Commit graph

1777 commits

Author SHA1 Message Date
Brian Goff
aa180e5f31 Merge pull request #30399 from albers/completion-swarm-lock
Add bash completion for `docker swarm unlock|unlock-key`
2017-01-24 09:43:07 -05:00
Brian Goff
3bc021cdf3 Merge pull request #30398 from albers/completion-swarm-init
Add missing options to bash completion for `docker swarm init|update`
2017-01-24 09:41:30 -05:00
Brian Goff
47da8175be Merge pull request #30373 from albers/completion-fix-service-update
Fix bash completion for `docker service update`
2017-01-24 09:31:53 -05:00
Vincent Demeester
d417dd7886 Merge pull request #30248 from albers/completion-capabilities
Improve bash completion for `docker run --cap-{add,drop}`
2017-01-24 12:10:14 +01:00
Vincent Demeester
bb9f7cb280 Merge pull request #30371 from albers/completion-fix-plugin-ls
Fix bash completion for `docker plugin ls`
2017-01-24 11:46:13 +01:00
Harald Albers
07bd5152b3 Add bash completion for docker swarm unlock|unlock-key
Signed-off-by: Harald Albers <github@albersweb.de>
2017-01-24 10:11:38 +01:00
Harald Albers
f93da79dc1 Add missing options to bash completion for docker swarm init|update
Signed-off-by: Harald Albers <github@albersweb.de>
2017-01-24 10:00:18 +01:00
Harald Albers
550947e437 Fix bash completion for completing nodes
Signed-off-by: Harald Albers <github@albersweb.de>
2017-01-24 09:24:34 +01:00
Akihiro Suda
929ae4a0b6 Merge pull request #30375 from albers/completion-service-ps--filter-node
Add bash completion for `docker service ps --filter node`
2017-01-24 11:49:16 +09:00
Brian Goff
b157b3c648 Merge pull request #30318 from sdurrheimer/zsh-completion-init
Add zsh completion for 'dockerd --init' and 'docker {create,run} --init'
2017-01-23 16:28:25 -05:00
Harald Albers
a39a2bb6c2 Add bash completion for docker service ps --filter node
Signed-off-by: Harald Albers <github@albersweb.de>
2017-01-23 19:05:00 +01:00
Harald Albers
01ac33ce16 Fix bash completion for docker service update
Signed-off-by: Harald Albers <github@albersweb.de>
2017-01-23 18:48:21 +01:00
Harald Albers
72bd2f8fd3 Fix bash completion for docker plugin ls
Signed-off-by: Harald Albers <github@albersweb.de>
2017-01-23 18:24:51 +01:00
Anusha Ragunathan
6d6a7fc70c Add bash completion for newly added options to "docker plugin ls"
Signed-off-by: Anusha Ragunathan <anusha.ragunathan@docker.com>
2017-01-20 15:59:44 -08:00
Tibor Vass
7a97705b52 Merge pull request #29959 from cpuguy83/master_fix_selinux_packaging
[master] Fix conflicts with newly updated selinux policies
2017-01-20 15:13:18 -08:00
Sebastiaan van Stijn
ae99820357 Merge pull request #30282 from sdurrheimer/zsh-completion-swarm-join-availability
Add zsh completion for 'docker swarm --availability'
2017-01-20 17:52:06 +01:00
Sebastiaan van Stijn
156d402133 Merge pull request #30317 from sdurrheimer/zsh-completion-prune-filter
Add zsh completion for 'docker {container,image,network,system} prune --filter
2017-01-20 16:25:42 +01:00
Steve Durrheimer
cdf57782fd
Add zsh completion for 'dockerd --init' and 'docker {create,run} --init'
Signed-off-by: Steve Durrheimer <s.durrheimer@gmail.com>
2017-01-20 16:06:22 +01:00
Steve Durrheimer
784ebccffa
Add zsh completion for 'docker {container,image,network,system} prune --filter'
Signed-off-by: Steve Durrheimer <s.durrheimer@gmail.com>
2017-01-20 15:49:21 +01:00
Harald Albers
182048f185 Add bash completion for run|create --init-path
Signed-off-by: Harald Albers <github@albersweb.de>
2017-01-19 08:33:05 -08:00
Steve Durrheimer
ee2ce82c61
Add zsh completion for 'docker swarm --availability'
Signed-off-by: Steve Durrheimer <s.durrheimer@gmail.com>
2017-01-19 16:54:36 +01:00
Steve Durrheimer
82e62b15f3
Add zsh completion for multiple service for 'docker service ps'
Signed-off-by: Steve Durrheimer <s.durrheimer@gmail.com>
2017-01-19 09:04:51 +01:00
Steve Durrheimer
455b7bcbab
Add zsh completion for 'docker plugin install --alias'
Signed-off-by: Steve Durrheimer <s.durrheimer@gmail.com>
2017-01-19 08:58:44 +01:00
Harald Albers
2076261757 Add bash completion for dockerd --init and docker run|create --init
Fixes #30263

