docker/docs
1
0
Fork 0
mirror of https://github.com/docker/docs.git synced 2026-11-05 00:14:17 +03:00
Code Activity
47,845 Commits 92 Branches 28 Tags
c16b77e4a204da17037641db2eadff84035cee92
Commit Graph

47845 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Stephen J Day
4646282448 digest: make FromBytes available on digest.Algorithm 
Signed-off-by: Stephen J Day <stephen.day@docker.com>
 2015-12-29 15:16:56 -08:00
moxiegirl
de84dfba75 Merge pull request #18627 from londoncalling/cloud-installs 
[WIP] docs updates per issue 18282 cloud installs
 2015-12-29 14:54:18 -08:00
Victoria
eb2e88ff45 Merge pull request #50 from londoncalling/kitematic_contributors 
added example issue number to kitematic contributors guide instead of…

Merging this, @moxiegirl I got all Ben's comments in, and re-ran make docs to check it. LGTM 👍 :-)
 2015-12-29 14:45:46 -08:00
Sebastiaan van Stijn
1614a86520 Merge pull request #18978 from tswift242/fix-daemon-storage-doc-typo 
Fix typo in daemon storage-driver docs
 2015-12-29 23:33:05 +01:00
David Calavera
acffc79fe4 Merge pull request #18965 from duglin/FixError 
Fix error messages
 2015-12-29 14:12:22 -08:00
Thomas Swift
c44a8d8d8c Fix typo in daemon storage-driver docs 
Signed-off-by: Thomas Swift <tgs242@gmail.com>
 2015-12-29 17:06:02 -05:00
Brian Bland
05d1abbcb4 Merge pull request #1303 from BrianBland/fixDisabledStorageRedirects 
Serve blobs when a storage driver supports redirects but are disabled
 2015-12-29 13:28:45 -08:00
Jess Frazelle
abc695d9d5 Merge pull request #18974 from jfrazelle/remove-seccomp-from-seccomp-profile 
remove seccomp from seccomp profile
 2015-12-29 13:15:14 -08:00
Vincent Demeester
4a1eb3f3e2 Add authorization plugins to docker info 
Signed-off-by: Vincent Demeester <vincent@sbr.pm>
 2015-12-29 22:10:23 +01:00
Victoria Bialas
f0f434bbfc updates per Ben's comments, corrected the git push statement to include create of new branch, and references to repo name now docker/kitematic 
Signed-off-by: Victoria Bialas <victoria.bialas@docker.com>
 2015-12-29 13:02:11 -08:00
Arnaud Porterie
7b540ee653 Merge pull request #18877 from dnephin/move_graph_driver_to_layer_store 
Move graph driver to layer store
 2015-12-29 12:19:02 -08:00
Alexandre Beslic
2aff182135 Merge pull request #1566 from lowstz/fix-doc-typo 
Fix leadership doc example typo
 2015-12-29 11:59:42 -08:00
Arnaud Porterie
a81e438544 Merge pull request #18969 from justincormack/vm86 
Block vm86 syscalls in default seccomp profile
 2015-12-29 11:57:35 -08:00
Arnaud Porterie
2307f47fdd Merge pull request #18972 from justincormack/bpf 
Block bpf syscall from default seccomp profile
 2015-12-29 11:57:07 -08:00
Arnaud Porterie
e01cab1cc5 Merge pull request #18971 from justincormack/ptrace 
Block additional ptrace related syscalls in default seccomp profile
 2015-12-29 11:56:51 -08:00
Arnaud Porterie
3858027e27 Merge pull request #18933 from coolljt0725/always_build 
Add DOCKER_BUILD_ARGS env to pass build-arg for building deb and rpm
 2015-12-29 11:53:06 -08:00
Fabrizio Soppelsa
c63d303a2e Add --openstack-key-pair and --openstack-private-file-name so to 
import and reuse existing nova keypairs.

