beenull/moby
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
39637 commits 14 branches 412 tags 338 MiB
Commit graph

1616 commits

Author SHA1 Message Date
Sebastiaan van Stijn
e1e544c8c6
vendor: sirupsen/logrus v1.6.0 
full diff: https://github.com/sirupsen/logrus/compare/v1.4.2...v1.6.0

- Ability to DisableHTMLEscape when using the JSON formatter
- Support/fixes for go 1.14
- Many many bugfixes
- Add flag to disable quotes in TextFormatter

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-05-03 01:55:52 +02:00
Brian Goff
fd784ce7c1
Merge pull request #40872 from thaJeztah/update_terminal_sequences 
vendor konsorten/go-windows-terminal-sequences v1.0.3
 2020-04-30 10:51:25 -07:00
Sebastiaan van Stijn
c3b3aedfa4
Merge pull request #40662 from AkihiroSuda/cgroup2-dockerinfo 
cgroup2: implement `docker info`
 2020-04-29 22:57:00 +02:00
Sebastiaan van Stijn
8006a9d08c
vendor konsorten/go-windows-terminal-sequences v1.0.3 
full diff: https://github.com/konsorten/go-windows-terminal-sequences/compare/v1.0.2...v1.0.3

Fixes a panic when using logrus on Go 1.14

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-04-29 11:27:11 +02:00
Sebastiaan van Stijn
b2af9e631c
vendor: update moby/ipvs v1.0.1 
full diff: https://github.com/moby/ipvs/compare/v1.0.0...v1.0.1

- Fix compatibility issue on older kernels (< 3.18) where the address
  family attribute for destination servers do not exist
- Fix the stats attribute check when parsing destination addresses
- NetlinkSocketsTimeout should be a constant

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-04-28 16:59:06 +02:00
Brian Goff
4839b27a1f
Merge pull request #40808 from thaJeztah/update_libnetwork 
vendor: update libnetwork 1a17fb36132631a95fe6bb055b91e24a516ad81d
 2020-04-24 14:03:12 -07:00
Tonis Tiigi
7260adfff9 vendor: add local copy of archive/tar 
This version avoids doing name lookups on creating tarball that
should be avoided in to not hit loading glibc shared libraries.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
(cherry picked from commit aa6a9891b0)
Signed-off-by: Tibor Vass <tibor@docker.com>
 2020-04-24 11:22:24 -07:00
Sebastiaan van Stijn
41d4112e89
pkg/term: vendor moby/term and make pkg/term an alias 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-04-21 16:29:19 +02:00
Sebastiaan van Stijn
c3808634e7
vendor: update libnetwork 1a17fb36132631a95fe6bb055b91e24a516ad81d 
full diff: ef149a924d...1a17fb3613

- docker/libnetwork#2538 produce an error with invalid address pool
    - addresses docker/docker#40388 dockerd ignores the --default-address-pool option
- docker/libnetwork#2471 DOCKER-USER chain not created when IPTableEnable=false
- docker/libnetwork#2544 Fix NPE due to null value returned by ep.Iface()
    - carries docker/libnetwork#2239 Prevent NPE in addServiceInfoToCluster()
    - addresses docker/docker#37506 Error initializing docker.server while starting daemon by systemd

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-04-21 13:00:22 +02:00
Brian Goff
130b0bc603
Merge pull request #40823 from thaJeztah/remove_distrib_uuid 
daemon: remove distribution/uuid package
 2020-04-16 20:59:58 -07:00
Akihiro Suda
f350b53241 cgroup2: implement docker info 
ref: https://www.kernel.org/doc/html/latest/admin-guide/cgroup-v2.html

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
 2020-04-17 07:20:01 +09:00
Brian Goff
0f2adcceec
Merge pull request #40774 from thaJeztah/update_small_deps 
vendor: pkg/errors v0.9.1, mespath/go-jmespath v0.3.0
 2020-04-16 11:55:38 -07:00
Sebastiaan van Stijn
7400375526
daemon: remove distribution/uuid package 
This appeared to be unused because we no longer generate
a uuid using this package.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-04-16 09:16:38 +02:00
Tonis Tiigi
0cdf6ba9c8 vendor: update buildkit to ae7ff174 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2020-04-14 08:26:07 -07:00
Sebastiaan van Stijn
dc089c22ce
vendor: pkg/errors v0.9.1 
full diff: https://github.com/pkg/errors/compare/v0.8.1...v0.9.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-04-04 01:54:46 +02:00
Sebastiaan van Stijn
e7183dbfe9
vendor: update go-events to fix alignment for 32bit systems 
- relates to moby/buildkit 1111
- relates to moby/buildkit 1079
- relates to docker/buildx 129

full diff: 9461782956...e31b211e4f

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-04-04 01:53:27 +02:00
Sebastiaan van Stijn
bd8490c0de
vendor: jmespath/go-jmespath v0.3.0 
This update is just adding some typo-fixes and adding a go.mod, but
pins it to a tagged release;

c2b33e8439...v0.3.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-04-04 00:59:15 +02:00
Sebastiaan van Stijn
af0415257e
Merge pull request #40694 from kolyshkin/moby-sys-mount-part-II 
switch to moby/sys/{mount,mountinfo} part II
 2020-04-02 21:52:21 +02:00
Akihiro Suda
3802830989 cgroup2: implement docker stats 
The following fields are unsupported:

* BlkioStats: all fields other than IoServiceBytesRecursive
* CPUStats: CPUUsage.PercpuUsage
* MemoryStats: MaxUsage and Failcnt

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
 2020-04-02 17:51:34 +09:00
Drew Erny
1dbf34f3aa Bump swarmkit to ebe39a32e3ed4c3a3783a02c11cccf388818694c 
Bumps swarmkit vendoring. Includes docker/swarmkit#2938, which fixes
tasks.db growing out of control on worker nodes.

Signed-off-by: Drew Erny <derny@mirantis.com>
 2020-03-26 11:04:58 -05:00
Kir Kolyshkin
75f7e435a2 vndr: vendor in github.com/moby/sys 
Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
 2020-03-20 09:46:16 -07:00
Jintao Zhang
ea44be4b8f vendor: bump libnetwork ef149a924dfde2e506ea3cb3f617d7d0fa96b8ee 
fix https://github.com/moby/moby/issues/40715

Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
 2020-03-19 17:15:58 +08:00
Sebastiaan van Stijn
e26e1cc5c1
vendor: vishvananda/netlink v1.1.0 
- vishvananda/netlink: https://github.com/vishvananda/netlink/compare/v1.0.0...v1.1.0
- vishvananda/netns: 7109fa855b...0a2b9b5464
- libnetwork: bf2bd42abc...beab24292c
- github.com/moby/ipvs: new dependency (was previously part of libnetwork)

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-03-12 22:57:23 +01:00
Sebastiaan van Stijn
1d08ccd4ff
vendor: update fsnotify v1.4.9 
full diff: 1485a34d5d...v1.4.9

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-03-12 09:58:09 +01:00
Sebastiaan van Stijn
e1710b42d3
vendor: bump libnetwork bf2bd42abc0a3734f12b5ec724e571434e42c669 
full diff: 264bffcb88...bf2bd42abc

relevant changes:

- docker/libnetwork#2407 Macvlan internal network should not change default gateway
    - fixes docker/libnetwork#2406 Internal macvlan network overrides default gateway
- vendor godbus/dbus v5
- Fix InhibitIPv4 nil panic
- Cleanup VFP during overlay network removal
    - fixes VFP leak in windows overlay network deletion

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-03-07 00:35:47 +01:00
Akihiro Suda
9a82a9a8ea vendor containerd, BuildKit, protobuf, grpc, and golang.org/x 
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
 2020-03-03 10:25:20 +09:00
Sebastiaan van Stijn
501f103a0e
Merge pull request #40597 from thaJeztah/bump_selinux 
vendor: update opencontainers/selinux v1.3.3
 2020-03-02 16:54:47 +01:00
Sebastiaan van Stijn
fa67cff34b
vendor: update opencontainers/selinux v1.3.3 
full diff: https://github.com/opencontainers/selinux/compare/v1.3.1...v1.3.3

- go-selinux/SetKeyLabel: fix for RHEL7 kernels
- getSELinuxfs: optimize/simplify using sync.Once
- xattr: use x/sys/unix, simplify
- Use /proc/thread-self if available
- Fix EnforceMode, SetEnforceMode, and SecurityCheckContext

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-02-28 19:19:46 +01:00
Sebastiaan van Stijn
21e5decbaa
vendor: update gotest.tools v3.0.2 
full diff: https://github.com/gotestyourself/gotest.tools/compare/v3.0.1...v3.0.2

- assert: Fix NilError, error non-nil type
    - fixes: Typed nil errors should not pass "NilError"
    - fixes: "reflect: call of reflect.Value.IsNil on struct Value" for struct error type

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-02-28 16:26:18 +01:00
Sam Whited
8c0f6142a8 Update DNS library 
This makes sure that we don't become vulnerable to CVE-2018-17419 or
CVE-2019-19794 in the future.

