mirror of
git://git.yoctoproject.org/meta-virtualization.git
synced 2025-07-19 20:59:41 +02:00
f13ced4d8d
138 Commits
Author | SHA1 | Message | Date | |
---|---|---|---|---|
![]() |
d3acb1a378 |
docker/moby: use generic DOCKER_COMMIT in do_compile
do_compile() is shared and shouldn't have been using SRCREV_moby as that is obviously only set in the moby recipe. Switch to using a generic DOCKER_COMMIT variable and set it in both docker_moby and docker-ce. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
3f45dc8e69 |
docker: add seccomp to default packageconfig settings
Much of meta-virt requires seccomp to function properly, so we update docker to match that common default. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
9d84fcdc6d |
docker: add mobyproject:moby to CVE_PRODUCT
Add mobyproject:moby to CVE_PRODUCT to reflect where the source is coming from for both docker recipes. We keep the old 'docker' designation for compatibility. It is unclear whether or not we should also be adding the cli and libnetwork to the CVE_PRODUCT. But since they are on different SRCREVs and not vendored, we keep them out for now. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
11caf690da |
moby: update to v20.10.21
Bumping moby to version v20.10.21-4-g4ed81ac0e2, which comprises the following commits: f292bf0f4f distribution: Error when pulling OCI artifacts 0211f9e44d [20.10] update to Go 1.18.8 to address CVE-2022-41716 f99cb8297b integration: download busybox-w32 from GitHub Release 3f9dc25f5c update containerd binary to v1.6.9 87ccd38cea vendor: moby/term, Azure/go-ansiterm for golang.org/x/sys/windows compatibility e83e465ae2 [20.10] vendor: github.com/moby/buildkit eeb7b65ab7d651770a5ec52a06ea7c96eb97a249 (v0.8 branch) 9c84417c1b skip TestImagePullStoredfDigestForOtherRepo() on Windows and rootless 5b5b5c6f13 builder: add missing doc comment 05e25f7892 builder: fix running git commands on Windows 2f3bf18014 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372 6699afa549 registry: allow "allow-nondistributable-artifacts" for Docker Hub 4b9902bad4 Validate digest in repo for pull by digest c0d1188c14 builder: make git config isolation opt-in 9f5f3abcee builder: isolate git from local system 10db4c2db7 builder: explicitly set CWD for all git commands 8816c3c2aa builder: modernize TestCheckoutGit 11bdbf40b9 [20.10] Update to go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 66ddb7f91c Fix live-restore w/ restart policies + volume refs c003392582 contrib: make dockerd-rootless-setuptool.sh more robust 53313be0f3 docker-rootless-setuptools.sh: use context after install 9c486bd267 swagger: update links to logo fa17fab895 vendor: github.com/containerd/console v1.0.2 481bee51b5 vendor: github.com/armon/go-metrics v0.4.1 39ba2873e8 vendor: github.com/google/btree v1.1.2 c2755f40cd vendor: github.com/hasicorp/memberlist v0.4.0 5ba3208ec7 Dockerfile: Update Dockerfile syntax, switch to bullseye, add missing libseccomp-dev, remove build pack 6d6a236286 [20.10] Update uses of Image platform fields in OCI image-spec 2570784169 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch) fcd4df906b Update some tests for supplementary group permissions 6a0186b357 Wrap local calls to the content and lease service 3d4616f943 Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190 23c7d84b84 docs: api: adjust ContainerWaitResponse error as optional 3e9e79d134 docs: api: document ImageSummary fields (api v1.39-v1.41) fdd438ae03 api: docs: improve documentation of ContainerConfig type (API v1.30-v1.41) 97014a8db5 namesgenerator: remove Valentina Tereshkova e44d7f735e AdditionalGids must include effective group ID 9e7662e4a7 [20.10] vendor: update containerd to latest of docker-20.10 branch 7dac25a3a9 vendor: update tar-split to v0.11.2 8bd86a0699 update containerd binary to v1.6.8 6c8dd6a6f2 update runc to v1.1.4 418c141e64 [20.10 backport] daemon: kill exec process on ctx cancel d127287d92 Allow different syscalls from kernels 5.12 -> 5.16 57db169641 seccomp: add support for Landlock syscalls in default policy 7ba8ca042c Update golang to 1.18.5 f2a3c3bcef update golang to 1.18.4 a99c9cd852 update golang to 1.18.3 82939f536b update golang to 1.18.2 ecd1aa081f update golang to 1.18.1 7ba67d05a8 [20.10] vendor: update archive/tar for go 1.18 0bc432241e update golang to 1.18.0 bb95d09f9a staticcheck: ignore "SA1019: strings.Title is deprecated" a7299ae72c Dockerfile: update golangci-lint v1.44.0 d97fd533cf integration-cli: SA5011: possible nil pointer dereference (staticcheck) e6aee04a88 client.NewClientWithOpts(): remove redundant type assertion (gosimple) 0523323c28 daemon/logger/awslogs: suppress false positive on hardcoded creds (gosec) adeb29c64c client/request.go:157:8: SA1019: err.Temporary is deprecated (staticcheck) 50361d91a6 registry: trimV1Address(): simplify trimming trailing slash ae3a9337dd golangci.yml: do not limit max reported issues 9820255a1c golangci.yml: skip some tests d223f37300 golangci.yml: update regex for ignoring SA1019 ec3bfba89d graphdriver: temporarily ignore unsafeptr: possible misuse of reflect.SliceHeader f2f387b131 daemon: var-declaration: should omit type bool (revive) 2fb7c9fea7 daemon/config: error strings should not be capitalized fa6954cb98 reformat "nolint" comments 45fa675a35 if-return: redundant if ...; err != nil check (revive) 9e88f8435a daemon/splunk: ignore G402: TLS MinVersion too low for now 2de90ebbe4 pkg/archive: RebaseArchiveEntries(): ignore G110 14b475d091 daemon/stats: fix notRunningErr / notFoundErr detected as unused (false positive) db7b3f4737 unused: ignore false positives b6de0ca7c5 G601: Implicit memory aliasing in for loop e8b838e99f gosec: G601: Implicit memory aliasing in for loop 2ddf6e598a gosimple: S1039: unnecessary use of fmt.Sprintf fadf8bbdff staticcheck: SA4001: &*x will be simplified to x. It will not copy x 7573e32577 client: S1031: unnecessary nil check around range (gosimple) e738a57a6d daemon/logger/journald: fix linting errors 34f6b94255 gosec: G404: Use of weak random number generator a6d7b61c8b update containerd binary to v1.6.7 b4ba1ee22f update runc binary to v1.1.3 da8828c4b3 api: swagger: fix invalid example value (API v1.39-v1.41) 9501d91e19 api: swagger: document BuildCache fields (API v1.39-v1.41) 61fdea902b api: swagger: document BuildCache fields. c77432c889 [20.10] Update golang to 1.17.13 2833aa1e4b docs: api: add missing "platform" query-arg on create (v1.41) a8c28260ad api: swagger: add missing "platform" query-arg on create cfdc075b1c Fix file capabilities droping in Dockerfile 2daa6bb6b3 Windows: Re-create custom NAT networks after restart if missing from HNS 903cd53ce4 vendor: libnetwork 0dde5c895075df6e3630e76f750a447cf63f4789 eccaf6d368 [20.10] update golang to 1.17.12 ff7feeac37 vendor: github.com/containerd/continuity v0.3.0 Bumping libnetwork to version v0.7.0-dev.3-1841-gdcdf8f17, which comprises the following commits: 5e08bdb1 Revert: Added API to set ephemeral port allocator range 563fe8e2 README.md: repo was moved to https://github.com/moby/moby/tree/master/libnetwork bea0bcf5 libnetwork: skip firewalld management for rootless af0c46d8 Apply peformance tuning to new sandboxes also Bumping docker-cli to version v20.10.21, which comprises the following commits: 3e3677e47d docs: fix links to BuildKit backend 20e3951aeb Remove "experimental" gates around "--platform" in bash completion 75d7ce92a2 fixed the plugin command docker-runc a12c535f6e [20.10] vendor docker 03df974ae9e6c219862907efdd76ec2e77ec930b (v20.10.20) d18a3e9004 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372 932ca73874 [20.10] vendor: github.com/docker/docker v20.10.19 7d51e65e72 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch) 1ea8d69d6f feat(docker): add context argument completion e82aa85741 [20.10] vendor: github.com/docker/docker v20.10.18 e9176b36cc [20.10] vendor: github.com/containerd/continuity v0.3.0 bc6ff39e42 docs/reference: run.md update confusing example name 3fa7a8654f docs: update deprecation status for "overlay2.override_kernel_check" 3e06ce8bfa [20.10] Update go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 93eead45ee Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190 45075ea08c [20.10] vendor: github.com/docker/docker v20.10.17 c2dcaecf19 make compose plugin detection in bash completion work on Mac OS 613b9362d0 Detect compose plugin b30d250320 Add completion for docker-compose plugin 6b25bc3003 fix race condition in TestRemoveForce bdac0b38d9 Update golang to 1.18.5 c70b01ec1f update golang to 1.18.4 0389090aeb update golang to 1.18.3 c904936d69 update golang to 1.18.2 386d50c2e9 update golang to 1.18.1 990186f2f6 update go to 1.18.0 86bf1966e2 staticcheck: ignore SA1019: strings.Title is deprecated b3022b91d1 [20.10] Dockerfile.lint: use go install f14ba9f5d7 [20.10] Dockerfile: use syntax=docker/dockerfile:1 c189c4dbea [20.10] vendor: github.com/json-iterator/go v1.1.12 for Go 1.18 compatibility 0c46ffc1f9 [20.10] vendor: github.com/modern-go/reflect2 v1.0.2 for Go 1.18 compatibility 6be9ce798e [20.10] vendor: github.com/google/gofuzz v1.0.0 779ed309a8 lint: update golangci-lint to v1.45.2 2f7e84be65 linting: fix incorrectly formatted errors (revive) e628209d9b linting: ignore some "G101: Potential hardcoded credentials" warnings 80a3add604 cli/command/container: unnecessary use of fmt.Sprintf (gosimple) 80fb0d575e [20.10] Update golang to 1.17.13 d72bef2088 [20.10] update golang to 1.17.12 7502d7e560 Fix dead external link 308624c3b1 fix: remove asterisk from docker command suggestions de7d866b6a [20.10] update golang to 1.17.11 240e4b5501 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5d4776bd90 [20.10] update golang to 1.17.10 49e9c2ae3d vendor: golang.org/x/sys 63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17) 87a3ce2699 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456 1d8abed17d vendor: update x/sys to 134d130e 31dad66f9a [20.10] update golang to 1.17.9 80f673bf9e gofmt with go1.17 3d4cc8e699 [20.10] update remaining files to go1.17.8 30277a8f80 update go to 1.17.8 cfef3a7dc1 docs: deprecated: add entry for "fluent-async-connect" log-opt 53426025c3 [20.10] docs: reformat table for compatibility 573a664639 Describe privileged mode in terms of capabilities cf0ab7ac4c [20.10] vendor: github.com/docker/distribution v2.8.1 d05fd4ffc8 [20.10] vendor: github.com/opencontainers/image-spec v1.0.2 870f138250 [20.10] vendor: github.com/docker/docker v20.10.14 198d6b8724 [20.10] circleci: update buildx to v0.8.2 55a14ec851 [20.10] update remaining Dockerfiles to go 1.16.15 1f9a0df05a e2e: update docker-compose to 1.29.2 4ae338b33a docs: reference: remove trailing space to fix yaml formatting 6380142dd4 docs: fix (table) formatting, fix some broken links 82f422fcf3 docs: build: fix minor markdown and syntax issues 80fd77903b Update the list of log drivers c3d4d623c8 Fix CMD --ignored-param1 example 2e82d11def docs: dockerd: fix broken link in blockquote area 738a6ee1cc improve cp documentation with some illustration examples 246d96bb6c docs: unify "docker create" and "docker run" reference 2fd0f17057 docs: add missing documentation for --pull flag 5fa500000a Fix incorrect pointer inputs to `json.Unmarshal` 1e6a8ce2b7 Dockerfile: update xx to 1.1 6f7a931a2d [20.10] use GO_LDFLAGS instead of LDFLAGS to prevent inheriting unrelated options 91bab605f7 [20.10] vendor.conf: don't use git:// protocol a282e0c5d2 [20.10] update to go 1.16.15 to address CVE-2022-24921 700364e304 Fix mistake with env var example in docker run docs 62d27c32ff Update WORKDIR command information c0e952cf04 Fix the (dead) link for docs for Dockerfile syntax reference 04104a04d3 Update dockerd.md b721998b7b Fixing typo (his --> its) 4065e1246e format create.md table f1002eb9fb Fix typo e97c7b240e added missing closing parenthese aa78937634 Update stats.md add example json output 40fe0573aa Update Ubuntu version number references in push.md c9737e1c37 docs/daemon: replace deprecated '-g' option for '--data-root' 5c6723d080 Correct device syntax to --gpus fd5fc61ecd [20.10] Update Go to 1.16.14 3624019d83 [20.10] update Go to 1.16.13 f3ff8e6ad6 [20.10] vendor: compose-on-kubernetes v0.5.0 to remove github.com/golang/glog ee1ac1b319 fix innocuous data-race when config.Load called in parallel 38dd744a11 [20.10] Update Go to 1.16.12 4de40a825e Update Go to 1.16.11 03fa8f92c8 Update Go to 1.16.10 9989fdbc40 Update most links in docs to use https by default 0e20c1fd21 Update Go to 1.16.9 1c0927a041 Dockerfile: update tonistiigi/xx to 1.0.0-rc.2, add XX_VERSION arg 82f9d5921b info: skip client-side warning about seccomp profile on API >= 1.42 adb01ca79d docs: some minor touch-ups in checkpoint reference 8260476a06 docs: remove trailing space to fix generated YAML format bce2e1f953 docs: create.md: typo fix 44064f51c8 Fix typo in documentation - build.md 292779add5 Add doc for BUILDKIT_PROGRESS env var f2e79b826c docs: use "console" code-hint for shell examples fa46b92361 docs: rewrite reference docs for --stop-signal and --stop-timeout 400f81089a experimental: fix broken link to "checkpoint and restore" page c72057c8db docs: move checkpoint/restore doc from experimental into reference 77db97d595 Use private network address for default-address-pools setting in daemon.json example cbf0d2b7b7 docs: fix some broken anchors d0014a86bc docs: fix description of restart-delay to mention max (1 minute) 6c1c8b55aa docs: fix search results by filterd is-official 44fdac11f5 Update Go to 1.16.8 061051c24d docs: add missing redirect, and remove /go/experimental redirect 2012fbf111 Update Go to 1.16.7 42d1c02750 registry: ensure default auth config has address 0b924e51fc Update to go1.16.6 6288e8b1ac change TestNewAPIClientFromFlagsWithHttpProxyEnv to an e2e test 1e9575e81a cli/config/configfile: various test cleanups c98e9c47ca Use designated test domains (RFC2606) in tests 8437cfefae context: deprecate support for encrypted TLS private keys 68a5ca859f cli/context: ignore linting warnings about RFC 1423 encryption 8a64739631 Update Dockerfiles to latest syntax, remove "experimental" 1d37fb3027 Deprecate Kubernetes context support 0793f96394 Deprecate Kubernetes stack support b639ea8b89 Deprecate Kubernetes stack support Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> docker-ce: update to v20.10.21 Bumping docker to version v20.10.21-4-g4ed81ac0e2, which comprises the following commits: f292bf0f4f distribution: Error when pulling OCI artifacts 0211f9e44d [20.10] update to Go 1.18.8 to address CVE-2022-41716 f99cb8297b integration: download busybox-w32 from GitHub Release 3f9dc25f5c update containerd binary to v1.6.9 87ccd38cea vendor: moby/term, Azure/go-ansiterm for golang.org/x/sys/windows compatibility e83e465ae2 [20.10] vendor: github.com/moby/buildkit eeb7b65ab7d651770a5ec52a06ea7c96eb97a249 (v0.8 branch) 9c84417c1b skip TestImagePullStoredfDigestForOtherRepo() on Windows and rootless 5b5b5c6f13 builder: add missing doc comment 05e25f7892 builder: fix running git commands on Windows 2f3bf18014 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372 6699afa549 registry: allow "allow-nondistributable-artifacts" for Docker Hub 4b9902bad4 Validate digest in repo for pull by digest c0d1188c14 builder: make git config isolation opt-in 9f5f3abcee builder: isolate git from local system 10db4c2db7 builder: explicitly set CWD for all git commands 8816c3c2aa builder: modernize TestCheckoutGit 11bdbf40b9 [20.10] Update to go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 66ddb7f91c Fix live-restore w/ restart policies + volume refs c003392582 contrib: make dockerd-rootless-setuptool.sh more robust 53313be0f3 docker-rootless-setuptools.sh: use context after install 9c486bd267 swagger: update links to logo fa17fab895 vendor: github.com/containerd/console v1.0.2 481bee51b5 vendor: github.com/armon/go-metrics v0.4.1 39ba2873e8 vendor: github.com/google/btree v1.1.2 c2755f40cd vendor: github.com/hasicorp/memberlist v0.4.0 5ba3208ec7 Dockerfile: Update Dockerfile syntax, switch to bullseye, add missing libseccomp-dev, remove build pack 6d6a236286 [20.10] Update uses of Image platform fields in OCI image-spec 2570784169 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch) fcd4df906b Update some tests for supplementary group permissions 6a0186b357 Wrap local calls to the content and lease service 3d4616f943 Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190 23c7d84b84 docs: api: adjust ContainerWaitResponse error as optional 3e9e79d134 docs: api: document ImageSummary fields (api v1.39-v1.41) fdd438ae03 api: docs: improve documentation of ContainerConfig type (API v1.30-v1.41) 97014a8db5 namesgenerator: remove Valentina Tereshkova e44d7f735e AdditionalGids must include effective group ID 9e7662e4a7 [20.10] vendor: update containerd to latest of docker-20.10 branch 7dac25a3a9 vendor: update tar-split to v0.11.2 8bd86a0699 update containerd binary to v1.6.8 6c8dd6a6f2 update runc to v1.1.4 418c141e64 [20.10 backport] daemon: kill exec process on ctx cancel d127287d92 Allow different syscalls from kernels 5.12 -> 5.16 57db169641 seccomp: add support for Landlock syscalls in default policy 7ba8ca042c Update golang to 1.18.5 f2a3c3bcef update golang to 1.18.4 a99c9cd852 update golang to 1.18.3 82939f536b update golang to 1.18.2 ecd1aa081f update golang to 1.18.1 7ba67d05a8 [20.10] vendor: update archive/tar for go 1.18 0bc432241e update golang to 1.18.0 bb95d09f9a