Commit Graph

236 Commits

Author SHA1 Message Date
Ryo Ota
6469b210cc use .tgz instead of .tar.gz 2020-09-04 07:36:23 +09:00
Aðalsteinn Rúnarsson
51cf315c4e Change wording for setting capabilities lists
Update the wording for allow/deny approach for setting capabilities.
2020-08-27 15:07:46 +00:00
Sebastiaan van Stijn
021e13a5ed Remove EE "trust pinning" section
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-07-02 23:37:01 +02:00
Sebastiaan van Stijn
2b4833a355 Remove some references to enterprise products
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-07-02 23:36:48 +02:00
Akihiro Suda
a7e2591552 rootless.md: fix markdown
Fix #11017

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2020-06-26 14:27:33 +09:00
Akihiro Suda
b7eec33cfe rootless.md: fix a typo (#11013) 2020-06-18 09:08:55 +01:00
Usha Mandya
f91c2a28f6 Rootless Docker: Style edits and minor updates (#11001)
Rootletts: Style edits and minor updates, and fix prereq example
2020-06-17 11:33:24 +02:00
Usha Mandya
786c89bdf6 Merge pull request #10965 from AkihiroSuda/rootless
rootless.md: massive update
2020-06-16 14:55:44 +01:00
José Fernando Cordova
e3c3484c47 Fix 404 Not Found - Broken Link (#10997)
* Fix 404 Not Found - Broken Link

Co-authored-by: Sebastiaan van Stijn <thaJeztah@users.noreply.github.com>
2020-06-16 14:55:51 +02:00
Akihiro Suda
a06b01802c rootless.md: massive update
* Add Ubuntu 20.04
* Remove Fedora 30 (EOL)
* `docker run --net=host` does not work in the most expected way
* Allow installation as the root
* Nightly channel
* `docker context create rootless`
* `DOCKER_HOST=ssh://...`
* Alternatives to cgroup flags (`docker run --cpus --memory --pids-limit`)
* A bunch of troubleshooting tips

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2020-06-16 19:20:18 +09:00
Amal
12b8e799c7 Typo fixture (#10950)
* Typo fixture

* Minor typo fix

* Typo fix
2020-06-03 19:21:11 +01:00
Jan Kanis
b4ab954d3f fix description for ptrace in seccomp.md
The existing description leads the reader to believe that dropping CAP_SYS_PTRACE already blocks all ptraces. That is not true, it only blocks ptracing arbitrary processes. Ptracing child processes is still allowed.
2020-05-22 13:36:45 +02:00
Sebastiaan van Stijn
67cb46bcf2 Merge pull request #10758 from shirhatti/patch-1
s/CAP_PTRACE/CAP_SYS_PTRACE
2020-05-14 14:56:46 +02:00
Flavien Berwick
0d8d653f4f Auto-restart of Docker rootless on boot requires an additional command
Related to issue [#10770](https://github.com/docker/docker.github.io/issues/10770)
2020-05-07 19:10:04 +02:00
Sourabh Shirhatti
6f893ed1c6 s/CAP_PTRACE/CAP_SYS_PTRACE 2020-05-04 14:03:02 -05:00
ajay143444
aa57de37d3 Few corrections and suggestions in doc (#10728)
* Removed is from line 80

Removed is from line 80 as this is not required

* changed text to link at line 129

changed text to link at line 129 to make it easy for user to navigate

* changed the URL to link

changed the URL to link for easy navigation

* added these before flags in line 186

added these before flags in line 186

Co-Authored-By: Sebastiaan van Stijn <thaJeztah@users.noreply.github.com>
2020-05-01 18:30:28 +02:00
Sebastiaan van Stijn
3ce8fd8006 Merge pull request #10724 from ajay143444/patch-10
changed line 56 by adding do before not
2020-04-30 12:15:37 +02:00
ajay143444
b37c6506d8 changed line 56 by adding do before not
changed line 56 by adding do before not
2020-04-29 17:55:29 +05:30
ajay143444
10dfe1827d removed with from line 41
removed with from line 41 as it is not required
2020-04-29 16:26:00 +05:30
Sebastiaan van Stijn
777c5d23da engine: use relative markdown links
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-04-23 13:03:32 +02:00
Sebastiaan van Stijn
331554f4b3 Fix various links that were generating URLs with .md (#10548)
* Fix incorrect links in compose section

there's a bug causing wrapped links to not work, and replacing
some links to point to the .md file, so that IDE's can check
if the anchors are valid. Also replaced some links to point
to their new location.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>

* engine/swarm: update links

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>

* Fix various broken links

There's a bug in the "jekyll-relative-links" plugin that causes wrapped links to not work.
Also replacing some links to point to the .md file, so that IDE's can check if the anchors
are valid. Finally, replaced some links to point to their new locations, so that users don't
get redirected..

