github/linuxkit
1
0
Fork 0
mirror of https://github.com/linuxkit/linuxkit.git synced 2026-01-19 10:43:30 +00:00
Code Issues Projects Releases Wiki Activity
1,611 Commits 1 Branch 31 Tags
44832cec1b5f7e3ff37be77ed54292e78f77d898
Commit Graph

184 Commits

Author SHA1 Message Date
Justin Cormack
44832cec1b Use the procfs script to mount binfmt 
This means our script does not need to do mount.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-28 12:17:23 +00:00
Justin Cormack
c860e6e961 Re-add strace 
Trying to debug apk issues.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-25 17:26:34 +00:00
Justin Cormack
8f375ddd48 Make sure we do apk upgrade -a 
Also base off 3.4 for consistency.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-24 21:07:00 +00:00
Justin Cormack
c2ea4a2381 Update Alpine 3.5 base image 
- openrc updates
- SSL certs package no longer depends on openssl tool in libressl package.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-24 12:08:13 +00:00
Justin Cormack
30f14dd622 Remove ssh server packages 
These will be containerised, and were disabled anyway.

Need client, as git needs it, and docker needs git.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-21 21:47:10 +00:00
Justin Cormack
35fdd3268a Update base image to Alpine 3.5-rc2 
- switch to libressl
- hvtools in main

Note the build images are not switched over yet

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-21 20:30:33 +00:00
Justin Cormack
36c25e442d Remove Alpine packages just used for debugging and build 
- make, GNU tar only used for self hosting
- strace, ipvsadmin, openssl just for debug

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-21 20:15:37 +00:00
Justin Cormack
db3cbe2eb2 Simplify file system format code 
- use our own code rather than Alpine setup-disk
- remove alpine setup code as not needed
- do not create swap partitions
- create swap file on desktop editions for now (may remove)

Fix #619

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-21 18:35:13 +00:00
Justin Cormack
a3cb39e21a Rework moving automount earlier in boot sequence 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-15 09:54:07 +00:00
Justin Cormack
8dbaef8b9c Revert "Format filesystems earlier, before syslog" 
This reverts commit 4dd5dca106.

Fix #710 where system hangs after klogd startup on AWS. Possibly
also affects Windows too. Still unclear why but lets revert and
continue investif=gating.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-12 15:29:27 +00:00
Justin Cormack
8a2ddac685 Update base image 
- tar update

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-08 21:06:45 +00:00
Justin Cormack
6b973af222 Merge pull request #703 from justincormack/move-disk-format 
Format filesystems earlier, before syslog
 2016-11-08 15:30:53 +00:00
Justin Cormack
4dd5dca106 Format filesystems earlier, before syslog 
So that we can write to /var early, move filesystem formatting as early as possible.

Adds a dummy fsck service, as we already do fsck in format script.

Replaces #535

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-08 15:20:46 +00:00
Justin Cormack
73d2d0f1b9 Remove lvm2 package 
We have no lvm support, so not needed.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-08 10:48:44 +00:00
Justin Cormack
86d27d1155 Remove bind tools 
We are not using these anywhere, busybox provides some of them.

Avoids security warnings.

Rework of #684

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-08 10:14:07 +00:00
Justin Cormack
1636eab508 Update base image 
- bind update
- edge packages moved to 3.5

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-08 10:09:10 +00:00
Justin Cormack
b08fc08db6 Curl security update 
Upgrade to 7.51, fix the following CVEs

  CVE-2016-7141, CVE-2016-7167, CVE-2016-8615, CVE-2016-8616,
  CVE-2016-8617, CVE-2016-8618, CVE-2016-8619, CVE-2016-8620,
  CVE-2016-8621, CVE-2016-8622, CVE-2016-8623, CVE-2016-8624

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-06 19:32:19 +00:00
Justin Cormack
e09867cd57 Merge pull request #670 from justincormack/ipvsadm 
Add ipvsadm for debugging
 2016-11-02 20:09:07 +00:00
Justin Cormack
90d2d1ef45 Split out Windows network config from hostsettings 
On cloud editions eg AWS settings may come from the network, so
we need to move this to after network setup, while the Windows
network config changes need to happen before, so split the init script.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-02 14:49:24 +00:00
Justin Cormack
edde24b319 Add ipvsadm for debugging 
Fix #437

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-02 00:10:16 +00:00
Justin Cormack
23ba083b79 Update base image with Musl bugfix 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-10-20 13:20:00 +01:00
Justin Cormack
588798404f Do not create latest tags for base images 
As we never use these, do not create them.

