github/linuxkit
1
0
Fork 0
mirror of https://github.com/linuxkit/linuxkit.git synced 2026-01-14 07:58:22 +00:00
Code Issues Projects Releases Wiki Activity
1,777 Commits 1 Branch 31 Tags
4ac42402e5ad91c5a75dbd1871bf9922126f2cbc
Commit Graph

1273 Commits

Author SHA1 Message Date
Justin Cormack
4ac42402e5 Update base images to Alpine 3.5 
excludes
- Go base images as not yet available
- perf which does not build with latest image

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-28 18:09:08 +00:00
David Gageot
a54f2ae179 Specific init.d script for GCP 
Signed-off-by: David Gageot <david@gageot.net>
 2016-12-23 12:03:20 +01:00
David Gageot
86c29efe87 Change the bucket where Moby is pushed for GCE 
And make the image public

Signed-off-by: David Gageot <david@gageot.net>
 2016-12-22 19:03:55 +01:00
David Gageot
054b49ccca Update mobylinux/mkimage-gce image 
Signed-off-by: David Gageot <david@gageot.net>
 2016-12-22 18:44:33 +01:00
David Gageot
b16b457306 Flag GCP platform 
Signed-off-by: David Gageot <david@gageot.net>
 2016-12-22 18:42:15 +01:00
Justin Cormack
3cb47b0b00 Fix the cgroup memory hierarchy warning 
Needed to make the memory cgroup work properly

fix #373

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-22 00:21:47 +00:00
Justin Cormack
f953ad780c Update AUFS kernel to 4.9 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-21 21:59:07 +00:00
Justin Cormack
cc72074b11 Merge pull request #915 from riyazdf/golinting 
Add golint, gofmt, govet
 2016-12-21 19:35:31 +00:00
Riyaz Faizullabhoy
c8e7a6dd43 Move linting to Go build 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-12-21 11:26:33 -08:00
Riyaz Faizullabhoy
b73d2a29a7 Add lint docker image for golang linting and testing to individual package subdirs 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-12-20 15:00:08 -08:00
Riyaz Faizullabhoy
05bb6d5c1a Revert "Bumps for azure 1.13.0-rc4-beta14" 
This reverts commit 2197b7b7c6.

Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-12-19 17:42:32 -08:00
Nathan LeClaire
049ec0b285 Bumps for azure 1.13.0-rc4-beta14 
Signed-off-by: Nathan LeClaire <nathan.leclaire@gmail.com>
 2016-12-19 17:19:32 -08:00
Riyaz Faizullabhoy
51088ee491 Add golint, make linting top-level 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-12-19 16:13:02 -08:00
Riyaz Faizullabhoy
27cb33f7b9 Add gofmt, govet 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-12-19 15:17:37 -08:00
Justin Cormack
8a2bbdde6d Merge pull request #913 from justincormack/baseup 
Update Alpine base image
 2016-12-19 18:46:51 +00:00
Justin Cormack
ba2ac2396a Merge pull request #912 from justincormack/exclude-cleanup 
Set an exclude pattern when untarring images
 2016-12-19 18:46:05 +00:00
Justin Cormack
8e32828a9f Update Alpine base image 
Security update

- openssh 7.4

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-19 18:04:42 +00:00
Justin Cormack
b4cba71eaa Set an exclude pattern when untarring images 
This is a bit cleaner than deleting files after.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-19 17:54:01 +00:00
Justin Cormack
30047cb226 Remove extraneous docker rm 
fix #879

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-19 17:08:33 +00:00
Justin Cormack
705632ff66 Support Docker 1.12 on OSX 
I had occasion to use a Moby build of 1.12 on Docker for Mac today
and I had to patch this in. Given that we re-added support for 1.12
for cloud, for CS, may as well support on OSX too as we are still
doing releases.

The fix is a bit messy (hence the flag), as it writes to the file
system but we will remove it later, or work around the write if
we need to continue to support 1.12 outside the 1.12.x branch.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-17 00:02:45 -08:00
Justin Cormack
158924114a Update Docker to 1.13.0-rc4 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-16 21:40:38 -08:00
Justin Cormack
b1a95e7f6f Merge pull request #901 from rneugeba/perf 
Add Linux perf utility
 2016-12-16 13:31:47 -08:00
Riyaz Faizullabhoy
bee11d02f7 Only disable sysrq for cloud editions 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-12-16 09:24:34 -08:00
Rolf Neugebauer
e72977308c alpine: add Makefile/Dockerfile to build the Linux perf utility 
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
 2016-12-16 17:04:43 +00:00
Rolf Neugebauer
d3889c2445 build: update packages to new alpine-build-c base 
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
 2016-12-16 16:21:39 +00:00
Rolf Neugebauer
a75dac9751 base: add dependencies to build the Linux perf utility 
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
 2016-12-16 15:10:52 +00:00
Simon Ferquel
5c096a83c1 Remove vsudd output from the console. 
vsudd is quite verbose, and we are confident enough about its stability.
This will clean Pinata logs as well indirectly

