391 Commits

Author SHA1 Message Date
Justin Cormack
ee0901762f Add support for mount in runtime config
This could be used in LinuxKit now, as there are some examples, eg
https://github.com/linuxkit/linuxkit/blob/master/blueprints/docker-for-mac/base.yml#L33
which are creating containers to do a mount.

The main reason though is to in future change the ad hoc code that generates
overlay mounts for writeable containers with a runtime config which does
the same thing; this code needs to create both tmpfs and overlay mounts.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-08-22 15:17:54 +01:00
Rolf Neugebauer
1d8790fb76 docs: Update kernel docs
- Update section on how to change the kernel config
- Reword kernel module section. It was messy
- General tidying up:
  - empty lines around quoted areas
  - two empty line above and one empty line below section headings
  - Limit line length.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-08-21 20:43:30 +01:00
marten
c09dc5190a Fix typo in faq
Signed-off-by: Marten <mcpop28@hotmail.com>
2017-08-19 21:46:46 +02:00
Justin Cormack
ea60eff557 Add support for runtime configuration
This adds a `runtime` section in the config that can be used
to move network interfaces into a container, create directories,
and bind mount container namespaces into the filesystem.

See also https://github.com/linuxkit/linuxkit/pull/2413

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-08-17 17:36:49 +01:00
Justin Cormack
fb9805eac5 Merge pull request #2423 from rn/p5
Allowing re-using existing machines on packet.net
2017-08-17 11:34:59 +01:00
Istvan
4ee0eb006f Update security.md
Fixing typo

Signed-off-by: Istvan Szukacs <istvan@streambrightdata.com>
2017-08-16 20:13:18 +02:00
Rolf Neugebauer
8e9e43bf94 doc: Update packet documentation
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-08-16 16:27:50 +01:00
Rolf Neugebauer
f2c7dd7731 doc: Add a note on arm64 on packet.net
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-08-15 21:36:10 +01:00
Rolf Neugebauer
306a7f4be6 docs: Update Packet.net documentation
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-08-15 14:31:44 +01:00
Justin Cormack
13a1ffdd44 Add Cgroup resource limits into Yaml spec
This adds all the cgroup restrictions into the spec.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-08-09 16:39:10 +01:00
Rolf Neugebauer
3b68e087f4 Merge pull request #2376 from rn/packet
Always PXE boot and add serial console to packet driver
2017-08-08 08:57:15 +01:00
Rolf Neugebauer
df7c79fa8f docs: Update packet documentation
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-08-07 23:08:09 +01:00
Rolf Neugebauer
6c6a89f5fa docs: Clarify restrictions for packages builds/signing
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-08-07 20:36:25 +01:00
Rolf Neugebauer
ad09ebd493 build: Use master of manifest-tool
The PR to enable notary signing has been merged. Also update
documentation as `got get` should now also work.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-08-04 18:34:56 +01:00
Justin Cormack
d7caf92708 Merge pull request #2355 from justincormack/bootrom
Support UEFI ISO boot on hyperkit
2017-08-04 12:45:27 +01:00
Justin Cormack
8aa811540f Support UEFI ISO boot on hyperkit
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-08-04 11:34:51 +01:00
Rolf Neugebauer
aa44e41587 docs: Update docs, add document about packages
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-08-03 17:46:10 +01:00
Rolf Neugebauer
b0df2c94ae build: Use multi-arch go-compile to compile tools
This now completes the steps to bootstrap the other
packages with multi-arch as we now have the tools both
on arm64 and amd64.

Also update vendoring doc with new hash

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-08-03 17:36:22 +01:00
Nick Jones
f65a4e803d Update OpenStack run and push support
This commit updates the support for pushing images into OpenStack by
inheriting environment variables for endpoint and authentication
information, when available.

It also attempts to make the `openstack run` support more consistent
with other providers (specifically GCP and AWS), i.e just take the name
of the image as the argument and launch an instance using that.

Finally, it also updates the relevant documentation for OpenStack
support.

Signed-off-by: Nick Jones <nick@dischord.org>
2017-08-02 22:45:38 +01:00
Rolf Neugebauer
9b19164609 Merge pull request #2327 from ajeetraina/ajeetraina-patch-1
Updated document with the right LinuxKit command for pushing VHD to Azure Platform
2017-08-01 08:24:47 +01:00
Ajeet Singh Raina, Docker Captain, {Code} Catalysts, Dell EMC R&D
e67ee16d39 Updated document with the right LinuxKit command
The document showed the incorrect sub-command options for LinuxKit run azure  which needs to be updated and hence fixed it.

Signed-off-by: Ajeet Raina <ajeetraina@gmail.com>
2017-08-01 00:31:29 -04:00
Rolf Neugebauer
b897a57d89 doc: Add documentation on how to use the 'perf' utility.
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-07-31 17:35:06 +01:00
Dave Freitag
9152d065b6 Add NFS Debug Modules
- Adding NFS debug modules to kernel_config.debug
- Also updating some dead links in the kernels.md doc file

Signed-off-by: Dave Freitag <dcfreita@us.ibm.com>
2017-07-28 10:48:10 -05:00
Justin Cormack
941e31a519 Merge pull request #2278 from deitch/tpm-tools
tpm tools
2017-07-26 22:01:51 +01:00
Dave Tucker
54c23849cf docs: Update external disk documentation
This documents the usage of the new mount, format and extend packages

Signed-off-by: Dave Tucker <dt@docker.com>
2017-07-26 13:27:21 +01:00
Avi Deitcher
e776d063ac add tss image
Signed-off-by: Avi Deitcher <avi@deitcher.net>
2017-07-26 13:46:51 +03:00
Nick Jones
7c65860a5c Refactor OpenStack push support to use Gophercloud
This commit refactors the OpenStack push support to make use of the
Gophercloud library in order to handle authentication and talking to the
right image service as defined in the service catalogue.

