Commit Graph

1072 Commits

Author SHA1 Message Date
Justin Cormack
b042b5127f Revert "Format filesystems earlier, before syslog"
This reverts commit 4dd5dca106.

Fix #710 where system hangs after klogd startup on AWS. Possibly
also affects Windows too. Still unclear why but lets revert and
continue investif=gating.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-12 15:29:27 +00:00
Justin Cormack
43d956c201 Update base image
- tar update

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-08 21:06:45 +00:00
Justin Cormack
454733e025 Merge pull request #705 from justincormack/kernel-tweaks
Update kernel config
2016-11-08 18:34:59 +00:00
Justin Cormack
2be2b4b08f Merge pull request #683 from nathanleclaire/make_vhd_build_more_bearable
Add support for building smaller Azure VHD for development
2016-11-08 16:26:10 +00:00
Justin Cormack
d81f00b125 Update kernel config
- remove unused graphics options
- move W^X test to debug kernel #685
- reboot on kernel panic fix #660

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-08 16:12:29 +00:00
Justin Cormack
e3169f68d7 Merge pull request #703 from justincormack/move-disk-format
Format filesystems earlier, before syslog
2016-11-08 15:30:53 +00:00
Justin Cormack
9a95224681 Format filesystems earlier, before syslog
So that we can write to /var early, move filesystem formatting as early as possible.

Adds a dummy fsck service, as we already do fsck in format script.

Replaces #535

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-08 15:20:46 +00:00
Justin Cormack
85fd9a96ae Remove lvm2 package
We have no lvm support, so not needed.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-08 10:48:44 +00:00
Justin Cormack
db3be17a84 Remove bind tools
We are not using these anywhere, busybox provides some of them.

Avoids security warnings.

Rework of #684

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-08 10:14:07 +00:00
Justin Cormack
dc8b40f0e1 Update base image
- bind update
- edge packages moved to 3.5

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-08 10:09:10 +00:00
Justin Cormack
6132c69857 Keep vmlinux in build media for kernel debugging
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-07 14:45:37 +00:00
Justin Cormack
218e345136 Curl security update
Upgrade to 7.51, fix the following CVEs

  CVE-2016-7141, CVE-2016-7167, CVE-2016-8615, CVE-2016-8616,
  CVE-2016-8617, CVE-2016-8618, CVE-2016-8619, CVE-2016-8620,
  CVE-2016-8621, CVE-2016-8622, CVE-2016-8623, CVE-2016-8624

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-06 19:32:19 +00:00
Nathan LeClaire
b737435985 Add support for building smaller Azure VHD for development
Signed-off-by: Nathan LeClaire <nathan.leclaire@gmail.com>
2016-11-04 17:14:33 -07:00
Justin Cormack
a7d223768c Improve matching of mounted drive in diagnostics
Was failing on AWS as drive did not match patter that was too precise.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-04 14:09:12 +00:00
Justin Cormack
95b62daa5a Update check-config script
Now returns error if checks do not pass.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-04 09:40:15 +00:00
Nathan LeClaire
a2278219ef Migrate default storage account
Signed-off-by: Nathan LeClaire <nathan.leclaire@gmail.com>
2016-11-02 16:30:36 -07:00
Justin Cormack
9512b2fa84 Merge pull request #672 from justincormack/configup
Update check-config script
2016-11-02 21:11:36 +00:00
Nathan LeClaire
56e0bdad03 Merge pull request #579 from justincormack/vhdfix2
Use alpine to do raw2vhd
2016-11-02 13:26:00 -07:00
Justin Cormack
e30acbc517 Merge pull request #670 from justincormack/ipvsadm
Add ipvsadm for debugging
2016-11-02 20:09:07 +00:00
Justin Cormack
1d71d7c3e1 Update check-config script
Now misses the ext3 error messages.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-02 20:05:48 +00:00
Justin Cormack
fed22cee00 Split out Windows network config from hostsettings
On cloud editions eg AWS settings may come from the network, so
we need to move this to after network setup, while the Windows
network config changes need to happen before, so split the init script.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-02 14:49:24 +00:00
Justin Cormack
7c43ec4d01 Add ipvsadm for debugging
Fix #437

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-02 00:10:16 +00:00
Justin Cormack
5866d4a83b update Linux to 4.4.30
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-01 20:50:12 +00:00
Justin Cormack
9b58a9921b Merge pull request #663 from justincormack/curl-fail
make curl fail on 404
2016-11-01 19:55:55 +00:00
Justin Cormack
72d1aef471 fsck filesystem before mount
Use fsck -p to fix errors that are fixable.