Signed-off-by: Fabrizio Soppelsa <fsoppelsa@mirantis.com>
 2015-12-29 11:43:00 -08:00
Kenny Leung
c28278f7a2 Print error for failed HTTP auth request. 
Signed-off-by: Kenny Leung <kleung@google.com>
 2015-12-29 11:39:20 -08:00
Nathan LeClaire
14ea20ffdb Merge pull request #2701 from dgageot/completions 
Fix completion installation guide
 2015-12-29 11:32:51 -08:00
Nathan LeClaire
1b76a4467c Merge pull request #2711 from dgageot/ssh-batch-mode 
We must never ask for a password interactively
 2015-12-29 11:21:42 -08:00
Jessica Frazelle
b610fc226a remove seccomp from seccomp profile 
This can be allowed because it should only restrict more per the seccomp docs, and multiple apps use it today.

Signed-off-by: Jessica Frazelle <acidburn@docker.com>
 2015-12-29 11:21:33 -08:00
Nathan LeClaire
7fff3d1407 Merge pull request #2704 from AkihiroSuda/mention-docker-18180 
Print a warning for Boot2Docker v1.9.1 (AUFS issue)
 2015-12-29 11:17:02 -08:00
Liu Hua
5b550f919f update panicwrap package to fix building error on aarch64 platform 
Linux on aarch64 lacks of dup2, uses dup3 instead

Signed-off-by: Liu Hua <sdu.liu@huawei.com>
 2015-12-29 19:11:59 +00:00
Aaron Chen
5728b670ae Fix Fault Tolerance section code example without ttl 
Signed-off-by: Aaron Chen <aaron.chen@curiositychina.com>
 2015-12-30 03:08:09 +08:00
Jess Frazelle
194e69507b Merge pull request #18949 from jfrazelle/fix-libseccomp-version 
fix libseccomp where version < 2.2.1
 2015-12-29 10:58:10 -08:00
Arnaud Porterie
94e0760868 Merge pull request #18947 from jfrazelle/fix-seccomp-unsupported 
fix default profile where unsupported
 2015-12-29 10:21:07 -08:00
David Gageot
8524a4e7d9 We must never ask for a password interactively 
Signed-off-by: David Gageot <david@gageot.net>
 2015-12-29 19:19:55 +01:00
Arnaud Porterie
afdc4747dc Merge pull request #18953 from justincormack/robust_list 
Allow use of robust list syscalls in default seccomp policy
 2015-12-29 10:19:41 -08:00
Arnaud Porterie
a32b06b067 Merge pull request #18956 from justincormack/umount 
Block original umount syscall in default seccomp filter
 2015-12-29 10:19:04 -08:00
Justin Cormack
a0a8ca0ae0 Block additional ptrace related syscalls in default seccomp profile 
Block kcmp, procees_vm_readv, process_vm_writev.
All these require CAP_PTRACE, and are only used for ptrace related
actions, so are not useful as we block ptrace.

Signed-off-by: Justin Cormack <justin.cormack@unikernel.com>
 2015-12-29 18:17:28 +00:00
David Calavera
3ec3597d58 Merge pull request #18950 from zhanghuanzhong/docker-fix-pull-image-log-info 
Print the registry name while pulling an image
 2015-12-29 10:16:05 -08:00
Arnaud Porterie
ad8bce2ce4 Merge pull request #18959 from justincormack/finit_module 
Deny finit_module in default seccomp profile
 2015-12-29 10:12:50 -08:00
Arnaud Porterie
8ac3d083a8 Merge pull request #18961 from justincormack/clock_adjtime 
Block clock_adjtime in default seccomp config
 2015-12-29 10:08:45 -08:00
Arnaud Porterie
294336a1af Merge pull request #18968 from justincormack/stime 
Block stime in default seccomp profile
 2015-12-29 10:07:40 -08:00
Justin Cormack
33568405f3 Block bpf syscall from default seccomp profile 
The bpf syscall can load code into the kernel which may
persist beyond container lifecycle. Requires CAP_SYS_ADMIN
already.

