Commit Graph

980 Commits

Author SHA1 Message Date
Justin Cormack
c8da76aa02 openssl security update
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-09-27 10:15:50 +01:00
Justin Cormack
ce6ae3a70b fix checking for debug key exists
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-09-26 22:24:48 +01:00
Justin Cormack
9051236f4d Fix dhcp ntp on osx
1. Upstream issue in Alpine that default directory is not used.
2. dhcp appends ntp servers, so delete default first.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-09-26 21:39:20 +01:00
Justin Cormack
088cbeb78b Merge pull request #556 from justincormack/kernelup
Update Linux kernel to 4.4.22
2016-09-26 12:14:24 +01:00
Justin Cormack
24042ad443 Update alpine-base
Seems insignificant, should probably improve hash function, as
ordering only visibly changed.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-09-26 00:27:24 +01:00
Justin Cormack
a80281b5e9 Update Linux kernel to 4.4.22
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-09-26 00:01:53 +01:00
Justin Cormack
ff57ad7789 Merge pull request #531 from rneugeba/hvtools-out
remove special hack hvtools
2016-09-24 14:29:55 +01:00
Justin Cormack
635d99d243 Add weekly cron job to TRIM drive
See #536

This is the recommended frequency. For desktop this might be less
suitable, so we may want to adjust

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-09-24 14:18:49 +01:00
Justin Cormack
69beeca467 Copy docker-init if present
Fix #552

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-09-23 18:11:05 +01:00
Justin Cormack
07103e7e62 Switch to dhcpcd
Should fix issue with not sending hostname which Azure needs.

This should be requesting all the dhcp features we currently use.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-09-23 15:52:30 +01:00
Justin Cormack
af2bc73551 remove dhcpcd as was running anyway
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-09-23 13:34:17 +01:00
Rolf Neugebauer
fa0104c04c base: update manifest
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-09-23 11:11:07 +01:00
Rolf Neugebauer
8666f6c9f4 packages: add hvtools from edge/testing
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-09-23 11:03:40 +01:00
Rolf Neugebauer
c9594c5a02 packages: remove hvtools
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-09-23 11:03:40 +01:00
Justin Cormack
041da8cf1b Merge pull request #546 from rneugeba/if-clean
Clean up network interface
2016-09-23 10:41:15 +01:00
French Ben
8a8fa5a7b4 initial how-to build vhd 2016-09-22 16:24:58 -07:00
Rolf Neugebauer
803be36b96 net: consolidate DHCP onto eth0 only
- rename DfW main interface eth0
- remove eth1 DHCP config
- create tap device in init script not interfaces file

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-09-22 18:12:45 +01:00
Justin Cormack
519438f982 Merge pull request #545 from justincormack/update-alpine-add-more
Update base image
2016-09-22 18:09:14 +01:00
Justin Cormack
a62f4ce7dd Update base image
- fix `df` failing with overlay
- four more openssl CVEs
- add dhcpcd (unused)
- add openssh server (unused)

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-09-22 16:42:06 +01:00
Justin Cormack
cac5f969a1 Do not fail if disk is partitioned but has no swap
Fix #543

Also clean up quoting and unused parts a little.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-09-22 16:30:28 +01:00
Rolf Neugebauer
b5e38ce811 net: rename Hyper-V internal network to hvint0 and configure it
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-09-22 16:17:26 +01:00
Justin Cormack
7c84387b80 Merge pull request #540 from justincormack/local
Enable local service
2016-09-22 16:05:39 +01:00
Justin Cormack
602c9266f9 Sort list of packages
fix #537

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-09-22 13:42:09 +01:00
Justin Cormack
b46eb7f3d9 Enable local service
Files in `/etc/local.d/` will be executed:

If a file in this directory is executable and it has a .start extension,
it will be run when the local service is started. If a file is
executable and it has a .stop extension, it will be run when the local
service is stopped.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-09-22 13:39:10 +01:00
Justin Cormack
2d483a20b0 Standalone make iso image, rather than build+run
Simpler to have an image that takes the kernel and initrd as input,
rather than building them into the image.