Signed-off-by: Sam Whited <sam@samwhited.com>
 2020-02-25 17:05:57 -05:00
Tonis Tiigi
33baa55353 vendor: update buildkit to d75ed2b68 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2020-02-24 15:38:51 -08:00
Sebastiaan van Stijn
12c7541f1f
vendor: update opencontainers/selinux v1.3.1 
full diff: 5215b1806f...v1.3.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-02-20 14:40:25 +01:00
Sebastiaan van Stijn
9f0b3f5609
bump gotest.tools v3.0.1 for compatibility with Go 1.14 
full diff: https://github.com/gotestyourself/gotest.tools/compare/v2.3.0...v3.0.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-02-11 00:06:42 +01:00
Samuel Karp
44a8e10bfc
awslogs: Update aws-sdk-go to support IMDSv2 
AWS recently launched a new version of the EC2 Instance Metadata
Service, which is used to provide credentials to the awslogs driver when
running on Amazon EC2.  This new version of the IMDS adds
defense-in-depth mechanisms against open firewalls, reverse proxies, and
SSRF vulnerabilities and is generally an improvement over the previous
version.  An updated version of the AWS SDK is able to handle the both
the previous version and the new version of the IMDS and functions when
either is enabled.

More information about IMDSv2 is available at the following links:

* https://aws.amazon.com/blogs/security/defense-in-depth-open-firewalls-reverse-proxies-ssrf-vulnerabilities-ec2-instance-metadata-service/
* https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/configuring-instance-metadata-service.html

Closes https://github.com/moby/moby/issues/40422

Signed-off-by: Samuel Karp <skarp@amazon.com>
 2020-02-06 10:56:05 -08:00
Akihiro Suda
46ec8731fb
Merge pull request #40429 from thaJeztah/bump_golang_1.13.7 
Update Golang 1.13.7, golang.org/x/crypto (CVE-2020-0601, CVE-2020-7919)
 2020-02-03 18:09:20 +01:00
Sebastiaan van Stijn
b606c8e440
vendor: update golang.org/x/crypto 69ecbb4d6d5dab05e49161c6e77ea40a030884e1 
full diff: 88737f569e...69ecbb4d6d

Includes 69ecbb4d6d
(forward-port of 8b5121be2f),
which fixes CVE-2020-7919:

- Panic in crypto/x509 certificate parsing and golang.org/x/crypto/cryptobyte
  On 32-bit architectures, a malformed input to crypto/x509 or the ASN.1 parsing
  functions of golang.org/x/crypto/cryptobyte can lead to a panic.
  The malformed certificate can be delivered via a crypto/tls connection to a
  client, or to a server that accepts client certificates. net/http clients can
  be made to crash by an HTTPS server, while net/http servers that accept client
  certificates will recover the panic and are unaffected.
  Thanks to Project Wycheproof for providing the test cases that led to the
  discovery of this issue. The issue is CVE-2020-7919 and Go issue golang.org/issue/36837.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-01-29 18:36:06 +01:00
Drew Erny
fb155a1125 Fix leak related to service logs 
See the commit message for the new swarmkit commit. That change fixes a
leaking goroutine related to service logs.

Signed-off-by: Drew Erny <derny@mirantis.com>
 2020-01-29 10:36:17 -06:00
Akihiro Suda
6d68080907 update runc library to v1.0.0-rc10 (CVE-2019-19921) 
Notable changes:
* Fix CVE-2019-19921 (Volume mount race condition with shared mounts): https://github.com/opencontainers/runc/pull/2207
* Fix exec FIFO race: https://github.com/opencontainers/runc/pull/2185
* Basic support for cgroup v2.  Almost feature-complete, but still missing support for systemd mode in rootless.
  See also https://github.com/opencontainers/runc/issues/2209 for the known issues.

Full changes: https://github.com/opencontainers/runc/compare/v1.0.0-rc9...v1.0.0-rc10

Also updates go-selinux: 3a1f366feb...5215b1806f
(See https://github.com/containerd/cri/pull/1383#issuecomment-578227009)

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
 2020-01-25 04:06:24 +09:00
Akihiro Suda
f9d136b6c6
Merge pull request #40307 from dperny/swarm-jobs 
Add support for swarm jobs
 2020-01-20 12:57:05 +09:00
Brian Goff
e5c8eca2ee
Merge pull request #40384 from arkodg/bump-libnetwork-latest 
Bump Libnetwork to latest refpoint
 2020-01-16 21:03:26 -08:00
Arko Dasgupta
4c407caada Bump libnetwork to latest refpoint 
Commits:
feeff4f0 Merge pull request #2380 from liskin/bridge-atomic-hwaddr
fec6476d Merge pull request #2489 from suwang48404/doc
8757597e Added document describing libnetwork traffic flow.
eaea5722 Merge pull request #2445 from kdomanski/ipv6-addr-in-hosts
1680ce71 Merge pull request #2462 from arkodg/fix-key-spi-panic
4420ee92 Fix panic in drivers/overlay/encryption.go
57178323 Merge pull request #2472 from thaJeztah/bump_golang_1.12.12
f741dc9c Update Golang 1.12.12 (CVE-2019-17596)
79c19d09 Merge pull request #2461 from suwang48404/master
94facacc Added API to set ephemeral port allocator range.

Signed-off-by: Arko Dasgupta <arko.dasgupta@docker.com>
 2020-01-16 16:28:23 -08:00
Sebastiaan van Stijn
fa291552d5
vendor: bump prometheus/client_golang v1.3.0 
full diff: https://github.com/prometheus/client_golang/compare/v1.1.0...v1.3.0

This requires LK4D$/vndr v0.1.0 or newer for vendoring; also adds a new
dependency: github.com/cespare/xxhash

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-01-16 21:32:07 +01:00
Sebastiaan van Stijn
34a65cb3ba
vendor: bump prometheus/client_golang v1.1.0 
full diff: https://github.com/prometheus/client_golang/compare/v0.9.4...v1.1.0

Using v1.1.0, because version v1.2.0 and up use versioned import paths for the
github.com/cespare/xxhash/v2 dependency (prometheus/client_golang#657), which
causes vendoring with vndr to break due to the v2 in the import-path.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-01-16 21:32:05 +01:00
Sebastiaan van Stijn
b2db7c8bc9
vendor: bump prometheus/client_golang v0.9.4, docker/go-metrics v0.0.1 
bump docker/go-metrics v0.0.1:

full diff: d466d4f6fd...v0.0.1

- docker/go-metrics#16 fix the compilation error against prometheus/client-golang master
- fixes docker/go-metrics#12 No longer builds against Prom master
- docker/go-metrics#18 metrics: address compile error correctly
- fixes docker/go-metrics#12 No longer builds against Prom master
- docker/go-metrics#15 Add functions that instruments http handler using promhttp
- docker/go-metrics#20 Rename LICENSE.code → LICENSE
- docker/go-metrics#22 Support Go Modules

bump prometheus/client_golang v0.9.4:

full diff: c5b7fccd20...v0.9.4

version v0.9.0 is the minimum required version to work with go-metrics v0.0.1,
as it depends on `prometheus.Observer`:

    vendor/github.com/docker/go-metrics/timer.go:39:4: undefined: prometheus.Observer

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-01-16 21:32:04 +01:00
Sebastiaan van Stijn
12a83ac27e
vendor: bump prometheus/procfs v0.0.8 
full diff: 7d6f385de8...v0.0.8

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-01-16 21:32:02 +01:00
Sebastiaan van Stijn
54dc6f355b
vendor: bump prometheus/common v0.7.0 
full diff: 7600349dcf...v0.7.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-01-16 21:32:00 +01:00
Sebastiaan van Stijn
9c99f8b9b3
vendor: bump prometheus/client_model v0.1.0 
full diff: 6f38060186...v0.1.0

- prometheus/client_model#22 add `go_package`, regenerate Go binding file
- prometheus/client_model#31 Support Go Modules
- prometheus/client_model#38 Remove all languages but Go and add a deprecation note

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-01-16 21:31:58 +01:00
Sebastiaan van Stijn
ab6e9b94d3
Merge pull request #40370 from thaJeztah/bump_dependencies2 
vendor: bump google/shlex b3f49c06ffaeef, beorn7/perks v1.0.1
 2020-01-16 21:29:35 +01:00
Drew Erny
30d9fe30b1 Add swarm jobs 
Adds support for ReplicatedJob and GlobalJob service modes. These modes
allow running service which execute tasks that exit upon success,
instead of daemon-type tasks.

