github/linuxkit
1
0
Fork 0
mirror of https://github.com/linuxkit/linuxkit.git synced 2025-09-11 11:50:24 +00:00
Code Issues Projects Releases Wiki Activity
7,423 Commits 1 Branch 30 Tags
63849b606fe400fae648b21b25f668e3620e4e1c
Commit Graph

7423 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Rolf Neugebauer
5f9cd0eb16 Update Authors 
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
 2019-02-02 11:12:41 +00:00
Rolf Neugebauer
13f63bf9f7 Update YAMLs to latest kernels 
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
 2019-02-02 11:03:39 +00:00
Rolf Neugebauer
1c49fa2c8f kernels: Update to 4.20.6/4.19.19/4.14.97/4.9.154 
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
 2019-02-01 19:34:57 +00:00
Rolf Neugebauer
c5b3f24de6 Merge pull request #3279 from rn/kern-up 
Kernel update to 4.20.5/4.19.18/4.14.96/4.9.153
 2019-01-29 10:51:15 +00:00
Rolf Neugebauer
a10fba6f62 Update YAMLs to latest kernels 
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
 2019-01-29 08:22:32 +00:00
Rolf Neugebauer
405500aac0 kernels: Adjust 4.14.x config 
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
 2019-01-28 19:34:27 +00:00
Rolf Neugebauer
ab527e7afb kernels: Update to 4.2.5/4.19.18/4.14.96/4.9.153 
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
 2019-01-28 18:20:01 +00:00
Justin Cormack
6fcfc99e4d Merge pull request #3277 from rn/kern-up 
Update kernels to 4.20.4/4.19.17/4.14.95/4.9.152
 2019-01-27 15:27:56 +00:00
Rolf Neugebauer
4018bbcbfd Update YAMLs to latest kernels 
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
 2019-01-26 10:00:21 +00:00
Rolf Neugebauer
f85b16e0bd kernel: Update to 4.20.4/4.19.17/4.14.95/4.9.152 
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
 2019-01-25 20:16:00 +00:00
Rolf Neugebauer
9a2d651407 Merge pull request #3276 from zx2c4-forks/wireguard-bump 
wireguard: upgrade to 0.0.20190123
 2019-01-23 23:06:20 +00:00
Jason A. Donenfeld
a94099639e wireguard: upgrade to 0.0.20190123 
* tools: curve25519: handle unaligned loads/stores safely

This should fix sporadic crashes with `wg pubkey` on certain architectures.

* netlink: auth socket changes against namespace of socket

In WireGuard, the underlying UDP socket lives in the namespace where the
interface was created and doesn't move if the interface is moved. This
allows one to create the interface in some privileged place that has
Internet access, and then move it into a container namespace that only
has the WireGuard interface for egress. Consider the following
situation:

1. Interface created in namespace A. Socket therefore lives in namespace A.
2. Interface moved to namespace B. Socket remains in namespace A.
3. Namespace B now has access to the interface and changes the listen
port and/or fwmark of socket. Change is reflected in namespace A.

This behavior is arguably _fine_ and perhaps even expected or
acceptable. But there's also an argument to be made that B should have
A's cred to do so. So, this patch adds a simple ns_capable check.

* ratelimiter: build tests with !IPV6

Should reenable building in debug mode for systems without IPv6.

* noise: replace getnstimeofday64 with ktime_get_real_ts64
* ratelimiter: totalram_pages is now a function
* qemu: enable FP on MIPS

Linux 5.0 support.

* keygen-html: bring back pure javascript implementation

Benoît Viguier has proofs that values will stay well within 2^53. We
also have an improved carry function that's much simpler. Probably more
constant time than emscripten's 64-bit integers.

* contrib: introduce simple highlighter library

This is the highlighter library being used in:
- https://twitter.com/EdgeSecurity/status/1085294681003454465
- https://twitter.com/EdgeSecurity/status/1081953278248796165

It's included here as a contrib example, so that others can paste it into
their own GUI clients for having the same strictly validating highlighting.

