github/linuxkit
1
0
Fork 0
mirror of https://github.com/linuxkit/linuxkit.git synced 2026-01-13 22:39:39 +00:00
Code Issues Projects Releases Wiki Activity
1,821 Commits 1 Branch 31 Tags
c75041820090593adb2651b370ff3e18ea95eaa8
Commit Graph

84 Commits

Author SHA1 Message Date
Justin Cormack
c750418200 Update kernel to 4.9.1 
This has various security updates which do potentially affect
containerised application security see
https://cdn.kernel.org/pub/linux/kernel/v4.x/ChangeLog-4.9.1

estimated medium severity.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-01-06 18:02:06 +00:00
Justin Cormack
3930ad787b Add a kernel-dev tarball with kernel headers 
These headers are needed for defining kernel probes etc, tested with
eBPF. Could also be used for perf, building kernel modules etc. Saved
to the media tarball at present, may add to base image or container.

Also rationalise the paths in the headers tarball a little to match.

Will add an eBPF container using these later.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2017-01-04 12:10:30 +00:00
Justin Cormack
4ac42402e5 Update base images to Alpine 3.5 
excludes
- Go base images as not yet available
- perf which does not build with latest image

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-28 18:09:08 +00:00
Justin Cormack
f953ad780c Update AUFS kernel to 4.9 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-21 21:59:07 +00:00
Rolf Neugebauer
d3889c2445 build: update packages to new alpine-build-c base 
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
 2016-12-16 16:21:39 +00:00
Justin Cormack
3b774e3657 Make AUFS optional and ship choice of kernels 
This seems the best option, although none are great

- build with `make AUFS=1` to build with AUFS support, currently with 4.8 kernel
- default is to build without AUFS support, with 4.9 kernel

This recognises that AUFS supprot is temporary #620 and only there until
we can phase it out on desktop editions, and allow the other editions that
never shipped with AUFS to ship something very close to mainline.

However we do still apply the patches so that the non AUFS branch runs fine on
all platforms, so it can be tested elsewhere.

We may be able to move the kernel versions back in line when 4.9 aufs support is out.

Plan is to shift CI to build both sets of images, and get the Desktop editions to
pick up the aufs set automatically, once this is merged.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-13 18:23:45 -08:00
Justin Cormack
2be21dcc78 Update to Linux 4.8.14 
Includes fix for CVE-2016-8655 Linux af_packet.c race condition.

This gives a container escape with default container capabilities.

This now has the slow network namespace patch backported, so this
is removed.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-10 16:18:47 -08:00
Justin Cormack
5fb7594217 Keep kernel headers from build 
Also upload some kernel artefacts to a private repo at mobylinux/kernel on Hub for scanning.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-08 17:32:59 -08:00
Justin Cormack
f870b6641b Update to Linux 4.8.12 
- security update

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-12-02 14:12:06 +00:00
Riyaz Faizullabhoy
4011d4842a Use digests instead of tags where possible 
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
 2016-12-01 09:39:02 -08:00
Justin Cormack
b9acf524f9 Update to Linux 4.8.11 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-28 15:00:20 +00:00
Justin Cormack
5ad066803b Upgrade Linux to 4.8.10 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-21 15:03:48 +00:00
Justin Cormack
d5c822f4f9 Update Linux to 4.8.9 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-19 22:37:22 +00:00
Justin Cormack
41caff5065 update c build base image 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-18 23:32:47 +00:00
Rolf Neugebauer
4b02dc7ada kernel: update to 4.8.8 
This removes all the patches which have been upstreamed since 4.4.x
and only leaves patches for a minor fix to AF_VSOCK, the Hyper-V socket patch
and a new patch for fixing delays on creating netns with tunnel interfaces.

The latter has been accecpted into the upstream netdev branch and will
likely appear in 4.9.0 and we can cherry pick from there then.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
 2016-11-18 12:58:17 +00:00
Justin Cormack
40202381f2 Update to Linux 4.4.32 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-15 10:27:18 +00:00
Justin Cormack
ab5a4b580c update Linux to 4.4.31 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-12 16:30:44 +00:00
Justin Cormack
d81f00b125 Update kernel config 
- remove unused graphics options
- move W^X test to debug kernel #685
- reboot on kernel panic fix #660

