Commit Graph

22 Commits

Author SHA1 Message Date
David Karlsson
f8229cbc9f engine: remove centos/rhel 7 (EOL)
Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
2024-07-01 09:19:19 +02:00
David Karlsson
bf72af7637 engine: remove centos 8 (EOL)
Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
2024-06-05 10:30:58 +02:00
David Karlsson
c6b91c8db1 chore: removed unused media files
Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
2024-05-20 18:59:32 +02:00
David Karlsson
5015087698 Merge pull request #19587 from dvdksn/warn-exposed-daemon
engine: warn more about insecure daemon configurations / deprecate non-tls tcp
2024-05-13 15:49:44 +02:00
Adam Outler
7f1c9230c7 Update rootless.md (#19992)
* Update rootless.md

I just accomplished install via both manual and docker-ce-rootless-extras packages on Ubuntu 24.04.  There were some pain points which I hope to address here and make this run more smoothly for others. 

* As a `$` user, you cannot `cat<< EOF > /etc/apparmor.d`.  The existing command should never work because you cannot be the user and access the apparmor folder at the same time. So we create the file and then move the file.  This separates into creation which should be done as a user, and moving which requires sudo access.  If the move command fails, that's a basic issue which can be resolved by an admin. 
* I added missing apt-get commands which may be required on Ubuntu.  I noticed `dbus-user-session` is a default package in Ubuntu and it was mentioned. So i took the liberty to add uidmap which is absolutely required, and systemd-container may be necessary for accessing via non-login terminals.
* The command `sudo systemctl disable --now docker.service docker.socket` was insufficient and requires a reboot to activate.  The `sudo systemctl stop docker.service docker.socket` will immediately shut down the docker service. 
* I added a note about not shutting down the docker service.
* Troubleshooting now includes an installation error where the user was a pure service account without login capabilities. `systemd-container` and `machinectl` is required when not logging in via terminal with user/pass.

* Add space per lint check

* Update content/engine/security/rootless.md

Co-authored-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>

* Update content/engine/security/rootless.md

Co-authored-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>

* Update content/engine/security/rootless.md

Co-authored-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>

* Update content/engine/security/rootless.md

Co-authored-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>

* specific message

* don't stop the service, remove the dead socket

* Lint issue

---------

Co-authored-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
2024-05-09 06:34:29 +02:00
Adam Outler
ed35d6bd38 Update rootless.md
Adding quotes prevents the `$` from being omitted from the beginning of this line.  When a line starts with `$` it is assumed to be an included shell prompt by the formatter and so does get coped.
2024-05-03 10:51:13 -04:00
David Karlsson
b75fe78d4f lint: enable markdownlint MD022 / blanks-around-headings
Headings should be surrounded by blank lines

Rationale: Aside from aesthetic reasons, some parsers, including kramdown, will not parse headings that don't have a blank line before, and will parse them as regular text.

Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
2024-04-17 09:36:28 +02:00
David Karlsson
e5552f310d engine: bigger warning about unauthorized access
Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
2024-04-03 13:50:30 +02:00
David Karlsson
70df01a3ae rootless: ubuntu 24.04 restricts unprivileged userns
Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
2024-03-27 16:02:59 +01:00
Vrushabh Gawas
573d5fc5c0 fix overflow in small devices 2024-02-26 16:33:17 +05:30
David Karlsson
f3b44a4476 cli: change reference docs url paths
Moves the reference documentation to a new subpath, from /engine/ to /reference/
2024-02-21 10:25:53 +01:00
David Karlsson
b20c46a615 chore: unpublish README files in content dir
Adds hugo build options that prevents these READMEs from being
published.

Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
2024-02-01 15:49:46 +01:00
Sebastiaan van Stijn
2b6fafeedb update some engine 24.0 versions to 25.0
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2024-01-20 07:26:23 +01:00
David Karlsson
5b49ec733e engine(rootless): improve network troubleshooting overview
Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
2024-01-16 15:08:12 +01:00
David Karlsson
a8150797af engine: add pasta rootlesskit net driver
Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
2024-01-16 14:03:26 +01:00
CHALOPIN Clément
c435b0e9c2 Update protect-access.md (#19062)
* Update protect-access.md

fix console highlight

* fix: other code highlight
2024-01-08 20:34:15 +01:00
Allie Sadler
02dbedab22 engine-freshness (#18953)
* engine-freshness

* review edits

* review edits

* review edits
2023-12-18 16:20:21 +00:00
Almeida de Almeida
d035738408 Update seccomp.md 2023-11-12 11:15:29 +02:00
David Karlsson
1fdb2e77d4 fix: broken glob path for lint job
Linting was only running on a subset of our Markdown files in `content`.
This change fixes the glob path, and adds appropriate exclude paths.
Because the glob pattern was incorrect before, we had lots of files that
didn't comply with the linting rules. This commit also fixes those
issues.

Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
2023-11-04 10:50:02 +01:00
StephenRoille
ca89b9484d fix typo (#18053) 2023-08-29 07:45:33 -07:00
David Karlsson
15e9e1e694 hugo: run migration script
Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
2023-08-22 09:42:25 +02:00
David Karlsson
a0d21ade2f migrate to hugo
Signed-off-by: David Karlsson <35727626+dvdksn@users.noreply.github.com>
2023-08-22 09:41:02 +02:00