Diogo Monica
00f8f56942
Cosmetic code changes
...
Signed-off-by: Diogo Monica <diogo@docker.com >
2015-07-17 14:33:06 -07:00
Diogo Monica
4c805611d0
Adding more error types and being extra careful with checks
...
Signed-off-by: Diogo Monica <diogo@docker.com >
2015-07-17 14:33:06 -07:00
Diogo Monica
c817ba3606
Fixed bug in Root Validation and added more test
...
Signed-off-by: Diogo Monica <diogo@docker.com >
2015-07-17 14:33:05 -07:00
Diogo Monica
945691912a
Added error type to X509FileStore
...
Signed-off-by: Diogo Monica <diogo@docker.com >
2015-07-17 14:33:05 -07:00
Diogo Monica
17c9fcd911
Added basic tests for ValidateRoot
...
Signed-off-by: Diogo Monica <diogo@docker.com >
2015-07-17 14:33:05 -07:00
Diogo Monica
1c10f2233d
Add better comments, debug code and errors to ValidateRoot
...
Signed-off-by: Diogo Monica <diogo@docker.com >
2015-07-17 14:33:05 -07:00
Diogo Monica
2c9a0d6331
Adding tests to RemoveAll in X509Stores
...
Signed-off-by: Diogo Monica <diogo@docker.com >
2015-07-17 14:31:43 -07:00
Diogo Monica
3ec4f1d7f4
Adding RemoveKey and Test
...
Signed-off-by: Diogo Monica <diogo@docker.com >
2015-07-17 14:31:43 -07:00
Diogo Monica
f5873eef8c
Adding RemoveAll to X509FileStore and correcting functions caller
...
Signed-off-by: Diogo Monica <diogo@docker.com >
2015-07-17 14:31:43 -07:00
Diogo Monica
e72141f38a
Simplifying the root rotation logic
...
Signed-off-by: Diogo Monica <diogo@docker.com >
2015-07-17 14:31:43 -07:00
Diogo Monica
5354c3b191
Added logic for root certificate rotation
...
Signed-off-by: Diogo Monica <diogo@docker.com >
2015-07-17 14:31:43 -07:00
Diogo Monica
5a77976901
Rebasing from master
...
Signed-off-by: Diogo Monica <diogo@docker.com >
2015-07-17 14:31:43 -07:00
Diogo Monica
8d9d2f1dde
Add TOFU logic
...
Signed-off-by: Diogo Monica <diogo@docker.com >
2015-07-17 14:31:43 -07:00
Diogo Monica
a7d8cb0a19
Adding chain support for roots.json and scaning for leaf instead of hardcoding
...
Signed-off-by: Diogo Monica <diogo@docker.com >
2015-07-17 14:31:03 -07:00
Diogo Monica
58e6544d0a
Adding Cert retrieval by common name, and renaming KeyID to CertID
...
Signed-off-by: Diogo Monica <diogo@docker.com >
2015-07-17 14:28:30 -07:00
Diogo Monica
0313aa5958
Adding parsing of multiple certificates, and leaf cert filtering methods
...
Signed-off-by: Diogo Monica <diogo@docker.com >
2015-07-17 14:28:30 -07:00
Arnaud Porterie
340bd135dd
Update RHEL/Centos/Fedora installation docs
...
Remove mentions of older systems.
Signed-off-by: Arnaud Porterie <arnaud.porterie@docker.com >
2015-07-17 14:04:19 -07:00
Sebastiaan van Stijn
415f744d0c
Merge pull request #11485 from wlan0/rollover_log
...
Add rollover log driver, and --log-driver-opts flag
2015-07-17 22:41:26 +02:00
Stephen Day
400e9cb71f
Merge pull request #697 from stevvooe/expand-roadmap
...
Add goals and feature discussion to ROADMAP
2015-07-17 13:41:02 -07:00
Arnaud Porterie
a192105d3b
Merge pull request #14413 from vbatts/vbatts-graph-cleanup
...
graph: comment clarification about shadowed `err`
2015-07-17 13:39:27 -07:00
Doug Davis
12b6083c8f
Remove panic in nat package on invalid hostport
...