Signed-off-by: Harald Albers <github@albersweb.de>
2017-01-19 08:22:14 +01:00
Brian Goff
0e8c7d7277 Merge pull request #30208 from justincormack/no-sqlite
Remove sqlite dependency
2017-01-18 13:15:38 -05:00
Harald Albers
36d8b66cb9 Improve bash completion for docker run --cap-{add,drop}
Docker has several capabilities enabled by default and some not.
It seems natural to follow this distinction in --cap-add and
--cap-drop.

Signed-off-by: Harald Albers <github@albersweb.de>
2017-01-18 16:04:46 +01:00
Justin Cormack
f8119bb7a7 Remove sqlite
This drops support for migrations from pre-1.10 Docker versions, which
should be done via an external tool or an intermediate upgrade.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-01-18 12:27:21 +00:00
Mark Milstein
296f8d5abc add rpm builder for armhf CentOS 7
Signed-off-by: Mark Milstein <mark@epiloque.com>
2017-01-17 18:05:38 +00:00
Justin Cormack
7e3a596a63 Block obsolete socket families in the default seccomp profile
Linux supports many obsolete address families, which are usually available in
common distro kernels, but they are less likely to be properly audited and
may have security issues

This blocks all socket families in the socket (and socketcall where applicable) syscall
except
- AF_UNIX - Unix domain sockets
- AF_INET - IPv4
- AF_INET6 - IPv6
- AF_NETLINK - Netlink sockets for communicating with the ekrnel
- AF_PACKET - raw sockets, which are only allowed with CAP_NET_RAW

All other socket families are blocked, including Appletalk (native, not
over IP), IPX (remember that!), VSOCK and HVSOCK, which should not generally
be used in containers, etc.

Note that users can of course provide a profile per container or in the daemon
config if they have unusual use cases that require these.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2017-01-17 17:50:44 +00:00
Dmitry Kononenko
dfa4e77d82
bugfix issie 18826: containers do not restart after reboot when bound to virtual network interface
Signed-off-by: Dmitry Kononenko <d@dm42.ru>
2017-01-17 14:05:54 +01:00
Harald Albers
e91dbba7ff Add bash completion for build --squash
Signed-off-by: Harald Albers <github@albersweb.de>
2017-01-17 08:52:18 +01:00
Harald Albers
217786423c Add bash completion for container|image|network prune --filter until
Signed-off-by: Harald Albers <github@albersweb.de>
2017-01-16 10:47:52 +01:00
Vincent Demeester
fd0ea76931 Merge pull request #30163 from albers/completion-fix-hide-legacy-commands
Fix treatment of DOCKER_HIDE_LEGACY_COMMANDS in bash completion
2017-01-16 10:01:44 +01:00
Sebastiaan van Stijn
96f7cf254b Merge pull request #30143 from tophj-ibm/multi-get-go-from-own-dockerfile
[multi-arch] get go version from arch dockerfile
2017-01-15 15:47:55 +01:00
Brian Goff
0fcd55072b Merge pull request #29902 from caervs/add_autorestart
Add on-failure to default restart policy
2017-01-14 16:40:02 -05:00
Brian Goff
1bbd75c743 Merge pull request #30125 from albers/completion-plugin-install--disable-content-trust
Add bash completion for `plugin install --disable-content-trust`
2017-01-14 09:04:51 -05:00
Harald Albers
12952f537c Fix treatment of DOCKER_HIDE_LEGACY_COMMANDS in bash completion
Signed-off-by: Harald Albers <github@albersweb.de>
2017-01-14 04:48:41 -08:00
Christopher Jones
fa17ac2560
[multi-arch] get go version from arch dockerfile
Changes a couple of generate scripts so that the architecture
gets the go version from its own Dockerfile. This should cover a
rare case where the go version might have to be different from
the x86 Dockerfile.

