfig to tidy them up
- Rename patch directories
- Refactor the Makefile to use a template
  - Allows building of all kernels without arguments to make
  - Use git tree hash as the image tag
  - Don't build the image if the tag already exists

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-04-26 22:29:47 +01:00
Rolf Neugebauer
db6d3d7ed2 docs: Consolidate mac tips & tricks in ./docs/mac.md
We had serveral files with instructions, in particular for
networking, for macOS/Docker for Mac. Let's have just one place.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-04-25 13:17:04 +01:00
Rolf Neugebauer
febe68de6c vendor: Remove un-used vendored packages
With the infrakit plugin gone, remove it's dependencies.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-04-25 13:17:04 +01:00
Akihiro Suda
9fc864d92a update gcp docs
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2017-04-25 09:40:15 +00:00
Riyaz Faizullabhoy
e8ae5f3341 Move summit notes to reports/ and include date in filename
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-04-24 10:18:22 -07:00
Justin Cormack
2709ee88bc Split build and push, and remove push code from run
This currently only changes the `gcp` target, but is the new
model - the `build` command will only do things locally, then
you need to `push` to an image store such as GCP or other ones
in order to `run` for platforms that cannot boot directly from
a local image.

Fix #1618

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-04-24 17:12:05 +01:00
Rolf Neugebauer
f750a04b04 Merge pull request #1679 from riyazdf/dockercon-summit-notes
summit: add notes from session 1 bof
2017-04-22 10:18:32 -05:00
Thomas Shaw
e9d7989e36 Fix broken link to pkg dir 2017-04-21 21:17:32 -05:00
Thomas Shaw
b0584f05bd Fix link to kernels directory 2017-04-21 20:33:09 -05:00
Riyaz Faizullabhoy
a3030f5d5e summit: add notes from session 1 bof
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-04-21 13:27:05 -07:00
Justin Cormack
e08f3a9a3f Change docker/linuxkit to linuxkit/linuxkit
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-04-17 18:13:28 -05:00
Sebastiaan van Stijn
6d1ea86da6 add license, and files for opensourcing
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2017-04-16 18:23:23 -05:00
Justin Cormack
72c3f9cfa2 More renames to LinuxKit
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-04-14 11:47:24 -05:00
Ilya Dmitrichenko
a4f2f46aae Few improvements to metadata docs
Signed-off-by: Ilya Dmitrichenko <errordeveloper@gmail.com>
2017-04-14 11:04:26 +01:00
Justin Cormack
e17e4bf286 Merge pull request #1622 from tych0/CVE-2016-10229
security events: add writeup of CVE-2016-10229
2017-04-14 00:19:34 +01:00
Tycho Andersen
d92560402d security events: add writeup of CVE-2016-10229
Signed-off-by: Tycho Andersen <tycho@docker.com>
2017-04-13 10:15:33 -06:00
Gianluca Arbezzano
2620489926 Fixed gpc-cli brew installation and add install from source
Fixed gcloud cli installation via brew. Added installation from source.

Signed-off-by: Gianluca Arbezzano <gianarb92@gmail.com>
2017-04-13 11:36:19 +02:00
Rolf Neugebauer
3b4ff0e9f4 docs: Update vendoring instruction with new go-compile package
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-04-12 21:28:17 +01:00
Justin Cormack
89c642eac1 Rename Moby to LinuxKit part 1
This covers the base docs; I also did a bunch of cleanup and
remove old docs that are no longer needed.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-04-12 11:44:06 +01:00
Rolf Neugebauer
766e1d95d3 pkg: Add a generic metadata package
This package handles meta and user data for different cloud
and other platforms. It should be easy to extend to new
platforms.

