github/linuxkit
1
0
Fork 0
mirror of https://github.com/linuxkit/linuxkit.git synced 2025-08-31 14:39:03 +00:00
Code Issues Projects Releases Wiki Activity
4,029 Commits 1 Branch 29 Tags
425f37890d491a97ac35bd67f1eda26a6d992af9
Commit Graph

4029 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Rolf Neugebauer
561c204de6 Merge pull request #2167 from rn/kern-up 
Update kernel to 4.11.9/4.9.36/4.4.76
 2017-07-07 19:48:24 +01:00
Rolf Neugebauer
c3bc803445 Merge pull request #2164 from rn/meta 
Allow metadata package to over write existing config files
 2017-07-07 19:48:09 +01:00
Rolf Neugebauer
4e19cf363a Merge pull request #2119 from djs55/host-timesync-daemon 
Add Docker for Mac host time sync daemon
 2017-07-07 19:17:20 +01:00
Riyaz Faizullabhoy
1efc329ec4 Merge pull request #2165 from tych0/more-cve-writeups 
docs: add some more CVE writeups
 2017-07-07 11:06:10 -07:00
Rolf Neugebauer
dca5671fc1 Update kernel version in all YAML files 
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
 2017-07-07 18:41:33 +01:00
Rolf Neugebauer
aa9b718d8a kernel: Update to 4.11.9/4.9.36/4.4.76 
Added a new patch to the 4.11 and 4.9 kernels based on a patch
submitted to stable: https://patchwork.kernel.org/patch/9829039/

This patch fixes a off-by-one error in the VMBus code.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
 2017-07-07 18:41:33 +01:00
Rolf Neugebauer
6147b0a592 Update all YAML files to latest metadata package. 
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
 2017-07-07 18:30:10 +01:00
Rolf Neugebauer
f021bb8aaa pkg: In the metadata package, don't error if a dir exists 
Use os.Mkdirall() instead of os.Mkdir() as it does not
error if the path already exists.

This enables specifying a default config file with the image
and then over writing it with metadata.

While at it, also update to the latest alpine base image.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
 2017-07-07 18:29:02 +01:00
David Scott
c9de2fb2a5 blueprints/docker-for-mac.yml: add host-timesync-daemon 
This adds the helper program which resynchronises the VM's clock after
a host resume.

Signed-off-by: David Scott <dave.scott@docker.com>
 2017-07-07 17:12:12 +01:00
Tycho Andersen
4bf7bfff2d docs: add some more CVE writeups 
Signed-off-by: Tycho Andersen <tycho@docker.com>
 2017-07-07 09:52:26 -06:00
Riyaz Faizullabhoy
aef63caa36 Merge pull request #2162 from arm64b/qemu-for-aarch64 
ARM64: Remove the hardcode of virtual machine type
 2017-07-07 08:40:53 -07:00
Riyaz Faizullabhoy
74851d86a5 Merge pull request #2163 from talex5/https-unikernel 
Update https-unikernel example to latest API
 2017-07-07 08:13:47 -07:00
Thomas Leonard
815f5599fc Update https-unikernel example to latest API 
Also, stop static linking for now, as it generates a lot of warnings
with glibc.

Signed-off-by: Thomas Leonard <thomas.leonard@docker.com>
 2017-07-07 15:09:54 +01:00
Dennis Chen
3a9c88c0c5 ARM64: Remove the hardcode of virtual machine type 
Current implementation hardcodes the virtual machine as
"q35" for x86, this patch remove this hardcode and config
the machine type according to the arch the VM is running.
Also, in order to make sure the qemu can run on arm64 platform,
we need to specify the vcpu type in the command line.

Signed-off-by: Dennis Chen <dennis.chen@arm.com>
 2017-07-07 21:54:15 +08:00
David Scott
d24d0bd559 Add pkg/host-timesync-daemon 
Some hypervisors (e.g. hyperkit / xhyve) don't provide a good way to keep
the VM's clock in sync with the Host's clock. NTP will usually keep the
clocks together, but after a the host or VM is suspended and resumed the
clocks can be suddenly too far apart for NTP to work properly.

