Commit Graph

1675 Commits

Author SHA1 Message Date
Justin Cormack
8385b4ece3 Merge pull request #779 from justincormack/noexec-run
Make /run nosuid,noexec
2016-11-23 06:42:55 -08:00
Justin Cormack
302941638d Merge pull request #780 from justincormack/iptables-proxy
Explicitly use slirp-proxy in iptables
2016-11-23 06:42:46 -08:00
Justin Cormack
545b12ee7d Explicitly use slirp-proxy in iptables
So as to allow a read only root filesystem, we use the proxy
path config option to override the Docker proxy for 1.13.

This means that the iptables override needs to call this binary
not the original docker-proxy binary to allow port forwarding.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-23 13:48:27 +00:00
Justin Cormack
80c9cee485 Make /run nosuid,noexec
This was not sufficiently locked down.

Fix #720

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-23 12:08:53 +00:00
Justin Cormack
f2b8beb0ee Merge pull request #777 from justincormack/win-trim
Run TRIM on Windows every 15m
2016-11-23 03:37:33 -08:00
Justin Cormack
68e3178646 Merge pull request #776 from justincormack/small-swap
Do not create swap file if the disk is small
2016-11-23 03:32:33 -08:00
Justin Cormack
41f4841399 Run TRIM on Windows every 15m
As the Windows virtual device supports TRIM we can run this to free
up disk space frequently. Not recommended to run on physical devices
this often.

See https://github.com/docker/pinata/issues/5298

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-23 11:30:35 +00:00
Justin Cormack
a95ada36a2 Do not create swap file if the disk is small
- on very small disks, eg CI, do not create a swap file.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-23 11:25:19 +00:00
Justin Cormack
e35e337503 Merge pull request #775 from justincormack/extend
Resize device if there is free space
2016-11-22 14:41:55 -08:00
Justin Cormack
cd5b2a8f98 Resize device if there is free space
If the block device has unused free space, extend the filesystem on it.

Fix #120

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-22 21:59:53 +00:00
Justin Cormack
841bbf2d17 Merge pull request #774 from nathanleclaire/azure_init_beta12
Azure init beta12
2016-11-21 23:54:17 +00:00
Nathan LeClaire
b51d28e734 Include version and daemon.json in Azure init script
Signed-off-by: Nathan LeClaire <nathan.leclaire@gmail.com>
2016-11-21 15:43:19 -08:00
Justin Cormack
5c8e8f8eec Merge pull request #773 from justincormack/typo
fix typo making swap file
2016-11-21 23:06:14 +00:00
Justin Cormack
3f2eb7630e fix typo making swap file
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-21 23:02:44 +00:00
Justin Cormack
8e23494bed Merge pull request #770 from rneugeba/kernel-fix
kernel: update/fix patches for 4.8.10
2016-11-21 22:06:27 +00:00
Justin Cormack
e4688ad245 Merge pull request #769 from justincormack/nossh
Remove ssh server packages
2016-11-21 21:56:37 +00:00
Justin Cormack
20f6db11b3 Remove ssh server packages
These will be containerised, and were disabled anyway.

Need client, as git needs it, and docker needs git.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-21 21:47:10 +00:00
Rolf Neugebauer
253561d2f2 kernel: update/fix patches for 4.8.10
In particular 8e0e003b50
seem to have remove the net/Kconfig changes

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-11-21 21:37:05 +00:00
Justin Cormack
ff0739afea Merge pull request #768 from justincormack/no-1.12
Update Docker init script for 1.13
2016-11-21 21:32:06 +00:00
Justin Cormack
59353f78c0 Update Docker init script for 1.13
- never update root filesystem see #583
- remove tests for earlier docker versions
- only use iptables override on desktop

fix #753

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-21 21:15:24 +00:00
Justin Cormack
ad06882e19 Merge pull request #766 from justincormack/alpine-3.5-rc2
Update base image to Alpine 3.5-rc2
2016-11-21 20:37:01 +00:00
Justin Cormack
835a16d601 Update base image to Alpine 3.5-rc2
- switch to libressl
- hvtools in main

Note the build images are not switched over yet

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-21 20:30:33 +00:00
Justin Cormack
d8f426480e Merge pull request #765 from justincormack/no-debug
Remove Alpine packages just used for debugging and build
2016-11-21 20:21:49 +00:00
Justin Cormack
d2992691a1 Remove Alpine packages just used for debugging and build
- make, GNU tar only used for self hosting
- strace, ipvsadmin, openssl just for debug

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-21 20:15:37 +00:00
Justin Cormack
8c19491820 Merge pull request #764 from justincormack/extend
Simplify file system format code
2016-11-21 19:53:43 +00:00
Justin Cormack
7730fa15ca Simplify file system format code
- use our own code rather than Alpine setup-disk
- remove alpine setup code as not needed
- do not create swap partitions
- create swap file on desktop editions for now (may remove)

