summaryrefslogtreecommitdiffstats
path: root/recipes-containers/docker
Commit message (Collapse)AuthorAgeFilesLines
* docker-moby: update to v20.10.10master-nxtBruce Ashfield2021-11-151-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping moby to version v20.10.10-9-g7bd682c48c, which comprises the following commits: 7677aeafd7 TestBuildUserNamespaceValidateCapabilitiesAreV2: cleanup daemon storage 34eb6fbe60 testutil: daemon.Cleanup(): cleanup more directories c7edd308ad [20.10] Update Go to 1.16.10 6611c72b65 cmd/dockerd: create panic.log file without readonly flag 4b9a3dac46 Fix race in TestCreateServiceSecretFileMode, TestCreateServiceConfigFileMode acb4f263b3 Fix racey TestHealthKillContainer 59d2a2c397 dockerd-rootless.sh: Fix variable not double quotes cause unexpected behavior 2c6aa5aad9 Remove needless check 3285c27503 Fix log statement 'failed to exit' timeout accuracy a4bcd4c64f docker daemon container stop refactor bed624fdc9 docker kill: fix bug where failed kills didnt fallback to unix kill 80b7e8b5d7 buildkit: normalize build target and local platform c2b9a32875 vendor: Update go-winio to v0.4.20 c580a02873 [20.10] Update Go to 1.16.9 129a2000cf [20.10] update containerd binary to v1.4.11 6835d15f55 [20.10] update containerd binary to v1.4.10 5730c139f7 Bump swarmkit to get fix for rollback 59f10e3435 quota: adjust build-tags to allow build without CGO fa78afebcf Update Go to 1.16.8 567c01f6d1 seccomp: add support for "clone3" syscall in default policy 07728cd2bd update runc binary to v1.0.2 964768f200 cmd/dockerd: add the link of "the documentation" 80f1169eca chrootarchive: don't create parent dirs outside of chroot 93ac040bf0 Lock down docker root dir perms. b0c0b73798 bump up rootlesskit to v0.14.4 decb56ac89 Update Go to 1.16.7 Bumping docker-cli to version v20.10.10, which comprises the following commits: 9989fdbc4 Update most links in docs to use https by default 0e20c1fd2 Update Go to 1.16.9 1c0927a04 Dockerfile: update tonistiigi/xx to 1.0.0-rc.2, add XX_VERSION arg 82f9d5921 info: skip client-side warning about seccomp profile on API >= 1.42 adb01ca79 docs: some minor touch-ups in checkpoint reference 8260476a0 docs: remove trailing space to fix generated YAML format bce2e1f95 docs: create.md: typo fix 44064f51c Fix typo in documentation - build.md 292779add Add doc for BUILDKIT_PROGRESS env var f2e79b826 docs: use "console" code-hint for shell examples fa46b9236 docs: rewrite reference docs for --stop-signal and --stop-timeout 400f81089 experimental: fix broken link to "checkpoint and restore" page c72057c8d docs: move checkpoint/restore doc from experimental into reference 77db97d59 Use private network address for default-address-pools setting in daemon.json example cbf0d2b7b docs: fix some broken anchors d0014a86b docs: fix description of restart-delay to mention max (1 minute) 6c1c8b55a docs: fix search results by filterd is-official 44fdac11f Update Go to 1.16.8 061051c24 docs: add missing redirect, and remove /go/experimental redirect 2012fbf11 Update Go to 1.16.7 42d1c0275 registry: ensure default auth config has address Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* global: convert github SRC_URIs to use https protocolBruce Ashfield2021-11-022-6/+6
| | | | | | | | | | | github is removing git:// access, and fetches will start experiencing interruptions in service, and eventually will fail completely. bitbake will also begin to warn on github src_uri's that don't use https. So we convert the meta-virt instances to use protocol=https (done using the oe-core contrib conversion script) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-moby: add SRCREV_FORMATBruce Ashfield2021-10-191-0/+1
| | | | | | | | | | recipes that use multiple SCMs in the SRC_URI, must supply SRCREV_FORMAT or SRCPV triggers an expansion error. While this isn't fatal during the build, it can cause issues with setscene (and possibly) other tasks failing, which then leads to no sstate re-use, etc. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce: add SRCREV_FORMATBruce Ashfield2021-10-191-0/+1
| | | | | | | | | | recipes that use multiple SCMs in the SRC_URI, must supply SRCREV_FORMAT or SRCPV triggers an expansion error. While this isn't fatal during the build, it can cause issues with setscene (and possibly) other tasks failing, which then leads to no sstate re-use, etc. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* virtual/containerd: don't rprovide virtual/Bruce Ashfield2021-09-061-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Similar to the oe-core commit: commit 93ac180d8c389f16964bce8bd5538d9389e970e6 Author: Michael Opdenacker <michael.opdenacker@bootlin.com> Date: Wed Sep 1 11:20:20 2021 +0200 meta: stop using "virtual/" in RPROVIDES and RDEPENDS Fixes [YOCTO #14538] Recipes shouldn't use the "virtual/" string in RPROVIDES and RDEPENDS. That's confusing because "virtual/" has no special meaning in RPROVIDES and RDEPENDS (unlike in PROVIDES and DEPENDS). Instead, using "virtual-" instead of "virtual/" as already done in the glibc recipe. We stop rproviding virtual/containerd to keep the namespace clean. There aren't many users of this virtual provides, but we keep it around (for now) to maintain compatibility. At the same time we convert the RPROVIDES to virtual-containerd, to keep it available and consistent with oe-core use virtual-libc, etc. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* virtual/runc: don't rprovide virtual/Bruce Ashfield2021-09-061-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Similar to the oe-core commit: commit 93ac180d8c389f16964bce8bd5538d9389e970e6 Author: Michael Opdenacker <michael.opdenacker@bootlin.com> Date: Wed Sep 1 11:20:20 2021 +0200 meta: stop using "virtual/" in RPROVIDES and RDEPENDS Fixes [YOCTO #14538] Recipes shouldn't use the "virtual/" string in RPROVIDES and RDEPENDS. That's confusing because "virtual/" has no special meaning in RPROVIDES and RDEPENDS (unlike in PROVIDES and DEPENDS). Instead, using "virtual-" instead of "virtual/" as already done in the glibc recipe. We stop rproviding virtual/runc to keep the namespace clean. There aren't many users of this virtual provides, but we keep it around (for now) to maintain compatibility. At the same time we convert the RPROVIDES to virtual-runc, to keep it available and consistent with oe-core use virtual-libc, etc. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce: update to 20.10.8Bruce Ashfield2021-08-271-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | Bumping docker-cli to version v20.10.8-2-g62eae52c2, which comprises the following commits: 2012fbf11 Update Go to 1.16.7 0b924e51f Update to go1.16.6 6288e8b1a change TestNewAPIClientFromFlagsWithHttpProxyEnv to an e2e test 1e9575e81 cli/config/configfile: various test cleanups c98e9c47c Use designated test domains (RFC2606) in tests 8437cfefa context: deprecate support for encrypted TLS private keys 68a5ca859 cli/context: ignore linting warnings about RFC 1423 encryption 8a6473963 Update Dockerfiles to latest syntax, remove "experimental" 1d37fb302 Deprecate Kubernetes context support 0793f9639 Deprecate Kubernetes stack support b639ea8b8 Deprecate Kubernetes stack support Bumping docker to version v20.10.8-2-gd24c6dc5cf, which comprises the following commits: decb56ac89 Update Go to 1.16.7 e8fb8f7acd [20.10] update containerd binary to v1.4.9 4cfeb27f78 update runc binary to v1.0.1 067918a8c3 [20.10] update containerd binary v1.4.8 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker/moby: update to 20.10.8Bruce Ashfield2021-08-271-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | Bumping docker-cli to version v20.10.8-2-g62eae52c2, which comprises the following commits: 2012fbf11 Update Go to 1.16.7 0b924e51f Update to go1.16.6 6288e8b1a change TestNewAPIClientFromFlagsWithHttpProxyEnv to an e2e test 1e9575e81 cli/config/configfile: various test cleanups c98e9c47c Use designated test domains (RFC2606) in tests 8437cfefa context: deprecate support for encrypted TLS private keys 68a5ca859 cli/context: ignore linting warnings about RFC 1423 encryption 8a6473963 Update Dockerfiles to latest syntax, remove "experimental" 1d37fb302 Deprecate Kubernetes context support 0793f9639 Deprecate Kubernetes stack support b639ea8b8 Deprecate Kubernetes stack support Bumping moby to version v20.10.8-2-gd24c6dc5cf, which comprises the following commits: decb56ac89 Update Go to 1.16.7 e8fb8f7acd [20.10] update containerd binary to v1.4.9 4cfeb27f78 update runc binary to v1.0.1 067918a8c3 [20.10] update containerd binary v1.4.8 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* global: overrides syntax conversionBruce Ashfield2021-08-021-19/+19
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | OEcore/bitbake are moving to use the clearer ":" as an overrides separator. This is pass one of updating the meta-virt recipes to use that syntax. This has only been minimally build/runtime tested, more changes will be required for missed overrides, or incorrect conversions Note: A recent bitbake is required: commit 75fad23fc06c008a03414a1fc288a8614c6af9ca Author: Richard Purdie <richard.purdie@linuxfoundation.org> Date: Sun Jul 18 12:59:15 2021 +0100 bitbake: data_smart/parse: Allow ':' characters in variable/function names It is becomming increasingly clear we need to find a way to show what is/is not an override in our syntax. We need to do this in a way which is clear to users, readable and in a way we can transition to. The most effective way I've found to this is to use the ":" charater to directly replace "_" where an override is being specified. This includes "append", "prepend" and "remove" which are effectively special override directives. This patch simply adds the character to the parser so bitbake accepts the value but maps it back to "_" internally so there is no behaviour change. This change is simple enough it could potentially be backported to older version of bitbake meaning layers using the new syntax/markup could work with older releases. Even if other no other changes are accepted at this time and we don't backport, it does set us on a path where at some point in future we could require a more explict syntax. I've tested this patch by converting oe-core/meta-yocto to the new syntax for overrides (9000+ changes) and then seeing that builds continue to work with this patch. (Bitbake rev: 0dbbb4547cb2570d2ce607e9a53459df3c0ac284) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce: update to 20.10.7Bruce Ashfield2021-07-261-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping docker to version v20.10.7-41-g013d6655bb, which comprises the following commits: 067918a8c3 [20.10] update containerd binary v1.4.8 b0da207af4 Bump go 1.16.6 (addresses CVE-2021-34558) abe8c4e80d updated vendored archive/tar to go1.16.5 7c6645b32b update archive/tar patch for go 1.16 55c363ef48 Bump go 1.16.5 8b0913935c integration: ensurePlugin: disable go modules when building plugin 09a7efb1f7 hack/ci/windows.ps1: disable go modules 6793ff26d8 pkg/fileutils: TestMatches: remove cases no longer valid for go1.16 ab9a92f79c Update test certificates 1d4a06e610 hack: add script to regenerate certificates feaca9816a hack/vendor: add check for vendored archive/tar 793340a33a [20.10] update containerd binary to v1.4.7 7429792eed docker pull: warn when pulled single-arch image does not match --platform 72b66d56a5 [20.10] vendor github.com/Microsoft/hcsshim 64a2b71405dacf76c95600f4c756a991ad09cf7c (moby branch) 50c392c9ff API: fix 404 status description on container create 025e3a7898 Update v1.41.yaml b9cf7b7db5 rootless: fix "x509: certificate signed by unknown authority" on openSUSE Tumbleweed 869b50e10b rootless: disable overlay2 if running with SELinux 44f95c7126 dockerd-rootless.sh: avoid /run/xtables.lock EACCES on SELinux hosts 78bb0f445a Dockerfile: update go-swagger to fix validation on Go1.16 618f6a79ab Run s390x tests on Ubuntu 20.04 872cb16edb update runc binary to v1.0.0 GA 4d42e18c05 vendor: swarmkit to fix deadlock in log broker 89edb68e89 Fix possible overlapping IPs 523f8b397c Jenkinsfile: skip ppc64le and s390x by default on pull requests a57fc0eb15 Fix setting swaplimit=true without checking 6474dada20 vendor: github.com/moby/buildkit v0.8.3-3-g244e8cde 895eaacdd4 vendor: github.com/moby/buildkit v0.8.3 003e3c0551 pkg/signal: ignore SIGURG on all platforms 95551168ac vendor: github.com/ishidawataru/sctp f2269e66cdee387bd321445d5d300893449805be d29a55c6c3 vendor: github.com/docker/libnetwork 64b7a4574d1426139437d20e81c0b6d391130ec8 94c1890d39 builder-next: relax second cache key requirements for schema1 2a0c446866 Use v2 capabilities in layer archives Bumping docker-cli to version v20.10.7-20-ge9b8231d6a, which comprises the following commits: 8a64739631 Update Dockerfiles to latest syntax, remove "experimental" 260ba1a8a2 vendor: cpuguy83/go-md2man/v2 v2.0.1 f63cb8b97e vendor: github.com/russross/blackfriday/v2 v2.1.0 48e6b44379 Dockerfile: remove custom go build for windows/arm64 644c003606 circleCI: update docker engine to 20.10.6 0d17280a30 Jenkinsfile: update old engine version to 19.03 eedfe50a99 Jenkinsfile: update labels to prevent running on cgroups v2 f3dd1ee6c1 Fix minor wording c7cf60f657 docs: Fix wrong bridge driver option 0168626037 vendor: github.com/docker/docker-credential-helpers v0.6.4 e3a9a92b14 vendor: moby/term, Azure/go-ansiterm for golang.org/x/sys/windows compat ab733b5564 [20.10] vendor: github.com/docker/docker v20.10.7 746c553574 docs: fix link to command-line reference 2945ba4f7a Ignore SIGURG on Darwin too 032e485e1c ForwardAllSignals: check if channel is closed, and remove warning 88de81ff21 Fix `docker start` blocking on signal handling 706ca7985b Revert "[20.10] Revert "Ignore SIGURG on Linux."" 8264f5be8d docs: dockerd: fix broken link and markdown touch-ups Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* moby: update to 20.10.7Bruce Ashfield2021-07-261-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping moby to version v20.10.7-41-g013d6655bb, which comprises the following commits: 067918a8c3 [20.10] update containerd binary v1.4.8 b0da207af4 Bump go 1.16.6 (addresses CVE-2021-34558) abe8c4e80d updated vendored archive/tar to go1.16.5 7c6645b32b update archive/tar patch for go 1.16 55c363ef48 Bump go 1.16.5 8b0913935c integration: ensurePlugin: disable go modules when building plugin 09a7efb1f7 hack/ci/windows.ps1: disable go modules 6793ff26d8 pkg/fileutils: TestMatches: remove cases no longer valid for go1.16 ab9a92f79c Update test certificates 1d4a06e610 hack: add script to regenerate certificates feaca9816a hack/vendor: add check for vendored archive/tar 793340a33a [20.10] update containerd binary to v1.4.7 7429792eed docker pull: warn when pulled single-arch image does not match --platform 72b66d56a5 [20.10] vendor github.com/Microsoft/hcsshim 64a2b71405dacf76c95600f4c756a991ad09cf7c (moby branch) 50c392c9ff API: fix 404 status description on container create 025e3a7898 Update v1.41.yaml b9cf7b7db5 rootless: fix "x509: certificate signed by unknown authority" on openSUSE Tumbleweed 869b50e10b rootless: disable overlay2 if running with SELinux 44f95c7126 dockerd-rootless.sh: avoid /run/xtables.lock EACCES on SELinux hosts 78bb0f445a Dockerfile: update go-swagger to fix validation on Go1.16 618f6a79ab Run s390x tests on Ubuntu 20.04 872cb16edb update runc binary to v1.0.0 GA 4d42e18c05 vendor: swarmkit to fix deadlock in log broker 89edb68e89 Fix possible overlapping IPs 523f8b397c Jenkinsfile: skip ppc64le and s390x by default on pull requests a57fc0eb15 Fix setting swaplimit=true without checking 6474dada20 vendor: github.com/moby/buildkit v0.8.3-3-g244e8cde 895eaacdd4 vendor: github.com/moby/buildkit v0.8.3 003e3c0551 pkg/signal: ignore SIGURG on all platforms 95551168ac vendor: github.com/ishidawataru/sctp f2269e66cdee387bd321445d5d300893449805be d29a55c6c3 vendor: github.com/docker/libnetwork 64b7a4574d1426139437d20e81c0b6d391130ec8 94c1890d39 builder-next: relax second cache key requirements for schema1 2a0c446866 Use v2 capabilities in layer archives Bumping docker-cli to version v20.10.7-20-ge9b8231d6a, which comprises the following commits: 8a64739631 Update Dockerfiles to latest syntax, remove "experimental" 260ba1a8a2 vendor: cpuguy83/go-md2man/v2 v2.0.1 f63cb8b97e vendor: github.com/russross/blackfriday/v2 v2.1.0 48e6b44379 Dockerfile: remove custom go build for windows/arm64 644c003606 circleCI: update docker engine to 20.10.6 0d17280a30 Jenkinsfile: update old engine version to 19.03 eedfe50a99 Jenkinsfile: update labels to prevent running on cgroups v2 f3dd1ee6c1 Fix minor wording c7cf60f657 docs: Fix wrong bridge driver option 0168626037 vendor: github.com/docker/docker-credential-helpers v0.6.4 e3a9a92b14 vendor: moby/term, Azure/go-ansiterm for golang.org/x/sys/windows compat ab733b5564 [20.10] vendor: github.com/docker/docker v20.10.7 746c553574 docs: fix link to command-line reference 2945ba4f7a Ignore SIGURG on Darwin too 032e485e1c ForwardAllSignals: check if channel is closed, and remove warning 88de81ff21 Fix `docker start` blocking on signal handling 706ca7985b Revert "[20.10] Revert "Ignore SIGURG on Linux."" 8264f5be8d docs: dockerd: fix broken link and markdown touch-ups Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: Fix for sysvinitLeon Anavi2021-07-201-1/+2