This simple daemon listens on an AF_VSOCK port and resynchronises the VM
clock from the virtualised hardware clock.

This is a Go conversion of original C code written by
Magnus Skjegstad <magnus@skjegstad.com>

Signed-off-by: David Scott <dave.scott@docker.com>
 2017-07-07 11:35:36 +01:00
Rolf Neugebauer
76509e34a2 Merge pull request #2157 from MagnusS/update-dfm-blueprint 
Update Docker for Mac with ACPI and metadata support
 2017-07-06 18:13:13 +01:00
Riyaz Faizullabhoy
286d6ef9c0 Merge pull request #2161 from ijc/trust-issues 
pkg: Update content trust handling.
 2017-07-06 09:50:55 -07:00
Rolf Neugebauer
4c7ba08d67 Merge pull request #2160 from ndauten/ndd-sig-presentation 
SIG: add slides link for ops+memorizer
 2017-07-06 17:04:17 +01:00
Ian Campbell
aee080f621 pkg: Reduce the number of times variables containing $(shell...) are invoked. 
For DIRTY and RELEASED this means simply performing a static assignment with
`:=`. For HASH it is a little more complex since it is (and we want/need it to
be) a conditional assigment. However it is only used for defining TAG, so make
that a static assignment.

This reduces the number of times the complex DIRTY shell command in particular
is evaluated.

Signed-off-by: Ian Campbell <ian.campbell@docker.com>
 2017-07-06 16:33:08 +01:00
Ian Campbell
4fba9d8545 pkg: Update content trust handling. 
Firstly add option to disable content trust, for the use of e.g. projects which
are pushing to the linuxkitprojects org (which has no trust setup) rather than
the main linuxkit org.

Secondly, when trust _is_ enabled then enable it globally, in particular it is
now active for the `docker build` and hence containers referenced in
Dockerfiles via "FROM" will be checked.

Signed-off-by: Ian Campbell <ian.campbell@docker.com>
 2017-07-06 16:20:34 +01:00
Nathan Dautenhahn
79eab066fd SIG: add slides link for ops+memorizer 
Signed-off-by: Nathan Dautenhahn <ndd@cis.upenn.edu>
 2017-07-06 10:52:19 -04:00
Rolf Neugebauer
5d0a8fd4a8 Merge pull request #2158 from MagnusS/acpi-ex 
Add ACPI hyperkit test and update platform docs
 2017-07-06 14:00:09 +01:00
Magnus Skjegstad
184f643f47 tests: add hyperkit test for acpi shutdown on SIGTERM 
Signed-off-by: Magnus Skjegstad <magnus@skjegstad.com>
 2017-07-06 14:07:00 +02:00
Magnus Skjegstad
037c222a70 docs: add acpi section to hyperkit docs 
Signed-off-by: Magnus Skjegstad <magnus@skjegstad.com>
 2017-07-06 12:55:36 +02:00
Rolf Neugebauer
14db99c916 Merge pull request #2154 from MagnusS/add-acpi 
Add pkg/acpid
 2017-07-06 11:19:35 +01:00
Magnus Skjegstad
1d9f582a48 blueprints: add acpi support to dfm blueprint 
Signed-off-by: Magnus Skjegstad <magnus@skjegstad.com>
 2017-07-06 12:02:08 +02:00
Magnus Skjegstad
c28704e79d blueprints: add metadata to dfm blueprint 
Signed-off-by: Magnus Skjegstad <magnus@skjegstad.com>
 2017-07-06 12:01:06 +02:00
Riyaz Faizullabhoy
3f89a60736 Merge pull request #2153 from riyazdf/sig-memorizer-notes 
sig-security: add meeting notes from 2017-07-05
 2017-07-05 13:58:42 -07:00
Magnus Skjegstad
1e3c430a33 alpine: update versions 
Signed-off-by: Magnus Skjegstad <magnus@skjegstad.com>
 2017-07-05 22:38:24 +02:00
Magnus Skjegstad
ba8be57eef pkg: add acpid 
Adds a new service for running `/sbin/acpid` that comes with busybox.
The VM will shut down if the power button is pressed.