Currently, it handles GCP metadata and a simple CDROM userdata
provider.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-04-11 15:32:17 +01:00
Justin Cormack
06ac17821b Merge pull request #1503 from dave-tucker/vndr
Add vendoring instructions
2017-04-11 13:41:46 +01:00
Dave Tucker
00edddac9a Add vndr to go-compile and add vendoring docs
This makes it easier to safely udpate the vendor directory

Signed-off-by: Dave Tucker <dt@docker.com>
2017-04-11 13:35:51 +01:00
Jeremy Yallop
188c90164b Fix broken link to okernel documentation.
Signed-off-by: Jeremy Yallop <yallop@docker.com>
2017-04-11 11:49:06 +01:00
Riyaz Faizullabhoy
b1475d33bc trust: add yaml docs
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-04-08 17:25:33 -07:00
Justin Cormack
aa3e6fdc9f Add initial overview of the yaml config
Needs expanding with more details, but a start.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-04-08 17:14:07 +01:00
Riyaz Faizullabhoy
5fe0233dad Update security arch docs with feedback
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-04-05 11:29:07 -07:00
Dave Tucker
db10280f5f run: Add gcp backend
This commit implements `moby run gcp` which allows for testing of moby
images on the Google Cloud Platform

This backend attaches (via SSH) to the serial console.
It generates instance-only SSH keys and adds the public key to the
image metadata. These are used by the `moby` tool only.

It will also automatically upload a file and creates an image if the prefix
given to `moby run` is a filename

Signed-off-by: Dave Tucker <dt@docker.com>
2017-04-05 14:50:23 +01:00
Justin Cormack
4220a65128 Merge pull request #1440 from riyazdf/security-arch
Security docs
2017-04-03 10:37:54 +01:00
Riyaz Faizullabhoy
c1f84921fe Address review comments
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-04-02 21:21:18 -07:00
Justin Cormack
e2ec6c2a93 Merge pull request #1459 from rneugeba/ebpf-fix
docs: Move ebpf.md to projects
2017-04-02 14:04:09 +01:00
Rolf Neugebauer
63c89507e7 docs: Move ebpf.md to projects
This was missed when moving the ebpf stuff into a project.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-04-02 13:09:29 +01:00
Justin Cormack
faad84431e Add a doc for topics to discuss at the Summit at Dockercon
(as per containerd)

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-04-02 12:43:52 +01:00
Tycho Andersen
12624b60bf add some headings, fix some spelling mistakes
Signed-off-by: Tycho Andersen <tycho@docker.com>
2017-04-01 11:32:41 -06:00
Tycho Andersen
ad7ddba0dc docs: add a security-events.md
In the same vein as [1], let's start talking about security events. I
suppose we want to talk about security events as well as non-events,
though, to give a little discussion about post moretem. But we can rename
this to security-non-events if we want.

[1]: https://github.com/docker/docker.github.io/blob/master/engine/security/non-events.md

Signed-off-by: Tycho Andersen <tycho@docker.com>
2017-03-31 09:40:38 -06:00
Riyaz Faizullabhoy
52fa33d6d1 first pass at security docs
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-03-30 17:22:58 -07:00
Rolf Neugebauer
eaef1ca8fb docs: Update kernel patches doc
It's useful for cherry-picked patches to know which tree
they got patched from. Include a "Origin:" line.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-03-30 10:46:49 +01:00
Justin Cormack
f27c450268 Architecture overview
- also some tweaks in README.

fix #1394

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-03-28 15:29:34 +02:00
Rolf Neugebauer
e9fbe43b34 Rename .yaml to .yml
docker-compose and other utilities use the .yml extension.
For consistency rename all .yaml to .yml

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-03-27 09:53:26 +02:00
Rolf Neugebauer
6a29d153f5 infrakit: Move the hyperkit instance plugin into the source directory
- The tools directory ideally should not contain source code
- Removes double vendoring of packagages
- Makes it easer to hook the build into the top-level Makefile

Eventually, the plugin should be moved to the infrakit repo.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-03-25 13:02:45 +01:00
Justin Cormack
1f14c347f6 Add the beginings of a roadmap and faq
Needs expansion, but got to start somewhere...