Signed-off-by: Drew Erny <drew.erny@docker.com>
 2020-01-13 13:21:12 -06:00
Sebastiaan van Stijn
94a8c8b3c0
vendor: update fsutil 0f039a052ca1da01626278199624b62aed9b3729 
full diff: 3bbb99cdbd...0f039a052c

- tonistiigi/fsutil#66 copy: add fast copy path for darwin
- tonistiigi/fsutil#67 Treat Unix sockets as regular files
    - relates to moby/buildkit#1144 Fix socket handling
- tonistiigi/fsutil#68 fix gocrypto commit
- tonistiigi/fsutil#69 receive: use filter on receive diff
    - prevents incremental transfers with userns because the metadata
      on disk is always different than the one being transferred.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-01-13 14:28:14 +01:00
Sebastiaan van Stijn
67a0695e8b
vendor: update containerd/continuity to 26c1120b8d4107d2471b93ad78ef7ce1fc84c4c4 
full diff: f2a389ac0a...26c1120b8d

- containerd/continuity#109 Add OpenBSD support for fs subpackage
- containerd/continuity#141 Add src string to copyDirectory error message
- containerd/continuity#143 fstest: have CreateSocket actually create a socket
- containerd/continuity#144 Support Go Modules
- containerd/continuity#147 xattr lost when copying directory
- containerd/continuity#148 fs: don't convert syscall.Timespec to unix.Timespec directly (doesn't work with gccgo)

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-01-13 14:23:38 +01:00
Sebastiaan van Stijn
5c73cacefc
vendor: bump beorn7/perks v1.0.1 
full diff: e7f67b54ab...v1.0.1

add go module support

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-01-13 13:04:56 +01:00
Sebastiaan van Stijn
940a1292db
vendor: bump google/shlex e7afc7fbc51079733e9468cdfd1efcd7d196cd1d 
full diff: 6f45313302...e7afc7fbc5

- google/shlex#2 Remove unnecessary UnreadRune call
- google/shlex#3 Add go.mod

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2020-01-13 13:04:54 +01:00
Drew Erny
07efe6a0a7 Bump swarmkit to 24fb4cfe8af56803640180c5592bf32da732ced2 
Bumps the vendoring of github.com/docker/swarmkit to the above commit,
which is the current master at commit time.

Most notably, this includes a change making the ingress network respect
the default address pool. Because of this change, a change to network
integration tests was needed.

Signed-off-by: Drew Erny <drew.erny@docker.com>
 2020-01-07 09:43:22 -06:00
Brian Goff
de30f30e90
Merge pull request #40312 from thaJeztah/carry_40276_bump_x_sys 
update vendor golang.org/x/sys to 6d18c012aee9febd81bbf9806760c8c4480e870d
 2019-12-19 11:34:18 -08:00
Brian Goff
0971ab57f7
Merge pull request #40257 from thaJeztah/bump_go_runc 
bump containerd/go-runc a2952bc25f5116103a8b78f3817f6df759aa7def
 2019-12-19 11:32:38 -08:00
liuxiaodong
ee5aa536d1
update vendor golang.org/x/sys to 6d18c012aee9febd81bbf9806760c8c4480e870d 
full diff: c990c680b6...6d18c012ae

    execute "docker run -it {image name} /bin/sh" no response on mip64el platform;
    EpollEvent struct define lack a field named PadFd;
    add the field "PadFd";
    execute docker run -it {image} /bin/sh for test after rebuilded.

Signed-off-by: liuxiaodong <liuxiaodong@loongson.cn>
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-12-16 14:07:51 +01:00
Sebastiaan van Stijn
3452f136aa
Merge pull request #40108 from thaJeztah/bump_grpc 
bump google.golang.org/grpc v1.23.1
 2019-12-13 12:32:51 +01:00
Sebastiaan van Stijn
4afda3bb7c
Merge pull request #40122 from tonistiigi/buildkit-leases2 
Update buildkit to containerd leases
 2019-11-26 23:35:24 +01:00
Sebastiaan van Stijn
9aa55d97e5
bump containerd/go-runc a2952bc25f5116103a8b78f3817f6df759aa7def 
full diff: e029b79d8c...a2952bc25f

- containerd/go-runc#56 fix typo in successfully

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-11-26 15:14:54 +01:00
Vikram bir Singh
a7b6c3f0bf Bump hcsshim to b3f49c06ffaeef24d09c6c08ec8ec8425a 
Among other things, this is required to pull in
microsoft/hcsshim#718

Also fixes microsoft/hcsshim#737
which was caught by checks while attempting to bump
up hcsshim version.

Signed-off-by: Vikram bir Singh <vikrambir.singh@docker.com>
 2019-11-25 09:58:10 -08:00
Tõnis Tiigi
d1d5f64766
Merge pull request #40021 from thaJeztah/carry_40017 
Use newer x/sys/windows SecurityAttributes struct (carry 40017)
 2019-11-21 08:57:22 -08:00
Sebastiaan van Stijn
9cf349d0f8
bump libnetwork 90afbb01e1d8acacb505a092744ea42b9f167377 
full diff: 0025177e3d...90afbb01e1

includes:

- docker/libnetwork#/2459 Fix Error Check in NewNetwork
- docker/libnetwork#/2466 Revert "Merge pull request #2339 from phyber/iptables-check"
    - reverts docker/libnetwork#/2339 controller: Check if IPTables is enabled for arrangeUserFilterRule
    - re-opens docker/libnetwork#2158 dockerd when run with --iptables=false modifies iptables by adding DOCKER-USER
    - re-opens moby/moby#35777 With iptables=false dockerd still creates DOCKER-USER chain and rules
    - re-opens docker/for-linux#136 dockerd --iptables=false adds DOCKER-USER chain and modify FORWARD chain anyway

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-11-07 13:43:42 -08:00
Tonis Tiigi
f632e2d8d3 vendor: update containerd to acdcf13d5eaf0dfe0eaeabe7194a82535549bc2b 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2019-11-05 12:50:38 -08:00
Tonis Tiigi
fb1601d5ab vendor: update buildkit to leases support 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2019-11-05 10:14:33 -08:00
Sebastiaan van Stijn
27552ceb15
bump containerd/cgroups 5fbad35c2a7e855762d3c60f2e474ffcad0d470a 
full diff: c4b9ac5c76...5fbad35c2a

- containerd/cgroups#82 Add go module support
- containerd/cgroups#96 Move metrics proto package to stats/v1
- containerd/cgroups#97 Allow overriding the default /proc folder in blkioController
- containerd/cgroups#98 Allows ignoring memory modules
- containerd/cgroups#99 Add Go 1.13 to Travis
- containerd/cgroups#100 stats/v1: export per-cgroup stats

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-10-31 01:09:12 +01:00
Sebastiaan van Stijn
a5341aaf32
bump Microsoft/hcsshim 2226e083fc390003ae5aa8325c3c92789afa0e7a 
Adds osversion.Build() utility

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-10-22 02:51:21 +02:00
Sebastiaan van Stijn
39ad39d220
bump google.golang.org/grpc v1.23.1 
full diff: https://github.com/grpc/grpc-go/compare/v1.23.0...v1.23.1

- grpc/grpc-go#3018 server: set and advertise max frame size of 16KB
- grpc/grpc-go#3017 grpclb: fix deadlock in grpclb connection cache
    - Before the fix, if the timer to remove a SubConn fires at the
      same time NewSubConn cancels the timer, it caused a mutex leak
      and deadlock.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-10-22 00:00:55 +02:00
Sebastiaan van Stijn
1fab7c6457
bump Graylog2/go-gelf to 1550ee647df0510058c9d67a45c56f18911d80b8 
4143646226...1550ee647d

includes

- Graylog2/go-gelf#20 Prevent panic when unmarshalling JSON
- Graylog2/go-gelf#23 Feat: Use more precise time stamps
- Graylog2/go-gelf#31 bugfix. Not goroutine safe for TCP writer

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-10-17 18:41:03 +02:00
Grant Millar
df7b8f458a daemon: Use short libnetwork ID in exec-root & update libnetwork 
Signed-off-by: Grant Millar <rid@cylo.io>
 2019-10-15 11:40:24 +01:00
Brian Goff
e443512ce4 Use ocischema package instead of custom handler 
Previously we were re-using schema2.DeserializedManifest to handle oci
manifests. The issue lies in the fact that distribution started
validating the media type string during json deserialization. This
change broke our usage of that type.

