Tianon Gravi
8296125b32
Merge pull request #5532 from vieux/add_apparmor_dockerfile
...
Add apparmor to the Dockerfile to fix dind issues
2014-05-01 15:00:48 -06:00
Victor Vieux
fa1e390cad
add apparmor to the Dockerfile
...
Docker-DCO-1.1-Signed-off-by: Victor Vieux <vieux@docker.com > (github: vieux)
2014-05-01 20:51:16 +00:00
Michael Crosby
20bcb80f40
Merge pull request #5457 from tiborvass/5423-bridge-ip
...
Fix bridge ip comparison
2014-05-01 11:56:47 -07:00
Michael Crosby
ab0518bfe8
Merge pull request #5528 from crosbymichael/drop-capsyslog
...
drop CAP_SYSLOG capability
2014-05-01 11:52:08 -07:00
Eiichi Tsukata
cac0cea03f
drop CAP_SYSLOG capability
...
Kernel capabilities for privileged syslog operations are currently splitted into
CAP_SYS_ADMIN and CAP_SYSLOG since the following commit:
http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=ce6ada35bdf710d16582cc4869c26722547e6f11
This patch drops CAP_SYSLOG to prevent containers from messing with
host's syslog (e.g. `dmesg -c` clears up host's printk ring buffer).
Closes #5491
Docker-DCO-1.1-Signed-off-by: Eiichi Tsukata <devel@etsukata.com > (github: Etsukata)
Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com > (github: crosbymichael)
2014-05-01 11:43:55 -07:00
Guillaume J. Charmes
fe4a25546a
Merge pull request #5515 from crosbymichael/refactor-libcontainer2
...
Remove CommandFactory and NsInit interface
2014-05-01 11:41:54 -07:00
Solomon Hykes
10a50fcd8f
Merge pull request #5526 from shykes/pr_out_beam_add_simple_framing_system_for_unixconn
2014-05-01 11:06:14 -07:00
Alexander Larsson
24f9187a04
beam: Add simple framing system for UnixConn
...
This is needed for Send/Recieve to correctly handle borders between
the messages.
The framing uses a single 32bit uint32 length for each frame, of which
the high bit is used to indicate whether the message contains a file
descriptor or not. This is enough to separate out each message sent
and to decide to which message each file descriptors belongs, even
though multiple Sends may be coalesced into a single read, and/or one
Send can be split into multiple writes.
Docker-DCO-1.1-Signed-off-by: Alexander Larsson <alexl@redhat.com > (github: alexlarsson)
Docker-DCO-1.1-Signed-off-by: Solomon Hykes <solomon@docker.com > (github: shykes)
2014-05-01 11:06:01 -07:00
Guillaume J. Charmes
c42db412b6
Merge pull request #5092 from LK4D4/timestamp_for_docker_logs_#1165
...
Timestamps for docker logs.
2014-05-01 10:32:34 -07:00
Alexandr Morozov
d1297feef8
Timestamps for docker logs.
...
Fixes #1165
Docker-DCO-1.1-Signed-off-by: Alexandr Morozov <lk4d4math@gmail.com > (github: LK4D4)
2014-05-01 20:40:36 +04:00
O.S. Tezer
51a39563fa
Merge pull request #5519 from SvenDowideit/remove-rst-docs
...
remove rst/sphinx documentation
2014-05-01 16:33:54 +03:00
O.S. Tezer
c52bb90d03
Merge pull request #5516 from SvenDowideit/docs-meta-rendering
...
add page_description and page_keywords md meta to mkdocs html template
2014-05-01 16:16:48 +03:00
Sven Dowideit
adf04681b4
remove rst/sphinx documentation
...
Docker-DCO-1.1-Signed-off-by: Sven Dowideit <SvenDowideit@fosiki.com > (github: SvenDowideit)
2014-05-01 15:31:58 +10:00
Sven Dowideit
8ae53ef167
add page_description and page_keywords md meta to mkdocs html template
...
