392 Commits

Author SHA1 Message Date
Riyaz Faizullabhoy
c06f0547b1 Include brief primer doc on signing
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-05-25 11:06:08 -07:00
thebsdbox
58829874d1 open-vm-tools package/documentation
Signed-off-by: Dan Finneran <daniel.finneran@gmail.com>
2017-05-25 16:15:15 +01:00
Rolf Neugebauer
f02efdccc5 Merge pull request #1888 from rneugeba/qemu
cmd: Unify disk command line options for local hypervisors
2017-05-24 16:28:59 +01:00
Rolf Neugebauer
f90fde5a6f cmd: Unify disk command line options for local hypervisors
- '-disk-size' is now defaults to MB (but can be GB when appending 'G')
- The disk will be created if it doesn't exist (didn't happen in qemu)

Update the documentation.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-05-24 16:05:06 +01:00
Tycho Andersen
90c7047973 docs: add a blurb about CVE-2017-1000363
As of the time of this patch, the CVE was not available yet in the mitre
db.

Signed-off-by: Tycho Andersen <tycho@docker.com>
2017-05-23 16:03:00 -06:00
Rolf Neugebauer
6bea56c185 Update all YAML files to use the new packages
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-05-18 18:55:22 +01:00
Rolf Neugebauer
cd354c2ab1 docs: Improve testing.md
- Add 'rtf list'
- Add section about test logs
- Fis a few typos

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-05-17 14:46:28 +01:00
Justin Cormack
2aec868710 Merge pull request #1840 from dave-tucker/ci-docs
Document the CI setup
2017-05-16 15:36:28 +01:00
Dave Tucker
562b12a639 Document the CI setup
Signed-off-by: Dave Tucker <dt@docker.com>
2017-05-16 13:02:31 +01:00
Rolf Neugebauer
6c4722d4a9 docs: Add a section on custom kernel builds
fixes #1835

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-05-16 10:09:22 +01:00
Rolf Neugebauer
122267c6f8 Merge pull request #1803 from ijc25/mkmetadata
Add `linuxkit metadata create` command
2017-05-11 20:09:52 +01:00
Ian Campbell
36eaa44d7e Add linuxkit metadata command
Only subcommand is currently `create` which is a thin wrapper to create an iso
file in the format expected by `pkg/metadata`.

Currently very basic and just takes the content on the command line but could
be extended to read from a file etc.

Signed-off-by: Ian Campbell <ian.campbell@docker.com>
2017-05-11 19:25:27 +01:00
Ian Campbell
800badea42 metadata: Allow simple string keys
If a file is a simple string (as opposed to a map) then write it with the
default perms. This makes for slightly terser metadata when creating a simple
datafile.

Signed-off-by: Ian Campbell <ian.campbell@docker.com>
2017-05-11 01:39:03 +01:00
Jeffrey Hogan
50875c5a21 Correct gcp.yml example URL path
Signed-off-by: Jeffrey Hogan <jeff.hogan1@gmail.com>
2017-05-09 13:12:35 -05:00
Justin Cormack
da72655886 Merge pull request #1777 from deitch/document-container-mount-options
Add docs how to use mount options for special mounting containers
2017-05-08 20:32:15 +01:00
Avi Deitcher
a9e9958d7c Add docs how to use mount options for special mounting containers
Signed-off-by: Avi Deitcher <avi@deitcher.net>
2017-05-08 15:15:01 -04:00
Avi Deitcher
ff7de6e532 Add docs on how to use external disk
Signed-off-by: Avi Deitcher <avi@deitcher.net>
2017-05-08 14:47:45 -04:00
Rolf Neugebauer
c9c0c16490 docs: Add a section on how to compile kernel modules
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-05-03 16:46:12 +01:00
Rolf Neugebauer
f44421042e kernel: Fix DEBUG builds and add default debug targets/images
Building debug kernels (with additional run time checks and debugging)
was broken a few commits back. This adds back support for building debug
kernels.

In addition, it builds and uploads debug kernels for selected kernel
series (4.9.x LTS and latest stable). The tag for these kernels has
a "_dbg" suffix.

Update documentation.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-05-02 14:17:01 +01:00
solidnerd
c252305cda Fix typo in docs/kernels.md
Signed-off-by: solidnerd <niclas@mietz.io>
2017-05-01 13:21:35 +02:00
Rolf Neugebauer
721ffeeccd docs: Update kernel doc with info about supported kernels
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-04-30 12:51:32 +01:00
Rolf Neugebauer
6b61e50876 docs: Clarify hyperkit networking
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-04-27 01:40:35 +01:00
Rolf Neugebauer
35045cdb6b docs: Update kernel documentation
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-04-26 22:29:47 +01:00
Rolf Neugebauer
43d981094d kernel: Rework the kernel build
- Use multi-stage builds
- Use a single Dockerfile for all kernels
  Kernel version and series are passed in as arguments
- Use a separate kernel config per kernel version
  These have been copied from kernel_config and ran
  through oldconfig to tidy them up
- Rename patch directories
- Refactor the Makefile to use a template
  - Allows building of all kernels without arguments to make
  - Use git tree hash as the image tag
  - Don't build the image if the tag already exists