Instead distribution now provides direct support for oci schemas, so use
that instead of our custom handlers.

Signed-off-by: Brian Goff <cpuguy83@gmail.com>
 2019-10-11 10:19:29 -07:00
Tibor Vass
b3be2802d4
Merge pull request #39713 from thaJeztah/containerd_1.3 
bump containerd and dependencies to v1.3.0
 2019-10-08 10:43:56 -07:00
Sebastiaan van Stijn
bb5650619e
bump gorilla/mux v1.7.3 
full diff: ed099d4238...00bdffe0f3

changes included:

- gorilla/mux#477 Improve CORS Method Middleware
    - implements gorilla/mux#477 Make CORSMethodMiddleware actually make sense
- gorilla/mux#489 Fix nil panic in authentication middleware example

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-10-06 11:38:53 +02:00
Sebastiaan van Stijn
38418287f7
bump olang/gddo 72a348e765d293ed6d1ded7b699591f14d6cd921 
no local code changes, just keeping up with upstream

full diff: 9b12a26f3f...72a348e765

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-10-06 11:30:52 +02:00
Sebastiaan van Stijn
e5dce0f8c5
bump creack/pty v1.1.9 
full diff: https://github.com/creack/pty/compare/v1.1.7...v1.1.9

adds go mod support

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-10-06 03:01:05 +02:00
Sebastiaan van Stijn
61a2b7ac94
bump gofrs/flock v0.7.1 
full diff: https://github.com/gofrs/flock/compare/v0.7.0...v0.7.1

- gofrs/flock#34 don't mention sync.Locker in package documentation
    - fixes gofrs/flock#33 incorrect interface
- gofrs/flock#35 Fix linting issues and add goreportcard badge

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-10-06 02:39:43 +02:00
Sebastiaan van Stijn
9bd1b1a8ec
bump imdario/mergo v0.3.8 
full diff: https://github.com/imdario/mergo/compare/v0.3.7...v0.3.8

includes:

- imdario/mergo#112 Add strict override
    - fixes imdario/mergo#111 WithOverride should be able to check types
- imdario/mergo#106 Fix merging of interface types with concrete values
- imdario/mergo#120 should not overwrite pointers directly, instead check embedded values
    - fixes imdario/mergo#114 Embedded struct of pointer types will overwrite the whole destination struct
- imdario/mergo#125 added WithOverrideEmptySlice config flag

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-10-06 02:39:24 +02:00
Sebastiaan van Stijn
7dee71e02f
bump mattn/go-shellwords v1.0.6 
full diff: https://github.com/mattn/go-shellwords/compare/v1.0.5...v1.0.6

relevant changes:

- mattn/go-shellwords#24 Add dir option for parser
- mattn/go-shellwords#26 Fix backquote in part of argument
    - fixes mattn/go-shellwords#25 Backtick "eats" all runes until isSpace
- mattn/go-shellwords#28 Fix dollar quote
    - fixes mattn/go-shellwords#27 Multi-commands inside of command substitution are throwing "invalid command line string" errors
- mattn/go-shellwords#24 Add dir option for parser
- mattn/go-shellwords#24 Add dir option for parser
- mattn/go-shellwords#24 Add dir option for parser

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-10-06 02:19:58 +02:00
Sebastiaan van Stijn
9fac44028e
bump logrus v1.4.2 
full diff: https://github.com/sirupsen/logrus/compare/v1.4.1...v1.4.2

- sirupsen/logrus#946 Fix solaris build
- sirupsen/logrus#966 Add a checkTerminal for nacl to support running on play.golang.org
- sirupsen/logrus#969 fix build break for plan9

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-10-06 02:16:47 +02:00
Sebastiaan van Stijn
82097c0f1f
bump hashicorp/golang-lru v0.5.3 
full diff: https://github.com/hashicorp/golang-lru/compare/v0.5.1...v0.5.3

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-10-04 15:05:35 -07:00
Derek McGowan
bc5484d2dd
bump moby/buildkit f7042823e340d38d1746aa675b83d1aca431cee3 
full diff: 588c73e1e4...f7042823e3

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>

fix daemon for changes in containerd registry configuration

Signed-off-by: Evan Hazlett <ejhazlett@gmail.com>

Update buildernext and daemon for buildkit update

Signed-off-by: Derek McGowan <derek@mcgstyle.net>
 2019-10-04 15:05:35 -07:00
Sebastiaan van Stijn
0b5dcdc5d7
bump containerd/fifo bda0ff6ed73c67bfb5e62bc9c697f146b7fd7f13 
full diff: a9fb20d874...bda0ff6ed7

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-10-04 15:05:34 -07:00
Sebastiaan van Stijn
0af1099a81
bump containerd/cgroups c4b9ac5c7601384c965b9646fc515884e091ebb9 
full diff:  github.com/containerd/cgroups 4994991857...c4b9ac5c76

changes included:

  - containerd/cgroups#81 Add network stats
    - addresses containerd/cgroups#80 Add network metrics
  - containerd/cgroups#85 Fix cgroup hugetlb size prefix for kB
    - addresses kubernetes/kubernetes#77169 Permission denied on hugetlb due to wrong filename
    - relates to opencontainers/runc#2065 Fix cgroup hugetlb size prefix for kB
  - containerd/cgroups#88 cgroups: fix MoveTo function fail problem
  - containerd/cgroups#92 fixed an issue with invalid soft memory limits
  - containerd/cgroups#93 avoid adding io_serviced and io_service_bytes duplicately
    - fixes containerd/containerd#3412 collected metric container_blkio_io_serviced_recursive_total: was collected before with the same name and label values

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-10-04 15:05:34 -07:00
Sebastiaan van Stijn
1617be92d3
bump containerd/go-runc e029b79d8cda8374981c64eba71f28ec38e5526f 
- github.com/containerd/go-runc 7d11b49dc0...e029b79d8c
  - containerd/go-runc#52 Fix Method of judging command execution failure
    - fixes "init.pid: no such file or directory: unknown" errors
  - containerd/go-runc#54 avoid setting NOTIFY_SOCKET from calling process

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
Signed-off-by: Derek McGowan <derek@mcgstyle.net>
 2019-10-04 15:05:33 -07:00
Derek McGowan
12f9887c8e
bump containerd v1.3.0 
full diff: 7c1e88399e...v1.3.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
Signed-off-by: Derek McGowan <derek@mcgstyle.net>
 2019-10-04 15:05:33 -07:00
Sebastiaan van Stijn
ac51b18339
Re-run vndr to fix master 
Pull requests started failing because vendoring didn't match;

```
The result of vndr differs

D vendor/golang.org/x/sync/singleflight/singleflight.go

Please vendor your package with github.com/LK4D4/vndr.
```

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-10-03 22:18:47 +02:00
Sebastiaan van Stijn
4e0836f01b
bump golang.org/x/sys c990c680b611ac1aeb7d8f2af94a825f98d69720 
full diff: 9eafafc0a8...c990c680b6

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-10-02 21:12:20 +02:00
Sebastiaan van Stijn
ac0ab114a2
bump runc vendor v1.0.0-rc8-92-g84373aaa 
full diff: https://github.com/opencontainers/runc/compare/v1.0.0-rc8...3e425f80a8c931f88e6d94a8c831b9d5aa481657

