Mickaël Salaün
c6b3c62b83
landlock: Link to project
...
Signed-off-by: Mickaël Salaün <mic@digikod.net>
2017-04-09 19:45:24 +02:00
Justin Cormack
60f84fb917
Merge pull request #1558 from justincormack/report-9-april
...
Add weekly report for 9 April 2017
2017-04-09 17:38:12 +01:00
Justin Cormack
6476ed0441
Add weekly report for 9 April 2017
...
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-04-09 17:00:40 +01:00
Justin Cormack
74b720a42a
Merge pull request #1557 from justincormack/mount-take-2
...
Make mount a standalone package, fix mount propagation
2017-04-09 16:02:24 +01:00
Justin Cormack
961c98e33e
Merge pull request #1521 from thebsdbox/qemu
...
CLI: Added qemu backend
2017-04-09 13:56:09 +01:00
Justin Cormack
f079f7a7cd
Update to new init container with mount changes
...
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-04-09 13:52:45 +01:00
Justin Cormack
b2a3215e5f
Update Docker image to use mount image not do mount itself
...
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-04-09 13:50:04 +01:00
Justin Cormack
bfa76205d5
Change propagation for root
...
- make / rshared
- make /containers private
- make /var its own tmpfs mountpoint, shared
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-04-09 13:50:04 +01:00
thebsdbox
01aa2abdd4
CLI: Added qemu backend
...
Signed-off-by: Dan Finneran <daniel.finneran@gmail.com>
2017-04-09 13:49:00 +01:00
Justin Cormack
3ffa912c41
Move mount back to its own package, not inside docker
...
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-04-09 12:53:46 +01:00
Rolf Neugebauer
48cb54d378
Merge pull request #1555 from rneugeba/nobinfmt
...
config: Remove unused binfmt container
2017-04-09 10:26:59 +01:00
Rolf Neugebauer
733e8f3307
config: Remove unused binfmt container
...
A few YAML files include the binfmt container, where it's not really
needed. Remove it to make the samples simpler.
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-04-09 10:09:00 +01:00
Justin Cormack
f45e7c898f
Merge pull request #1552 from riyazdf/trust-yaml-docs
...
Content Trust yaml docs and code improvements
2017-04-09 09:53:55 +01:00
Justin Cormack
df22e868c3
Merge pull request #1554 from riyazdf/landlock-project
...
landlock: start project, add roadmap doc
2017-04-09 09:52:53 +01:00
Justin Cormack
e0aced6be0
Merge pull request #1550 from justincormack/rootfs-mountpoint
...
Make each rootfs a mountpoint by binding
2017-04-09 09:52:23 +01:00
Riyaz Faizullabhoy
9effac329a
landlock: start project, add roadmap doc
...
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-04-08 20:05:39 -07:00
Riyaz Faizullabhoy
b1475d33bc
trust: add yaml docs
...
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-04-08 17:25:33 -07:00
Riyaz Faizullabhoy
7f79de1b6f
trust: clean up logic for digests and orgs
...
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-04-08 17:25:18 -07:00
Justin Cormack
f9c4c30142
Merge pull request #1551 from justincormack/containerd-toml
...
Add an (empty) config file for containerd
2017-04-08 21:49:19 +01:00
Justin Cormack
fb5d6a8fad
Add an (empty) config file for containerd
...
It needs one now.
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-04-08 21:38:31 +01:00
Justin Cormack
c40351a0a8
Make each rootfs a mountpoint by binding
...
Otherwise shared mounts do not work correctly with `runc`.
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-04-08 21:10:30 +01:00
Rolf Neugebauer
508f12350a
Merge pull request #1547 from rneugeba/demo-up
...
Update etcd demo
2017-04-08 20:49:38 +01:00
Rolf Neugebauer
875cb565e3
demo: Update etcd README
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-04-08 20:38:53 +01:00
Rolf Neugebauer
31a4156686
demo: Add formatting and mounting to etcd image
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-04-08 20:38:53 +01:00
Rolf Neugebauer
a3d20abdb6
demo: Add a disk to the etcd image
...
etcd works better with a persistent storage. So configure a
disk and add the formatting container to the image.
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-04-08 20:38:53 +01:00
Rolf Neugebauer
6407cf360b
demo: Update YAML files to new init section layout
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-04-08 20:37:17 +01:00
Rolf Neugebauer
eeae23e9de
infrakit: Create persistent disk if an InstanceID is provided
...
If the user specifies an InstanceID, we assume the instance is "named"
and, therefore, special. If the instance has a disk configured, create
it in the "disks" directory so that, if the same instance is recreated,
the disk image can be re-used.
