github/linuxkit
1
0
Fork 0
mirror of https://github.com/linuxkit/linuxkit.git synced 2026-04-11 17:02:10 +00:00
Code Issues Projects Releases Wiki Activity
1,784 Commits 1 Branch 32 Tags
9f250c43fee119bf9e13b066e72833f02395bd97
Commit Graph

758 Commits

Author SHA1 Message Date
Justin Cormack
cab1767a27 Merge pull request #915 from riyazdf/golinting 
Add golint, gofmt, govet
 2016-12-21 19:35:31 +00:00
Riyaz Faizullabhoy
6245780591 Move linting to Go build 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-12-21 11:26:33 -08:00
Riyaz Faizullabhoy
0736e139d2 Add lint docker image for golang linting and testing to individual package subdirs 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-12-20 15:00:08 -08:00
Riyaz Faizullabhoy
3245eaca67 Revert "Bumps for azure 1.13.0-rc4-beta14" 
This reverts commit 2197b7b7c6.

Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-12-19 17:42:32 -08:00
Nathan LeClaire
2197b7b7c6 Bumps for azure 1.13.0-rc4-beta14 
Signed-off-by: Nathan LeClaire <nathan.leclaire@gmail.com>
 2016-12-19 17:19:32 -08:00
Riyaz Faizullabhoy
f2a1c0dd24 Add golint, make linting top-level 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-12-19 16:13:02 -08:00
Riyaz Faizullabhoy
9eadb18715 Add gofmt, govet 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-12-19 15:17:37 -08:00
Justin Cormack
140913cd93 Remove extraneous docker rm 
fix #879

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-19 17:08:33 +00:00
Justin Cormack
a345f6e23e Support Docker 1.12 on OSX 
I had occasion to use a Moby build of 1.12 on Docker for Mac today
and I had to patch this in. Given that we re-added support for 1.12
for cloud, for CS, may as well support on OSX too as we are still
doing releases.

The fix is a bit messy (hence the flag), as it writes to the file
system but we will remove it later, or work around the write if
we need to continue to support 1.12 outside the 1.12.x branch.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-17 00:02:45 -08:00
Justin Cormack
7471ecc9ec Update Docker to 1.13.0-rc4 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-16 21:40:38 -08:00
Justin Cormack
ce4e2cdf61 Merge pull request #901 from rneugeba/perf 
Add Linux perf utility
 2016-12-16 13:31:47 -08:00
Rolf Neugebauer
0c38fd266e build: update packages to new alpine-build-c base 
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
 2016-12-16 16:21:39 +00:00
Simon Ferquel
6ed33ba4ba Remove vsudd output from the console. 
vsudd is quite verbose, and we are confident enough about its stability.
This will clean Pinata logs as well indirectly

Signed-off-by: Simon Ferquel <simon.ferquel@docker.com>
 2016-12-16 15:53:20 +01:00
David Sheets
212c58cf13 transfused: use memcmp instead of a loop for checking init message 
Signed-off-by: David Sheets <dsheets@docker.com>
 2016-12-15 11:03:29 +00:00
David Sheets
e6a66eaef8 transfused: use read_exactly in subproto reading 
Signed-off-by: David Sheets <dsheets@docker.com>
 2016-12-15 11:03:29 +00:00
David Sheets
274e119da8 transfused: use read_exactly in init thread message reading 
Signed-off-by: David Sheets <dsheets@docker.com>
 2016-12-15 11:03:29 +00:00
David Sheets
f071e2bfde transfused: factor read_exactly out of read_message 
Signed-off-by: David Sheets <dsheets@docker.com>
 2016-12-15 11:03:29 +00:00
David Sheets
3474639a4f transfused: minor formatting fixup 
Signed-off-by: David Sheets <dsheets@docker.com>
 2016-12-15 11:03:29 +00:00
David Sheets
78544eb1ae transfused: replace brittle init control message writing with write_exactly 
Signed-off-by: David Sheets <dsheets@docker.com>
 2016-12-15 11:03:29 +00:00
David Sheets
125c3941eb transfused: replace brittle event pid writing with write_exactly 
Signed-off-by: David Sheets <dsheets@docker.com>
 2016-12-15 11:03:29 +00:00
David Sheets
1b6ee65a02 transfused: improve write_exactly error handling 
Signed-off-by: David Sheets <dsheets@docker.com>
 2016-12-15 11:03:29 +00:00
David Sheets
2414966689 transfused: improve read_message robustness 
Signed-off-by: David Sheets <dsheets@docker.com>
 2016-12-15 11:03:29 +00:00
Justin Cormack
1e9a594516 Merge pull request #877 from justincormack/swap-safety 
Make sure we do not create a swap file if /var not mounted
 2016-12-13 16:25:57 -08:00
Justin Cormack
46dfc28a3a Only default to experimental if dockerd supports it 
This allows 1.12 engine to still be supported on master.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-13 14:45:13 -08:00
Justin Cormack
5fa6f8cb2b Make sure we do not create a swap file if /var not mounted 
See #875