Signed-off-by: Justin Cormack <justin.cormack@unikernel.com>
 2015-12-29 17:28:30 +00:00
Tianon Gravi
31bd242cba Merge pull request #18728 from hypriot/update-dockerfile-for-arm 
update Dockerfile.arm to reflect latest changes in main Dockerfile
 2015-12-29 09:24:29 -08:00
Jessica Frazelle
35667c3826 add note to packagers.md about libseccomp version 
Signed-off-by: Jessica Frazelle <acidburn@docker.com>
 2015-12-29 08:47:20 -08:00
Justin Cormack
6c3ea7a511 Block vm86 syscalls in default seccomp profile 
These provide an in kernel virtual machine for x86 real mode on x86
used by one very early DOS emulator. Not required for any normal use.

Signed-off-by: Justin Cormack <justin.cormack@unikernel.com>
 2015-12-29 15:47:23 +00:00
Justin Cormack
6300a08be9 Block stime in default seccomp profile 
The stime syscall is a legacy syscall on some architectures
to set the clock, should be blocked as time is not namespaced.

Signed-off-by: Justin Cormack <justin.cormack@unikernel.com>
 2015-12-29 15:28:05 +00:00
Doug Davis
b3e1178ad0 Fix error messages 
`docker kill 123` will show something like:
`Error response from daemon: Cannot kill container 123: nosuchcontainer: No such container: 123`
Notice the `nosuchcontainer` text, that should not be there as that's an internal ID that means nothing to the end user.
This PR fixes this by using `util.GetErrorMessage()` to extract just the message.

While in that dir I found a couple of other spots that could use the same call, just to be safe.

Signed-off-by: Doug Davis <dug@us.ibm.com>
 2015-12-29 06:08:52 -08:00
Qiang Huang
e0dc4f27f6 Remove redundant error messages 
For operations on multi containers, we printed error for each
failed container, then printed an extra message for container
names, it seems redundant.

Addresses comments:
https://github.com/docker/docker/pull/15078#discussion_r47988449

Signed-off-by: Qiang Huang <h.huangqiang@huawei.com>
 2015-12-29 22:03:39 +08:00
Justin Cormack
0e5c43cdda Block clock_adjtime in default seccomp config 
clock_adjtime is the new posix style version of adjtime allowing
a specific clock to be specified. Time is not namespaced, so do
not allow.

Signed-off-by: Justin Cormack <justin.cormack@unikernel.com>
 2015-12-29 12:48:16 +00:00
Justin Cormack
0d5306a0b6 Deny finit_module in default seccomp profile 
This is a new version of init_module that takes a file descriptor
rather than a file name.

Signed-off-by: Justin Cormack <justin.cormack@unikernel.com>
 2015-12-29 12:31:33 +00:00
Justin Cormack
9be0d93cf7 Block original umount syscall in default seccomp filter 
The original umount syscall without flags argument needs to
be blocked too.

Signed-off-by: Justin Cormack <justin.cormack@unikernel.com>
 2015-12-29 11:57:16 +00:00
Akihiro Suda
51a30db7a2 Print a warning for Boot2Docker v1.9.1, which is known to have an issue with AUFS (docker/docker#18180) 
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
 2015-12-29 11:50:26 +00:00
Aaron Chen
3cf44b5b24 Fix leadership doc example typo 
Signed-off-by: Aaron Chen <aaron.chen@curiositychina.com>
 2015-12-29 19:11:35 +08:00
Vincent Demeester
eb551baf6f Merge pull request #18951 from jfrazelle/fix-code-comment 
fix code comment
 2015-12-29 12:00:37 +01:00
Justin Cormack
7b133e7235 Allow use of robust list syscalls 
The set_robust_list syscall sets the list of futexes which are
cleaned up on thread exit, and are needed to avoid mutexes
being held forever on thread exit.

See for example in Musl libc mutex handling:
http://git.musl-libc.org/cgit/musl/tree/src/thread/pthread_mutex_trylock.c#n22

Signed-off-by: Justin Cormack <justin.cormack@unikernel.com>
 2015-12-29 10:22:05 +00:00
Lei Jitang
82051ab996 Add DOCKER_BUILD_ARGS env to pass build-arg for building deb and rpm 
Signed-off-by: Lei Jitang <leijitang@huawei.com>
 2015-12-29 04:09:44 -05:00
Jessica Frazelle
b4c14a0bb8 fix code comment 
Signed-off-by: Jessica Frazelle <acidburn@docker.com>
 2015-12-28 22:36:54 -08:00