Phil Estes
c18e7f3a04
Change subordinate range-owning user to be a system user
...
Change user/group creation to use flags to adduser/useradd to enforce it
being a system user. Use system user defaults that auto-create a
matching group. These changes allow us to remove all group creation
code, and in doing so we also removed the code that finds available uid,
gid integers and use post-creation query to gather the system-generated
uid and gid.
The only added complexity is that today distros don't auto-create
subordinate ID ranges for a new ID if it is a system ID, so we now need
to handle finding a free range and then calling the `usermod` tool to
add the ranges for that ID. Note that this requires the distro supports
the `-v` and `-w` flags on `usermod` for subordinate ID range additions.
Docker-DCO-1.1-Signed-off-by: Phil Estes <estesp@linux.vnet.ibm.com > (github: estesp)
2016-03-16 18:44:10 -04:00
Dong Chen
26931816c4
Manager should retry EventMonitoring on failure.
...
Signed-off-by: Dong Chen <dongluo.chen@docker.com >
2016-03-16 15:35:22 -07:00
Victor Vieux
56affa1ada
fix image matching via id
...
Signed-off-by: Victor Vieux <vieux@docker.com >
2016-03-16 15:12:56 -07:00
Riyaz Faizullabhoy
b65723fce3
Remove mentions of fallback
...
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com >
2016-03-16 15:12:12 -07:00
Riyaz Faizullabhoy
83f7c758ca
Remove delegation role fallback when applying targets changes
...
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com >
2016-03-16 15:12:11 -07:00
Riyaz Faizullabhoy
dda52a3fa1
Merge pull request #631 from docker/add-defaults-to-cache
...
Add defaults to cache-control config parsing
2016-03-16 15:08:30 -07:00
Ying Li
e5b2246004
Update docs with regards to the server configuration
...
Signed-off-by: Ying Li <ying.li@docker.com >
2016-03-16 14:53:42 -07:00
Ying Li
f1d78f8d6e
Add defaults for cache headers, and add tests to ensure that default configs can successfully be parsed
...
Signed-off-by: Ying Li <ying.li@docker.com >
2016-03-16 14:53:41 -07:00
Justin Cormack
96896f2d0b
Add new syscalls in libseccomp 2.3.0 to seccomp default profile
...
This adds the following new syscalls that are supported in libseccomp 2.3.0,
including calls added up to kernel 4.5-rc4:
mlock2 - same as mlock but with a flag
copy_file_range - copy file contents, like splice but with reflink support.
The following are not added, and mentioned in docs:
userfaultfd - userspace page fault handling, mainly designed for process migration
The following are not added, only apply to less common architectures:
switch_endian
membarrier
breakpoint
set_tls
I plan to review the other architectures, some of which can now have seccomp
enabled in the build as they are now supported.
Signed-off-by: Justin Cormack <justin.cormack@docker.com >
2016-03-16 21:17:32 +00:00
Alexander Morozov
581fc536a6
Merge pull request #21219 from vdemeester/update-engine-api
...
Update engine api to use net/context.Context all accross the client API
2016-03-16 14:10:59 -07:00
Aanand Prasad
371ea479f5
Merge pull request #3075 from dnephin/reactive_logs
...
Display logs for new containers started after the command is run
2016-03-16 21:03:25 +00:00
Alessandro Boch
6223291965
Vendoring libnetwork v0.7.0-dev.8
...
Signed-off-by: Alessandro Boch <aboch@docker.com >
2016-03-16 13:45:34 -07:00
David Calavera
f2b1b44de8
Merge pull request #21212 from runcom/wip-token-service-tests
...
distribution: errors: do not access the errors slice if it's empty
2016-03-16 13:44:18 -07:00
Aanand Prasad
abddabfb0a
Merge pull request #3135 from dnephin/fix_down_idempotency
...
Make down idempotent, continue to remove resources if one is missing
2016-03-16 20:26:18 +00:00
Vincent Demeester
8567286ed6
Update api/client file to use context
...