| | | | | | | | | Fix for rare legacy systems which still use simultaneously both sysvinit and systemd in DISTRO_FEATURES. This fix avoids issues during do_rootfs with postinstall scriptlets of ['docker-ce']. Signed-off-by: Leon Anavi <leon.anavi@konsulko.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce: upate to latest 20.10.xBruce Ashfield2021-06-041-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | docker: 41cf01fa93 pkg/signal.CatchAll: ignore SIGURG on Linux 56541eca9a [20.10] update containerd binary to v1.4.6 fb179ff098 update runc binary to v1.0.0-rc95 4c801fdb7d integration: remove KernelMemory tests 6174e3cf22 Update runc binary to v1.0.0-rc94 afbb1277a3 Swarm config: use absolute paths for mount destination strings 94c1890d39 builder-next: relax second cache key requirements for schema1 01f734cb4f [20.10] update containerd binary to v1.4.5 21391bb7f7 hack/dind: fix cgroup v2 evacuation with `docker run --init` 12b03bcb27 Error string match: do not match command path 8a7f77cb2f dockerd-rootless.sh: use `command -v` instead of `which` 9ca66776fa bump up rootlesskit to v0.14.2 08b27e45d8 Dockerfile: update yamllint to v1.26.1 to fix build 404ede5737 Bump hcsshim for error details fix cli: f291a49ba Swap "LABEL maintainer" for the OCI pre-defined "org.opencontainers.image.authors" 78fcd905c docs: Fix broken jump link 12e2f94eb printServerWarningsLegacy: silence "No oom kill disable support" on cgroup v2 00755d7db printServerWarningsLegacy: silence "No kernel memory limit support" 8264f5be8 docs: dockerd: fix broken link and markdown touch-ups 4fbdf3f36 docs: document log-opts for "dual logging" cache 1ff45aac4 Update stop.md ed71df1b9 docs: cleanup / refactor cli doc ee20fa1ec docs: add reference for "docker config" commands ffe40dc6b docs: update some examples for proxy configuration fbbf1be52 docs: remove experimental ipvlan docs, as they were migrated 3de2cc6ef docs/reference/builder: update "syntax" section 234036d10 docs/reference/builder: update example output, and some rephrasing 0c442dc17 docs/reference/builder: remove outdated example Dockerfiles 6b48c7867 docs/reference/builder: touch-up code-hints and some minor changes network: 56654e71 vendor: github.com/ishidawataru/sctp f2269e66cdee387bd321445d5d300893449805be 7b9c2905 fix port forwarding with ipv6.disable=1 c4ea04e0 enforce order of lock acquisitions on network/controller, fixes #2632 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* moby: update to latest 20.10Bruce Ashfield2021-06-041-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating to the lastest moby commits, which comprise the following commits: moby: 41cf01fa93 pkg/signal.CatchAll: ignore SIGURG on Linux 56541eca9a [20.10] update containerd binary to v1.4.6 fb179ff098 update runc binary to v1.0.0-rc95 4c801fdb7d integration: remove KernelMemory tests 6174e3cf22 Update runc binary to v1.0.0-rc94 afbb1277a3 Swarm config: use absolute paths for mount destination strings 94c1890d39 builder-next: relax second cache key requirements for schema1 01f734cb4f [20.10] update containerd binary to v1.4.5 21391bb7f7 hack/dind: fix cgroup v2 evacuation with `docker run --init` 12b03bcb27 Error string match: do not match command path 9ca66776fa bump up rootlesskit to v0.14.2 404ede5737 Bump hcsshim for error details fix cli: f291a49ba Swap "LABEL maintainer" for the OCI pre-defined "org.opencontainers.image.authors" 78fcd905c docs: Fix broken jump link 12e2f94eb printServerWarningsLegacy: silence "No oom kill disable support" on cgroup v2 00755d7db printServerWarningsLegacy: silence "No kernel memory limit support" 8264f5be8 docs: dockerd: fix broken link and markdown touch-ups 4fbdf3f36 docs: document log-opts for "dual logging" cache 1ff45aac4 Update stop.md ed71df1b9 docs: cleanup / refactor cli doc ee20fa1ec docs: add reference for "docker config" commands ffe40dc6b docs: update some examples for proxy configuration fbbf1be52 docs: remove experimental ipvlan docs, as they were migrated 3de2cc6ef docs/reference/builder: update "syntax" section 234036d10 docs/reference/builder: update example output, and some rephrasing 0c442dc17 docs/reference/builder: remove outdated example Dockerfiles 6b48c7867 docs/reference/builder: touch-up code-hints and some minor changes network: 56654e71 vendor: github.com/ishidawataru/sctp f2269e66cdee387bd321445d5d300893449805be 7b9c2905 fix port forwarding with ipv6.disable=1 c4ea04e0 enforce order of lock acquisitions on network/controller, fixes #2632 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: add CVE_PRODUCT to recipesRalph Siemsen2021-04-292-0/+3
| | | | | | | | Allows the yocto cve-checker to flag CVEs, which would otherwise go unreported due to the package name not matching NIST NVD data. Signed-off-by: Ralph Siemsen <ralph.siemsen@linaro.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: introduce -clie packageBruce Ashfield2021-04-291-0/+18
| | | | | | | | | | | | | | By the docker-packaging repository and https://docs.docker.com/engine/install/centos/#installation-methods docker is packaged by most distros with a split between the engine and the CLI. We do the same here, by introducing the -cli package But to keep existing use cases working, we also create a RDEPENDS between the main docker package (the engine) and the cli, so existing "docker" package installs will continue to work the same way. To have separate and non-redepending packages created set the DOCKER_UNIFIED_PACKAGE variable to False Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: unify common parts of docker-ce and docker-moby recipesBruce Ashfield2021-04-2911-349/+95
| | | | | | | | | | | | | | | | | Now that docker-ce is being built from the same repos as docker-moby, the only unique things in the recipes are the SRCREVs. We move the common packaging, compile/install routines and configuration to the .inc files. We also move the patches to the generic 'files' directory, so they can be shared. If we there are SRCREV bumps in the future that diverge moby and docker, we'll hold patches in their named directorys and tweak the compile/install routines as necessary. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-moby; add _git suffix to recipeBruce Ashfield2021-04-291-0/+0
| | | | | | | | | | For whatever reason, the -ce recipe has _git and the moby variant doesn't. When in reality, the _git is more significant for moby than for -ce. Renaming the recipe to normalize the recipe naming. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce: update to 20.10.6Bruce Ashfield2021-04-293-23/+38
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating docker-ce to 20.10.6, we also restructure the recipe to build as mentioned in: https://github.com/docker/docker-ce This now makes the docker-ce recipe virtually identical to the moby variant, with only SRCREV differences being signficant. The docker-ce recipe will build the tags as identified by the docker-packaging repository. We keep this as a separate recipe for this update, so we can backport the 20.10.6 change to older branches (for CVEs, etc), but the moby and docker-ce recipes will (re)unify in following updates. root@qemux86-64:~# docker --version Docker version 20.10.6-ce, build 370c28948e root@qemux86-64:~# docker pull alpine Using default tag: latest latest: Pulling from library/alpine 540db60ca938: Pull complete Digest: sha256:69e70a79f2d41ab5d637de98c1e0b055206ba40a8145e7bddb55ccc04e13cf8f Status: Downloaded newer image for alpine:latest docker.io/library/alpine:latest root@qemux86-64:~# docker run -it alpine /bin/sh [ 4099.428945] docker0: port 1(veth33cc29a) entered blocking state [ 4099.430548] docker0: port 1(veth33cc29a) entered disabled state [ 4099.434641] device veth33cc29a entered promiscuous mode [ 4100.219415] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 4100.739037] eth0: renamed from vethe948f63 [ 4100.746450] IPv6: ADDRCONF(NETDEV_CHANGE): veth33cc29a: link becomes ready [ 4100.748508] docker0: port 1(veth33cc29a) entered blocking state [ 4100.750150] docker0: port 1(veth33cc29a) entered forwarding state [ 4100.754370] IPv6: ADDRCONF(NETDEV_CHANGE): docker0: link becomes ready / # cat /etc/issue Welcome to Alpine Linux 3.13 Kernel \r on an \m (\l) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-moby: bump to 20.10-latestBruce Ashfield2021-04-281-1/+1
| | | | | | | | | Grabbing the following (minor) commits: 8a7f77cb2f dockerd-rootless.sh: use `command -v` instead of `which` 08b27e45d8 Dockerfile: update yamllint to v1.26.1 to fix build Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce: bump to 20.10-latestBruce Ashfield2021-04-281-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | Bumping the SRCREV to pick up the following commits: 3b8193b399 Upgrade Docker Scan plugin to v0.8.0 9303aa4b6b Add John Howard to our alumni ba87f9abb5 dockerd-rootless.sh: use `command -v` instead of `which` efe9ca44fe Prepare tests for Windows containerd support ed269a15ff vendor: github.com/docker/swarmkit 5a5494a9a7b408b790533a5e4e1cb43ca1c32aad 62761e5710 vendor: github.com/coreos/etcd v3.3.25 07de8d8bea vendor: github.com/containerd/containerd 19ee068f93c91f7b9b2a858457f1af2cabc7bc06 2ee09a228a vendor: github.com/gogo/protobuf v1.3.2 ce1125b768 Remove needless check 5c7fa82d85 Remove lowenna (aka jhowardmsft) from maintainters 0d83bab69a bump up rootlesskit to v0.14.2 fc17485819 Dockerfile: update yamllint to v1.26.1 to fix build 03ac69b517 Error string match: do not match command path d1b9bc135d Update contrib/nuke-graph-directory.sh b39a1ca16b Fixes subvol delete on a non-btrfs volume 618c440ae3 Bump hcsshim to get some fixes. a0fa96c25b Update stop.md Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce: update to v20.10-betaBruce Ashfield2021-04-155-81/+70
| | | | | | | | | | | | | | | | | moby has moved on to the 20.10+ series, while docker-ce has stayed behind a bit. Master of docker-ce now has imports from moby and is getting ready for release. To keep our variants from diverging, we switch to master (for now) and will track the new development. We adapt some patches from the moby build to work for docker-ce, in particular, we cannot use docker to build docker, so we port the cli building from moby. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker/moby: update to 20.10.6Bruce Ashfield2021-04-153-26/+31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping to the lastet 20.10 series. This includes the following moby commits: 255c79a1e8 Move cgroup v2 out of experimental f2c0b3688a Pin arm64 machines to a specific Ubuntu version 29ff2af2d3 Fix flaky TestInspect 60310e2409 Use docker media type for plugin layers 8088859bab btrfs: Allow unprivileged user to delete subvolumes (kernel >= 4.18) d22dde8eb1 rootless: fix getCurrentOOMScoreAdj c1e7924f7c archive: do not use overlayWhiteoutConverter for UserNS 22dc1597b9 overlay2: doesSupportNativeDiff: add fast path for userns daae27bfce overlay2: call d.naiveDiff.ApplyDiff when useNaiveDiff==true e974cb638c rootless: bind mount: fix "operation not permitted" 7022b1e12e bump up rootlesskit to v0.14.1 88470052e7 vendor: docker/libnetwork b3507428be5b458cb0e2b4086b13531fb0706e46 d26ed2c33b fix assertPortList normalizing being too strict 915b239519 builder: produce error when using unsupported Dockerfile option ef2351b416 integration-cli: rely less on "docker port" output format 86d98f5711 integration: update getExternalAddress to prefer IPv4 b41e2d4dc1 integration/container: wrap some long lines for readability 407a61cdb2 hack: use GOPROXY for rootlesskit to workaround issue with old git on CentOS/RHEL 7 a35e1f451e update rootlesskit to v0.14.0 9780942e20 Remove cli test for duplicate --net/--network opts e1ee2823ec TestPushMultipleTags: Add support for 20.10 CLI 969bde2009 jsonfile: more defensive reader implementation cb501700e8 Fix handling for json-file io.UnexpectedEOF 2d39a44c1c overlayutils/userxattr.go: add "fast path" for kernel >= 5.11.0 95d2b686be overlay2: support "userxattr" option (kernel 5.11) 074270703c Use buster backports to build with libseccomp-2.4.4 fed6ba2790 Include VPNkit binary for arm64 2ab3cd8c9e update containerd binary to v1.4.4 d3188dc164 Dockerfile: switch to "stable" dockerfile front-end 98273a606a dockerd-rootless-setuptool.sh: create CLI context "rootless" a0670c6d3d pkg/archive: TestUntarParentPathPermissions requires root 04d9b581e9 Update documentation links 1015b5b438 dockerd-rootless.sh: prohibit running as root 35f5f9e624 builder: fix incorrect cache match for inline cache with empty layers 3ce37a6aa4 vendor: github.com/moby/buildkit v0.8.2 5e8c1b4f7d dockerd-rootless.sh: add typo guard a24d92f95b check-config.sh: add NETFILTER_XT_MARK 80019e1b0e builder: fix blobs releasing via leases after pull 2a220f1f3d Update Swarmkit to pick up fixes to heartbeat period and stalled tasks da1a672102 builder: fix pull synchronization regression 0e001154f9 Check the length of the correct variable #42039 3beb2e4422 Move cpu variant checks into platform matcher 0caf485abb Fallback to manifest list when no platform match a6a88b3145 profiles: seccomp: update to Linux 5.11 syscall list e3750357a5 builder: ensure libnetwork state file do not leak ab5711e619 Fix builder inconsistent error on buggy platform df2a989769 Add shim config for custom runtimes for plugins d13e162a63 Handle long log messages correctly on SizedLogger 34446d0343 replace json.Unmarshal with NewFromJSON in Create c00fb1383f docs: fix double "the" in existing API versions b7e6803ec4 swagger.yaml: Remove extra 'the' wrapped by newline 420de4c569 contrib/check-config.sh: fix INET_XFRM_MODE_TRANSPORT 8412078b1e contrib/check-config.sh: fix IOSCHED_CFQ CFQ_GROUP_IOSCHED bb0866f04e