beenull/moby
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity
43019 commits 14 branches 412 tags 338 MiB
Commit graph

43019 commits

This branch
This branch
All branches
Author SHA1 Message Date
Sebastiaan van Stijn
f91b0d39ed
Merge pull request #41459 from thaJeztah/caps_refactor 
oci/caps: refactor, remove unused code, and improved error messages
 2021-08-09 20:12:14 +02:00
Sebastiaan van Stijn
91dc595e96
Merge pull request #42716 from rvolosatovs/discard_type_pre_1_42 
API: discard `/system/df` `type` parameter pre-1.42
 2021-08-07 15:46:03 +02:00
Roman Volosatovs
0fdd23b7fe
API: discard /system/df type parameter pre-1.42 
The parameter is introduced in API version 1.42

Signed-off-by: Roman Volosatovs <roman.volosatovs@docker.com>
 2021-08-06 19:33:16 +02:00
Sebastiaan van Stijn
5e498e20f7
Merge pull request #42710 from rvolosatovs/parallelize_system_df 
daemon: paralellize disk usage computations
 2021-08-06 09:55:51 +02:00
Brian Goff
6a60efc39b
Merge pull request #42684 from thaJeztah/remove_lcow_step7 
Remove LCOW (step 7): remove LCOW bits from builder/dockerfile (copy)
 2021-08-05 15:16:24 -07:00
Samuel Karp
8b43104937
Merge pull request #42672 from thaJeztah/pkg_archive_debuglogs 2021-08-05 12:04:59 -07:00
Tianon Gravi
11fb1ba0c6
Merge pull request #42685 from thaJeztah/remove_lcow_step8 
Remove LCOW (step 8): libcontainerd/local: remove LCOW bits
 2021-08-05 11:50:48 -07:00
Roman Volosatovs
a18cf3e4ef
daemon: paralellize disk usage computations 
Signed-off-by: Roman Volosatovs <roman.volosatovs@docker.com>
 2021-08-05 14:42:31 +02:00
Tianon Gravi
deda3d4933
Merge pull request #42708 from AkihiroSuda/rootlesskit-0.14.4 
bump up rootlesskit to v0.14.4
 2021-08-04 16:24:11 -07:00
Sebastiaan van Stijn
58c4c120a8
oci/caps: simplify, and remove types that were not needed 
The `CapabilityMapping` and `Capabilities` types appeared to be only
used locally, and added unneeded complexity.

This patch removes those types, and simplifies the logic to use a
map that maps names to `capability.Cap`s

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2021-08-04 11:25:55 +02:00
Sebastiaan van Stijn
fc3f98848a
oci/caps: improve error message for unsupported capabilities 
A capability can either be invalid, or not supported by the kernel
on which we're running. This patch changes the error message produced
to reflect if the capability is invalid/unknown, or a known capability,
but not supported by the kernel version.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2021-08-04 11:25:53 +02:00
Sebastiaan van Stijn
72b1fb59fe
oci/caps: use map for capabilities to simplify lookup 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2021-08-04 11:25:51 +02:00
Sebastiaan van Stijn
d786a52364
oci/caps: generate list of all capabilities on "init" 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2021-08-04 11:25:48 +02:00
Sebastiaan van Stijn
0ec6f7ea23
oci/caps: minor optimization in init 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2021-08-04 11:25:44 +02:00
Sebastiaan van Stijn
b00b21b93c
oci/caps: rename some vars that conflicted with imports / built-ins 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2021-08-04 11:24:40 +02:00
Sebastiaan van Stijn
94334153b5
oci/caps: remove hack for RHEL6 kernels 
We no longer support these kernels, so we can remove the workaround

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2021-08-04 11:23:56 +02:00
Sebastiaan van Stijn
e6a3313f16
Merge pull request #42011 from thaJeztah/remove_capabilities_hack 
Revert "Temporarily disable CAP_PERFMON, CAP_BPF, and CAP_CHECKPOINT_RESTORE
 2021-08-04 11:15:09 +02:00
Akihiro Suda
9499acc360
bump up rootlesskit to v0.14.4 
Fixes `panic: tap2vif: read: read /dev/net/tun: not pollable` on early
start up of RootlessKit with VPNKit.

