Sebastiaan van Stijn
c119ed174e
Use https:// for links and examples
...
Found these using `http://[^lp10\*`<][^o]` (to exclude "localhost" and IP-addresses)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2020-10-13 12:09:11 +02:00
Sebastiaan van Stijn
393d3f6566
Add rel="noopener" to external links
...
See https://web.dev/external-anchors-use-rel-noopener/
Using noopener, as that addresses the security issue. "noreferer" blocks
the REFERER header, which may still be useful for some target URLs.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2020-10-12 13:09:30 +02:00
Sebastiaan van Stijn
d105bd05ca
trust: use "content_trust" as trust home page
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2020-10-07 13:17:34 +02:00
Sebastiaan van Stijn
dc81cb8bb5
engine: remove old trust index page
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2020-10-07 13:17:31 +02:00
Sebastiaan van Stijn
0bbe9c32fb
Fix various broken links
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2020-10-07 12:49:22 +02:00
Florencio Cano
fff272f7e3
Fix link to default capabilities
2020-10-02 14:17:00 +02:00
Sebastiaan van Stijn
3823de5c50
engine/security: move landing page
...
Generated yaml files were temporarily updated manually (pending
pull request to be merged in the upstream docker/cli repository)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2020-09-29 21:27:08 +02:00
Sebastiaan van Stijn
e314b897b2
engine/security: remove old index page
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2020-09-29 21:03:45 +02:00
Maximillian Fan Xavier
cfba81f6b5
Fix url #11349
...
Signed-off-by: Maximillian Fan Xavier <maximillianfx@gmail.com >
2020-09-26 17:00:35 -03:00
Maximillian Fan Xavier
e04c266454
Fix link to dct #11349
...
Signed-off-by: Maximillian Fan Xavier <maximillianfx@gmail.com >
2020-09-26 16:52:39 -03:00
Ryo Ota
6469b210cc
use .tgz instead of .tar.gz
2020-09-04 07:36:23 +09:00
Aðalsteinn Rúnarsson
51cf315c4e
Change wording for setting capabilities lists
...
Update the wording for allow/deny approach for setting capabilities.
2020-08-27 15:07:46 +00:00
Sebastiaan van Stijn
021e13a5ed
Remove EE "trust pinning" section
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2020-07-02 23:37:01 +02:00
Sebastiaan van Stijn
2b4833a355
Remove some references to enterprise products
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2020-07-02 23:36:48 +02:00
Akihiro Suda
a7e2591552
rootless.md: fix markdown
...
Fix #11017
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp >
2020-06-26 14:27:33 +09:00
Akihiro Suda
b7eec33cfe
rootless.md: fix a typo ( #11013 )
2020-06-18 09:08:55 +01:00
Usha Mandya
f91c2a28f6
Rootless Docker: Style edits and minor updates ( #11001 )
...
Rootletts: Style edits and minor updates, and fix prereq example
2020-06-17 11:33:24 +02:00
Usha Mandya
786c89bdf6
Merge pull request #10965 from AkihiroSuda/rootless
...
rootless.md: massive update
2020-06-16 14:55:44 +01:00
José Fernando Cordova
e3c3484c47
Fix 404 Not Found - Broken Link ( #10997 )
...
* Fix 404 Not Found - Broken Link
Co-authored-by: Sebastiaan van Stijn <thaJeztah@users.noreply.github.com >
2020-06-16 14:55:51 +02:00
Akihiro Suda
a06b01802c
rootless.md: massive update
...
* Add Ubuntu 20.04
* Remove Fedora 30 (EOL)
* `docker run --net=host` does not work in the most expected way
* Allow installation as the root
* Nightly channel
* `docker context create rootless`
* `DOCKER_HOST=ssh://...`
* Alternatives to cgroup flags (`docker run --cpus --memory --pids-limit`)
* A bunch of troubleshooting tips
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp >
2020-06-16 19:20:18 +09:00
Amal
12b8e799c7
Typo fixture ( #10950 )
...
* Typo fixture
* Minor typo fix
* Typo fix
2020-06-03 19:21:11 +01:00
Jan Kanis
b4ab954d3f
fix description for ptrace in seccomp.md
...
The existing description leads the reader to believe that dropping CAP_SYS_PTRACE already blocks all ptraces. That is not true, it only blocks ptracing arbitrary processes. Ptracing child processes is still allowed.
2020-05-22 13:36:45 +02:00
Sebastiaan van Stijn
67cb46bcf2
Merge pull request #10758 from shirhatti/patch-1
...
s/CAP_PTRACE/CAP_SYS_PTRACE
2020-05-14 14:56:46 +02:00
Flavien Berwick
0d8d653f4f
Auto-restart of Docker rootless on boot requires an additional command
...
Related to issue [#10770 ](https://github.com/docker/docker.github.io/issues/10770 )
2020-05-07 19:10:04 +02:00
Sourabh Shirhatti
6f893ed1c6
s/CAP_PTRACE/CAP_SYS_PTRACE
2020-05-04 14:03:02 -05:00
ajay143444
aa57de37d3
Few corrections and suggestions in doc ( #10728 )
...