* netlink: use __kernel_timespec for handshake time

This readies us for Y2038. See https://lwn.net/Articles/776435/ for more info.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
 2019-01-23 14:50:55 +01:00
Rolf Neugebauer
9a818a1446 Merge pull request #3273 from errordeveloper/fix-zfs-4.14.x 
Use latest stable release of ZFS
 2019-01-21 20:00:58 +00:00
Ilya Dmitrichenko
872a92849b Use latest stable release of ZFS 
Signed-off-by: Ilya Dmitrichenko <errordeveloper@gmail.com>
 2019-01-19 10:04:34 +00:00
Rolf Neugebauer
5cf518b89b Merge pull request #3272 from rn/kern-up 
Update kernels to 4.20.3/4.19.16/4.14.94/4.9.151
 2019-01-18 10:34:26 +00:00
Rolf Neugebauer
c28d72169d Update YAMLs to latest kernels 
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
 2019-01-18 08:12:55 +00:00
Rolf Neugebauer
eeb2d546d1 Merge pull request #3249 from chriswue/master 
Adding support to mount an encrypted filesystem
 2019-01-18 01:28:50 +01:00
Christian Wuerdig
a9bc7372de Adding dm-crypt as core pkg 
Signed-off-by: Christian Wuerdig <christian.wuerdig@gmail.com>
 2019-01-18 11:56:18 +13:00
Rolf Neugebauer
ffd8d19cfd kernel: Update to 4.20.3/4.19.16/4.14.94/4.9.151 
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
 2019-01-17 19:51:32 +00:00
Rolf Neugebauer
6412cfa117 Merge pull request #3271 from rn/kern-up 
Update kernel to 4.20.2/4.19.15/4.14.93/4.9.150
 2019-01-17 17:12:10 +01:00
Rolf Neugebauer
567d4e2f54 Update YAMLs to latest kernels 
This also fixes up test/cases/020_kernel/110_namespace/common.yml
and test/cases/040_packages/032_bcc/test.yml to use the 4.19.x
kernel. I missed these when making the 4.19 kernel the default.

Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
 2019-01-17 11:56:04 +00:00
Rolf Neugebauer
3b4f70dd76 kernel: Update to 4.20.2/4.19.15/4.14.93/4.9.150 
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
 2019-01-16 22:28:57 +00:00
Rolf Neugebauer
49ed462379 Merge pull request #3269 from rn/def-kern 
Switch the default kernel to 4.19.x
 2019-01-16 21:08:18 +01:00
Rolf Neugebauer
6ab6467d78 Switch the default kernel to 4.19.x 
4.19.x is the new LTS kernel and has been out for a while. Switch
all examples and tests to using it instead of the 4.14.x kernel.

Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
 2019-01-16 16:30:24 +00:00
Rolf Neugebauer
8aee979b72 Merge pull request #3267 from TiejunChina/master-dev 
update -rt to 4.14.87-rt50
 2019-01-15 12:23:09 +01:00
Tiejun Chen
ef9302bc01 update -rt to 4.14.87-rt50 
Signed-off-by: Tiejun Chen <tiejunc@vmware.com>
 2019-01-14 20:49:28 -08:00
Rolf Neugebauer
13bfb5c238 Merge pull request #3265 from rn/kern-up 
Update kernels to 4.20.1/4.19.14/4.14.92/4.9.149
 2019-01-14 12:29:56 +01:00
Christian Wuerdig
8cd16c4904 Adding losetup utility package to core pkg 
Signed-off-by: Christian Wuerdig <christian.wuerdig@gmail.com>
 2019-01-14 06:24:00 +13:00
Rolf Neugebauer
4b66ef2e2a Merge pull request #3266 from bensallen/master 
Fix link to ADOPTERS.md
 2019-01-12 19:33:57 +01:00
Ben Allen
c0049f051d Fix link to ADOPTERS.md 
Signed-off-by: Ben Allen <bsallen@alcf.anl.gov>
 2019-01-12 12:25:40 -06:00
Rolf Neugebauer
4d20f2c476 Update YAMLs to latest kernels 
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
 2019-01-12 18:01:24 +00:00
Rolf Neugebauer
be99dbcda2 kernel: Adjust the 4.20/4.19 configs for x86 and arm64 
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
 2019-01-12 13:28:22 +00:00
Rolf Neugebauer
d9504a7904 kernel: Update to 4.20.1/4.19.14/4.14.92/4.9.149 
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
 2019-01-12 11:55:36 +00:00
Ian Campbell
eb7e07542f Merge pull request #3262 from ijc/containerd-v1.2.2 
Containerd v1.2.2
 2019-01-09 10:01:57 +00:00
Ian Campbell
7386a32afe pkg/runc: bump alpine base to newest one. 
Corresponding to the similar changes in ed2dd46cd0.

