Commit Graph

1273 Commits

Author SHA1 Message Date
David Gageot
1bf637ca5d Set hostname on GCP
Split GCP startup script in two:

 + One started before Docker, to set the hostname
 + Another to run the startup script

Signed-off-by: David Gageot <david@gageot.net>
2016-12-28 17:51:33 +01:00
David Gageot
614a363ab9 Specific init.d script for GCP
Signed-off-by: David Gageot <david@gageot.net>
2016-12-23 12:03:20 +01:00
David Gageot
d9692db9e9 Change the bucket where Moby is pushed for GCE
And make the image public

Signed-off-by: David Gageot <david@gageot.net>
2016-12-22 19:03:55 +01:00
David Gageot
6f3483c421 Update mobylinux/mkimage-gce image
Signed-off-by: David Gageot <david@gageot.net>
2016-12-22 18:44:33 +01:00
David Gageot
77bc577875 Flag GCP platform
Signed-off-by: David Gageot <david@gageot.net>
2016-12-22 18:42:15 +01:00
Justin Cormack
1991c29ab7 Fix the cgroup memory hierarchy warning
Needed to make the memory cgroup work properly

fix #373

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-12-22 00:21:47 +00:00
Justin Cormack
90c375a044 Update AUFS kernel to 4.9
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-12-21 21:59:07 +00:00
Justin Cormack
cab1767a27 Merge pull request #915 from riyazdf/golinting
Add golint, gofmt, govet
2016-12-21 19:35:31 +00:00
Riyaz Faizullabhoy
6245780591 Move linting to Go build
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-12-21 11:26:33 -08:00
Riyaz Faizullabhoy
0736e139d2 Add lint docker image for golang linting and testing to individual package subdirs
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-12-20 15:00:08 -08:00
Riyaz Faizullabhoy
3245eaca67 Revert "Bumps for azure 1.13.0-rc4-beta14"
This reverts commit 2197b7b7c6.

Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-12-19 17:42:32 -08:00
Nathan LeClaire
2197b7b7c6 Bumps for azure 1.13.0-rc4-beta14
Signed-off-by: Nathan LeClaire <nathan.leclaire@gmail.com>
2016-12-19 17:19:32 -08:00
Riyaz Faizullabhoy
f2a1c0dd24 Add golint, make linting top-level
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-12-19 16:13:02 -08:00
Riyaz Faizullabhoy
9eadb18715 Add gofmt, govet
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-12-19 15:17:37 -08:00
Justin Cormack
8c2c594794 Merge pull request #913 from justincormack/baseup
Update Alpine base image
2016-12-19 18:46:51 +00:00
Justin Cormack
38b5dd7902 Merge pull request #912 from justincormack/exclude-cleanup
Set an exclude pattern when untarring images
2016-12-19 18:46:05 +00:00
Justin Cormack
9d1c84fd9d Update Alpine base image
Security update

- openssh 7.4

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-12-19 18:04:42 +00:00
Justin Cormack
cade1b1d12 Set an exclude pattern when untarring images
This is a bit cleaner than deleting files after.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-12-19 17:54:01 +00:00
Justin Cormack
140913cd93 Remove extraneous docker rm
fix #879

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-12-19 17:08:33 +00:00
Justin Cormack
a345f6e23e Support Docker 1.12 on OSX
I had occasion to use a Moby build of 1.12 on Docker for Mac today
and I had to patch this in. Given that we re-added support for 1.12
for cloud, for CS, may as well support on OSX too as we are still
doing releases.

The fix is a bit messy (hence the flag), as it writes to the file
system but we will remove it later, or work around the write if
we need to continue to support 1.12 outside the 1.12.x branch.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-12-17 00:02:45 -08:00
Justin Cormack
7471ecc9ec Update Docker to 1.13.0-rc4
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-12-16 21:40:38 -08:00
Justin Cormack
ce4e2cdf61 Merge pull request #901 from rneugeba/perf
Add Linux perf utility
2016-12-16 13:31:47 -08:00
Riyaz Faizullabhoy
1b98dbb6e2 Only disable sysrq for cloud editions
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-12-16 09:24:34 -08:00
Rolf Neugebauer
67e0a98cc2 alpine: add Makefile/Dockerfile to build the Linux perf utility
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-12-16 17:04:43 +00:00
Rolf Neugebauer
0c38fd266e build: update packages to new alpine-build-c base
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-12-16 16:21:39 +00:00
Rolf Neugebauer
a8aa81a228 base: add dependencies to build the Linux perf utility
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-12-16 15:10:52 +00:00
Simon Ferquel
6ed33ba4ba Remove vsudd output from the console.
vsudd is quite verbose, and we are confident enough about its stability.
This will clean Pinata logs as well indirectly