staticcheck: ignore "SA1019: strings.Title is deprecated" a7299ae72c Dockerfile: update golangci-lint v1.44.0 d97fd533cf integration-cli: SA5011: possible nil pointer dereference (staticcheck) e6aee04a88 client.NewClientWithOpts(): remove redundant type assertion (gosimple) 0523323c28 daemon/logger/awslogs: suppress false positive on hardcoded creds (gosec) adeb29c64c client/request.go:157:8: SA1019: err.Temporary is deprecated (staticcheck) 50361d91a6 registry: trimV1Address(): simplify trimming trailing slash ae3a9337dd golangci.yml: do not limit max reported issues 9820255a1c golangci.yml: skip some tests d223f37300 golangci.yml: update regex for ignoring SA1019 ec3bfba89d graphdriver: temporarily ignore unsafeptr: possible misuse of reflect.SliceHeader f2f387b131 daemon: var-declaration: should omit type bool (revive) 2fb7c9fea7 daemon/config: error strings should not be capitalized fa6954cb98 reformat "nolint" comments 45fa675a35 if-return: redundant if ...; err != nil check (revive) 9e88f8435a daemon/splunk: ignore G402: TLS MinVersion too low for now 2de90ebbe4 pkg/archive: RebaseArchiveEntries(): ignore G110 14b475d091 daemon/stats: fix notRunningErr / notFoundErr detected as unused (false positive) db7b3f4737 unused: ignore false positives b6de0ca7c5 G601: Implicit memory aliasing in for loop e8b838e99f gosec: G601: Implicit memory aliasing in for loop 2ddf6e598a gosimple: S1039: unnecessary use of fmt.Sprintf fadf8bbdff staticcheck: SA4001: &*x will be simplified to x. It will not copy x 7573e32577 client: S1031: unnecessary nil check around range (gosimple) e738a57a6d daemon/logger/journald: fix linting errors 34f6b94255 gosec: G404: Use of weak random number generator a6d7b61c8b update containerd binary to v1.6.7 b4ba1ee22f update runc binary to v1.1.3 da8828c4b3 api: swagger: fix invalid example value (API v1.39-v1.41) 9501d91e19 api: swagger: document BuildCache fields (API v1.39-v1.41) 61fdea902b api: swagger: document BuildCache fields. c77432c889 [20.10] Update golang to 1.17.13 2833aa1e4b docs: api: add missing "platform" query-arg on create (v1.41) a8c28260ad api: swagger: add missing "platform" query-arg on create cfdc075b1c Fix file capabilities droping in Dockerfile 2daa6bb6b3 Windows: Re-create custom NAT networks after restart if missing from HNS 903cd53ce4 vendor: libnetwork 0dde5c895075df6e3630e76f750a447cf63f4789 eccaf6d368 [20.10] update golang to 1.17.12 ff7feeac37 vendor: github.com/containerd/continuity v0.3.0 Bumping libnetwork to version v0.7.0-dev.3-1841-gdcdf8f17, which comprises the following commits: 5e08bdb1 Revert: Added API to set ephemeral port allocator range 563fe8e2 README.md: repo was moved to https://github.com/moby/moby/tree/master/libnetwork bea0bcf5 libnetwork: skip firewalld management for rootless af0c46d8 Apply peformance tuning to new sandboxes also Bumping docker-cli to version v20.10.21, which comprises the following commits: 3e3677e47d docs: fix links to BuildKit backend 20e3951aeb Remove "experimental" gates around "--platform" in bash completion 75d7ce92a2 fixed the plugin command docker-runc a12c535f6e [20.10] vendor docker 03df974ae9e6c219862907efdd76ec2e77ec930b (v20.10.20) d18a3e9004 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372 932ca73874 [20.10] vendor: github.com/docker/docker v20.10.19 7d51e65e72 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch) 1ea8d69d6f feat(docker): add context argument completion e82aa85741 [20.10] vendor: github.com/docker/docker v20.10.18 e9176b36cc [20.10] vendor: github.com/containerd/continuity v0.3.0 bc6ff39e42 docs/reference: run.md update confusing example name 3fa7a8654f docs: update deprecation status for "overlay2.override_kernel_check" 3e06ce8bfa [20.10] Update go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 93eead45ee Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190 45075ea08c [20.10] vendor: github.com/docker/docker v20.10.17 c2dcaecf19 make compose plugin detection in bash completion work on Mac OS 613b9362d0 Detect compose plugin b30d250320 Add completion for docker-compose plugin 6b25bc3003 fix race condition in TestRemoveForce bdac0b38d9 Update golang to 1.18.5 c70b01ec1f update golang to 1.18.4 0389090aeb update golang to 1.18.3 c904936d69 update golang to 1.18.2 386d50c2e9 update golang to 1.18.1 990186f2f6 update go to 1.18.0 86bf1966e2 staticcheck: ignore SA1019: strings.Title is deprecated b3022b91d1 [20.10] Dockerfile.lint: use go install f14ba9f5d7 [20.10] Dockerfile: use syntax=docker/dockerfile:1 c189c4dbea [20.10] vendor: github.com/json-iterator/go v1.1.12 for Go 1.18 compatibility 0c46ffc1f9 [20.10] vendor: github.com/modern-go/reflect2 v1.0.2 for Go 1.18 compatibility 6be9ce798e [20.10] vendor: github.com/google/gofuzz v1.0.0 779ed309a8 lint: update golangci-lint to v1.45.2 2f7e84be65 linting: fix incorrectly formatted errors (revive) e628209d9b linting: ignore some "G101: Potential hardcoded credentials" warnings 80a3add604 cli/command/container: unnecessary use of fmt.Sprintf (gosimple) 80fb0d575e [20.10] Update golang to 1.17.13 d72bef2088 [20.10] update golang to 1.17.12 7502d7e560 Fix dead external link Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> containerd: update to v1.6.9 Bumping containerd to version v1.6.9-12-g6c41694da, which comprises the following commits: 5af8d89ce overlayutils: Add fastpath for userxattr check 303f608dd [release/1.6] update to Go 1.18.8 to address CVE-2022-41716 3f9f9508d ctr export strictly match default platform df73acad5 [release/1.6] go.mod: Bump hcsshim to v0.9.5 658490b78 ctr import: strictly match platform 4907b4d72 Migrate away from GitHub actions set-output f1493f665 Prepare release notes for v1.6.9 346412f5a adding support of CAP_BPF and CAP_PERFMON 99578d1fc Update mailmap a956d8415 Add logging volume metrics to Containerd CRI plugin 29e2dea50 fix pusher concurrent close channel 8a9d69385 [release/1.6] Stats() shouldn't assume s.container is non-nil a9adc7938 cri: PodSandboxStatus should tolerate missing task b66eb726a migrate from k8s.gcr.io to registry.k8s.io 5b40993a5 [release/1.6] upgrade containerd/continuity from v0.2.2 to v0.3.0 f2376e659 Update container with sandbox metadata after NetNS is created 06f82efef archive: validate digests before use 28324c529 [release/1.6] Update go 1.18.7, addresses CVE-2022-2879, CVE-2022-2880, CVE-2022-41715 0aeeb62cb [release/1.6] update golangci-lint to v1.19.0 7db9d1f76 Fix linter warnings 4dc932e62 [release/1.6] gofmt with go1.19 7b8d679ad [release/1.6] integration: remove use of deprecated io/ioutil 926b9c72f retry request on writer reset b9a35c6af Add integration tests with failpoint 1f29fac48 Persist container and sandbox if resource cleanup fails, like teardownPodNetwork a85709c6c integration: simplify CNI-fp and add README.md d89a8d223 pkg/failpoint: add FreeBSD link and update pkg doc b0ce2965a integration: Add injected failpoint testing for RunPodSandbox a7f956d86 integration: CNI bridge wrapper with failpoint 07c479471 pkg/failpoint: add DelegatedEval API 4a5bc05aa runtime/v2/shim: return if error in load plugin 71ee7de24 bin/ctr,integration: new runc-shim with failpoint 3e2e77849 runtime/v2: manager supports server interceptor cb935bf49 pkg/failpoint: init failpoint package 2fdfd564c make xattr EPERM non-fatal in createTarFile 89e49609d remotes/docker/config: Skipping TLS verification for localhost b720be2ce remove stray .zuul.yaml 6b30bc4b4 .zuul: remove the zuul because it is offline 0f7e258ee Set grpc code for unimplemented cri-api methods fb753e5cd update intergration 6ee5bb7ea bump cri-api ae8598615 ContainerStatus to return container resources d3c7e31c8 Update CRI-API 5b44c5271 vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd 3507d600b update runc binary to v1.1.4 1efd8b947 ci: remove GOPROXY environment variable due to https://github.com/go-yaml/yaml/issues/887 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
2d0f7255a7 |
docker/proxy: don't use -linkshared unconditionally
The linkshared is not supported in some machines like riscv64 and when supported we can use the GO_LINKSHARED instaed. So export GO_LINKSHARED on the recipe to be available for Makefile. This is currently only used in libnetwork for the proxy build, but could be used in additional locations in the future. Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
7cea149bb0 |
docker: reproducibility add -trimpath to go -> $GO patches
With this, we build and package docker without QA warnings due to references to TMPDIR. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
f6bf30aca6 |
docker: ensure that sysvinit and systemd are exclusive
The sysvinit functionality conflicts with the docker daemon settings required for the systemd docker.socket. Ensure that the sysvinit capabilities are only enabled if systemd is not present. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
bd60f149dc |
docker-ce: update to 20.10.17
Bumping moby to version v20.10.17-2-g3949ff121e, which comprises the following commits: ff7feeac37 vendor: github.com/containerd/continuity v0.3.0 6f3f2b6d08 update containerd binary to v1.6.6 b3bcb15da8 update containerd binary to v1.6.5 f55b030fa0 system: unbreak build for darwin 63ab12cd3a Port pkg/system/mknod.go to FreeBSD 081e538fbd vendor: libnetwork f6ccccb1c082a432c2a5814aaedaca56af33d9ea 8e9d647c01 [20.10] update golang to 1.17.11 87ead7fd2a vendor: hcsshim a11a2c44e8a4aa9d66314b1d759ef582df5ab5e8 27f8322324 vendor: libnetwork 2dab5620d4462865c6151e573b3e7fa5d3b8458b 829951ec19 docs: api: /containers/{id}/attach/ws: remove unsupported query-args < v1.42 6cbe73bfc0 Rename Reservation to Reservations in the open API d9ed3d7e28 update runc binary to v1.1.2 a15acb4bd6 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5f2e0b79ad [20.10] update golang to 1.17.10 Bumping libnetwork to version v0.7.0-dev.3-1835-gf6ccccb1, which comprises the following commits: af0c46d8 Apply peformance tuning to new sandboxes also 23ffb31f Set ExternalPortReserved for dummy proxy 9b82e422 Bump hcsshim 9db86fb7 Only check if route overlaps routes with scope: LINK Bumping docker-cli to version v20.10.17, which comprises the following commits: 7502d7e56 Fix dead external link 308624c3b fix: remove asterisk from docker command suggestions de7d866b6 [20.10] update golang to 1.17.11 240e4b550 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5d4776bd9 [20.10] update golang to 1.17.10 49e9c2ae3 vendor: golang.org/x/sys 63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17) 87a3ce269 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456 1d8abed17 vendor: update x/sys to 134d130e 31dad66f9 [20.10] update golang to 1.17.9 80f673bf9 gofmt with go1.17 3d4cc8e69 [20.10] update remaining files to go1.17.8 30277a8f8 update go to 1.17.8 cfef3a7dc docs: deprecated: add entry for "fluent-async-connect" log-opt 53426025c [20.10] docs: reformat table for compatibility 573a66463 Describe privileged mode in terms of capabilities cf0ab7ac4 [20.10] vendor: github.com/docker/distribution v2.8.1 d05fd4ffc [20.10] vendor: github.com/opencontainers/image-spec v1.0.2 870f13825 [20.10] vendor: github.com/docker/docker v20.10.14 198d6b872 [20.10] circleci: update buildx to v0.8.2 55a14ec85 [20.10] update remaining Dockerfiles to go 1.16.15 1f9a0df05 e2e: update docker-compose to 1.29.2 4ae338b33 docs: reference: remove trailing space to fix yaml formatting 6380142dd docs: fix (table) formatting, fix some broken links 82f422fcf docs: build: fix minor markdown and syntax issues 80fd77903 Update the list of log drivers c3d4d623c Fix CMD --ignored-param1 example 2e82d11de docs: dockerd: fix broken link in blockquote area 738a6ee1c improve cp documentation with some illustration examples 246d96bb6 docs: unify "docker create" and "docker run" reference 2fd0f1705 docs: add missing documentation for --pull flag 5fa500000 Fix incorrect pointer inputs to `json.Unmarshal` 1e6a8ce2b Dockerfile: update xx to 1.1 6f7a931a2 [20.10] use GO_LDFLAGS instead of LDFLAGS to prevent inheriting unrelated options 91bab605f [20.10] vendor.conf: don't use git:// protocol a282e0c5d [20.10] update to go 1.16.15 to address CVE-2022-24921 700364e30 Fix mistake with env var example in docker run docs 62d27c32f Update WORKDIR command information c0e952cf0 Fix the (dead) link for docs for Dockerfile syntax reference 04104a04d Update dockerd.md b721998b7 Fixing typo (his --> its) 4065e1246 format create.md table f1002eb9f Fix typo e97c7b240 added missing closing parenthese aa7893763 Update stats.md add example json output 40fe0573a Update Ubuntu version number references in push.md c9737e1c3 docs/daemon: replace deprecated '-g' option for '--data-root' 5c6723d08 Correct device syntax to --gpus fd5fc61ec [20.10] Update Go to 1.16.14 3624019d8 [20.10] update Go to 1.16.13 f3ff8e6ad [20.10] vendor: compose-on-kubernetes v0.5.0 to remove github.com/golang/glog ee1ac1b31 fix innocuous data-race when config.Load called in parallel 38dd744a1 [20.10] Update Go to 1.16.12 4de40a825 Update Go to 1.16.11 03fa8f92c Update Go to 1.16.10 9989fdbc4 Update most links in docs to use https by default 0e20c1fd2 Update Go to 1.16.9 1c0927a04 Dockerfile: update tonistiigi/xx to 1.0.0-rc.2, add XX_VERSION arg 82f9d5921 info: skip client-side warning about seccomp profile on API >= 1.42 adb01ca79 docs: some minor touch-ups in checkpoint reference 8260476a0 docs: remove trailing space to fix generated YAML format bce2e1f95 docs: create.md: typo fix 44064f51c Fix typo in documentation - build.md 292779add Add doc for BUILDKIT_PROGRESS env var f2e79b826 docs: use "console" code-hint for shell examples fa46b9236 docs: rewrite reference docs for --stop-signal and --stop-timeout 400f81089 experimental: fix broken link to "checkpoint and restore" page c72057c8d docs: move checkpoint/restore doc from experimental into reference 77db97d59 Use private network address for default-address-pools setting in daemon.json example cbf0d2b7b docs: fix some broken anchors d0014a86b docs: fix description of restart-delay to mention max (1 minute) 6c1c8b55a docs: fix search results by filterd is-official 44fdac11f Update Go to 1.16.8 061051c24 docs: add missing redirect, and remove /go/experimental redirect 2012fbf11 Update Go to 1.16.7 42d1c0275 registry: ensure default auth config has address Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
dbe9ce60c2 |
docker-moby: update to 20.10.17
Bumping moby to version v20.10.17-2-g3949ff121e, which comprises the following commits: ff7feeac37 vendor: github.com/containerd/continuity v0.3.0 6f3f2b6d08 update containerd binary to v1.6.6 b3bcb15da8 update containerd binary to v1.6.5 f55b030fa0 system: unbreak build for darwin 63ab12cd3a Port pkg/system/mknod.go to FreeBSD 081e538fbd vendor: libnetwork f6ccccb1c082a432c2a5814aaedaca56af33d9ea 8e9d647c01 [20.10] update golang to 1.17.11 87ead7fd2a vendor: hcsshim a11a2c44e8a4aa9d66314b1d759ef582df5ab5e8 27f8322324 vendor: libnetwork 2dab5620d4462865c6151e573b3e7fa5d3b8458b 829951ec19 docs: api: /containers/{id}/attach/ws: remove unsupported query-args < v1.42 6cbe73bfc0 Rename Reservation to Reservations in the open API d9ed3d7e28 update runc binary to v1.1.2 a15acb4bd6 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5f2e0b79ad [20.10] update golang to 1.17.10 Bumping libnetwork to version v0.7.0-dev.3-1835-gf6ccccb1, which comprises the following commits: af0c46d8 Apply peformance tuning to new sandboxes also 23ffb31f Set ExternalPortReserved for dummy proxy 9b82e422 Bump hcsshim 9db86fb7 Only check if route overlaps routes with scope: LINK Bumping docker-cli to version v20.10.17, which comprises the following commits: 7502d7e56 Fix dead external link 308624c3b fix: remove asterisk from docker command suggestions de7d866b6 [20.10] update golang to 1.17.11 240e4b550 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5d4776bd9 [20.10] update golang to 1.17.10 49e9c2ae3 vendor: golang.org/x/sys 63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17) 87a3ce269 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456 1d8abed17 vendor: update x/sys to 134d130e 31dad66f9 [20.10] update golang to 1.17.9 80f673bf9 gofmt with go1.17 3d4cc8e69 [20.10] update remaining files to go1.17.8 30277a8f8 update go to 1.17.8 cfef3a7dc docs: deprecated: add entry for "fluent-async-connect" log-opt 53426025c [20.10] docs: reformat table for compatibility 573a66463 Describe privileged mode in terms of capabilities cf0ab7ac4 [20.10] vendor: github.com/docker/distribution v2.8.1 d05fd4ffc [20.10] vendor: github.com/opencontainers/image-spec v1.0.2 870f13825 [20.10] vendor: github.com/docker/docker v20.10.14 198d6b872 [20.10] circleci: update buildx to v0.8.2 55a14ec85 [20.10] update remaining Dockerfiles to go 1.16.15 1f9a0df05 e2e: update docker-compose to 1.29.2 4ae338b33 docs: reference: remove trailing space to fix yaml formatting 6380142dd docs: fix (table) formatting, fix some broken links 82f422fcf docs: build: fix minor markdown and syntax issues 80fd77903 Update the list of log drivers c3d4d623c Fix CMD --ignored-param1 example 2e82d11de docs: dockerd: fix broken link in blockquote area 738a6ee1c improve cp documentation with some illustration examples 246d96bb6 docs: unify "docker create" and "docker run" reference 2fd0f1705 docs: add missing documentation for --pull flag 5fa500000 Fix incorrect pointer inputs to `json.Unmarshal` 1e6a8ce2b Dockerfile: update xx to 1.1 6f7a931a2 [20.10] use GO_LDFLAGS instead of LDFLAGS to prevent inheriting unrelated options 91bab605f [20.10] vendor.conf: don't use git:// protocol a282e0c5d [20.10] update to go 1.16.15 to address CVE-2022-24921 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
