Commit Graph

392 Commits

Author SHA1 Message Date
Justin Cormack
4220a65128 Merge pull request #1440 from riyazdf/security-arch
Security docs
2017-04-03 10:37:54 +01:00
Riyaz Faizullabhoy
c1f84921fe Address review comments
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-04-02 21:21:18 -07:00
Justin Cormack
e2ec6c2a93 Merge pull request #1459 from rneugeba/ebpf-fix
docs: Move ebpf.md to projects
2017-04-02 14:04:09 +01:00
Rolf Neugebauer
63c89507e7 docs: Move ebpf.md to projects
This was missed when moving the ebpf stuff into a project.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-04-02 13:09:29 +01:00
Justin Cormack
faad84431e Add a doc for topics to discuss at the Summit at Dockercon
(as per containerd)

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-04-02 12:43:52 +01:00
Tycho Andersen
12624b60bf add some headings, fix some spelling mistakes
Signed-off-by: Tycho Andersen <tycho@docker.com>
2017-04-01 11:32:41 -06:00
Tycho Andersen
ad7ddba0dc docs: add a security-events.md
In the same vein as [1], let's start talking about security events. I
suppose we want to talk about security events as well as non-events,
though, to give a little discussion about post moretem. But we can rename
this to security-non-events if we want.

[1]: https://github.com/docker/docker.github.io/blob/master/engine/security/non-events.md

Signed-off-by: Tycho Andersen <tycho@docker.com>
2017-03-31 09:40:38 -06:00
Riyaz Faizullabhoy
52fa33d6d1 first pass at security docs
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-03-30 17:22:58 -07:00
Rolf Neugebauer
eaef1ca8fb docs: Update kernel patches doc
It's useful for cherry-picked patches to know which tree
they got patched from. Include a "Origin:" line.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-03-30 10:46:49 +01:00
Justin Cormack
f27c450268 Architecture overview
- also some tweaks in README.

fix #1394

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-03-28 15:29:34 +02:00
Rolf Neugebauer
e9fbe43b34 Rename .yaml to .yml
docker-compose and other utilities use the .yml extension.
For consistency rename all .yaml to .yml

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-03-27 09:53:26 +02:00
Rolf Neugebauer
6a29d153f5 infrakit: Move the hyperkit instance plugin into the source directory
- The tools directory ideally should not contain source code
- Removes double vendoring of packagages
- Makes it easer to hook the build into the top-level Makefile

Eventually, the plugin should be moved to the infrakit repo.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-03-25 13:02:45 +01:00
Justin Cormack
1f14c347f6 Add the beginings of a roadmap and faq
Needs expansion, but got to start somewhere...

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-03-22 14:48:50 +00:00
Anil Madhavapeddy
1a5fa6a305 docs: moby/alpine/kernel/ is now just moby/kernel/
Signed-off-by: Anil Madhavapeddy <anil@docker.com>
2017-03-15 15:14:56 +00:00
Rolf Neugebauer
13d3a93a08 docs: fix a few snags in the kernel patch documentation
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-03-15 10:46:22 +00:00
Justin Cormack
37c6169ab7 Add upload to Google Cloud Storage and Google Compute Image creation
- the image upload uses the cloud API
- currently auth and image creation need the `gcloud` CLI tool.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-03-14 14:45:05 +00:00
Rolf Neugebauer
e1b03b07ec docs: Update kernel patches documentation
Make the process and the requirements for patches clearer.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-03-07 19:42:23 +00:00
Rolf Neugebauer
c1c30b62ff docs: add short how-to for running Moby on GCP
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-02-08 17:35:05 +00:00
Riyaz Faizullabhoy
a29b6c1391 Revert to non-development containerd and runc until nats port is sorted out
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-02-02 11:57:28 -08:00
Riyaz Faizullabhoy
d66bc2d501 Split base/ into base/ and tools/
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-01-31 09:52:30 -08:00
Justin Cormack
89e98eefa0 Shift to development track containerd
Move to the development track of `containerd` not the legacy 0.2
branch. The commands have changed a bit.

This does increase the image size as we are bundling the Docker
copy and our copy, and the new one is larger as it is growing features.
Hopefully Docker will shrink eventually. Also we may replace `ctr`
with a library.

Fix #1029

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-01-24 15:39:44 +00:00
Riyaz Faizullabhoy
4c810a27f9 Merge lint.sh into compile.sh, remove unused alpine-build-go
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-01-23 13:25:44 -08:00
Rolf Neugebauer
fe533386f0 docs: add a note about kernel symbols to the ebpf documentation
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-01-06 16:52:16 +00:00
Rolf Neugebauer
b56da24f6a docs: add --pid=host to ebpf command line.
A lot of the `iovisor/bcc` tools take a pid as a command line option and using
`--pid=host` allows you to use `$(pgrep foo)`

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-01-06 16:43:43 +00:00
Justin Cormack
f6c2143197 Add a development eBPF container build
See `docs/ebpf.md` for how to use. This is built by CI or you can build
manually if you customise the kernel.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-01-05 11:59:28 +00:00
Rolf Neugebauer
2cb9fc5223 docs: update hub docs to include the TAG comment
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-12-16 16:21:39 +00:00
Rolf Neugebauer
2b134e8677 doc: update document about kernel patches
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-10-21 15:00:50 +01:00
Rolf Neugebauer
d32adafe4b docs: document how to work with Linux kernel patches
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-10-11 20:13:03 +01:00
Justin Cormack
68a8698003 More docs on Hub images
See #529

Could be expanded further.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-09-20 18:10:21 +01:00
Rolf Neugebauer
deffc1f143 docs: add a short document about coding style recommendation
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-09-16 11:02:30 +01:00
Justin Cormack
1525dacf32 document the Docker Hub repos
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-09-12 20:35:04 +01:00
Justin Cormack
e6e974b379 Document that VMWare Fusion is working
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-07-22 13:54:42 +01:00
Justin Cormack
6820ae62a3 Expand platform docs with Xen PV example
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-07-22 11:19:02 +01:00
Justin Cormack
67b2a00853 Add conditional services based on mobyplatform
Replaces https://github.com/docker/moby/pull/282

Use mobyplatform=xxx to specify platform in boot command

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-07-18 12:39:14 +01:00
Justin Cormack
4cfb71eafc remove unnecessary capabilities from nginx example
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-07-15 15:25:40 +01:00
Justin Cormack
449e0c7d7e Add documentation for system containerd
Add an example script showing how you can run an nginx container.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-07-15 15:17:04 +01:00
Rolf Neugebauer
b037de72b1 win: remove PS script and documentation. They live elsewhere now
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-02-05 16:58:59 -08:00
Michel Courtine
4805f56846 added the -force switch to silence the powershell unrestricted access request 2016-02-05 14:33:06 -08:00
Rolf Neugebauer
cd61eff2f4 doc: Add notes on how to run docker against MobyLinux
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-01-28 15:09:48 -08:00
Michel Courtine
0c760aa3c7 doc: clarified the windows-notes 2016-01-28 14:51:24 -08:00
Rolf Neugebauer
b47f280302 Hyper-V: remove the force stop now that the Hyper-V deamons are running
Also, minor, unrelated tweak to the documentation

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-01-28 09:17:44 -08:00
Rolf Neugebauer
454b00dbd9 hyperv: Add script and notes on how to boot Moby on Hyper-V
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-01-25 17:46:45 +00:00