* Removed is from line 80
Removed is from line 80 as this is not required
* changed text to link at line 129
changed text to link at line 129 to make it easy for user to navigate
* changed the URL to link
changed the URL to link for easy navigation
* added these before flags in line 186
added these before flags in line 186
Co-Authored-By: Sebastiaan van Stijn <thaJeztah@users.noreply.github.com >
2020-05-01 18:30:28 +02:00
Sebastiaan van Stijn
3ce8fd8006
Merge pull request #10724 from ajay143444/patch-10
...
changed line 56 by adding do before not
2020-04-30 12:15:37 +02:00
ajay143444
b37c6506d8
changed line 56 by adding do before not
...
changed line 56 by adding do before not
2020-04-29 17:55:29 +05:30
ajay143444
10dfe1827d
removed with from line 41
...
removed with from line 41 as it is not required
2020-04-29 16:26:00 +05:30
Sebastiaan van Stijn
777c5d23da
engine: use relative markdown links
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2020-04-23 13:03:32 +02:00
Sebastiaan van Stijn
331554f4b3
Fix various links that were generating URLs with .md ( #10548 )
...
* Fix incorrect links in compose section
there's a bug causing wrapped links to not work, and replacing
some links to point to the .md file, so that IDE's can check
if the anchors are valid. Also replaced some links to point
to their new location.
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
* engine/swarm: update links
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
* Fix various broken links
There's a bug in the "jekyll-relative-links" plugin that causes wrapped links to not work.
Also replacing some links to point to the .md file, so that IDE's can check if the anchors
are valid. Finally, replaced some links to point to their new locations, so that users don't
get redirected..
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2020-04-01 12:05:50 +01:00
Sebastiaan van Stijn
14bbe621e5
Update markdown language hints to work with "rouge"
...
Signed-off-by: Sebastiaan van Stijn <github@gone.nl >
2020-03-17 14:49:51 +01:00
Usha Mandya
fefc750abd
Update Hub support alias ( #10432 )
2020-03-10 18:30:43 +00:00
scott-vsi
e7eedf3b7f
fix link ( #10402 )
...
fix a link that was possibly broken by automatic text formatting/wrapping
2020-03-09 10:19:45 +00:00
pcworld
e1f41c15ed
rootless.md: Fix typo in path
2020-03-06 18:47:46 +01:00
LORIS INTERGALACTIQUE
711567c5af
Fixed typos on the rootless mode page ( #10330 )
...
* Fixed typos
* Minor wording update
Co-authored-by: Usha Mandya <47779042+usha-mandya@users.noreply.github.com >
2020-02-21 17:52:37 +00:00
Marc Nimmerrichter
27e529ce3e
Update content_trust.md
...
Make it clear that DCT does not protect against layer tampering on the docker host.
2020-01-20 18:02:41 +01:00
Sebastiaan van Stijn
91c5d19a14
Merge pull request #9662 from pjbgf/patch-2
...
Remove ptrace from blocked syscalls
2019-12-03 16:28:20 +01:00
Paulo Gomes
9c2520fa27
Fix table
2019-11-28 12:33:15 +00:00
Paulo Gomes
1962410b61
Corrections based on feedback
2019-11-28 12:30:44 +00:00
Paulo Gomes
432b7c4134
Improve clarity.
2019-11-28 09:06:03 +00:00
Akihiro Suda
40747fcca7
Add "Run the Docker daemon as a non-root user (Rootless mode)"
...
Add "Run the Docker daemon as a non-root user (Rootless mode)":
`engine/security/rootless.md`
The content is based on https://github.com/moby/moby/blob/master/docs/rootless.md
`rootless.md` in `moby/moby` will be replaced of the link to
the `docs.docker.com` page compiled from `rootless.md` in this repo.
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp >
2019-11-15 16:02:08 +09:00
Paulo Gomes
2adcf3bd66
Add minKernel details for ptrace
...
Changes brought up by commit:
1124543ca8 (diff-0ebf5796a57d68894d5550c407061035)
2019-10-29 14:51:22 +00:00
Paulo Gomes
5c0c1eed40
Remove ptrace from blocked syscalls
...
Update documentation to reflect that ptrace is no longer blocked on the default profile.
More information:
1124543ca8 (diff-0ebf5796a57d68894d5550c407061035)
2019-10-17 09:59:47 +01:00
Paulo Gomes
d32f93ca93
Remove reference to socket and socketcall
2019-10-17 09:53:28 +01:00
Paulo Gomes
04b5f87b28
Remove socket from blocked syscalls
...
Socket syscalls are no longer blocked on the default profile for a while now. More information:
dcf2632945 (diff-0ebf5796a57d68894d5550c407061035)
2019-10-17 09:44:40 +01:00
Sujay Pillai
1a684b91a1
Updated userns-remap.md ( #9629 )
...
Updated the links to solve https://github.com/docker/docker.github.io/issues/9419
2019-10-14 10:54:24 -07:00
Adrian Plata
b25ec58b72
Add DCT Linux note
...
Signed-off-by: Adrian Plata <adrian.plata@docker.com >
2019-10-10 16:18:43 -07:00
Dawn W
e5c4444db8
Merge pull request #9038 from AkihiroSuda/patch-11
...
Strongly recommend TLS for API socket
2019-07-23 11:18:40 -07:00
ollypom
4524319333
Merge branch 'master' into amberjack
2019-07-19 14:23:33 +00:00