3cf7b71086 |
docker-ce: update to 20.10.16
Bumping moby to version v20.10.16, which comprises the following commits: a15acb4bd6 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5f2e0b79ad [20.10] update golang to 1.17.10 be7855fdbe vendor: update github.com/containerd/cgroups and github.com/cilium/ebpf 414a9e24a7 update containerd binary to v1.6.4 47b6a924b6 update containerd binary to v1.6.3 6d7c2b2d26 update containerd binary to v1.6.2 91708bf704 update containerd binary to v1.6.1 53ae17008e Revert "[20.10] update containerd binary to 1.5.11" 961b9a78d5 update runc binary to v1.1.1 97972dac5f update runc binary to v1.1.0 033a819714 [20.10] update golang to 1.17.9 a80884126b Jenkinsfile: add workaround for CVE-2022-24765 09d6fcdfec update to go 1.17.8 to address CVE-2022-24921 5957684b2c Update Go to 1.17.7 55b72c70ba Update Go to 1.17.6 fdf3020bd5 Update Go to 1.17.5 36e164ba80 Update Go to 1.17.4 ecfba8f588 Update Go to 1.17.3 4e14dcc125 Update Go to 1.17.2 c32b5ece31 Update Go to 1.17.1 7096508811 vendor: update archive/tar to match Go 1.17.0 a1150245cc Update to Go 1.17.0, and gofmt with Go 1.17 95cc7115fb hack/vendor.sh: allow go version to be specified with .0 949c33b1c5 vendor: golang.org/x/sys 63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17) 8392285876 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456 4e81bcf380 Makefile: update buildx to v0.8.2 74e699c8d3 Makefile: update buildx version to v0.6.0 bc3cc2e7ac Makefile: install buildx from binary release, instead of building 492fac20af api: docs: fix indentation of HostConfig.SecurityOpt (v1.39-v1.41) 3cba2682d8 api: docs: move ContainerWaitResponse to definitions (v1.39-v1.41) 55e71450ae api: docs: move VolumeCreateOptions to definitions (v1.39-v1.41) c54362cd64 api: docs: move Volume examples inline (v1.39-v1.41) c60ff9b296 doc: server API Correct ImagesCreate - platform parameter added in 1.32 7a45f7a8cc docs: cleanup swagger API with multiple examples (v1.25-v1.41) 29bb9204bf api: docs: add IPAMConfig on IPAM (v1.41) 77f6564369 api: docs: document MountPoint fields (v1.25-v1.41) 51ea235ab8 api: docs: remove deprecated RootFS.BaseLayer (API v1.25-v1.41) 3d6b4ae572 Correct type of Mounts in ContainerSummary in docs (v1.25-v1.40) 6e8b9809b7 Correct type of Mounts in ContainerSummary in docs 621a98dac0 api: docs: fix warning about comment indentation (API v1.40-v1.41) bb9ef98060 api: docs: update docs for /images/{name}/json (API v1.39-v1.41) 88ca5cec4e daemon: fix error-message for minimum allowed kernel-memory limit 3ea996abd7 docs: add missing KernelMemoryTCP to api v1.40 and v1.41 b475bc95cd docs/api: add missing 400 response for POST /containers/{id}/wait ae07b3cc96 docs/api: update /containers/{id}/wait "condition" parameter (v1.30-v1.41) 19555fa92d [20.10] vendor: github.com/docker/distribution v2.8.1 32fe0bbb91 daemon: use RWMutex for stateCounter ed8fb00b65 errdefs: move GetHTTPErrorStatusCode to api/server/httpstatus 3bd611d7a5 log error message when receiving an unexpected type error 7dfe7a1752 [20.10] update containerd binary to 1.5.11 af953d2f38 [20.10] vendor: containerd 7cfa023d95d37076d5ab035003d4839f4b6ba791 5f9753ae73 client: remove containerd "platform" dependency 4df345e65d client: remove unused Platform field from configWrapper dd38613d0c oci: inheritable capability set should be empty 2825bf7123 Only check if route overlaps routes with scope: LINK f5c56eaca8 [20.10] bump swarmkit for config size increase ce3b6d1ae9 distribution: retry downloading schema config on retryable error Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
ade7848788 |
docker/moby/libnetwork: update to -latest
Bumping libnetwork to version v0.7.0-dev.3-1830-g339b972b, which comprises the following commits: 9db86fb7 Only check if route overlaps routes with scope: LINK 7b9c2905 fix port forwarding with ipv6.disable=1 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
ea4c3c3eba |
docker/moby: update to 20.10.16
Bumping moby to version v20.10.16, which comprises the following commits: a15acb4bd6 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5f2e0b79ad [20.10] update golang to 1.17.10 be7855fdbe vendor: update github.com/containerd/cgroups and github.com/cilium/ebpf 414a9e24a7 update containerd binary to v1.6.4 47b6a924b6 update containerd binary to v1.6.3 6d7c2b2d26 update containerd binary to v1.6.2 91708bf704 update containerd binary to v1.6.1 53ae17008e Revert "[20.10] update containerd binary to 1.5.11" 961b9a78d5 update runc binary to v1.1.1 97972dac5f update runc binary to v1.1.0 033a819714 [20.10] update golang to 1.17.9 a80884126b Jenkinsfile: add workaround for CVE-2022-24765 09d6fcdfec update to go 1.17.8 to address CVE-2022-24921 5957684b2c Update Go to 1.17.7 55b72c70ba Update Go to 1.17.6 fdf3020bd5 Update Go to 1.17.5 36e164ba80 Update Go to 1.17.4 ecfba8f588 Update Go to 1.17.3 4e14dcc125 Update Go to 1.17.2 c32b5ece31 Update Go to 1.17.1 7096508811 vendor: update archive/tar to match Go 1.17.0 a1150245cc Update to Go 1.17.0, and gofmt with Go 1.17 95cc7115fb hack/vendor.sh: allow go version to be specified with .0 949c33b1c5 vendor: golang.org/x/sys 63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17) 8392285876 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456 4e81bcf380 Makefile: update buildx to v0.8.2 74e699c8d3 Makefile: update buildx version to v0.6.0 bc3cc2e7ac Makefile: install buildx from binary release, instead of building 492fac20af api: docs: fix indentation of HostConfig.SecurityOpt (v1.39-v1.41) 3cba2682d8 api: docs: move ContainerWaitResponse to definitions (v1.39-v1.41) 55e71450ae api: docs: move VolumeCreateOptions to definitions (v1.39-v1.41) c54362cd64 api: docs: move Volume examples inline (v1.39-v1.41) c60ff9b296 doc: server API Correct ImagesCreate - platform parameter added in 1.32 7a45f7a8cc docs: cleanup swagger API with multiple examples (v1.25-v1.41) 29bb9204bf api: docs: add IPAMConfig on IPAM (v1.41) 77f6564369 api: docs: document MountPoint fields (v1.25-v1.41) 51ea235ab8 api: docs: remove deprecated RootFS.BaseLayer (API v1.25-v1.41) 3d6b4ae572 Correct type of Mounts in ContainerSummary in docs (v1.25-v1.40) 6e8b9809b7 Correct type of Mounts in ContainerSummary in docs 621a98dac0 api: docs: fix warning about comment indentation (API v1.40-v1.41) bb9ef98060 api: docs: update docs for /images/{name}/json (API v1.39-v1.41) 88ca5cec4e daemon: fix error-message for minimum allowed kernel-memory limit 3ea996abd7 docs: add missing KernelMemoryTCP to api v1.40 and v1.41 b475bc95cd docs/api: add missing 400 response for POST /containers/{id}/wait ae07b3cc96 docs/api: update /containers/{id}/wait "condition" parameter (v1.30-v1.41) 19555fa92d [20.10] vendor: github.com/docker/distribution v2.8.1 32fe0bbb91 daemon: use RWMutex for stateCounter ed8fb00b65 errdefs: move GetHTTPErrorStatusCode to api/server/httpstatus 3bd611d7a5 log error message when receiving an unexpected type error 7dfe7a1752 [20.10] update containerd binary to 1.5.11 af953d2f38 [20.10] vendor: containerd 7cfa023d95d37076d5ab035003d4839f4b6ba791 5f9753ae73 client: remove containerd "platform" dependency 4df345e65d client: remove unused Platform field from configWrapper dd38613d0c oci: inheritable capability set should be empty 2825bf7123 Only check if route overlaps routes with scope: LINK f5c56eaca8 [20.10] bump swarmkit for config size increase ce3b6d1ae9 distribution: retry downloading schema config on retryable error Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
e3087cd666 |
docker-ce: update to v20.10.12
Bumping docker to version v20.10.12-84-g906f57ff5b, which comprises the following commits: ce3b6d1ae9 distribution: retry downloading schema config on retryable error 180f3b9cc7 update containerd binary to v1.5.10 0fa0d70489 [20.10] update to go 1.16.15 to address CVE-2022-24921 4679ffd01c docs: remove HostConfig.LxcConf field from API docs fbbe1fcfd8 api: remove HostConfig.LxcConf field a5a697143d docs: fixing /exec/{id}/resize response code in API documentation 42b13c09a6 Added error codes for exec resize in API docs aa69e8ed3f Fixed exec resize success code in API docs ca5ba4890e Fix typo on the v1.41 changelog db214206e5 vendor: bump etcd v3.3.27 df6a536193 vendor: github.com/coreos/etcd v3.3.25 9502dec32f [20.10] Update Go to 1.16.14 878b9de935 daemon/graphdriver/fuse-overlayfs: Init(): fix directory permissions (staticcheck) d1b3497bfa [20.10] vendor: github.com/docker/distribution v2.8.0 f9344b45fe api/swagger: move DistributionInspect to definitions 13cb9d9723 api/swagger: rename PluginPrivilegeItem to PluginPrivilege 7f9760e10c api/swagger: fix up event-types and move to definitions e6739a2884 api/swagger: move DistributionInspect to definitions d445d24804 api/swagger: rename PluginPrivilegeItem to PluginPrivilege 5e38ae84b2 api/swagger: fix up event-types and move to definitions 012fdff916 Fix swagger docs to match the opencontainers image-spec 13cbf7fbb7 Extract PluginPrivilegeItem as explicit type definition 8fbcf0611b Use explicit object names for improved swagger based code generation b8bee972c4 Fix ContainerSummary swagger docs 7092a6091c Add "changes" query parameter for /image/create to swagger docs adf1e470a1 Add RestartPolicy "no" to swagger docs b4b469eac2 Fix swagger docs to match the opencontainers image-spec 2c38a2a635 Extract PluginPrivilegeItem as explicit type definition 621bfddd6e Use explicit object names for improved swagger based code generation 8a5240a8aa Fix ContainerSummary swagger docs 751cf68e36 Add "changes" query parameter for /image/create to swagger docs a961b76aef Add RestartPolicy "no" to swagger docs ad21bcd94e Jenkinsfile: remove Windows RS1 as it reached end of support b2684c1857 Fix for lack of syncromization in daemon/update.go 8268f70ebb daemon/logger: replace flaky TestFollowLogsHandleDecodeErr 78d0b936b8 daemon/logger: refactor followLogs to write more unit tests 39519221c2 daemon/logger: test followLogs' handleDecodeErr case ada1b01de1 daemon/logger: read the length header correctly 829f071228 update containerd binary to v1.5.9 3e5eea4192 update runc binary to v1.0.3 bd42e17284 update containerd binary to v1.5.8 3fd0b8d6eb Update containerd binary to v1.5.7 3700adb70a Update containerd binary to v1.5.6 0f37f2989b Dockerfile: update gotestsum to v1.7.0 2716336abd Dockerfile: use "go install" to install utilities b35a1707e3 Dockerfile: use version for some utilities instead of commit-sha 2a18825cdf Dockerfile: remove GOPROXY override (was for go < 1.14) 0f925d5d3d remove deprecated "nokmem" build-tag for runc fb45fe614d info: remove "expected" check for tini version fd32c70031 update containerd binary to v1.5.5 302114634c update containerd binary v1.4.8 1cd13dcb6c Update containerd binary to v1.5.3 5f09d5c76a update containerd binary to v1.5.2 23f23c99ed update containerd binary to v1.5.1 f036a34c5b update containerd binary to v1.5.0 1dd37750a6 Revert "[20.10] update containerd binary to v1.4.5" b097d29705 Revert "[20.10] update containerd binary to v1.4.6" de656f9da4 Revert "[20.10] update containerd binary to v1.4.7" 9e36f77577 Revert "[20.10] update containerd binary v1.4.8" eb2acf2fb3 Revert "[20.10] update containerd binary to v1.4.9" 4e838e50ea Revert "[20.10] update containerd binary to v1.4.10" 79fd9c1541 Revert "[20.10] update containerd binary to v1.4.11" 13de46fd4b Revert "[20.10] update containerd binary to v1.4.12" aa92e697cb [20.10] update Go to 1.16.13 f9df098e76 fluentd: Turn ForceStopAsyncSend true when async connect is used 81fc02b7e1 vendor: github.com/fluent/fluent-logger-golang v1.8.0 d6f3add5c6 vendor: github.com/fluent/fluent-logger-golang 1.6.1 660b9962e4 daemon.WithCommonOptions() fix detection of user-namespaces a621bc007b [20.10] update Go to 1.16.12 f4daf9dd08 [20.10] update Go to 1.16.11 dc015972bb vendor: github.com/opencontainers/image-spec v1.0.2 e0108db2bd [20.10] fix vendor validation d47de2a4c7 [20.10] update containerd binary to v1.4.12 da9c983789 [20.10] vendor: github.com/moby/buildkit v0.8.3-4-gbc07b2b8 c1f352c4b1 distribution: validate blob type c96ed28f2f vendor: update github.com/containerd/containerd 7677aeafd7 TestBuildUserNamespaceValidateCapabilitiesAreV2: cleanup daemon storage 34eb6fbe60 testutil: daemon.Cleanup(): cleanup more directories 0e76a0a418 info: unset cgroup-related fields when CgroupDriver == none c7edd308ad [20.10] Update Go to 1.16.10 b3456925ca vendor: update github.com/docker/distribution 6611c72b65 cmd/dockerd: create panic.log file without readonly flag 4b9a3dac46 Fix race in TestCreateServiceSecretFileMode, TestCreateServiceConfigFileMode acb4f263b3 Fix racey TestHealthKillContainer 59d2a2c397 dockerd-rootless.sh: Fix variable not double quotes cause unexpected behavior 2c6aa5aad9 Remove needless check 3285c27503 Fix log statement 'failed to exit' timeout accuracy a4bcd4c64f docker daemon container stop refactor bed624fdc9 docker kill: fix bug where failed kills didnt fallback to unix kill 80b7e8b5d7 buildkit: normalize build target and local platform c2b9a32875 vendor: Update go-winio to v0.4.20 c580a02873 [20.10] Update Go to 1.16.9 129a2000cf [20.10] update containerd binary to v1.4.11 6835d15f55 [20.10] update containerd binary to v1.4.10 5730c139f7 Bump swarmkit to get fix for rollback 59f10e3435 quota: adjust build-tags to allow build without CGO fa78afebcf Update Go to 1.16.8 567c01f6d1 seccomp: add support for "clone3" syscall in default policy 07728cd2bd update runc binary to v1.0.2 964768f200 cmd/dockerd: add the link of "the documentation" 80f1169eca chrootarchive: don't create parent dirs outside of chroot 93ac040bf0 Lock down docker root dir perms. b0c0b73798 bump up rootlesskit to v0.14.4 decb56ac89 Update Go to 1.16.7 Bumping docker-cli to version v20.10.12-22-ga22408634, which comprises the following commits: a282e0c5d [20.10] update to go 1.16.15 to address CVE-2022-24921 700364e30 Fix mistake with env var example in docker run docs 62d27c32f Update WORKDIR command information c0e952cf0 Fix the (dead) link for docs for Dockerfile syntax reference 04104a04d Update dockerd.md b721998b7 Fixing typo (his --> its) 4065e1246 format create.md table f1002eb9f Fix typo e97c7b240 added missing closing parenthese aa7893763 Update stats.md add example json output 40fe0573a Update Ubuntu version number references in push.md c9737e1c3 docs/daemon: replace deprecated '-g' option for '--data-root' 5c6723d08 Correct device syntax to --gpus fd5fc61ec [20.10] Update Go to 1.16.14 3624019d8 [20.10] update Go to 1.16.13 f3ff8e6ad [20.10] vendor: compose-on-kubernetes v0.5.0 to remove github.com/golang/glog ee1ac1b31 fix innocuous data-race when config.Load called in parallel 38dd744a1 [20.10] Update Go to 1.16.12 4de40a825 Update Go to 1.16.11 03fa8f92c Update Go to 1.16.10 9989fdbc4 Update most links in docs to use https by default 0e20c1fd2 Update Go to 1.16.9 1c0927a04 Dockerfile: update tonistiigi/xx to 1.0.0-rc.2, add XX_VERSION arg 82f9d5921 info: skip client-side warning about seccomp profile on API >= 1.42 adb01ca79 docs: some minor touch-ups in checkpoint reference 8260476a0 docs: remove trailing space to fix generated YAML format bce2e1f95 docs: create.md: typo fix 44064f51c Fix typo in documentation - build.md 292779add Add doc for BUILDKIT_PROGRESS env var f2e79b826 docs: use "console" code-hint for shell examples fa46b9236 docs: rewrite reference docs for --stop-signal and --stop-timeout 400f81089 experimental: fix broken link to "checkpoint and restore" page c72057c8d docs: move checkpoint/restore doc from experimental into reference 77db97d59 Use private network address for default-address-pools setting in daemon.json example cbf0d2b7b docs: fix some broken anchors d0014a86b docs: fix description of restart-delay to mention max (1 minute) 6c1c8b55a docs: fix search results by filterd is-official 44fdac11f Update Go to 1.16.8 061051c24 docs: add missing redirect, and remove /go/experimental redirect 2012fbf11 Update Go to 1.16.7 42d1c0275 registry: ensure default auth config has address Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
3988cc7e3a |
moby: update to v20.10.12