  - opencontainers/runc#2010 criu image path permission error when checkpoint rootless container
  - opencontainers/runc#2028 Update to Go 1.12 and drop obsolete versions
  - opencontainers/runc#2029 Update dependencies
  - opencontainers/runc#2034 Support for logging from children processes
  - opencontainers/runc#2035 specconv: always set "type: bind" in case of MS_BIND
  - opencontainers/runc#2038 `r.destroy` can defer exec in `runner.run` method
  - opencontainers/runc#2041 Change the permissions of the notify listener socket to rwx for everyone
  - opencontainers/runc#2042 libcontainer: intelrdt: add missing destroy handler in defer func
  - opencontainers/runc#2047 Move systemd.Manager initialization into a function in that module
  - opencontainers/runc#2057 main: not reopen /dev/stderr
      - closes opencontainers/runc#2056 Runc + podman|cri-o + systemd issue with stderr
      - closes kubernetes/kubernetes#77615 kubelet fails starting CRI-O containers (Ubuntu 18.04 + systemd cgroups driver)
      - closes cri-o/cri-o#2368 Joining worker node not starting flannel or kube-proxy / CRI-O error "open /dev/stderr: no such device or address"
  - opencontainers/runc#2061 libcontainer: fix TestGetContainerState to check configs.NEWCGROUP
  - opencontainers/runc#2065 Fix cgroup hugetlb size prefix for kB
  - opencontainers/runc#2067 libcontainer: change seccomp test for clone syscall
  - opencontainers/runc#2074 Update dependency libseccomp-golang
  - opencontainers/runc#2081 Bump CRIU to 3.12
  - opencontainers/runc#2089 doc: First process in container needs `Init: true`
  - opencontainers/runc#2094 Skip searching /dev/.udev for device nodes
      - closes opencontainers/runc#2093 HostDevices() race with older udevd versions
  - opencontainers/runc#2098 man: fix man-pages
  - opencontainers/runc#2103 cgroups/fs: check nil pointers in cgroup manager
  - opencontainers/runc#2107 Make get devices function public
  - opencontainers/runc#2113 libcontainer: initial support for cgroups v2
  - opencontainers/runc#2116 Avoid the dependency on cgo through go-systemd/util package
      - removes github.com/coreos/pkg as dependency
  - opencontainers/runc#2117 Remove libcontainer detection for systemd features
      - fixes opencontainers/runc#2117 Cache the systemd detection results
  - opencontainers/runc#2119 libcontainer: update masked paths of /proc
      - relates to moby/moby#36368 Add /proc/keys to masked paths
      - relates to moby/moby#38299 Masked /proc/asound
      - relates to moby/moby#37404 Add /proc/acpi to masked paths (CVE-2018-10892)
  - opencontainers/runc#2122 nsenter: minor fixes
  - opencontainers/runc#2123 Bump x/sys and update syscall for initial Risc-V support
  - opencontainers/runc#2125 cgroup: support mount of cgroup2
  - opencontainers/runc#2126 libcontainer/nsenter: Don't import C in non-cgo file
  - opencontainers/runc#2129 Only allow proc mount if it is procfs
      - addresses opencontainers/runc#2129 AppArmor can be bypassed by a malicious image that specifies a volume at /proc (CVE-2019-16884)

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-09-27 16:22:37 +02:00
Sebastiaan van Stijn
75477f0b3c
bump libnetwork to 96bcc0dae898308ed659c5095526788a602f4726 
full diff: 92d1fbe1eb...96bcc0dae8

changes included:

- docker/libnetwork#2429 Updating IPAM config with results from HNS create network call
  - addresses moby/moby#38358
- docker/libnetwork#2450 Always configure iptables forward policy
  - related to moby/moby#14041 and docker/libnetwork#1526

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-09-20 19:48:49 +02:00
Tibor Vass
3aa4ff64aa vendor: remove vdemeester/shakers and go-check/check 
Signed-off-by: Tibor Vass <tibor@docker.com>
 2019-09-09 21:09:57 +00:00
Sebastiaan van Stijn
f505abb6a7
Merge pull request #39855 from thaJeztah/bump_libnetwork 
bump libnetwork and dependencies to 92d1fbe1eb0883cf11d283cea8e658275146411d
 2019-09-03 18:12:08 +02:00
Sebastiaan van Stijn
492945c2d5
bump hashicorp/go-sockaddr v1.0.2 
full diff: 6d291a969b...v1.0.2

Relevant changes:
  - hashicorp/go-sockaddr#25 Add android os
  - hashicorp/go-sockaddr#28 Add go.mod

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-09-03 11:54:32 +02:00
Sebastiaan van Stijn
720b66ee1f
bump hashicorp/go-multierror v1.0.0, add errwrap v1.0.0 
full diff: fcdddc395d...v1.0.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-09-03 11:52:45 +02:00
Sebastiaan van Stijn
bab58c1924
bump lib network to 92d1fbe1eb0883cf11d283cea8e658275146411d 
full diff: 09cdcc8c0e...92d1fbe1eb

relevant changes included (omitting some changes that were added _and_ reverted in this bump):

- docker/libnetwork#2433 Fix parseIP error when parseIP before get AddressFamily
  - fixes docker/libnetwork#2431 parseIP Error ip=[172 17 0 2 0 0 0 0 0 0 0 0 0 0 0 0]
  - https://github.com/docker/libnetwork/issues/2289
  - this was a regression introduced in docker/libnetwork#2416 Fix hardcoded AF_INET for IPv6 address handling
- docker/libnetwork#2440 Bump hashicorp go-sockaddr v1.0.2, go-multierror v1.0.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-09-03 11:49:06 +02:00
Sebastiaan van Stijn
8769255d1b
bump containerd/ttrpc 92c8520ef9f86600c650dd540266a007bf03670f 
full diff: 699c4e40d1...92c8520ef9

changes:

- containerd/ttrpc#37 Handle EOF to prevent file descriptor leak
- containerd/ttrpc#38 Improve connection error handling
- containerd/ttrpc#40 Support headers
- containerd/ttrpc#41 Add client and server unary interceptors
- containerd/ttrpc#43 metadata as KeyValue type
- containerd/ttrpc#42 Refactor close handling for ttrpc clients
- containerd/ttrpc#44 Fix method full name generation
- containerd/ttrpc#46 Client.Call(): do not return error if no Status is set (gRPC v1.23 and up)
- containerd/ttrpc#49 Handle ok status

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-08-29 00:16:46 +02:00
Sebastiaan van Stijn
f1cd79976a
bump google.golang.org/grpc v1.23.0 
full diff: https://github.com/grpc/grpc-go/compare/v1.20.1...v1.23.0

This update contains security fixes:

- transport: block reading frames when too many transport control frames are queued (grpc/grpc-go#2970)
  - Addresses CVE-2019-9512 (Ping Flood), CVE-2019-9514 (Reset Flood), and CVE-2019-9515 (Settings Flood).

Other changes can be found in the release notes:
https://github.com/grpc/grpc-go/releases/tag/v1.23.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-08-29 00:13:39 +02:00
Tonis Tiigi
52ed97c5c1 vendor: update buildkit to 588c73e1e4 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2019-08-21 16:21:19 -07:00
Tõnis Tiigi
0537236e5a
Merge pull request #39726 from carlosedp/riscv64 
bump x/sys to fix riscv64 epoll
 2019-08-21 13:14:19 -07:00
CarlosEDP
bc8118b31f bump x/sys to fix riscv64 epoll 
Signed-off-by: Carlos de Paula <me@carlosedp.com>
 2019-08-19 17:58:48 -03:00
Tonis Tiigi
e59b26087f vendor: update buildkit to v0.6.1 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2019-08-14 18:55:30 -07:00
Sebastiaan van Stijn
097c09eb60
Merge pull request #39679 from jterry75/revendor_go-winio 
Update Microsoft/go-winio v0.4.14
 2019-08-08 15:07:29 +02:00
Justin Terry (VM)
35fe16b7eb Update Microsoft/go-winio v0.4.14 
Signed-off-by: Justin Terry (VM) <juterry@microsoft.com>
 2019-08-07 09:36:51 -07:00
Tonis Tiigi
c60e53a274 vendor: update buildkit to f5a55a95 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2019-08-06 20:44:32 -07:00
Sebastiaan van Stijn
6f234db9fe
bump libnetwork to 09cdcc8c0eab3946c2d70e8f6225b05baf1e90d1 
full diff: 83d30db536...09cdcc8c0e

changes included:

- docker/libnetwork#2416 Fix hardcoded AF_INET for IPv6 address handling
- docker/libnetwork#2411 Macvlan network handles netlabel.Internal wrong
  - fixes docker/libnetwork#2410 Macvlan network handles netlabel.Internal wrong
- docker/libnetwork#2414 Allow network with --config-from to be --internal
  - fixes docker/libnetwork#2413 Network with --config-from does not honor --internal
- docker/libnetwork#2351 Use fewer modprobes
  - relates to moby/moby#38930 Use fewer modprobes
- docker/libnetwork#2415 Support dockerd and system restarts for ipvlan and macvlan networks
  - carry of docker/libnetwork#2295 phantom ip/mac vlan network after a powercycle
  - fixes docker/libnetwork#1743 Phantom docker network