contrib/check-config.sh: fix MEMCG_SWAP_ENABLED db47bec3c7 contrib/check-config.sh: fix NF_NAT_NEEDED 6bc47ca4b4 contrib/check-config.sh: fix NF_NAT_IPV4 491642e696 contrib/check-config.sh: support for cgroupv2 cda6988478 Fix Error in daemon_unix.go and docker_cli_run_unit_test.go 1640d7b986 Fix daemon panic when starting container with invalid device cgroup rule 6e3f2acdac docs: fix NanoCPUs casing ad777ff3bc api: fix NanoCPUs casing in swagger 94d2467613 Fix userns-remap option when username & UID match acb8a48a3c update runc binary to v1.0.0-rc93 5d442b1cb7 pkg/archive: Unpack() use 0755 permissions for missing directories 5db18e0aba archive: avoid creating parent dirs for XGlobalHeader 94feac18d2 Update rootlesskit to v0.13.1 to fix handling of IPv6 addresses cc377d27ac Update TestDaemonRestartWithLiveRestore: fix docker0 subnet missmatch Fix docker0 subnet missmatch when running from docker in docker (dind) fc07fecfb5 TestBuildUserNamespaceValidateCapabilitiesAreV2: verify build completed f7893961de TestBuildUserNamespaceValidateCapabilitiesAreV2: use correct image name d31b2141ae Jenkinsfile: add cgroup2 5de9bc7e01 TestInspectOomKilledTrue: skip on cgroup v2 ff49cb3e33 Dockerfile.simple: Fix compile docker binary error with btrfs 49e706e14c Dockerfile.buildx: update buildx to v0.5.1 0211909bde testing: update docker-py 4.4.1 faf6442f80 integration: fix TestBuildUserNamespaceValidateCapabilitiesAreV2 not using frozen image f0e526f43e Make test work with rootless mode a287e76e15 pkg/archive: allow mknodding FIFO inside userns And the following cli commits: dc017bdda bake: remove windows targets other than windows/amd64 feb6f439e Makefile: have binary, cross, dynbinary targets not use docker for backwards compat 8bc4062fc set default version from git 84cc7d87c update readme with new examples c1c3d3b3a remove unused targets 048a84614 update circleci cross target 33dacda24 add windows/arm64 target fcc05e5ea update windows resources generation 58061d25f dockerfile based binary building 4c3b87d92 config.Load() remove unneeded locks 019609872 vendor: github.com/theupdateframework/notary v0.7.0-21-gbf96a202 6ebf76504 vendor: update notary to 5f1f4a34 f508ce9db vendor: github.com/theupdateframework/notary v0.7.0 2c0435431 docs: remove trailing spaces to prevent yamldocs using "compact" notation ff945151e docs: improve example for "remove all stopped containers" 4571d90f2 config: print deprecation warning when falling back to ~/.dockercfg f33a69f6e [20.10] Revert "Ignore SIGURG on Linux." d6eeeb625 service rollback: always verify state 3e157d529 docker service rollback: fix non-zero exit code in some cases 1fdf84b8e fix --update-order and --rollback-order flags 376b99c6d Rename bin/md2man to bin/go-md2man 0de4e6e9a Fix reading context and dockerfile from stdin with BuildKit de40c2b17 Fix panic when failing to get DefaultAuthConfig d513e46bf cli/config: prevent warning if HOME is not set 2b74b90ef Add docs and completion for docker node ls --filter node.label 05343b36a fix docker-run man page table formatting f90db254d docs: Fix wrong variable name 0dcfdde33 Removed format flag for inspect 03cd1dc50 Added zsh completion for docker context subcommands 42811a7eb docs: add redirect for old reference URL be966aa19 docs: fix typo in deprecated.md b22fe0fb1 deprecate blkio-weight options with cgroups v1 4eb050071 Update bash completion for fluentd --log-options 08c4fdfa7 Add bash completion for `dockerd --ip6tables` 6aa1b37c8 Add bash completion for `docker run|create --pull` e82920d76 Remove duplicate word in push.md 82123939f Add bash completion for jobs Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce: export GO111MODULE=offBruce Ashfield2021-03-011-0/+1
| | | | | | | | | | With the latest go version bump in oe-core export GO111MODULE is on by default. Our build is not setup to use go modules, so we disable it and avoid configuration errors: no required module provides package ... : working directory is not part of a module Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-moby: export GO111MODULE=offBruce Ashfield2021-03-011-0/+1
| | | | | | | | | | With the latest go version bump in oe-core export GO111MODULE is on by default. Our build is not setup to use go modules, so we disable it and avoid configuration errors: no required module provides package ... : working directory is not part of a module Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker/moby: update to 20.10.3Bruce Ashfield2021-02-054-95/+27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating to the 20.x series for moby. The following moby commits: 519a55f491 TestCgroupNamespacesRunOlderClient: support cgroup v2 b6a6a35684 docker info: adjust warning strings for cgroup v2 25bd941ae4 docker info: silence unhandleable warnings 58283298d7 rootless: set systemd KillMode to mixed 46229ca1d8 Use golang.org/x/sys/execabs a7d4af84bd pull: Validate layer digest format 611eb6ffb3 buildkit: Apply apparmor profile 4afe620fac vendor buildkit 68bb095353c65bc3993fd534c26cf77fe05e61b1 e908cc3901 Use real root with 0701 perms bfedd27259 Do not set DOCKER_TMP to be owned by remapped root edb62a3ace Ensure MkdirAllAndChown also sets perms 1c0af18c6c vendor: opencontainers/selinux v1.8.0, and remove selinux build-tag and stubs 4a175fd050 Cleanup container shutdown check and add test ab06bb3ec0 vendor: opencontainers/selinux v1.7.0 f3d0f7054d cmd/dockerd: sd_notify STOPPING=1 when shutting down c923f6ac3b Fix off-by-one bug 1c5806cf57 Move use of debian:buster frozen image to debian:bullseye af0665861b Fix a potential hang when starting after a non-clean shutdown 7ba1af38b8 TESTING.md: note that integration-cli is deprecated a0fc7a4b46 TESTING.md: Fix path the test environment conditions f2f5106c92 Add a test for #41723 b314e901d8 Add IsUserNamespaceInKernel() test environment condition 58a4c03fed Add debian:bullseye to frozen images 188a691db7 fuse-overlayfs: fix godoc 295fb1c35e Fix jobs mode filter spelling 78eafdd947 Vendor in Libnetwork changes 7e600eaae0 daemon: improve log messages during startup / shutdown e8648fa19f plugin/manager_linux_test: Skip privileged tests when non-root c7e7426796 pkg/chrootarchive: Skip privileged tests when non-root 6349b32e1b daemon/oci_linux_test: Skip privileged tests when non-root a02553670e vendor buildkit to v0.8.1 5fd8d701ce Vendor in libnetwork changes 9122cd1a75 docs: add API v1.41 5458b0e435 Revert "Add multi-user.target to After=" 495d623ae5 Add fallback for pull by tag 34682e536e vendor: BuildKit 950603da215ae03b843f3f66fbe86c4876a6f5a1 15accb8376 vendor: remove vendored golang.org/x/tools, as it's not needed cd63cc846e mark ip6tables as experimental feature dd752ec87a Fix jobs-related bug in task conversion 0a8c769268 update containerd binary to v1.4.3 (CVE-2020-15257) 2680a0fe2c Networking: add regression test for networks endpoint with trailing slash f9b2989e97 Fix permissions on oci fixtures files 703951197c update containerd binary to v1.4.2 22e31dbd9a vendor libnetwork to fix mix up between IPv4 and IPv6 ab09458e21 dockerd-rootless-setuptool.sh: show more helpful error messages 776cadc7db vendor: gotest.tools v3.0.3 aeddf93de0 Implement Unwrap to errors 73571e4689 vendor: github.com/moby/buildkit v0.8.0-rc2 1f88736871 vendor: github.com/containerd/containerd 0edc412565dcc6e3d6125ff9e4b009ad4b89c638 8eebe32f5c vendor: github.com/containerd/cgroups 0b889c03f102012f1d93a97ddd3ef71cd6f4f510 ba475d44a7 vendor: github.com/containerd/fifo 0724c46b320cf96bb172a0550c19a4b1fca4dacb 37da117aba vendor: github.com/containerd/ttrpc v1.0.2 1725a1493e vendor github.com/tonistiigi/fsutil 0834f99b7b85462efb69b4f571a4fa3ca7da5ac9 fa592fa7b2 vendor: golang.org/x/crypto c1f2f97bffc9c53fc40a1a28a5b460094c0050d9 c7f0b509cf vendor: github.com/moby/term bea5bbe245bf407372d477f1361d2ff042d2f556 2630994b35 Bump libnetwork dbffbe8f9b builder-next: fix platform-specific behavior f4214ec847 vendor: github.com/Microsoft/go-winio v0.4.15 was tagged 05c20a6e1c handleContainerExit: put a timeout on containerd DeleteTask beff0a5f2c integration-cli: remove TestBuildContChar 39f9c1b5d1 builder-next: fix --cache-from panic 8f464ae2ab builder-next: refactor to use flighcontrol and remove resolveOnce 1b1eb094cc builder-next: simple refactor 3756668adb builder-next: Refactor using buildkit's resolver pool de56a90929 vendor buildkit 6861f17f15364de0fe1fd1e6e8da07598a485123 f7bcb02f67 seccomp: Add pidfd_getfd syscall 5e3ffe6464 seccomp: Add pidfd_open and pidfd_send_signal 2b41e84719 pkg/system: fix compile on darwin (macOS) b4b902b88f Jenkinsfile: remove e2e image stage 6d243cdf27 testutil: remove remaining use of deprecated pkg/mount 43d61d2bcf [DEL] remove useless assert 6458f750e1 use containerd/cgroups to detect cgroups v2 7ba05f2b2b Rewrite VolumesMountedAsShared/Slave as Integration tests 7bb729e928 Break out non-Windows sys/mount usage into helper 3e3f3d7168 Move tests using sys/mount to not build on Windows a158b53d86 Separate non-Windows mount code from common code 080d9df63e Don't clear the exit code from the Finally block 1bb3491601 builder: fix detection of experimental --stream option (deprecated) 51f5b1279d Don't set image on containerd container. d99e8d2c3b Unhide containerd-namespace flags 9ca3bb632e Store image manifests in containerd content store 66459cc623 Added ip6tables config option c6accc67f2 bump up rootlesskit to v0.11.0 dfc2d770e4 Update iptable.Exists API in integration-cli 53727ce2f0 vendor: github.com/creack/pty v1.1.11 dc3c382b34 replace pkg/symlink with github.com/moby/sys/symlink c208f03fbd pkg/devicemapper: fix invalid usage of reflect.SliceHeader 6a5393636e opts: unify host-options, and use consts 80a5df9c49 Added container ID to containerd task delete event messages 053962af92 Move HostGatewayName const to opts, and change vars to consts e4cf1c7336 pull: use tag service for pulling tagged reference e766361271 pkg/mount: update deprecated wrappers 32d506b394 vendor: moby/sys mountinfo/v0.4.0 182795cff6 Do not call mount.RecursiveUnmount() on Windows 1623e6b222 Vendor in Libnetwork changes ac84f1b55f registry.loginV2(): minor cleanup b102d4637c Fix windows log file rotation with readers bcc993b494 Fix logfile to open all files with custom openFile 56ba96b6c1 Clean up some logfile implementation 3148a46657 Fix various race conditions in loggerutils 93bd2c1336 contrib: remove download-frozen-image-v1 script b90ef1237e registry: minor cleanup in search code 3f7c62f6f6 registry: remove v1 code not related to searching 0ba2d7c625 registry: remove TestSameAuthDataPostSave 32eaf4690a registry: DefaultService.Auth(): skip parsing default registry 7782d04141 registry: remove v1 authentication ab47fd2f72 registry: use consts for default registry 1a1f5cc37b Pass through GOCACHE to test_env 8cc0fd811e docs: fix builder-version swagger 1b8826beee docker stats: fix 'panic: close of closed channel' 6f0709e033 vendor: golang.org/x/sys eeed37f84f13f52d35e095e8023ba65671ff86a1 4680836f80 vendor: github.com/containerd/console v1.0.1 88c0271605 Don't set default platform on container create 80c3199c18 vendor: github.com/spf13/cobra v1.1.1 561b8014c0 testutil: set -500 OOM score for test daemons 2b8e68ef06 dockerd: remove default -500 oom-score-adjust a6129c57e6 Bump vndr v0.1.2 a38b96b8cd Temporarily disable CAP_PERFMON, CAP_BPF, and CAP_CHECKPOINT_RESTORE 5338478546 Dockerfile: fix golang-ci-lint installer f14aea63c9 "Fix" checkpoint on v2 runtime 654cad4d9d Also trim "~..." from AppArmor versions f6f294bd83 testing: Init plugin config when for tests 4539e7f0eb seccomp: implement marshal/unmarshall for MinVersion 6b538ffbca vendor: github.com/gofrs/flock v0.7.3 cf7a5be0f2 daemon: don't adjust oom-score if score is 0 8c31e4536a volume/local: add tests for size quota 2e05db981b quota: move test helper functions to extra file 6d593fe6cc volume/local: decouple presence of options from mounting c677e4cc87 quota: move quota package out of graphdriver 6f1553625d projectquota: build types and unsupported stubs everywhere 31ed121cb8 projectquota: sync next projectID across Control instances 963e5afc04 Update documentation to reflect deprecation of "NewEnvClient" a692823413 seccomp: add test for unmarshal default profile 97535c6c2b seccomp: remove dependency on pkg/parsers/kernel ee079e4692 pkg/aaparser: support parsing version like "3.0.0-beta1" a3256d2dd8 bump google.golang.org/api v0.8.0 2971204e43 bump go.opencensus.io v0.22.3 bbde240ce0 bump cloud.google.com/go v-0.44.3 ef553e14a4 Fix gcplogs memory/connection leak c9bbf37f85 vendor: sirupsen/logrus v1.7.0 2036b277a5 Add TARGETARCH var to frozen images stage c9c7756301 oci: add tests for loading seccomp profiles 56e7bc4b78 seccomp: remove dependency on oci package dedf8528a5 Allow download-frozen-images to work without `go` b8aec34680 seccomp: add test for loading old JSON format 5f5285a6e2 Sterner warnings for unathenticated tcp 7afef854ed api: clarify "v" option behavior in the container remove endpoint 7335167340 Remove redundant "os.IsNotExist" checks on os.RemoveAll() 5a7b75f889 daemon/graphdriver/copy: use IoctlFileClone from golang.org/x/sys/unix 6267800783 vendor: golang.org/x/sys aee5d888a86055dc6ab0342f9cdc7b53aaeaec62 2502db66d0 pkg/system: make EnsureRemoveAll unix-specific 88126e84a5 Force Download-File function to use TLS 1.2 66a37b460c Windows: Enable more integration tests 35c531db1a Revendor Microsoft/go-winio for 8gB file fix 2dd9faaa16 Enable TestBuildWithHugeFile on Windows 0d75b63987 seccomp: replace types with runtime-spec types 0efee50b95 seccomp: move seccomp types from api into seccomp profile 968133c86c vendor: opencontainers/go-digest v1.0.0 7cdced6f4b vendor.conf: fix tar-split version comment 9fb324f00b vendor: docker/libnetwork d0951081b35fa4216fc4f0064bf065beeb55a74b 89bec2e267 Fix collecting the daemon under test logs 82b5ff8026 Windows CI: Make sure that CI fails on any error 1ed6589e39 vendor: github.com/syndtr/gocapability 42c35b4376354fd554efc7ad35e0b7f94e3a0ffb af3220884e vendor: github.com/containerd/containerd v1.4.1 1371a629d5 update containerd binary to v1.4.1 4ab96db4ab vendor: github.com/moby/term 7f0af18e79f2784809e9cef63d0df5aa2c79d76e 2344b3a9e1 fix integration test case TestExternalGraphDriver failed in mips arch 3d9120f744 Unify same fromStatT() implementation for FreeBSD and NetBSD 41be7293f5 daemon/listeners: use pkg/errors 6efa9e0575 Add support for NetBSD df7031b669 Memoize seccomp value for SysInfo b83dc8e5a2 Remove libseccomp-golang from vendor ccbb00c815 Remove dependency in dockerd on libseccomp dc72890470 Remove "mkimage.sh" and associated scripts 5ca758199d replace pkg/locker with github.com/moby/locker 13e0ba700a swagger: fix MemTotal units in SystemInfo endpoint 16eb522928 vendor: containerd v1.4.0 a8e7115fca Simplify seccomp logic 65a33d02f6 Simplify getUser() to use libcontainer built-in functionality 322c9e6866 add partial metadata to journald logs 245f2d922a vendor: github.com/opencontainers/selinux v1.6.0 fdd22e5628 vendor: github.com/gorilla/mux v1.8.0 d1c2f953c5 Test: Add buffer to two channels to avoid blocking goroutine ea9886cec4 pkg/idtools: refactor to avoid string-splitting 15292d7abf update containerd binary to v1.4.0 a18139111d Add faccessat2 to default seccomp profile. 