This will only happen if there has been some sort of error
before, but lets not make it worse.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-13 09:49:13 -08:00
Justin Cormack
9897241118 Improve mkfs options 
- make quiet
- force, so some adjustments are not checked see https://github.com/docker/pinata/issues/6198
- set resize_inode as we do resize partitions on cloud and they could have very few inodes otherwise
- inline all the default options and remove the config file, so script is more standalone

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-12 10:36:49 -08:00
Justin Cormack
f3e3a4029b Containerize test suite 
- run test suite under containerd
- in future this should be converted to Go not shell see #860
- test suite is now in its own initrd, can be run on any platform not just qemu

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-09 17:13:16 -08:00
Riyaz Faizullabhoy
a470b655d1 Set CONFIG_LEGACY_VSYSCALL to NONE and vsyscall=emulate 
Regenerated the kernel config from container, which bumped the kernel
version and included some other fixes.  Also bumps the check-config
container to check for VSYSCALL_NATIVE

Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-12-09 12:09:35 -08:00
Nathan LeClaire
695061e4d0 Bump Azure SHA for v.1.13.0-rc3-beta13 
Signed-off-by: Nathan LeClaire <nathan.leclaire@gmail.com>
 2016-12-08 12:37:08 -08:00
Riyaz Faizullabhoy
8ac566901d Change -1 to 1 in DOCKER_CONTENT_TRUST value 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-12-07 17:28:52 -08:00
Justin Cormack
5503a0c966 Update Docker to 1.13.0-rc3 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-05 20:31:16 -08:00
Nathan LeClaire
3a4c93118c Merge pull request #746 from justincormack/no-2375 
Stop Docker listening on port 2375
 2016-12-05 13:43:36 -08:00
Nathan LeClaire
9d86c3d1c8 Bump digest and re-add DOCKER_FOR_IAAS_VERSION for Azure 
Signed-off-by: Nathan LeClaire <nathan.leclaire@gmail.com>
 2016-12-02 18:30:33 -08:00
Justin Cormack
0cdb8e7a84 Merge pull request #762 from simonferquel/vsudd_dontretry_on_dockerd 
[vsudd] Don't retry when dockerd is not running
 2016-12-02 08:23:23 -08:00
Justin Cormack
b2d3e6fa4a Merge pull request #828 from justincormack/azure-quoting 
Missing quote in azure init script
 2016-12-02 06:12:54 -08:00
Justin Cormack
f247551d52 Missing quote in azure init script 
Fix #826

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-02 14:03:21 +00:00
Justin Cormack
bf1c21e045 Run rngd inside a system container 
- this needs an init as it does not respond to stop signals, so include tini
- needs CAP_SYS_ADMIN to write to kernel entropy estimate
- set kernel.random.write_wakeup_threshold so that rngd does not need sysctl write access
- build patches from Alpine, but statically linked
- remove rngd from base image, means we no longer need community repository

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-02 14:00:12 +00:00
Justin Cormack
89efaa4fe7 Merge pull request #825 from justincormack/go-up 
Update to Go 1.7.4
 2016-12-02 01:59:39 -08:00
Justin Cormack
79e6f8c95d Update to Go 1.7.4 
Security update.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-02 09:51:36 +00:00
Riyaz Faizullabhoy
cb1ebba19d Bump windows azure linux agent to include openssl config swapping logic 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-12-01 19:15:50 -08:00
Justin Cormack
116179c895 Merge pull request #820 from riyazdf/digests-and-trust 
Use digests for external images and scripts where possible
 2016-12-01 12:57:32 -08:00
Riyaz Faizullabhoy
8b7cdd41dc Use digests instead of tags where possible 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-12-01 09:39:02 -08:00
Riyaz Faizullabhoy
49a2fc6017 Use DCT in library run command 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-12-01 09:27:01 -08:00
Justin Cormack
ea4809a647 Use DOCKER_CONTENT_TRUST=1 when pulling library images 
When building the base images always test signatures.

This will be the default at some point.

Add a test that content trust is working.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-30 13:35:38 +00:00
Justin Cormack
3e6301f501 Containerize binfmt_misc 
- statically make containerd symlinks so rootfs can be read only
- run binfmt_misc in a containerd container
- ship arm, aarch64, ppc64le qemu static versions that always "just work" as this is supported in Linux 4.8

fix #53

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-30 12:49:37 +00:00
Simon Ferquel
2287d5d7d2 Redirect vsudd stdout/stderr to console 
Signed-off-by: Simon Ferquel <simon.ferquel@docker.com>
 2016-11-30 10:31:11 +01:00
Simon Ferquel
d40570f976 [vsudd] Don't retry when dockerd is not running 
Signed-off-by: Simon Ferquel <simon.ferquel@docker.com>
 2016-11-30 10:31:11 +01:00
Justin Cormack
71c4b1a07c Use shell to execute userdata 
/tmp is mounted `noexec`, just use the shell to execute the userdata.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-29 15:19:09 +00:00
Justin Cormack
a10937be11 Fix directories under /var after formatting 
- /var/lock test
- add /var/cache subdirectories
- move old boot2docker directories

fix #801
fix #792

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-28 16:12:51 +00:00
Justin Cormack
abef0edf38 Use the upstream binfmt script not out custom one 
This makes the binfmt package much simpler, just a config file.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-28 13:53:14 +00:00