Commit Graph

4610 Commits

Author SHA1 Message Date
Justin Cormack
305aa129d2 Merge pull request #2354 from ebriand/fix-aws-push
Fix AWS push
2017-08-04 11:22:27 +01:00
Justin Cormack
991da54ccc Merge pull request #2352 from riyazdf/sig-video-alpine
sig-security: add video for alpine SIG
2017-08-04 10:25:31 +01:00
Eric Briand
5e53f548a1 Fix AWS push
Signed-off-by: Eric Briand <eric.briand@gmail.com>
2017-08-04 10:36:00 +02:00
Rolf Neugebauer
d22b74240b Merge pull request #2350 from rn/multi-arch
Grand conversion to multi-arch manifests
2017-08-03 23:28:09 +01:00
Rolf Neugebauer
633195cbe3 Update YAML files with new multi-arch packages
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-08-03 17:46:11 +01:00
Rolf Neugebauer
fee2a62f26 pkg: Disable some packages for arm64
They either won't work or the packages are specific
to x86_64 like the DfM or VMware packages.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-08-03 17:46:11 +01:00
Rolf Neugebauer
e44783fea1 pkg: Update alpine base for all packages
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-08-03 17:46:10 +01:00
Rolf Neugebauer
aa44e41587 docs: Update docs, add document about packages
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-08-03 17:46:10 +01:00
Riyaz Faizullabhoy
b68f7e6dc5 sig-security: add video for alpine SIG
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-08-03 09:42:16 -07:00
Rolf Neugebauer
07cdcfeb65 Update all test YAML files with new multi-arch test packages
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-08-03 17:36:22 +01:00
Rolf Neugebauer
551e43294f tests: Update alpine base to multi-arch
The following packages did not work on aarch64:
- linuxkit/test-docker-bench
- linuxkit/test-ltp
- linuxkit/test-ns
- linuxkit/test-virtsock

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-08-03 17:36:22 +01:00
Rolf Neugebauer
684ad6778d cmd: Use qemu multi-arch image for qemu runner
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-08-03 17:36:22 +01:00
Rolf Neugebauer
473d544996 tools: Update remaining tools to the multi-arch base
linuxkit/mkimage-iso-bios did not work
on aarch64 (no syslinux) and will error.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-08-03 17:36:22 +01:00
Rolf Neugebauer
0ebb53c491 build: Add the ability to only build/push/sign for specific architectures
A package makefile can specify a list of architectures ('ARCHES')
it supports. If build on a unsupported architecture, a message is
printed and make exits without an error.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-08-03 17:36:22 +01:00
Rolf Neugebauer
b271a3b91f build: Add makefile to ./test/pkg
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-08-03 17:36:22 +01:00
Rolf Neugebauer
981def7c7a build: Add show-tag and forcetag targets to pkg Makefile
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-08-03 17:36:22 +01:00
Rolf Neugebauer
a1892cd8f1 kernel: Convert kernel build to a multi-arch image
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-08-03 17:36:22 +01:00
Rolf Neugebauer
b0df2c94ae build: Use multi-arch go-compile to compile tools
This now completes the steps to bootstrap the other
packages with multi-arch as we now have the tools both
on arm64 and amd64.

Also update vendoring doc with new hash

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-08-03 17:36:22 +01:00
Rolf Neugebauer
6adde26d62 tools/go-compile: Convert to multi-arch
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-08-03 17:36:22 +01:00
Rolf Neugebauer
c8e0d2ca28 pkg: Add invocation to push-manifest to generic package build
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-08-03 17:36:22 +01:00
Rolf Neugebauer
6d4162343a scripts: Add a script to push and sign manifests
Also adjust the 'linuxkit/alpine' script to follow the
same pattern.

The new version of the script extract username/password from
the credential helper (or docker) and build and 'expect'
script to feed the info to 'notary'.

They can be invoked by:
DOCKER_CONTENT_TRUST_REPOSITORY_PASSPHRASE="phrase" ./push-manifest.sh ...

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-08-03 17:36:21 +01:00
Justin Cormack
dc91e84223 Merge pull request #2347 from justincormack/less-binfmt
Remove binfmt from most examples
2017-08-03 17:33:49 +01:00
Justin Cormack
af9698506d Merge pull request #2348 from tych0/sig-security-2017-08-02
add notes from security sig yesterday
2017-08-03 17:33:39 +01:00
Rolf Neugebauer
47af521e14 Merge pull request #2343 from justincormack/x-sys-unix-rngd
rngd improvements
2017-08-03 15:45:40 +01:00
Justin Cormack
44439a77a4 Merge pull request #2346 from justincormack/cdroms
Support multiple CDROMS in metadata
2017-08-03 15:43:25 +01:00
Tycho Andersen
ccd9a9be24 add notes from security sig yesterday
Signed-off-by: Tycho Andersen <tycho@docker.com>
2017-08-03 08:18:13 -06:00
Justin Cormack
842d089a1b Remove binfmt from most examples
It is not in any wa=y a required container, and now that arm64
and other architecture machines are widely available we should
start to deprecate it, as it has many issues, eg requires patches
to qemu for Go support, will mislabel images etc.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-08-03 15:06:49 +01:00
Justin Cormack
db20aad611 update metadata hashes
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-08-03 14:39:04 +01:00
Justin Cormack
4434ecc4af Support multiple CDROMS in metadata
This checks if any CDROM in the system has metadata. Useful if
you boot off CDROM and also have a metadata CDROM.