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-03-22 14:48:50 +00:00
Anil Madhavapeddy
1a5fa6a305 docs: moby/alpine/kernel/ is now just moby/kernel/
Signed-off-by: Anil Madhavapeddy <anil@docker.com>
2017-03-15 15:14:56 +00:00
Rolf Neugebauer
13d3a93a08 docs: fix a few snags in the kernel patch documentation
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-03-15 10:46:22 +00:00
Justin Cormack
37c6169ab7 Add upload to Google Cloud Storage and Google Compute Image creation
- the image upload uses the cloud API
- currently auth and image creation need the `gcloud` CLI tool.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-03-14 14:45:05 +00:00
Rolf Neugebauer
e1b03b07ec docs: Update kernel patches documentation
Make the process and the requirements for patches clearer.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-03-07 19:42:23 +00:00
Rolf Neugebauer
c1c30b62ff docs: add short how-to for running Moby on GCP
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-02-08 17:35:05 +00:00
Riyaz Faizullabhoy
a29b6c1391 Revert to non-development containerd and runc until nats port is sorted out
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-02-02 11:57:28 -08:00
Riyaz Faizullabhoy
d66bc2d501 Split base/ into base/ and tools/
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-01-31 09:52:30 -08:00
Justin Cormack
89e98eefa0 Shift to development track containerd
Move to the development track of `containerd` not the legacy 0.2
branch. The commands have changed a bit.

This does increase the image size as we are bundling the Docker
copy and our copy, and the new one is larger as it is growing features.
Hopefully Docker will shrink eventually. Also we may replace `ctr`
with a library.

Fix #1029

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-01-24 15:39:44 +00:00
Riyaz Faizullabhoy
4c810a27f9 Merge lint.sh into compile.sh, remove unused alpine-build-go
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-01-23 13:25:44 -08:00
Rolf Neugebauer
fe533386f0 docs: add a note about kernel symbols to the ebpf documentation
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-01-06 16:52:16 +00:00
Rolf Neugebauer
b56da24f6a docs: add --pid=host to ebpf command line.
A lot of the `iovisor/bcc` tools take a pid as a command line option and using
`--pid=host` allows you to use `$(pgrep foo)`

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-01-06 16:43:43 +00:00
Justin Cormack
f6c2143197 Add a development eBPF container build
See `docs/ebpf.md` for how to use. This is built by CI or you can build
manually if you customise the kernel.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-01-05 11:59:28 +00:00
Rolf Neugebauer
2cb9fc5223 docs: update hub docs to include the TAG comment
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-12-16 16:21:39 +00:00
Rolf Neugebauer
2b134e8677 doc: update document about kernel patches
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-10-21 15:00:50 +01:00
Rolf Neugebauer
d32adafe4b docs: document how to work with Linux kernel patches
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-10-11 20:13:03 +01:00
Justin Cormack
68a8698003 More docs on Hub images
See #529

Could be expanded further.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-09-20 18:10:21 +01:00
Rolf Neugebauer
deffc1f143 docs: add a short document about coding style recommendation
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-09-16 11:02:30 +01:00
Justin Cormack
1525dacf32 document the Docker Hub repos
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-09-12 20:35:04 +01:00
Justin Cormack
e6e974b379 Document that VMWare Fusion is working
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-07-22 13:54:42 +01:00
Justin Cormack
6820ae62a3 Expand platform docs with Xen PV example
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-07-22 11:19:02 +01:00
Justin Cormack
67b2a00853 Add conditional services based on mobyplatform
Replaces https://github.com/docker/moby/pull/282

Use mobyplatform=xxx to specify platform in boot command

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-07-18 12:39:14 +01:00
Justin Cormack
4cfb71eafc remove unnecessary capabilities from nginx example
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-07-15 15:25:40 +01:00
Justin Cormack
449e0c7d7e Add documentation for system containerd
Add an example script showing how you can run an nginx container.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-07-15 15:17:04 +01:00
Rolf Neugebauer
b037de72b1 win: remove PS script and documentation. They live elsewhere now
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-02-05 16:58:59 -08:00
Michel Courtine
4805f56846 added the -force switch to silence the powershell unrestricted access request 2016-02-05 14:33:06 -08:00
Rolf Neugebauer
cd61eff2f4 doc: Add notes on how to run docker against MobyLinux
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-01-28 15:09:48 -08:00
Michel Courtine
0c760aa3c7 doc: clarified the windows-notes 2016-01-28 14:51:24 -08:00
Rolf Neugebauer
b47f280302 Hyper-V: remove the force stop now that the Hyper-V deamons are running
Also, minor, unrelated tweak to the documentation

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-01-28 09:17:44 -08:00
Rolf Neugebauer
454b00dbd9 hyperv: Add script and notes on how to boot Moby on Hyper-V
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-01-25 17:46:45 +00:00