010adeec55 Builder: print relative path if COPY/ADD source path was not found b8988c8475 Add openat2 to default seccomp profile. c255404a25 opts: simplify ValidateEnv to use os.LookupEnv c353c7cc71 vendor runc library to v1.0.0-rc92 7ab5b00a9c vendor golang.org/x/sys v0.0.0-20200622214017-ed371f2e16b4 2ee753a28f vendor golang.org/x/net v0.0.0-20200707034311-ab3426394381 5eccaaceb5 vendor golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9 15d38650ee vendor containerd library to v1.4.0-rc.1 cf169b45bb daemon.setupPathsAndSandboxOptions() skip resolving symlinks 3ee1ab87b7 Update docker-py to 4.3.0 906007f6c1 libcontainerd: use cancellable context for events 60d7265803 Use IsServing to determine if c8d client is ready e3ab236309 Add solaris support to lstat 7fd23345c9 Wait for container exit before forcing handler 31d83961e9 Update tini v0.19.0 afd9a6c2b2 builder/remotecontext: use lowercase for error 725eced4e0 apparmor: permit signals from unconfined programs a7c279f203 Add more error message for ops when container limit use an device which not exist 2a6325e310 Bump Golang 1.13.15 2c7b48decd Update runc binary to v1.0.0-rc92 a6b00ed9b9 Update authors and mailmap 0f0c1c04c8 fix TestDaemonNoSpaceLeftOnDeviceError for mips64le 43d13054c5 update containerd to v1.3.7 8ccb46a521 Check for context error that is wrapped in url.Error ad30ef9113 Supplement the omission of pr#41145 6302dbbf46 Disable manifest v2 schema 1 push 9f28837c1d vendor protobuf v1.3.5 c00d4907da vendor prometheus dependency. e58a00211d vendor bbolt v1.3.5 9ad35b7e69 vendor runc 67169a9d43456ff0d5ae12b967acb8e366e2f181 9424eccfcd vendor containerd 779ef60231a555f7eb9ba82b052d59b69ca2ef10 51e3cd4761 statsV2: implement Failcnt 0592aac95c vendor: update containerd/cgroups 0ca7456e52 Add multi-user.target to After= bd0c2b3581 oci/deviceCgroup(): remove redundant variable 3108ae6226 oci: correctly use user.GetExecUser interface c76f380bea Add ulimits support to services 2b22a2e792 fix buildkit pull nil panic 1fdb1033c4 Bump swarmkit to d6592ddefd8a5319aadff74c558b816b1a0b2590 818bad6ef2 vendor: vishvananda/netns db3c7e526aae966c4ccfa6c8189b693d6ac5d202 36b1920e56 vendor: docker/swarmkit 293aa2e66279a930999044cbf6d0e590baac16ff c458bca6dc Handle missing c8d task on stop afdf5483c9 vendor: update containerd/continuity efbc4488d8fe1bdc16bde3b2d2990d9b3a899165 51c7992928 API: add "prune" events 5bc41368d9 bump up rootlesskit to v0.10.0 aa225972df Remove apt.dockerproject.org from test f2cc755f66 docs: API v1.39: move system version response to definitions e221931ccd docs: API v1.40: move system version response to definitions d4c4323e54 swagger: move system version response to definitions 24f173a003 Replace service "Capabilities" w/ add/drop API 9a6402d761 docs: API v1.39: fix type for BuildCache CreatedAt and LastUsedAt a305abb1d1 docs: API v1.40: fix type for BuildCache CreatedAt and LastUsedAt 61b770a63d swagger: fix type for BuildCache CreatedAt and LastUsedAt b8ca7de823 Deprecate KernelMemory a8b2272ab3 swagger: sync updates to v1.39 1e89ca40ba swagger: sync updates to v1.40 baa321293f Revendor swarmkit 441211986c docs: add example calculations to container stats API c8008bfbe9 fix address pool flags merge #40388 8774804ca7 vendor: update buildkit to 4d1f260e8 c161d6564d api/types: omit empty DefaultAddressPools d4b3e786ed docs: add mention of DefaultAddressPools to API history 9c66a2f4e1 Bump Golang 1.13.14 bf4a5982f0 testing: bump docker-py 4.2.2 c6d860ace6 Fix log file rotation test. bf7fd015f7 Remove unused useShimV2() bc4f242e79 Bump Go 1.13.13 0b14c2b67a cgroup v1: change the default runtime to io.containerd.runc.v2 c9c9e0ab90 pkg/parsers: remove uses of mattn/go-shellwords 818e0b2fcf pkg/parsers: add unit test for Darwin c88a830507 distribution/xfer: use "main" instead of "master" for progress channel 3895dd585f Replace uses of blacklist/whitelist f63f73a4a8 Configure shims from runtime config 6fd94aa933 Fix lint error on sprintf call for runtime string 219e7e7ddc vendor: libnetwork 9e99af28df21367340c95a3863e31808d689c92a b42ac8d370 daemon/stats: use const for clockTicksPerSecond 840a12ac90 Add DefaultAddressPools to docker info #40388 2865478487 Revendor hcsshim to fix image import bug 63382e5f3b docs: sync API v1.39 swagger formatting with current version 01244e85e7 docs: sync API v1.40 swagger formatting with current version d4d62b658d swagger: add DeviceRequests to container create, inspect example 89876e8165 swagger: move NetworkingConfig to definitions 91ca3e7a8d update runc binary to v1.0.0-rc91 85e3dddccd update containerd to v1.3.6 d2e23405be Set minimum memory limit to 6M, to account for higher startup memory use 228d74842f Upgrading the versions of images in Dockerfile. 97708281eb info: improve "WARNING: Running in rootless-mode without cgroup" 3258d565cf Fix status code for missing --volumes-from container 0e915e5413 update containerd to v1.3.5 3b80af727a fix typos and grammar in docs e3cff19dd1 Untangle CPU RT controller init afbeaf6f29 pkg/sysinfo: rm duplicates a9d22cad93 hack/install: build gotestsum without -buildmode=pie 20570d91c8 Dockerfile.windows: fix gotestsum.installer installing wrong version 441aff3a17 fix gotestsum.installer installing wrong version d0d99b04cf seccomp: allow 'rseq' syscall in default seccomp profile 794aa20983 dockerd-rootless.sh: support containerd v1.4 shim socket path convention ab6b92b6b2 chrootarchive: fix "conversion from int to string yields a string of one rune" 671459a989 Switch all Dockerfiles to use "buster" variant a8ae48d94f project: remove obviously outdated docs c66c5f4904 contrib: remove docker-machine-install-bundle.sh 32b4590b23 contrib: remove REVIEWERS files 45eb4e0d80 contrib: remove outdated vagrant docs 6b6af2abd9 contrib: remove outdated "desktop-integration" examples 6743320a12 dockerd-rootless.sh: allow specifying DOCKERD_ROOTLESS_ROOTLESSKIT_PORT_DRIVER c3acd082c7 TestUserNoEffectiveCapabilitiesNetBindService: conditionally set net.ipv4.ip_unprivileged_port_start ed89041433 test-integration: support cgroup2 87a7fc1ced Enable client on netbsd and dragonfly 87b8947580 TestDaemonDNSFallback: increase timeout to reduce flakiness 3e2965831f vendor: golang.org/x/text v0.3.3 5d97de47ec dockerd-rootless-setuptool.sh: use safer XRD on non-systemd hosts e07a88c95f fix code note when push all tags 9b28939345 vendor: update buildkit to df35e9818 66bb1c4644 pkg/sysinfo: use containerd/sys to detect UserNamespaces 9ff990a2b9 pkg/chrootarchive: use containerd/sys to detect UserNamespaces f7d5d70e44 pkg/archive: use containerd/sys to detect UserNamespaces 4534a7afc3 daemon: use containerd/sys to detect UserNamespaces 79cfcba76c cgroup2: unshare cgroupns by default regardless to API version 6fabb93f73 Make script pass shellcheck 56de0489fc int-cli/TestRunInvalidCPUShares: fix for newer runc d378625554 info: add warnings about missing blkio cgroup support 004fd7be92 Bump Golang 1.13.12 96556854a7 Fixes #41010 skip empty lines 687bdc7c71 API: swarm: move PidsLimit to TaskTemplate.Resources 2befe194af hack: remove useless constants 9b77370213 int/build/TestBuildWithEmptyLayers: prevent panic dae652e2e5 Add default sysctls to allow ping sockets and privileged ports with no capabilities a1afad3aab api/types: remove errdefs dependency f758d598c5 make install: install containerd-shim-runc-v2 7ad0da7051 remove group name from identity mapping 8cc8e26835 testing: bump docker-py 4.2.1 9a78e916ad integration: Add TestDaemonDNSFallback 83199187ef vendor libnetwork to 2e24aed516bd5c836e11378bb457dd612aa868ed b280ea114f hack: add more debugging to understand exit codepath a9569f5243 vendor: opencontainers/selinux v1.5.2 a366fe41cb fix "stat.Rdev" invalid operation mismatched types on mips64el compile error the "stat.Rdev" variable and "s.Rdev" mismatched types on mips64el convert "stat.Rdev" type to uint64 explicitly a5324d6950 Better selection of DNS server 288ed93dc5 daemon.allocateNetwork: include original error in logs 84ef60cba2 allocateNetwork: don't assign unneeded variables b98b8df886 allocateNetwork: fix network sandbox not cleaned up on failure d5da7e5330 pkg/sysinfo/sysinfo_linux.go: fix some comments f02a53d6b9 pkg/sysinfo.applyPIDSCgroupInfo: optimize 0c350e87a0 ldmode=pie is not supported for the mips arch reference: https://github.com/docker/cli/pull/2507 https://github.com/containerd/containerd/commit/4c99c81326f4026fb8c0b8c5e10542205d99c321 1192c7aee4 seccomp: remove the unused query_module(2) 2a331a5ef7 rm_test: fix goroutine leak 5ea5c02c88 Fix flakey test for log file rotate. 0154dc7a23 Using test names instead of hardcoded ones in integration/image directory 4cabad6bae Using test names instead of hardcoded ones in integration/container directory 6bc112abde Fixed small documentation typo ebd025b63a Using test names instead of hardcoded ones in integration/build directory 84748c7d4e API: split types for Resources Reservations and Limits a342010823 Dockerfile: bump CRIU 3.14 90758fb028 Bump Golang 1.13.11 aadc55c605 Dockerfile.windows: fix build of gotestsum 1d9da1b233 Fix bug in gotestsum installer causing dependencies to not be downloaded a36db14ce0 plugin: remove Rlock in resolvePluginID to fix double Rlock f48b7d66f3 Fix filter on expose and publish c696b95269 add dockerd-rootless-setuptool.sh fdb71e410c registry: fix mtls config dir passing a430bc5d5f builder-next: fix layer access bug 6a5e3547fb pkg/archive: escape ":" symbol in overlay lowerdir 9871b6e30e Fix TestSwarmManagerAddress to not depend on "pretty" format 17bb5f4b15 bump up rootlesskit to v0.9.5 49f8a4224c SELinux: fix ENOTSUP errors not being detected when relabeling 35bf4f87d9 Don't use ini() to set unpigz path 5fd3496e7a vendor: gorilla/mux v1.7.4 64bc9281de vendor: opencontainers/runtime-spec v1.0.2 71411e486d vendor: update containerd c80284d4b5291a351bb471bcdabb5c1d95e7a583 11feae7e59 vendor: containerd/ttrpc v1.0.1 5ed85b0909 vendor: bump containerd/typeurl v1.0.1 c86abee1a4 dockerd-rootless.sh: bump up slirp4netns requirement to v0.4.0 5d3a9e4319 seccomp: Whitelist `clock_adjtime` dc0a400738 vendor: spf13/cobra v1.0.0 69df2589cd vendor: spf13/pflag v1.0.5 11a5b1887e vendor: moby/term 73f35e472e8f0a3f91347164138ce6bd73b756a9 4ac17adcd3 vendor: golang.org/x/sys 85ca7c5b95cdf1e557abb38a283d1e61a5959c31 de7f0120fd Dockerfile: mount install scripts instead of copying d1a3a17c67 Dockerfile: remove "INSTALL_BINARY_NAME" envs 3989f91075 logfile: Check if log is closed on close error during rotate 25fd814652 vendor: golang.org/x/sys 5c8b2ff67527cb88b770f693cebf3799036d8bc0 d84ed625a7 vendor: add version comment for containerd/typeurl, ttrpc fa8199b453 vendor: add comment that containerd/console is v1.0.0 7608e42da5 Fix curl progress flags 08d3774304 vendor: Microsoft/hcsshim v0.8.9 a8216806ce vendor: opencontainers/selinux v1.5.1 e1e544c8c6 vendor: sirupsen/logrus v1.6.0 6168b875a4 Dockerfile.buildx: bump to Go 1.13.10 886c8385f5 containerd.installer: refactor 3b261d7709 swagger: reformat, and wrap to ~80-chars f85bea4ee7 Make binary: install all containerd shims to bundles a4400d328c Makefile: remove empty targets, and slight refactor 996be00fb9 vendor: sort imports to prevent vendoring race condition 84d7b57eb7 Dockerfile: update syntax to 1.1.7-experimental 8006a9d08c vendor konsorten/go-windows-terminal-sequences v1.0.3 90f19fc375 cmd/dockerd: remove outdated "experimental" annotation 07d60bc257 Replace errors.Cause() with errors.Is() / errors.As() b2af9e631c vendor: update moby/ipvs v1.0.1 f6ac841633 bump up rootlesskit to v0.9.4 841c1f3388 Remove blurb about fixed in go1.11 in patch file 7260adfff9 vendor: add local copy of archive/tar 5702a89db6 Use strings.Index instead of strings.Split 964731e1d3 Improve error feedback when plugin does not implement desired interface 4714ab5d6c cgroup2: use "systemd" cgroup driver by default when available 8312004f41 remove uses of deprecated pkg/term 41d4112e89 pkg/term: vendor moby/term and make pkg/term an alias 701b39f5f0 pkg/term: deprecate package in favor of moby/term 33ee7941d4 support `--privileged --cgroupns=private` on cgroup v1 c3808634e7 vendor: update libnetwork 1a17fb36132631a95fe6bb055b91e24a516ad81d f337a8d21d Do not require "experimental" for metrics API f350b53241 cgroup2: implement `docker info` ed096538e8 extract logic for resolving image/plugin digest and platform 2376ebd3f2 fix --cluster-store-opt deprecation annotation 10c748cd39 imageWithDigestString: return image unmodified if there are no changes 799bd475fb ServiceCreate/ServiceUpdate: refactor and fix potential NPE 7400375526 daemon: remove distribution/uuid package fbaaca6351 update containerd to v1.3.4 157c53c8e0 Add API support for PidsLimit on services a9d20916c3 swarm: fix API version detection cdc39fa29c integration/config: add check for removing non-existing config 1a7ffe4fe4 integration/secret: add check for empty list not producing an error 632cc7019a integration/config: remove check that was already done in TestConfigInspect 26f2eddaa3 integration/config: combine TestConfigCreateWithLabels with TestConfigsCreateAndDelete 3c4b258f21 integration/secret: don't string-match errors 18cae89436 integration/config: don't string-match errors 348f412d85 integration: sync minor changes between config and secret tests a45c89ecd1 integration/secret: fix TestSecretInspect not actually checking response 25424cf772 integration/config: move functions to be in line with "secret" tests 3c6f018f94 integration/secret: TestTemplatedSecret: simplify task code de78663181 integration/secret: rename variables that collided with imported package name dd67b4794e integration/config: TestTemplatedConfig: simplify task code ec78112edd integration/config: rename variables that collided with imported package name 0cdf6ba9c8 vendor: update buildkit to ae7ff174 eb14d936bf daemon: rename variables that collide with imported package names 797ec8e913 daemon: rename all receivers to "daemon" 5d040cbd16 daemon: fix capitalization of some functions eeef12f469 daemon: address some minor linting issues and nits ced91bee4b On startup, actually shutdown the container. e9d785ce3f enhance storage-opt validation logic in overlay2 driver f3c1eec99e add zombie check for container when killing it, alernative fix for #40735. 7cb13d4d85 Bump Golang 1.13.10 e9348898d3 api docs: fix broken link on GitHub 933a87236f Reduce allocations for logfile reader c44fb42377 swagger: clarify the meaning of Image field in ContainerInspect endpoint f2c432636b pkg/authorization: Fix test failures on macOS fe2aca0e39 Only check variant if set on image. 