Signed-off-by: Magnus Skjegstad <magnus@skjegstad.com>
 2017-07-05 22:37:46 +02:00
Magnus Skjegstad
7c063429f1 alpine: add busybox-initscripts 
Add busybox-initscripts as it contains /etc/acpi needed to run
/sbin/acpid.

Signed-off-by: Magnus Skjegstad <magnus@skjegstad.com>
 2017-07-05 20:48:41 +02:00
Riyaz Faizullabhoy
aaa39763b4 sig-security: add meeting notes from 2017-07-05 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2017-07-05 11:44:22 -07:00
Rolf Neugebauer
bfb82fb8aa Merge pull request #2144 from kunalkushwaha/make-proxy-setting 
docker run works behind proxy too.
 2017-07-04 13:46:20 +01:00
Kunal Kushwaha
d9b5c5a116 docker run works behind proxy too. 
Signed-off-by: Kunal Kushwaha <kushwaha_kunal_v7@lab.ntt.co.jp>
 2017-07-04 09:25:14 +09:00
Rolf Neugebauer
36b5b6b556 Merge pull request #2150 from dave-tucker/mkimage-gcp 
tools: Bring back mkimage-gcp
 2017-07-03 22:49:48 +01:00
Dave Tucker
5bf63f4cc5 tools: Bring back mkimage-gcp 
This was incorrectly removed in e782a469d5

Signed-off-by: Dave Tucker <dt@docker.com>
 2017-07-03 17:09:55 +01:00
Justin Cormack
de702e2fa6 Merge pull request #2149 from avsm/week-26-dev-report 
reports: week 26 development report
 2017-07-03 16:23:17 +01:00
Rolf Neugebauer
27d90ea2db Merge pull request #2148 from justincormack/q3 
Update timetable
 2017-07-03 16:05:28 +01:00
Justin Cormack
40a9e5f452 Merge pull request #2147 from justincormack/init-to-containerd 
move the containerd init script to containerd package
 2017-07-03 15:50:45 +01:00
Anil Madhavapeddy
c11b0206c6 reports: week 26 development report 
Signed-off-by: Anil Madhavapeddy <anil@docker.com>
 2017-07-03 15:23:15 +01:00
Justin Cormack
6b9a16b2e9 Update timetable 
We did not ship stable releases in Q2, and will not until `containerd` is stable and
editions are switched over which is being worked on now.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-07-03 15:09:18 +01:00
Justin Cormack
779fdc9499 Update init and containerd hashes 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-07-03 14:51:23 +01:00
Justin Cormack
f43e1cbf27 Move containerd init file from init package to containerd package 
Otherwise it gets out of sync, and it makes little sense it being in
`init` now anyway.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-07-03 13:42:00 +01:00
Justin Cormack
1f9fa36869 Merge pull request #2126 from ijc/swarmd 
Refresh projects/swarmd and add networking support
 2017-07-03 13:38:19 +01:00
Justin Cormack
b991035758 Merge pull request #2117 from ijc/pkg-improvements 
Fixes/improvements to `pkg/package.mk`
 2017-07-03 11:46:41 +01:00
Ian Campbell
f0ca8cdabd swarmd: Update README.md 
Signed-off-by: Ian Campbell <ian.campbell@docker.com>
 2017-07-03 10:35:04 +01:00
Ian Campbell
4437fe84e2 swarmd: Update tag after recent updates. 
Signed-off-by: Ian Campbell <ian.campbell@docker.com>
 2017-07-03 10:35:01 +01:00
Ian Campbell
ee61fa03df swarmd: Move to linuxkitprojects hub org 
Signed-off-by: Ian Campbell <ian.campbell@docker.com>
 2017-07-03 10:31:17 +01:00
Ian Campbell
0277df421d swarmd: support networking via Weave and the CNI reference plugins 
Signed-off-by: Ian Campbell <ian.campbell@docker.com>
 2017-07-03 10:31:17 +01:00
Ian Campbell
dcb40158c6 swarmd: Remove APK residuals from output image 
Signed-off-by: Ian Campbell <ian.campbell@docker.com>
 2017-07-03 10:30:20 +01:00