github/linuxkit
1
0
Fork 0
mirror of https://github.com/linuxkit/linuxkit.git synced 2025-10-27 04:32:13 +00:00
Code Issues Projects Releases Wiki Activity
2,884 Commits 1 Branch 31 Tags
a06e6bbb37e0a20ef35d78d64e145f891db1cb15
Commit Graph

174 Commits

Author SHA1 Message Date
Justin Cormack
c5c6c26b3f Merge pull request #1610 from samoht/sdk-roadmp 
miragesdk: update roadmap
 2017-04-12 19:40:47 +01:00
Thomas Gazagnaire
1e83a9f9b4 miragesdk: update roadmap 
Signed-off-by: Thomas Gazagnaire <thomas@gazagnaire.org>
 2017-04-12 17:47:42 +02:00
Rolf Neugebauer
a1ce71cd0a Update YAML files with new metadata package 
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
 2017-04-12 16:20:41 +01:00
Justin Cormack
45c2921c7c Merge pull request #1606 from rneugeba/meta2 
Improve/Fix metadata package and use it
 2017-04-12 15:55:54 +01:00
Justin Cormack
c01d0e2777 Merge pull request #1587 from errordeveloper/kubernetes 
Kubernetes with Weave CNI networking
 2017-04-12 15:50:04 +01:00
Rolf Neugebauer
0cd867d315 demo: Update etcd YAML to new metadata package 
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
 2017-04-12 15:42:48 +01:00
Thomas Gazagnaire
238879f2d4 miragesdk: add temporary auto-gen files 
The capnp compiler is not yet available in alpine.

Signed-off-by: Thomas Gazagnaire <thomas@gazagnaire.org>
 2017-04-12 16:29:49 +02:00
Thomas Gazagnaire
a0546bba88 miragesdk: use cap-n-proto instead of custom binary protocol for calf/priv API 
Signed-off-by: Thomas Gazagnaire <thomas@gazagnaire.org>
 2017-04-12 16:29:49 +02:00
Ilya Dmitrichenko
385f1a6634 Use LinuxKit 
Signed-off-by: Ilya Dmitrichenko <errordeveloper@gmail.com>
 2017-04-12 15:08:16 +01:00
Ilya Dmitrichenko
340e97ae53 Kubernetes with Weave CNI networking 
For the time being I've decided to exploit shared mounts to make
`/opt/cni` and `/etc/cni` work as expected. We need these directories
to appear writable on the host, and allow Weave Net pod to bind-mount
out them in order to install plugin binaries, and allow for vanilla
CNI plugins to be also accessible to kubelet.

Signed-off-by: Ilya Dmitrichenko <errordeveloper@gmail.com>
 2017-04-12 15:02:03 +01:00
Thomas Gazagnaire
0a18bf3a00 miragesdk: update to latest base init 
Signed-off-by: Thomas Gazagnaire <thomas@gazagnaire.org>
 2017-04-12 15:56:29 +02:00
Justin Cormack
e4213f1582 Merge pull request #1602 from justincormack/slash-rshared 
Make / rshared
 2017-04-12 13:39:31 +01:00
Thomas Gazagnaire
2cc09805c9 Merge pull request #1543 from samoht/mac 
miragesdk: do not generate a random mac
 2017-04-12 14:29:19 +02:00
Justin Cormack
3c326bebdf Make / rshared 
Previously only `/var` was `rshared` but some people need to share
mounts in `/opt` etc so let us make everything `rshared` for now.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-04-12 13:10:46 +01:00
Rolf Neugebauer
b0629176ab examples: Don't use a file section if you don't need it 
Exception is ./moby.yaml where it serves as an example.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
 2017-04-12 12:26:30 +01:00
Rolf Neugebauer
a59e24b4fa example: Don't use the full @sha25t version of images 
The sha1 tag should be sufficient to uniquely identify the image
and the sha256 versions are just very long...

