365 Commits

Author SHA1 Message Date
Riyaz Faizullabhoy
e8ae5f3341 Move summit notes to reports/ and include date in filename
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-04-24 10:18:22 -07:00
Justin Cormack
2709ee88bc Split build and push, and remove push code from run
This currently only changes the `gcp` target, but is the new
model - the `build` command will only do things locally, then
you need to `push` to an image store such as GCP or other ones
in order to `run` for platforms that cannot boot directly from
a local image.

Fix #1618

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-04-24 17:12:05 +01:00
Rolf Neugebauer
f750a04b04 Merge pull request #1679 from riyazdf/dockercon-summit-notes
summit: add notes from session 1 bof
2017-04-22 10:18:32 -05:00
Thomas Shaw
e9d7989e36 Fix broken link to pkg dir 2017-04-21 21:17:32 -05:00
Thomas Shaw
b0584f05bd Fix link to kernels directory 2017-04-21 20:33:09 -05:00
Riyaz Faizullabhoy
a3030f5d5e summit: add notes from session 1 bof
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-04-21 13:27:05 -07:00
Justin Cormack
e08f3a9a3f Change docker/linuxkit to linuxkit/linuxkit
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-04-17 18:13:28 -05:00
Sebastiaan van Stijn
6d1ea86da6 add license, and files for opensourcing
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2017-04-16 18:23:23 -05:00
Justin Cormack
72c3f9cfa2 More renames to LinuxKit
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-04-14 11:47:24 -05:00
Ilya Dmitrichenko
a4f2f46aae Few improvements to metadata docs
Signed-off-by: Ilya Dmitrichenko <errordeveloper@gmail.com>
2017-04-14 11:04:26 +01:00
Justin Cormack
e17e4bf286 Merge pull request #1622 from tych0/CVE-2016-10229
security events: add writeup of CVE-2016-10229
2017-04-14 00:19:34 +01:00
Tycho Andersen
d92560402d security events: add writeup of CVE-2016-10229
Signed-off-by: Tycho Andersen <tycho@docker.com>
2017-04-13 10:15:33 -06:00
Gianluca Arbezzano
2620489926 Fixed gpc-cli brew installation and add install from source
Fixed gcloud cli installation via brew. Added installation from source.

Signed-off-by: Gianluca Arbezzano <gianarb92@gmail.com>
2017-04-13 11:36:19 +02:00
Rolf Neugebauer
3b4ff0e9f4 docs: Update vendoring instruction with new go-compile package
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-04-12 21:28:17 +01:00
Justin Cormack
89c642eac1 Rename Moby to LinuxKit part 1
This covers the base docs; I also did a bunch of cleanup and
remove old docs that are no longer needed.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-04-12 11:44:06 +01:00
Rolf Neugebauer
766e1d95d3 pkg: Add a generic metadata package
This package handles meta and user data for different cloud
and other platforms. It should be easy to extend to new
platforms.

Currently, it handles GCP metadata and a simple CDROM userdata
provider.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-04-11 15:32:17 +01:00
Justin Cormack
06ac17821b Merge pull request #1503 from dave-tucker/vndr
Add vendoring instructions
2017-04-11 13:41:46 +01:00
Dave Tucker
00edddac9a Add vndr to go-compile and add vendoring docs
This makes it easier to safely udpate the vendor directory

Signed-off-by: Dave Tucker <dt@docker.com>
2017-04-11 13:35:51 +01:00
Jeremy Yallop
188c90164b Fix broken link to okernel documentation.
Signed-off-by: Jeremy Yallop <yallop@docker.com>
2017-04-11 11:49:06 +01:00
Riyaz Faizullabhoy
b1475d33bc trust: add yaml docs
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-04-08 17:25:33 -07:00
Justin Cormack
aa3e6fdc9f Add initial overview of the yaml config
Needs expanding with more details, but a start.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-04-08 17:14:07 +01:00
Riyaz Faizullabhoy
5fe0233dad Update security arch docs with feedback
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-04-05 11:29:07 -07:00
Dave Tucker
db10280f5f run: Add gcp backend
This commit implements `moby run gcp` which allows for testing of moby
images on the Google Cloud Platform

This backend attaches (via SSH) to the serial console.
It generates instance-only SSH keys and adds the public key to the
image metadata. These are used by the `moby` tool only.