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-04-01 12:05:50 +01:00
Sebastiaan van Stijn
14bbe621e5 Update markdown language hints to work with "rouge"
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-03-17 14:49:51 +01:00
Usha Mandya
fefc750abd Update Hub support alias (#10432) 2020-03-10 18:30:43 +00:00
scott-vsi
e7eedf3b7f fix link (#10402)
fix a link that was possibly broken by automatic text formatting/wrapping
2020-03-09 10:19:45 +00:00
pcworld
e1f41c15ed rootless.md: Fix typo in path 2020-03-06 18:47:46 +01:00
LORIS INTERGALACTIQUE
711567c5af Fixed typos on the rootless mode page (#10330)
* Fixed typos

* Minor wording update

Co-authored-by: Usha Mandya <47779042+usha-mandya@users.noreply.github.com>
2020-02-21 17:52:37 +00:00
Marc Nimmerrichter
27e529ce3e Update content_trust.md
Make it clear that DCT does not protect against layer tampering on the docker host.
2020-01-20 18:02:41 +01:00
Sebastiaan van Stijn
91c5d19a14 Merge pull request #9662 from pjbgf/patch-2
Remove ptrace from blocked syscalls
2019-12-03 16:28:20 +01:00
Paulo Gomes
9c2520fa27 Fix table 2019-11-28 12:33:15 +00:00
Paulo Gomes
1962410b61 Corrections based on feedback 2019-11-28 12:30:44 +00:00
Paulo Gomes
432b7c4134 Improve clarity. 2019-11-28 09:06:03 +00:00
Akihiro Suda
40747fcca7 Add "Run the Docker daemon as a non-root user (Rootless mode)"
Add "Run the Docker daemon as a non-root user (Rootless mode)":
`engine/security/rootless.md`

The content is based on https://github.com/moby/moby/blob/master/docs/rootless.md

`rootless.md` in `moby/moby` will be replaced of the link to
the `docs.docker.com` page compiled from `rootless.md` in this repo.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2019-11-15 16:02:08 +09:00
Paulo Gomes
2adcf3bd66 Add minKernel details for ptrace
Changes brought up by commit:

1124543ca8 (diff-0ebf5796a57d68894d5550c407061035)
2019-10-29 14:51:22 +00:00
Paulo Gomes
5c0c1eed40 Remove ptrace from blocked syscalls
Update documentation to reflect that ptrace is no longer blocked on the default profile.

More information:
1124543ca8 (diff-0ebf5796a57d68894d5550c407061035)
2019-10-17 09:59:47 +01:00
Paulo Gomes
d32f93ca93 Remove reference to socket and socketcall 2019-10-17 09:53:28 +01:00
Paulo Gomes
04b5f87b28 Remove socket from blocked syscalls
Socket syscalls are no longer blocked on the default profile for a while now. More information: 
dcf2632945 (diff-0ebf5796a57d68894d5550c407061035)
2019-10-17 09:44:40 +01:00
Sujay Pillai
1a684b91a1 Updated userns-remap.md (#9629)
Updated the links to solve https://github.com/docker/docker.github.io/issues/9419
2019-10-14 10:54:24 -07:00
Adrian Plata
b25ec58b72 Add DCT Linux note
Signed-off-by: Adrian Plata <adrian.plata@docker.com>
2019-10-10 16:18:43 -07:00
Dawn W
e5c4444db8 Merge pull request #9038 from AkihiroSuda/patch-11
Strongly recommend TLS for API socket
2019-07-23 11:18:40 -07:00
ollypom
4524319333 Merge branch 'master' into amberjack 2019-07-19 14:23:33 +00:00
Akihiro Suda
b690a3213d Strongly recommend TLS for API socket 2019-07-09 15:45:10 +09:00
Olly P
9878f22b17 Formatting nit 2019-07-02 10:00:19 +01:00
nirajrules
db7d8d4b3f The notary config file had a comma missing
Docker SA from South East
2019-07-01 18:23:21 -04:00
Jameson Hyde
e7d69b14a7 Include service support for DCT in engine (#1177)
Signed-off-by: Jameson Hyde <jameson.hyde@docker.com>
2019-06-13 12:50:35 -07:00
Akihiro Suda
2778995f15 Fix dockremap calculation 2019-06-12 19:13:34 +09:00
Rajasekharan Vengalil
a43165a37c Remove redundant "be" 2019-04-06 13:57:06 -07:00
Maria Bermudez
c3b0c02153 Audit branch (#8564)
* Update trust-with-remote-ucp.md

* Fix link texts

* Addresses 8446

* Update trust_delegation.md

* - Addresses 8446
- Cleans up broken links
- Fixes vague link texts

Addresses 8446

Update trust_delegation.md

* Update running_ssh_service.md

* Update running_ssh_service.md

Fixed formatting and wording. Also moved note above the code.

* Update running_ssh_service.md

Fixed typo.

* Compose: Update build docs, Add --quiet flag

* Fix destroy reference page link

Relates to https://github.com/docker/docker.github.io/pull/8441

* Rephrase Ubuntu 14.04 note

* Revert "Compose: Update build docs, Add --quiet flag"

* # This is a combination of 4 commits.
# This is the 1st commit message:

- Addresses 8446
- Cleans up broken links
- Fixes vague link texts

Addresses 8446

Update trust_delegation.md

# This is the commit message #2:

# This is a combination of 2 commits.
# This is the 1st commit message:

- Addresses 8446
- Cleans up broken links
- Fixes vague link texts

Addresses 8446

Update trust_delegation.md

# This is the commit message #2:

Update trust-with-remote-ucp.md
# This is the commit message #3:

- Addresses 8446
- Cleans up broken links
- Fixes vague link texts

# This is the commit message #4:

Fix destroy reference page link

Relates to https://github.com/docker/docker.github.io/pull/8441

* - Addresses 8446
- Cleans up broken links
- Fixes vague link texts

* Addresses 8446 with text and link cleanup.

* Update syntax language from none to bash

* Update index.md
2019-04-01 14:45:04 -04:00
Wang Jie
8a8ea7d666 Update seccomp.md 2019-03-25 09:35:26 +08:00
Maria Bermudez
7ddb16f25e Merge pull request #8492 from scjane/patch-117
Update trust_sandbox.md
2019-03-20 19:30:42 -04:00
Maria Bermudez
d4bc0df73c Merge pull request #8491 from scjane/patch-116
Update trust_key_mng.md
2019-03-20 19:30:08 -04:00