Docker-DCO-1.1-Signed-off-by: Sven Dowideit <SvenDowideit@fosiki.com > (github: SvenDowideit)
2014-05-01 12:41:57 +10:00
Victor Vieux
9da75eb4df
Merge pull request #5514 from vbatts/vbatts-save_typo
...
docker save: typo reference image, not container
2014-04-30 19:00:22 -07:00
Michael Crosby
d0bee79394
Remove container.json from readme
...
No need to duplicate this information when we already have a
container.json file in the root of libcontainer
Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com > (github: crosbymichael)
2014-04-30 18:52:15 -07:00
Vincent Batts
93f8e277de
docker save: typo reference image, not container
...
Docker-DCO-1.1-Signed-off-by: Vincent Batts <vbatts@redhat.com > (github: vbatts)
2014-04-30 21:51:03 -04:00
Michael Crosby
da0d6dbd7b
Make native driver use Exec func with different CreateCommand
...
Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com > (github: crosbymichael)
2014-04-30 18:49:24 -07:00
Michael Crosby
aa9705f832
Fix execin with environment and Enabled support
...
Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com > (github: crosbymichael)
2014-04-30 18:24:47 -07:00
Michael Crosby
60e4276f5a
Integrate new structure into docker's native driver
...
This duplicates some of the Exec code but I think it it worth it because
the native driver is more straight forward and does not have the
complexity have handling the type issues for now.
Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com > (github: crosbymichael)
2014-04-30 18:20:01 -07:00
Michael Crosby
176c49d7a9
Remove command factory and NsInit interface from libcontainer
...
Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com > (github: crosbymichael)
2014-04-30 17:55:15 -07:00
Michael Crosby
b6b0dfdba7
Export more functions from libcontainer
...
Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com > (github: crosbymichael)
2014-04-30 17:18:07 -07:00
Michael Crosby
aecb9c39ab
Split term files to make it easier to manage
...
Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com > (github: crosbymichael)
2014-04-30 17:04:24 -07:00
Michael Crosby
a3e96abb5a
Export syncpipe fields
...
Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com > (github: crosbymichael)
2014-04-30 17:02:45 -07:00
Guillaume J. Charmes
26ac05c8bc
Merge pull request #5511 from crosbymichael/refactor-libcontainer
...
Refactor: remove statewriter type and all callback for process start
2014-04-30 16:50:57 -07:00
Guillaume J. Charmes
be013c7820
Merge pull request #5512 from crosbymichael/set-freezer
...
Add ability to set cgroups freezer
2014-04-30 16:50:01 -07:00
Michael Crosby
5f6fda8cfd
Add ability to set cgroups freezer
...
Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com > (github: crosbymichael)
2014-04-30 16:07:12 -07:00
Michael Crosby
f110401437
Remove statewriter interface, export more libcontainer funcs
...
This temp. expands the Exec method's signature but adds a more robust
way to know when the container's process is actually released and begins
to run. The network interfaces are not guaranteed to be up yet but this
provides a more accurate view with a single callback at this time.
Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com > (github: crosbymichael)
2014-04-30 15:52:40 -07:00
Michael Crosby
cd8cec854b
Export SetupUser
...
Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com > (github: crosbymichael)
2014-04-30 15:27:59 -07:00
Michael Crosby
162dafbcd5
Remove logger from nsinit struct
...
Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com > (github: crosbymichael)
2014-04-30 15:24:18 -07:00
Michael Crosby
bfedf247a4
Merge pull request #5498 from tianon/better-apparmor-missing-error
2014-04-30 15:16:43 -07:00
Guillaume J. Charmes
2a711d16e0
Merge pull request #5448 from crosbymichael/selinux-defaults
...
Add selinux label support for processes and mount
2014-04-30 14:14:39 -07:00
Michael Crosby
2fc5bed61d
Merge pull request #5506 from crosbymichael/add-system-maintainer
...
Add system maintainers
2014-04-30 14:14:21 -07:00
Tibor Vass
986c647d5a
Fix bridge ip comparison
...