Signed-off-by: Nick Jones <nick@dischord.org>
2017-07-24 13:47:18 +01:00
Riyaz Faizullabhoy
950a1b586b Merge pull request #2265 from zx2c4/wireguard-tools-as-package
wireguard: add tools to alpine as package not into filesystem
2017-07-20 14:39:27 -07:00
Jason A. Donenfeld
a837a6fc65 wireguard: add tools to alpine as package not into filesystem
Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2017-07-20 22:01:05 +02:00
Justin Cormack
78e5ddc675 Merge pull request #2255 from thebsdbox/openStack_Push
OpenStack Push support
2017-07-20 19:46:52 +01:00
thebsdbox
41f2d2c256 OpenStack Push support
Signed-off-by: Dan Finneran <daniel.finneran@gmail.com>
2017-07-20 16:24:48 +01:00
Jason A. Donenfeld
332c4edf62 wireguard: move documentation into docs/
Now that this isn't a project, we move the last remains into the right
place.

Signed-off-by: Jason A. Donenfeld <Jason@zx2c4.com>
2017-07-20 16:51:53 +02:00
Ian Campbell
a24819f2e5 Update to latest alpine base for go-compile
I noticed that running the runes in docs/vendoring.md made a bunch of files
which are omitted by modern vndr come back, presumably due to the old version
of vndr referenced there. So update the go-compile package to the current
version everywhere.

Also correct the use of `make` variable syntax (`$(PWD)`) where shell syntax
command substitution for `pwd` was desired.

Signed-off-by: Ian Campbell <ijc@docker.com>
2017-07-19 14:40:24 +01:00
Justin Cormack
6eb74b2f2b Add support for onshutdown
This is a list of images to run on a clean shutdown. Note that you must not rely on these
being run at all, as machines may be be powered off or shut down without having time to run
these scripts. If you add anything here you should test both in the case where they are
run and when they are not. Most systems are likely to be "crash only" and not have any setup here,
but you can attempt to deregister cleanly from a network service here, rather than relying
on timeouts, for example.

Fix https://github.com/linuxkit/linuxkit/issues/1988

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-07-18 13:55:52 +01:00
Justin Cormack
760521e197 Document metadata in files section
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-07-17 15:40:07 +01:00
Justin Cormack
7aacc2b9bc Merge pull request #2220 from thebsdbox/VMwareDocs
Added VMware documentation
2017-07-17 14:29:07 +01:00
Avi Deitcher
c6b7b3c00a Update kernel build docs
Signed-off-by: Avi Deitcher <avi@deitcher.net>
2017-07-17 14:03:53 +03:00
thebsdbox
0c1776303b Added VMware documentation
Signed-off-by: Dan Finneran <daniel.finneran@gmail.com>
2017-07-17 11:53:28 +01:00
Justin Cormack
cc33e67492 Allow uid, gid fields to be numeric or names
Previously I was forcing them to be strings, which is horrible. Now you
can either specify a numeric uid or the name of a service to use the
allocated id for that service.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-07-14 16:57:12 +01:00
Ian Campbell
0fbea002dc Update yml
Signed-off-by: Ian Campbell <ijc@docker.com>
2017-07-14 15:21:09 +01:00
Justin Cormack
830be373da Allow specifying the kernel and tarball names, or omitting tarball
fix #113

Use `tar: none` or `tar: ""` to omit the tarball.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-07-14 14:09:42 +01:00
Justin Cormack
107c014a9d Re-run vendoring
Latest `vndr` has changed its algorithm a bit. It also pointed out that we were missing
some things.

Move the `vendor` directory up to the `linuxkit` command, else it gets confused by packages
that have Go code in.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-07-11 13:12:00 +01:00
Justin Cormack
298f4aab32 Consistently don't use quotes around image names
These are not needed, but we are inconsistent. Been waiting for a
quiet moment to fix this since I noticed while doing a presentation...

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-07-09 17:47:30 +01:00
Phil Estes
bbc93151c4 Fix markdown format mistake and text re: disk path
Formatting was incorrect due to mismatched mark; also, it appears that
qemu also uses the state directory now for the created disk image. Also
used the same italicized style for param reference in text instead of
some bracketed and some italicized.

Signed-off-by: Phil Estes <estesp@linux.vnet.ibm.com>
2017-07-07 15:51:28 -04:00
Tycho Andersen
4bf7bfff2d docs: add some more CVE writeups
Signed-off-by: Tycho Andersen <tycho@docker.com>
2017-07-07 09:52:26 -06:00
Magnus Skjegstad
037c222a70 docs: add acpi section to hyperkit docs
Signed-off-by: Magnus Skjegstad <magnus@skjegstad.com>
2017-07-06 12:55:36 +02:00
Justin Cormack
a73c3d3667 Add partial user namespace support
This adds the OCI parts needed into the yaml, but there are still
permissions issues in practise so marked as experimental.

It may just need further documentation to resolve the issues.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-07-03 14:45:58 +01:00
Rolf Neugebauer
89c40eaddb Update hashes in YAML files
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-07-01 19:24:16 +01:00
Rolf Neugebauer
b062a57e6c build: Update go-compile image to latest
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-07-01 18:11:45 +01:00
Justin Cormack
c7c4c9ef2a Merge pull request #98 from justincormack/named-uids
Assign each container a uid and gid it can use
2017-06-30 19:40:47 +01:00