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
 2017-04-12 12:24:02 +01:00
Thomas Gazagnaire
dc4ff8accd miragesdk: update DHCP client example to use latest images 
Signed-off-by: Thomas Gazagnaire <thomas@gazagnaire.org>
 2017-04-12 12:09:30 +02:00
Thomas Gazagnaire
2b0009ee06 miragesdk: be a bit less verbose in debug mode 
It's not very interesting to see the forwarded stdout/stderr messages as
they will end-up being printed anyway.

Signed-off-by: Thomas Gazagnaire <thomas@gazagnaire.org>
 2017-04-12 12:08:32 +02:00
Thomas Gazagnaire
b18d50b5e4 miragesdk: rebase init pkg to catch up with upstream changes 
Signed-off-by: Thomas Gazagnaire <thomas@gazagnaire.org>
 2017-04-12 12:06:50 +02:00
Thomas Gazagnaire
396ffabc41 miragesdk: tune down some debug code 
Signed-off-by: Thomas Gazagnaire <thomas@gazagnaire.org>
 2017-04-12 11:04:33 +02:00
Thomas Gazagnaire
df9833ed68 miragesdk: add missing Sdk.Net files 
Probably my inconscient which refused to show the world these hacks.

Signed-off-by: Thomas Gazagnaire <thomas@gazagnaire.org>
 2017-04-12 11:04:16 +02:00
Thomas Gazagnaire
abe96b0447 miragesdk: use the interface's MAC address instead of using a random one 
The priv container populate the `/mac` key on startup, that the calf can
then read.

Also add more fine-grained control over read/write delete capabilities attached
to the routes, e.g. the calf can read /mac but not write to it.

Signed-off-by: Thomas Gazagnaire <thomas@gazagnaire.org>
 2017-04-12 11:04:16 +02:00
Thomas Gazagnaire
0d7e584e32 miragesdk: remove dead-code and code repetition 
Signed-off-by: Thomas Gazagnaire <thomas@gazagnaire.org>
 2017-04-12 11:04:16 +02:00
Thomas Gazagnaire
95d362ab7e miragesdk: clean error handling for Sdk.Ctl.Client 
Signed-off-by: Thomas Gazagnaire <thomas@gazagnaire.org>
 2017-04-12 11:04:16 +02:00
Thomas Gazagnaire
703657a54f miragesdk: update Dockerfiles 
Signed-off-by: Thomas Gazagnaire <thomas@gazagnaire.org>
 2017-04-12 11:04:16 +02:00
Justin Cormack
f47bc385c6 Merge pull request #1588 from rneugeba/meta-up 
demo: Switch etcd to use metadata
 2017-04-11 20:08:16 +01:00
Rolf Neugebauer
049993fc3d demo: Switch etcd to use metadata 
Also add more services.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
 2017-04-11 19:10:32 +01:00
Justin Cormack
25f8036bc4 Merge pull request #1585 from errordeveloper/kubernetes 
Basic multi-node Kubernetes cluster
 2017-04-11 16:17:31 +01:00
Ilya Dmitrichenko
52ba02b9c8 Basic multi-node support 
Signed-off-by: Ilya Dmitrichenko <errordeveloper@gmail.com>
 2017-04-11 15:42:57 +01:00
Justin Cormack
2c7628c101 Support dhcpcd in one shot mode as well 
This is needed for cloud environments that want to get their metadata in
the onboot phase over the network.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-04-11 14:58:57 +01:00
Ilya Dmitrichenko
89b8021f62 Create /var/lib/kubelet at runtime, after /var is mounted 
Signed-off-by: Ilya Dmitrichenko <errordeveloper@gmail.com>
 2017-04-11 13:59:38 +01:00
Ilya Dmitrichenko
7bcca5cf7f Sync with examples/doecker.yml 
Signed-off-by: Ilya Dmitrichenko <errordeveloper@gmail.com>
 2017-04-11 13:59:37 +01:00
Ilya Dmitrichenko
73a29022ce Cache Kubernetes images, update image names, add boot-master.sh 
Signed-off-by: Ilya Dmitrichenko <errordeveloper@gmail.com>
 2017-04-11 13:59:30 +01:00
Justin Cormack
64933fa292 Merge pull request #1572 from errordeveloper/kubernetes 
Working single-node Kubernetes setup
 2017-04-11 09:56:35 +01:00
Ilya Dmitrichenko
85b54d5717 Fix shared mounts – working single-node Kubernetes setup 
Signed-off-by: Ilya Dmitrichenko <errordeveloper@gmail.com>
 2017-04-11 09:43:07 +01:00
Riyaz Faizullabhoy
5f90faeafa init: update main moby example and tests 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2017-04-10 11:59:23 -07:00
Ilya Dmitrichenko
91c4278c77 Use new modular init containers, flatten kubelet image 
Signed-off-by: Ilya Dmitrichenko <errordeveloper@gmail.com>
 2017-04-10 17:43:12 +01:00
Justin Cormack
84034a0370 Merge pull request #1570 from justincormack/containerd-toml-default 
Use the real default containerd toml config
 2017-04-10 17:32:36 +01:00
Justin Cormack
bc23fde1c2 Use the real default containerd toml config 
Rather than an empty one.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-04-10 16:25:13 +01:00
Rolf Neugebauer
34af633552 infrakit: rename the Moby property to kernel+initrd 
The infrakit plugin is not specific to Moby and should be able
to boot other Linux systems as long as a kernel image and
initial RAM disk are supplied. Reflect this in the property
passed to the plugin.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
 2017-04-10 16:12:08 +01:00
Justin Cormack
bd5780e46d Merge pull request #1565 from justincormack/var-rework-again 
Rework how /var is mounted
 2017-04-10 14:27:40 +01:00
Rolf Neugebauer
29ad037125 demo: Remove jq and sfdisk from etcd image 
They are no longer needed as the mounting happens in the
mount container.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
 2017-04-10 11:41:17 +01:00
Justin Cormack
9ee52aa966 Rework how /var is mounted 
Instead of mounting a new filesystem, revert to doing a `rw` bind.