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-04-26 22:29:47 +01:00
Rolf Neugebauer
db6d3d7ed2 docs: Consolidate mac tips & tricks in ./docs/mac.md
We had serveral files with instructions, in particular for
networking, for macOS/Docker for Mac. Let's have just one place.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-04-25 13:17:04 +01:00
Rolf Neugebauer
febe68de6c vendor: Remove un-used vendored packages
With the infrakit plugin gone, remove it's dependencies.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-04-25 13:17:04 +01:00
Akihiro Suda
9fc864d92a update gcp docs
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2017-04-25 09:40:15 +00:00
Riyaz Faizullabhoy
e8ae5f3341 Move summit notes to reports/ and include date in filename
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-04-24 10:18:22 -07:00
Justin Cormack
2709ee88bc Split build and push, and remove push code from run
This currently only changes the `gcp` target, but is the new
model - the `build` command will only do things locally, then
you need to `push` to an image store such as GCP or other ones
in order to `run` for platforms that cannot boot directly from
a local image.

Fix #1618

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-04-24 17:12:05 +01:00
Rolf Neugebauer
f750a04b04 Merge pull request #1679 from riyazdf/dockercon-summit-notes
summit: add notes from session 1 bof
2017-04-22 10:18:32 -05:00
Thomas Shaw
e9d7989e36 Fix broken link to pkg dir 2017-04-21 21:17:32 -05:00
Thomas Shaw
b0584f05bd Fix link to kernels directory 2017-04-21 20:33:09 -05:00
Riyaz Faizullabhoy
a3030f5d5e summit: add notes from session 1 bof
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-04-21 13:27:05 -07:00
Justin Cormack
e08f3a9a3f Change docker/linuxkit to linuxkit/linuxkit
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-04-17 18:13:28 -05:00
Sebastiaan van Stijn
6d1ea86da6 add license, and files for opensourcing
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2017-04-16 18:23:23 -05:00
Justin Cormack
72c3f9cfa2 More renames to LinuxKit
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-04-14 11:47:24 -05:00
Ilya Dmitrichenko
a4f2f46aae Few improvements to metadata docs
Signed-off-by: Ilya Dmitrichenko <errordeveloper@gmail.com>
2017-04-14 11:04:26 +01:00
Justin Cormack
e17e4bf286 Merge pull request #1622 from tych0/CVE-2016-10229
security events: add writeup of CVE-2016-10229
2017-04-14 00:19:34 +01:00
Tycho Andersen
d92560402d security events: add writeup of CVE-2016-10229
Signed-off-by: Tycho Andersen <tycho@docker.com>
2017-04-13 10:15:33 -06:00
Gianluca Arbezzano
2620489926 Fixed gpc-cli brew installation and add install from source
Fixed gcloud cli installation via brew. Added installation from source.

Signed-off-by: Gianluca Arbezzano <gianarb92@gmail.com>
2017-04-13 11:36:19 +02:00
Rolf Neugebauer
3b4ff0e9f4 docs: Update vendoring instruction with new go-compile package
Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-04-12 21:28:17 +01:00
Justin Cormack
89c642eac1 Rename Moby to LinuxKit part 1
This covers the base docs; I also did a bunch of cleanup and
remove old docs that are no longer needed.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-04-12 11:44:06 +01:00
Rolf Neugebauer
766e1d95d3 pkg: Add a generic metadata package
This package handles meta and user data for different cloud
and other platforms. It should be easy to extend to new
platforms.

Currently, it handles GCP metadata and a simple CDROM userdata
provider.

Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>
2017-04-11 15:32:17 +01:00
Justin Cormack
06ac17821b Merge pull request #1503 from dave-tucker/vndr
Add vendoring instructions
2017-04-11 13:41:46 +01:00
Dave Tucker
00edddac9a Add vndr to go-compile and add vendoring docs
This makes it easier to safely udpate the vendor directory

Signed-off-by: Dave Tucker <dt@docker.com>
2017-04-11 13:35:51 +01:00
Jeremy Yallop
188c90164b Fix broken link to okernel documentation.
Signed-off-by: Jeremy Yallop <yallop@docker.com>
2017-04-11 11:49:06 +01:00
Riyaz Faizullabhoy
b1475d33bc trust: add yaml docs
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-04-08 17:25:33 -07:00
Justin Cormack
aa3e6fdc9f Add initial overview of the yaml config
Needs expanding with more details, but a start.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-04-08 17:14:07 +01:00
Riyaz Faizullabhoy
5fe0233dad Update security arch docs with feedback
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-04-05 11:29:07 -07:00
Dave Tucker
db10280f5f run: Add gcp backend
This commit implements `moby run gcp` which allows for testing of moby
images on the Google Cloud Platform

This backend attaches (via SSH) to the serial console.
It generates instance-only SSH keys and adds the public key to the
image metadata. These are used by the `moby` tool only.

It will also automatically upload a file and creates an image if the prefix
given to `moby run` is a filename

Signed-off-by: Dave Tucker <dt@docker.com>
2017-04-05 14:50:23 +01:00