Changes:
- https://github.com/rootless-containers/rootlesskit/releases/tag/v0.14.4
- https://github.com/rootless-containers/rootlesskit/releases/tag/v0.14.3

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
 2021-08-04 16:34:09 +09:00
Samuel Karp
52af466716
Merge pull request #42594 from rvolosatovs/fix_concurrency_test 
hack/test/unit: run `libnetwork` tests sequentially
 2021-08-03 09:52:02 -07:00
Sebastiaan van Stijn
0c88b0dc82
Merge pull request #42618 from thaJeztah/remove_common_unix_config 
daemon/config: remove commonUnixBridgeConfig and CommonUnixConfig
 2021-08-03 16:52:10 +02:00
Sebastiaan van Stijn
c1c973e81b
Revert "Temporarily disable CAP_PERFMON, CAP_BPF, and CAP_CHECKPOINT_RESTORE" 
Now that runc v1.0.0-rc93 is used, we can revert this temporary workaround

This reverts commit a38b96b8cd.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2021-08-03 16:12:31 +02:00
Sebastiaan van Stijn
2480bebf59
Merge pull request #42649 from kinvolk/rata/seccomp-default-errno 
seccomp: Use explicit DefaultErrnoRet
 2021-08-03 15:13:42 +02:00
Sebastiaan van Stijn
7672963eec
Merge pull request #42703 from rvolosatovs/fix_network_db_test 
libnetwork: wait until t.Deadline() instead of hardcoded value
 2021-08-03 15:12:27 +02:00
Roman Volosatovs
3af2217dc4
hack/test/unit: run libnetwork tests sequentially 
Run all tests within `libnetwork` namespace with `-p=1`
in a separate `gotestsum` invocation.

Signed-off-by: Roman Volosatovs <roman.volosatovs@docker.com>
 2021-08-03 12:19:49 +02:00
Sebastiaan van Stijn
656a5e2bdf
Merge pull request #42559 from rvolosatovs/system_df_types 
Add `type` parameter to `/system/df`
 2021-08-02 21:03:05 +02:00
Sebastiaan van Stijn
bca9f60845
Merge pull request #42697 from thaJeztah/update_containerd_1.5.5 
Update to containerd v1.5.5
 2021-08-02 09:58:10 +02:00
Roman Volosatovs
b821590461
libnetwork/networkdb: consistently wait for nodes in tests 
Use `verifyNetworkExistence` like it was done in 2837fba75f

Signed-off-by: Roman Volosatovs <roman.volosatovs@docker.com>
 2021-08-01 17:47:51 +02:00
Roman Volosatovs
8fbba73f42
libnetwork: wait until t.Deadline() instead of hardcoded value 
Signed-off-by: Roman Volosatovs <roman.volosatovs@docker.com>
 2021-08-01 17:47:50 +02:00
Sebastiaan van Stijn
0b39cc2e57
Merge pull request #42623 from thaJeztah/remove_containerd_from_client 
Remove containerd "platform" dependency from client
 2021-07-31 18:45:29 +02:00
Rodrigo Campos
fb794166d9 seccomp: Use explicit DefaultErrnoRet 
Since commit "seccomp: Sync fields with runtime-spec fields"
(5d244675bd) we support to specify the
DefaultErrnoRet to be used.

Before that commit it was not specified and EPERM was used by default.
This commit keeps the same behaviour but just makes it explicit that the
default is EPERM.

Signed-off-by: Rodrigo Campos <rodrigo@kinvolk.io>
 2021-07-30 19:13:21 +02:00
Justin Cormack
f07e53e0bb
Merge pull request #42681 from berrange/seccomp-clone3 
seccomp: add support for "clone3" syscall in default policy
 2021-07-30 15:06:21 +01:00
Sebastiaan van Stijn
5f0703c549
client: remove containerd "platform" dependency 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2021-07-29 23:32:46 +02:00
Sebastiaan van Stijn
b33f3c7802
client: remove unused Platform field from configWrapper 
This field was added in 7a9cb29fb9,
but appears to be unused, so removing it.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2021-07-29 23:28:12 +02:00
Sebastiaan van Stijn
3d58d13811
vendor: github.com/containerd/containerd v1.5.5 
full diff: https://github.com/containerd/containerd/compare/v1.5.4...v1.5.5

Welcome to the v1.5.5 release of containerd!

