1
0
mirror of https://github.com/docker/docs.git synced 2026-11-05 00:14:17 +03:00
Commit Graph

47845 Commits

Author SHA1 Message Date
Phil Estes
c18e7f3a04 Change subordinate range-owning user to be a system user
Change user/group creation to use flags to adduser/useradd to enforce it
being a system user. Use system user defaults that auto-create a
matching group. These changes allow us to remove all group creation
code, and in doing so we also removed the code that finds available uid,
gid integers and use post-creation query to gather the system-generated
uid and gid.

The only added complexity is that today distros don't auto-create
subordinate ID ranges for a new ID if it is a system ID, so we now need
to handle finding a free range and then calling the `usermod` tool to
add the ranges for that ID. Note that this requires the distro supports
the `-v` and `-w` flags on `usermod` for subordinate ID range additions.

Docker-DCO-1.1-Signed-off-by: Phil Estes <estesp@linux.vnet.ibm.com> (github: estesp)
2016-03-16 18:44:10 -04:00
Dong Chen
26931816c4 Manager should retry EventMonitoring on failure.
Signed-off-by: Dong Chen <dongluo.chen@docker.com>
2016-03-16 15:35:22 -07:00
Victor Vieux
56affa1ada fix image matching via id
Signed-off-by: Victor Vieux <vieux@docker.com>
2016-03-16 15:12:56 -07:00
Riyaz Faizullabhoy
b65723fce3 Remove mentions of fallback
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-03-16 15:12:12 -07:00
Riyaz Faizullabhoy
83f7c758ca Remove delegation role fallback when applying targets changes
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-03-16 15:12:11 -07:00
Riyaz Faizullabhoy
dda52a3fa1 Merge pull request #631 from docker/add-defaults-to-cache
Add defaults to cache-control config parsing
2016-03-16 15:08:30 -07:00
Ying Li
e5b2246004 Update docs with regards to the server configuration
Signed-off-by: Ying Li <ying.li@docker.com>
2016-03-16 14:53:42 -07:00
Ying Li
f1d78f8d6e Add defaults for cache headers, and add tests to ensure that default configs can successfully be parsed
Signed-off-by: Ying Li <ying.li@docker.com>
2016-03-16 14:53:41 -07:00
Justin Cormack
96896f2d0b Add new syscalls in libseccomp 2.3.0 to seccomp default profile
This adds the following new syscalls that are supported in libseccomp 2.3.0,
including calls added up to kernel 4.5-rc4:
mlock2 - same as mlock but with a flag
copy_file_range - copy file contents, like splice but with reflink support.

The following are not added, and mentioned in docs:
userfaultfd - userspace page fault handling, mainly designed for process migration

The following are not added, only apply to less common architectures:
switch_endian
membarrier
breakpoint
set_tls
I plan to review the other architectures, some of which can now have seccomp
enabled in the build as they are now supported.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-03-16 21:17:32 +00:00
Alexander Morozov
581fc536a6 Merge pull request #21219 from vdemeester/update-engine-api
Update engine api to use net/context.Context all accross the client API
2016-03-16 14:10:59 -07:00
Aanand Prasad
371ea479f5 Merge pull request #3075 from dnephin/reactive_logs
Display logs for new containers started after the command is run
2016-03-16 21:03:25 +00:00
Alessandro Boch
6223291965 Vendoring libnetwork v0.7.0-dev.8
Signed-off-by: Alessandro Boch <aboch@docker.com>
2016-03-16 13:45:34 -07:00
David Calavera
f2b1b44de8 Merge pull request #21212 from runcom/wip-token-service-tests
distribution: errors: do not access the errors slice if it's empty
2016-03-16 13:44:18 -07:00
Aanand Prasad
abddabfb0a Merge pull request #3135 from dnephin/fix_down_idempotency
Make down idempotent, continue to remove resources if one is missing
2016-03-16 20:26:18 +00:00
Vincent Demeester
8567286ed6 Update api/client file to use context
Signed-off-by: Vincent Demeester <vincent@sbr.pm>
2016-03-16 20:25:09 +01:00
Vincent Demeester
48339017db Vendor engine-api to fba5dc8
It plumbs net/context.Context through entire API, see docker/engine-api#140

Signed-off-by: Vincent Demeester <vincent@sbr.pm>
2016-03-16 20:25:09 +01:00
Vincent Demeester
02476b23a7 Clean Vagrantfile from vendoring
Signed-off-by: Vincent Demeester <vincent@sbr.pm>
2016-03-16 20:25:04 +01:00
Antonio Murdaca
75b5a1b1f6 registry: client: repository: close response body
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
2016-03-16 19:53:17 +01:00
Ying Li
66a39cb30c Merge pull request #625 from mtrmac/dont-ignore-errors
Don't silently ignore swizzler errors
2016-03-16 11:14:38 -07:00
Joffrey F
dd40331b44 Merge pull request #3102 from shin-/1477-a-modest-proposal
Add flag to up/down to remove orphaned containers
2016-03-16 10:58:15 -07:00
David Calavera
f81754811f Merge pull request #21112 from allencloud/validate-configs-from-file
add validating configs from configuration file
2016-03-16 10:42:25 -07:00
Nathan LeClaire
f6fd2a3bd9 Merge pull request #183 from nickho/proxy-for-toolbox
Add proxy variables to docker-machine command if they exists
2016-03-16 10:37:43 -07:00
Miloslav Trmač
4898d252ee Don't silently ignore swizzler errors
These calls can fail, and errors would cause false failures later in the
tests.

Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2016-03-16 18:33:48 +01:00
Riyaz Faizullabhoy
75883b3d4c Merge pull request #630 from HuKeping/replace
Package replace
2016-03-16 09:54:45 -07:00
Riyaz Faizullabhoy
f7fa83c910 Improve messaging and binary generation for pkcs11
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-03-16 09:43:06 -07:00
Antonio Murdaca
f0d83c4cdb *: fix response body leaks
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
2016-03-16 17:15:42 +01:00
Phil Estes
45b2a57d1c Merge pull request #21242 from cyphar/fix-userns-permissions
daemon: use 0711 for /var/lib/docker
2016-03-16 08:49:17 -07:00
David Calavera
eff27d2b77 Merge pull request #21217 from LK4D4/cleanup_gitignore
gitignore: cleanup some not needed entries
2016-03-16 08:24:31 -07:00
David Calavera
3221c7a3c6 Merge pull request #21235 from Microsoft/jstarks/add_npipe_close_write
Windows: fix various npipe bugs
2016-03-16 08:23:39 -07:00
David Calavera
72e39d58b7 Merge pull request #21256 from albers/completion-gelf-compression
bash completion for gelf-compression log driver settings
2016-03-16 08:22:29 -07:00
Harald Albers
854ceaaa9e bash completion for gelf-compression log driver settings
Signed-off-by: Harald Albers <github@albersweb.de>
2016-03-16 15:58:58 +01:00
Vincent Demeester
5f8a0ceeda Merge pull request #21250 from runcom/comment-fix
registry: endpoint_v1: fix outdated comment
2016-03-16 14:35:14 +01:00
Vincent Demeester
bd97e4f95a Merge pull request #21203 from HackToday/fixfilter
Add check about filter name for containers
2016-03-16 14:30:04 +01:00
Aanand Prasad
1696506ff4 Merge pull request #3136 from dnephin/add_workdir_to_run
Add workdir to run
2016-03-16 12:45:00 +00:00
Antonio Murdaca
137c8601a8 registry: endpoint_v1: fix outdated comment
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
2016-03-16 12:53:11 +01:00
Nicolas Radde
c09fcb8c44 Add proxy variables to docker-machine command if they exists
Signed-off-by: Nicolas Radde <nicolas.radde@gmail.com>
2016-03-16 09:27:51 +01:00
Aleksa Sarai
e91ca0e239 daemon: use 0711 for /var/lib/docker
This fixes problems encountered when running with a remapped root (the
syscalls related to the metadata directory will fail under user
namespaces). Using 0711 rather than 0701 (which solved the problem
previously) fixes the issue.

Signed-off-by: Aleksa Sarai <asarai@suse.de>
2016-03-16 19:24:03 +11:00
HuKeping
9cc5a7d9ea Package replace
Replace the use of the "assert" package with the "require" package.

Signed-off-by: Hu Keping <hukeping@huawei.com>
2016-03-16 16:21:35 +08:00
Antonio Murdaca
1b5c2e1d72 distribution: errors: do not access the errors slice if it's empty
- cherry-pick from 1.10.3 branch: 0186f4d4223a094a050d06f456355da3ae431468
- add token service test suite
- add integration test (missing in 1.10.3 branch)

Signed-off-by: Antonio Murdaca <runcom@redhat.com>
2016-03-16 09:00:39 +01:00
Phil Estes
2b1b235acf Merge pull request #21222 from aaronlehmann/pull-with-no-layers
Fix pulling images that contain no layers at all
2016-03-15 23:03:42 -07:00
Troy Fontaine
e8eb144e24 Added node discovery warning
Signed-off-by: Troy Fontaine <tfontaine@troyfontaine.com>
2016-03-15 23:24:46 -05:00
French Ben
ca4c38ccae Merge pull request #1546 from saltybeagle/patch-1
Grammar fix, s/seem/seems/
2016-03-15 21:17:06 -07:00
Alexander Morozov
aa76ddd353 Merge pull request #21233 from aaronlehmann/testtransfer-flakiness
Fix flaky test TestTransfer
2016-03-15 20:59:56 -07:00
Kai Qiang Wu(Kennan)
8a90e8a19b Add check about filter name for containers
Fixes: #21202
We add valid check about filters like network, images,
volumes did.

Signed-off-by: Kai Qiang Wu(Kennan) <wkqwu@cn.ibm.com>
2016-03-16 03:53:40 +00:00
French Ben
a7c6a4dd1e Merge pull request #1544 from Bigguy34/master
fix for displaying no description on repo containers that had short descriptions
2016-03-15 20:49:47 -07:00
Troy Fontaine
ab559c542f Added suggested modifications
Signed-off-by: Troy Fontaine <tfontaine@troyfontaine.com>
2016-03-15 22:44:20 -05:00
Sun Hongliang
5aa339ed38 validate duration flags:--delay, --timeout,--replication-ttl
Signed-off-by: Sun Hongliang <allen.sun@daocloud.io>
2016-03-16 10:09:57 +08:00
Riyaz Faizullabhoy
d5671984cf Merge pull request #571 from docker/cli-server-rotate
Change the CLI to be able to rotate server managed keys
2016-03-15 18:50:37 -07:00
Ying Li
44cccbb4db Make all key rotations publish immediately, not just remote key rotations
Signed-off-by: Ying Li <ying.li@docker.com>
2016-03-15 18:35:30 -07:00
John Starks
59573fb3c6 Windows: add support for CloseWrite() to npipe transport
This relies on changes to go-winio to support CloseWrite() when the pipe
is in message mode. This fixes an issue where stdin is not properly closed
when there is no more input to docker run.

Signed-off-by: John Starks <jostarks@microsoft.com>
2016-03-15 18:25:35 -07:00