Also switch the metadata container to read only, as it is only
writing to bind mounted in directories, and /tmp.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-08-03 14:16:02 +01:00
Justin Cormack
b886cd0da5 Merge pull request #2344 from yankcrime/openstack_push_env_vars
[OpenStack] Inherit env vars for push, and make run more consistent with other providers
2017-08-03 09:36:19 +01:00
Nick Jones
f65a4e803d
Update OpenStack run and push support
This commit updates the support for pushing images into OpenStack by
inheriting environment variables for endpoint and authentication
information, when available.

It also attempts to make the `openstack run` support more consistent
with other providers (specifically GCP and AWS), i.e just take the name
of the image as the argument and launch an instance using that.

Finally, it also updates the relevant documentation for OpenStack
support.

Signed-off-by: Nick Jones <nick@dischord.org>
2017-08-02 22:45:38 +01:00
Justin Cormack
075dd61efe update rngd hashes
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-08-02 21:03:46 +01:00
Justin Cormack
f768ac4bfd Add flags to disable the different random sources
This makes testing the different options much easier.

Signed-off-by: Justin Cormack <justin@specialbusservice.com>
2017-08-02 20:55:36 +01:00
Justin Cormack
63798997f6 Convert rngd to use x/sys/unix
Epoll in `syscall` package does not work on arm64. We do not have
arm64 yet here, but we will when we add tpm support etc.

Signed-off-by: Justin Cormack <justin@specialbusservice.com>
2017-08-02 20:09:43 +01:00
Justin Cormack
497d0b0dd2 Merge pull request #2341 from justincormack/authorsup
Update AUTHORS
2017-08-02 17:05:17 +01:00
Justin Cormack
063bdbf945 Update AUTHORS
Thanks to all our new contributors!

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-08-02 15:55:04 +01:00
Justin Cormack
550bf41d0b Merge pull request #2337 from zacheryph/qemu-pidfile
save qemu pid in state directory
2017-08-02 15:53:17 +01:00
Justin Cormack
66b81a5205 Merge pull request #2338 from yankcrime/run_openstack
Initial support for launching instances on OpenStack
2017-08-02 15:50:06 +01:00
Justin Cormack
570d706486 Merge pull request #2339 from justincormack/iso-files
Unpack filesystem for BIOS ISO
2017-08-02 15:47:59 +01:00
Justin Cormack
b47e0226ed Update Moby to use new ISO unpacking
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-08-02 14:47:41 +01:00
Nick Jones
a6f3f99d72
Initial support for launching instances on OpenStack
This commit provides rudimentary support for launching instances on an
OpenStack platform.

Signed-off-by: Nick Jones <nick@dischord.org>
2017-08-02 14:40:38 +01:00
Zachery Hostens
dd0c340264
update cleanup to use -depth option
Signed-off-by: Zachery Hostens <zacheryph@gmail.com>
2017-08-02 08:04:40 -05:00
Rolf Neugebauer
aa8938c08c Merge pull request #2334 from ijc/kubernetes
projects/kubernetes: fixup and bump to kube 1.7.2
2017-08-02 13:50:19 +01:00
Justin Cormack
2b045f59fe Unpack filesystem for BIOS ISO
Now that LinuxKit works on a truly immutable filesystem, for an
ISO it makes sense to use the ISO filesystem rather than using
an initrd. Only major difference is you may need to specify the
device for the root filesystem in the kernel command line, but
we set a sane default of `/dev/sr0` if unspecified.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-08-02 13:28:35 +01:00
Ian Campbell
007fb04406 kubernetes: do not bind /run as rbind,rshared.
There are no mounts here which need propagating

Signed-off-by: Ian Campbell <ijc@docker.com>
2017-08-02 10:32:46 +01:00
Rolf Neugebauer
07157efb9d Merge pull request #2335 from rn/multi-base
Create a multi-arch alpine base image
2017-08-01 22:38:08 +01:00
Riyaz Faizullabhoy
e21b2a99ca Merge pull request #2336 from rn/gcs-up
LCOW: Update GCS to the latest version
2017-08-01 10:33:08 -07:00
Zachery Hostens
aa48795203
save qemu pid in state directory
Signed-off-by: Zachery Hostens <zacheryph@gmail.com>
2017-08-01 11:23:43 -05:00
Rolf Neugebauer
4a8052ad54 blueprints: Update LCOW blueprint to latest version
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-08-01 17:11:25 +01:00
Rolf Neugebauer
767ac54971 pkg/init-lcow: Update opengcs to the latest version
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-08-01 17:06:12 +01:00