1026f873a4 seccomp: allow syscall membarrier 06ca1606e1 Fixed typo in inventor comments. d1304a8c74 Jenkinsfile: remove redundant DOCKER_EXPERIMENTAL 5ca47f5179 rootless: graduate from experimental 2b8ae08571 docs: add API versions v1.30 - v1.37 381c192027 Revert "vendor: update go.etcd.io/bbolt v1.3.4" dc089c22ce vendor: pkg/errors v0.9.1 e7183dbfe9 vendor: update go-events to fix alignment for 32bit systems bd8490c0de vendor: jmespath/go-jmespath v0.3.0 e5ca303cff vendor: add version comments for some dependencies 6ee9a1ad29 Bump Golang 1.13.9 5ad981640f builder: fix concurrent map write 7ac638f86a Add support to riscv64 to the build scripts 3e3cd7b255 Pin busybox to fixed version and verify sha256 97b742676b hack/ci/windows.ps1: build busybox from local Dockerfile 8164f298f9 vendor jhowardmsft/busybox 9688ca59b3 Rename newer build_shell target to build d7ba1f85ef Use containerd dist libs for plugin pull/pull 85dc0fb7d5 pkg/mount: make standalone golint happy 0d3b400ab5 LCOW: add "no_lcow" build tag to allow disabling lcow 3802830989 cgroup2: implement `docker stats` 745ed9686b pkg/idtools: fix use of bufio.Scanner.Err 5b658a0348 daemon.overlaySupportsSelinux: simplify check 3dd0262773 build Dockerfile allows arg for base build FROM f07f320651 vendor: update go.etcd.io/bbolt v1.3.4 ec16053ccf Fix UsageInUsermode value on Windows 1dbf34f3aa Bump swarmkit to ebe39a32e3ed4c3a3783a02c11cccf388818694c 89fabf0f24 seccomp: add 64-bit time_t syscalls 7a9cb29fb9 Accept platform spec on container create 99beb2ca02 pkg/mount: deprecate 39048cf656 Really switch to moby/sys/mount* 59c0495409 pkg/mount: make it shallow 75f7e435a2 vndr: vendor in github.com/moby/sys ea44be4b8f vendor: bump libnetwork ef149a924dfde2e506ea3cb3f617d7d0fa96b8ee 8dd1490473 Support reading multiple bytes in escapeProxy 5e1b246b9a test-integration: support more rootless tests f310bd29bd rootless: support forwarding signals from RootlessKit to dockerd 745fa04e52 service: support --mount type=bind,bind-nonrecursive e26e1cc5c1 vendor: vishvananda/netlink v1.1.0 6859bc7eee Move schema1 deprecation notice 25d6047ec0 unit test on TestParseSignal failed within pkg/signal package on mips64el error log : signal_test.go:20: assertion failed: error is not nil: Invalid signal: SIGEMT signal_test.go:22: assertion failed: When "ParseSignal" function parse sigStr from SignalMap, it find the signal object with key ("SIG"+sigStr). But EMT signal named "SIGEMT" in SignalMap structrue, so the real key is "SIGSIGEMT" , and cannot find the target signal. modify "SIGEMT" to "EMT" in SignalMap structrue. 1d08ccd4ff vendor: update fsnotify v1.4.9 93f3532f64 update VPNKit c239bbbcb2 Switch to s390x Ubuntu 18.04 6c0eb9e849 fix linting in pkg/mount 92e7f8f67c daemon: fail early if rootless && cgroupdriver == "systemd" && cgroup v1 b890c20555 pkg/archive: use mount pkg 83ed668688 pkg/mount.Mount: speedup (remove Mounted check) e36d222666 ci: update golangci-lint v1.23.8 d949fddc6c containerd.installer: install containerd-shim-runc-v2 5bf33adba2 hack: support $DOCKER_ROOTLESS for testing rootless 5bd02b8a86 pkg/mount.RecursiveUnmount(): don't call Mounted() f8dbc31b78 pkg/system.EnsureRemoveAll: don't call Mounted 2e0762ae44 Add TC for com.docker.network.host_ipv4 label 18c22f5bc1 fix backingFs assignment bd2e288e56 pkg/system: remove unused CommandLineToArgv a48c6e3005 pkg/symlink: don't depend on pkg/system and pkg/longpath f2d49cb7ee pkg/system: fix minor linting issues dec7a1befb pkg/system: simplify IsAbs() 079fb80657 pkg/system: replace more uses of "syscall" 70a4d886cd builder: fixPermissionsWindows(): use golang.org/x/sys/windows 3bba43b894 pkg/system: deprecate SetNamedSecurityInfo, GetSecurityDescriptorDacl 1ea3a2b7f5 rootless: launch rootlesskit with --propagation=rslave e1710b42d3 vendor: bump libnetwork bf2bd42abc0a3734f12b5ec724e571434e42c669 32e554e681 Remove "could not get checksum with tar-split" debug message 05ec12b082 Fix `make shell` ed033adb2c Builder: Check remote when local img platform doesn't match a3292263a3 integration: use systemd when $DOCKER_SYSTEMD is set 616e64b42f API: deprecate /info "ClusterStore" and "ClusterAdvertise" fields a5538c06f9 Add warning about deprecated "cluster" options to "docker info" abf2404642 hack/make.sh: remove extra empty lines 3cf82748dd run shfmt eb484fcb67 validate: add shfmt 3fbc41fe36 TestCgroupDriverSystemdMemoryLimit: fix failure 9a82a9a8ea vendor containerd, BuildKit, protobuf, grpc, and golang.org/x fdf42f7a59 Update Windows ico fa67cff34b vendor: update opencontainers/selinux v1.3.3 ce1ceeb257 Add stats options to not prime the stats 21e5decbaa vendor: update gotest.tools v3.0.2 c322af8019 test: add buffer to prevent goroutine leak 669056f93d pkg/system.getxattr: handle changed size case f508db4833 Update CRIU to v3.13 "Silicon Willet" 0ce3ab679c Add a TODO in the Dockerfile regarding nftables 8c0f6142a8 Update DNS library 83c0bedba9 daemon/cluster: add a missing Unlock 34837febc4 plugin: fix a double RLock bug e6281b1b3f Revert "Don't die when daemon cannot read certs.d" 33baa55353 vendor: update buildkit to d75ed2b68 6fdbc50084 docs: add API versions v1.25 - v1.29, v1.38 - v1.40 a6f99232f5 Always execute tests and skip in tests themselves 12c7541f1f vendor: update opencontainers/selinux v1.3.1 750f0d1648 Support configuration of log cacher. e2ceb83a53 Support reads for all log drivers. 1bf1941ac9 vendor: golang.org/x/crypto 1d94cc7ab1c630336ab82ccb9c9cda72a875c382 f7c4be86c6 fixed deprecation message 3f7503f98a Update Golang 1.13.8 af2a11f316 TestCatchAll, TestStopCatch: remove unneeded goroutine 79b130ac31 Revert "Fix containerutility compilation on gcc-mingw-w64 8.3" 5125f8b304 bump windows-container-utility aa1ba87e99b68e0113bd27ec26c60b88f9d4ccd9 addc0c809f Fix go-swagger to work with Go 1.14 ca4b51868a rootless: support `--exec-opt native.cgroupdriver=systemd` f282dde877 Fixes #33434 - API docs to specify using base64url 9f94cfdc57 Vendor check to succeed even if copyright information is not found 8a52139a0f Revert "Jenkinsfile: temporarily pin windows image to 10.0.17763.973" da6c1429d0 docker-py: skip flaky AttachContainerTest::test_attach_no_stream (again) 1470697b67 Deprecate '--cluster-xx' options and add warning fa2417984b Jenkinsfile: temporarily pin windows image to 10.0.17763.973 35d6c1870f enforce reserve internal labels. 562880b276 Fix more goimports 5a028d2736 docker-py: override default API version to run all tests 7270d7eb94 fix goimports f800d5f786 Set the bip network value as the subnet 008fc67974 Fluentd: add fluentd-request-ack option cc1f3c750e Fluentd: add fluentd-async option, deprecate fluentd-async-connect a1d4a081dd Fluentd: extract parsing config, and validate early 8bd4aedb02 Fluentd: sort consts alphabetically ad13a2a4ba Fluentd: return "invalid parameter" for invalid config options 9f0b3f5609 bump gotest.tools v3.0.1 for compatibility with Go 1.14 cc993a9cbf Exec inspect field should be "ID" not "ExecID" e55bff541e TestLoginFailsWithBadCredentials: prepare for Go 1.14 changes 6acfc42094 TestResumableRequestHeaderTooMuchFailures: prepare for Go 1.14 changes 4a1900915a API: remove deprecated "filter" parameter for API v1.41 and up 7418745001 new storage driver: fuse-overlayfs ed439e4a31 swagger: document "node.platform.(arch|os)" constraints 544c766d97 Fix typos e75e6b0e31 Use condition variable to wake stats collector. 486161a63a bump vndr v0.1.1 27649ee44f update containerd binary to v1.3.3 44a8e10bfc awslogs: Update aws-sdk-go to support IMDSv2 1cb4a60950 testing: bump docker-py to 4.2.0 82879e9a9c Add vpnkit back to binary targets f464c31668 Check tmpfs mounts before create anon volume 5dffe74df2 Fix windows cross builds. b606c8e440 vendor: update golang.org/x/crypto 69ecbb4d6d5dab05e49161c6e77ea40a030884e1 878db479be Update Golang 1.13.7 (CVE-2020-0601, CVE-2020-7919) fb155a1125 Fix leak related to service logs 6d68080907 update runc library to v1.0.0-rc10 (CVE-2019-19921) cd43c1d1ac update runc binary to v1.0.0-rc10 (CVE-2019-19921) 9bd1ae024a dockerd-rootless.sh: remove confusing code comment 92e809a680 Support host.docker.internal in dockerd on Linux c90254c746 Add George Washington Carver to name generator ac1d8bc760 Add Mae Jemison to name generator 4d249ae1f3 remove extra space in code comment in ping.go 572cb55c0e hack/make/.go-autogen: fix LDFLAGS to accept values with spaces d68385b861 Update Golang 1.13.6 e8122ed724 hack/make/.go-autogen: fix typo in LDFLAGS variable 4c407caada Bump libnetwork to latest refpoint fa291552d5 vendor: bump prometheus/client_golang v1.3.0 34a65cb3ba vendor: bump prometheus/client_golang v1.1.0 b2db7c8bc9 vendor: bump prometheus/client_golang v0.9.4, docker/go-metrics v0.0.1 12a83ac27e vendor: bump prometheus/procfs v0.0.8 54dc6f355b vendor: bump prometheus/common v0.7.0 9c99f8b9b3 vendor: bump prometheus/client_model v0.1.0 5511f45767 Remove vim syntax files 30d9fe30b1 Add swarm jobs bdad16b0ee Handle error case when fixed-cidr-ipv6 is empty 94a8c8b3c0 vendor: update fsutil 0f039a052ca1da01626278199624b62aed9b3729 67a0695e8b vendor: update containerd/continuity to 26c1120b8d4107d2471b93ad78ef7ce1fc84c4c4 5c73cacefc vendor: bump beorn7/perks v1.0.1 940a1292db vendor: bump google/shlex e7afc7fbc51079733e9468cdfd1efcd7d196cd1d 5a5ef3f7f2 vendor: add "v0.8.7" comment to Microsoft/hcsshim vendor aacb2960c9 update .dockerignore to prevent '-unsupported' builds 50f1e205e4 Dockerfile: use tmpfs for building registry, go-swagger 95a4702943 Dockerfile: also build old registry on armhf 339fb74cbc prevent panic if TINI_COMMIT isn't set during build d4f05c168d bump vndr v0.1.0 to support versioned import paths 02bc2769fb Add myself as a curator 25a1bf53d2 Fix containerutility compilation on gcc-mingw-w64 8.3 bb0472bd23 Dockerfile: switch to iptables-legacy to match the host 4e3ab9e9fb Dockerfile: switch golang image to "buster" variant, and update btrfs packages 5dbfae6949 hack/make: ignore failure to stop apparmor 07efe6a0a7 Bump swarmkit to 24fb4cfe8af56803640180c5592bf32da732ced2 9ae7196775 swagger: add missing container Health docs 1c16572fe6 registry: fix goimports 79c877cfa7 swagger: restore bind options information 8311d6ba9f API: omit classic swarm "SystemStatus" field if empty 78c86927ab api/types: document classic swarm "Node" field b5c22f4fcf TestContainerInspectNode: document test as being for classic swarm 234d5a78fe swagger: remove classic swarm "Node" field 7e0afd4934 swagger: move ContainerState to definitions f2b25e498f docker-py: skip broken ImageCollectionTest::test_pull_multiple 6bc45b09e7 docker-py: re-enable tests that were fixed in v4.1.0 86ebbe16de remove host directory check 491531c12b cgroup2: mark cpu-rt-{period,runtime} unimplemented 19baeaca26 cgroup2: enable cgroup namespace by default 409bbdc321 cgroup2: enable resource limitation 612343618d cgroup2: use shim V2 9177ac322a Fix output targets getting double nested. 9608dc5470 Document `message` parameter to `/images/create` a218e9b7b0 Update Golang 1.13.5 8d2e1ee546 Build and use gotestsum for running all tests d3c0261876 hack/validate/deprecate-integration-cli: add integration-cli/*_api_*.go 1f0fdcc6f5 hack/validate: clean-up output, move golang-ci-lint to end cd094422a7 Jenkinsfile: force validate steps on master and backports 545e81714b hack/validate: allow forcing validation 9dde8f2b46 hack/validate/deprecate-integration-cli: don't exit on success e21019fa51 hack/validate/default: fix minor linting issue c8ecedbde9 Revert "hack: temporarily disable deprecate-integration-cli" 658723badd rootless: fix proxying UDP packets ee5aa536d1 update vendor golang.org/x/sys to 6d18c012aee9febd81bbf9806760c8c4480e870d cbd37fbc9a integration-cli: re-enable TestRunAttachFailedNoLeak on RS3 56c5668068 Testcase: Change time comparison logic. d135dc242e client.ImagePush(): default to ":latest" instead of "all tags" 5bb4f4818b libcontainerd: move hcsshim import to windows-only file 7f809e1080 Update containerd to v1.3.2 35b9e6989f Make `--device` flag work in privileged mode 03b3ec1dd5 make --device works at privileged mode b1ffda5cea builder/remotecontext: allow ssh:// urls for remote context 04203d13fb api/server: build: refactor for better readability 9709f6b95e api/server: build: use locally scoped variables 20e3b5ba2c api/types: minor BuilderVersion refactor 4138cd22ab Fix possible runtime panic in Lgetxattr b682cda946 docs/rootless.md: move to https://docs.docker.com/engine/security/rootless/ 3aba8652ca update curators 3f3eb0ef10 Move Daniel to alumni 2c1c5aabd7 Move Aaron to alumni db5c9e632f Move Mickaël to alumni list e6d514dbab Add Dockerfile to .dockerignore 5f314c24fc Bind-mount context for Dockerfile build targets 79a52bb1ba Add support for outputing binaries to custom dir 675b414f56 Use -X ldflags to set dockerversion package vars ccb0b0a7cc binary targets do not need the dev environment e7718c41c3 Move Doug to alumni list 446fe7f263 Make sure that layers are removed from layerdb after succefull layer removal b7f931e170 registry: normalize comment formatting cbc9de0abe image: normalize comment formatting a567ae3c31 client: normalize comment formatting 2deeb6ad96 builder/remotecontext: normalize comment formatting d29f420424 libcontainerd: normalize comment formatting f4f56b1197 daemon: normalize comment formatting ec4bc83258 daemon/graphdriver: normalize comment formatting 6625fa6103 daemon/cluster: normalize comment formatting ba6bbca89a daemon/logger: normalize comment formatting 5331e6ab2d pkg/tailfile: normalize comment formatting b95fbe7630 pkg/signal: normalize comment formatting 1d97da61a2 pkg/progress: normalize comment formatting e2addf46bf pkg/mount: normalize comment formatting 0b155db389 pkg/jsonmessage: normalize comment formatting a45b3a92f6 pkg/idtools: normalize comment formatting 14cad10cea pkg/containerfs: normalize comment formatting 9de5d3da89 pkg/chrootarchive: normalize comment formatting ecb898dcb9 pkg/archive: normalize comment formatting 0fb5630784 pkg/system: normalize comment formatting 92ad849327 integration: normalize comment formatting c9b2a3cff5 api: normalize comment formatting 580d3677c8 integration-cli: normalize comment formatting 90aa0901da api/server/router: use consts for HTTP methods 9aa55d97e5 bump containerd/go-runc a2952bc25f5116103a8b78f3817f6df759aa7def a7b6c3f0bf Bump hcsshim to b3f49c06ffaeef24d09c6c08ec8ec8425a 6ee536b4a0 daemon: remove use of deprecated os.SEEK_END 0cc7ad0a7d distribution: remove use of deprecated os.SEEK_END c530c9cbb0 TestRunAttachFailedNoLeak: Compare lowercase f22ff19668 builder: remove use of deprecated pkg/system constants f572df7c22 pkg/system: deprecate constants in favor of golang.org/x/sys/windows 044b74e33b daemon: remove use of deprecated system.GetOSVersion() 81f9edc7b0 pkg/parsers: remove use of deprecated system.GetOSVersion() 33d8492ce4 pkg/system/windows: remove unnecessary conversions 4cdb796b54 pkg/system/windows: remove obsolete comment 5c6b913ff1 logger/gelf: Skip empty lines to comply with spec f4fa98f583 Use certs.d from XDG_CONFIG_HOME when in rootless mode 2808762b27 Don't die when daemon cannot read certs.d bbf1edae4f Allow client consumers like traefik to compile on illumos 517946eb47 Update containerd to v1.3.1 1308a3a99f Move DefaultCapabilities() to caps package e226aea280 overlay[2]: rm fs checks 83783af08e Disable tests missed by PR 40155 447a840254 Windows: Use system specific parallelism value on containers restart 36f6cc11a4 refactored integration/service/instead_test.go to ues unique resource names 649e4c8889 Fix/improve overlay support check d5687079ad overlay: move supportsMultipleLowerDir to utils 25c5a55261 Check for OS Type and skip within the test 9cf349d0f8 bump libnetwork 90afbb01e1d8acacb505a092744ea42b9f167377 f09dc2f4fc Fix docker crash when creating namespaces with UID in /etc/subuid and /etc/subgid 0c9b232bf5 Remove unused GlobalFlags b96a0c7754 Add daemon options required by buildkit tests 89c6febfc2 Dockerd won't start if a network with the default subnet prefix already exists in HNS. 86594739b0 builder/remotecontext: use net/url instead of urlutil 5a74a736a8 TestParseRemoteURL: use subtests 21dfcc730b builder-next: clear temp leases on startup f632e2d8d3 vendor: update containerd to acdcf13d5eaf0dfe0eaeabe7194a82535549bc2b 6186e9fe87 hack/make/.go-autogen: fix "generated code" comment not in correct format c511db70ed api/types: re-generate with new template 3df4f86f21 swagger: fix "generated code" comment not in correct format f14c9d4df5 builder-next: track layers and graphdrivers with leases fe16d95dcd builder-next: update adapters to new buildkit interfaces fb1601d5ab vendor: update buildkit to leases support ce931f28ea Windows: Only set VERSION_QUAD if unset 9a7e96b5b7 Rename "v1" to "statsV1" cf86eeaf96 Bump Golang 1.13.4 d6a91ca71c Rename