Signed-off-by: Vincent Demeester <vincent@sbr.pm >
2016-03-16 20:25:09 +01:00
Vincent Demeester
48339017db
Vendor engine-api to fba5dc8
...
It plumbs net/context.Context through entire API, see docker/engine-api#140
Signed-off-by: Vincent Demeester <vincent@sbr.pm >
2016-03-16 20:25:09 +01:00
Vincent Demeester
02476b23a7
Clean Vagrantfile from vendoring
...
Signed-off-by: Vincent Demeester <vincent@sbr.pm >
2016-03-16 20:25:04 +01:00
Antonio Murdaca
75b5a1b1f6
registry: client: repository: close response body
...
Signed-off-by: Antonio Murdaca <runcom@redhat.com >
2016-03-16 19:53:17 +01:00
Ying Li
66a39cb30c
Merge pull request #625 from mtrmac/dont-ignore-errors
...
Don't silently ignore swizzler errors
2016-03-16 11:14:38 -07:00
Joffrey F
dd40331b44
Merge pull request #3102 from shin-/1477-a-modest-proposal
...
Add flag to up/down to remove orphaned containers
2016-03-16 10:58:15 -07:00
David Calavera
f81754811f
Merge pull request #21112 from allencloud/validate-configs-from-file
...
add validating configs from configuration file
2016-03-16 10:42:25 -07:00
Nathan LeClaire
f6fd2a3bd9
Merge pull request #183 from nickho/proxy-for-toolbox
...
Add proxy variables to docker-machine command if they exists
2016-03-16 10:37:43 -07:00
Miloslav Trmač
4898d252ee
Don't silently ignore swizzler errors
...
These calls can fail, and errors would cause false failures later in the
tests.
Signed-off-by: Miloslav Trmač <mitr@redhat.com >
2016-03-16 18:33:48 +01:00
Riyaz Faizullabhoy
75883b3d4c
Merge pull request #630 from HuKeping/replace
...
Package replace
2016-03-16 09:54:45 -07:00
Riyaz Faizullabhoy
f7fa83c910
Improve messaging and binary generation for pkcs11
...
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com >
2016-03-16 09:43:06 -07:00
Antonio Murdaca
f0d83c4cdb
*: fix response body leaks
...
Signed-off-by: Antonio Murdaca <runcom@redhat.com >
2016-03-16 17:15:42 +01:00
Phil Estes
45b2a57d1c
Merge pull request #21242 from cyphar/fix-userns-permissions
...
daemon: use 0711 for /var/lib/docker
2016-03-16 08:49:17 -07:00
David Calavera
eff27d2b77
Merge pull request #21217 from LK4D4/cleanup_gitignore
...
gitignore: cleanup some not needed entries
2016-03-16 08:24:31 -07:00
David Calavera
3221c7a3c6
Merge pull request #21235 from Microsoft/jstarks/add_npipe_close_write
...
Windows: fix various npipe bugs
2016-03-16 08:23:39 -07:00
David Calavera
72e39d58b7
Merge pull request #21256 from albers/completion-gelf-compression
...
bash completion for gelf-compression log driver settings
2016-03-16 08:22:29 -07:00
Harald Albers
854ceaaa9e
bash completion for gelf-compression log driver settings
...
Signed-off-by: Harald Albers <github@albersweb.de >
2016-03-16 15:58:58 +01:00
Vincent Demeester
5f8a0ceeda
Merge pull request #21250 from runcom/comment-fix
...
registry: endpoint_v1: fix outdated comment
2016-03-16 14:35:14 +01:00
Vincent Demeester
bd97e4f95a
Merge pull request #21203 from HackToday/fixfilter
...
Add check about filter name for containers
2016-03-16 14:30:04 +01:00
Aanand Prasad
1696506ff4
Merge pull request #3136 from dnephin/add_workdir_to_run
...
Add workdir to run
2016-03-16 12:45:00 +00:00
Antonio Murdaca
137c8601a8
registry: endpoint_v1: fix outdated comment
...