Signed-off-by: Ian Campbell <ijc@docker.com>
 2019-01-08 16:28:36 +00:00
Ian Campbell
3a3b742ca3 Bump yml to pickup containerd v1.2.2 
Also pick a newer version of runc.

Signed-off-by: Ian Campbell <ijc@docker.com>
 2019-01-08 12:13:36 +00:00
Ian Campbell
ddd8c0c017 Bump runc to version from containerd v1.2.2 
Signed-off-by: Ian Campbell <ijc@docker.com>
 2019-01-08 11:52:42 +00:00
Ian Campbell
ed2dd46cd0 Bump packages to new alpine w/ containerd v1.2.2 
Signed-off-by: Ian Campbell <ijc@docker.com>
 2019-01-08 11:52:42 +00:00
Ian Campbell
b4187fe6ea alpine: Bump to containerd v1.2.2 
Signed-off-by: Ian Campbell <ijc@docker.com>
 2019-01-08 06:52:27 -05:00
Ian Campbell
c52e20a932 tools/alpine: Grab another file needed for wireguard APK build. 
Signed-off-by: Ian Campbell <ijc@docker.com>
 2019-01-08 11:37:13 +00:00
Rolf Neugebauer
c033d6892e Merge pull request #3260 from TiejunChina/master-dev 
update -rt to 4.14.87-rt49
 2019-01-08 10:46:47 +01:00
Tiejun Chen
e7481213e4 update -rt to 4.14.87-rt49 
Signed-off-by: Tiejun Chen <tiejunc@vmware.com>
 2019-01-06 13:29:54 -08:00
Justin Cormack
bfb37f20b1 Merge pull request #3257 from keyki/master 
log the actual error message when creating the Docker API client
 2019-01-05 19:25:49 +00:00
Justin Cormack
0956685d44 Merge pull request #3259 from rn/report-dec-2018 
December 2018 development report
 2019-01-04 09:53:18 +00:00
Rolf Neugebauer
b0bf58f073 December 2018 development report 
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
 2019-01-04 09:06:02 +00:00
Justin Cormack
246a491e3c Merge pull request #3258 from rn/kern-4.20 
Remove 4.4.x kernels, add 4.20.x kernels
 2019-01-03 11:04:35 +00:00
Rolf Neugebauer
eb0fa4b150 tests: Add kernel module test for 4.20.x 
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
 2019-01-03 00:47:29 +00:00
Rolf Neugebauer
8069c88396 tests: Add 4.20.x kernel config test 
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
 2019-01-03 00:44:28 +00:00
Rolf Neugebauer
77422d26c0 kernel/arm64: Enable ENA driver 
The new AWS A1 instances use the ENA network driver.
Enable it.

Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
 2019-01-02 22:17:36 +00:00
Rolf Neugebauer
ae1f2dd6af kernel/x86_64,arm64: Enable STACKLEAK GCC plugin 
Enable the STACKLEAK GCC plugin which erases the
kernel stack before returning from system calls.
This security options has a reported performance
hit of around 1% which seem like a reasonable amount.

For more details see: https://outflux.net/blog/archives/2018/12/24/security-things-in-linux-v4-20/

Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
 2019-01-02 22:17:36 +00:00