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-07-30 10:37:48 -07:00
Sebastiaan van Stijn
0595c01718
switch kr/pty to creack/pty v1.1.7 
kr/pty was moved to creak/pty and the old location was
archived.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-07-29 16:59:08 -07:00
Tonis Tiigi
096a7afd37 vendor: update swarmkit to 7dded76ec 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2019-07-17 11:52:58 -07:00
Tibor Vass
a1cdd4bfcc build: buildkit now honors daemon's DNS config 
Signed-off-by: Tibor Vass <tibor@docker.com>
 2019-07-10 00:26:03 +00:00
CarlosEDP
9eaab0425b Update modules to support riscv64 
Signed-off-by: CarlosEDP <me@carlosedp.com>
 2019-06-29 18:45:42 +00:00
Tibor Vass
e105a74c54
Merge pull request #39216 from thaJeztah/bump_vndr 
bump vndr to f5ab8fc5f, and revendor
 2019-06-29 10:39:37 -07:00
Tibor Vass
14bd416d0e vendor: containerd to 7c1e88399 
Fixes https://github.com/moby/buildkit/issues/1062
when DOCKER_BUILDKIT=1

Signed-off-by: Tibor Vass <tibor@docker.com>
 2019-06-28 18:28:09 +00:00
Sebastiaan van Stijn
0a3c9b935c bump vndr to f5ab8fc5f, and revendor 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-06-28 18:13:17 +00:00
Michael Crosby
70f67c6240
Merge pull request #39409 from thaJeztah/bump_libseccomp 
bump libseccomp-golang v0.9.1
 2019-06-28 09:58:06 -04:00
Tibor Vass
9e6f83bee1
Merge pull request #39054 from thaJeztah/bump_libnetwork2 
bump libnetwork. vishvananda/netlink 1.0, vishvananda/netns
 2019-06-27 10:34:01 -07:00
Sebastiaan van Stijn
344b093258
bump libnetwork. vishvananda/netlink 1.0, vishvananda/netns 
full diffs:

- fc5a7d91d5...62a13ae87c
- b2de5d10e3...v1.0.0
- 604eaf189e...13995c7128ccc8e51e9a6bd2b551020a27180abd

notable changes in libnetwork:

- docker/libnetwork#2366 Bump vishvananda/netlink to 1.0.0
- docker/libnetwork#2339 controller: Check if IPTables is enabled for arrangeUserFilterRule
  - addresses docker/libnetwork#2158 dockerd when run with --iptables=false modifies iptables by adding DOCKER-USER
  - addresses moby/moby#35777 With iptables=false dockerd still creates DOCKER-USER chain and rules
  - addresses docker/for-linux#136 dockerd --iptables=false adds DOCKER-USER chain and modify FORWARD chain anyway
- docker/libnetwork#2394 Make DNS records and queries case-insensitive
  - addresses moby/moby#28689 Embedded DNS is case-sensitive
  - addresses moby/moby#21169 hostnames with new networking are case-sensitive

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-06-25 14:10:15 +02:00
Sebastiaan van Stijn
e01bf76964
bump libseccomp-golang v0.9.1 
full diff: 32f571b700...689e3c1541

Release notes:

* Version 0.9.1 - May 21, 2019
- Minimum supported version of libseccomp bumped to v2.2.0
- Use Libseccomp's `seccomp_version` API to retrieve library version
- Unconditionally set TSync attribute for filters, due to Go's heavily threaded nature
- Fix CVE-2017-18367 - Multiple syscall arguments were incorrectly combined with logical-OR, instead of logical-AND
- Fix a failure to build on Debian-based distributions due to CGo code
- Fix unit test failures on 32-bit architectures
- Improve several errors to be more verbose about their causes
- Add support for SCMP_ACT_LOG (with libseccomp versions 2.4.x and higher), permitting syscalls but logging their execution
- Add support for SCMP_FLTATR_CTL_LOG (with libseccomp versions 2.4.x and higher), logging not-allowed actions when they are denied

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-06-25 10:11:02 +02:00
Sebastiaan van Stijn
25b451e01b
bump gorilla/mux v1.7.2 
full diff: https://github.com/gorilla/mux/compare/v1.7.0...v1.7.2

includes:

 - gorilla/mux#457 adding Router.Name to create new Route
 - gorilla/mux#447 host:port matching does not require a :port to be specified

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-06-20 13:33:46 +02:00
Tonis Tiigi
5c484890e0 vendor: update buildkit to c2427506 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2019-06-10 21:49:22 -07:00
Sebastiaan van Stijn
a6e1502575
Merge pull request #39295 from tiborvass/buildkit-systemd-resolvconf 
build: buildkit now also uses systemd's resolv.conf
 2019-06-04 20:28:36 +02:00
Tibor Vass
54043d2f6f
Merge pull request #39281 from dperny/vendor-swarmkit 
Revert docker/swarmkit#2804
 2019-06-04 10:28:42 -07:00
Tibor Vass
8ff4ec98cf build: buildkit now also uses systemd's resolv.conf 
Signed-off-by: Tibor Vass <tibor@docker.com>
 2019-06-04 16:04:10 +00:00
Tonis Tiigi
85bbbd4495 vendor: update buildkit to 37d53758 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2019-06-04 00:34:16 -07:00
Drew Erny
c7d9599e3d Revert docker/swarmkit#2804 
Reverts the change to swarmkit that made all updates set UpdateStatus to
Completed

Signed-off-by: Drew Erny <drew.erny@docker.com>
 2019-05-29 12:54:39 -05:00
Drew Erny
67e25ec5ac Bump swarmkit vendoring 
Includes the following changes since last vendoring:

docker/swarmkit#2795 - Add capabilities list to container specification
docker/swarmkit#2845 - Fix linting error
docker/swarmkit#2848 - Bump fernet/fernet-go
docker/swarmkit#2856 - Add ListServiceStatuses grpc method
docker/swarmkit#2857 - Use Service Placement Constraints in Enforcer

Signed-off-by: Drew Erny <drew.erny@docker.com>
 2019-05-24 12:07:38 -05:00
Sebastiaan van Stijn
a66ddd8ab8
bump libnetwork 5ac07abef4eee176423fdc1b870d435258e2d381 
full diff: 9ff9b57c34...5ac07abef4

brings in:

- docker/libnetwork#2376 Forcing a nil IP specified in PortBindings to IPv4zero (0.0.0.0)

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-05-21 14:46:18 +02:00
Sebastiaan van Stijn
8861376202
Merge pull request #39210 from tonistiigi/update-buildkit 
vendor: update buildkit to f238f1ef
 2019-05-14 13:04:53 -07:00
Tonis Tiigi
a3cbd53ed2 vendor: update buildkit to f238f1ef 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2019-05-13 16:50:01 -07:00
Sebastiaan van Stijn
28ad54d84f
bump google.golang.org/grpc v1.20.1 
full diff: https://github.com/grpc/grpc-go/compare/v1.12.2...v1.20.1

includes  grpc/grpc-go#2695 transport: do not close channel that can lead to panic
addresses moby/moby#39053

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-05-13 15:06:34 -07:00
Tibor Vass
df43bc329e
Merge pull request #39152 from thaJeztah/bump_buildkit 
Bump buildkit v0.5.0
 2019-05-10 16:22:48 -07:00
Tibor Vass
ee399522df
Merge pull request #39143 from thaJeztah/bump_runc_1.0.0-rc.8 
Bump runc 1.0.0-rc8, opencontainers/selinux v1.2.2
 2019-05-09 15:28:22 -07:00
Yong Tang
c8b7dad9e9
Merge pull request #39124 from kevpar/etw-arm-fix 
Revendor go-winio
 2019-04-28 10:43:53 -07:00
Sebastiaan van Stijn
5d51ac544b
bump gogo/googleapis v1.2.0 
full diff: 08a7655d27...v1.2.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-27 16:04:51 -07:00
Sebastiaan van Stijn
647f31b7d0
bump gogo/protobuf v1.2.1 
full diff: https://github.com/gogo/protobuf/compare/v1.2.0...v1.2.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-27 16:04:47 -07:00
Sebastiaan van Stijn
3d7d8a579f
bump containerd/console 0650fd9eeb50bab4fc99dceb9f2e14cf58f36e7f 
full diff: c12b1e7919...0650fd9eeb

- containerd/console#30 Add common project repo checks/README references

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-27 16:04:44 -07:00
Sebastiaan van Stijn
25e6487fc2
bump containerd 3a3f0aac8819165839a41fee77a4f4ac8b103097 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-27 16:04:40 -07:00
Sebastiaan van Stijn
447cbff50a
bump containerd/continuity aaeac12a7ffcd198ae25440a9dff125c2e2703a7 
- containerd/continuity#140 Fix directory comparison in changes

