Commit Graph

5035 Commits

Author SHA1 Message Date
Ian Campbell
d4a91982ab Merge pull request #2633 from ijc/alpine-update
Alpine update
2017-10-24 14:49:02 +01:00
Ian Campbell
b170f62832 Updates for kube+swarmd projects rebuilt with new alpine
Signed-off-by: Ian Campbell <ijc@docker.com>
2017-10-24 11:49:13 +01:00
Ian Campbell
d465042bef Updates for test/pkg/* which are rebuilt with new alpine
Signed-off-by: Ian Campbell <ijc@docker.com>
2017-10-24 11:35:33 +01:00
Ian Campbell
d194639faf Updates for pkg/* which are rebuilt with new alpine
Signed-off-by: Ian Campbell <ijc@docker.com>
2017-10-24 11:05:58 +01:00
Ian Campbell
abbda95d06 Updates for tools/* which are rebuilt with new alpine
Signed-off-by: Ian Campbell <ijc@docker.com>
2017-10-24 10:25:07 +01:00
Ian Campbell
6c7b1c0251 Bump all packages to newest alpine.
Signed-off-by: Ian Campbell <ijc@docker.com>
2017-10-24 10:11:24 +01:00
Ian Campbell
12e4347bf7 alpine: rebuild
Picks up CVE-2017-15650 fix and some other updates.

Adds ipvsadm and bridge-utils (fixes: #2606).

Signed-off-by: Ian Campbell <ijc@docker.com>
2017-10-24 09:10:22 +00:00
Ian Campbell
c7c06541a7 Merge pull request #2629 from rn/kup
Kernel updates
2017-10-23 15:24:55 +01:00
Ian Campbell
abb9a2d7c5 Merge pull request #2630 from ijc/kubernetes
kuberenetes: Bump image cache to v1.8.1
2017-10-23 14:43:24 +01:00
Rolf Neugebauer
a52e29af1a Update .gitattributes with new kernel config name
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-10-23 11:23:05 +01:00
Ian Campbell
a571ae62e1 kubernetes: bump image cache hash.
Signed-off-by: Ian Campbell <ijc@docker.com>
2017-10-23 10:23:02 +01:00
Ian Campbell
76d655ebe4 kuberenetes: Bump image cache to v1.8.1
I forgot to do this in #2626.

Signed-off-by: Ian Campbell <ijc@docker.com>
2017-10-23 10:08:15 +01:00
Rolf Neugebauer
456f8f737d Update YAML files to latest kernels
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-10-22 19:49:15 +01:00
Rolf Neugebauer
89af138f18 kernel: Update to 4.13.9/4.9.58/4.4.94
Note: There were more conflicts in applying the
vmbus patches to 4.13. For now I've just skipped the
conflicting patches so the end-result may be that
Hyper-V sockets on 4.13 may break (if they were not
already broken by the update to 4.13.6).

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-10-22 19:49:15 +01:00
Rolf Neugebauer
12b8d9d6bd kernel: Update to 4.13.8/4.9.57/4.4.93
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-10-22 19:49:15 +01:00
Rolf Neugebauer
b4d2d36866 kernel: Remove the 4.4.x patches
The patches are for vsock and hvsock and anyone using these
should be using more modern kernels.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-10-22 19:49:14 +01:00
Rolf Neugebauer
4005564228 kernel: Drop 'kernel_' prefix from kernel config files
It's kinda obvious that these are kernel configuration files
and, looking at various other distros it seems more common
to call the files 'config-<foo>'.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-10-22 19:49:14 +01:00
Rolf Neugebauer
5afc16f275 kernel: Enable building kernels without patches
Copying the entire local directory into the container allows
us to check for the existence of the patch directory and
only apply the patches if the directory exists.

