github/linuxkit
1
0
Fork 0
mirror of https://github.com/linuxkit/linuxkit.git synced 2026-04-11 12:31:34 +00:00
Code Issues Projects Releases Wiki Activity
1,835 Commits 1 Branch 32 Tags
6dd377145d7df2742b0f82fd93c9b23824dde003
Commit Graph

84 Commits

Author SHA1 Message Date
Justin Cormack
6dd377145d Update kernel to 4.9.1 
This has various security updates which do potentially affect
containerised application security see
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.1

estimated medium severity.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-01-06 18:02:06 +00:00
Justin Cormack
e955457195 Add a kernel-dev tarball with kernel headers 
These headers are needed for defining kernel probes etc, tested with
eBPF. Could also be used for perf, building kernel modules etc. Saved
to the media tarball at present, may add to base image or container.

Also rationalise the paths in the headers tarball a little to match.

Will add an eBPF container using these later.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-01-04 12:10:30 +00:00
Justin Cormack
00b3924067 Update base images to Alpine 3.5 
excludes
- Go base images as not yet available
- perf which does not build with latest image

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-28 18:09:08 +00:00
Justin Cormack
90c375a044 Update AUFS kernel to 4.9 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-21 21:59:07 +00:00
Rolf Neugebauer
0c38fd266e build: update packages to new alpine-build-c base 
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
 2016-12-16 16:21:39 +00:00
Justin Cormack
5567606fd0 Make AUFS optional and ship choice of kernels 
This seems the best option, although none are great

- build with `make AUFS=1` to build with AUFS support, currently with 4.8 kernel
- default is to build without AUFS support, with 4.9 kernel

This recognises that AUFS supprot is temporary #620 and only there until
we can phase it out on desktop editions, and allow the other editions that
never shipped with AUFS to ship something very close to mainline.

However we do still apply the patches so that the non AUFS branch runs fine on
all platforms, so it can be tested elsewhere.

We may be able to move the kernel versions back in line when 4.9 aufs support is out.

Plan is to shift CI to build both sets of images, and get the Desktop editions to
pick up the aufs set automatically, once this is merged.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-13 18:23:45 -08:00
Justin Cormack
4aa8cffb13 Update to Linux 4.8.14 
Includes fix for CVE-2016-8655 Linux af_packet.c race condition.

This gives a container escape with default container capabilities.

This now has the slow network namespace patch backported, so this
is removed.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-10 16:18:47 -08:00
Justin Cormack
15522201ea Keep kernel headers from build 
Also upload some kernel artefacts to a private repo at mobylinux/kernel on Hub for scanning.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-08 17:32:59 -08:00
Justin Cormack
9352523bdb Update to Linux 4.8.12 
- security update

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-02 14:12:06 +00:00
Riyaz Faizullabhoy
8b7cdd41dc Use digests instead of tags where possible 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-12-01 09:39:02 -08:00
Justin Cormack
12322d362c Update to Linux 4.8.11 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-28 15:00:20 +00:00
Justin Cormack
a08e06bc44 Upgrade Linux to 4.8.10 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-21 15:03:48 +00:00
Justin Cormack
b8dbdaaf8a Update Linux to 4.8.9 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-19 22:37:22 +00:00
Justin Cormack
88eafcc239 update c build base image 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-18 23:32:47 +00:00
Rolf Neugebauer
c782a2244e kernel: update to 4.8.8 
This removes all the patches which have been upstreamed since 4.4.x
and only leaves patches for a minor fix to AF_VSOCK, the Hyper-V socket patch
and a new patch for fixing delays on creating netns with tunnel interfaces.

The latter has been accecpted into the upstream netdev branch and will
likely appear in 4.9.0 and we can cherry pick from there then.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
 2016-11-18 12:58:17 +00:00
Justin Cormack
b20125d3ab Update to Linux 4.4.32 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-15 10:27:18 +00:00
Justin Cormack
fe3f584296 update Linux to 4.4.31 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-12 16:30:44 +00:00
Justin Cormack
21a04b3b54 Update kernel config 
- remove unused graphics options
- move W^X test to debug kernel #685
- reboot on kernel panic fix #660