DCO check param in Jenkinsfile 27552ceb15 bump containerd/cgroups 5fbad35c2a7e855762d3c60f2e474ffcad0d470a c057825cf5 Pass VERSION variable to binary build targets. e7d2d853f6 Make binary output targets use own build cmd a0a5ec4c6d Integration: skip TestInfoDebug on Windows d7bc994a08 awslogs & archive: prevent 2 goroutine leaks in test functions 5791019028 hack/validate/vendor: simplify looking for license 4be12ad3d0 hack/validate/vendor: shellcheck fixes 9d4e81e8bf hack/validate/vendor: print diff for modified files 5ce9df2a40 Update to runc v1.0.0-rc9 6233217a31 integration/internal/container: fix a goroutine leak bug by adding 1 buffer 49fbb9c985 registry: add a critical section to protect authTransport.modReq 9f73396dab daemon: add grpc.WithBlock option 7ef475fc16 pkg/homedir: clarify Get() docs wrt static linking 9d12bc2573 pkg/system: make OSVersion an alias for hcsshim OSVersion 0945a8807d integration-cli: goimports 80e338a18d Revert "homedir: add cgo or osusergo buildtag constraints for unix" 203ba72fc5 integration-cli: Fix `SA1019: httputil.ClientConn is deprecated` 86b3703182 Deprecate pkg/system.GetOSVersion() in favor of hcsshim/osversion.Get() 6b91ceff74 Use hcsshim osversion package for Windows versions a5341aaf32 bump Microsoft/hcsshim 2226e083fc390003ae5aa8325c3c92789afa0e7a 3ddb4100a0 integration-cli: remove redundant logs from cp utils 267a0294a7 integration-cli: cleanup: mark helpers as helpers, use assertion ab9c726fc4 integration-cli: TestContainersAPICreateMountsValidation: use subtests 9ca5ffd5f7 integration-cli: TestContainersAPICreateMountsCreate: use subtests 69c4a4f4a2 integration-cli: make TestServiceLogs less noisy ec4a34ae2f integration-cli: migrate some "info" tests to integration 7eb804c934 make buildx: update to buildx v0.3.1 b6ae3c2058 make buildx: use multi-stage to make tagged image smaller a602ecf8fb make buildx: clean-up comment and fix help-text 9638d1a4fb make buildx: remove BUILDX_DOCKERFILE make var 37fe68f5d6 make buildx: make version in Dockerfile leading 365b3aee2d make buildx: fix Makefile version being ignored ce28a91cca make buildx: fix variable substitution and version c110283004 Jenkinsfile: use buildx on s390x and ppc64le 39ad39d220 bump google.golang.org/grpc v1.23.1 7c5fd83c22 Jenkinsfile: set repo and branch for DCO check as well 9d726f1c18 Add GoDoc to fix linting validation 1be272ef76 Windows: disable flaky test TestStartReturnCorrectExitCode 18a97ee981 integration-cli: use subtests for TestSwarmNetworkCreateDup e7805653b8 Fix TEST_FILTER to work for both "integration" and "integration-cli" 56230f4d37 testutil: no more "Creating a new daemon at" 060e55d7dd integration-cli: mark some test-helpers as helpers ddb64c14e1 fixed typo, changed "perfectd to perfected" bbf82b2e53 testutil: daemon.Info() close client after request 635584280b Bump Golang 1.13.3 (CVE-2019-17596) 1741d669b3 daemon: suppress logs in unit tests 9cb9c6eba4 bump golangci-lint v1.20.0 a06d7f5a3e golangci-lint: include all enabled linters in config 086b4541cf golangci-lint: disable default exclusion rules fe3c14d5ba golangci-lint: fix "golint" not ignoring generated files 47502344b9 golangci-lint: update exclusion rules for todo's 4840fd8953 pkg/mount: SA4011: ineffective break statement (staticcheck) af3bbcc00c aufs: SA4011: did you mean to break out of the outer loop? (staticcheck) 6d9c219c54 daemon: S1033: unnecessary guard around call to delete (gosimple) cba180cac9 graphdriver/btrfs: SA4003: no value of type uint64 is less than 0 (staticcheck) 04fcb6cfbf pkg/jsonmessage: fix SA1006: printf-style function with no arguments 1f7beb8594 daemon/events/testutils: remove redundant variable 5f47cef514 fix nolint comments for SA1019: filters.ToParamWithVersion is deprecated ec1fd4b1b0 distribution: SA4021: x = append(y) is equivalent to x = y (staticcheck) 94647b5d86 graphdriver/aufs: SA4021: x = append(y) is equivalent to x = y (staticcheck) 301a2fbeca builder/dockerfile/mockbackend_test.go: suppress SA9005 (staticcheck) 05469b5fa2 daemon: add "isWindows" const 1fab7c6457 bump Graylog2/go-gelf to 1550ee647df0510058c9d67a45c56f18911d80b8 95ea6e7069 Export the LogT type and use it in the options bef73d8b07 Wait for c8d process exit instead of polling API 58a6faab4c daemon/top_unix_test: cleanup test cases and use subtests 2030daf2ee TestParseInitVersion: add some additional tests df7b8f458a daemon: Use short libnetwork ID in exec-root & update libnetwork f36042d259 Add support for sending down service Running and Desired task counts 717575b585 daemon: make supportsSeccomp a const a33cf495f2 daemon: use constants for AppArmor profiles aa655a4d73 pkg/plugins: use constants for http methods 5ba167ce8a pkg/authorization: use constants for http methods 9c590ed5c5 daemon/logger/splunk: use constants for http methods 984d5bc30c builder-next: use constants for http status codes 3b84875216 builder-next: use constants for http methods 63e62d13a0 registry: use constants for http status codes 441b031bda registry: use constants for http methods d1817b6135 client: use constants for http status codes dabc7cdb56 client: use constants for http methods 93100adb69 api/server: use constants for http methods a617809fe7 testutil: use constants for http methods 23b6b5a9ae integration-cli: use constants for http methods 9ed58987ce integration: use constants for http methods de10c7d013 client: reduce string-matching in tests e76dea157e docs/rootless.md: update e443512ce4 Use ocischema package instead of custom handler 93edf327dc Dockerfile: align consecutive COPY lines 8edbe5dec2 Dockerfile: order COPY lines by change frequency ee0ef6c535 Dockerfile: sort packages alphabetically 1cfcce5e21 Dockerfile: use build-arg for vpnkit a42b4144bc Dockerfile: use spaces for indentation 293c1a27a2 testutil/daemon: remove redundant d.cmd.Wait() c56bfdf10a testutil/daemon: always remove pidfile after daemon is stopped f6842327b0 testutil/daemon: print all arguments when failing to start daemon b843b1ffe3 testutil/daemon: store pidfile-path, and ignore errors when removing 22662cac57 testutil/daemon: wrap errors 2b3957d0b1 testutil/daemon: prefix all logs with daemon-id 1fe7a9552c testutil/daemon: daemon.Cleanup(): unmount daemon root-dir as part of cleanup 9407a57522 hack/make: don't attempt to unmount non-existing daemon root-dir 3b49bd1d84 replaced call to deprecated grpc method WithDialer with WithContextDialer 095ca77f48 Use build args to override binary commits in dockerfile 1c82d11908 Fix trick for `make BINDDIR=. shell` and `COPY .` 8a3e8ac017 TestDaemonEvents: use is.Contains() for easier debugging 0e0ab58a96 integration-cli: in TestDaemonEvents* use ioutil.WriteFile 24a419221d integration-cli: TestDaemonEvents*: don't rely on CLI output format 6afe0f38f6 integration-cli: make testRequires() a Helper 1be2cc2568 Makefile: force using buildkit if USE_BUILDX is not set 93f9b902af go-swagger: fix panic e5bfaf19b1 Fix `make cross` target eda98ad00f Jenkinsfile: aarch64: use new labels to select agents a0d670e516 Jenkinsfile: aarch64: sync with latest changes 14ea1f62eb Jenkinsfile: aarch64: don't restrict to packet workers only 9d5361de3f Jenkinsfile: rename aarch64 to arm64 58d57c76b5 Jenkinsfile: aarch64: split into stages, add "print info" unit-tests 86e0c5a0d4 Jenkinsfile: aarch64: sync stage with other stages 402c7b1b27 Jenkinsfile: aarch64: move stage inside parallel group 48b06a2561 Tailor CI for ARM, skip legacy integration test. af86580000 Test to enable CI on aarch64. 318e279fd8 integration-cli: TestDockerNetworkConnectLinkLocalIP return on failure 7450f89f6c integration-cli: TestUserDefinedNetworkConnectDisconnectAlias return on failure 8663d09334 devmapper: fix unit test d5f07220fc integration-cli: DockerSwarmSuite: show output on failures bef0aca449 Jenkinsfile: fix typo buidx -> buildx bb5650619e bump gorilla/mux v1.7.3 38418287f7 bump olang/gddo 72a348e765d293ed6d1ded7b699591f14d6cd921 e5dce0f8c5 bump creack/pty v1.1.9 61a2b7ac94 bump gofrs/flock v0.7.1 9bd1b1a8ec bump imdario/mergo v0.3.8 7dee71e02f bump mattn/go-shellwords v1.0.6 9fac44028e bump logrus v1.4.2 82097c0f1f bump hashicorp/golang-lru v0.5.3 bc5484d2dd bump moby/buildkit f7042823e340d38d1746aa675b83d1aca431cee3 0b5dcdc5d7 bump containerd/fifo bda0ff6ed73c67bfb5e62bc9c697f146b7fd7f13 56357b73da bump containerd/continuity f2a389ac0a02ce21c09edd7344677a601970f41c 0af1099a81 bump containerd/cgroups c4b9ac5c7601384c965b9646fc515884e091ebb9 1617be92d3 bump containerd/go-runc e029b79d8cda8374981c64eba71f28ec38e5526f 12f9887c8e bump containerd v1.3.0 6c94a50f41 update containerd binary v1.3.0 c04ea1133d Jenkinsfile: Z/Power: use buildx 833444c0d6 Use buildx as Makefile builder 82c56755ea Buildkit-optimized dockerfile ac51b18339 Re-run vndr to fix master 7019b60d0d Jenkinsfile: set repo and branch, to assist validate_diff() 35ac4be5d5 add NewContainerOpts to libcontainerd.Create 5a703ccb46 bump docker-py to 4.1.0 85733620eb daemon/config: add MarshalJSON for future proofing fbdd437d29 daemon/config: fix filter type in BuildKit GC config 6ca3ec88ae builder: remove legacy build's session handling c3a0a37446 Use newer x/sys/windows SecurityAttributes struct 4e0836f01b bump golang.org/x/sys c990c680b611ac1aeb7d8f2af94a825f98d69720 97aa82d2c7 integration-cli: prevent out of range in TestEventsContainerEvents 48353e16fe Temporarily switch docker-py to "master" 6756f5f378 API: update docs that /session left experimental in V1.39 23457f05a9 Update mailmap and authors f60d6ee4bc testutil: update WithInitsignature to be a daemon.Option 554d9cec25 testutil: update WithExperimental signature to be a daemon.Option ce2e8e37d0 testutil: update WithTestLogger to use daemon.Option as return type 279ddb31ef testutil: update WithStorageDriver to use daemon.Option as return type 404d87ec69 AppArmor: add missing rules for running in userns 5c891ea9ca integration-cli: fix DockerNetworkSuite not being run f4c172e6b9 integration-cli: fix golint (copy/paste whoops) 5aebd69857 testutil: fix WithExperimental also setting "init" 8498ee7514 Fix pkg/pools staticcheck SA6002 a07a1220ad jhowardmsft --> lowenna 05a0621fd0 Re-group vendor.conf deps to reflect reality ac0ab114a2 bump runc vendor v1.0.0-rc8-92-g84373aaa bc9a7ec898 update runc to v1.0.0-rc8-92-g84373aaa (CVE-2019-16884) 8eb23cde95 bump golang 1.13.1 (CVE-2019-16276) c4ec02b0af Update containerd to v1.2.10 023b072288 homedir: add cgo or osusergo buildtag constraints for unix 8107d44852 Fix Engine API version history typo e553a03627 AppArmor: remove rules for linkgraph.db SQLite database 5175ed54e5 hack/ci/windows.ps1 update references to repositories that were moved 83fd212f2c Dockerfile.windows: update references to repositories that were moved b323c6e9ae Jenkinsfile: update references to repositories that were moved 8b7bbf180f builder entitlements configutation added. 8988448729 Remove refs to jhowardmsft from .go code cb2a36a89c Add ability to handle index acknowledgment with splunk log driver 0f0e3163b5 daemon/info: remove use of docker/go-connections f3d8b8ae74 Jenkinsfile: move integration step cleanup to amd64 where it was intended to be c21a3cf432 Add variant to image.Image and legacy builder 77d3c68f97 Remove minsky and stallman ae0a878b86 testutil, integration: untangle image dependency a8608b5b67 homedir: remove idtools and libcontainer's user package dependencies a5f237c2b5 Use FILE_SHARE_DELETE for log files on Windows. 51ca8081d8 testutil: use testing.TB instead of assert.TestingT 0d4ffa3588 Remove some uses of testutil.HelperT d79cc1b67d testing: remove custom testingT interfaces 3e4f6225da testutil: remove unneeded namer, testname interfaces 074eca1d79 Use fewer modprobes 9cd24ba605 logger: fix follow logs for max-file=1 fd94bae0b8 awslogs: fix flaky TestLogBlocking unit test 75477f0b3c bump libnetwork to 96bcc0dae898308ed659c5095526788a602f4726 04d9e157b2 testutil/daemon: add NewDaemon without testingT a57fd5488d Fix base.Dial is deprecated: Use DialContext instead 5b7347c312 integration-cli: run goimports 7de4e13089 Disable TestPsListContainersFilterExited (Windows) 4866207543 Zap a fixed folder, add build number to folder inside 78d137dd23 integration-cli: add more debugging for TestSwarmClusterRotateUnlockKey ce61a1ed98 Adding ability to change max download attempts 851b000641 integration-cli: enable golangci-lint 6397dd4d31 integration-cli: fix golint issues f470698c2c Jenkinsfile: ensure all containers are cleaned up 23ab331979 Removed deprecated CloseNotifier logic f1c1cd436a integration-cli: move each test suite to its own TestX testing function 84928be605 hack: have integration-cli use gotestsum codepath 41adef29f5 testutil/daemon: group options under type 5f67568bfd Revert "Revert "hack: temporarily disable deprecate-integration-cli"" 6f0dfe44eb golangci-lint: suppress remaining deprecation errors for now (staticcheck) df7d719e4c golangci-lint: suppress Xattrs is deprecated: Use PAXRecords instead f41712c4be golangci-lint: enable misspell, tweak configuration c9553897f3 golangci-lint: enable gosec linter d1363f5a90 golangci-lint: set correct build-tags to lint journald if supported 85b89c9e50 Replace gometalinter with golangci-lint e92e0d358a TestPollerEvent: fix filemode (staticcheck) 5358c95a76 TestGraphdriverPluginV2: SA5001: should check returned error before deferring (staticcheck) fd65fed81b client/hijack: suppress SA1019: httputil.ErrPersistEOF is deprecated (staticcheck) 90c372bb2c cmd/dockerd: explicitly ignore unchecked errors (errcheck) 805452a59a pkg/devicemapper ignore SA4000 false positive (staticcheck) 9faf565453 pkg/devicemapper: disable unused and varcheck linters 4a3ee04351 oci: fix SA4009: argument e is overwritten before first use (staticcheck) bd7180fcf9 cluster/controllers/plugin: remove unused Controller.taskID (unused) 101ff26eb5 misspell: fix some spelling issues e34c081354 builder-next: explicitely ignore unhandled errors (errcheck) 4e621a34ac api/server: explicitly ignore unhandled errors (errcheck) 6ff727b13c TestWalkValues: add missing error-check (errcheck) 3926b5f09d structcheck: nolint for false positives 9419024554 gosec: add ignore comments for reported issues that can be ignored 9c701fdb6b logger/journald: U1000: field `mu` is unused (unused) 323ac07901 pkg/containerfs: rename output variable to prevent shadowing (govet) d78b667af6 govet: suppress warning about Parent field that repeated json tag "parent" ac827a7fff builder-next/patchImageConfig: nitpicks 21c2f0e656 distribution/xfer/download_test: rm unused field 7b6201f032 daemon/logger/BenchmarkCopy: don't call t.Fatal from a goroutine 33c205be4f TestTransfer*: don't call t.Fatal from a goroutine 739b7b44aa pkg/term/windows: add missing build-tag 4215492120 pkg/ioutils use sha256 instead of sha1 in tests 27916165b6 TestUlimitOpt: fix composite literal uses unkeyed fields (govet) 2c31edbbb6 unconvert: remove unnescessary conversions 3a16c7246a pkg/signal: remove unnescessary conversion (unconvert) a46ad5e704 Builder: remove unused field a7942baf76 Use io.SeekStart instead of os.SEEK_SET 04129678a6 jsonfilelog_test: check err from open before close 7b0e0335bc Fix some inefassign warnings 5c11740abb registry/newV1EndpointFromStr: rm dead code 7b85ed613d plugin/setupNewPlugin: rm dead code d8f2b47432 TestDisplayJSONMessagesStreamInvalidJSON: fix error check 365a63a573 daemon/graphdriver/copy: rm dead code 58ac4bd938 daemon/checkpoint: rm extra checks 3ef7f7c650 daemon/monitor: rm redundant if 6392e765ac client: remove put() d584242236 client: suppress filters.ToParamWithVersion