Signed-off-by: Christopher Jones <tophj@linux.vnet.ibm.com>
2017-01-13 16:48:41 -05:00
Harald Albers
aa006f1280 Honour $DOCKER_HIDE_LEGACY_COMMANDS in bash completion
Signed-off-by: Harald Albers <github@albersweb.de>
2017-01-13 15:43:52 +01:00
Harald Albers
725a864a04 Add bash completion for plugin install --disable-content-trust
Signed-off-by: Harald Albers <github@albersweb.de>
2017-01-13 11:56:50 +01:00
Harald Albers
f487b268f9 Add bash completion for swarm join --availability
Signed-off-by: Harald Albers <github@albersweb.de>
2017-01-11 10:30:56 -08:00
Brian Goff
ec9a05e5e2 Fix conflicts with newly updated selinux policies
The base selinux policies on centos/rhel/oraclelinux have all been
updated in a way that conflicts with the policies we install with
`docker-engine-selinux`. This patch fixes these conflicts.

In addition, removes special cases for old/unsupported versions of
fedora in our selinux package, and change to use a single minimum
version for the selinux base policy package, as this is the minimum
version required to use our selinux policy package.

Signed-off-by: Brian Goff <cpuguy83@gmail.com>
2017-01-06 16:04:24 -05:00
Ryan Abrams
7b9ecb9700 Add on-failure to default restart policy
In the event that the docker daemon is managed by systemd and spontaneously
dies the default service configuration does not have docker restart. For people
who just want to install and start docker then never worry about whether docker
is running a better default may be to restart the service on a failure.

Signed-off-by: Ryan Abrams <rdabrams@gmail.com>
2017-01-06 10:23:44 -08:00
Vincent Demeester
ee9bb347a6 Merge pull request #29741 from yuexiao-wang/update-option
keep network options consistent between network connect and run
2017-01-06 19:01:48 +01:00
Vincent Demeester
1dad4cf30c Merge pull request #29888 from albers/completion-plugin-names
Add bash completion for plugin names
2017-01-05 09:54:17 +01:00
Yunxiang Huang
c6544394b8 Fix "zsh/_docker"
Signed-off-by: Yunxiang Huang <hyxqshk@vip.qq.com>
2017-01-05 11:13:17 +08:00
Harald Albers
e7243a303a Add bash completion for plugin names
Signed-off-by: Harald Albers <github@albersweb.de>
2017-01-04 09:53:14 -08:00
yuexiao-wang
4f9b076e8e keep network option consistent between network connect and run
Signed-off-by: yuexiao-wang <wang.yuexiao@zte.com.cn>
2017-01-04 19:54:03 +08:00
Vincent Demeester
6129e6ce3e Merge pull request #29697 from yuexiao-wang/fix-docker-daemon
Update docker daemon to dockerd
2017-01-04 11:55:38 +01:00
Harald Albers
3f5d11c9bf Support multiple services on bash completion for docker service ps
Signed-off-by: Harald Albers <github@albersweb.de>
2017-01-03 05:58:13 -08:00
Brian Goff
95a52ef687 Merge pull request #29783 from sanimej/check-config
Update check-config.sh to include modules for FTP/TFTP
2017-01-02 10:24:40 -05:00
Harald Albers
e1403453f0 Add bash completion for plugin disable --force
Signed-off-by: Harald Albers <github@albersweb.de>
2016-12-31 09:28:03 -08:00
Harald Albers
390effdd11 Fix bash completion for plugin enable|disable
`docker plugin enable` and `docker plugin disable` only
accept one plugin.

Signed-off-by: Harald Albers <github@albersweb.de>
2016-12-31 09:23:46 -08:00
Santhosh Manohar
e475136208 Update check-config.sh to include modules for FTP/TFTP
Signed-off-by: Santhosh Manohar <santhosh@docker.com>
2016-12-29 13:04:36 -08:00
zhenghenghuo
f1a19fa8c0 fix some typos
Signed-off-by: zhenghenghuo <zhenghenghuo@zju.edu.cn>