Bumping moby to version v20.10.12-84-g906f57ff5b, which comprises the following commits: ce3b6d1ae9 distribution: retry downloading schema config on retryable error 180f3b9cc7 update containerd binary to v1.5.10 0fa0d70489 [20.10] update to go 1.16.15 to address CVE-2022-24921 4679ffd01c docs: remove HostConfig.LxcConf field from API docs fbbe1fcfd8 api: remove HostConfig.LxcConf field a5a697143d docs: fixing /exec/{id}/resize response code in API documentation 42b13c09a6 Added error codes for exec resize in API docs aa69e8ed3f Fixed exec resize success code in API docs ca5ba4890e Fix typo on the v1.41 changelog db214206e5 vendor: bump etcd v3.3.27 df6a536193 vendor: github.com/coreos/etcd v3.3.25 9502dec32f [20.10] Update Go to 1.16.14 878b9de935 daemon/graphdriver/fuse-overlayfs: Init(): fix directory permissions (staticcheck) d1b3497bfa [20.10] vendor: github.com/docker/distribution v2.8.0 f9344b45fe api/swagger: move DistributionInspect to definitions 13cb9d9723 api/swagger: rename PluginPrivilegeItem to PluginPrivilege 7f9760e10c api/swagger: fix up event-types and move to definitions e6739a2884 api/swagger: move DistributionInspect to definitions d445d24804 api/swagger: rename PluginPrivilegeItem to PluginPrivilege 5e38ae84b2 api/swagger: fix up event-types and move to definitions 012fdff916 Fix swagger docs to match the opencontainers image-spec 13cbf7fbb7 Extract PluginPrivilegeItem as explicit type definition 8fbcf0611b Use explicit object names for improved swagger based code generation b8bee972c4 Fix ContainerSummary swagger docs 7092a6091c Add "changes" query parameter for /image/create to swagger docs adf1e470a1 Add RestartPolicy "no" to swagger docs b4b469eac2 Fix swagger docs to match the opencontainers image-spec 2c38a2a635 Extract PluginPrivilegeItem as explicit type definition 621bfddd6e Use explicit object names for improved swagger based code generation 8a5240a8aa Fix ContainerSummary swagger docs 751cf68e36 Add "changes" query parameter for /image/create to swagger docs a961b76aef Add RestartPolicy "no" to swagger docs ad21bcd94e Jenkinsfile: remove Windows RS1 as it reached end of support b2684c1857 Fix for lack of syncromization in daemon/update.go 8268f70ebb daemon/logger: replace flaky TestFollowLogsHandleDecodeErr 78d0b936b8 daemon/logger: refactor followLogs to write more unit tests 39519221c2 daemon/logger: test followLogs' handleDecodeErr case ada1b01de1 daemon/logger: read the length header correctly 829f071228 update containerd binary to v1.5.9 3e5eea4192 update runc binary to v1.0.3 bd42e17284 update containerd binary to v1.5.8 3fd0b8d6eb Update containerd binary to v1.5.7 3700adb70a Update containerd binary to v1.5.6 0f37f2989b Dockerfile: update gotestsum to v1.7.0 2716336abd Dockerfile: use "go install" to install utilities b35a1707e3 Dockerfile: use version for some utilities instead of commit-sha 2a18825cdf Dockerfile: remove GOPROXY override (was for go < 1.14) 0f925d5d3d remove deprecated "nokmem" build-tag for runc fb45fe614d info: remove "expected" check for tini version fd32c70031 update containerd binary to v1.5.5 302114634c update containerd binary v1.4.8 1cd13dcb6c Update containerd binary to v1.5.3 5f09d5c76a update containerd binary to v1.5.2 23f23c99ed update containerd binary to v1.5.1 f036a34c5b update containerd binary to v1.5.0 1dd37750a6 Revert "[20.10] update containerd binary to v1.4.5" b097d29705 Revert "[20.10] update containerd binary to v1.4.6" de656f9da4 Revert "[20.10] update containerd binary to v1.4.7" 9e36f77577 Revert "[20.10] update containerd binary v1.4.8" eb2acf2fb3 Revert "[20.10] update containerd binary to v1.4.9" 4e838e50ea Revert "[20.10] update containerd binary to v1.4.10" 79fd9c1541 Revert "[20.10] update containerd binary to v1.4.11" 13de46fd4b Revert "[20.10] update containerd binary to v1.4.12" aa92e697cb [20.10] update Go to 1.16.13 f9df098e76 fluentd: Turn ForceStopAsyncSend true when async connect is used 81fc02b7e1 vendor: github.com/fluent/fluent-logger-golang v1.8.0 d6f3add5c6 vendor: github.com/fluent/fluent-logger-golang 1.6.1 660b9962e4 daemon.WithCommonOptions() fix detection of user-namespaces a621bc007b [20.10] update Go to 1.16.12 f4daf9dd08 [20.10] update Go to 1.16.11 dc015972bb vendor: github.com/opencontainers/image-spec v1.0.2 e0108db2bd [20.10] fix vendor validation d47de2a4c7 [20.10] update containerd binary to v1.4.12 da9c983789 [20.10] vendor: github.com/moby/buildkit v0.8.3-4-gbc07b2b8 c1f352c4b1 distribution: validate blob type c96ed28f2f vendor: update github.com/containerd/containerd 7677aeafd7 TestBuildUserNamespaceValidateCapabilitiesAreV2: cleanup daemon storage 34eb6fbe60 testutil: daemon.Cleanup(): cleanup more directories 0e76a0a418 info: unset cgroup-related fields when CgroupDriver == none b3456925ca vendor: update github.com/docker/distribution Bumping docker-cli to version v20.10.12-22-ga22408634, which comprises the following commits: a282e0c5d [20.10] update to go 1.16.15 to address CVE-2022-24921 700364e30 Fix mistake with env var example in docker run docs 62d27c32f Update WORKDIR command information c0e952cf0 Fix the (dead) link for docs for Dockerfile syntax reference 04104a04d Update dockerd.md b721998b7 Fixing typo (his --> its) 4065e1246 format create.md table f1002eb9f Fix typo e97c7b240 added missing closing parenthese aa7893763 Update stats.md add example json output 40fe0573a Update Ubuntu version number references in push.md c9737e1c3 docs/daemon: replace deprecated '-g' option for '--data-root' 5c6723d08 Correct device syntax to --gpus fd5fc61ec [20.10] Update Go to 1.16.14 3624019d8 [20.10] update Go to 1.16.13 f3ff8e6ad [20.10] vendor: compose-on-kubernetes v0.5.0 to remove github.com/golang/glog ee1ac1b31 fix innocuous data-race when config.Load called in parallel 38dd744a1 [20.10] Update Go to 1.16.12 4de40a825 Update Go to 1.16.11 03fa8f92c Update Go to 1.16.10 0e20c1fd2 Update Go to 1.16.9 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
98f88eed32 |
docker-moby: update to v20.10.10
Bumping moby to version v20.10.10-9-g7bd682c48c, which comprises the following commits: 7677aeafd7 TestBuildUserNamespaceValidateCapabilitiesAreV2: cleanup daemon storage 34eb6fbe60 testutil: daemon.Cleanup(): cleanup more directories c7edd308ad [20.10] Update Go to 1.16.10 6611c72b65 cmd/dockerd: create panic.log file without readonly flag 4b9a3dac46 Fix race in TestCreateServiceSecretFileMode, TestCreateServiceConfigFileMode acb4f263b3 Fix racey TestHealthKillContainer 59d2a2c397 dockerd-rootless.sh: Fix variable not double quotes cause unexpected behavior 2c6aa5aad9 Remove needless check 3285c27503 Fix log statement 'failed to exit' timeout accuracy a4bcd4c64f docker daemon container stop refactor bed624fdc9 docker kill: fix bug where failed kills didnt fallback to unix kill 80b7e8b5d7 buildkit: normalize build target and local platform c2b9a32875 vendor: Update go-winio to v0.4.20 c580a02873 [20.10] Update Go to 1.16.9 129a2000cf [20.10] update containerd binary to v1.4.11 6835d15f55 [20.10] update containerd binary to v1.4.10 5730c139f7 Bump swarmkit to get fix for rollback 59f10e3435 quota: adjust build-tags to allow build without CGO fa78afebcf Update Go to 1.16.8 567c01f6d1 seccomp: add support for "clone3" syscall in default policy 07728cd2bd update runc binary to v1.0.2 964768f200 cmd/dockerd: add the link of "the documentation" 80f1169eca chrootarchive: don't create parent dirs outside of chroot 93ac040bf0 Lock down docker root dir perms. b0c0b73798 bump up rootlesskit to v0.14.4 decb56ac89 Update Go to 1.16.7 Bumping docker-cli to version v20.10.10, which comprises the following commits: 9989fdbc4 Update most links in docs to use https by default 0e20c1fd2 Update Go to 1.16.9 1c0927a04 Dockerfile: update tonistiigi/xx to 1.0.0-rc.2, add XX_VERSION arg 82f9d5921 info: skip client-side warning about seccomp profile on API >= 1.42 adb01ca79 docs: some minor touch-ups in checkpoint reference 8260476a0 docs: remove trailing space to fix generated YAML format bce2e1f95 docs: create.md: typo fix 44064f51c Fix typo in documentation - build.md 292779add Add doc for BUILDKIT_PROGRESS env var f2e79b826 docs: use "console" code-hint for shell examples fa46b9236 docs: rewrite reference docs for --stop-signal and --stop-timeout 400f81089 experimental: fix broken link to "checkpoint and restore" page c72057c8d docs: move checkpoint/restore doc from experimental into reference 77db97d59 Use private network address for default-address-pools setting in daemon.json example cbf0d2b7b docs: fix some broken anchors d0014a86b docs: fix description of restart-delay to mention max (1 minute) 6c1c8b55a docs: fix search results by filterd is-official 44fdac11f Update Go to 1.16.8 061051c24 docs: add missing redirect, and remove /go/experimental redirect 2012fbf11 Update Go to 1.16.7 42d1c0275 registry: ensure default auth config has address Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
0a7ae8bc50 |
global: convert github SRC_URIs to use https protocol
github is removing git:// access, and fetches will start experiencing interruptions in service, and eventually will fail completely. bitbake will also begin to warn on github src_uri's that don't use https. So we convert the meta-virt instances to use protocol=https (done using the oe-core contrib conversion script) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
cbecee2492 |
docker-moby: add SRCREV_FORMAT
recipes that use multiple SCMs in the SRC_URI, must supply SRCREV_FORMAT or SRCPV triggers an expansion error. While this isn't fatal during the build, it can cause issues with setscene (and possibly) other tasks failing, which then leads to no sstate re-use, etc. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
da57fa2aa4 |
docker-ce: add SRCREV_FORMAT
recipes that use multiple SCMs in the SRC_URI, must supply SRCREV_FORMAT or SRCPV triggers an expansion error. While this isn't fatal during the build, it can cause issues with setscene (and possibly) other tasks failing, which then leads to no sstate re-use, etc. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
7b46286b34 |
virtual/containerd: don't rprovide virtual/
Similar to the oe-core commit: commit 93ac180d8c389f16964bce8bd5538d9389e970e6 Author: Michael Opdenacker <michael.opdenacker@bootlin.com> Date: Wed Sep 1 11:20:20 2021 +0200 meta: stop using "virtual/" in RPROVIDES and RDEPENDS Fixes [YOCTO #14538] Recipes shouldn't use the "virtual/" string in RPROVIDES and RDEPENDS. That's confusing because "virtual/" has no special meaning in RPROVIDES and RDEPENDS (unlike in PROVIDES and DEPENDS). Instead, using "virtual-" instead of "virtual/" as already done in the glibc recipe. We stop rproviding virtual/containerd to keep the namespace clean. There aren't many users of this virtual provides, but we keep it around (for now) to maintain compatibility. At the same time we convert the RPROVIDES to virtual-containerd, to keep it available and consistent with oe-core use virtual-libc, etc. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
263e4d3d4e |
virtual/runc: don't rprovide virtual/
Similar to the oe-core commit: commit 93ac180d8c389f16964bce8bd5538d9389e970e6 Author: Michael Opdenacker <michael.opdenacker@bootlin.com> Date: Wed Sep 1 11:20:20 2021 +0200 meta: stop using "virtual/" in RPROVIDES and RDEPENDS Fixes [YOCTO #14538] Recipes shouldn't use the "virtual/" string in RPROVIDES and RDEPENDS. That's confusing because "virtual/" has no special meaning in RPROVIDES and RDEPENDS (unlike in PROVIDES and DEPENDS). Instead, using "virtual-" instead of "virtual/" as already done in the glibc recipe. We stop rproviding virtual/runc to keep the namespace clean. There aren't many users of this virtual provides, but we keep it around (for now) to maintain compatibility. At the same time we convert the RPROVIDES to virtual-runc, to keep it available and consistent with oe-core use virtual-libc, etc. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
eae941e690 |
docker-ce: update to 20.10.8
Bumping docker-cli to version v20.10.8-2-g62eae52c2, which comprises the following commits: 2012fbf11 Update Go to 1.16.7 0b924e51f Update to go1.16.6 6288e8b1a change TestNewAPIClientFromFlagsWithHttpProxyEnv to an e2e test 1e9575e81 cli/config/configfile: various test cleanups c98e9c47c Use designated test domains (RFC2606) in tests 8437cfefa context: deprecate support for encrypted TLS private keys 68a5ca859 cli/context: ignore linting warnings about RFC 1423 encryption 8a6473963 Update Dockerfiles to latest syntax, remove "experimental" 1d37fb302 Deprecate Kubernetes context support 0793f9639 Deprecate Kubernetes stack support b639ea8b8 Deprecate Kubernetes stack support Bumping docker to version v20.10.8-2-gd24c6dc5cf, which comprises the following commits: decb56ac89 Update Go to 1.16.7 e8fb8f7acd [20.10] update containerd binary to v1.4.9 4cfeb27f78 update runc binary to v1.0.1 067918a8c3 [20.10] update containerd binary v1.4.8 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
3685e9c61f |
docker/moby: update to 20.10.8
Bumping docker-cli to version v20.10.8-2-g62eae52c2, which comprises the following commits: 2012fbf11 Update Go to 1.16.7 0b924e51f Update to go1.16.6 6288e8b1a change TestNewAPIClientFromFlagsWithHttpProxyEnv to an e2e test 1e9575e81 cli/config/configfile: various test cleanups c98e9c47c Use designated test domains (RFC2606) in tests 8437cfefa context: deprecate support for encrypted TLS private keys 68a5ca859 cli/context: ignore linting warnings about RFC 1423 encryption 8a6473963 Update Dockerfiles to latest syntax, remove "experimental" 1d37fb302 Deprecate Kubernetes context support 0793f9639 Deprecate Kubernetes stack support b639ea8b8 Deprecate Kubernetes stack support Bumping moby to version v20.10.8-2-gd24c6dc5cf, which comprises the following commits: decb56ac89 Update Go to 1.16.7 e8fb8f7acd [20.10] update containerd binary to v1.4.9 4cfeb27f78 update runc binary to v1.0.1 067918a8c3 [20.10] update containerd binary v1.4.8 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
d876cfc5bf |
global: overrides syntax conversion
OEcore/bitbake are moving to use the clearer ":" as an overrides separator. This is pass one of updating the meta-virt recipes to use that syntax. This has only been minimally build/runtime tested, more changes will be required for missed overrides, or incorrect conversions Note: A recent bitbake is required: commit 75fad23fc06c008a03414a1fc288a8614c6af9ca Author: Richard Purdie <richard.purdie@linuxfoundation.org> Date: Sun Jul 18 12:59:15 2021 +0100 bitbake: data_smart/parse: Allow ':' characters in variable/function names It is becomming increasingly clear we need to find a way to show what is/is not an override in our syntax. We need to do this in a way which is clear to users, readable and in a way we can transition to. The most effective way I've found to this is to use the ":" charater to directly replace "_" where an override is being specified. This includes "append", "prepend" and "remove" which are effectively special override directives. This patch simply adds the character to the parser so bitbake accepts the value but maps it back to "_" internally so there is no behaviour change. This change is simple enough it could potentially be backported to older version of bitbake meaning layers using the new syntax/markup could work with older releases. Even if other no other changes are accepted at this time and we don't backport, it does set us on a path where at some point in future we could require a more explict syntax. I've tested this patch by converting oe-core/meta-yocto to the new syntax for overrides (9000+ changes) and then seeing that builds continue to work with this patch. (Bitbake rev: 0dbbb4547cb2570d2ce607e9a53459df3c0ac284) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
c4fd021309 |
docker-ce: update to 20.10.7
Bumping docker to version v20.10.7-41-g013d6655bb, which comprises the following commits: 067918a8c3 [20.10] update containerd binary v1.4.8 b0da207af4 Bump go 1.16.6 (addresses CVE-2021-34558) abe8c4e80d updated vendored archive/tar to go1.16.5 7c6645b32b update archive/tar patch for go 1.16 55c363ef48 Bump go 1.16.5 8b0913935c integration: ensurePlugin: disable go modules when building plugin 09a7efb1f7 hack/ci/windows.ps1: disable go modules 6793ff26d8 pkg/fileutils: TestMatches: remove cases no longer valid for go1.16 ab9a92f79c Update test certificates 1d4a06e610 hack: add script to regenerate certificates feaca9816a hack/vendor: add check for vendored archive/tar 793340a33a [20.10] update containerd binary to v1.4.7 7429792eed docker pull: warn when pulled single-arch image does not match --platform 72b66d56a5 [20.10] vendor github.com/Microsoft/hcsshim 64a2b71405dacf76c95600f4c756a991ad09cf7c (moby branch) 50c392c9ff API: fix 404 status description on container create 025e3a7898 Update v1.41.yaml b9cf7b7db5 rootless: fix "x509: certificate signed by unknown authority" on openSUSE Tumbleweed 869b50e10b rootless: disable overlay2 if running with SELinux 44f95c7126 dockerd-rootless.sh: avoid /run/xtables.lock EACCES on SELinux hosts 78bb0f445a Dockerfile: update go-swagger to fix validation on Go1.16 618f6a79ab Run s390x tests on Ubuntu 20.04 872cb16edb update runc binary to v1.0.0 GA 4d42e18c05 vendor: swarmkit to fix deadlock in log broker 89edb68e89 Fix possible overlapping IPs 523f8b397c Jenkinsfile: skip ppc64le and s390x by default on pull requests a57fc0eb15 Fix setting swaplimit=true without checking 6474dada20 vendor: github.com/moby/buildkit v0.8.3-3-g244e8cde 895eaacdd4 vendor: github.com/moby/buildkit v0.8.3 003e3c0551 pkg/signal: ignore SIGURG on all platforms 95551168ac vendor: github.com/ishidawataru/sctp f2269e66cdee387bd321445d5d300893449805be d29a55c6c3 vendor: github.com/docker/libnetwork 64b7a4574d1426139437d20e81c0b6d391130ec8 94c1890d39 builder-next: relax second cache key requirements for schema1 2a0c446866 Use v2 capabilities in layer archives Bumping docker-cli to version v20.10.7-20-ge9b8231d6a, which comprises the following commits: 8a64739631 Update Dockerfiles to latest syntax, remove "experimental" 260ba1a8a2 vendor: cpuguy83/go-md2man/v2 v2.0.1 f63cb8b97e vendor: github.com/russross/blackfriday/v2 v2.1.0 48e6b44379 Dockerfile: remove custom go build for windows/arm64 644c003606 circleCI: update docker engine to 20.10.6 0d17280a30 Jenkinsfile: update old engine version to 19.03 eedfe50a99 Jenkinsfile: update labels to prevent running on cgroups v2 f3dd1ee6c1 Fix minor wording c7cf60f657 docs: Fix wrong bridge driver option 0168626037 vendor: github.com/docker/docker-credential-helpers v0.6.4 e3a9a92b14 vendor: moby/term, Azure/go-ansiterm for golang.org/x/sys/windows compat ab733b5564 [20.10] vendor: github.com/docker/docker v20.10.7 746c553574 docs: fix link to command-line reference 2945ba4f7a Ignore SIGURG on Darwin too 032e485e1c ForwardAllSignals: check if channel is closed, and remove warning 88de81ff21 Fix `docker start` blocking on signal handling 706ca7985b Revert "[20.10] Revert "Ignore SIGURG on Linux."" 8264f5be8d docs: dockerd: fix broken link and markdown touch-ups Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