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-08 16:12:29 +00:00
Justin Cormack
a77b91a022 update Linux to 4.4.30 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-01 20:50:12 +00:00
Justin Cormack
c758ca67ce make curl fail on 404 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-01 13:58:02 +00:00
Justin Cormack
ecc511b0a2 Linux 4.4.29 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-10-31 13:12:43 +00:00
Justin Cormack
08fd4f9f19 upgrade Linux to 2.4.28 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-10-28 14:09:20 +01:00
Justin Cormack
019b5eb727 Update to Linux 4.4.27 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-10-24 17:20:50 +01:00
Justin Cormack
e2b37e4de4 Revert "kernel: update to 4.8.2" 
This reverts commit 0808e359df.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-10-24 17:20:02 +01:00
Justin Cormack
2921420010 Revert "Update Linux kernel to 4.8.3" 
This reverts commit 2f985f8306.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-10-24 17:19:30 +01:00
Justin Cormack
95fafa07a9 Revert "Linux 4.8.4" 
This reverts commit 2db93ebbc7.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-10-24 17:19:12 +01:00
Justin Cormack
2db93ebbc7 Linux 4.8.4 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-10-22 17:05:20 +01:00
Justin Cormack
2f985f8306 Update Linux kernel to 4.8.3 
Fix Dirty COW.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-10-21 09:35:09 +01:00
Justin Cormack
29196a5872 update C build base images for Musl update 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-10-20 13:23:12 +01:00
Rolf Neugebauer
0808e359df kernel: update to 4.8.2 
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
 2016-10-18 16:23:33 +01:00
Justin Cormack
4caffb567d update to Linux 4.4.25 
Signed-off-by: Justin Cormack <justin@specialbusservice.com>
 2016-10-16 22:19:37 +01:00
Justin Cormack
214f8f6440 set -j on kernel build again 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-10-11 16:27:55 +01:00
Justin Cormack
20250e5f41 Update Linux to 4.4.24 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-10-08 13:48:29 +02:00
Justin Cormack
457e44dbcc update kernel to 4.4.23 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-10-01 21:03:47 +01:00
Justin Cormack
4e2f887f40 add ncurses to C build for menuconfig 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-10-01 18:26:38 +01:00
Justin Cormack
bf29850d3c Use patched aufs-utils so can compile kernel with alpine 
This is going to be submitted upstream.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-09-29 16:17:46 +01:00
Justin Cormack
4549970d55 Update Linux kernel to 4.4.22 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-09-26 00:01:53 +01:00
Rolf Neugebauer
de993ec0d9 linux: update kernel to 4.4.21 
- removed some Hyper-V patches which were picked up
  between 4.4.20 and 4.4.21
- udate aufs

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
 2016-09-19 18:20:28 +01:00
Justin Cormack
3665ef0b82 reorder kernel Dockerfile 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-09-13 21:15:34 +01:00
Justin Cormack
ba40e0a33b Use a random tag for Debian kernel build base 
To store all the old images they need a different tag, so use a
random one.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-09-12 16:36:01 +01:00
Justin Cormack
3d0cd1deca Use a base image for building kernel 
As we do not have a simple way to hash Debian, use the Docker
sha256 until we switch to Alpine.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-09-12 16:36:01 +01:00
Justin Cormack
0a6f4f6bf5 revert to debian for kernel build 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-09-12 16:36:01 +01:00
Justin Cormack
c51a0b831e Simplify kernel output and main Dockerfile 
Signed-off-by: Justin Cormack <justin@specialbusservice.com>
 2016-09-12 16:02:07 +01:00
Justin Cormack
21a0c10707 Update kernel and aufs 
- kernel 4.4.20
- aufs 20160905

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-09-07 22:51:51 +01:00
Justin Cormack
069930f3a6 quieter kernel build 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-08-31 15:53:16 +01:00
Justin Cormack
c1e2418a16 Remove support for arm kernel build 
See #449. Plan is to use upstream Alpine kernel for Arm, as
does not need vsock, hvsock or aufs.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-08-31 14:23:40 +01:00
Justin Cormack
5b527df37c Update build containers to Ubuntu 16.10 
Should update to Alpine in future.

Signed-off-by: Justin Cormack <justin@specialbusservice.com>
 2016-08-23 19:53:11 +01:00
Justin Cormack
dce8e37a71 Update kernel and aufs 
- Linux 4.4.19
- AUFS 20160822

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-08-22 11:05:07 +01:00
David Sheets
1163bf09be kernel: apply debug configuration to all kernels 
Signed-off-by: David Sheets <dsheets@docker.com>
 2016-08-10 17:08:07 +01:00
David Sheets
9e5c86f006 kernel: add a Makefile DEBUG variable and a kernel_config for debugging 
Signed-off-by: David Sheets <dsheets@docker.com>
 2016-08-10 17:07:48 +01:00