try to pass test

Signed-off-by: zhenghenghuo <zhenghenghuo@zju.edu.cn>

try to pass the test

Signed-off-by: zhenghenghuo <zhenghenghuo@zju.edu.cn>
2016-12-28 09:43:27 +08:00
yuexiao-wang
62cc802f61 Update docker daemon to dockerd
Signed-off-by: yuexiao-wang <wang.yuexiao@zte.com.cn>
2016-12-27 17:32:15 +08:00
Tõnis Tiigi
b81f47a288 Merge pull request #29690 from albers/completion-plugin-install--alias
Add bash completion for `plugin install --alias`
2016-12-26 18:42:54 -08:00
Harald Albers
d5935f83a7 Cleanup bash completion for service create|update
Signed-off-by: Harald Albers <github@albersweb.de>
2016-12-25 06:04:43 -08:00
Harald Albers
83158f8aff Add bash completion for plugin install --alias
Signed-off-by: Harald Albers <github@albersweb.de>
2016-12-25 05:32:50 -08:00
Brian Goff
76b4f5ac28 Merge pull request #29606 from albers/completion-plugins-bundled
Improve bash completion for bundled plugins
2016-12-21 17:12:27 -05:00
Brian Goff
0525a5d729 Merge pull request #27722 from micro-jumbo/master
Stop returns 0 when docker service was not running
2016-12-21 16:08:04 -05:00
Brian Goff
7548fc7637 Merge pull request #28900 from tophj-ibm/ppc64le-rpmbuild-fedora23
[ppc64le] add make rpm for fedora 24
2016-12-21 13:43:13 -05:00
Harald Albers
9ca56f7683 Improve bash completion for bundled plugins
Signed-off-by: Harald Albers <github@albersweb.de>
2016-12-20 13:28:46 -08:00
Harald Albers
536a9ec698 Remove bash completion for deprecated docker daemon
Signed-off-by: Harald Albers <github@albersweb.de>
2016-12-19 11:40:59 -08:00
Harald Albers
a54cc4f88d Remove bash completion for docker node ps --all|-a
Signed-off-by: Harald Albers <github@albersweb.de>
2016-12-18 06:31:25 -08:00
Andrew Hsu
ef98091a90 remove fedora-23 because eol
Signed-off-by: Andrew Hsu <andrewhsu@docker.com>
2016-12-15 09:44:34 -08:00
Victor Vieux
9a30560fda Merge pull request #29413 from albers/completion-deploy-experimental
Make bash completion for `docker stack deploy --bundle-file` available only in experimental mode
2016-12-14 17:24:50 -08:00
Kenfe-Mickaël Laventure
b6f870a278 Merge pull request #29387 from vicamo/add-debian-security-updates-when-available
mkimage: add debian security updates source when available
2016-12-14 09:54:50 -08:00
Sebastiaan van Stijn
2fe62f2395 Merge pull request #28943 from vdemeester/publish-long-short-syntax
Remove --port and update --publish for services to support syntaxes
2016-12-14 17:55:48 +01:00
Harald Albers
a53bdfa3be Make bash completion for docker stack deploy --bundle-file experimental
Signed-off-by: Harald Albers <github@albersweb.de>
2016-12-14 08:52:07 -08:00
You-Sheng Yang (楊有勝)
e2e5d4bc9d mkimage: add debian security updates source when available
Signed-off-by: You-Sheng Yang (楊有勝) <vicamo@gmail.com>
2016-12-14 23:23:00 +08:00
lixiaobing10051267
cde57a0d56 modify some wrong func information in device_tool.go
Signed-off-by: lixiaobing10051267 <li.xiaobing1@zte.com.cn>
2016-12-13 17:49:03 +08:00
Sebastiaan van Stijn
9863470c96 Merge pull request #29305 from albers/completion-inspect-plugins
Add bash completion for `docker inspect --type plugin`
2016-12-12 10:13:30 +01:00
Steve Durrheimer
2bdffc1fb5
Add zsh completion for 'docker inspect --type=plugin' and other missing ones
Signed-off-by: Steve Durrheimer <s.durrheimer@gmail.com>
2016-12-12 10:09:05 +01:00
Vincent Demeester
75bf18c9f0 Remove --port and update --publish for services to support syntaxes
Add support for simple and complex syntax to `--publish` through the
use of `PortOpt`.

Signed-off-by: Vincent Demeester <vincent@sbr.pm>
2016-12-11 23:14:54 +01:00
Harald Albers
81b4b2b5fa Add bash completion for docker inspect --type plugin
Signed-off-by: Harald Albers <github@albersweb.de>
2016-12-10 13:31:42 -08:00
Andrew Hsu
387b95216b Revert "add selinux policy for centos-7"
This reverts commit e0852bec96.

Signed-off-by: Andrew Hsu <andrewhsu@docker.com>
2016-12-08 16:27:48 -08:00
Andrew Hsu
28cfdc62bd Revert "add extra docker.te lines from rhel7.3 docker.spec"
This reverts commit 09e68fdd52.

Signed-off-by: Andrew Hsu <andrewhsu@docker.com>
2016-12-08 16:27:36 -08:00
Andrew Hsu
793be849c8 Revert "get rhel7.3 selinux-policy-devel pkg for centos-7"
This reverts commit bfe5cab13b.

