6 Commits

Author	SHA1	Message	Date
Justin Cormack	bf1c21e045	Run rngd inside a system container ... - this needs an init as it does not respond to stop signals, so include tini - needs CAP_SYS_ADMIN to write to kernel entropy estimate - set kernel.random.write_wakeup_threshold so that rngd does not need sysctl write access - build patches from Alpine, but statically linked - remove rngd from base image, means we no longer need community repository Signed-off-by: Justin Cormack <justin.cormack@docker.com>	2016-12-02 14:00:12 +00:00
Justin Cormack	35fdd3268a	Update base image to Alpine 3.5-rc2 ... - switch to libressl - hvtools in main Note the build images are not switched over yet Signed-off-by: Justin Cormack <justin.cormack@docker.com>	2016-11-21 20:30:33 +00:00
Justin Cormack	1636eab508	Update base image ... - bind update - edge packages moved to 3.5 Signed-off-by: Justin Cormack <justin.cormack@docker.com>	2016-11-08 10:09:10 +00:00
Rolf Neugebauer	5f9ace13b0	packages: add hvtools from edge/testing ... Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>	2016-09-23 11:03:40 +01:00
Justin Cormack	1aef768a33	Add rngd ... Tweak the config to use RDSEED or (fallback) RDRAND. Makes sure we have initial random seed in cases where there is no other random source if these are supported. The default config in Alpine currently disables these, which makes it pretty useless, as there is no motherboard rng support any more. Replaces #517 Fix #514 Fix #183 Signed-off-by: Justin Cormack <justin.cormack@docker.com>	2016-09-16 15:32:56 +01:00
Justin Cormack	7100477e54	Explicitly set the apk repositories we use ... Previously we used the defaults (main and community) but we currently only need main, but are likely to need some packages from edge soon. Signed-off-by: Justin Cormack <justin.cormack@docker.com>	2016-09-16 10:58:54 +01:00