ead79994b7 |
moby: update to 20.10.7
Bumping moby to version v20.10.7-41-g013d6655bb, which comprises the following commits: 067918a8c3 [20.10] update containerd binary v1.4.8 b0da207af4 Bump go 1.16.6 (addresses CVE-2021-34558) abe8c4e80d updated vendored archive/tar to go1.16.5 7c6645b32b update archive/tar patch for go 1.16 55c363ef48 Bump go 1.16.5 8b0913935c integration: ensurePlugin: disable go modules when building plugin 09a7efb1f7 hack/ci/windows.ps1: disable go modules 6793ff26d8 pkg/fileutils: TestMatches: remove cases no longer valid for go1.16 ab9a92f79c Update test certificates 1d4a06e610 hack: add script to regenerate certificates feaca9816a hack/vendor: add check for vendored archive/tar 793340a33a [20.10] update containerd binary to v1.4.7 7429792eed docker pull: warn when pulled single-arch image does not match --platform 72b66d56a5 [20.10] vendor github.com/Microsoft/hcsshim 64a2b71405dacf76c95600f4c756a991ad09cf7c (moby branch) 50c392c9ff API: fix 404 status description on container create 025e3a7898 Update v1.41.yaml b9cf7b7db5 rootless: fix "x509: certificate signed by unknown authority" on openSUSE Tumbleweed 869b50e10b rootless: disable overlay2 if running with SELinux 44f95c7126 dockerd-rootless.sh: avoid /run/xtables.lock EACCES on SELinux hosts 78bb0f445a Dockerfile: update go-swagger to fix validation on Go1.16 618f6a79ab Run s390x tests on Ubuntu 20.04 872cb16edb update runc binary to v1.0.0 GA 4d42e18c05 vendor: swarmkit to fix deadlock in log broker 89edb68e89 Fix possible overlapping IPs 523f8b397c Jenkinsfile: skip ppc64le and s390x by default on pull requests a57fc0eb15 Fix setting swaplimit=true without checking 6474dada20 vendor: github.com/moby/buildkit v0.8.3-3-g244e8cde 895eaacdd4 vendor: github.com/moby/buildkit v0.8.3 003e3c0551 pkg/signal: ignore SIGURG on all platforms 95551168ac vendor: github.com/ishidawataru/sctp f2269e66cdee387bd321445d5d300893449805be d29a55c6c3 vendor: github.com/docker/libnetwork 64b7a4574d1426139437d20e81c0b6d391130ec8 94c1890d39 builder-next: relax second cache key requirements for schema1 2a0c446866 Use v2 capabilities in layer archives Bumping docker-cli to version v20.10.7-20-ge9b8231d6a, which comprises the following commits: 8a64739631 Update Dockerfiles to latest syntax, remove "experimental" 260ba1a8a2 vendor: cpuguy83/go-md2man/v2 v2.0.1 f63cb8b97e vendor: github.com/russross/blackfriday/v2 v2.1.0 48e6b44379 Dockerfile: remove custom go build for windows/arm64 644c003606 circleCI: update docker engine to 20.10.6 0d17280a30 Jenkinsfile: update old engine version to 19.03 eedfe50a99 Jenkinsfile: update labels to prevent running on cgroups v2 f3dd1ee6c1 Fix minor wording c7cf60f657 docs: Fix wrong bridge driver option 0168626037 vendor: github.com/docker/docker-credential-helpers v0.6.4 e3a9a92b14 vendor: moby/term, Azure/go-ansiterm for golang.org/x/sys/windows compat ab733b5564 [20.10] vendor: github.com/docker/docker v20.10.7 746c553574 docs: fix link to command-line reference 2945ba4f7a Ignore SIGURG on Darwin too 032e485e1c ForwardAllSignals: check if channel is closed, and remove warning 88de81ff21 Fix `docker start` blocking on signal handling 706ca7985b Revert "[20.10] Revert "Ignore SIGURG on Linux."" 8264f5be8d docs: dockerd: fix broken link and markdown touch-ups Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
f82d5f11be |
docker: Fix for sysvinit
Fix for rare legacy systems which still use simultaneously both sysvinit and systemd in DISTRO_FEATURES. This fix avoids issues during do_rootfs with postinstall scriptlets of ['docker-ce']. Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
e16ec7aebc |
docker-ce: upate to latest 20.10.x
docker: 41cf01fa93 pkg/signal.CatchAll: ignore SIGURG on Linux 56541eca9a [20.10] update containerd binary to v1.4.6 fb179ff098 update runc binary to v1.0.0-rc95 4c801fdb7d integration: remove KernelMemory tests 6174e3cf22 Update runc binary to v1.0.0-rc94 afbb1277a3 Swarm config: use absolute paths for mount destination strings 94c1890d39 builder-next: relax second cache key requirements for schema1 01f734cb4f [20.10] update containerd binary to v1.4.5 21391bb7f7 hack/dind: fix cgroup v2 evacuation with `docker run --init` 12b03bcb27 Error string match: do not match command path 8a7f77cb2f dockerd-rootless.sh: use `command -v` instead of `which` 9ca66776fa bump up rootlesskit to v0.14.2 08b27e45d8 Dockerfile: update yamllint to v1.26.1 to fix build 404ede5737 Bump hcsshim for error details fix cli: f291a49ba Swap "LABEL maintainer" for the OCI pre-defined "org.opencontainers.image.authors" 78fcd905c docs: Fix broken jump link 12e2f94eb printServerWarningsLegacy: silence "No oom kill disable support" on cgroup v2 00755d7db printServerWarningsLegacy: silence "No kernel memory limit support" 8264f5be8 docs: dockerd: fix broken link and markdown touch-ups 4fbdf3f36 docs: document log-opts for "dual logging" cache 1ff45aac4 Update stop.md ed71df1b9 docs: cleanup / refactor cli doc ee20fa1ec docs: add reference for "docker config" commands ffe40dc6b docs: update some examples for proxy configuration fbbf1be52 docs: remove experimental ipvlan docs, as they were migrated 3de2cc6ef docs/reference/builder: update "syntax" section 234036d10 docs/reference/builder: update example output, and some rephrasing 0c442dc17 docs/reference/builder: remove outdated example Dockerfiles 6b48c7867 docs/reference/builder: touch-up code-hints and some minor changes network: 56654e71 vendor: github.com/ishidawataru/sctp f2269e66cdee387bd321445d5d300893449805be 7b9c2905 fix port forwarding with ipv6.disable=1 c4ea04e0 enforce order of lock acquisitions on network/controller, fixes #2632 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
cd38144a6b |
moby: update to latest 20.10
Updating to the lastest moby commits, which comprise the following commits: moby: 41cf01fa93 pkg/signal.CatchAll: ignore SIGURG on Linux 56541eca9a [20.10] update containerd binary to v1.4.6 fb179ff098 update runc binary to v1.0.0-rc95 4c801fdb7d integration: remove KernelMemory tests 6174e3cf22 Update runc binary to v1.0.0-rc94 afbb1277a3 Swarm config: use absolute paths for mount destination strings 94c1890d39 builder-next: relax second cache key requirements for schema1 01f734cb4f [20.10] update containerd binary to v1.4.5 21391bb7f7 hack/dind: fix cgroup v2 evacuation with `docker run --init` 12b03bcb27 Error string match: do not match command path 9ca66776fa bump up rootlesskit to v0.14.2 404ede5737 Bump hcsshim for error details fix cli: f291a49ba Swap "LABEL maintainer" for the OCI pre-defined "org.opencontainers.image.authors" 78fcd905c docs: Fix broken jump link 12e2f94eb printServerWarningsLegacy: silence "No oom kill disable support" on cgroup v2 00755d7db printServerWarningsLegacy: silence "No kernel memory limit support" 8264f5be8 docs: dockerd: fix broken link and markdown touch-ups 4fbdf3f36 docs: document log-opts for "dual logging" cache 1ff45aac4 Update stop.md ed71df1b9 docs: cleanup / refactor cli doc ee20fa1ec docs: add reference for "docker config" commands ffe40dc6b docs: update some examples for proxy configuration fbbf1be52 docs: remove experimental ipvlan docs, as they were migrated 3de2cc6ef docs/reference/builder: update "syntax" section 234036d10 docs/reference/builder: update example output, and some rephrasing 0c442dc17 docs/reference/builder: remove outdated example Dockerfiles 6b48c7867 docs/reference/builder: touch-up code-hints and some minor changes network: 56654e71 vendor: github.com/ishidawataru/sctp f2269e66cdee387bd321445d5d300893449805be 7b9c2905 fix port forwarding with ipv6.disable=1 c4ea04e0 enforce order of lock acquisitions on network/controller, fixes #2632 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
903b3a1bde |
docker: add CVE_PRODUCT to recipes
Allows the yocto cve-checker to flag CVEs, which would otherwise go unreported due to the package name not matching NIST NVD data. Signed-off-by: Ralph Siemsen <ralph.siemsen@linaro.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
31ab8a78b4 |
docker: introduce -clie package
By the docker-packaging repository and https://docs.docker.com/engine/install/centos/#installation-methods docker is packaged by most distros with a split between the engine and the CLI. We do the same here, by introducing the -cli package But to keep existing use cases working, we also create a RDEPENDS between the main docker package (the engine) and the cli, so existing "docker" package installs will continue to work the same way. To have separate and non-redepending packages created set the DOCKER_UNIFIED_PACKAGE variable to False Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
9d98a04b26 |
docker: unify common parts of docker-ce and docker-moby recipes
Now that docker-ce is being built from the same repos as docker-moby, the only unique things in the recipes are the SRCREVs. We move the common packaging, compile/install routines and configuration to the .inc files. We also move the patches to the generic 'files' directory, so they can be shared. If we there are SRCREV bumps in the future that diverge moby and docker, we'll hold patches in their named directorys and tweak the compile/install routines as necessary. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
cd5eead051 |
docker-moby; add _git suffix to recipe
For whatever reason, the -ce recipe has _git and the moby variant doesn't. When in reality, the _git is more significant for moby than for -ce. Renaming the recipe to normalize the recipe naming. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
614a254bf2 |
docker-ce: update to 20.10.6
Updating docker-ce to 20.10.6, we also restructure the recipe to build as mentioned in: https://github.com/docker/docker-ce This now makes the docker-ce recipe virtually identical to the moby variant, with only SRCREV differences being signficant. The docker-ce recipe will build the tags as identified by the docker-packaging repository. We keep this as a separate recipe for this update, so we can backport the 20.10.6 change to older branches (for CVEs, etc), but the moby and docker-ce recipes will (re)unify in following updates. root@qemux86-64:~# docker --version Docker version 20.10.6-ce, build 370c28948e root@qemux86-64:~# docker pull alpine Using default tag: latest latest: Pulling from library/alpine 540db60ca938: Pull complete Digest: sha256:69e70a79f2d41ab5d637de98c1e0b055206ba40a8145e7bddb55ccc04e13cf8f Status: Downloaded newer image for alpine:latest docker.io/library/alpine:latest root@qemux86-64:~# docker run -it alpine /bin/sh [ 4099.428945] docker0: port 1(veth33cc29a) entered blocking state [ 4099.430548] docker0: port 1(veth33cc29a) entered disabled state [ 4099.434641] device veth33cc29a entered promiscuous mode [ 4100.219415] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 4100.739037] eth0: renamed from vethe948f63 [ 4100.746450] IPv6: ADDRCONF(NETDEV_CHANGE): veth33cc29a: link becomes ready [ 4100.748508] docker0: port 1(veth33cc29a) entered blocking state [ 4100.750150] docker0: port 1(veth33cc29a) entered forwarding state [ 4100.754370] IPv6: ADDRCONF(NETDEV_CHANGE): docker0: link becomes ready / # cat /etc/issue Welcome to Alpine Linux 3.13 Kernel \r on an \m (\l) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
bf4f56ab8a |
docker-moby: bump to 20.10-latest
Grabbing the following (minor) commits: 8a7f77cb2f dockerd-rootless.sh: use `command -v` instead of `which` 08b27e45d8 Dockerfile: update yamllint to v1.26.1 to fix build Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
adc6207b5b |
docker-ce: bump to 20.10-latest
Bumping the SRCREV to pick up the following commits: 3b8193b399 Upgrade Docker Scan plugin to v0.8.0 9303aa4b6b Add John Howard to our alumni ba87f9abb5 dockerd-rootless.sh: use `command -v` instead of `which` efe9ca44fe Prepare tests for Windows containerd support ed269a15ff vendor: github.com/docker/swarmkit 5a5494a9a7b408b790533a5e4e1cb43ca1c32aad 62761e5710 vendor: github.com/coreos/etcd v3.3.25 07de8d8bea vendor: github.com/containerd/containerd 19ee068f93c91f7b9b2a858457f1af2cabc7bc06 2ee09a228a vendor: github.com/gogo/protobuf v1.3.2 ce1125b768 Remove needless check 5c7fa82d85 Remove lowenna (aka jhowardmsft) from maintainters 0d83bab69a bump up rootlesskit to v0.14.2 fc17485819 Dockerfile: update yamllint to v1.26.1 to fix build 03ac69b517 Error string match: do not match command path d1b9bc135d Update contrib/nuke-graph-directory.sh b39a1ca16b Fixes subvol delete on a non-btrfs volume 618c440ae3 Bump hcsshim to get some fixes. a0fa96c25b Update stop.md Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
2cc2bc1acf |
docker-ce: update to v20.10-beta
moby has moved on to the 20.10+ series, while docker-ce has stayed behind a bit. Master of docker-ce now has imports from moby and is getting ready for release. To keep our variants from diverging, we switch to master (for now) and will track the new development. We adapt some patches from the moby build to work for docker-ce, in particular, we cannot use docker to build docker, so we port the cli building from moby. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
34087227ee |
docker/moby: update to 20.10.6
Bumping to the lastet 20.10 series. This includes the following moby commits: 255c79a1e8 Move cgroup v2 out of experimental f2c0b3688a Pin arm64 machines to a specific Ubuntu version 29ff2af2d3 Fix flaky TestInspect 60310e2409 Use docker media type for plugin layers 8088859bab btrfs: Allow unprivileged user to delete subvolumes (kernel >= 4.18) d22dde8eb1 rootless: fix getCurrentOOMScoreAdj c1e7924f7c archive: do not use overlayWhiteoutConverter for UserNS 22dc1597b9 overlay2: doesSupportNativeDiff: add fast path for userns daae27bfce overlay2: call d.naiveDiff.ApplyDiff when useNaiveDiff==true e974cb638c rootless: bind mount: fix "operation not permitted" 7022b1e12e bump up rootlesskit to v0.14.1 88470052e7 vendor: docker/libnetwork b3507428be5b458cb0e2b4086b13531fb0706e46 d26ed2c33b fix assertPortList normalizing being too strict 915b239519 builder: produce error when using unsupported Dockerfile option ef2351b416 integration-cli: rely less on "docker port" output format 86d98f5711 integration: update getExternalAddress to prefer IPv4 b41e2d4dc1 integration/container: wrap some long lines for readability 407a61cdb2 hack: use GOPROXY for rootlesskit to workaround issue with old git on CentOS/RHEL 7 a35e1f451e update rootlesskit to v0.14.0 9780942e20 Remove cli test for duplicate --net/--network opts e1ee2823ec TestPushMultipleTags: Add support for 20.10 CLI 969bde2009 jsonfile: more defensive reader implementation cb501700e8 Fix handling for json-file io.UnexpectedEOF 2d39a44c1c overlayutils/userxattr.go: add "fast path" for kernel >= 5.11.0 95d2b686be overlay2: support "userxattr" option (kernel 5.11) 074270703c Use buster backports to build with libseccomp-2.4.4 fed6ba2790 Include VPNkit binary for arm64 2ab3cd8c9e update containerd binary to v1.4.4 d3188dc164 Dockerfile: switch to "stable" dockerfile front-end 98273a606a dockerd-rootless-setuptool.sh: create CLI context "rootless" a0670c6d3d pkg/archive: TestUntarParentPathPermissions requires root 04d9b581e9 Update documentation links 1015b5b438 dockerd-rootless.sh: prohibit running as root 35f5f9e624 builder: fix incorrect cache match for inline cache with empty layers 3ce37a6aa4 vendor: github.com/moby/buildkit v0.8.2 5e8c1b4f7d dockerd-rootless.sh: add typo guard a24d92f95b check-config.sh: add NETFILTER_XT_MARK 80019e1b0e builder: fix blobs releasing via leases after pull 2a220f1f3d Update Swarmkit to pick up fixes to heartbeat period and stalled tasks da1a672102 builder: fix pull synchronization regression 0e001154f9 Check the length of the correct variable #42039 3beb2e4422 Move cpu variant checks into platform matcher 0caf485abb Fallback to manifest list when no platform match a6a88b3145 profiles: seccomp: update to Linux 5.11 syscall list e3750357a5 builder: ensure libnetwork state file do not leak ab5711e619 Fix builder inconsistent error on buggy platform df2a989769 Add shim config for custom runtimes for plugins d13e162a63 Handle long log messages correctly on SizedLogger 34446d0343 replace json.Unmarshal with NewFromJSON in Create c00fb1383f docs: fix double "the" in existing API versions b7e6803ec4 swagger.yaml: Remove extra 'the' wrapped by newline 420de4c569 contrib/check-config.sh: fix INET_XFRM_MODE_TRANSPORT 8412078b1e contrib/check-config.sh: fix IOSCHED_CFQ CFQ_GROUP_IOSCHED bb0866f04e contrib/check-config.sh: fix MEMCG_SWAP_ENABLED db47bec3c7 contrib/check-config.sh: fix NF_NAT_NEEDED 6bc47ca4b4 contrib/check-config.sh: fix NF_NAT_IPV4 491642e696 contrib/check-config.sh: support for cgroupv2 cda6988478 Fix Error in daemon_unix.go and docker_cli_run_unit_test.go 