Commit Graph

7081 Commits

Author SHA1 Message Date
Rolf Neugebauer
97ef9fb47c Update YAMLs to latest kernels
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2018-08-28 22:31:46 +01:00
Rolf Neugebauer
323043fdd8 kernel: Update to 4.18.5/4.17.19/4.14.67/4.9.124/4.4.152
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2018-08-28 07:24:36 +01:00
Rolf Neugebauer
77b3496d9f kernel: Update to 4.18.4/4.17.18/4.14.66/4.9.123/4.4.151
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2018-08-27 21:45:04 +01:00
Rolf Neugebauer
d66c2c6f45 kernel: Update to 4.18.3/4.17.17/4.14.65/4.9.122/4.4.150
Note, this update skips 4.18.2/4.17.16/4.14.64/4.9.121/4.4.149
as the change was a single patch, a bug fix.

Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2018-08-27 18:38:42 +01:00
Rolf Neugebauer
621f88f47e
Merge pull request #3169 from TiejunChina/master-dev
update -rt to 4.14.63-rt40
2018-08-27 18:29:52 +02:00
Rolf Neugebauer
89063f4ec5
Merge pull request #3160 from kmjohansen/topics/container-perf
Improve docker container startup times on 4.14, 4.17, and 4.18
2018-08-27 18:28:46 +02:00
Tiejun Chen
a302b2dfa2 update -rt to 4.14.63-rt40
Signed-off-by: Tiejun Chen <tiejunc@vmware.com>
2018-08-26 17:07:40 -07:00
Rolf Neugebauer
0278d74e41
Merge pull request #3166 from l0rd/fix-docker-for-mac-sample
Update docker for mac sample to use iso-efi format
2018-08-23 11:19:51 +02:00
Mario Loriedo
5b1852cfcb Update docker for mac sample to use iso-efi format
Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>
2018-08-22 13:54:22 +02:00
Rolf Neugebauer
0560fa409f
Merge pull request #3164 from l0rd/fix-typo
Fix typo in examples/docker-for-mac.md
2018-08-21 12:11:57 +02:00
Krister Johansen
1095c2721d Convert slow net subsystems to modules on 4.14.
In setup_net() there are a few particularly slow subsystems that
contribute more than 140ms of time to the new net namespace creation
path.  The docker daemon doesn't depend on these, and won't modprobe
them into the kernel.  Convert these to modules to reduce the amount of
time it takes for docker to start a container.  This change takes an
additional ~120 ms of time off container start time.

Signed-off-by: Krister Johansen <krister.johansen@oracle.com>
2018-08-20 17:45:54 -07:00
Krister Johansen
fac99683a7 Switch kernel hz to 1000.
While investigating performance problems around 'docker run' times, it
was observed that a large amount of time was spent in network namespace
creation.  Of that time, a large portion involved waiting for RCU grace
periods to elapse.  Increasing HZ causes the periodic timer to check for
quiesced periods more frequently, which consequently reduces the amount
of time RCU callers spend waiting for grace periods and in barrier
waits.

By itself, this change took the amount of time to execute a 'docker run
hello-world' down to 570ms from over 2000ms on 4.14, and down to 390ms
from 1260 on 4.17 and 4.18.

Signed-off-by: Krister Johansen <krister.johansen@oracle.com>
2018-08-20 17:45:03 -07:00
Rolf Neugebauer
38766bf2b9
Merge pull request #3163 from rn/kernel-up
Update kernels, Intel ucode and add 4.18.x kernels
2018-08-20 17:32:42 +01:00
Mario Loriedo
62c46e10f2 Fix typo in examples/docker-for-mac.md
Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>
2018-08-20 18:29:09 +02:00
Rolf Neugebauer
6a4d5c970d tests: Update YAMLs to latest kernel config package
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2018-08-18 15:47:28 +01:00
Rolf Neugebauer
d003df7b91 tests/kernel-config: Adjust STACKPROTECTOR check for 4.18
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2018-08-18 15:42:38 +01:00
Rolf Neugebauer
c6a5439c67 tests: Update bcc test
This updates the package to versions which actually exist
on hub but does not enable the test.

Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2018-08-18 10:56:38 +01:00
Rolf Neugebauer
ab48e4d5e4 Update YAMLs to latest kernels
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2018-08-17 21:17:04 +01:00
Rolf Neugebauer
64f7e544df tests: Add 4.18.x kernel module test
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2018-08-17 21:13:25 +01:00
Rolf Neugebauer
509e07e63e tests: Add 4.18.x kernel config test
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2018-08-17 21:11:54 +01:00
Rolf Neugebauer
4977514c99 tests: Compact kernel tests
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2018-08-17 21:10:46 +01:00
Rolf Neugebauer
bcd87f6f33 kernel: Remove 4.17.x kernel for s390x and arm64
4.17 will be EOLed soon anyway so save some cycles
compiling kernels on the "slower" arches.

Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2018-08-17 21:07:08 +01:00
Rolf Neugebauer
dfa6076900 kernel: Add support for 4.18.x kernels
The kernel config was derived from the 4.17.x kernel config
and then tweaked a little. Specifically:
- Enable XDP_SOCKETS
- Enable NFT_CONNLIMIT
- Enable IP_VS_MH
- Enable BPFILTER (as module)

Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2018-08-17 16:57:36 +01:00
Rolf Neugebauer
a3bca0ea59 kernel: Add more packages to Dockerfile.kconfig
These packages are needed to enable the GCC_PLUGINS
during 'make oldconfig' for 4.18.x kernels.

Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2018-08-17 16:57:36 +01:00
Rolf Neugebauer
f93fa6ba9b kernel: Adjust 4.9 kernel config (x86 only)
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2018-08-17 16:57:36 +01:00
Rolf Neugebauer
85369b936f kernel: Adjust 4.14. kernel config (x86 only)
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2018-08-17 16:57:36 +01:00
Rolf Neugebauer
c0fc7b3b01 kernel: Adjust 4.17 kernel config (x86 only)
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2018-08-17 16:57:36 +01:00
Avi Deitcher
a9da8c624d
Merge pull request #3162 from deitch/update-compose
Update and fix compose project
2018-08-17 15:19:38 +03:00
Rolf Neugebauer
a1380fcd1c kernel: Update to 4.17.15/4.14.63/4.9.120/4.4.148
The 4.14.63 contains important security fixes in particular
against L1TF (CVE-2018-3615, CVE-2018-3620, CVE-2018-3646) and
userspace-userspace SpectreRSB.

Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2018-08-17 12:11:04 +01:00
Rolf Neugebauer
5011c473ca kernel: Update Intel microcode to latest
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2018-08-17 11:58:42 +01:00
Avi Deitcher
219e9ec727 Fix static where it tries to delete read-only containers
Signed-off-by: Avi Deitcher <avi@deitcher.net>
2018-08-17 13:33:35 +03:00
Rolf Neugebauer
4792fa5015 kernel: Tidy up Dockerfile.bcc
Use less layers and group it a little better. There should
be no real code change here.

Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2018-08-17 11:18:38 +01:00
Rolf Neugebauer
c0aecf8f26
Merge pull request #3101 from kmjohansen/topics/ebpf
Enable building of bcc in kernel build
2018-08-16 14:57:43 +02:00
Krister Johansen
6e48041dee Add a test case for bcc to packages.
Signed-off-by: Krister Johansen <krister.johansen@oracle.com>
2018-08-13 17:18:56 -07:00
Krister Johansen
0643093f6a Remove ebpf from projects
Signed-off-by: Krister Johansen <krister.johansen@oracle.com>
2018-08-13 17:18:56 -07:00
Krister Johansen
a6ac644703 Add some documentation.
Signed-off-by: Krister Johansen <krister.johansen@oracle.com>
2018-08-13 17:18:55 -07:00
Krister Johansen
188595fcb5 Pull bcc into kernel build.
Signed-off-by: Krister Johansen <krister.johansen@oracle.com>
2018-08-13 17:18:55 -07:00
Krister Johansen
194fef33cf Get bcc project building again.
Signed-off-by: Krister Johansen <krister.johansen@oracle.com>
2018-08-13 11:28:44 -07:00
Rolf Neugebauer
50904b9f9d
Merge pull request #3150 from djs55/revendor-virtsock
Update the vendoring of virtsock
2018-08-13 17:46:00 +02:00
David Scott
4f389eb5a6 Update yamls following virtsock revendor
linuxkit/vsudd:98e554e4f3024c318e42c1f6876b541b654acd9f
linuxkit/host-timesync-daemon:613dc55e67470ec375335a1958650c3711dc4aa6
linuxkit/test-virtsock:57883002c2bc824709efa6cd3818e1ff51a11889
linuxkit/test-ns:a21f996641f391d467a7842e85088a304d24fae5

Signed-off-by: David Scott <dave.scott@docker.com>
2018-08-13 14:16:47 +01:00
Rolf Neugebauer
972c41c4fa
Merge pull request #3158 from rn/dock-up
Update all uses of DinD to 18.06.0-ce
2018-08-12 23:18:16 +02:00
Rolf Neugebauer
ff02f6eaa8
Merge pull request #3157 from zx2c4-forks/wireguard-bump
wireguard: upgrade to 0.0.20180809
2018-08-12 12:40:09 +02:00
Rolf Neugebauer
0cb45e0dff doc: Update release doc with DinD uses which should get updated
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2018-08-12 10:50:20 +01:00
Rolf Neugebauer
e392ccce5c tests: Update docker bench to 18.0.6-ce
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2018-08-12 10:42:37 +01:00
Rolf Neugebauer
971c7fb251 examples: Update all DinD uses to 18.06.0-ce
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2018-08-12 10:42:03 +01:00
Jason A. Donenfeld
d987c058bd wireguard: upgrade to 0.0.20180809
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2018-08-12 01:27:53 -07:00
Rolf Neugebauer
086aa356e7
Merge pull request #3156 from rn/july-report
July 2018 report
2018-08-11 18:51:43 +02:00
Rolf Neugebauer
2eefd6db67
Merge pull request #3155 from rn/kups
Update kernels up to 4.17.14/414/62/4.9.119/4.4.147
2018-08-11 18:51:29 +02:00
Rolf Neugebauer
11d95b61d8 July 2018 report
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2018-08-11 11:56:06 +01:00
Rolf Neugebauer
468cbef99d Update YAMLs to the latest kernels
Signed-off-by: Rolf Neugebauer <rn@rneugeba.io>
2018-08-11 11:09:47 +01:00