Closes #14621
This one grew to be much more than I expected so here's the story... :-)
- when a bad port string (e.g. xxx80) is passed into container.create()
via the API it wasn't being checked until we tried to start the container.
- While starting the container we trid to parse 'xxx80' in nat.Int()
and would panic on the strconv.ParseUint(). We should (almost) never panic.
- In trying to remove the panic I decided to make it so that we, instead,
checked the string during the NewPort() constructor. This means that
I had to change all casts from 'string' to 'Port' to use NewPort() instead.
Which is a good thing anyway, people shouldn't assume they know the
internal format of types like that, in general.
- This meant I had to go and add error checks on all calls to NewPort().
To avoid changing the testcases too much I create newPortNoError() **JUST**
for the testcase uses where we know the port string is ok.
- After all of that I then went back and added a check during container.create()
to check the port string so we'll report the error as soon as we get the
data.
- If, somehow, the bad string does get into the metadata we will generate
an error during container.start() but I can't test for that because
the container.create() catches it now. But I did add a testcase for that.
Signed-off-by: Doug Davis <dug@us.ibm.com >
2015-07-17 13:02:54 -07:00
Arnaud Porterie
98ed9a55f4
Merge pull request #14693 from LK4D4/update_libcontainer
...
Update libcontainer
2015-07-17 13:02:04 -07:00
Diogo Mónica
b91777d51a
Merge pull request #78 from jfrazelle/move-coverage-script-to-makefile
...
Move coverage script to makefile
2015-07-17 12:38:43 -07:00
Stephen J Day
a8dd59ac44
Add goals and feature discussion to ROADMAP
...
Signed-off-by: Stephen J Day <stephen.day@docker.com >
2015-07-17 12:34:12 -07:00
David Calavera
25d9f38852
Merge pull request #13680 from jfrazelle/new-apt-yum-repos
...
WIP: new apt yum repos for release scripts
2015-07-17 12:29:21 -07:00
Jessica Frazelle
23a2d8a3ec
move coverage script to makefile function
...
Signed-off-by: Jessica Frazelle <princess@docker.com >
2015-07-17 12:17:38 -07:00
Sebastiaan van Stijn
a763637eae
Merge pull request #13951 from calavera/plugins_path
...
Separate plugin sockets and specs.
2015-07-17 21:11:31 +02:00
Diogo Mónica
5bfd490be1
Merge pull request #77 from jfrazelle/74-cross-compile-binaries
...
cross compile binaries / dockerfile fixes
2015-07-17 12:11:09 -07:00
Diogo Mónica
c749917b37
Merge pull request #79 from docker/separate-public-private-keys
...
Updates to notary for gotuf's split of PublicKey and PrivateKey interfaces
2015-07-17 12:02:06 -07:00
Jessica Frazelle
7a588ab223
Add makefile target for cross
...
Can be run with:
```
docker build --rm --force-rm -t notary .
docker run --rm -it \
-v $(pwd)/cross:/go/src/github.com/docker/notary/cross \
notary \
make cross
```
Signed-off-by: Jessica Frazelle <princess@docker.com >
2015-07-17 11:36:38 -07:00
Aaron Lehmann
d2ea9cc0d5
Updates to notary for gotuf's split of PublicKey and PrivateKey interfaces
...
Functions should now take data.PublicKey or data.PrivateKey instead of
data.Key.
Signed-off-by: Aaron Lehmann <aaron.lehmann@docker.com >
2015-07-17 11:35:22 -07:00
Nathan McCauley
88e7346782
Merge pull request #71 from docker/unify-cryptoservice
...
Unify cryptoservice
2015-07-17 11:10:59 -07:00
Victor Vieux
20c3a7810c
Merge pull request #1035 from moxiegirl/fix-list
...
Fixes 1021 by reformatting the list
2015-07-17 11:05:42 -07:00
moxiegirl
8d8945061f
Merge pull request #1068 from peggyl/update-github-links
...
Update Github links to point to docker/swarm
2015-07-17 10:50:02 -07:00
cclauss
c2a4bedeb3
Reversed order of Documents and Kitematic in path
...