Also update images where applicable.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-10-10 14:55:48 +01:00
Justin Cormack
f3a74d4ab9 Remove syslinux from base image 
Only needed for build, so save space and avoid security scan errors.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-09-27 11:23:54 +01:00
Justin Cormack
180f6bb9ec openssl security update 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-09-27 10:15:50 +01:00
Justin Cormack
22d4e40ad8 Update alpine-base 
Seems insignificant, should probably improve hash function, as
ordering only visibly changed.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-09-26 00:27:24 +01:00
Justin Cormack
7ec4d05b1e Merge pull request #531 from rneugeba/hvtools-out 
remove special hack hvtools
 2016-09-24 14:29:55 +01:00
Justin Cormack
a2c3991580 Switch to dhcpcd 
Should fix issue with not sending hostname which Azure needs.

This should be requesting all the dhcp features we currently use.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-09-23 15:52:30 +01:00
Justin Cormack
04f58497a8 remove dhcpcd as was running anyway 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-09-23 13:34:17 +01:00
Rolf Neugebauer
dbe3d0d16c base: update manifest 
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
 2016-09-23 11:11:07 +01:00
Justin Cormack
9c5381e5a8 Merge pull request #546 from rneugeba/if-clean 
Clean up network interface
 2016-09-23 10:41:15 +01:00
Rolf Neugebauer
aceebda3db net: consolidate DHCP onto eth0 only 
- rename DfW main interface eth0
- remove eth1 DHCP config
- create tap device in init script not interfaces file

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
 2016-09-22 18:12:45 +01:00
Justin Cormack
ca6a7211b0 Update base image 
- fix `df` failing with overlay
- four more openssl CVEs
- add dhcpcd (unused)
- add openssh server (unused)

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-09-22 16:42:06 +01:00
Justin Cormack
c2d027d12a Enable local service 
Files in `/etc/local.d/` will be executed:

If a file in this directory is executable and it has a .start extension,
it will be run when the local service is started. If a file is
executable and it has a .stop extension, it will be run when the local
service is stopped.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-09-22 13:39:10 +01:00
Justin Cormack
fd5ff07515 update base image 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-09-20 09:49:43 +01:00
Justin Cormack
1aef768a33 Add rngd 
Tweak the config to use RDSEED or (fallback) RDRAND. Makes sure
we have initial random seed in cases where there is no other
random source if these are supported.

The default config in Alpine currently disables these, which makes
it pretty useless, as there is no motherboard rng support any more.

Replaces #517
Fix #514
Fix #183

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-09-16 15:32:56 +01:00
Justin Cormack
519921279c Add curl to base 
We need this to self host if you specify a custom version of Docker.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-09-16 12:54:03 +01:00
Justin Cormack
7100477e54 Explicitly set the apk repositories we use 
Previously we used the defaults (main and community) but we
currently only need main, but are likely to need some packages
from edge soon.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-09-16 10:58:54 +01:00
Justin Cormack
e0395e9839 Make self hosting by adding make and GNU tar 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-09-12 16:36:01 +01:00
Justin Cormack
fcf47232f7 Set CMD to mkinitrd 
Signed-off-by: Justin Cormack <justin@specialbusservice.com>
 2016-09-12 16:02:07 +01:00
Justin Cormack
8646f76ed2 update to latest alpine base images 
Signed-off-by: Justin Cormack <justin@specialbusservice.com>
 2016-09-12 16:02:07 +01:00
Justin Cormack
53d44fb548 clean up main Dockerfile and Makefile to use exact correct context, tar input 
Signed-off-by: Justin Cormack <justin@specialbusservice.com>
 2016-09-12 16:02:07 +01:00
Justin Cormack
c51a0b831e Simplify kernel output and main Dockerfile 
Signed-off-by: Justin Cormack <justin@specialbusservice.com>
 2016-09-12 16:02:07 +01:00
Justin Cormack
09d2f5dc24 move mkinitrd to / 
Signed-off-by: Justin Cormack <justin@specialbusservice.com>
 2016-09-12 16:02:07 +01:00
Justin Cormack
b1597ff9a9 Move all output to the directories it will be in eventually 
Signed-off-by: Justin Cormack <justin@specialbusservice.com>
 2016-09-12 16:02:07 +01:00
Justin Cormack
1a16ad5a1d Clean up proxy Makefile 
Model for the others, make sure dependencies are correct and that
only the exactly correct things are passed to Docker. No longer copy
vendor directory.

Signed-off-by: Justin Cormack <justin@specialbusservice.com>
 2016-09-12 15:59:19 +01:00
Justin Cormack
19a90cbd71 run crond for log rotation 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-08-31 19:08:56 +01:00
Justin Cormack
06da7ea7c4 Update Alpine base with DNS search domain config 
See #433

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-08-31 09:52:01 +01:00
Justin Cormack
73914dd908 Switch to ksyslogd to add log rotation 
See #441

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-08-30 11:37:30 +01:00
Justin Cormack
733eff1f86 switch to mobylinux hub org 
Signed-off-by: Justin Cormack <justin@specialbusservice.com>
 2016-08-30 10:43:50 +01:00
Justin Cormack
1e80ba4fe2 Resolved how to get busybox to created shared mounts 
Not documented...

Removed util-linux again.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-08-23 00:17:08 +01:00