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-08 16:12:29 +00:00
Justin Cormack
5866d4a83b update Linux to 4.4.30 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-01 20:50:12 +00:00
Justin Cormack
50a64ac6c4 make curl fail on 404 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-11-01 13:58:02 +00:00
Justin Cormack
933cfbf2db Linux 4.4.29 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-10-31 13:12:43 +00:00
Justin Cormack
a2bb950d3f upgrade Linux to 2.4.28 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-10-28 14:09:20 +01:00
Justin Cormack
b2d6f54b9a Update to Linux 4.4.27 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-10-24 17:20:50 +01:00
Justin Cormack
b92ef47f94 Revert "kernel: update to 4.8.2" 
This reverts commit 0808e359df.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-10-24 17:20:02 +01:00
Justin Cormack
0df11f9311 Revert "Update Linux kernel to 4.8.3" 
This reverts commit 2f985f8306.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-10-24 17:19:30 +01:00
Justin Cormack
2a8c177f11 Revert "Linux 4.8.4" 
This reverts commit 2db93ebbc7.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-10-24 17:19:12 +01:00
Justin Cormack
27790f5299 Linux 4.8.4 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-10-22 17:05:20 +01:00
Justin Cormack
d6195e4db0 Update Linux kernel to 4.8.3 
Fix Dirty COW.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-10-21 09:35:09 +01:00
Justin Cormack
2409adfe0a update C build base images for Musl update 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-10-20 13:23:12 +01:00
Rolf Neugebauer
6983bb3e7a kernel: update to 4.8.2 
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
 2016-10-18 16:23:33 +01:00
Justin Cormack
ca047291ff update to Linux 4.4.25 
Signed-off-by: Justin Cormack <justin@specialbusservice.com>
 2016-10-16 22:19:37 +01:00
Justin Cormack
e7b9428589 set -j on kernel build again 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-10-11 16:27:55 +01:00
Justin Cormack
a68ad29880 Update Linux to 4.4.24 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-10-08 13:48:29 +02:00
Justin Cormack
8de1b3d040 update kernel to 4.4.23 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-10-01 21:03:47 +01:00
Justin Cormack
e1454f0249 add ncurses to C build for menuconfig 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-10-01 18:26:38 +01:00
Justin Cormack
0214c41ff3 Use patched aufs-utils so can compile kernel with alpine 
This is going to be submitted upstream.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-09-29 16:17:46 +01:00
Justin Cormack
a80281b5e9 Update Linux kernel to 4.4.22 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-09-26 00:01:53 +01:00
Rolf Neugebauer
593d3f907e linux: update kernel to 4.4.21 
- removed some Hyper-V patches which were picked up
  between 4.4.20 and 4.4.21
- udate aufs

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
 2016-09-19 18:20:28 +01:00
Justin Cormack
654e47ad1c reorder kernel Dockerfile 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-09-13 21:15:34 +01:00
Justin Cormack
955aad6276 Use a random tag for Debian kernel build base 
To store all the old images they need a different tag, so use a
random one.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-09-12 16:36:01 +01:00
Justin Cormack
35070c03f7 Use a base image for building kernel 
As we do not have a simple way to hash Debian, use the Docker
sha256 until we switch to Alpine.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-09-12 16:36:01 +01:00
Justin Cormack
91fbb9c245 revert to debian for kernel build 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-09-12 16:36:01 +01:00
Justin Cormack
b392bf0a2e Simplify kernel output and main Dockerfile 
Signed-off-by: Justin Cormack <justin@specialbusservice.com>
 2016-09-12 16:02:07 +01:00
Justin Cormack
30275af07e Update kernel and aufs 
- kernel 4.4.20
- aufs 20160905

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-09-07 22:51:51 +01:00
Justin Cormack
07bf4888c1 quieter kernel build 
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-08-31 15:53:16 +01:00
Justin Cormack
69f290d28f Remove support for arm kernel build 
See #449. Plan is to use upstream Alpine kernel for Arm, as
does not need vsock, hvsock or aufs.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-08-31 14:23:40 +01:00
Justin Cormack
3628e60d54 Update build containers to Ubuntu 16.10 
Should update to Alpine in future.

Signed-off-by: Justin Cormack <justin@specialbusservice.com>
 2016-08-23 19:53:11 +01:00
Justin Cormack
32acad99a7 Update kernel and aufs 
- Linux 4.4.19
- AUFS 20160822

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2016-08-22 11:05:07 +01:00
David Sheets
296d1e10c7 kernel: apply debug configuration to all kernels 
Signed-off-by: David Sheets <dsheets@docker.com>
 2016-08-10 17:08:07 +01:00
David Sheets
661c19649a kernel: add a Makefile DEBUG variable and a kernel_config for debugging 
Signed-off-by: David Sheets <dsheets@docker.com>
 2016-08-10 17:07:48 +01:00