It will also automatically upload a file and creates an image if the prefix
given to `moby run` is a filename

Signed-off-by: Dave Tucker <dt@docker.com>
2017-04-05 14:50:23 +01:00
Justin Cormack
4220a65128 Merge pull request #1440 from riyazdf/security-arch
Security docs
2017-04-03 10:37:54 +01:00
Riyaz Faizullabhoy
c1f84921fe Address review comments
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-04-02 21:21:18 -07:00
Justin Cormack
e2ec6c2a93 Merge pull request #1459 from rneugeba/ebpf-fix
docs: Move ebpf.md to projects
2017-04-02 14:04:09 +01:00
Rolf Neugebauer
63c89507e7 docs: Move ebpf.md to projects
This was missed when moving the ebpf stuff into a project.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-04-02 13:09:29 +01:00
Justin Cormack
faad84431e Add a doc for topics to discuss at the Summit at Dockercon
(as per containerd)

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-04-02 12:43:52 +01:00
Tycho Andersen
12624b60bf add some headings, fix some spelling mistakes
Signed-off-by: Tycho Andersen <tycho@docker.com>
2017-04-01 11:32:41 -06:00
Tycho Andersen
ad7ddba0dc docs: add a security-events.md
In the same vein as [1], let's start talking about security events. I
suppose we want to talk about security events as well as non-events,
though, to give a little discussion about post moretem. But we can rename
this to security-non-events if we want.

[1]: https://github.com/docker/docker.github.io/blob/master/engine/security/non-events.md

Signed-off-by: Tycho Andersen <tycho@docker.com>
2017-03-31 09:40:38 -06:00
Riyaz Faizullabhoy
52fa33d6d1 first pass at security docs
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-03-30 17:22:58 -07:00
Rolf Neugebauer
eaef1ca8fb docs: Update kernel patches doc
It's useful for cherry-picked patches to know which tree
they got patched from. Include a "Origin:" line.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-03-30 10:46:49 +01:00
Justin Cormack
f27c450268 Architecture overview
- also some tweaks in README.

fix #1394

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-03-28 15:29:34 +02:00
Rolf Neugebauer
e9fbe43b34 Rename .yaml to .yml
docker-compose and other utilities use the .yml extension.
For consistency rename all .yaml to .yml

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-03-27 09:53:26 +02:00
Rolf Neugebauer
6a29d153f5 infrakit: Move the hyperkit instance plugin into the source directory
- The tools directory ideally should not contain source code
- Removes double vendoring of packagages
- Makes it easer to hook the build into the top-level Makefile

Eventually, the plugin should be moved to the infrakit repo.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-03-25 13:02:45 +01:00
Justin Cormack
1f14c347f6 Add the beginings of a roadmap and faq
Needs expansion, but got to start somewhere...

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-03-22 14:48:50 +00:00
Anil Madhavapeddy
1a5fa6a305 docs: moby/alpine/kernel/ is now just moby/kernel/
Signed-off-by: Anil Madhavapeddy <anil@docker.com>
2017-03-15 15:14:56 +00:00
Rolf Neugebauer
13d3a93a08 docs: fix a few snags in the kernel patch documentation
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-03-15 10:46:22 +00:00
Justin Cormack
37c6169ab7 Add upload to Google Cloud Storage and Google Compute Image creation
- the image upload uses the cloud API
- currently auth and image creation need the `gcloud` CLI tool.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-03-14 14:45:05 +00:00
Rolf Neugebauer
e1b03b07ec docs: Update kernel patches documentation
Make the process and the requirements for patches clearer.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-03-07 19:42:23 +00:00
Rolf Neugebauer
c1c30b62ff docs: add short how-to for running Moby on GCP
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-02-08 17:35:05 +00:00
Riyaz Faizullabhoy
a29b6c1391 Revert to non-development containerd and runc until nats port is sorted out
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-02-02 11:57:28 -08:00
Riyaz Faizullabhoy
d66bc2d501 Split base/ into base/ and tools/
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-01-31 09:52:30 -08:00
Justin Cormack
89e98eefa0 Shift to development track containerd
Move to the development track of `containerd` not the legacy 0.2
branch. The commands have changed a bit.

This does increase the image size as we are bundling the Docker
copy and our copy, and the new one is larger as it is growing features.
Hopefully Docker will shrink eventually. Also we may replace `ctr`
with a library.

Fix #1029

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-01-24 15:39:44 +00:00
Riyaz Faizullabhoy
4c810a27f9 Merge lint.sh into compile.sh, remove unused alpine-build-go
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-01-23 13:25:44 -08:00
Rolf Neugebauer
fe533386f0 docs: add a note about kernel symbols to the ebpf documentation
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-01-06 16:52:16 +00:00
Rolf Neugebauer
b56da24f6a docs: add --pid=host to ebpf command line.
A lot of the `iovisor/bcc` tools take a pid as a command line option and using
`--pid=host` allows you to use `$(pgrep foo)`

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-01-06 16:43:43 +00:00
Justin Cormack
f6c2143197 Add a development eBPF container build
See `docs/ebpf.md` for how to use. This is built by CI or you can build
manually if you customise the kernel.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-01-05 11:59:28 +00:00
Rolf Neugebauer
2cb9fc5223 docs: update hub docs to include the TAG comment
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-12-16 16:21:39 +00:00
Rolf Neugebauer
2b134e8677 doc: update document about kernel patches
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2016-10-21 15:00:50 +01:00