Signed-off-by: Antonio Murdaca <runcom@redhat.com >
2016-03-16 12:53:11 +01:00
Nicolas Radde
c09fcb8c44
Add proxy variables to docker-machine command if they exists
...
Signed-off-by: Nicolas Radde <nicolas.radde@gmail.com >
2016-03-16 09:27:51 +01:00
Aleksa Sarai
e91ca0e239
daemon: use 0711 for /var/lib/docker
...
This fixes problems encountered when running with a remapped root (the
syscalls related to the metadata directory will fail under user
namespaces). Using 0711 rather than 0701 (which solved the problem
previously) fixes the issue.
Signed-off-by: Aleksa Sarai <asarai@suse.de >
2016-03-16 19:24:03 +11:00
HuKeping
9cc5a7d9ea
Package replace
...
Replace the use of the "assert" package with the "require" package.
Signed-off-by: Hu Keping <hukeping@huawei.com >
2016-03-16 16:21:35 +08:00
Antonio Murdaca
1b5c2e1d72
distribution: errors: do not access the errors slice if it's empty
...
- cherry-pick from 1.10.3 branch: 0186f4d4223a094a050d06f456355da3ae431468
- add token service test suite
- add integration test (missing in 1.10.3 branch)
Signed-off-by: Antonio Murdaca <runcom@redhat.com >
2016-03-16 09:00:39 +01:00
Phil Estes
2b1b235acf
Merge pull request #21222 from aaronlehmann/pull-with-no-layers
...
Fix pulling images that contain no layers at all
2016-03-15 23:03:42 -07:00
Troy Fontaine
e8eb144e24
Added node discovery warning
...
Signed-off-by: Troy Fontaine <tfontaine@troyfontaine.com >
2016-03-15 23:24:46 -05:00
French Ben
ca4c38ccae
Merge pull request #1546 from saltybeagle/patch-1
...
Grammar fix, s/seem/seems/
2016-03-15 21:17:06 -07:00
Alexander Morozov
aa76ddd353
Merge pull request #21233 from aaronlehmann/testtransfer-flakiness
...
Fix flaky test TestTransfer
2016-03-15 20:59:56 -07:00
Kai Qiang Wu(Kennan)
8a90e8a19b
Add check about filter name for containers
...
Fixes : #21202
We add valid check about filters like network, images,
volumes did.
Signed-off-by: Kai Qiang Wu(Kennan) <wkqwu@cn.ibm.com >
2016-03-16 03:53:40 +00:00
French Ben
a7c6a4dd1e
Merge pull request #1544 from Bigguy34/master
...
fix for displaying no description on repo containers that had short descriptions
2016-03-15 20:49:47 -07:00
Troy Fontaine
ab559c542f
Added suggested modifications
...
Signed-off-by: Troy Fontaine <tfontaine@troyfontaine.com >
2016-03-15 22:44:20 -05:00
Sun Hongliang
5aa339ed38
validate duration flags:--delay, --timeout,--replication-ttl
...
Signed-off-by: Sun Hongliang <allen.sun@daocloud.io >
2016-03-16 10:09:57 +08:00
Riyaz Faizullabhoy
d5671984cf
Merge pull request #571 from docker/cli-server-rotate
...
Change the CLI to be able to rotate server managed keys
2016-03-15 18:50:37 -07:00
Ying Li
44cccbb4db
Make all key rotations publish immediately, not just remote key rotations
...
Signed-off-by: Ying Li <ying.li@docker.com >
2016-03-15 18:35:30 -07:00
John Starks
59573fb3c6
Windows: add support for CloseWrite() to npipe transport
...
This relies on changes to go-winio to support CloseWrite() when the pipe
is in message mode. This fixes an issue where stdin is not properly closed
when there is no more input to docker run.
Signed-off-by: John Starks <jostarks@microsoft.com >
2016-03-15 18:25:35 -07:00