An alternative would have been to re-arrange the patch directory
into a sub-directory, but in terms of copying wouldn't have
made that much if a difference.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-10-22 19:49:14 +01:00
Rolf Neugebauer
ddbdb0aad7 kernel: Update to 4.13.7
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-10-22 19:49:14 +01:00
Rolf Neugebauer
0df77e4858 Merge pull request #2612 from rn/rpi3
Initial Raspberry Pi 3 support
2017-10-21 13:31:26 +02:00
Rolf Neugebauer
fc8e393feb Merge pull request #2627 from ijc/linuxkit-pkg-no-git
Improve `linuxkit pkg` handling of git
2017-10-20 22:22:13 +02:00
Rolf Neugebauer
0239672bb6 Merge pull request #2626 from ijc/kubernetes
Kubernetes: Bump to v1.8.1
2017-10-20 22:18:37 +02:00
Rolf Neugebauer
1a58f16465 Update YAML files to latest kernels
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-10-20 20:22:03 +01:00
Rolf Neugebauer
571dba104d kernel: Update to 4.13.6/4.9.56/4.4.92
NOTE: Some of the 4.13.x VMBus patches did not apply cleanly and they
were dropped for now. This may break LCOW and other Windows support.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-10-20 20:22:03 +01:00
Rolf Neugebauer
5609cdeae7 kernel: Update to 4.9.55
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-10-20 20:22:03 +01:00
Rolf Neugebauer
136dafe2c6 build: Update moby tool to latest
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-10-20 20:22:03 +01:00
Ian Campbell
ba3cc2fc6d linuxkit pkg: make ":latest" for non-git packages explicit
Signed-off-by: Ian Campbell <ijc@docker.com>
2017-10-20 17:18:00 +01:00
Ian Campbell
991bfd2794 linuxkit pkg: handle packages which are not in git
Detect if this is the case by checking if the given path is not in git and
conditionalising anything which would touch git.

Images built from outside git will, in the absence of options to force
otherwise, get tagged "latest".

Fixes: #2613

Signed-off-by: Ian Campbell <ijc@docker.com>
2017-10-20 17:08:12 +01:00
Ian Campbell
0e31d8d1a9 linuxkit pkg: allow caller of git to specify what happens to stderr
Currently all forward it to os.Stderr, but in my next patch I will want to
direct to /dev/null for one command.

Signed-off-by: Ian Campbell <ijc@docker.com>
2017-10-20 17:05:37 +01:00
Ian Campbell
e42e8ceed7 linuxkit pkg: improve handling of git working directory
Ensure that all git commands are run as if from the package directory using the
`-C` option. Otherwise the various attempts to use git fail if `linuxkit pkg`
is invoked from outside the git repo.

Signed-off-by: Ian Campbell <ijc@docker.com>
2017-10-20 16:57:33 +01:00
Ian Campbell
2dc52c6d04 kubernetes: Bump yaml
Signed-off-by: Ian Campbell <ijc@docker.com>
2017-10-20 15:03:06 +01:00
Ian Campbell
b93389b239 kubernetes: Update to v1.8.1
Signed-off-by: Ian Campbell <ijc@docker.com>
2017-10-20 15:01:06 +01:00
Rolf Neugebauer
e80c411ffe Merge pull request #2619 from codergr/master
Update README.md to include link towards Kubernetes project
2017-10-20 15:02:31 +02:00
Justin Cormack
9a1577cf88 Merge pull request #2625 from yankcrime/update_metadata_img_refs
Update metadata image tag references
2017-10-20 15:00:03 +02:00
Justin Cormack
e4122d223c Merge pull request #2621 from dnephin/improve-gcp-error
Fix GCP error printing
2017-10-20 14:22:29 +02:00
Sotiris Salloumis
f7677e7178 Update README.md
Addition of a link to the Kubernetes project

Signed-off-by: Sotiris Salloumis <sotiris.salloumis@gmail.com>
2017-10-20 04:54:53 -04:00
Nick Jones
2ccce690fa
Update metadata image ref
Signed-off-by: Nick Jones <nick@dischord.org>
2017-10-19 11:56:52 +01:00
Rolf Neugebauer
c15f320ff6 tools: Add mkimage-rpi3 to build images for raspberry Pi 3
The package contains u-boot and the RPi firmware blobs. It expects
a tar ball of the root filesystem (including kernel and dtbs) on stdin
and produces a compressed tar ball on stdout with the files to copy to
a FAT32 formatted SD card.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-10-19 09:20:21 +02:00
Rolf Neugebauer
847ae9d220 kernel: Add dtbs files to kernel.tar under /boot/dtb
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-10-19 09:20:21 +02:00
Rolf Neugebauer
ef67a145d9 kernel: Add minimal kernel config for the Raspberry Pi 3b
- Enable ARCH_BCM2835
- Enable USB_NET_SMSC95XX.
- Compile in MII and USB_USBNET. These are needed
  by the onboard network driver
- Enable the DWC2 USB controller.
- Enabled MMC, MMC_SDHCI, MMC_BCM2835 for SD card access
- Enable various BCM2835 platform devices: HW_RANDOM_BCM2835,
  I2C_BCM2835, PINCTRL_BCM2835, DMA_BCM2835,BCM2835_MBOX,
  WM_BCM2835, ...
- Enable SERIAL_8250 and friends.
- Enable FB_SIMPLE to get console output