Signed-off-by: Simon Ferquel <simon.ferquel@docker.com>
 2016-12-16 15:53:20 +01:00
Justin Cormack
aace941bab Update base image 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-15 13:22:11 -08:00
Justin Cormack
0b7ffbd135 Use exact build context for kernel build 
Saves passing too much context, less error prone and should
mean builds are faster if not clean, consistent with elsewhere.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-15 11:27:41 -08:00
Justin Cormack
bca12fbd3e Merge pull request #892 from justincormack/kernelup 
Update AUFS kernel to 4.8.15
 2016-12-15 10:54:12 -08:00
Justin Cormack
75078a67bb Create all directories for kernel 
Non AUFS kernels do not create `sbin/` and `/usr` directories as they
do not provide the AUFS directories. Just create empty directories to
avoid a warning.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-15 10:26:00 -08:00
Justin Cormack
c7bafd43e0 Update AUFS kernel to 4.8.15 
- minor update

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-15 10:13:01 -08:00
David Sheets
58706fd84e transfused: use memcmp instead of a loop for checking init message 
Signed-off-by: David Sheets <dsheets@docker.com>
 2016-12-15 11:03:29 +00:00
David Sheets
9d5309953f transfused: use read_exactly in subproto reading 
Signed-off-by: David Sheets <dsheets@docker.com>
 2016-12-15 11:03:29 +00:00
David Sheets
ac7316427c transfused: use read_exactly in init thread message reading 
Signed-off-by: David Sheets <dsheets@docker.com>
 2016-12-15 11:03:29 +00:00
David Sheets
fdc8afd32d transfused: factor read_exactly out of read_message 
Signed-off-by: David Sheets <dsheets@docker.com>
 2016-12-15 11:03:29 +00:00
David Sheets
8580cfec80 transfused: minor formatting fixup 
Signed-off-by: David Sheets <dsheets@docker.com>
 2016-12-15 11:03:29 +00:00
David Sheets
b9ff275a88 transfused: replace brittle init control message writing with write_exactly 
Signed-off-by: David Sheets <dsheets@docker.com>
 2016-12-15 11:03:29 +00:00
David Sheets
6cf50dd803 transfused: replace brittle event pid writing with write_exactly 
Signed-off-by: David Sheets <dsheets@docker.com>
 2016-12-15 11:03:29 +00:00
David Sheets
78328cf026 transfused: improve write_exactly error handling 
Signed-off-by: David Sheets <dsheets@docker.com>
 2016-12-15 11:03:29 +00:00
David Sheets
6b1ef63d79 transfused: improve read_message robustness 
Signed-off-by: David Sheets <dsheets@docker.com>
 2016-12-15 11:03:29 +00:00
Justin Cormack
470063b79b Merge pull request #888 from justincormack/cpio-container 
Run cpio in a container
 2016-12-14 19:15:01 -08:00
Justin Cormack
ade4d6cc4b Run cpio in a container 
This way it runs as root so files always owned by root.

Fix #887

This is the simplest fix for 1.13, we can also use this for
creating the main system initrd, but that needs more changes
so leaving for 1.14.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-14 17:56:57 -08:00
Justin Cormack
82ea5c0d90 Merge pull request #836 from justincormack/yama 
Add Yama LSM
 2016-12-14 17:49:27 -08:00
Justin Cormack
822e4df468 Add Yama LSM 
Default config is restricted ptrace, processes can only ptrace
related processes, such as child processes, rather than any process
with the same uid.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-14 17:04:36 -08:00
Justin Cormack
88c3d98af4 Tweak kernel networking options 
In 4.9 IPVLAN support needs NET_L3_MASTER_DEV to work.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-14 16:41:12 -08:00
Justin Cormack
75b0814221 Merge pull request #880 from justincormack/kernel-4.8-4.9 
Make AUFS optional and ship choice of kernels
 2016-12-14 15:33:39 -08:00
French Ben
d01892df11 Added simple upload of the image to bucket 
Signed-off-by: French Ben <frenchben@docker.com>
 2016-12-14 10:18:54 -08:00
Justin Cormack
3b774e3657 Make AUFS optional and ship choice of kernels 
This seems the best option, although none are great

- build with `make AUFS=1` to build with AUFS support, currently with 4.8 kernel
- default is to build without AUFS support, with 4.9 kernel

This recognises that AUFS supprot is temporary #620 and only there until
we can phase it out on desktop editions, and allow the other editions that
never shipped with AUFS to ship something very close to mainline.

However we do still apply the patches so that the non AUFS branch runs fine on
all platforms, so it can be tested elsewhere.

We may be able to move the kernel versions back in line when 4.9 aufs support is out.

Plan is to shift CI to build both sets of images, and get the Desktop editions to
pick up the aufs set automatically, once this is merged.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-13 18:23:45 -08:00
Justin Cormack
e4c8845091 Merge pull request #874 from justincormack/gce-image 
Build a GCE image
 2016-12-13 16:57:48 -08:00