Fix #619

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-21 18:35:13 +00:00
Justin Cormack
380e760779 Merge pull request #702 from justincormack/syslog
Syslog support for docker logs
2016-11-21 17:47:31 +00:00
Justin Cormack
9a4d135e8c Merge pull request #761 from ijc25/kernel-patch-whitespace
Fixup kernel patch whitepace
2016-11-21 15:20:57 +00:00
Justin Cormack
cd44748e9f Merge pull request #763 from justincormack/kernelup
Upgrade Linux to 4.8.10
2016-11-21 15:20:30 +00:00
Justin Cormack
5ad066803b Upgrade Linux to 4.8.10
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-21 15:03:48 +00:00
Ian Campbell
605163eb1d Fixup kernel patch whitepace
Some of git's whitespace fixup option corrupts the patches by (at least)
stripping trailing spaces (which are present for empty lines in context) and
changing leading <space><tab> into just <tab>. `patch(1)` used by the build
here seems to tolerate this, but `git am` and/or `git apply` do not.

Fix this up by running git am and at each failure point (i.e. every patch)
applying the relevant patch using `patch(1)` (which works because `git am` was
unable to even partially apply the patches) before regenerating the whole lot
with `git format-patch`.

Signed-off-by: Ian Campbell <ian.campbell@docker.com>
2016-11-21 11:43:48 +00:00
Justin Cormack
93cdf15977 Merge pull request #760 from justincormack/kernelup
Update Linux to 4.8.9
2016-11-19 23:03:17 +00:00
Justin Cormack
d5c822f4f9 Update Linux to 4.8.9
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-19 22:37:22 +00:00
Justin Cormack
55a395e2d4 Merge pull request #759 from justincormack/toybox
Add some basic shell commands in media image for debug
2016-11-19 17:53:21 +00:00
Justin Cormack
b46925a0b1 Add some basic shell commands in media image for debug
Add toybox statically linked ls, sh, find etc so that it is
possible to examine the archive eaily.

Fix #749

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-19 16:19:59 +00:00
Justin Cormack
a1c165d9ab Merge pull request #758 from justincormack/baseup
update c build base image
2016-11-18 23:50:18 +00:00
Justin Cormack
41caff5065 update c build base image
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-18 23:32:47 +00:00
Justin Cormack
1e2929b8c9 Merge pull request #757 from rneugeba/win-tweaks
Minor configuration tweaks
2016-11-18 16:41:14 +00:00
Rolf Neugebauer
d3b065090e kernel: limit number of CPUs to 128
128 CPUs seems plenty for now and it allows for the
debug kernels to boot on Hyper-V without modifications. It may
also have the added benefit of reducing some data structures
allocated per CPU (in particular for Debug kernels).

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-11-18 16:36:23 +00:00
Justin Cormack
f69f9a3427 Use syslog local0 for docker logs
This allows log rotation, redirect via syslog etc.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-18 16:23:41 +00:00
Justin Cormack
e0eda2d1e0 Remove syslog conf file
We are not using busybox syslog any more so this is unused.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-18 16:23:41 +00:00
Rolf Neugebauer
6dedd93cb3 efi: add 'noautodetect' to kernel commandline
This stops device auto-detect in 'hwdrivers'. On Docker
for Windows driver auto-detect should not be necessary as all
drivers are compiled in.

Further, on slow machines (and in CI) th 'hwdrivers' seems to have
race as it does a 'find' on '/sys/devices' and then performs actions.
On slow machines (and in CI) it appears that VMBus devices get
removed (and possibly re-added) causing the script to error.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-11-18 16:21:20 +00:00
Justin Cormack
c27ea491e8 Merge pull request #756 from justincormack/config-4.8
Make oldconfig for 4.8.8 kernel
2016-11-18 14:17:12 +00:00
Justin Cormack
04b981928e Merge pull request #755 from justincormack/check-config-merged
revert to upstream check-config as PR merged
2016-11-18 14:02:35 +00:00
Justin Cormack
734b901d14 Make oldconfig for 4.8.8 kernel
Most new options disabled, a few picked.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-18 13:46:29 +00:00
Justin Cormack
e48bce798b revert to upstream check-config as PR merged
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-18 13:30:39 +00:00
Justin Cormack
71c899ff46 Merge pull request #752 from rneugeba/v4.8.8-up
kernel: update to 4.8.8
2016-11-18 13:13:36 +00:00
Rolf Neugebauer
4b02dc7ada kernel: update to 4.8.8
This removes all the patches which have been upstreamed since 4.4.x
and only leaves patches for a minor fix to AF_VSOCK, the Hyper-V socket patch
and a new patch for fixing delays on creating netns with tunnel interfaces.

The latter has been accecpted into the upstream netdev branch and will
likely appear in 4.9.0 and we can cherry pick from there then.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-11-18 12:58:17 +00:00
Justin Cormack
d4b0ee49c2 Merge pull request #754 from justincormack/config-4.8
Update check-config for Linux 4.8
2016-11-18 11:59:16 +00:00
Justin Cormack
c05ba1397e Update check-config for Linux 4.8
Temporarily using unmerged version until upstream.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-18 11:50:36 +00:00