1640d7b986 Fix daemon panic when starting container with invalid device cgroup rule 6e3f2acdac docs: fix NanoCPUs casing ad777ff3bc api: fix NanoCPUs casing in swagger 94d2467613 Fix userns-remap option when username & UID match acb8a48a3c update runc binary to v1.0.0-rc93 5d442b1cb7 pkg/archive: Unpack() use 0755 permissions for missing directories 5db18e0aba archive: avoid creating parent dirs for XGlobalHeader 94feac18d2 Update rootlesskit to v0.13.1 to fix handling of IPv6 addresses cc377d27ac Update TestDaemonRestartWithLiveRestore: fix docker0 subnet missmatch Fix docker0 subnet missmatch when running from docker in docker (dind) fc07fecfb5 TestBuildUserNamespaceValidateCapabilitiesAreV2: verify build completed f7893961de TestBuildUserNamespaceValidateCapabilitiesAreV2: use correct image name d31b2141ae Jenkinsfile: add cgroup2 5de9bc7e01 TestInspectOomKilledTrue: skip on cgroup v2 ff49cb3e33 Dockerfile.simple: Fix compile docker binary error with btrfs 49e706e14c Dockerfile.buildx: update buildx to v0.5.1 0211909bde testing: update docker-py 4.4.1 faf6442f80 integration: fix TestBuildUserNamespaceValidateCapabilitiesAreV2 not using frozen image f0e526f43e Make test work with rootless mode a287e76e15 pkg/archive: allow mknodding FIFO inside userns And the following cli commits: dc017bdda bake: remove windows targets other than windows/amd64 feb6f439e Makefile: have binary, cross, dynbinary targets not use docker for backwards compat 8bc4062fc set default version from git 84cc7d87c update readme with new examples c1c3d3b3a remove unused targets 048a84614 update circleci cross target 33dacda24 add windows/arm64 target fcc05e5ea update windows resources generation 58061d25f dockerfile based binary building 4c3b87d92 config.Load() remove unneeded locks 019609872 vendor: github.com/theupdateframework/notary v0.7.0-21-gbf96a202 6ebf76504 vendor: update notary to 5f1f4a34 f508ce9db vendor: github.com/theupdateframework/notary v0.7.0 2c0435431 docs: remove trailing spaces to prevent yamldocs using "compact" notation ff945151e docs: improve example for "remove all stopped containers" 4571d90f2 config: print deprecation warning when falling back to ~/.dockercfg f33a69f6e [20.10] Revert "Ignore SIGURG on Linux." d6eeeb625 service rollback: always verify state 3e157d529 docker service rollback: fix non-zero exit code in some cases 1fdf84b8e fix --update-order and --rollback-order flags 376b99c6d Rename bin/md2man to bin/go-md2man 0de4e6e9a Fix reading context and dockerfile from stdin with BuildKit de40c2b17 Fix panic when failing to get DefaultAuthConfig d513e46bf cli/config: prevent warning if HOME is not set 2b74b90ef Add docs and completion for docker node ls --filter node.label 05343b36a fix docker-run man page table formatting f90db254d docs: Fix wrong variable name 0dcfdde33 Removed format flag for inspect 03cd1dc50 Added zsh completion for docker context subcommands 42811a7eb docs: add redirect for old reference URL be966aa19 docs: fix typo in deprecated.md b22fe0fb1 deprecate blkio-weight options with cgroups v1 4eb050071 Update bash completion for fluentd --log-options 08c4fdfa7 Add bash completion for `dockerd --ip6tables` 6aa1b37c8 Add bash completion for `docker run|create --pull` e82920d76 Remove duplicate word in push.md 82123939f Add bash completion for jobs Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
4faef1334f |
docker-ce: export GO111MODULE=off
With the latest go version bump in oe-core export GO111MODULE is on by default. Our build is not setup to use go modules, so we disable it and avoid configuration errors: no required module provides package ... : working directory is not part of a module Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
dc1713bec3 |
docker-moby: export GO111MODULE=off
With the latest go version bump in oe-core export GO111MODULE is on by default. Our build is not setup to use go modules, so we disable it and avoid configuration errors: no required module provides package ... : working directory is not part of a module Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
d2081b09b8 |
docker/moby: update to 20.10.3
Updating to the 20.x series for moby. The following moby commits: 519a55f491 TestCgroupNamespacesRunOlderClient: support cgroup v2 b6a6a35684 docker info: adjust warning strings for cgroup v2 25bd941ae4 docker info: silence unhandleable warnings 58283298d7 rootless: set systemd KillMode to mixed 46229ca1d8 Use golang.org/x/sys/execabs a7d4af84bd pull: Validate layer digest format 611eb6ffb3 buildkit: Apply apparmor profile 4afe620fac vendor buildkit 68bb095353c65bc3993fd534c26cf77fe05e61b1 e908cc3901 Use real root with 0701 perms bfedd27259 Do not set DOCKER_TMP to be owned by remapped root edb62a3ace Ensure MkdirAllAndChown also sets perms 1c0af18c6c vendor: opencontainers/selinux v1.8.0, and remove selinux build-tag and stubs 4a175fd050 Cleanup container shutdown check and add test ab06bb3ec0 vendor: opencontainers/selinux v1.7.0 f3d0f7054d cmd/dockerd: sd_notify STOPPING=1 when shutting down c923f6ac3b Fix off-by-one bug 1c5806cf57 Move use of debian:buster frozen image to debian:bullseye af0665861b Fix a potential hang when starting after a non-clean shutdown 7ba1af38b8 TESTING.md: note that integration-cli is deprecated a0fc7a4b46 TESTING.md: Fix path the test environment conditions f2f5106c92 Add a test for #41723 b314e901d8 Add IsUserNamespaceInKernel() test environment condition 58a4c03fed Add debian:bullseye to frozen images 188a691db7 fuse-overlayfs: fix godoc 295fb1c35e Fix jobs mode filter spelling 78eafdd947 Vendor in Libnetwork changes 7e600eaae0 daemon: improve log messages during startup / shutdown e8648fa19f plugin/manager_linux_test: Skip privileged tests when non-root c7e7426796 pkg/chrootarchive: Skip privileged tests when non-root 6349b32e1b daemon/oci_linux_test: Skip privileged tests when non-root a02553670e vendor buildkit to v0.8.1 5fd8d701ce Vendor in libnetwork changes 9122cd1a75 docs: add API v1.41 5458b0e435 Revert "Add multi-user.target to After=" 495d623ae5 Add fallback for pull by tag 34682e536e vendor: BuildKit 950603da215ae03b843f3f66fbe86c4876a6f5a1 15accb8376 vendor: remove vendored golang.org/x/tools, as it's not needed cd63cc846e mark ip6tables as experimental feature dd752ec87a Fix jobs-related bug in task conversion 0a8c769268 update containerd binary to v1.4.3 (CVE-2020-15257) 2680a0fe2c Networking: add regression test for networks endpoint with trailing slash f9b2989e97 Fix permissions on oci fixtures files 703951197c update containerd binary to v1.4.2 22e31dbd9a vendor libnetwork to fix mix up between IPv4 and IPv6 ab09458e21 dockerd-rootless-setuptool.sh: show more helpful error messages 776cadc7db vendor: gotest.tools v3.0.3 aeddf93de0 Implement Unwrap to errors 73571e4689 vendor: github.com/moby/buildkit v0.8.0-rc2 1f88736871 vendor: github.com/containerd/containerd 0edc412565dcc6e3d6125ff9e4b009ad4b89c638 8eebe32f5c vendor: github.com/containerd/cgroups 0b889c03f102012f1d93a97ddd3ef71cd6f4f510 ba475d44a7 vendor: github.com/containerd/fifo 0724c46b320cf96bb172a0550c19a4b1fca4dacb 37da117aba vendor: github.com/containerd/ttrpc v1.0.2 1725a1493e vendor github.com/tonistiigi/fsutil 0834f99b7b85462efb69b4f571a4fa3ca7da5ac9 fa592fa7b2 vendor: golang.org/x/crypto c1f2f97bffc9c53fc40a1a28a5b460094c0050d9 c7f0b509cf vendor: github.com/moby/term bea5bbe245bf407372d477f1361d2ff042d2f556 2630994b35 Bump libnetwork dbffbe8f9b builder-next: fix platform-specific behavior f4214ec847 vendor: github.com/Microsoft/go-winio v0.4.15 was tagged 05c20a6e1c handleContainerExit: put a timeout on containerd DeleteTask beff0a5f2c integration-cli: remove TestBuildContChar 39f9c1b5d1 builder-next: fix --cache-from panic 8f464ae2ab builder-next: refactor to use flighcontrol and remove resolveOnce 1b1eb094cc builder-next: simple refactor 3756668adb builder-next: Refactor using buildkit's resolver pool de56a90929 vendor buildkit 6861f17f15364de0fe1fd1e6e8da07598a485123 f7bcb02f67 seccomp: Add pidfd_getfd syscall 5e3ffe6464 seccomp: Add pidfd_open and pidfd_send_signal 2b41e84719 pkg/system: fix compile on darwin (macOS) b4b902b88f Jenkinsfile: remove e2e image stage 6d243cdf27 testutil: remove remaining use of deprecated pkg/mount 43d61d2bcf [DEL] remove useless assert 6458f750e1 use containerd/cgroups to detect cgroups v2 7ba05f2b2b Rewrite VolumesMountedAsShared/Slave as Integration tests 7bb729e928 Break out non-Windows sys/mount usage into helper 3e3f3d7168 Move tests using sys/mount to not build on Windows a158b53d86 Separate non-Windows mount code from common code 080d9df63e Don't clear the exit code from the Finally block 1bb3491601 builder: fix detection of experimental --stream option (deprecated) 51f5b1279d Don't set image on containerd container. d99e8d2c3b Unhide containerd-namespace flags 9ca3bb632e Store image manifests in containerd content store 66459cc623 Added ip6tables config option c6accc67f2 bump up rootlesskit to v0.11.0 dfc2d770e4 Update iptable.Exists API in integration-cli 53727ce2f0 vendor: github.com/creack/pty v1.1.11 dc3c382b34 replace pkg/symlink with github.com/moby/sys/symlink c208f03fbd pkg/devicemapper: fix invalid usage of reflect.SliceHeader 6a5393636e opts: unify host-options, and use consts 80a5df9c49 Added container ID to containerd task delete event messages 053962af92 Move HostGatewayName const to opts, and change vars to consts e4cf1c7336 pull: use tag service for pulling tagged reference e766361271 pkg/mount: update deprecated wrappers 32d506b394 vendor: moby/sys mountinfo/v0.4.0 182795cff6 Do not call mount.RecursiveUnmount() on Windows 1623e6b222 Vendor in Libnetwork changes ac84f1b55f registry.loginV2(): minor cleanup b102d4637c Fix windows log file rotation with readers bcc993b494 Fix logfile to open all files with custom openFile 56ba96b6c1 Clean up some logfile implementation 3148a46657 Fix various race conditions in loggerutils 93bd2c1336 contrib: remove download-frozen-image-v1 script b90ef1237e registry: minor cleanup in search code 3f7c62f6f6 registry: remove v1 code not related to searching 0ba2d7c625 registry: remove TestSameAuthDataPostSave 32eaf4690a registry: DefaultService.Auth(): skip parsing default registry 7782d04141 registry: remove v1 authentication ab47fd2f72 registry: use consts for default registry 1a1f5cc37b Pass through GOCACHE to test_env 8cc0fd811e docs: fix builder-version swagger 1b8826beee docker stats: fix 'panic: close of closed channel' 6f0709e033 vendor: golang.org/x/sys eeed37f84f13f52d35e095e8023ba65671ff86a1 4680836f80 vendor: github.com/containerd/console v1.0.1 88c0271605 Don't set default platform on container create 80c3199c18 vendor: github.com/spf13/cobra v1.1.1 561b8014c0 testutil: set -500 OOM score for test daemons 2b8e68ef06 dockerd: remove default -500 oom-score-adjust a6129c57e6 Bump vndr v0.1.2 a38b96b8cd Temporarily disable CAP_PERFMON, CAP_BPF, and CAP_CHECKPOINT_RESTORE 5338478546 Dockerfile: fix golang-ci-lint installer f14aea63c9 "Fix" checkpoint on v2 runtime 654cad4d9d Also trim "~..." from AppArmor versions f6f294bd83 testing: Init plugin config when for tests 4539e7f0eb seccomp: implement marshal/unmarshall for MinVersion 6b538ffbca vendor: github.com/gofrs/flock v0.7.3 cf7a5be0f2 daemon: don't adjust oom-score if score is 0 8c31e4536a volume/local: add tests for size quota 2e05db981b quota: move test helper functions to extra file 6d593fe6cc volume/local: decouple presence of options from mounting c677e4cc87 quota: move quota package out of graphdriver 6f1553625d projectquota: build types and unsupported stubs everywhere 31ed121cb8 projectquota: sync next projectID across Control instances 963e5afc04 Update documentation to reflect deprecation of "NewEnvClient" a692823413 seccomp: add test for unmarshal default profile 97535c6c2b seccomp: remove dependency on pkg/parsers/kernel ee079e4692 pkg/aaparser: support parsing version like "3.0.0-beta1" a3256d2dd8 bump google.golang.org/api v0.8.0 2971204e43 bump go.opencensus.io v0.22.3 bbde240ce0 bump cloud.google.com/go v-0.44.3 ef553e14a4 Fix gcplogs memory/connection leak c9bbf37f85 vendor: sirupsen/logrus v1.7.0 2036b277a5 Add TARGETARCH var to frozen images stage c9c7756301 oci: add tests for loading seccomp profiles 56e7bc4b78 seccomp: remove dependency on oci package dedf8528a5 Allow download-frozen-images to work without `go` b8aec34680 seccomp: add test for loading old JSON format 5f5285a6e2 Sterner warnings for unathenticated tcp 7afef854ed api: clarify "v" option behavior in the container remove endpoint 7335167340 Remove redundant "os.IsNotExist" checks on os.RemoveAll() 5a7b75f889 daemon/graphdriver/copy: use IoctlFileClone from golang.org/x/sys/unix 6267800783 vendor: golang.org/x/sys aee5d888a86055dc6ab0342f9cdc7b53aaeaec62 2502db66d0 pkg/system: make EnsureRemoveAll unix-specific 88126e84a5 Force Download-File function to use TLS 1.2 66a37b460c Windows: Enable more integration tests 35c531db1a Revendor Microsoft/go-winio for 8gB file fix 2dd9faaa16 Enable TestBuildWithHugeFile on Windows 0d75b63987 seccomp: replace types with runtime-spec types 0efee50b95 seccomp: move seccomp types from api into seccomp profile 968133c86c vendor: opencontainers/go-digest v1.0.0 7cdced6f4b vendor.conf: fix tar-split version comment 9fb324f00b vendor: docker/libnetwork d0951081b35fa4216fc4f0064bf065beeb55a74b 89bec2e267 Fix collecting the daemon under test logs 82b5ff8026 Windows CI: Make sure that CI fails on any error 1ed6589e39 vendor: github.com/syndtr/gocapability 42c35b4376354fd554efc7ad35e0b7f94e3a0ffb af3220884e vendor: github.com/containerd/containerd v1.4.1 1371a629d5 update containerd binary to v1.4.1 4ab96db4ab vendor: github.com/moby/term 7f0af18e79f2784809e9cef63d0df5aa2c79d76e 2344b3a9e1 fix integration test case TestExternalGraphDriver failed in mips arch 3d9120f744 Unify same fromStatT() implementation for FreeBSD and NetBSD 41be7293f5 daemon/listeners: use pkg/errors 6efa9e0575 Add support for NetBSD df7031b669 Memoize seccomp value for SysInfo b83dc8e5a2 Remove libseccomp-golang from vendor ccbb00c815 Remove dependency in dockerd on libseccomp dc72890470 Remove "mkimage.sh" and associated scripts 5ca758199d replace pkg/locker with github.com/moby/locker 13e0ba700a swagger: fix MemTotal units in SystemInfo endpoint 16eb522928 vendor: containerd v1.4.0 a8e7115fca Simplify seccomp logic 65a33d02f6 Simplify getUser() to use libcontainer built-in functionality 322c9e6866 add partial metadata to journald logs 245f2d922a vendor: github.com/opencontainers/selinux v1.6.0 fdd22e5628 vendor: github.com/gorilla/mux v1.8.0 d1c2f953c5 Test: Add buffer to two channels to avoid blocking goroutine ea9886cec4 pkg/idtools: refactor to avoid string-splitting 15292d7abf update containerd binary to v1.4.0 a18139111d Add faccessat2 to default seccomp profile. 010adeec55 Builder: print relative path if COPY/ADD source path was not found b8988c8475 Add openat2 to default seccomp profile. c255404a25 opts: simplify ValidateEnv to use os.LookupEnv c353c7cc71 vendor runc library to v1.0.0-rc92 7ab5b00a9c vendor golang.org/x/sys v0.0.0-20200622214017-ed371f2e16b4 2ee753a28f vendor golang.org/x/net v0.0.0-20200707034311-ab3426394381 5eccaaceb5 vendor golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9 15d38650ee vendor containerd library to v1.4.0-rc.1 cf169b45bb daemon.setupPathsAndSandboxOptions() skip resolving symlinks 3ee1ab87b7 Update docker-py to 4.3.0 906007f6c1 libcontainerd: use cancellable context for events 60d7265803 Use IsServing to determine if c8d client is ready e3ab236309 Add solaris support to lstat 7fd23345c9 Wait for container exit before forcing handler 31d83961e9 Update tini v0.19.0 afd9a6c2b2 builder/remotecontext: use lowercase for error 725eced4e0 apparmor: permit signals from unconfined programs a7c279f203 Add more error message for ops when container limit use an device which not exist 2a6325e310 Bump Golang 1.13.15 2c7b48decd Update runc binary to v1.0.0-rc92 a6b00ed9b9 Update authors and mailmap 0f0c1c04c8 fix TestDaemonNoSpaceLeftOnDeviceError for mips64le 43d13054c5 update containerd to v1.3.7 8ccb46a521 Check for context error that is wrapped in url.Error ad30ef9113 Supplement the omission of pr#41145 6302dbbf46 Disable manifest v2 schema 1 push 9f28837c1d vendor protobuf v1.3.5 c00d4907da vendor prometheus dependency. e58a00211d vendor bbolt v1.3.5 9ad35b7e69 vendor runc 67169a9d43456ff0d5ae12b967acb8e366e2f181 9424eccfcd vendor containerd 779ef60231a555f7eb9ba82b052d59b69ca2ef10 51e3cd4761 statsV2: implement Failcnt 0592aac95c vendor: update containerd/cgroups 0ca7456e52 Add multi-user.target to After= bd0c2b3581 oci/deviceCgroup(): remove redundant variable 3108ae6226 oci: correctly use user.GetExecUser interface c76f380bea Add ulimits support to services 2b22a2e792 fix buildkit pull nil panic 1fdb1033c4 Bump swarmkit to d6592ddefd8a5319aadff74c558b816b1a0b2590 818bad6ef2 vendor: vishvananda/netns db3c7e526aae966c4ccfa6c8189b693d6ac5d202 36b1920e56 vendor: docker/swarmkit 293aa2e66279a930999044cbf6d0e590baac16ff c458bca6dc Handle missing c8d task on stop afdf5483c9 vendor: update containerd/continuity efbc4488d8fe1bdc16bde3b2d2990d9b3a899165 51c7992928 API: add "prune" events 5bc41368d9 bump up rootlesskit to v0.10.0 aa225972df Remove apt.dockerproject.org from test f2cc755f66 docs: API v1.39: move system version response to definitions e221931ccd docs: API v1.40: move system version response to definitions d4c4323e54 swagger: move system version response to definitions 24f173a003 Replace service "Capabilities" w/ add/drop API 9a6402d761 docs: API v1.39: fix type for BuildCache CreatedAt and LastUsedAt a305abb1d1 docs: API v1.40: fix type for BuildCache CreatedAt and LastUsedAt 61b770a63d swagger: fix type for BuildCache CreatedAt and LastUsedAt b8ca7de823 Deprecate KernelMemory a8b2272ab3 swagger: sync updates to v1.39 1e89ca40ba swagger: sync updates to v1.40 baa321293f Revendor swarmkit 441211986c docs: add example calculations to container stats API c8008bfbe9 fix address pool flags merge #40388 8774804ca7 vendor: update buildkit to 4d1f260e8 c161d6564d api/types: omit empty DefaultAddressPools d4b3e786ed docs: add mention of DefaultAddressPools to API history 9c66a2f4e1 Bump Golang 1.13.14 bf4a5982f0 testing: bump docker-py 4.2.2 c6d860ace6 Fix log file rotation test. bf7fd015f7 Remove unused useShimV2() bc4f242e79 Bump Go 1.13.13 0b14c2b67a cgroup v1: change the default runtime to io.containerd.runc.v2 c9c9e0ab90 pkg/parsers: remove uses of mattn/go-shellwords 818e0b2fcf pkg/parsers: add unit test for Darwin c88a830507 distribution/xfer: use "main" instead of "master" for progress channel 3895dd585f Replace uses of blacklist/whitelist f63f73a4a8 Configure shims from runtime config 6fd94aa933 Fix lint error on sprintf call for runtime string 219e7e7ddc vendor: libnetwork 9e99af28df21367340c95a3863e31808d689c92a b42ac8d370 daemon/stats: use const for clockTicksPerSecond 840a12ac90 Add DefaultAddressPools to docker info #40388 2865478487 Revendor hcsshim to fix image import bug 63382e5f3b docs: sync API v1.39 swagger formatting with current version 01244e85e7 docs: sync API v1.40 swagger formatting with current version d4d62b658d swagger: add DeviceRequests to container create, inspect example 89876e8165 swagger: move NetworkingConfig to definitions 91ca3e7a8d update runc binary to v1.0.0-rc91 85e3dddccd update containerd to v1.3.6 d2e23405be Set minimum memory limit to 6M, to account for higher startup memory use 228d74842f Upgrading the versions of images in Dockerfile. 