Justin Cormack
47124e8282
do not remove build containers
...
Signed-off-by: Justin Cormack <justin.cormack@docker.com >
2016-10-11 16:12:40 +01:00
Justin Cormack
652d5eddf3
Use build container id rather than tagging builds
...
This means that multiple builds will not conflict, so we can
remove the lock from the CI. Also quieter when no errors.
Some still left to do, only done the ones used in build and CI
initially. Some of the others will be cleaned up anyway later.
Signed-off-by: Justin Cormack <justin.cormack@docker.com >
2016-09-29 20:21:17 +01:00
Justin Cormack
60d6147a0b
use tar for iptables
...
Signed-off-by: Justin Cormack <justin@specialbusservice.com >
2016-09-12 16:02:07 +01:00
Justin Cormack
b1597ff9a9
Move all output to the directories it will be in eventually
...
Signed-off-by: Justin Cormack <justin@specialbusservice.com >
2016-09-12 16:02:07 +01:00
David Scott
cd052f1fe0
iptables wrapper: write to syslog rather than /var/log/service-port-opener.log
...
This will enable proper log rotation and is simpler.
Signed-off-by: David Scott <dave.scott@docker.com >
2016-09-01 11:28:14 +01:00
David Scott
4f205ed9b2
iptables: log to /var/log/... rather than /var/run/log
...
Signed-off-by: David Scott <dave.scott@docker.com >
2016-07-12 10:26:42 +01:00
David Scott
f6a85c0592
iptables: only open host ports if native/port-forwarding=true in the db
...
Signed-off-by: David Scott <dave.scott@docker.com >
2016-07-12 10:26:42 +01:00
David Scott
9762094fbb
iptables: add a TODO
...
Signed-off-by: David Scott <dave.scott@docker.com >
2016-07-12 10:26:42 +01:00
David Scott
b6fb908ae5
iptables: remove the pid file after sending SIGTERM
...
Signed-off-by: David Scott <dave.scott@docker.com >
2016-07-12 10:26:42 +01:00
David Scott
5726f2b2c3
iptables: get the kill arguments the right way round
...
Signed-off-by: David Scott <dave.scott@docker.com >
2016-07-12 10:26:42 +01:00
David Scott
a97d9b92bc
iptables: close all the fds we inherit from docker
...
Signed-off-by: David Scott <dave.scott@docker.com >
2016-07-12 10:26:42 +01:00
David Scott
b672ec9bdd
Add primitive iptables wrapper which can set up port forwards
...
Signed-off-by: David Scott <dave.scott@docker.com >
2016-07-12 10:26:42 +01:00
Ian Campbell
70514d09b3
Simple build system for ocaml-based iptables
...
Signed-off-by: Ian Campbell <ian.campbell@docker.com >
2016-07-12 10:26:39 +01:00