Commit Graph

5490 Commits

Author SHA1 Message Date
Avi Deitcher
0d4b2742e2 Add /run to binds and use newer yml label format
Signed-off-by: Avi Deitcher <avi@deitcher.net>
2018-01-15 19:51:35 +02:00
Avi Deitcher
190a87557f
Merge pull request #2860 from deitch/metadata-to-run
Move metadata to /run instead of /var
2018-01-15 18:11:45 +02:00
Avi Deitcher
34bd0689b6
Merge pull request #2861 from deitch/metadata-path
Split linuxkit run -data options into string and file
2018-01-15 18:10:02 +02:00
Avi Deitcher
6c015141f5 Split linuxkit run -data options into string and file
Signed-off-by: Avi Deitcher <avi@deitcher.net>
2018-01-15 16:57:03 +02:00
Avi Deitcher
2af908d1b7 Move metadata to /run instead of /var
Signed-off-by: Avi Deitcher <avi@deitcher.net>
2018-01-15 14:23:03 +02:00
Rolf Neugebauer
62d4858a3e
Merge pull request #2858 from rn/ucode
Add the intel ucode cpio archive to the kernel package
2018-01-14 15:42:47 +00:00
Rolf Neugebauer
2ed5334823 kernel: Fix up README.md
The content about debug was no longer valid.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-01-14 13:07:27 +00:00
Rolf Neugebauer
430bea64c3 kernel: Build the Intel ucode cpio archive and add to the kernel package
DOwnload and verify the Intel microcode package and convert it
to a cpio archive which can be prepended to the initrd.

It also adds the license file to the kernel package.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-01-14 13:07:27 +00:00
Rolf Neugebauer
e68cc70352 tools/alpine: Update alpine base
This also adds the iucode_tool utility for x86_64

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-01-14 13:04:57 +00:00
Rolf Neugebauer
31cb9539b8 tools/alpine: Add iucode_tool to base
The iucode_tool is used to convert the Intel CPU microcode
binaries into a cpio archive. There is no alpine package
for it, so compile it from source.

This is for x86_64 only and on other archs we create a empty
file.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-01-14 12:42:57 +00:00
Ian Campbell
96f6b3b077
Merge pull request #2857 from ijc/containerd-v1.0.1-rc.0
Bump to containerd v1.0.1-rc.0
2018-01-12 13:12:27 +00:00
Ian Campbell
db5c8a7da8 Bump yml to pickup containerd v1.0.1-rc.0
Signed-off-by: Ian Campbell <ijc@docker.com>
2018-01-12 10:58:07 +00:00
Ian Campbell
e0b871560a Bump to runc 7f24b40cc5423 as used by containerd v1.0.1-rc.0
Signed-off-by: Ian Campbell <ijc@docker.com>
2018-01-12 10:51:34 +00:00
Ian Campbell
913e6420ba Bump packages to new alpine w/ containerd v1.0.1-rc.0
Signed-off-by: Ian Campbell <ijc@docker.com>
2018-01-12 10:51:01 +00:00
Ian Campbell
e862410a07 alpine: Bump to containerd v1.0.1-rc.0
Signed-off-by: Ian Campbell <ijc@docker.com>
2018-01-12 10:50:17 +00:00
Ian Campbell
965c678f9c
Merge pull request #2845 from ijc/example-hostmount-writeable-overlay
Add an example of setting up a writeable overlay of a host path
2018-01-11 16:03:15 +00:00
Rolf Neugebauer
e3284d50e0
Merge pull request #2847 from w9n/nvme
format: fix for nvme
2018-01-11 14:21:03 +00:00
Ian Campbell
4476169fce Add an example of setting up a writeable overlay of a host path
Signed-off-by: Ian Campbell <ijc@docker.com>
2018-01-11 13:21:31 +00:00
Ian Campbell
4f79366526 Update yaml
Signed-off-by: Ian Campbell <ijc@docker.com>
2018-01-11 13:14:31 +00:00
Ian Campbell
794ea7ed72 Make runtime.mounts[].destination relative to container rootfs
This is similar to ae64ab6b82 from #2849 which
did the same for runtime.mkdir.

This makes it possible to specify both host (absolute) or container (relative)
paths.

Signed-off-by: Ian Campbell <ijc@docker.com>
2018-01-11 12:58:09 +00:00
Ian Campbell
57cf8df3b2 Revendor moby tool to f816553d2f
Pulls in:

f816553 Merge pull request #195 from ijc/prepend-rootfs-mounts
0a6d69d Prepend the rootfs mounts to the user specified runtime.mounts.

Signed-off-by: Ian Campbell <ijc@docker.com>
2018-01-11 12:22:34 +00:00
Robin Winkelewski
a7e61c4da7 bump yml format
Signed-off-by: Robin Winkelewski <w9ncontact@gmail.com>
2018-01-11 13:21:54 +01:00
Rolf Neugebauer
cd1a472678
Merge pull request #2852 from rn/pktpxe
Improve packet.net support
2018-01-11 12:12:47 +00:00
Rolf Neugebauer
293b2bb982 docs: Update packet.net documentation
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-01-11 10:49:48 +00:00
Robin Winkelewski
bd20f419bf format: fix for nvme
Signed-off-by: Robin Winkelewski <w9ncontact@gmail.com>
2018-01-11 11:43:53 +01:00
Justin Cormack
47bba67fe4
Merge pull request #2853 from thebsdbox/vmware_host_fix
Added capability to find a host if -hostname isn't specified
2018-01-11 10:38:17 +00:00
thebsdbox
8b9eddf6f6 Added capability to find a host if -hostname isn't specified
Will return the list of all hosts that are part of a vCenter DataCenter
and choose one at random to use.

