Commit Graph

246 Commits

Author SHA1 Message Date
Sebastiaan van Stijn
c119ed174e Use https:// for links and examples
Found these using `http://[^lp10\*`<][^o]` (to exclude "localhost" and IP-addresses)

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-10-13 12:09:11 +02:00
Sebastiaan van Stijn
393d3f6566 Add rel="noopener" to external links
See https://web.dev/external-anchors-use-rel-noopener/

Using noopener, as that addresses the security issue. "noreferer" blocks
the REFERER header, which may still be useful for some target URLs.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-10-12 13:09:30 +02:00
Sebastiaan van Stijn
d105bd05ca trust: use "content_trust" as trust home page
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-10-07 13:17:34 +02:00
Sebastiaan van Stijn
dc81cb8bb5 engine: remove old trust index page
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-10-07 13:17:31 +02:00
Sebastiaan van Stijn
0bbe9c32fb Fix various broken links
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-10-07 12:49:22 +02:00
Florencio Cano
fff272f7e3 Fix link to default capabilities 2020-10-02 14:17:00 +02:00
Sebastiaan van Stijn
3823de5c50 engine/security: move landing page
Generated yaml files were temporarily updated manually (pending
pull request to be merged in the upstream docker/cli repository)

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-09-29 21:27:08 +02:00
Sebastiaan van Stijn
e314b897b2 engine/security: remove old index page
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-09-29 21:03:45 +02:00
Maximillian Fan Xavier
cfba81f6b5 Fix url #11349
Signed-off-by: Maximillian Fan Xavier <maximillianfx@gmail.com>
2020-09-26 17:00:35 -03:00
Maximillian Fan Xavier
e04c266454 Fix link to dct #11349
Signed-off-by: Maximillian Fan Xavier <maximillianfx@gmail.com>
2020-09-26 16:52:39 -03:00
Ryo Ota
6469b210cc use .tgz instead of .tar.gz 2020-09-04 07:36:23 +09:00
Aðalsteinn Rúnarsson
51cf315c4e Change wording for setting capabilities lists
Update the wording for allow/deny approach for setting capabilities.
2020-08-27 15:07:46 +00:00
Sebastiaan van Stijn
021e13a5ed Remove EE "trust pinning" section
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-07-02 23:37:01 +02:00
Sebastiaan van Stijn
2b4833a355 Remove some references to enterprise products
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-07-02 23:36:48 +02:00
Akihiro Suda
a7e2591552 rootless.md: fix markdown
Fix #11017

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2020-06-26 14:27:33 +09:00
Akihiro Suda
b7eec33cfe rootless.md: fix a typo (#11013) 2020-06-18 09:08:55 +01:00
Usha Mandya
f91c2a28f6 Rootless Docker: Style edits and minor updates (#11001)
Rootletts: Style edits and minor updates, and fix prereq example
2020-06-17 11:33:24 +02:00
Usha Mandya
786c89bdf6 Merge pull request #10965 from AkihiroSuda/rootless
rootless.md: massive update
2020-06-16 14:55:44 +01:00
José Fernando Cordova
e3c3484c47 Fix 404 Not Found - Broken Link (#10997)
* Fix 404 Not Found - Broken Link

Co-authored-by: Sebastiaan van Stijn <thaJeztah@users.noreply.github.com>
2020-06-16 14:55:51 +02:00
Akihiro Suda
a06b01802c rootless.md: massive update
* Add Ubuntu 20.04
* Remove Fedora 30 (EOL)
* `docker run --net=host` does not work in the most expected way
* Allow installation as the root
* Nightly channel
* `docker context create rootless`
* `DOCKER_HOST=ssh://...`
* Alternatives to cgroup flags (`docker run --cpus --memory --pids-limit`)
* A bunch of troubleshooting tips

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2020-06-16 19:20:18 +09:00
Amal
12b8e799c7 Typo fixture (#10950)
* Typo fixture

* Minor typo fix

* Typo fix
2020-06-03 19:21:11 +01:00
Jan Kanis
b4ab954d3f fix description for ptrace in seccomp.md
The existing description leads the reader to believe that dropping CAP_SYS_PTRACE already blocks all ptraces. That is not true, it only blocks ptracing arbitrary processes. Ptracing child processes is still allowed.
2020-05-22 13:36:45 +02:00
Sebastiaan van Stijn
67cb46bcf2 Merge pull request #10758 from shirhatti/patch-1
s/CAP_PTRACE/CAP_SYS_PTRACE
2020-05-14 14:56:46 +02:00
Flavien Berwick
0d8d653f4f Auto-restart of Docker rootless on boot requires an additional command
Related to issue [#10770](https://github.com/docker/docker.github.io/issues/10770)
2020-05-07 19:10:04 +02:00
Sourabh Shirhatti
6f893ed1c6 s/CAP_PTRACE/CAP_SYS_PTRACE 2020-05-04 14:03:02 -05:00
ajay143444
aa57de37d3 Few corrections and suggestions in doc (#10728)
* Removed is from line 80