Docker-DCO-1.1-Signed-off-by: Tibor Vass <teabee89@gmail.com > (github: tiborvass)
2014-04-30 12:36:16 -07:00
Michael Crosby
e88ef454b7
Merge pull request #5464 from tianon/close-leftover-fds
2014-04-30 12:27:52 -07:00
Michael Crosby
6203d8b462
Add system maintainers
...
Docker-DCO-1.1-Signed-off-by: Michael Crosby <michael@crosbymichael.com > (github: crosbymichael)
2014-04-30 12:01:06 -07:00
Victor Vieux
f5e5777e63
Merge pull request #5502 from tianon/remove-contrib-zfs
...
Remove contrib/zfs directory
2014-04-30 11:03:13 -07:00
Tianon Gravi
0037dc8d60
Remove contrib/zfs directory
...
A WIP pull request or issue for discussion would be a better avenue for collaboration and discussion of a ZFS backend.
Docker-DCO-1.1-Signed-off-by: Andrew Page <admwiggin@gmail.com > (github: tianon)
2014-04-30 11:56:14 -06:00
Victor Vieux
e8f8f1c729
Merge pull request #5500 from tianon/fix-maintainers-format
...
Fix various MAINTAINERS format inconsistencies
2014-04-30 10:55:45 -07:00
Tianon Gravi
defecac279
Fix various MAINTAINERS format inconsistencies
...
Docker-DCO-1.1-Signed-off-by: Andrew Page <admwiggin@gmail.com > (github: tianon)
2014-04-30 11:22:11 -06:00
Solomon Hykes
0c5375146a
Merge branch 'pr-5353'
2014-04-30 02:10:53 -07:00
Alexander Larsson
e802b69146
beam: Add more tests to unix_test.go
...
These are failing, and indicate things that need to be fixed. The
primarily problem is the lack of framing between beam messages.
Docker-DCO-1.1-Signed-off-by: Alexander Larsson <alexl@redhat.com > (github: alexlarsson)
[solomon@docker.com: rebased on master]
Signed-off-by: Solomon Hykes <solomon@docker.com>
2014-04-30 02:10:09 -07:00
Victor Marmol
494c789ac3
Add new test-unit make rule which only runs the unit tests. Renames test
...
bundle to test-unit.
Docker-DCO-1.1-Signed-off-by: Victor Marmol <vmarmol@google.com > (github: vmarmol)
2014-04-30 02:10:09 -07:00
Sven Dowideit
9e2e26c69a
for want of a comma, the kingdom was lost
...
Docker-DCO-1.1-Signed-off-by: Sven Dowideit <SvenDowideit@fosiki.com > (github: SvenDowideit)
2014-04-30 02:10:09 -07:00
Tianon Gravi
a1a9baf926
Update pkg/apparmor to provide a better error message when apparmor_parser cannot be found
...
Docker-DCO-1.1-Signed-off-by: Andrew Page <admwiggin@gmail.com > (github: tianon)
2014-04-29 23:19:21 -06:00
Tianon Gravi
70b5652984
Merge pull request #5484 from vmarmol/add-test-unit
...
Add new test-unit make rule which only runs the unit tests
2014-04-29 23:15:16 -06:00
James Turnbull
48388b8178
Merge pull request #5487 from SvenDowideit/docs-fix-invalid-json
...
for want of a comma, the kingdom was lost
2014-04-29 22:28:59 -04:00
Solomon Hykes
20e9f61971
Merge pull request #5320 from JackDanger/jackdanger/typo-doc-fix
2014-04-29 17:41:16 -07:00
Sven Dowideit
ebaff50bd2
for want of a comma, the kingdom was lost
...
Docker-DCO-1.1-Signed-off-by: Sven Dowideit <SvenDowideit@fosiki.com > (github: SvenDowideit)
2014-04-30 10:12:21 +10:00
Victor Marmol
a39f3c9200
Add new test-unit make rule which only runs the unit tests. Renames test
...
bundle to test-unit.
Docker-DCO-1.1-Signed-off-by: Victor Marmol <vmarmol@google.com > (github: vmarmol)
2014-04-29 23:26:27 +00:00