97708281eb info: improve "WARNING: Running in rootless-mode without cgroup" 3258d565cf Fix status code for missing --volumes-from container 0e915e5413 update containerd to v1.3.5 3b80af727a fix typos and grammar in docs e3cff19dd1 Untangle CPU RT controller init afbeaf6f29 pkg/sysinfo: rm duplicates a9d22cad93 hack/install: build gotestsum without -buildmode=pie 20570d91c8 Dockerfile.windows: fix gotestsum.installer installing wrong version 441aff3a17 fix gotestsum.installer installing wrong version d0d99b04cf seccomp: allow 'rseq' syscall in default seccomp profile 794aa20983 dockerd-rootless.sh: support containerd v1.4 shim socket path convention ab6b92b6b2 chrootarchive: fix "conversion from int to string yields a string of one rune" 671459a989 Switch all Dockerfiles to use "buster" variant a8ae48d94f project: remove obviously outdated docs c66c5f4904 contrib: remove docker-machine-install-bundle.sh 32b4590b23 contrib: remove REVIEWERS files 45eb4e0d80 contrib: remove outdated vagrant docs 6b6af2abd9 contrib: remove outdated "desktop-integration" examples 6743320a12 dockerd-rootless.sh: allow specifying DOCKERD_ROOTLESS_ROOTLESSKIT_PORT_DRIVER c3acd082c7 TestUserNoEffectiveCapabilitiesNetBindService: conditionally set net.ipv4.ip_unprivileged_port_start ed89041433 test-integration: support cgroup2 87a7fc1ced Enable client on netbsd and dragonfly 87b8947580 TestDaemonDNSFallback: increase timeout to reduce flakiness 3e2965831f vendor: golang.org/x/text v0.3.3 5d97de47ec dockerd-rootless-setuptool.sh: use safer XRD on non-systemd hosts e07a88c95f fix code note when push all tags 9b28939345 vendor: update buildkit to df35e9818 66bb1c4644 pkg/sysinfo: use containerd/sys to detect UserNamespaces 9ff990a2b9 pkg/chrootarchive: use containerd/sys to detect UserNamespaces f7d5d70e44 pkg/archive: use containerd/sys to detect UserNamespaces 4534a7afc3 daemon: use containerd/sys to detect UserNamespaces 79cfcba76c cgroup2: unshare cgroupns by default regardless to API version 6fabb93f73 Make script pass shellcheck 56de0489fc int-cli/TestRunInvalidCPUShares: fix for newer runc d378625554 info: add warnings about missing blkio cgroup support 004fd7be92 Bump Golang 1.13.12 96556854a7 Fixes #41010 skip empty lines 687bdc7c71 API: swarm: move PidsLimit to TaskTemplate.Resources 2befe194af hack: remove useless constants 9b77370213 int/build/TestBuildWithEmptyLayers: prevent panic dae652e2e5 Add default sysctls to allow ping sockets and privileged ports with no capabilities a1afad3aab api/types: remove errdefs dependency f758d598c5 make install: install containerd-shim-runc-v2 7ad0da7051 remove group name from identity mapping 8cc8e26835 testing: bump docker-py 4.2.1 9a78e916ad integration: Add TestDaemonDNSFallback 83199187ef vendor libnetwork to 2e24aed516bd5c836e11378bb457dd612aa868ed b280ea114f hack: add more debugging to understand exit codepath a9569f5243 vendor: opencontainers/selinux v1.5.2 a366fe41cb fix "stat.Rdev" invalid operation mismatched types on mips64el compile error the "stat.Rdev" variable and "s.Rdev" mismatched types on mips64el convert "stat.Rdev" type to uint64 explicitly a5324d6950 Better selection of DNS server 288ed93dc5 daemon.allocateNetwork: include original error in logs 84ef60cba2 allocateNetwork: don't assign unneeded variables b98b8df886 allocateNetwork: fix network sandbox not cleaned up on failure d5da7e5330 pkg/sysinfo/sysinfo_linux.go: fix some comments f02a53d6b9 pkg/sysinfo.applyPIDSCgroupInfo: optimize 0c350e87a0 ldmode=pie is not supported for the mips arch reference: https://github.com/docker/cli/pull/2507 |
||
![]() |
0441042812 |
docker-ce: update to v19.03.15-ce
The following docker-ce commits are in this bump: 8ba93ae231 centos-8: work around CentOS repo bug preventing to enable PowerTools b61c54e644 CentOS 8: manually import GPG key 7c5dfa21ab Bump VERSION to 19.03.15 c48e2f23e4 context: Add tarball e2e tests 51b4c45634 context: Ensure context name is valid on import 6a4daa87e5 context: Ensure import paths are valid 736dcbb76c pull: Validate layer digest format e0b182f9fd buildkit: Apply apparmor profile e2fc17e3cd vendor buildkit 396bfe20b590914cd77945ef0d70d976a0ed093c 77ef9e3963 Use real root with 0701 perms bb9d1ea5f7 Do not set DOCKER_TMP to be owned by remapped root 65f17f139b Ensure MkdirAllAndChown also sets perms bc73c89f8b docs: un-wrap line to prevent YAML docs from using "compact" formatting 6cfdb61f0a Bump VERSION to 19.03.14 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
cf5a9a95cc |
moby: update to v19.03.14
Incorporating the following moby commits: d3c5506330 update containerd binary to v1.3.9 (address CVE-2020-15257) 1babdf81e7 update containerd binary to v1.3.8 f80f6304e2 Bump libnetwork 4b181db52b bump up rootlesskit to v0.11.0 7487dca8a5 docs: fix builder-version swagger c7253a0e1a dockerd-rootless.sh: support containerd v1.4 shim socket path convention 88eec2e811 Also trim "~..." from AppArmor versions ecd3baca25 pkg/aaparser: support parsing version like "3.0.0-beta1" 74c0c5b7f1 Fix gcplogs memory/connection leak 5f32bd9ced awslogs: Update aws-sdk-go to support IMDSv2 8cf9d50fc0 [19.03] vendor: buildkit v0.6.4-32-gdf89d4dc a4e96a486f swagger: fix MemTotal units in SystemInfo endpoint 9fe291827a Bump Golang 1.13.15 a15a770e1b update containerd to v1.3.7 9380ec7397 update containerd to v1.3.6 80cef48453 update containerd to v1.3.5 fc8f88dc14 update containerd to v1.3.4 89a4208757 update containerd binary to v1.3.3 490c45b756 Update containerd to v1.3.2 56d897347d Update containerd to v1.3.1 d4c63720e9 update containerd binary v1.3.0 ec14dc44d1 Fix log file rotation test. a958fc3e65 Fix flakey test for log file rotate. 89da709cb7 Check for context error that is wrapped in url.Error 83baeafc3c oci: correctly use user.GetExecUser interface dae08c333e vendor: vishvananda/netns db3c7e526aae966c4ccfa6c8189b693d6ac5d202 93cb737687 [19.03] vendor: vishvananda/netns 0a2b9b5464df8343199164a0321edf3313202f7e and the following libnetwork commits: 90990763 service_linux: Fix null dereference in findLBEndpointSandbox 8565f0b1 log error instead if disabling IPv6 router advertisement failed and finally, the following cli commits: 01fc5a1ec3 Replace deprecated instruction 3b3e295c4b docs: update 20.03 -> 20.10 in deprecated.md d1b44aa298 docs: fix broken links in build reference 20bc15f618 docs/deprecated: remove minor versions 3172219932 docs: deprecate CLI options for experimental CLI features f132c8ad4a docs: add /go/experimental/ vanity URL df5ca0c950 docs: fix generated YAML due to trailing whitespace 5057d34272 docs: update URL for security landing page 278f30b82b Add test-case for env with, and without = f526bcdb53 builder: add note about alternative syntax 10973d6ddf builder: rephrase ENV section, remove examples for ENV key value without '=' 8c8fb03f15 docs: fix "docker logs" example missing container name c9a03ab5f4 Bash-completion: add CAP_AUDIT_READ ffa0e1d36e docs: document CAP_AUDIT_READ 3d74f7ab48 docs: document optional "CAP_" prefix for capabilities 0a207d5095 docs: sort list of capabilities alphabetically 75411a2233 Complete capabilites with and without "CAP_" prefix. 896eb7123a [19.03] vendor: stop using docker/engine fork for vendoring aebe8b0660 [19.03] vendor: buildkit v0.6.4-32-gdf89d4dc d6b05747dd [19.03] vendor: tonistiigi/fsutil v0.0.0-20191018213012-0f039a052ca1 9a65c1c861 docs/build: add note about git subdirectories with BuildKit a6c15a5e60 Replace vbom.ml/util with fvbommel/sortorder 36cdb166dc Bump Golang 1.13.15 5c5486d910 Replaces ADD with COPY in the COPY section 9152bf265e docs: remove docs for —-from=index e5e227672b Bump Golang 1.13.14 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
35b9016006 |
docker-ce: update to v19.03.14
Incorporating the following docker-ce commits: 6cfdb61f0a Bump VERSION to 19.03.14 d62f3a4335 update containerd binary to v1.3.9 (address CVE-2020-15257) 223df488a1 update containerd binary to v1.3.8 f1d658df7c Bump libnetwork b42dd308b7 bump up rootlesskit to v0.11.0 ddd056dcd3 docs: fix builder-version swagger 406cc5ef47 Replace deprecated instruction a48b2a414f dockerd-rootless.sh: support containerd v1.4 shim socket path convention de76075442 docs: update 20.03 -> 20.10 in deprecated.md d8fa7ac2c1 Also trim "~..." from AppArmor versions 0a1553c648 pkg/aaparser: support parsing version like "3.0.0-beta1" caae6f925a static: add containerd-shim-runc-v2 94ab0479b0 To allow build for selective distros from top directory. e.g.- for rpm- RHEL_RELEASES= CENTOS_RELEASES= FEDORA_RELEASES=centos-8 make rpm for deb- RASPBIAN_VERSIONS= UBUNTU_VERSIONS= DEBIAN_VERSIONS=ubuntu-xenial make deb 5b7be532be docs: fix broken links in build reference 4afdfee131 Fix gcplogs memory/connection leak f9159f95b9 docs/deprecated: remove minor versions a7d8e5b15e docs: deprecate CLI options for experimental CLI features 265d2d874b docs: add /go/experimental/ vanity URL 45fe9c589c docs: fix generated YAML due to trailing whitespace d54dee5350 docs: update URL for security landing page 8b51565ec3 Add test-case for env with, and without = 4e0e5427b2 builder: add note about alternative syntax fb91a7f7e0 builder: rephrase ENV section, remove examples for ENV key value without '=' 4c5ada19a3 docs: fix "docker logs" example missing container name 5fd841f066 awslogs: Update aws-sdk-go to support IMDSv2 8ff047ef9d Bash-completion: add CAP_AUDIT_READ 12b5d3b4cb docs: document CAP_AUDIT_READ 532ea20102 docs: document optional "CAP_" prefix for capabilities a240747846 docs: sort list of capabilities alphabetically 19498650c3 Bump VERSION to 19.03.13 da428b1aec Complete capabilites with and without "CAP_" prefix. 4056693640 [19.03] vendor: stop using docker/engine fork for vendoring f6cc6fa133 [19.03] vendor: buildkit v0.6.4-32-gdf89d4dc d61bf277b8 [19.03] vendor: tonistiigi/fsutil v0.0.0-20191018213012-0f039a052ca1 4024535260 [19.03] vendor: buildkit v0.6.4-32-gdf89d4dc 9a44f43fb9 swagger: fix MemTotal units in SystemInfo endpoint a75083ebf0 docs/build: add note about git subdirectories with BuildKit 112d03e8ea plugins: update buildx to v0.4.2 ef44b94189 buildx: use v0.4.1 8a18415110 Bump buildx to master to check if it builds on the CI 0100e1c0be Replace vbom.ml/util with fvbommel/sortorder 53c69c574e Bump Golang 1.13.15 87867aff90 Bump Golang 1.13.15 76060cc4a0 Bump Golang 1.13.15 8a905386a1 update containerd to v1.3.7 0ffc8f1e55 update containerd to v1.3.6 aff3f55db8 update containerd to v1.3.5 61f6fac7a1 update containerd to v1.3.4 c938231789 update containerd binary to v1.3.3 ba94dd5a0d Update containerd to v1.3.2 13106ca34e Update containerd to v1.3.1 c5ad02b467 update containerd binary v1.3.0 a0edb6a8cb Fix log file rotation test. b17b2f05b6 Fix flakey test for log file rotate. efe3cf2163 Replaces ADD with COPY in the COPY section 5a861b676c Check for context error that is wrapped in url.Error a438db9875 docs: remove docs for —-from=index 475484e351 Bump VERSION to 19.03.13-beta2 3f7bf34392 oci: correctly use user.GetExecUser interface And the following libnetwork commits: 90990763 service_linux: Fix null dereference in findLBEndpointSandbox 8565f0b1 log error instead if disabling IPv6 router advertisement failed Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
43a5cc7f03 |
docker: add more kernel-module RRECOMMENDS
The kernel RRECOMMENDS, wasn't complete and in some minimal systems we are missing modules to start dockerd. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
68e4f545a6 |
docker-moby: update to 19.03 latest
Updating to the latest 19.03 commits: 88820a4793 Merge pull request #41287 from thaJeztah/19.03_backport_bump_netns dae08c333e vendor: vishvananda/netns db3c7e526aae966c4ccfa6c8189b693d6ac5d202 93cb737687 [19.03] vendor: vishvananda/netns 0a2b9b5464df8343199164a0321edf3313202f7e 7d597ee2c9 Merge pull request #41273 from thaJeztah/19.03_backport_swagger_fixes 22c458b67c Merge pull request #41274 from thaJeztah/19.03_backport_Double_RLock 8b97280f11 Merge pull request #41279 from thaJeztah/19.03_bump_buildkit eda52d433e [19.03] vendor: moby/buildkit v0.6.4-28-gda1f4bf1 168254fcfa Merge pull request #41277 from AkihiroSuda/rootlesskit-0.10.0-1903 9dc455dffb bump up rootlesskit to v0.10.0 c200868fa2 Merge pull request #41271 from thaJeztah/19.03_backport_remove_dockerproject_from_tests 9eade7d03c docs: API v1.39: move system version response to definitions 4685e9ef72 docs: API v1.40: move system version response to definitions d8f22d0307 swagger: move system version response to definitions 32366de5f9 plugin: fix a double RLock bug ad0278f002 docs: API v1.39: fix type for BuildCache CreatedAt and LastUsedAt cb8b7a282d docs: API v1.40: fix type for BuildCache CreatedAt and LastUsedAt e1ae07b7a0 swagger: fix type for BuildCache CreatedAt and LastUsedAt d49278cc17 Merge pull request #41269 from thaJeztah/19.03_update_buildkit 892c228219 Remove apt.dockerproject.org from test a7e309944b Merge pull request #41248 from thaJeztah/19.03_backport_swagger_updates 765245d54b [19.03] vendor: moby/buildkit v0.6.4-26-ga1e4f48e 2d4bfdc789 Merge pull request #41081 from thaJeztah/19.03_backport_fix_sandbox_cleanup b990b6c2b0 Merge pull request #41235 from thaJeztah/19.03_backport_bump_golang_1.13.14 4d9397c268 swagger: sync updates to v1.39 51bd95dc95 swagger: sync updates to v1.40 d5ba93575c docs: sync API v1.40 swagger formatting with current version 12b7746a84 docs: sync API v1.39 swagger formatting with current version 0c6bdf5974 docs: add example calculations to container stats API 630185b4ae swagger: add DeviceRequests to container create, inspect example d7423180e7 swagger: move NetworkingConfig to definitions c30ff6885e swagger: reformat, and wrap to ~80-chars 7005841048 swagger: clarify the meaning of Image field in ContainerInspect endpoint 1608292c09 Bump Golang 1.13.14 1763b4e88b Bump Go 1.13.13 5e8ab898c7 Merge pull request #41222 from thaJeztah/19.03_bump_buildkit 23d47bd12e [19.03] vendor: moby/buildkit v0.6.4-20-g4cb720ef 789bd1c67b Merge pull request #41192 from ameyag/19.03-hcsshim-vndr 0eaa22b95d Merge pull request #41185 from thaJeztah/19.03_bump_buildkit 9d6053eda2 Revendor hcsshim to fix image import bug 589b07262c vendor: Microsoft/hcsshim v0.8.9 e7c2b106ec [19.03] vendor: buildkit dc6afa0f755f6cbb7e85f0df4ff4b87ec280cb32 (v0.6.4-15-gdc6afa0f) a40b877fbb Merge pull request #41133 from roidelapluie/bsd2 7dd9fdcfbe Enable client on netbsd and dragonfly 9dc6525e61 Merge pull request #41124 from thaJeztah/19.03_bump_libnetwork b4ca19a992 vendor: docker/libnetwork 026aabaa659832804b01754aaadd2c0f420c68b6 (bump_19.03 branch) ae158b371c allocateNetwork: fix network sandbox not cleaned up on failure And the following cli changes: 80fd48bcb Merge pull request #2635 from thaJeztah/19.03_backport_bump_golang_1.13.14 e5e227672 Bump Golang 1.13.14 79a6c494e Merge pull request #2633 from thaJeztah/19.03_backport_bump_golang_1.13.13 5e05ef345 Merge pull request #2631 from cpuguy83/19.03_handle_close_error_on_save 64d25cc6e Bump Golang 1.13.13 1b96aa29c Merge pull request #2629 from thaJeztah/19.03_backport_circleci_updates aaf117052 Handle errors on close in config file write. 14010c88b config: preserve ownership and permissions on configfile 3d64a5d4b Move circle.yml to .circleci/config.yml d0b656088 CircleCI: update docker versions used in CI b0a78cc1a Merge pull request #2623 from s0j/s0j_19.03_bump-crypto-readconsole ab8bd02fc vendor: golang.org/x/crypto 2aa609cf4a9d7d1126360de73b55b6002f9e052a 18d6f8f6b Merge pull request #2620 from thaJeztah/19.03_backport_builder_comment_info 7498d9cc4 docs/builder: add note about handling of leading whitespace cb59cafc3 Merge pull request #2609 from thaJeztah/19.03_backport_docs_fixes 541f050e1 Merge pull request #2608 from thaJeztah/19.03_backport_vendor_bumps ac7723056 docs: fix example output for docker plugin ls 9c9ff4369 list state `ready` for filtering in stack_ps.md e3b981c18 vendor konsorten/go-windows-terminal-sequences v1.0.3 ec276f3a6 vendor: mitchellh/mapstructure v1.0.0 c9125cc39 vendor: beorn7/perks v1.0.1 0ed913b88 Merge pull request #2592 from thaJeztah/19.03_backport_logout_config_out_of_sync2 5a12f90b4 Don't filter out registries to logout from with config file contents Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