Removed is from line 80 as this is not required

* changed text to link at line 129

changed text to link at line 129 to make it easy for user to navigate

* changed the URL to link

changed the URL to link for easy navigation

* added these before flags in line 186

added these before flags in line 186

Co-Authored-By: Sebastiaan van Stijn <thaJeztah@users.noreply.github.com>
2020-05-01 18:30:28 +02:00
Sebastiaan van Stijn
3ce8fd8006 Merge pull request #10724 from ajay143444/patch-10
changed line 56 by adding do before not
2020-04-30 12:15:37 +02:00
ajay143444
b37c6506d8 changed line 56 by adding do before not
changed line 56 by adding do before not
2020-04-29 17:55:29 +05:30
ajay143444
10dfe1827d removed with from line 41
removed with from line 41 as it is not required
2020-04-29 16:26:00 +05:30
Sebastiaan van Stijn
777c5d23da engine: use relative markdown links
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-04-23 13:03:32 +02:00
Sebastiaan van Stijn
331554f4b3 Fix various links that were generating URLs with .md (#10548)
* Fix incorrect links in compose section

there's a bug causing wrapped links to not work, and replacing
some links to point to the .md file, so that IDE's can check
if the anchors are valid. Also replaced some links to point
to their new location.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>

* engine/swarm: update links

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>

* Fix various broken links

There's a bug in the "jekyll-relative-links" plugin that causes wrapped links to not work.
Also replacing some links to point to the .md file, so that IDE's can check if the anchors
are valid. Finally, replaced some links to point to their new locations, so that users don't
get redirected..

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-04-01 12:05:50 +01:00
Sebastiaan van Stijn
14bbe621e5 Update markdown language hints to work with "rouge"
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-03-17 14:49:51 +01:00
Usha Mandya
fefc750abd Update Hub support alias (#10432) 2020-03-10 18:30:43 +00:00
scott-vsi
e7eedf3b7f fix link (#10402)
fix a link that was possibly broken by automatic text formatting/wrapping
2020-03-09 10:19:45 +00:00
pcworld
e1f41c15ed rootless.md: Fix typo in path 2020-03-06 18:47:46 +01:00
LORIS INTERGALACTIQUE
711567c5af Fixed typos on the rootless mode page (#10330)
* Fixed typos

* Minor wording update

Co-authored-by: Usha Mandya <47779042+usha-mandya@users.noreply.github.com>
2020-02-21 17:52:37 +00:00
Marc Nimmerrichter
27e529ce3e Update content_trust.md
Make it clear that DCT does not protect against layer tampering on the docker host.
2020-01-20 18:02:41 +01:00
Sebastiaan van Stijn
91c5d19a14 Merge pull request #9662 from pjbgf/patch-2
Remove ptrace from blocked syscalls
2019-12-03 16:28:20 +01:00
Paulo Gomes
9c2520fa27 Fix table 2019-11-28 12:33:15 +00:00
Paulo Gomes
1962410b61 Corrections based on feedback 2019-11-28 12:30:44 +00:00
Paulo Gomes
432b7c4134 Improve clarity. 2019-11-28 09:06:03 +00:00
Akihiro Suda
40747fcca7 Add "Run the Docker daemon as a non-root user (Rootless mode)"
Add "Run the Docker daemon as a non-root user (Rootless mode)":
`engine/security/rootless.md`

The content is based on https://github.com/moby/moby/blob/master/docs/rootless.md

`rootless.md` in `moby/moby` will be replaced of the link to
the `docs.docker.com` page compiled from `rootless.md` in this repo.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2019-11-15 16:02:08 +09:00
Paulo Gomes
2adcf3bd66 Add minKernel details for ptrace
Changes brought up by commit:

1124543ca8 (diff-0ebf5796a57d68894d5550c407061035)
2019-10-29 14:51:22 +00:00
Paulo Gomes
5c0c1eed40 Remove ptrace from blocked syscalls
Update documentation to reflect that ptrace is no longer blocked on the default profile.

More information:
1124543ca8 (diff-0ebf5796a57d68894d5550c407061035)
2019-10-17 09:59:47 +01:00
Paulo Gomes
d32f93ca93 Remove reference to socket and socketcall 2019-10-17 09:53:28 +01:00
Paulo Gomes
04b5f87b28 Remove socket from blocked syscalls
Socket syscalls are no longer blocked on the default profile for a while now. More information: 
dcf2632945 (diff-0ebf5796a57d68894d5550c407061035)
2019-10-17 09:44:40 +01:00
Sujay Pillai
1a684b91a1 Updated userns-remap.md (#9629)
Updated the links to solve https://github.com/docker/docker.github.io/issues/9419
2019-10-14 10:54:24 -07:00
Adrian Plata
b25ec58b72 Add DCT Linux note
Signed-off-by: Adrian Plata <adrian.plata@docker.com>
2019-10-10 16:18:43 -07:00
Dawn W
e5c4444db8 Merge pull request #9038 from AkihiroSuda/patch-11
Strongly recommend TLS for API socket
2019-07-23 11:18:40 -07:00
ollypom
4524319333 Merge branch 'master' into amberjack 2019-07-19 14:23:33 +00:00