github/linuxkit
1
0
Fork 0
mirror of https://github.com/linuxkit/linuxkit.git synced 2025-12-26 02:02:47 +00:00
Code Issues Projects Releases Wiki Activity
3,374 Commits 1 Branch 31 Tags
a99a3ad3cf6dcd28dcc3a7bdd567e126ce025173
Commit Graph

45 Commits

Author SHA1 Message Date
Rolf Neugebauer
a6d834ddf0 Merge pull request #1865 from justincormack/go-compile 
more Go compile fixes
 2017-05-21 11:18:45 +01:00
Rolf Neugebauer
4377ae3209 Merge pull request #1861 from justincormack/containerd-build 
Update containerd
 2017-05-21 11:13:07 +01:00
Justin Cormack
e52bf2f745 Update sysctl and sysfs in yaml files 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-05-20 11:16:48 +01:00
Justin Cormack
702ad5d9d9 Update git hashes for sysctl 
And remove all the config options as they are now in the label.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-05-19 22:05:15 +01:00
Justin Cormack
a3ea4646e5 Update containerd in yaml files 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-05-19 11:52:12 +01:00
Rolf Neugebauer
6bea56c185 Update all YAML files to use the new packages 
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
 2017-05-18 18:55:22 +01:00
Ian Campbell
5eee4c0607 pkg/runc: WORKDIR as first item in second stage 
Works around https://github.com/moby/moby/issues/33176 and fixes #1807.

Updated al users of linuxkit/runc:2649198589ef0020d99f613adaeda45ce0093a38 to
this new build.

Signed-off-by: Ian Campbell <ian.campbell@docker.com>
 2017-05-12 19:23:27 +01:00
Justin Cormack
6a5f8099a4 Remove extra files from init 
fix #1807

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-05-12 15:36:13 +01:00
Justin Cormack
66d6d3a6e3 Update containers to use containerd 
Now the issues seem fixed, switch over to containerd.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-05-11 11:25:06 +01:00
Justin Cormack
9ca3ba489a Update yaml files to new Docker CE 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-05-09 11:12:39 +01:00
Justin Cormack
61bbbf0808 Change containerd and runc to use multistage builds from new Alpine base 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-05-08 22:37:59 +01:00
Rolf Neugebauer
423957cfef Update YAML files to new packages 
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
 2017-05-08 16:49:39 +01:00
Rolf Neugebauer
21f1646ce2 Update YAML files with new package hashes 
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
 2017-05-04 22:27:59 +01:00
Justin Cormack
3bd53067fb Update yaml files with new ca-certificates 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-05-03 16:43:24 +01:00
Justin Cormack
a37fd19f88 Adjust docker-ce package 
Bring it into line with official images: remove `jq`, `sfdisk` which
are not needed; we used them for disk mounting but this is down standalone.
Add the tools for other filesystems, which are needed for `dm`, `btrfs`.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-05-02 14:37:04 +01:00
Riyaz Faizullabhoy
664ebae2bd Verify newly signed binfmt and/or rngd images on build for examples and 
tests

Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2017-04-26 12:09:33 -07:00
Justin Cormack
713046e158 Update ca-certificates to be based on Alpine and use nested build 
We were using Debian but Alpine more consistent. Use nested build.

Currently extract the hash in a nasty way but this can be fixed later
when we switch over hashing method.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-04-26 15:24:26 +01:00
Rolf Neugebauer
cb732e7f80 YAML: Update files to use the new binfmt package 
Checked that /proc/sys/fs/binfmt_misc/status is enabled for
architectures specified.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
 2017-04-25 15:55:10 +01:00
Rolf Neugebauer
3ba9d8064b YAML: Update standard yml files to use the new rngd image 
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
 2017-04-24 18:41:27 +01:00
Justin Cormack
f8a6193845 Move more images to new hub org 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-04-16 20:28:33 -05:00
Justin Cormack
72c3f9cfa2 More renames to LinuxKit 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-04-14 11:47:24 -05:00
Riyaz Faizullabhoy
9609010ea8 Also update ymls 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2017-04-13 09:17:14 -07:00
Justin Cormack
e4213f1582 Merge pull request #1602 from justincormack/slash-rshared 
Make / rshared
 2017-04-12 13:39:31 +01:00
Justin Cormack
3c326bebdf Make / rshared 
Previously only `/var` was `rshared` but some people need to share
mounts in `/opt` etc so let us make everything `rshared` for now.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-04-12 13:10:46 +01:00
Rolf Neugebauer
b0629176ab examples: Don't use a file section if you don't need it 
Exception is ./moby.yaml where it serves as an example.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
 2017-04-12 12:26:30 +01:00
Rolf Neugebauer
a59e24b4fa example: Don't use the full @sha25t version of images 
The sha1 tag should be sufficient to uniquely identify the image
and the sha256 versions are just very long...