This is consistent with other InfraKit plugins.
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-04-08 20:32:25 +01:00
Rolf Neugebauer
b5dd0315e2
demo: Make sure the infrakit 'cli' directory exists
...
Otherwise there is a warning on first use.
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-04-08 20:32:25 +01:00
Justin Cormack
3fca3823a7
Merge pull request #1549 from justincormack/onboot-services
...
system → onboot, daemon → services
2017-04-08 20:06:08 +01:00
Justin Cormack
2f7f274147
Merge pull request #1534 from justincormack/yaml-doc
...
Add initial overview of the yaml config
2017-04-08 20:05:35 +01:00
Justin Cormack
aa3e6fdc9f
Add initial overview of the yaml config
...
Needs expanding with more details, but a start.
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-04-08 17:14:07 +01:00
Justin Cormack
eb22d6909f
system → onboot daemon → services
...
As suggested by @shykes these are clearer
- onboot for things that are run at boot time to completion
- services for persistent services
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-04-08 16:56:47 +01:00
Justin Cormack
5956f7203a
Merge pull request #1548 from errordeveloper/debugging-with-ssh
...
Make sshd example usefull for debugging
2017-04-08 15:36:14 +01:00
Ilya Dmitrichenko
a3638a2b8f
Make sshd example usefull for debugging
...
Signed-off-by: Ilya Dmitrichenko <errordeveloper@gmail.com>
2017-04-08 12:49:51 +01:00
Justin Cormack
ff009335a2
Merge pull request #1512 from riyazdf/content-trust-enforcement
...
Content Trust enforcement on pull and run where specified for kernel
2017-04-08 10:07:06 +01:00
Justin Cormack
06ea4620d3
Merge pull request #1546 from errordeveloper/minor-updates
...
Minor updates
2017-04-08 10:04:28 +01:00
Justin Cormack
d889c554ca
Merge pull request #1545 from RobbKistler/target-consistency
...
Change hyperkit-test to test-hyperkit
2017-04-08 10:02:08 +01:00
Ilya Dmitrichenko
54835a1d67
Fix typo
...
Signed-off-by: Ilya Dmitrichenko <errordeveloper@gmail.com>
2017-04-08 05:53:31 +01:00
Ilya Dmitrichenko
12d6e38b48
Use directory: true
instead fo writing a dummy file
...
Signed-off-by: Ilya Dmitrichenko <errordeveloper@gmail.com>
2017-04-08 05:53:22 +01:00
Robb Kistler
99e1643c82
Change hyperkit-test to test-hyperkit
...
Other test targets are all `test-*`, should be consistent
Signed-off-by: Robb Kistler <robb.kistler@docker.com>
2017-04-07 19:04:36 -07:00
Riyaz Faizullabhoy
a947ded0fb
Enforce content trust with trust key and yaml subkeys for image and org
...
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-04-07 16:29:25 -07:00
Justin Cormack
d15a4e7370
Merge pull request #1541 from justincormack/no-make-h
...
Remove running instructions using make
2017-04-07 20:42:26 +01:00
Justin Cormack
6f40af776e
Merge pull request #1542 from justincormack/runc-containerd-split
...
Split out init to have standalone runc, containerd
2017-04-07 17:01:25 +01:00
Justin Cormack
a54a694772
Split out init to have standalone runc, containerd
...
Also add ca-certificates to base, needed to use `dist` to pull.
Make two stage builds for `containerd` and `runc` so they have a
from `scratch` second stage.
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-04-07 16:25:18 +01:00
Justin Cormack
24493812b1
Remove running instructions using make
...
These no longer work.
Needs updating once `qemu` support merged.
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-04-07 16:13:55 +01:00
Justin Cormack
6c748747d2
Merge pull request #1535 from dave-tucker/make
...
Allow CI to use moby run gcp
2017-04-07 16:03:46 +01:00
Rolf Neugebauer
69294dd41f
Merge pull request #1540 from rneugeba/demo2
...
Flushing my demo queue
2017-04-07 16:03:19 +01:00
Rolf Neugebauer
4520daa753
demo: Updated docs and added socat forwarding container
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-04-07 15:43:03 +01:00
Rolf Neugebauer
57f41c4b5a
demo: Update YAMLS files
...
New init for RO filesystem, updated DHCPD
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-04-07 15:43:03 +01:00
Rolf Neugebauer
f718d4195f
demo: Add URL to modified VPNKit
...
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-04-07 15:43:03 +01:00