The rest need converting.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-09-22 13:12:23 +01:00
Ken Cochrane
c1b826d248 Added missing ENV variables to AMI build
Signed-off-by: Ken Cochrane <KenCochrane@gmail.com>
2016-09-20 19:09:09 -04:00
Ken Cochrane
8f87c5c223 Added changes to support nightly builds for AWS 2016-09-20 15:20:09 -04:00
Justin Cormack
8683f7119c Merge pull request #528 from justincormack/manifest
Add package manifest for base image
2016-09-20 13:08:52 +01:00
Justin Cormack
6488328b69 Add package manifest for base image
See #527

Easy to see what has been updated via diffs.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-09-20 12:48:34 +01:00
Justin Cormack
6c5e2e47a1 Merge pull request #526 from justincormack/update-base
update base image
2016-09-20 12:18:08 +01:00
Justin Cormack
540bfe2d2e update base image
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-09-20 09:49:43 +01:00
Justin Cormack
ed88a46f97 Increase default fs.aio-max-nr
As recommended by Oracle for MySQL.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-09-19 23:38:26 +01:00
Rolf Neugebauer
593d3f907e linux: update kernel to 4.4.21
- removed some Hyper-V patches which were picked up
  between 4.4.20 and 4.4.21
- udate aufs

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-09-19 18:20:28 +01:00
Justin Cormack
f8315e40b4 better dependency checking for etc
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-09-16 17:02:53 +01:00
Justin Cormack
468c8ba010 Add rngd
Tweak the config to use RDSEED or (fallback) RDRAND. Makes sure
we have initial random seed in cases where there is no other
random source if these are supported.

The default config in Alpine currently disables these, which makes
it pretty useless, as there is no motherboard rng support any more.

Replaces #517
Fix #514
Fix #183

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-09-16 15:32:56 +01:00
Justin Cormack
94cf16b4e9 Merge pull request #465 from rneugeba/c-style
Unify C coding style to the Linux kernel coding style (mostly)
2016-09-16 13:18:36 +01:00
Justin Cormack
a81485c79f Add curl to base
We need this to self host if you specify a custom version of Docker.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-09-16 12:54:03 +01:00
Rolf Neugebauer
e2e123e464 tap-vsockd: better error handling
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-09-16 11:02:29 +01:00
Rolf Neugebauer
839a65c0bd 9pmount: Don't init variables if they are unconditionally assigned later
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-09-16 11:02:29 +01:00
Rolf Neugebauer
3c30271f3c transfused: Use Linux coding style (mostly)
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-09-16 11:02:29 +01:00
Rolf Neugebauer
1a289d04e5 tap-vsockd: Use Linux coding style (mostly)
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-09-16 11:02:29 +01:00
Rolf Neugebauer
6df7fae1a9 9pmount: Use Linux coding style (mostly)
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-09-16 11:02:29 +01:00
Justin Cormack
4b9b8295c5 Explicitly set the apk repositories we use
Previously we used the defaults (main and community) but we
currently only need main, but are likely to need some packages
from edge soon.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-09-16 10:58:54 +01:00
Justin Cormack
530125e0f9 Merge pull request #477 from nathanleclaire/there_is_no_volume_only_tar
Build without bind mounts for cloud editions
2016-09-15 16:06:49 +01:00
Justin Cormack
4a4a40f1df add random-seed database key
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-09-15 13:16:51 +01:00
Nathan LeClaire
a6e3f92b95 Migrate cloud build off of bind mounts
Signed-off-by: Nathan LeClaire <nathan.leclaire@gmail.com>
2016-09-14 15:38:05 -07:00
Justin Cormack
023d9c624c Merge pull request #508 from justincormack/autologin
Do not prompt for username at login
2016-09-14 13:51:07 +01:00
Justin Cormack
9305b37153 Do not prompt for username at login
Given you can login as root with no password on the console,
asking which user you would like to login as is rather pointless.

Do have to tweak /etc/issue though as busybox getty does not display it
without a prompt, and we want a whale.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-09-14 11:38:55 +00:00
Justin Cormack
b1c0981634 Merge pull request #510 from justincormack/nolog
No log driver for large copies
2016-09-14 12:35:25 +01:00
Ian Campbell
81b86d111a kernel: Replace vsock email series with upstream patches
The vsock patches were merged into mainline in v4.8-rc1, replace the patches
based on the email posting with cherry-picks. The patches appear identical so
the only change here is to the annotation of the origin which now references an
upstream commit instead of a message-id.

Add one new upstream patch b226acab2f6a "VSOCK: Use kvfree()"

Signed-off-by: Ian Campbell <ian.campbell@docker.com>
2016-09-14 10:03:10 +01:00