Note this will recreate the filesystem on fatal errors.

Fix #665

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-01 16:01:08 +00:00
Justin Cormack
50a64ac6c4 make curl fail on 404
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-01 13:58:02 +00:00
Justin Cormack
fbebf2a131 Add a base image for building AMIs
Faster and more repeatable. As the Alpine edge package is not
working, use pip.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-11-01 13:26:44 +00:00
Justin Cormack
805a5fa48a Merge pull request #657 from justincormack/kernelup
Linux 4.4.29
2016-10-31 13:41:41 +00:00
Justin Cormack
de2d7626d9 Merge pull request #653 from justincormack/audit
Add audit to kernel config
2016-10-31 13:15:49 +00:00
Justin Cormack
933cfbf2db Linux 4.4.29
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-10-31 13:12:43 +00:00
Justin Cormack
53e367326b Increase neighbor cache threshold values
Needed for larger clusters.

Needed for https://github.com/docker/editions/issues/377

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-10-28 22:25:36 +01:00
Justin Cormack
62a738a965 Add audit to kernel config
Currently just has syscall audit as no LSM.

See #52

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-10-28 18:12:51 +01:00
Justin Cormack
a2bb950d3f upgrade Linux to 2.4.28
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-10-28 14:09:20 +01:00
Justin Cormack
249df1e912 Add check-config container and test
Currently the test will never fail, planning to fix this upstream.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-10-28 12:39:31 +01:00
Justin Cormack
eec756c494 Add Memory Resource Controller Kernel Memory accounting cgroup support
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-10-28 11:06:07 +01:00
Justin Cormack
f84493af64 Merge pull request #636 from justincormack/ppp0
Additional requested kernel features
2016-10-27 13:11:01 +01:00
Justin Cormack
cc903c3fa5 Add dependency to Makefile for Docker
The Docker version is in the Makefile su always re-upload if changed.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-10-27 11:29:31 +01:00
Justin Cormack
2df41c24e2 Merge pull request #638 from justincormack/docker-1.12.3
update Docker to 1.12.3
2016-10-27 09:25:50 +01:00
Justin Cormack
e08b05b0ad update Docker to 1.12.3
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-10-27 09:14:20 +01:00
Justin Cormack
9deed26ba6 Additional requested kernel features
- PPP https://github.com/docker/for-mac/issues/851
- NBD for infinit
- extra virtualisation options

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-10-26 17:00:24 +01:00
Justin Cormack
65b7194e13 Add mutiple pts support
I think this may have got mangled in the kernel upgrade/downgrade.

diff file is still messy due to version changes.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-10-26 15:08:14 +01:00
Justin Cormack
2d7ec8903d Merge pull request #633 from justincormack/docker-1.12.3-rc1
Update to docker 1.12.3-rc1
2016-10-25 10:17:16 +01:00
Justin Cormack
5f4d354b10 Update to docker 1.12.3-rc1
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-10-25 10:06:52 +01:00
Justin Cormack
b2d6f54b9a Update to Linux 4.4.27
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-10-24 17:20:50 +01:00
Justin Cormack
b92ef47f94 Revert "kernel: update to 4.8.2"
This reverts commit 0808e359df.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-10-24 17:20:02 +01:00
Justin Cormack
0df11f9311 Revert "Update Linux kernel to 4.8.3"
This reverts commit 2f985f8306.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-10-24 17:19:30 +01:00
Justin Cormack
2a8c177f11 Revert "Linux 4.8.4"
This reverts commit 2db93ebbc7.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-10-24 17:19:12 +01:00
Justin Cormack
964f235150 Add more trace functions to kernel config
Also disable Hyper-V memory ballooning, enable some mroe security options.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-10-24 12:43:41 +01:00
Justin Cormack
27790f5299 Linux 4.8.4
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-10-22 17:05:20 +01:00
Justin Cormack
3208cca326 go fmt
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-10-21 15:35:10 +01:00