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
 2017-04-12 12:24:02 +01:00
Justin Cormack
f9a13a2fc3 Merge pull request #1576 from justincormack/openntpd 
Add openntpd container
 2017-04-10 21:38:46 +01:00
Justin Cormack
a3ec9e86df Add openntpd container 
Added to Docker example as Swarm mode likes time sync.

Note uses pool.ntp.org at present, on some providers it
should use a different source.

Constraints not enabled as they seem to have an issue;
possibly trying to set before network is up.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-04-10 20:32:59 +01:00
Riyaz Faizullabhoy
5f90faeafa init: update main moby example and tests 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2017-04-10 11:59:23 -07:00
Justin Cormack
3afe494ae9 Merge pull request #1567 from justincormack/sysfs 
Add a sysfs container and fix memory hierarchy
 2017-04-10 17:59:37 +01:00
Justin Cormack
bc23fde1c2 Use the real default containerd toml config 
Rather than an empty one.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-04-10 16:25:13 +01:00
Justin Cormack
efd1efe531 Add a sysfs container 
However, do not try to change memory cgroups from it; this needs to be in `init`.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-04-10 14:33:38 +01:00
Justin Cormack
9ee52aa966 Rework how /var is mounted 
Instead of mounting a new filesystem, revert to doing a `rw` bind.

However do not make `/` `rshared`, just `/var` as that is where we expect
filesystems to be mounted for persistence. Also only make the actual
container rootfs writeable, not the whole directory.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-04-10 11:28:00 +01:00
Justin Cormack
f079f7a7cd Update to new init container with mount changes 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-04-09 13:52:45 +01:00
Justin Cormack
b2a3215e5f Update Docker image to use mount image not do mount itself 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-04-09 13:50:04 +01:00
Justin Cormack
e0aced6be0 Merge pull request #1550 from justincormack/rootfs-mountpoint 
Make each rootfs a mountpoint by binding
 2017-04-09 09:52:23 +01:00
Justin Cormack
fb5d6a8fad Add an (empty) config file for containerd 
It needs one now.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-04-08 21:38:31 +01:00
Justin Cormack
c40351a0a8 Make each rootfs a mountpoint by binding 
Otherwise shared mounts do not work correctly with `runc`.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-04-08 21:10:30 +01:00
Justin Cormack
eb22d6909f system → onboot daemon → services 
As suggested by @shykes these are clearer

- onboot for things that are run at boot time to completion
- services for persistent services

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-04-08 16:56:47 +01:00
Riyaz Faizullabhoy
a947ded0fb Enforce content trust with trust key and yaml subkeys for image and org 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2017-04-07 16:29:25 -07:00
Justin Cormack
a54a694772 Split out init to have standalone runc, containerd 
Also add ca-certificates to base, needed to use `dist` to pull.

Make two stage builds for `containerd` and `runc` so they have a
from `scratch` second stage.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-04-07 16:25:18 +01:00
Justin Cormack
d9faecdee9 Make init accept a list of images not just a single one. 
fix #1527

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-04-07 14:25:28 +01:00
Thomas Gazagnaire
226d394d15 update runc to version ac50e77bbb440dcab354a328c79754e2502b79ca 
Signed-off-by: Thomas Gazagnaire <thomas@gazagnaire.org>
 2017-04-07 11:46:34 +02:00
Riyaz Faizullabhoy
8ba64546eb Remount rootfs as read-only after init, /var and /containers mounted as 
read-write

Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2017-04-06 09:30:46 -07:00
Justin Cormack
cf7b952995 Add persistent drive support to Docker container 
This works and runs containers now, if you eg `runc exec` into it.
Needs a few tweaks for rlimits, but will pull and run containers.

Will integrate better with ssh/dev containers to make more usable.

For a simple test use
```
./bin/moby build examples/docker.yml
./bin/moby run hyperkit -disk-size 100 docker

```

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-04-06 14:25:42 +01:00