However do not make `/` `rshared`, just `/var` as that is where we expect
filesystems to be mounted for persistence. Also only make the actual
container rootfs writeable, not the whole directory.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-04-10 11:28:00 +01:00
Justin Cormack
ce70127028 Merge pull request #1561 from riyazdf/landlock-makefile-dockerfile 
Landlock: kernel build materials and example yml
 2017-04-10 10:48:37 +01:00
Rolf Neugebauer
baab60ea87 demo: Update etcd to use the new mount container 
Rolling updates still work

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
 2017-04-09 20:50:10 +01:00
Riyaz Faizullabhoy
3aead78f36 landlock: example yml 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2017-04-09 12:09:06 -07:00
Riyaz Faizullabhoy
b95ca1b358 landlock: gitignore for kernel build 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2017-04-09 12:08:53 -07:00
Riyaz Faizullabhoy
f89bd06edb landlock: Makefile with kernel-landlock name 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2017-04-09 12:07:10 -07:00
Riyaz Faizullabhoy
1e9495e609 landlock: Dockerfile 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2017-04-09 12:06:48 -07:00
Mickaël Salaün
296a0f4560 landlock: Backport patches from the sixth series 
Backport from Linux v4.11-rc3-812-gc6bf33827b7d to Linux 4.9.20:
https://github.com/landlock-lsm/linux/commits/landlock-v6-linux-v4.9.20

Do not include documentation nor tests.

See built documentation here:
https://landlock-lsm.github.io/linux-doc/landlock-v6/security/landlock/index.html

Signed-off-by: Mickaël Salaün <mic@digikod.net>
Link: https://lkml.kernel.org/r/20170328234650.19695-1-mic@digikod.net
 2017-04-09 19:45:24 +02:00