6 Commits

Author	SHA1	Message	Date
Justin Cormack	933372e45a	Run rngd inside a system container ... - this needs an init as it does not respond to stop signals, so include tini - needs CAP_SYS_ADMIN to write to kernel entropy estimate - set kernel.random.write_wakeup_threshold so that rngd does not need sysctl write access - build patches from Alpine, but statically linked - remove rngd from base image, means we no longer need community repository Signed-off-by: Justin Cormack <justin.cormack@docker.com>	2016-12-02 14:00:12 +00:00
Justin Cormack	1ecdeeed44	Update to Go 1.7.4 ... Security update. Signed-off-by: Justin Cormack <justin.cormack@docker.com>	2016-12-02 09:51:36 +00:00
Justin Cormack	cb486e5cc5	Merge pull request #820 from riyazdf/digests-and-trust ... Use digests for external images and scripts where possible	2016-12-01 12:57:32 -08:00
Riyaz Faizullabhoy	4011d4842a	Use digests instead of tags where possible ... Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>	2016-12-01 09:39:02 -08:00
Justin Cormack	19e3dd4c60	Makefile cleanup for binfmt ... Remove duplication and simplify. Signed-off-by: Justin Cormack <justin.cormack@docker.com>	2016-12-01 15:23:03 +00:00
Justin Cormack	8d3691fabb	Containerize binfmt_misc ... - statically make containerd symlinks so rootfs can be read only - run binfmt_misc in a containerd container - ship arm, aarch64, ppc64le qemu static versions that always "just work" as this is supported in Linux 4.8 fix #53 Signed-off-by: Justin Cormack <justin.cormack@docker.com>	2016-11-30 12:49:37 +00:00