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-27 16:04:36 -07:00
Sebastiaan van Stijn
3e4723cf33
bump buildkit v0.5.0 
full diff: 8818c67cff...v0.5.0

- moby/buildkit#909 exporter: support unpack opt for image exporter
- moby/buildkit#961 dockerfile: allow subdirs for remote contexts

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-27 16:04:21 -07:00
Sebastiaan van Stijn
0d453115fe
bump opencontainers/selinux v1.2.2 
full diff: https://github.com/opencontainers/selinux/compare/v1.2.1...v1.2.2

- opencontainers/selinux#51 Older kernels do not support keyring labeling

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-25 18:57:04 -07:00
Sebastiaan van Stijn
6df6fe6020
bump runc vendor v1.0.0-rc8 
full diff: 029124da7a...425e105d5a

- opencontainers/runc#2043 Vendor in latest selinux code for keycreate errors

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-25 18:56:57 -07:00
Akihiro Suda
ac48309ac4
Merge pull request #39128 from thaJeztah/bump_go_units 
bump docker/go-units v0.4.0
 2019-04-24 19:01:23 +09:00
Tonis Tiigi
a3fdd5bf7e vendor: update buildkit to 8818c67c 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2019-04-23 19:02:06 -07:00
Sebastiaan van Stijn
2bfa24b393
Merge pull request #39129 from thaJeztah/bump_libnetwork 
bump libnetwork 9ff9b57c344df5cd47443ad9e65702ec85c5aeb0
 2019-04-23 23:27:07 +02:00
Sebastiaan van Stijn
7f2c564b23
bump libnetwork 9ff9b57c344df5cd47443ad9e65702ec85c5aeb0 
full diff: 48f846327b...9ff9b57c34

- docker/libnetwork#2368 (windows) Pick a random host port if the user does not specify a host port

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-23 18:37:36 +02:00
Sebastiaan van Stijn
c782aef653
bump docker/go-units v0.4.0 
relevant changes:

- docker/go-units#33 Fix handling of unlimited (-1) ulimit values
- docker/go-units#34 Revert 46 minute threshold

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-23 16:56:57 +02:00
Kevin Parsons
e1f0f77bf4 Revendor go-winio 
This is needed to provide fixes for ETW on ARM. The updated ETW package will
no-op on ARM, rather than crashing. Further changes are needed to Go itself to
allow ETW on ARM to work properly.

Signed-off-by: Kevin Parsons <kevpar@microsoft.com>
 2019-04-22 14:23:53 -07:00
Akihiro Suda
94e228b227
Merge pull request #39066 from thaJeztah/bump_pkg_errors 
bump pkg/errors v0.8.1
 2019-04-19 13:52:02 +09:00
Brian Goff
7ccc4f70de
Merge pull request #39108 from Microsoft/jjh/lcowrs5plus 
LCOW: (Experimental) Require RS5+ builds
 2019-04-18 21:10:25 -07:00
Yong Tang
97c25f6814
Merge pull request #39074 from thaJeztah/bump_fluentd 
Bump fluent/fluent-logger-golang v1.4.0
 2019-04-18 19:00:02 -07:00
Yong Tang
bbc6d06e67
Merge pull request #39080 from thaJeztah/bump_etcd 
bump github.com/coreos/etcd v3.3.12
 2019-04-18 18:59:00 -07:00
John Howard
80daf64216 Revendor Microsoft/hcsshim@672e52e9 
Signed-off-by: John Howard <jhoward@microsoft.com>
 2019-04-18 09:51:27 -07:00
Sebastiaan van Stijn
92a6266c9d
Merge pull request #39079 from thaJeztah/bump_swarmkit 
bump docker/swarmkit 59163bf75df38489d4a10392265d27156dc473c5
 2019-04-18 18:08:57 +02:00
Sebastiaan van Stijn
a688d85c48
bump pkg/errors v0.8.1 
https://github.com/pkg/errors/compare/v0.8.0...v0.8.1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-18 02:09:14 +02:00
Sebastiaan van Stijn
048bd8d179
bump tinylib/msgp v1.1.0 
full diff: 3b556c6454...v1.1.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-16 11:06:43 +02:00
Sebastiaan van Stijn
688e67e1d3
bump fluent/fluent-logger-golang v1.4.0 
- Add RequestAck to enable at-least-once message transferring
- Add Async option to update sending message in asynchronous way
- Deprecate AsyncConnect (Use Async instead)

full diff: https://github.com/fluent/fluent-logger-golang/compare/v1.3.0...v1.4.0

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-16 11:06:30 +02:00
Akihiro Suda
680c594ede
Merge pull request #39083 from cpuguy83/bump_fsnotify 
Bump fsnotify to HEAD.
 2019-04-16 17:04:04 +09:00
Brian Goff
a5c2dfad49 Bump fsnotify to HEAD. 
This specifically has a fix for leaking epoll fd's.

Full diff: 1485a34d5d

Signed-off-by: Brian Goff <cpuguy83@gmail.com>
 2019-04-15 19:23:39 -07:00
Sebastiaan van Stijn
676eb8c631
bump github.com/coreos/etcd v3.3.12 
full diff: https://github.com/etcd-io/etcd/compare/v3.3.9...v3.3.12

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-15 18:11:06 +02:00
Sebastiaan van Stijn
b000d5321a
bump docker/swarmkit 59163bf75df38489d4a10392265d27156dc473c5 
full diff: 18e7e58ea1...59163bf75d

- Add missing return when configuring VXLAN port
- Prevent possible panic in cnmallocator.IsAttachmentAllocated()
- update github.com/pivotal-golang/clock
  - new name for package: code.cloudfoundry.org/clock

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-15 18:04:36 +02:00
Sebastiaan van Stijn
9234218c50
bump containerd/fifo a9fb20d87448d386e6d50b1f2e1fa70dcf0de43c 
- containerd/fifo#17 Expose underlying file's `SyscallConn` method

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-14 23:55:27 +02:00
Sebastiaan van Stijn
f18971fc5d
bump containerd/go-runc 7d11b49dc0769f6dbb0d1b19f3d48524d1bad9ad 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-14 23:55:24 +02:00
Sebastiaan van Stijn
c69f7f27c5
bump containerd/typeurl 2a93cfde8c20b23de8eb84a5adbc234ddf7a9e8d 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-14 23:55:22 +02:00
Sebastiaan van Stijn
179d51ba98
bump mistifyio/go-zfs d5b163290a48f624cbf244ebe4e89ce38653064c 
full diff: 22c9b32c84...f784269be4

relevant changes:

- mistifyio/go-zfs#50 Fix GetProperty always returning 'VALUE'
  - fixes mistifyio/go-zfs#49 dataset.GetProperty(key) always returns 'VALUE'
- mistifyio/go-zfs#53 Fix parseLine for fragmentation field
  - fixes mistifyio/go-zfs#52 setUint receives empty string for fragmentation in some cases
- mistifyio/go-zfs#54 Add 'referenced' to zfs properties
- mistifyio/go-zfs#72 Switch to google/uuid
  - removes the github.com/pborman/uuid dependency

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-14 23:55:19 +02:00
Sebastiaan van Stijn
da1fbb3f2b
bump syndtr/gocapability d98352740cb2c55f81556b63d4a1ec64c5a319c2 
full diff: 2c00daeb6c...d98352740c

relevant changes:

- syndtr/gocapability#11 Add support for ambient capabilities
- syndtr/gocapability#13 Fix issue #12: break too early
- syndtr/gocapability#16 Fix capHeader.pid type

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-14 23:55:16 +02:00
Sebastiaan van Stijn
8fa04b3a06
bump hashicorp/golang-lru v0.5.1 
0fb14efe8c...7087cb70de

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-14 23:55:12 +02:00
Sebastiaan van Stijn
c2cb72e085
Merge pull request #39012 from thaJeztah/bump_dependencies 
Bump various dependencies
 2019-04-10 11:10:32 +02:00
Sebastiaan van Stijn
6251d81510
bump tchap/go-patricia v2.3.0 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-10 00:16:56 +02:00
Sebastiaan van Stijn
b00897d51a
bump philhofer/fwd v1.0.0 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-10 00:16:53 +02:00
Sebastiaan van Stijn
d72d3adf1c
bump RackSec/srslog a4725f04ec91af1a91b380da679d6e0c2f061e59 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-10 00:16:50 +02:00
Sebastiaan van Stijn
dfa863db45
bump golang.org/x/sync e225da77a7e68af35c70ccbf71af2b83e6acac3c 
removes use of golang.org/x/net/context