The above configuration gives a minimal working system
with serial console access (via the GPIO pins), networking
and SD storage. The smsc95xx network driver does not
seem to get autoloaded. This is likely a mdev issue.

We specifically do not configure any WLAN,
sound or graphics drivers as they would pull in
too many other cruft into the kernel. To enable
these we consider adding a -rpi3 config similar
to the -dbg config to provide additional kernel
config options.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-10-19 09:20:21 +02:00
Rolf Neugebauer
5cc4f00cf0 Merge pull request #2624 from yankcrime/openstack_metadata_fix
Fix broken AWS / OpenStack metadata, add example config for latter
2017-10-19 09:11:12 +02:00
Nick Jones
490ac8a8f3
[OpenStack] Add example configuration
Signed-off-by: Nick Jones <nick@dischord.org>
2017-10-18 22:57:33 +01:00
Nick Jones
5663112822
Fix typo which broke metadata retrieval
Signed-off-by: Nick Jones <nick@dischord.org>
2017-10-18 22:47:03 +01:00
Daniel Nephin
60ef22ef60 Fix GCP error printing
Signed-off-by: Daniel Nephin <dnephin@gmail.com>
2017-10-18 13:46:04 -04:00
Sotiris Salloumis
5d54dcc6fc Update README.md 2017-10-18 15:12:42 +02:00
Justin Cormack
bf05569790 Merge pull request #2617 from deitch/fix-compose-example
Move mounted file from /var/html to /etc/html
2017-10-18 13:16:29 +02:00
Rolf Neugebauer
bc1fdd2b79 Merge pull request #2615 from zx2c4/wireguard-bump
wireguard: update to 0.0.20171017
2017-10-18 10:14:10 +02:00
Avi Deitcher
da42ced2db Move mounted file from /var/html to /etc/html
Signed-off-by: Avi Deitcher <avi@deitcher.net>
2017-10-18 10:58:38 +03:00
Jason A. Donenfeld
5db1bbeef6 wireguard: update to 0.0.20171017
Simple version bump. Changes:

  * noise: handshake constants can be read-only after init
  * noise: no need to take the RCU lock if we're not dereferencing
  * send: improve dead packet control flow
  * receive: improve control flow
  * socket: eliminate dead code
  * device: our use of queues means this check is worthless
  * device: no need to take lock for integer comparison
  * blake2s: modernize API and have faster _final
  * compat: support READ_ONCE
  * compat: just make ro_after_init read_mostly

  Assorted cleanups to the module, including nice things like marking our
  precomputations as const.

  * Makefile: even prettier output
  * Makefile: do not clean before cloc
  * selftest: better test index for rate limiter
  * netns: disable accept_dad for all interfaces

  Fixes in our testing and build infrastructure. Now works on the 4.14 rc
  series.

  * qemu: add build-only target
  * qemu: work on ubuntu toolchain
  * qemu: add more debugging options to main makefile
  * qemu: simplify shutdown
  * qemu: open /dev/console if we're started early
  * qemu: phase out bitbanging
  * qemu: always create directory before untarring
  * qemu: newer packages
  * qemu: put hvc directive into configuration

  This is the beginning of working out a cross building test suite, so we do
  several tricks to be less platform independent.

  * tools: encoding: be more paranoid
  * tools: retry resolution except when fatal
  * tools: don't insist on having a private key
  * tools: add pass example to wg-quick man page
  * tools: style
  * tools: newline after warning
  * tools: account for padding being in zero attribute

  Several important tools fixes, one of which suppresses a needless warning.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2017-10-17 22:18:45 +02:00
Justin Cormack
db27618f11 Merge pull request #2611 from ijc/linuxkit-pkg-later-prompting
linuxkit pkg: defer content trust passphrase setup until we know it i…
2017-10-14 08:35:57 +01:00