lint warning d8ec1ee57d builder/copy-unix: fix filepath.Walk args b5695b8663 pkg/term/term_linux_test: check returned error before deferring tty.Close() (staticcheck) 0507c358d9 API: explicitely ignore unhandled errors 744f1c261c Remove unused functions, variables, fields bca161d7cb runconfig/config_test.go: remove unused test-utilities d948306255 integration: remove unused constants and fields (unused) ad95c6315d volume/local fix file permissions 4b13f69882 integration/network: remove unuset setupTest() 4a37dcab48 Fix and re-enable TestDockerNetworkMacvlan/MultiSubnet 6aadd436a9 integration-cli: TestBuildAddBadLinks, TestBuildAddBadLinksVolume: simplify check cbc3cfe101 integration-cli: TestAttachMultipleAndRestart: don't call t.Fatal from a goroutine a2f16b0ad3 integration-cli: S1025: the argument is already a string (gosimple) 5bba06e082 integration-cli: SA5001: should check returned error before deferring reg.Close() (staticcheck) 40b3edc81e integration-cli: fix TestPushMultipleTags 43ea03002f integration-cli: remove unused types and fields 7c40c0a922 integration-cli: remove unnescessary conversions (unconvert) 417eac47a0 integration-cli: fix minor linting issues 67e4d36e46 integration-cli: remove unused functions and enable disabled tests a0d58b2248 integration-cli: use raw strings for regexes (gosimple) fdc1b22030 integration-cli: fix incorrect permissions (staticcheck) b639f933e1 integration-cli: fix capitalization of variables and errors (golint) 07ff4f1de8 goimports: fix imports 56e690f340 cluster/executor: remove unused containerConfig.endpoint() c2532d56b0 volume Create: fix incorrect file permissions (staticcheck) f6f58f3858 daemon.getEndpointInNetwork() is only used on Windows e334eeeed8 TestMoveToSubdir: use sort.Strings() (gosimple) ab599b5cdc pkg/pools/pools.go: suppress SA6002: argument should be pointer-like for now 178af761b7 TestParseRelease: fix missing assert 41cfcac7fc DriverBenchDiffApplyN: ignore empty branch (staticcheck) 5ded7886c3 daemon/cluster: fix unused context (staticcheck) 8695176d11 daemon/seccomp_linux.go: fix error-capitalization (golint) ac9ef840ef integration-cli: update TestCreateWithWorkdir for Hyper-V isolation 0620990307 hack/test/unit: fix custom TESTFLAGS not working 667c87ef4f profiles: Fix file permissions on json files 1a96cf95ca Parse runtime name 4ab1e808d1 Change version parsing to support alternate runtimes 64b3d12686 Jenkinsfile: remove redundant -f Dockerfile e653943e8b run integration-cli stages on s390x and ppc64le if not a PR check 039eb05ac8 skip win-RS1 on PRs unless the checkbox is checked 647dfe99a5 distribution: modify warning logic when pulling v2 schema1 manifests b469933b06 integration-cli/requirements: Skip windows specific isolation requirements on non-windows 88c554f950 DaemonCli: Move check into startMetricsServer a44d90cdd4 integration-cli: update comments referencing waitAndAssert() 548623b758 Use unique names in integration/service/plugin_test.go 32f1c65162 TestBuildSquashParent: fix non-standard comparisson dbde4786e4 integration-cli: fix some bashism's in Dockerfiles 38e4ae3bca Bump Golang version 1.13.0 961119db21 Dockerfile: set GO111MODULE=off d723643dc3 Jenkinsfile: add TESTDEBUG f007b0150a integration: improve package- and filename for junit.xml d2e00d62e2 integration: test2json: enable timestamps to fix zero-time test durations f3be6b346f integration: use gotestsum to generate junit.xml and go-test-report.json fcd65ebf49 Fix more signal handling issues in tests. 5adaf52953 integration-cli: Skip TestAPIImagesSaveAndLoad on RS3 and older 3262a69be6 integration: simplify parallel run destination 0fabf3e41e integration-cli: remove unneeded fmt.Sprintf() in asserts a9aeda8343 Rename some references to docker.exe to dockerd.exe f2498e21c4 hack/make: remove autogen resources for Docker CLI b37c214e3c testutil: make testing packages public 89dd10b06e archive: fix race condition in cmdStream a3f9cb5b63 TestDispatch: refactor to use subtests again, and fix linting (structcheck) a464a3d51f Dockerfile: remove GOMETALINTER_OPTS ead3f4e7c8 integration-cli: add daemon.StartNodeWithBusybox function 8fc23588f1 integration-cli: swarm.RestartNode(); don't load busybox again 422067ba7b Return "invalid parameter" when linking to non-existing container 01332b54e0 Revert "hack: temporarily disable deprecate-integration-cli" ecf91f0d7f Move GOPATH out from under the GO source tree 7663aebc12 pkg/parsers/kernel: gofmt hex value (preparation for Go 1.13+) 61450a651b hack/ci/windows.ps1: fix Go version check (due to trailing .0) c18f793f40 Jenkinsfile: shorten stage names for consistency and to fit Jenkins UI 231ed42cab integration-cli: remove TestingT d32e6bbde8 suite: put suite setup inside test run 6c75c86240 Windows: skip flaky TestLogBlocking cc01289792 intgration-cli: fix formatting 8eb9f3f90e integration-cli: fix pollCheck bad6f3bf73 integration-cli: have helper functions use testing.Helper() 8bffe9524d remove per-test -timeout logic because it does not work beadc92e07 hack: temporarily disable deprecate-integration-cli 7cd028f2d0 hack: update scripts 7491db3e92 Update Jenkinsfile 925e407c7b cleanup 8b40da168b Setup tests fd0ed80ff2 internal/test/suite 3aa4ff64aa vendor: remove vdemeester/shakers and go-check/check 9843c2f12c remove rm-gocheck.go and templates 649201dc44 remove waitAndAssert and type casts 40f1950e8e fix remaining issues with checker.Not ac2f24e72a waitAndAssert -> poll.WaitOn 42599f1cad prepare for eg on waitAndAssert 318b1612e1 fix remaining compile issues 64de5e8228 rm-gocheck: fix compile errors from converting check.CommentInterface to string 7813dfe9d7 rm-gocheck: goimports 3a24472c8e rm-gocheck: check.CommentInterface -> string 6e5cf532af rm-gocheck: convert check.Commentf to string - other 6135eec30a rm-gocheck: convert check.Commentf to string - with just one string a2024a5470 rm-gocheck: convert check.Commentf to string - with multiple args 98f2638fe5 rm-gocheck: Contains -> strings.Contains 4e2e486b23 rm-gocheck: Not(Contains) -> !strings.Contains f2c9e391fc rm-gocheck: Matches -> cmp.Regexp 59e55dcdd0 rm-gocheck: run goimports to compile successfully eb67bb9fb5 rm-gocheck: comment out check.TestingT 81d2a0c389 rm-gocheck: comment out check.Suite calls 6a8a9738ec rm-gocheck: redress check.Suite calls d0fc8d082d rm-gocheck: True b17bb1e74a rm-gocheck: False 64a161aa3e rm-gocheck: NotNil 2743e2d8bc rm-gocheck: IsNil 491ef7b901 rm-gocheck: HasLen -> assert.Equal + len() dd9d28669f rm-gocheck: DeepEquals -> assert.DeepEqual 6dc7f4c167 rm-gocheck: Equals -> assert.Equal 10208e4d60 rm-gocheck: Not(Matches) -> !cmp.Regexp 0fa116fa8f rm-gocheck: Not(Equals) -> a != b 74747b35e1 rm-gocheck: Not(IsNil) -> != nil 230f7bcc02 rm-gocheck: normalize to use checker a7d144fb34 rm-gocheck: ErrorMatches -> assert.ErrorContains 1d92789b4f rm-gocheck: check.C -> testing.T 6ecff64d03 rm-gocheck: check.C -> testing.B for BenchmarkXXX 1f69c62540 rm-gocheck: c.Assert(...) -> assert.Assert(c, ...) 36e7001b99 rm-gocheck: redress multiline c.Assert calls 5879446de9 rm-gocheck: normalize c.Check to c.Assert 8f64611c83 add rm-gocheck.go script and eg templates 931edfe5e9 prepare for rm-gocheck script e07a3f2917 integration-cli: fix tests that are silently succeeding when they should not compile e6c5563ae9 Fix Service TTY test so signal handlers work f874f8b6fd integration: TestInspect(): use swarm.RunningTasksCount e1636ad5fa hack/ci/windows.ps1: stop tailing logs after stopping the daemon b6f596c411 hack/ci/windows.ps1: add support for DOCKER_STORAGE_OPTS f4d41f1dfa seccomp: whitelist io-uring related system calls 57ade2652a Narrow dependencies of pkg/system 7eb522a235 hack/ci/windows.ps1 print all environment variables to check how Jenkins runs this script 8e8c52c4ab hack/ci/windows.ps1: explicitly set exit code to result of tests 9ef9a337f6 Update containerd to v1.2.9 ebf12dbda0 Reimplement iteration over fileInfos in getOrphan. 651d146fa4 Poule: remove random assign 2816ec7b00 Remove unused router swapper 7aeb3efcb4 Use unix.Uname instead of shelling out to uname on darwin/freebsd 85bcc524ea Jenkinsfile hack for auto-cancellation. 1fbadd76b7 Jenkinsfile: Windows: enabled debug-mode for daemon under test 6ee61f5493 Jenkinsfile: create bundles for Windows stages 492945c2d5 bump hashicorp/go-sockaddr v1.0.2 720b66ee1f bump hashicorp/go-multierror v1.0.0, add errwrap v1.0.0 bab58c1924 bump lib network to 92d1fbe1eb0883cf11d283cea8e658275146411d e128f17508 Rename variable for consistency 6e5a304675 container.ConfigFilePath: use same signature on Windows 2e0cafb01b awslogs: refactor create() ef2872132d awslogs: replace deprecated session.New() with session.NewSession() 54d021ef8f awslogs: remove unused eventBuffer update 02c9b0674f integration-cli: getContainerCount() fix trimming prefix e6fce00ec8 TestCase: use `icmd.RunCmd` instead `icmd.StartCmd` ce77a804b8 docker-py: skip flaky AttachContainerTest::test_attach_no_stream 6751718196 Remove *_solaris.go files e20b7323fb rootless: harden slirp4netns with mount namespace and seccomp 186e22d26e include IPv6 address of linked containers in /etc/hosts 70d3677825 hack/make/binary-daemon: fix some linting issues 52a53e2587 Fix docker inspect for dutimgVersion 156ad54fb7 windows.ps1: fix leaked NdisAdapters not being cleaned up on RS1 1250e42a43 daemon:containerStart() fix unhandled error for saveApparmorConfig e4605cc2a5 Add sigprocmask to default seccomp profile fa29ff2212 Fix compiling pkg/parsers/operatingsystem on unix ea65f0bca2 Fix getting the operating system on Darwin 7b4b940470 /containers/{id}/json missing Platform 9134130b39 Remove `SystemInfo()` error handling. 8769255d1b bump containerd/ttrpc 92c8520ef9f86600c650dd540266a007bf03670f f1cd79976a bump google.golang.org/grpc v1.23.0 31885181fc integration: windows.ps1: turn defender error into a warning 7e8f7efdd1 fix build after merge of outdated PR ca1e7a3b4a Jenkinsfile: fix invalid expression in bundles script db2bc43017 Use correct `LOOP_CTL_GET_FREE` API in `pkg/loopback` 556d26c07d pkg/term: refactor TestEscapeProxyRead d185ca78ec Replace libprotobuf-c0-dev with libprotobuf-c-dev a76ff632a4 Jenkinsfile: don't mark build failed when failing to create bundles 8b65e058be Jenkinsfile: use wildcards for artifacts, and don't fail on missing ones 917b0dcd3d hack/make: fix some linting issues reported by shellcheck dde1fd78c7 hack/make.sh remove "latest" symlink f8f6f7c2a0 cleanup: remove SetDead function 4d09fab232 Update service networks documentation 530f2d65c3 Explicity set Cgroup NS mode to "host" when running privileged 96f6c81ab7 Change TestCgroupNamespacesRunPrivileged requirement 1264a85303 Update containerd to v1.2.8 2841b05b71 Use Klogctl from x/sys/unix to read Linux kernel log e551e5a73d Use UtimesNano from x/sys/unix to implement LUtimesNano 919d08347a Use loopback types and constants from x/sys/unix to implement pkg/loopback without cgo 27f1f2b5be builder-next: close progress on layer export error d495eeb365 builder-next: update mount signature 52ed97c5c1 vendor: update buildkit to 588c73e1e4 477bf1e413 Fix overlay2 busy error on mount ca3e230b77 Use new windows labels 1a5dafb31e Improve readability of Windows connect error c266d8fe56 Fix testcase name bc8118b31f bump x/sys to fix riscv64 epoll ad70bf6866 Dockerfile: add python3-wheel back again (for yamllint) d3f64846a2 fix docker rmi stucking 19a3ddf8bb mkimage-yum.sh: Fix install of additional packages 2c2cd9b86a builder-next: close build context upload on cancel 9c94e8260a Fix phrasing when referring to the freezer cgroup 01d6a56699 Bump Golang 1.12.9 9ea2cf320a builder-next: avoid double unmounting mountable 9c5f3adbf5 add options.NoLchown option to createTar call b146b2382c Fixups for 39695 - edit comments, redundant lines a65dee30fc Move defer method to the top right after New is called e59b26087f vendor: update buildkit to v0.6.1 8b6da9d82f Jenkinsfile: save docker-py artifacts 4ddb40ee8a Jenkinsfile: build dynamic binary for docker-py, to match makefile 5969bbee79 docker-py: output junit.xml for test-results 535e29da05 docker-py: use --mount for bind-mounting docker.sock b04cbf1072 docker-py: run without tty to disable color output 0b3d201892 docker-py: fix linting issues reported by shellcheck 00ad0222ce Dockerfile: update CRIU to v3.12 f3a3ea0d3c Fix flaky TestServiceWithDefaultAddressPoolInit 683766613a Adjust tests for changes in Go 1.12.8 / 1.11.13 73b0e4c589 Bump golang 1.12.8 (CVE-2019-9512, CVE-2019-9514) d6f7909c76 Jenkinsfile: run DCO check before everything else e2f5b78e78 Jenkinsfile: collect junit.xml for all architectures 7f9328ad2e Jenkinsfile: send junit.xml in the stage that produced it f6226a2a56 fix some spelling mistakes eb30f0ad84 fix bundles filenames in Jenkinsfile ad29f9e471 rename powerpc bundles in Jenkinsfile a049ea1a93 rename z bundles in Jenkinsfile 0cfc1ec2bd be more lenient on junit report gathering in Jenkinsfile 4e2f39cf14 use environment for z jobs in Jenkinsfile 3564b03fbc use environment for power jobs in Jenkinsfile bf70a5975d set timeouts in Jenkinsfile to 2 hrs bdc1c1a02a add z-master stage to Jenkinsfile c2f9d58375 add powerpc-master stage to Jenkinsfile e554fb23c8 Jenkinsfile: reduce time of integration tests by dividing tests into 3 parallel runs 13df617d4c hack: unmount leftover daemon root folders 251c8dca28 Jenkinsfile: move static and cross compilation to unit-validate stage 2ff9ac4de5 Dockerfile: use DEBIAN_FRONTEND=noninteractive 8660330173 Unit test for getOrphan 6f5c377ddc docker-py: skip PullImageTest::test_pull_invalid_platform b283dff3ff Jenkinsfile: avoid errors from find e856b46cfb Jenkinsfile: remove "experimental" stage a43123cab1 Consistently use DOCKER_EXPERIMENTAL=1 instead or =y f8cde0b32d docker-py: deselect broken experimental tests 1ea8b413d1 initBridgeDriver: minor cleanup and linting fixes 4d5b6260bc Fix regression in handling of NotFound err during startup 5858a99267 Builder: fix "COPY --from" to non-existing directory on Windows e554ab5589 Allow system.MkDirAll() to be used as drop-in for os.MkDirAll() 6ae46aeabf make.ps1: Run-IntegrationTests(): set working directory for test suite 35fe16b7eb Update Microsoft/go-winio v0.4.14 e2b24490e4 Improve integration test detecetor 13ea237234 devicemapper: remove unused errors 5b2f8e9103 devicemapper: remove unused task.setRo() c60e53a274 vendor: update buildkit to f5a55a95 1a2bd3cf7d builder-next: ensure timestamps set for metadata commands e665263b10 daemon: Remove btrfs_noversion build flag 53cbf1797b daemon/ProcessEvent: make sure to cancel the contexts b5e5cac0f5 Set locale to fix yamlllint 73c1dae86d zfs: fix incorrect permissions (staticcheck) 58b0585cd2 fix client.HTTPClient() not returning a copy b0835dd088 Dockerfile: use --no-install-recommends for all stages ad28fec1c9 Jenkinsfile: move docker-py to separate stage 1e8ede514e Jenkinsfile: inline experimental, power, z steps, and split Unit test f411be2072 Jenkinsfile: inline janky steps, and move validate to separate stage 47ac8a97de Jenkinsfile: remove .git mount in stages that don't use it f814e04652 Jenkinsfile: consistent indentation and order of env-vars 0634816c0c Jenkinsfile: remove unused GIT_SHA1 env-var efacee1cdd Jenkinsfile: move building e2e image to "unit-vendor" stage 781e79d1fa Jenkinsfile: extract DOCKER_GRAPHDRIVER as environment variable c75d7e0e22 Jenkinsfile: use overlay2 for Power and s390x as well a2ad56dfad Jenkinsfile: run check-config.sh to print system configuration 6523ced950 Jenkinsfile: remove ip_vs modprobe for unit/vendor stage