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-10 00:16:47 +02:00
Sebastiaan van Stijn
1e2eea5ce8
bump konsorten/go-windows-terminal-sequences v1.0.2 
Add Linux build support;
Increase compatibility as the module will appear empty and cause an error on Linux.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-10 00:16:44 +02:00
Sebastiaan van Stijn
8b3759eae1
bump mattn/go-shellwords v1.0.5 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-10 00:16:41 +02:00
Sebastiaan van Stijn
059e2ca135
bump imdario/mergo v0.3.7 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-10 00:16:39 +02:00
Sebastiaan van Stijn
f5b8046335
bump github.com/kr/pty v1.1.4 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-10 00:16:36 +02:00
Sebastiaan van Stijn
f86cac5713
bump gotest.tools v2.3.0 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-10 00:16:33 +02:00
Sebastiaan van Stijn
5f56666036
bump golang.org/x/crypto, golang.org/x/sys 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-10 00:12:43 +02:00
Sebastiaan van Stijn
054e39c0f9
bump golang.org/x/net eb5bcb51f2a31c7d5141d810b70815c05d9c9146 
drops support for Go 1.8 and older

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-10 00:12:38 +02:00
Sebastiaan van Stijn
ed68d3ab72
Merge pull request #39018 from mavenugo/moby-libn-vndr 
Vendor Libnetwork 48f8463
 2019-04-09 21:46:34 +02:00
Akihiro Suda
9d850cbfa5
Merge pull request #39016 from tao12345666333/bump-containerd-v1.2.6 
Bump containerd v1.2.6, runc 029124da7af7360afa781a0234d1b083550f797c
 2019-04-09 16:59:15 +09:00
Madhu Venugopal
9894f3f596 Vendor Libnetwork 48f8463 
Signed-off-by: Madhu Venugopal <madhu@docker.com>
 2019-04-07 13:06:53 -07:00
Jintao Zhang
c28171c7c4 Vendor runc 029124da7af7360afa781a0234d1b083550f797c 
Signed-off-by: Jintao Zhang <zhangjintao9020@gmail.com>
 2019-04-06 18:02:52 +00:00
Sebastiaan van Stijn
6f572c8154
bump google.golang.org/grpc v1.12.2 
full diff: https://github.com/grpc/grpc-go/compare/v1.12.0...v1.12.2

- grpc/grpc-go#2074 transport/server: fix race between writing status and header
  - fix grpc/grpc-go#1972 Possible race sending headers from server while receiving message over size limit
- grpc/grpc-go#2074 transport: account for user configured small io write buffer
  - fix grpc/grpc-go#2089 Server abruptly terminates connections if write buffer is small enough

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-06 13:00:10 +02:00
Akihiro Suda
dbe4a30928
Merge pull request #38997 from thaJeztah/bump_selinux 
bump opencontainers/selinux v1.2.1
 2019-04-04 16:59:23 +09:00
Sebastiaan van Stijn
a38d8b0730
bump sirupsen/logrus v1.4.1 
Full diff: https://github.com/sirupsen/logrus/compare/v1.3.0...v1.4.1

Fixes:

- Remove dependency on golang.org/x/crypto
- Fix wrong method calls Logger.Print and Logger.Warningln
- Update Entry.Logf to not do string formatting unless the log level is enabled
- Fix infinite recursion on unknown Level.String()
- Fix race condition in getCaller
- Fix Entry.WithContext method to return a copy of the initial entry

New:

- Add DeferExitHandler, similar to RegisterExitHandler but prepending the handler to the list of handlers (semantically like defer)
- Add CallerPrettyfier to JSONFormatter and `TextFormatter`
- Add Entry.WithContext() and Entry.Context, to set a context on entries to be used e.g. in hooks
- Enhance TextFormatter to not print caller information when they are empty

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-03 21:52:58 +02:00
Sebastiaan van Stijn
606ac478ad
bump opencontainers/selinux v1.2.1 
full diff: https://github.com/opencontainers/selinux/compare/v1.2...v1.2.1

brings in opencontainers/selinux#49 Ignore attempts to setLabels "" on SELinux disabled systems

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-03 21:45:22 +02:00
Tõnis Tiigi
bcaa613d82
Merge pull request #38983 from thaJeztah/bump_libnetwork 
bump libnetwork to ebcade70ad1059b070d0040d798ecca359bc5fed
 2019-04-03 10:26:47 -07:00
Tonis Tiigi
b6aae9919f vendor: update buildkit to b3028967a 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2019-04-03 01:01:01 -07:00
Tibor Vass
32157f9b12
Merge pull request #38959 from Microsoft/jjh/bumphcsshim 
Vendor Microsoft/hcsshim@ba3d6667
 2019-04-01 11:29:46 -07:00
Sebastiaan van Stijn
3ab093d567
bump libnetwork to ebcade70ad1059b070d0040d798ecca359bc5fed 
full diff: 1a06131fb8...ebcade70ad

relevant changes:

- docker/libnetwork#2349 IPVS: Add support for GetConfig/SetConfig
- docker/libnetwork#2343 Revert "debian has iptables-legacy and iptables-nft now"
- docker/libnetwork#2230 Moving IPVLAN driver out of experimental
- docker/libnetwork#2307 Fix for problem where agent is stopped and does not restart
- docker/libnetwork#2303 Touch-up error-message and godoc for ConfigVXLANUDPPort
- docker/libnetwork#2325 Fix possible nil pointer exception
- docker/libnetwork#2302 Use sync.RWMutex for VXLANUDPPort
- docker/libnetwork#2306 Improve error if auto-selecting IP-range failed

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-04-01 19:40:09 +02:00
Brian Goff
3f08ab936f
Merge pull request #38965 from thaJeztah/bump_cgroups 
update containerd/cgroups 4994991857f9b0ae8dc439551e8bebdbb4bf66c1
 2019-03-28 22:26:34 -07:00
Brian Goff
ab47e16cc5
Merge pull request #38918 from thaJeztah/bump_selinux 
bump opencontainers/selinux to v1.2
 2019-03-28 17:27:03 -07:00
Sebastiaan van Stijn
7392abda03
update containerd/cgroups 4994991857f9b0ae8dc439551e8bebdbb4bf66c1 
full diff: dbea6f2bd4...4994991857

brings in https://github.com/containerd/cgroups/pull/79 Return ErrCgroupDeleted when no subsystems
relates to https://github.com/containerd/containerd/issues/3133 Custom cgroup path does not work in containerd 1.2.5

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-03-29 00:00:06 +01:00
John Howard
b2488120ff Vendor Microsoft/hcsshim@ba3d6667 
Signed-off-by: John Howard <jhoward@microsoft.com>
 2019-03-27 14:12:40 -07:00
Sebastiaan van Stijn
a356c4eaee
bump swarmkit 18e7e58ea1a5ec016625a636d0d52500eea123bc 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-03-26 14:57:19 +01:00
Sebastiaan van Stijn
e4cc3adf81
Merge pull request #38922 from Microsoft/jjh/grantvmgroupaccess 
LCOW: Add VMGroup SID to layer.vhd; fix layer folder perm
 2019-03-23 12:02:19 +01:00
John Howard
36d8e29140 Vendor Microsoft/go-winio@c599b533 
Signed-off-by: John Howard <jhoward@microsoft.com>
 2019-03-21 13:12:17 -07:00
Justin Cormack
b3251001c6
Update golang.org/x/crypto 
Fixes issues with salsa which is used in swarmkit, see
https://github.com/docker/swarmkit/pull/2838

As we only encrypt small values this should be a non breaking change.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
 2019-03-21 16:48:45 +00:00
Sebastiaan van Stijn
f43826c433
bump opencontainers/selinux to v1.2 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2019-03-21 10:10:05 +01:00
Tonis Tiigi
e96d1c3754 vendor: update buildkit to e9aca5be 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2019-03-20 22:01:23 -07:00
John Howard
a3eda72f71
Merge pull request #38541 from Microsoft/jjh/containerd 
Windows: Experimental: ContainerD runtime
 2019-03-19 21:09:19 -07:00
Tibor Vass
8f936ae8cf Add DeviceRequests to HostConfig to support NVIDIA GPUs 
This patch hard-codes support for NVIDIA GPUs.
In a future patch it should move out into its own Device Plugin.

Signed-off-by: Tibor Vass <tibor@docker.com>
 2019-03-18 17:19:45 +00:00
Tonis Tiigi
0289aa436c builder-next: support runtime platform detection 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
 2019-03-15 00:33:47 -07:00