85b92e0b48 |
docker-ce: update to tip of 19.03
This update comprises the following commits: ff3fbc9d55 Merge pull request #655 from tiborvass/bump_19.03.13-beta2 475484e351 Bump VERSION to 19.03.13-beta2 321dc6b4bd Merge component 'engine' from git@github.com:moby/moby 19.03 9b85caeb7c Merge pull request #41287 from thaJeztah/19.03_backport_bump_netns b82e19207e vendor: vishvananda/netns db3c7e526aae966c4ccfa6c8189b693d6ac5d202 69223588df [19.03] vendor: vishvananda/netns 0a2b9b5464df8343199164a0321edf3313202f7e 32c58830e3 Merge pull request #654 from tiborvass/bump_19.03.13-beta1 f2cad45d0a Merge branch '19.03' of github.com:docker/docker-ce into 19.03 a2fa6c7fb3 Merge component 'engine' from git@github.com:moby/moby 19.03 1015e8af79 Merge component 'engine' from git@github.com:moby/moby 19.03 1d7d9d001f Merge pull request #41273 from thaJeztah/19.03_backport_swagger_fixes 3087b3114f Merge pull request #41274 from thaJeztah/19.03_backport_Double_RLock 520fc10363 Merge pull request #41279 from thaJeztah/19.03_bump_buildkit 120511a214 Merge pull request #642 from tiborvass/19.03-switch-to-moby a4f55cdbab [19.03] vendor: moby/buildkit v0.6.4-28-gda1f4bf1 bee145aad2 Merge component 'engine' from git@github.com:docker/engine 19.03 b768eabf04 Merge component 'engine' from git@github.com:docker/engine 19.03 4e9725b988 Merge pull request #41277 from AkihiroSuda/rootlesskit-0.10.0-1903 c13dfa3f39 bump up rootlesskit to v0.10.0 b714998077 Merge pull request #41271 from thaJeztah/19.03_backport_remove_dockerproject_from_tests 009eca42ef docs: API v1.39: move system version response to definitions 4f25b9eed4 docs: API v1.40: move system version response to definitions 0ea6312f6d swagger: move system version response to definitions 9f4029e6dc plugin: fix a double RLock bug dff89f8092 docs: API v1.39: fix type for BuildCache CreatedAt and LastUsedAt 95599eb2e6 docs: API v1.40: fix type for BuildCache CreatedAt and LastUsedAt 81bd78b07a swagger: fix type for BuildCache CreatedAt and LastUsedAt d9cb8734cf Merge component 'engine' from git@github.com:docker/engine 19.03 820098ff18 Merge pull request #41269 from thaJeztah/19.03_update_buildkit 0994e492c5 Remove apt.dockerproject.org from test a49a4f288a Bump VERSION to 19.03.13-beta1 a89cfd520d Merge component 'engine' from git@github.com:docker/engine 19.03 dcaed39807 Upstream-commit: a7e309944b3bdefbca4186ce41a8374784133be2 Component: engine 422fa1b13e [19.03] vendor: moby/buildkit v0.6.4-26-ga1e4f48e 81dab2018b Merge component 'engine' from git@github.com:docker/engine 19.03 1490b1df51 Merge pull request #41081 from thaJeztah/19.03_backport_fix_sandbox_cleanup c6c4809630 Merge component 'engine' from git@github.com:docker/engine 19.03 9eea25a62f Merge pull request #41235 from thaJeztah/19.03_backport_bump_golang_1.13.14 f224762af0 Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 19.03 0850d19f24 Merge pull request #485 from thaJeztah/19.03_backport_remove_eoan 5ba0889c4a swagger: sync updates to v1.39 7d189e5b0b swagger: sync updates to v1.40 047a3b6ca8 docs: sync API v1.40 swagger formatting with current version d5a51018d4 docs: sync API v1.39 swagger formatting with current version 69aae6c1db docs: add example calculations to container stats API bf77a77bab swagger: add DeviceRequests to container create, inspect example d43b66d55c swagger: move NetworkingConfig to definitions c210a26d28 swagger: reformat, and wrap to ~80-chars 0d1edc403c swagger: clarify the meaning of Image field in ContainerInspect endpoint f3b514426e Merge component 'cli' from git@github.com:docker/cli 19.03 07d59f4164 Merge pull request #2635 from thaJeztah/19.03_backport_bump_golang_1.13.14 289eec988f Remove Ubuntu 19.10 "Eoan" (EOL: 2020-07-17) eeec8d3ba5 Remove Ubuntu 19.04 "Disco Dingo" (EOL: 2020-01-23) 02ab061844 Remove Fedora 30 (EOL: 2020-05-26) 391d22f0e0 Bump Golang 1.13.14 a033b71571 Bump Go 1.13.13 03ae74b5b7 Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 19.03 20042180c1 Bump Golang 1.13.14 aaf10aa9c6 Merge pull request #482 from thaJeztah/19.03_backport_bump_golang_1.13.14 fc9fece6e1 Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 19.03 d552a52dbb Bump Golang 1.13.14 887f0eb7c6 Merge pull request #479 from thaJeztah/19.03_backport_bump_golang 8a9e1bdc07 Merge component 'engine' from git@github.com:docker/engine 19.03 ab25bbca2f Merge component 'cli' from git@github.com:docker/cli 19.03 f56046026b Merge pull request #2633 from thaJeztah/19.03_backport_bump_golang_1.13.13 bbdb18fa3a Merge pull request #41222 from thaJeztah/19.03_bump_buildkit a48c990d07 Merge component 'cli' from git@github.com:docker/cli 19.03 e1e647a270 [19.03] vendor: moby/buildkit v0.6.4-20-g4cb720ef 021a6048e6 Merge pull request #2631 from cpuguy83/19.03_handle_close_error_on_save a6c6dce3a6 Bump Golang 1.13.13 a252aaae7a Merge component 'cli' from git@github.com:docker/cli 19.03 f19d902423 Merge pull request #2629 from thaJeztah/19.03_backport_circleci_updates 4e3a5637b4 Handle errors on close in config file write. 19d2ee3b78 config: preserve ownership and permissions on configfile 08fd87da44 Move circle.yml to .circleci/config.yml 45b3865643 CircleCI: update docker versions used in CI c6012e45cc Update Golang 1.13.13 3a19c4a1df Merge component 'engine' from git@github.com:docker/engine 19.03 b636594b37 Merge pull request #41192 from ameyag/19.03-hcsshim-vndr 177165b75d Merge component 'engine' from git@github.com:docker/engine 19.03 d2e020dbd1 Merge component 'cli' from git@github.com:docker/cli 19.03 d0a4b67aee Merge pull request #41185 from thaJeztah/19.03_bump_buildkit d4e6d9b301 Merge pull request #2623 from s0j/s0j_19.03_bump-crypto-readconsole 06d576d294 Merge component 'cli' from git@github.com:docker/cli 19.03 80e9882cdf vendor: golang.org/x/crypto 2aa609cf4a9d7d1126360de73b55b6002f9e052a e0c24158ad Merge pull request #2620 from thaJeztah/19.03_backport_builder_comment_info d7e86d9c77 Revendor hcsshim to fix image import bug 14ab1c306d vendor: Microsoft/hcsshim v0.8.9 03a47bb4c5 [19.03] vendor: buildkit dc6afa0f755f6cbb7e85f0df4ff4b87ec280cb32 (v0.6.4-15-gdc6afa0f) fd33ebfc36 Merge component 'engine' from git@github.com:docker/engine 19.03 fb095d16b8 Merge pull request #41133 from roidelapluie/bsd2 d0a8d03b7b docs/builder: add note about handling of leading whitespace b56ef36968 Merge component 'cli' from git@github.com:docker/cli 19.03 d2a8fe0e12 Merge pull request #2609 from thaJeztah/19.03_backport_docs_fixes e453c06e79 Merge pull request #2608 from thaJeztah/19.03_backport_vendor_bumps dac7a0fe9a docs: fix example output for docker plugin ls 8c8b82eeb3 list state `ready` for filtering in stack_ps.md 055ee582e3 vendor konsorten/go-windows-terminal-sequences v1.0.3 037e7383ec vendor: mitchellh/mapstructure v1.0.0 2f446000e0 vendor: beorn7/perks v1.0.1 8f8179e576 Enable client on netbsd and dragonfly 5b2eac44f7 allocateNetwork: fix network sandbox not cleaned up on failure f620b6de75 components: use moby/moby instead of docker/engine Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
87b9e054ff |
docker: move docker.init back to files directory to use it from docker-moby
* it was moved for some reason in: http://git.yoctoproject.org/cgit/cgit.cgi/meta-virtualization/commit/?id=929372946aeb85953d1ca6acc428d73fbac52a56 but docker-moby uses it as well and now started to fail with: ERROR: docker-moby-19.03.12+git9dc6525e6118a25fab2be322d1914740ea842495-r0 do_fetch: Fetcher failure: Unable to find file file://docker.init anywhere. .. Signed-off-by: Martin Jansa <martin.jansa@lge.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
70d832f37a |
docker-ce: remove unused docker-registry.service file
Signed-off-by: Martin Jansa <martin.jansa@lge.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
929372946a |
docker-ce/docker-moby: fixup GO compiler calls
With oe-core commit c23f9e80492e4b [tcmode-default: use go-binary-native by default], we must explictly call the proper cross go binary, versus just the go-native variant. These builds were working by luck, since the go compiler was capable of building the target binaries previously (in its build-from-source creation). We fixup the calls and we no longer see fpu build issues: fatal error: gnu/stubs-soft.h: No such file or directory 7 | # include <gnu/stubs-soft.h> | ^~~~~~~~~~~~~~~~~~ This commit also moves the docker-ce patches from "files" to a named directory to reduce confusion. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |
||
![]() |
9726c5d164 |
docker/moby: update to v19.03.12
Updating moby to the latest 19.03 release, which comprises the following commits: moby: b4ca19a992 vendor: docker/libnetwork 026aabaa659832804b01754aaadd2c0f420c68b6 (bump_19.03 branch) 5fce12cf25 int-cli/TestRunInvalidCPUShares: fix for newer runc 058ea43c5c Bump Golang 1.13.12 77e06fda0c vendor libnetwork to 153d0769a1181bf591a9637fd487a541ec7db1e6 c104a50de4 integration: Add TestDaemonDNSFallback 9482566a5c vendor libnetwork to 71d4d82a5ce50453b1121d95544f0a2ae95bef9b d4e12315cd hack: add more debugging to understand exit codepath 4c24512241 Dockerfile: bump CRIU 3.14 29796375c9 Bump Golang 1.13.11 8f1ab4e612 Fix bug in gotestsum installer causing dependencies to not be downloaded 0a3b2bda34 pkg/archive: escape ":" symbol in overlay lowerdir 9057ddf37c dockerd-rootless.sh: bump up slirp4netns requirement to v0.4.0 a76633684b vendor: update buildkit to a7d7b7f1 706008a1da bump up rootlesskit to v0.9.5 57f6c9a0ef SELinux: fix ENOTSUP errors not being detected when relabeling 7d4dd91a52 logfile: Check if log is closed on close error during rotate edf2c49410 vendor: pkg/errors v0.9.1 63841af153 [19.03] vendor: buildkit v0.6.4-5-g59e305aa 946d0ff67e bump up rootlesskit to v0.9.4 70e7d6fe4a Update CRIU to v3.13 "Silicon Willet" e4f239d68e [19.03] vendor: swarmkit 0b8364e7d08aa0e972241eb59ae981a67a587a0e e149ff62fe vendor: update go-events to fix alignment for 32bit systems a6beb24dc5 [19.03] update libnetwork b9bcf0c3fba9ef8897c9676c5b70ba0345b84b17 282567a58d Bump Golang 1.13.10 b66813eb45 api docs: fix broken link on GitHub 9d8eccec8e Fix TEST_FILTER to work for both "integration" and "integration-cli" 08a2fe0d56 [19.03] vendor buildkit b26cff2413cc6a466f8739262efa13bd126f8fc7 5ba2bf37a8 Bump Golang 1.13.9 f432a04243 Update Golang 1.13.8 81458b3144 Update Golang 1.13.7 (CVE-2020-0601, CVE-2020-7919) 6e1d159680 Update Golang 1.13.6 4241093b63 Update Golang 1.13.5 162fd8b856 Bump Golang 1.13.4 05a1ebd0fd Bump Golang 1.13.3 (CVE-2019-17596) f8d4276a89 bump golang 1.13.1 (CVE-2019-16276) 7df2d881f3 Bump Golang version 1.13.0 fed832e224 Update to using alpine 3.10 4581499848 Switch to s390x Ubuntu 18.04 f34a5b5af0 builder: fix concurrent map write 9f5a5da4cb docs: add API versions v1.30 - v1.37 284bbde996 seccomp: add 64-bit time_t syscalls 359edd8cbf [19.03] vendor: containerd 481103c8793316c118d9f795cde18060847c370e 021258661b Update libnetwork and DNS library 100d240d86 Move schema1 deprecation notice 57d5105759 bump windows-container-utility aa1ba87e99b68e0113bd27ec26c60b88f9d4ccd9 68db0c1739 Dockerfile: switch to iptables-legacy to match the host 4aaf3ead97 Dockerfile: switch golang image to "buster" variant, and update btrfs packages a070874828 hack/make: ignore failure to stop apparmor 237843a059 Dockerfile: align consecutive COPY lines 400b2850ff Dockerfile: order COPY lines by change frequency ddfeaf32ff Dockerfile: sort packages alphabetically cb813faebf Dockerfile: use build-arg for vpnkit 0499db23d1 Dockerfile: use spaces for indentation c77e7cb3d0 [19.03] Dockerfile: move CRIU_VERSION lower c6511ee4db bump vndr v0.1.1 0fa8a0c575 bump vndr v0.1.0 to support versioned import paths f3009e2f51 Use build args to override binary commits in dockerfile 92ca652fc9 Revert "dockerfile: update vndr to 85886e1a" fdad16840c go-swagger: fix panic 075e057de5 Dockerfile: set GO111MODULE=off fe2a25a785 fix backingFs assignment e6c9e2736f Fix rate limiting for logger, increase refill rate 911ecc3376 Set the bip network value as the subnet 08420b1c95 AppArmor: add missing rules for running in userns fbb08f525f AppArmor: remove rules for linkgraph.db SQLite database 1a830501b7 Use FILE_SHARE_DELETE for log files on Windows. dcae74c44a Fix docker crash when creating namespaces with UID in /etc/subuid and /etc/subgid 4076c57b50 Fix more signal handling issues in tests. 68e1150357 DaemonCli: Move check into startMetricsServer b813c398bb Add `FromClient` to test env execution libnetwork 8565f0b1 log error instead if disabling IPv6 router advertisement failed 153d0769 bridge: disable IPv6 router advertisements fdaaa027 Resolver: fix error handling if we didn't receive a response b09f24d1 Fix NPE due to null value returned by ep.Iface() 8068671f Fixes a panic in the DNS resolver 536ae722 Dockerfile: update to Go 1.13.8 dcd95280 Fix gofmt in preparation of Go 1.13 update f0b038ea regenerate protobufs with debian buster 34c8de58 Dockerfile: switch to debian "buster" 96600117 Dockerfile: update to Golang 1.12.17 libcli 5a12f90b4 Don't filter out registries to logout from with config file contents 6cb678f16 vendor: golang.org/x/text v0.3.3 4515c5187 vendor: golang.org/x/text v0.3.2 cfa1fd9ac Don't loose additional metadata fields 31d338dd3 Bump Golang 1.13.12 936d328da Use consistent name for errors 2ee798198 ssh: avoid setting flags through hostname e90b6bcb6 Fix bug with panic when DOCKER_CLI_EXPERIMENTAL environment variable is incorrect 97afb7295 docs/extend: fix broken link and some markdown touch-ups c280cdfd6 docs: fix broken link in dockerd.md 0f59532a1 Run e2e tests with different engine version on Jenkins Rewrite Jenkinsfile to new declarative syntax without parallel as the e2e framework is not tailored for than (container name clash, port clash,...) 95df3499b Add a new Makefile variable to override DockerInDocker engine version we use to run e2e tests 2d1476c6f Partially revert cf663b526a34f3e7911e6e60138138c2023aa844 as it breaks the version negotiation with an older docker engine. 936e9717e Bump Golang 1.13.11 489c7e9cd docs: more Markdown touch-ups 9a57ea886 Update some uses of errors.Cause() to errors.Is() 345b0e79e vendor: pkg/errors v0.9.1 62a9babca vendor: k8s.io/klog v1.0.0-2-g4ad0115 dbc73eafc docs: fix, and touch-up "docker context" docs e06fc01c1 Update dead link and add missing info on COPY 8434242c7 config: don't call homedir on init() 65c37227a docs: update usage output for dockerd (19.03) 55a5ab0f0 docs: fix order of flags in usage, and fix missing quote c150ba2b8 builder: fix broken link 81909d70f docs: fix links, and minor markdown touch-ups cf663b526 cli: perform feature detection lazily c44c18e08 docker build: check experimental --platform on pre-run 25f04876d app-214 Load Client info in getter function 4ad65fc35 fix panic on single-character volumes 83d4cb900 vendor: bump gopkg.in/yaml.v2 v2.2.8 0cfe29431 service update: fix service create example 2dc593f67 Add container_iface_prefix option to documentation 4fe6b837b bump gotest.tools v3.0.1 for compatibility with Go 1.14 a8454a4d9 update vndr v0.1.1 950dcedd9 bump vndr v0.1.0 to support versioned import paths 0d26cbf5b yamldocs: add description to base command d4e4fa3b4 experimental/vlan-networks: markdown touch-ups de12dbfb1 docs/reference: explain "colon" 7ae77e51f docs/extend: reformat notes 733ae82da docs/builder: touch up markdown, and some minor rephrasing 9a1ba7d39 docs/reference/run.md: touch-up markdown 6ba9a3e4c reference docs: reformat notes 96eb0888f reference docs: fix broken links and markdown touch-ups 2676c603f Adding missing title in builder.md 365bae4f8 Add clarification when using USER UID:GI c38b26007 improve "network prune" output to mention custom networks only fd9eedce3 Add "host-gateway" to tests for extra_hosts / --add-host 365118982 Skip IPAddr validation for "host-gateway" string a0f0ed1f5 vendor: update go-events to fix alignment for 32bit systems de6a5fa44 Bump Golang 1.13.10 19ccd4f5d CI: update notary test certificates f8fc68f17 Bump Golang 1.13.9 22cbf9161 Update deprecation policy to 1 stable release 288cdec29 Include deprecation policy on deprecated features page ffffc1ed4 remove unneeded comment from reference files 9fd323afd Fix whitespace that caused short-format in generated YAML c936ea969 Fix yamldocs generator to accomodate nested subcommands d484456c2 Fix naming of reference docs files 6a02465f4 docs: update code-hints for compatibility with "rouge" 6e07d210a Update Golang 1.13.8 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> |