Signed-off-by: Dan Finneran <daniel.finneran@gmail.com>
2018-01-10 19:44:18 +00:00
Rolf Neugebauer
1cef947ee1 cmd/serve: Add a new 'linuxkit serve' command
This simply starts a web server serving the specified directory.
It's useful for PXE booting.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-01-10 17:48:47 +00:00
Rolf Neugebauer
16ae50b593 cmd/packet: Add linuxkit push packet support
This currently just copies the kernel/initrd to a destination
and writes the iPXE script there as well. The scheme is flexible
enough to support scp or other means for pushing in the future.

The kernel/initrd are conditionally decompressed (default for arm64).

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-01-10 17:45:35 +00:00
Rolf Neugebauer
2431dd9950 cmd/packet: Use IPXEScriptURL instead of passing script via Userdata
Using the userdat to pass the iPXE script precludes us from passing
actual userdata to the instance. Instead pass a URL to the iPXE script.
The script is expected to be a <base-url>/<name>-packet.ipxe.

When starting a server also serve the iPXE script from memory (not
the file system). The http server needed extending to differentiate
between the serving files and the iPXE script and ServeMux is used
to differentiate based on path.

A subsequent commit will provide an option to write the iPXE script
to disk.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-01-10 17:45:34 +00:00
Rolf Neugebauer
8ae4f5bc86 cmd/packet: Factor out the iPXE script creation
Subsequent commits will use it in other places.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-01-10 17:45:24 +00:00
Rolf Neugebauer
90510777ad cmd/packet: Tidy up the code
prefix packet.net specific functions with 'packet' and make
non-packet specific functions, such as validateHTTPURL()
more generic so that they can easily be moved to 'utils.go'
should they be needed elsewhere.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-01-10 17:45:24 +00:00
Rolf Neugebauer
50c4eb5461 cmd/packet: Actually use the -serve argument
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-01-10 17:45:24 +00:00
Rolf Neugebauer
007854f85e cmd/packet: Fix API changes in the new version of the go bindings
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-01-10 17:45:23 +00:00
Rolf Neugebauer
b272819540 cmd/packet: Update the vendored packet.net go binding
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-01-10 17:45:23 +00:00
Justin Cormack
4c2a3f5c3d
Merge pull request #2849 from justincormack/fix-mkdir
Fix runtime mkdir
2018-01-10 17:06:19 +00:00
Justin Cormack
d6d376c631 update init hashes
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2018-01-10 15:03:03 +00:00
Justin Cormack
ae64ab6b82 Make relative paths in runtime mkdir be relative to container rootfs
Currently all paths were treated as absolute paths.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2018-01-10 14:58:49 +00:00
Justin Cormack
a4a332f39a Use logrus not log for logging consistently
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2018-01-10 14:28:50 +00:00
Rolf Neugebauer
c2b534245b
Merge pull request #2846 from rn/kup
Update kernels to 4.14.13/4.9.76/4.4.111
2018-01-10 13:26:12 +00:00
Rolf Neugebauer
aa59ffb82d Update YAML files to latest kernels
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-01-10 12:05:49 +00:00
Rolf Neugebauer
9a101d1136 kernel: Update to 4.14.13/4.9.76/4.4.111
This looks like there are a couple of minor fixes to the
recent KPTI changes but nothing major...

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-01-10 11:12:27 +00:00
Justin Cormack
b06e11c7d7
Merge pull request #2840 from justincormack/authorsup
Update AUTHORS
2018-01-08 15:19:23 +00:00
Justin Cormack
ac82664b76 Update AUTHORS
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2018-01-08 13:57:21 +00:00
Justin Cormack
421a4d3d7c
Merge pull request #2809 from stevvooe/plumb-namespace-context
pkg/init/cmd/service: plumb containerd namespace
2018-01-08 13:43:37 +00:00
Rolf Neugebauer
c603aa1811
Merge pull request #2839 from rn/kern-up
Kernel update to 4.14.12/4.9.75/4.4.110
2018-01-06 22:39:21 +00:00
Rolf Neugebauer
7f44ca5442 doc: Security update in top level readme.
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-01-06 21:22:16 +00:00
Rolf Neugebauer
23fd00471b Update YAML files to the latests kernels
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-01-06 19:53:57 +00:00
Rolf Neugebauer
682f6d8819 kernel: Enable KPTI on 4.9.x and 4.4.x kernels
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-01-06 11:24:43 +00:00
Rolf Neugebauer
d86d43fe40 kernel: Update to 4.14.12/4.9.75/4.4.110
4.9.75 and 4.4.10 now have KPTI backported as well

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2018-01-06 10:00:13 +00:00