You are correct. Thanks for catching my mistake.
2015-07-17 19:31:37 +02:00
Mary Anthony
99fb28f7d3
Fixes 1021 by reformatting the list
...
Changing front to frontend per vieux
Updating to get lists looking proper
Signed-off-by: Mary Anthony <mary@docker.com >
2015-07-17 09:47:10 -07:00
Brian Goff
e939a30039
Merge pull request #14709 from rhvgoyal/base-size-100G
...
devicemapper: Change default basesize to 100G
2015-07-17 12:41:28 -04:00
Aaron Lehmann
125d72fd77
Big refactor to make signer use cryptoservices
...
- Add MemoryFileStore, a partial FileStore implementation that doesn't
persist on disk.
- Create a KeyStore interface that allows pluggable key store types. Use
this interface in the cryptoservice implementation.
- Add KeyMemoryStore, which uses MemoryFileStore to provide a KeyStore.
- Add GetKey and DeleteKey functions to cryptoservice.CryptoService.
- Refactor the hardware RSA signing service as a CryptoService.
- Replace custom ed25519 code with cryptoservice.CryptoService.
Signed-off-by: Aaron Lehmann <aaron.lehmann@docker.com >
2015-07-17 09:33:19 -07:00
Brian Goff
fb34537a99
Merge pull request #14685 from Microsoft/10662-revendorhcsshim
...
Windows: Revendor hcsshim@f674a70f1306dbe20b3a516bedd3285d85db60d9
2015-07-17 12:31:58 -04:00
Aanand Prasad
4b4c4f37bd
Merge pull request #1718 from moxiegirl/propos-alternates
...
remove cli
2015-07-17 17:25:08 +01:00
Mary Anthony
2407193594
remove cli
...
Signed-off-by: Mary Anthony <mary@docker.com >
2015-07-17 09:15:29 -07:00
Aanand Prasad
98eab03c61
Merge pull request #1068 from likeon/master
...
Docs: yml link in getting started with django
2015-07-17 17:11:38 +01:00
Aanand Prasad
faa7da6eff
Merge pull request #1515 from aanand/allow-any-volume-mode
...
Allow any volume mode to be specified
2015-07-17 17:10:59 +01:00
Jessie Frazelle
97be366961
Merge pull request #14708 from icecrime/14445_remove_workflow_from_maintainers
...
Remove reviewing process from MAINTAINERS
2015-07-17 09:03:53 -07:00
Ma Shimiao
1b67c38f6f
fix 8926: rmi dangling is unsafe when pulling
...
Signed-off-by: Ma Shimiao <mashimiao.fnst@cn.fujitsu.com >
Signed-off-by: Tibor Vass <tibor@docker.com >
2015-07-17 11:39:57 -04:00
David Calavera
ff05f9c285
Merge pull request #14445 from icecrime/reviewing_process_and_labels
...
Document and adjust reviewing process and labels
2015-07-17 08:25:41 -07:00
David Calavera
7b83b0e15c
Merge pull request #14605 from brahmaroutu/gccgo_scheduler
...
Go Scheduler issue with sync.Mutex
2015-07-17 08:16:32 -07:00
Aanand Prasad
89f6caf871
Allow any volume mode to be specified
...
Signed-off-by: Aanand Prasad <aanand.prasad@gmail.com >
2015-07-17 16:14:09 +01:00
Vivek Goyal
424d5e55a2
devicemapper: Change default basesize to 100G
...
Current default basesize is 10G. Change it to 100G. Reason being that for
some people 10G is turning out to be too small and we don't have capabilities
to grow it dyamically.
This is just overcommitting and no real space is allocated till container
actually writes data. And this is no different then fs based graphdrivers
where virtual size of a container root is unlimited.
Signed-off-by: Vivek Goyal <vgoyal@redhat.com >
2015-07-17 11:10:23 -04:00
Aanand Prasad
a3191ab90f
Add container_name option
...
Signed-off-by: Aanand Prasad <aanand.prasad@gmail.com >
2015-07-17 15:50:09 +01:00