The fifth patch release for containerd 1.5 updates runc to 1.0.1 and contains
other minor updates.

Notable Updates

- Update runc binary to 1.0.1
- Update pull logic to try next mirror on non-404 response
- Update pull authorization logic on redirect

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2021-07-29 21:09:59 +02:00
Brian Goff
ada51d6d29
Merge pull request #42679 from thaJeztah/update_swarmkit 
vendor: github.com/docker/swarmkit 3629f50980f6c0dd5ccd7dbfa0956b57ea0cd78d
 2021-07-29 11:36:04 -07:00
Brian Goff
51b06c6795
Merge pull request #42683 from thaJeztah/remove_lcow_step6 
Remove LCOW (step 6)
 2021-07-29 11:34:29 -07:00
Sebastiaan van Stijn
4a07b89e9a
update containerd binary to v1.5.5 
Welcome to the v1.5.5 release of containerd!

The fifth patch release for containerd 1.5 updates runc to 1.0.1 and contains
other minor updates.

Notable Updates

- Update runc binary to 1.0.1
- Update pull logic to try next mirror on non-404 response
- Update pull authorization logic on redirect

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2021-07-29 19:53:26 +02:00
Brian Goff
3ad9549e70
Merge pull request #42545 from steffengy/master 
libnetwork: processEndpointDelete: Fix deadlock between getSvcRecords and processEndpointDelete
 2021-07-29 09:29:34 -07:00
Sebastiaan van Stijn
39a9d034f1
Merge pull request #41897 from gunadhya/f-Update_check_config 
Updated check_config with cgroupv2 controllers
 2021-07-29 13:56:25 +02:00
Brian Goff
ad268e79c4
Merge pull request #42193 from lzhfromustc/3_23 
discovery & test: Fix goroutine leaks by adding 1 buffer to channel
 2021-07-28 15:25:37 -07:00
Sebastiaan van Stijn
e3491ab56a
pkg/archive: gzDecompress(): use local vars for MOBY_DISABLE_PIGZ 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2021-07-28 00:11:48 +02:00
Sebastiaan van Stijn
b321474747
pkg/archive: DetectCompression(): use bytes.HasPrefix() 
The existing code was the exact equivalent of bytes.HasPrefix();

    // HasPrefix tests whether the byte slice s begins with prefix.
    func HasPrefix(s, prefix []byte) bool {
    	return len(s) >= len(prefix) && Equal(s[0:len(prefix)], prefix)
    }

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2021-07-28 00:11:46 +02:00
Sebastiaan van Stijn
ebeda658bc
pkg/archive: remove some debug logs 
These seemed fairly redundant

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2021-07-28 00:11:43 +02:00
Sebastiaan van Stijn
dc7c06ce4e
vendor: github.com/docker/swarmkit 3629f50980f6c0dd5ccd7dbfa0956b57ea0cd78d 
removes use of the deprecated pkg/signal.

full diff: 2dcf70aafd...3629f50980

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2021-07-28 00:10:19 +02:00
Brian Goff
1f42dd5e91
Merge pull request #42658 from thaJeztah/buildx_0.6 
Makefile: update buildx version to v0.6.0
 2021-07-27 14:20:24 -07:00
Sebastiaan van Stijn
e05fc8ca35
builder/dockerfile: make normalizeDest() platform-specific again 
Removing various bits that were added in 7a7357dae1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2021-07-27 23:14:40 +02:00
Sebastiaan van Stijn
337500f374
builder/dockerfile: make containsWildcards() platform-specific again 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2021-07-27 23:14:38 +02:00
Sebastiaan van Stijn
131fac6eb4
builder/dockerfile: remove fromSlash() and separator() utils 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2021-07-27 23:14:36 +02:00
Sebastiaan van Stijn
190b6f64e3
builder/dockerfile: copy: remove LCOW code 
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2021-07-27 23:14:28 +02:00
Brian Goff
4a3dea5e13
Merge pull request #42666 from rvolosatovs/fix_test_closures 
Fix incorrect loop variable usage in parallel test closures
 2021-07-27 09:55:44 -07:00