Signed-off-by: Simon Ferquel <simon.ferquel@docker.com>
2016-12-16 15:53:20 +01:00
Justin Cormack
9edf3a2d8c Update base image
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-12-15 13:22:11 -08:00
Justin Cormack
a7f6bba295 Use exact build context for kernel build
Saves passing too much context, less error prone and should
mean builds are faster if not clean, consistent with elsewhere.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-12-15 11:27:41 -08:00
Justin Cormack
136b7e38d6 Merge pull request #892 from justincormack/kernelup
Update AUFS kernel to 4.8.15
2016-12-15 10:54:12 -08:00
Justin Cormack
64ae794897 Create all directories for kernel
Non AUFS kernels do not create `sbin/` and `/usr` directories as they
do not provide the AUFS directories. Just create empty directories to
avoid a warning.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-12-15 10:26:00 -08:00
Justin Cormack
3cb41448c7 Update AUFS kernel to 4.8.15
- minor update

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-12-15 10:13:01 -08:00
David Sheets
212c58cf13 transfused: use memcmp instead of a loop for checking init message
Signed-off-by: David Sheets <dsheets@docker.com>
2016-12-15 11:03:29 +00:00
David Sheets
e6a66eaef8 transfused: use read_exactly in subproto reading
Signed-off-by: David Sheets <dsheets@docker.com>
2016-12-15 11:03:29 +00:00
David Sheets
274e119da8 transfused: use read_exactly in init thread message reading
Signed-off-by: David Sheets <dsheets@docker.com>
2016-12-15 11:03:29 +00:00
David Sheets
f071e2bfde transfused: factor read_exactly out of read_message
Signed-off-by: David Sheets <dsheets@docker.com>
2016-12-15 11:03:29 +00:00
David Sheets
3474639a4f transfused: minor formatting fixup
Signed-off-by: David Sheets <dsheets@docker.com>
2016-12-15 11:03:29 +00:00
David Sheets
78544eb1ae transfused: replace brittle init control message writing with write_exactly
Signed-off-by: David Sheets <dsheets@docker.com>
2016-12-15 11:03:29 +00:00
David Sheets
125c3941eb transfused: replace brittle event pid writing with write_exactly
Signed-off-by: David Sheets <dsheets@docker.com>
2016-12-15 11:03:29 +00:00
David Sheets
1b6ee65a02 transfused: improve write_exactly error handling
Signed-off-by: David Sheets <dsheets@docker.com>
2016-12-15 11:03:29 +00:00
David Sheets
2414966689 transfused: improve read_message robustness
Signed-off-by: David Sheets <dsheets@docker.com>
2016-12-15 11:03:29 +00:00
Justin Cormack
dae717dcac Merge pull request #888 from justincormack/cpio-container
Run cpio in a container
2016-12-14 19:15:01 -08:00
Justin Cormack
f339c70f1a Run cpio in a container
This way it runs as root so files always owned by root.

Fix #887

This is the simplest fix for 1.13, we can also use this for
creating the main system initrd, but that needs more changes
so leaving for 1.14.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-12-14 17:56:57 -08:00
Justin Cormack
ac15af0396 Merge pull request #836 from justincormack/yama
Add Yama LSM
2016-12-14 17:49:27 -08:00
Justin Cormack
2b92b100ea Add Yama LSM
Default config is restricted ptrace, processes can only ptrace
related processes, such as child processes, rather than any process
with the same uid.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-12-14 17:04:36 -08:00
Justin Cormack
42e45bd3b2 Tweak kernel networking options
In 4.9 IPVLAN support needs NET_L3_MASTER_DEV to work.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-12-14 16:41:12 -08:00
Justin Cormack
be8a1aaeb5 Merge pull request #880 from justincormack/kernel-4.8-4.9
Make AUFS optional and ship choice of kernels
2016-12-14 15:33:39 -08:00
French Ben
5845d8539c Added simple upload of the image to bucket
Signed-off-by: French Ben <frenchben@docker.com>
2016-12-14 10:18:54 -08:00
Justin Cormack
5567606fd0 Make AUFS optional and ship choice of kernels
This seems the best option, although none are great

- build with `make AUFS=1` to build with AUFS support, currently with 4.8 kernel
- default is to build without AUFS support, with 4.9 kernel

This recognises that AUFS supprot is temporary #620 and only there until
we can phase it out on desktop editions, and allow the other editions that
never shipped with AUFS to ship something very close to mainline.

However we do still apply the patches so that the non AUFS branch runs fine on
all platforms, so it can be tested elsewhere.

We may be able to move the kernel versions back in line when 4.9 aufs support is out.

Plan is to shift CI to build both sets of images, and get the Desktop editions to
pick up the aufs set automatically, once this is merged.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-12-13 18:23:45 -08:00
Justin Cormack
56df696142 Merge pull request #874 from justincormack/gce-image
Build a GCE image
2016-12-13 16:57:48 -08:00