Signed-off-by: Andrew Hsu <andrewhsu@docker.com>
2016-12-08 16:27:23 -08:00
Christy Perez
42969d44fc
ppc64le rpmbuild
Add support for 'make rpm' on ppc64le. Currently only fedora 24.

Signed-off-by: Christy Perez <christy@linux.vnet.ibm.com>
2016-12-08 17:16:16 -05:00
Christopher Jones
62ab6809bd
[ppc64le] use official go 1.7.4 binaries
go 1.7.4 introduced official go ppc64le binaries, so use those
instead of using older versions of go and building from src.

Signed-off-by: Christopher Jones <tophj@linux.vnet.ibm.com>
2016-12-08 16:18:10 -05:00
Brian Goff
3b31de62b9 Merge pull request #29142 from tophj-ibm/move-go-to-1.7.4
[project] bump go to go 1.7.4
2016-12-08 11:48:34 -05:00
Christopher Jones
20e243780e
[project] bump go to go 1.7.4
Signed-off-by: Christopher Jones <tophj@linux.vnet.ibm.com>
2016-12-07 22:22:39 -05:00
Tõnis Tiigi
1e92365a5f Merge pull request #29124 from ijc25/check-config-legacy-vsyscall
Caution against the use of CONFIG_LEGACY_VSYSCALL_NATIVE
2016-12-07 17:13:55 -08:00
Steve Durrheimer
bce11a29f8
Add zsh completion for 'docker network create --attachable'
Signed-off-by: Steve Durrheimer <s.durrheimer@gmail.com>
2016-12-07 08:09:42 +01:00
Harald Albers
8d2e789bbc Add bash completion for docker network create --attachable
Signed-off-by: Harald Albers <github@albersweb.de>
2016-12-06 08:44:02 -08:00
Brian Goff
b7ab3276c2 Merge pull request #29081 from andrewhsu/fix-rhel73
add selinux policy for centos-7
2016-12-06 11:00:45 -05:00
Sebastiaan van Stijn
6a8156d646 Merge pull request #29115 from andrewhsu/fix-vim-install
run dnf upgrade before installing in fedora
2016-12-05 19:05:14 +01:00
Sebastiaan van Stijn
2ef729460d Merge pull request #29111 from albers/fix-completion-service-create-update
Fix bash completion for `docker service create|update
2016-12-05 15:16:23 +01:00
Brian Goff
602efb0cab Merge pull request #29109 from albers/completion-secrets
Add bash completion for secret management
2016-12-05 09:13:26 -05:00
Ian Campbell
49dcce7ba0 Caution against the use of CONFIG_LEGACY_VSYSCALL_NATIVE
It provides an ASLR-bypassing target with usable ROP gadgets.

Signed-off-by: Ian Campbell <ian.campbell@docker.com>
2016-12-05 10:13:07 +00:00
Andrew Hsu
ebd804bfb6 run dnf upgrade before installing in fedora
Signed-off-by: Andrew Hsu <andrewhsu@docker.com>
2016-12-04 16:29:03 -08:00
Harald Albers
3d43c48c1b Add bash completion for docker version --format
Signed-off-by: Harald Albers <github@albersweb.de>
2016-12-04 14:13:14 -08:00
Harald Albers
be5685e4bf Fix bash completion for `docker service create|update
Signed-off-by: Harald Albers <github@albersweb.de>
2016-12-04 12:11:33 -08:00
Harald Albers
324dd3cfec Add bash completion for secret management
Signed-off-by: Harald Albers <github@albersweb.de>
2016-12-04 11:25:41 -08:00
Andrew Hsu
bfe5cab13b get rhel7.3 selinux-policy-devel pkg for centos-7
Signed-off-by: Andrew Hsu <andrewhsu@docker.com>
2016-12-02 14:39:24 -08:00
Andrew Hsu
09e68fdd52 add extra docker.te lines from rhel7.3 docker.spec
Signed-off-by: Andrew Hsu <andrewhsu@docker.com>
2016-12-02 14:18:58 -08:00
Andrew Hsu
e0852bec96 add selinux policy for centos-7
This policy is from commit
583a67ffdf

Signed-off-by: Andrew Hsu <andrewhsu@docker.com>
2016-12-02 10:26:00 -08:00
Vincent Demeester
1c69680641 Merge pull request #28738 from sathieu/debootstrap_errors
Improve error reporting in mkimage/debootstrap
2016-12-02 17:41:08 +01:00
Harald Albers
10f567ec6a Add bash completion for experimental docker deploy
Signed-off-by: Harald Albers <github@albersweb.de>
2016-12-02 04:28:10 -08:00