f2e09afff4 Jenkinsfile: standardize cointainer names and fix s390x cleanup f51c139792 Jenkinsfile: combine "vendor" and "unit tests" be0e6e9d34 Jenkinsfile: use GIT_COMMIT from Git plugin instead of manually 13064b155e Add support for setting a test filter 355bcf6d48 Jenkinsfile: disable buildkit on power and s390x 3897796548 Jenkinsfile: Add "info" step to all stages b04c769d65 Jenkinsfile: split some shell steps 9f0e10fe24 Jenkinsfile: busybox is multi-arch 337d03a5f0 Jenkinsfile: remove arch-specific suffixes from names a0bf935f9c Jenkinsfile: run "make clean" in cleanup step 79713d8d07 Jenkinsfile: use sub-stages to describe steps f648964875 Jenkinsfile: set DOCKER_BUILDKIT globally a28f2a2338 Jenkinsfile: set APT_MIRROR globally 61fd8b7384 Jenkinsfile: remove check for arch-specific Dockerfiles 722d582c92 Jenkinsfile: remove build --rm, because it's the default a95f16ca28 Jenkinsfile: consistently indent with 4 spaces 20a0e58a79 journald/read: fix/unify errors dd4bfe30a8 journald: fix for --tail 0 b73fb8fd5d journald/read: avoid piling up open files f091febc94 journald/read: simplify/fix followJournal() 981c01665b Call sd_journal_get_fd() earlier, only if needed 79039720c8 journald/read: avoid being blocked on send ff3cd167ea journald/read: simplify walking backwards e8f6166791 journald/read: simplify code 1ada3e85bf Small journal cleanup 2cffe9be3d hack: fix mixed tabs/spaces for indentation 060f387c0b Fix "no such file or directory" warning when unmounting IPC mount 1ac0a66a64 projectquota: protect concurrent map access 5f0231bca1 cast Dev and Rdev of Stat_t to uint64 for mips 42f0a0db75 run unit tests and generate junit report abece9b562 Improvements to the test runners 53e0c50126 Avoid a data race in container/health.go b1723b3721 Dockerfile: add back yamllint 438c7eb606 Added information regarding our new Jenkins ci on moby/moby 6f234db9fe bump libnetwork to 09cdcc8c0eab3946c2d70e8f6225b05baf1e90d1 0595c01718 switch kr/pty to creack/pty v1.1.7 b79adac339 Fix TestSwarmClusterRotateUnlockKey 0ecd6ab30f ADDED changes to integrate with our new Jenkins ci a316b10dab Initialize nss libraries in Glibc so that the dynamic libraries are loaded in the host environment not in the chroot from untrusted files. f5cd8fdd44 hack: Remove inContainer check, it wasn't useful ccfaf1ed92 use overlay2 for janky and experimental checks 9d98458fb7 remove DOCKER_EXECDRIVER from Jenkinsfile b0fe0dff7a Better logging for swarm tests 1381956499 Add `FromClient` to test env execution 790da6c223 Set TIMEOUT according to os/arch. d6cbeee470 Add extra permission check in removal test aac6e62209 added hack/ci/master as entry point for master codeline checks 651e694508 Prevent panic on network attach c5bd6e3dc7 Dockerfile.windows: trim .0 from Go versions ed672bb523 Pin Dockerfile to -stretch variant 4fa57a8191 Windows: fix Golang version checks for GO_VERSION build-arg eeaa0b30d4 Skip TestHealthKillContainer on Windows 7f37d99ef5 integration-cli: remove redundant "testrequires" a557538770 TESTING.md: document GO_VERSION c6281bc438 Dockerfile: use GO_VERSION build-arg for overriding Go version f6b1f01de3 Remove hack MalformedHostHeaderOverride 1de914695b Retry service updates on out of sequence errors 8c9362857f integration-cli: increase healthcheck timeout becd29c665 integration: run build session tests on non-experimental a5c420ac54 Be more conservative for Windows in TestFrequency for Splunk 096a7afd37 vendor: update swarmkit to 7dded76ec 52e0dfef90 integration-cli: allow temporary no-leader error 3df1095bbd integration-cli: allow temporary errors on leader switch 0a1947cb9f spaces to tabs 3d1850d10d integration-cli: also run Docker Hub search tests on Windows 2ac55d5c9a TestSearchWithLimit: slight refactor and improve boundary checks 85d6fb888c TestSearchStarsOptionWithWrongParameter: remove checks for deprecated flags b38c71bfe0 TestSearchCmdOptions: remove checks for deprecated flags a78b9a3726 TestSearchCmdOptions: remove cli-only checks 1be7065e99 Revert "Remove TestSearchCmdOptions test" 3c701e4db1 imporve hardcoded CC on cross compile af2e82d054 atomic: patch 64bit alignment on 32bit systems c222c5ac6f allow running of single integration test 6aafe0fd9e WIP Move docker-py tests first again 78405559cf Check for BRIDGE_VLAN_FILTERING in overlay section 980f2813b4 docker-py: skip flaky tests 3c15cea650 docker-py: use host-network for nested build of docker-py ba8f4c7994 docker-py: don't build --quiet is TESTDEBUG is set 968345bc5c Makefile: Allow passing DOCKER_TEST_HOST and TESTDEBUG to container 7bfe48cc00 Bump docker-py to 4.0.2, and run tests from upstream repository c8f43b5f6f Dockerfile: Use APT_MIRROR for security.debian.org as well 9d1b4f5fc3 Add regression tests for invalid platform status codes 4a516215e2 errdefs: convert containerd errors to the correct status code bd5c5373f1 Remove Codecov 32f4fdfb5c errdefs: remove unneeded recursive calls 0aa167d0df Update CONTRIBUTING.md to have an option to keep name anonymous if requested 88578aa9e9 TestServiceWithDefaultAddressPoolInit cf315bedc5 Fix indentation in some description f8aef6a92f Move kill health test to integration da574f9343 do not stop health check before sending signal 763454e1e4 Remove unused pkg/system.IsIoTCore() bad0b4e604 Remove skip evaluation of symlinks to data root on IoT Core 316e16618f Integration: MACVlan add missing import comment and build-tag 691eb14256 Integration: remove redundant kernel version check for MACVlan 6a64a4deec integration: fix cleanup of raft data d470252e87 daemon: don't listen on the same address multiple times c096225e8e DockerSwarmSuite lock portIndex to work around race 5d818213ff Fix Microsecond -> Milisecond. 1acaf2aabe Sleep before restarting event processing 15675e28f1 Don't log test initial test daemon ping failures f75f34249b Fix "Removing bundles/" not actually removing bundles 92e6e7dd5f Cleanup "address" when connecting over a UNIX socket c7816c5323 Harden TestClientWithRequestTimeout 9b5e78888d integration: organize bundle directory per test 24ad2f486d Add (hidden) flags to set containerd namespaces 54e30a62d3 Propagate GetContainer error from event processor 7725b88edc Ensure parent dir exists for mount cleanup file 4060a7026c Integration: exclude IPVlan test-suite on Windows 93b28677bf Integration: IPVlan add missing import comment dae9bac675 Integration: remove "experimental" option for IPVLAN test-daemons 1e4bd2623a Integration: remove unneeded platform check for IPVLAN tests 34f4729bc0 rootless: allow exposing dockerd TCP socket easily dbb5da7fcd dockerd: update reload signal comment 3afdc46314 fix swagger.yaml #39484 7d9126e149 ContainerStats: return early on unsupported API versions 65177a72c5 Use MemAvailable instead of MemFree to estimate actual available memory a1cdd4bfcc build: buildkit now honors daemon's DNS config f8a0f26843 DebugRequestMiddleware: Remove path handling 73db8c77bf DebugRequestMiddleware: unconditionally scrub data field ebb542b3f8 TestMaskSecretKeys: use subtests 18dac2cf32 TestMaskSecretKeys: add more test-cases aafdb63f21 Bump Golang 1.12.7 2f9e62611e Enhance container detection on some corner cases. c887b09abc integration-cli: remove unused requirements utils 27f432ca57 integration-cli: remove defaultSleepImage constant 7204341950 integration-cli: remove ExecSupport check ee09f5a4af Don't try to load plugin without name 34d5b8867f Add realChroot for non linux/windows b94218560e Skip TestServiceRemoveKeepsIngressNetwork 402433a5e4 Improve select for daemon restart tests 6ddd43b589 Make `ErrorResponse` implement `Error` 8be39cd277 Remove cocky from names-generator c2479f6ebf Fixed the inconsistence and also a potential data race in pkg/ioutils/bytespipe.go: bp.closeErr is read/write 8 times; 7 out of 8 times it is protected by bp.mu.Lock(); 1 out of 8 times it is read without a Lock 0bdcc60c4c builder-next: reset identitymapping if empty 9eaab0425b Update modules to support riscv64 14bd416d0e vendor: containerd to 7c1e88399 0a3c9b935c bump vndr to f5ab8fc5f, and revendor c08d4da6e5 Send exec exit event on failures 330bf32971 Update to using alpine 3.10 344b093258 bump libnetwork. vishvananda/netlink 1.0, vishvananda/netns e01bf76964 bump libseccomp-golang v0.9.1 b5f28865ef Handle blocked I/O of exec'd processes 6f9cdd6c73 Improve description for cpu-rt-period,runtime daemon flags 53430f5fc1 Add info OSVersion to API changelog. 3e6a13ccb8 LCOW: fix using wrong shell for healthchecks 25b451e01b bump gorilla/mux v1.7.2 0d496e3d71 profiles/seccomp: improve profile conversion a9026e0e3f Revert "validate: temporarily disable deprecate-integration-cli as part of a revert" ba8a15694a Use functions from x/sys/unix to get number of CPUs on Linux 1d792e6bba Update SECURITY.md to have an option to keep name anonymous if requested. 3f1cdd5364 validate: temporarily disable deprecate-integration-cli as part of a revert d35f8f4329 Add deprecation message for schema1 f923321aae Add test for keeping same daemon ID on upgrade 53dad9f027 Remove v1 manifest code f695e98cb7 Revert "Remove the rest of v1 manifest support" 0811297608 use gotest.tools assertions in docker_cli_push_test.go f23a51a860 Revert "Remove Schema1 integration test suite" 0a9842a705 Create SECURITY.md for GitHub security policy page a77e147d32 For ipvlan tests check that the ipvlan module is enabled (instead of just ensuring the kernel version is greater than 4.2) d5669ec1c6 Update containerd to v1.2.7 7410f1a859 pkg/archive: keep walkRoot clean if source is / a84a78e976 Fix more grpc list message sizes 171538c190 daemon: fix docker cp when container source is / 02f1eb89a4 add more tests 6db9f1c3d6 Add test for copying entire container rootfs 50c6a5fb07 Fix rate limiting for logger, increase refill rate a281289515 integration: get tests to compile again 6f446d041b Bump Golang 1.12.6 5c484890e0 vendor: update buildkit to c2427506 07b3aac902 builder-next: userns remap support 2f22247cad Enable integrations API tests for Windows CI 35069de3fd Re-align proxy commit with libnetwork vendor dac5710b68 integration: change testGraphDriver signature to fix linting 123e29f44a integration: change createAmbiguousNetworks signature to fix linting 9f9b4290b9 integration: change container.Run signature to fix linting b4c46b0dac integration: change container.Create signature to fix linting caec45a37f integration: change network.CreateNoError signature to fix linting 2df693e533 Entropy cannot be saved d363a1881e Adding OS version info to the nodes' `Info` struct cf104d85c3 stats: avoid cgo in collector 230a55d337 copy: allow non-cgo build 186cd7cf4a quota: add noncgo build tag 213681b66a First step to implement full garbage collector for image layers 915acffdb4 Harden TestPsListContainersFilterExited a4f828cb89 fix: fix lack of copyUIDGID in swagger.yaml 293c74ba79 Windows: Don't attempt detach VHD for R/O layers 8ff4ec98cf build: buildkit now also uses systemd's resolv.conf 539e72f75b Fix typo retreive -> retrieve 1ba4e69601 shellcheck a1ec8551ab Fix seccomp profile for clone syscall 85bbbd4495 vendor: update buildkit to 37d53758 b1e6536ceb Set DOCKER_BINDDIR mount options from env 6104eb1ae2 build: fix panic when exporting to tar 16e04da4cb Move cgroup info changes to API v1.40 5020edca76 Revert "aufs: remove mntL" 3029e765e2 Add chroot for tar packing operations d089b63937 Pass root to chroot to for chroot Untar a0903e1fa3 Increase max recv gRPC message size for nodes and secrets c4628d79d2 Stop sorting uid and gid ranges in id maps ca5aab19b4 rootless: update `docker info` docs 153466ba0a info: report cgroup driver as "none" when running rootless e7fbe8e457 hack: remove integration-cli-on-swarm 61815f6763 Windows CI - Corrected LOCALAPPDATA location c7d9599e3d Revert docker/swarmkit#2804 57f06409b1 aufs: retry unmount on EBUSY 8abf26dbfb Change docker socket location to /run/docker.sock 14280fdc62 Fix to gofmt/goimports errors f787b235de Add support capabilities list on services 72ceac6a74 graphdriver.Mounted(): ignore ENOENT 67e25ec5ac Bump swarmkit vendoring 70fa7b6a3f Network not deleted after stack is removed e2989c4d48 aufs: remove mntL 4898f493d8 Update docs to remove restriction of tty resize 32b5d296ea API: Move "x-nullable: true" from type PortBinding to type PortMap d5f6bdb027 API: Change type of RemotrAddrs to array of strings in operation SwarmJoin ebcef28834 Fix error handling for bind mount spec parser. a3fcd4b82a Add alias for hostname if hostname != container name which happens if user manually specify hostname 21e662c774 Remove TestSearchCmdOptions test c030885e7a Windows: fix error-type for starting a running container 4bd8964b23 Update TestRunWithDaemonDefaultSeccompProfile for ARM64 75a59c6588 Enable DNS Lookups for CIFS Volumes ae431b10a9 aufs: retry auplink flush 8fda12c607 aufs.Cleanup: optimize d58c434bff aufs: optimize lots of layers case 5cd62852fa aufs: add lock around mount 5873768dbe aufs: aufsMount: better errors for unix.Mount() 4beee98026 aufs: use mount.Unmount f93750b2c4 aufs: remove extra locking af433dd200 layer: protect from same-name races b4e9b50765 layer/CreateRWLayerByGraphID: remove b4247b433e builder-next: support DOCKER_RAMDISK fa6f63e79b API: Set format of body parameter in operation PutContainerArchive to "binary" a66ddd8ab8 bump libnetwork 5ac07abef4eee176423fdc1b870d435258e2d381 4f80a1953d int-cli/TestSearchCmdOptions: fail earlier d7de1a8b9f explicitly set filesystem type for mount to avoid 'invalid argument' error on arm b9f31912de bugfix: fetch the right device number which great than 255 34cc5c24d0 dockerd-rootless.sh: use exec 00c92a6719 bump up rootlesskit to v0.4.1 20b11792e8 LCOW: Fix FROM scratch 15419d7ba0 Consider WINDOWS_BASE_IMAGE_TAG override when setting Windows base image for tests 91a57f3e7f builder-next: call stopprogress on download error a3cbd53ed2 vendor: update buildkit to f238f1ef 28ad54d84f bump google.golang.org/grpc v1.20.1 7bacd1d6dc Move CgroupnsMode feature to API v1.41 771fc7e7f8 Bump API version to v1.41 8c8457b0f2 client: do not fallback to GET if HEAD on _ping fail to connect 6205fcf60d Correct copy paste mistage in pkg/mount/mountinfo_freebsd.go that caused compile errors. 05250a4f00 layer: optimize layerStore mountL 7546322e99 Ensure all integration daemon logging happens before test exit 8a60a1e14a Switch swarmmode services to NanoCpu cfce0acd33 builder-next: fix gcr workaround token cache 072400fc4b Make cgroup namespaces configurable 256eb04d69 Start containers in their own cgroup namespaces 680d0ba4ab Remove a network during task SHUTDOWN instead of REMOVE to make sure the LB sandbox is removed when a service is updated with a --network-rm option 3a4c5b6a0d Bump Golang 1.12.5 343413425c Update .DEREK.yml f73b5cb4e8 layer: protect mountedLayer.references 595987fd08 Add log entries for daemon startup/shutdown 20ea8942b8 Optimize test daemon startup 31e8fcc678 Change Forbidden Error (403) to Conflict(409) c3b24944ca Dockerfile.e2e: fix DOCKER_GITCOMMIT handling 74e3edc7d1 Updated mkimage-arch.sh * reset umask to 022 * introduced PKGREQUIRED * introduced PKGREMOVE - to be able to remove linux etc on Parabola GNU/Linux * updated PKGIGNORE - cryptsetup & device-mapper removed to not break the installation - added not required packages * force link /etc/localtime * install pacman-mirrorlist a31a088665 Remove DiskQouta field. 0deb18ab42 Dockerfile.e2e: copy test sources 2467cb4eda Update AUTHORS and mailmap d6d2b30fd2 bump golang.org/x/crypto 88737f569e3a9c7ab309cdc09a07fe7fc87233c3 5d51ac544b bump gogo/googleapis v1.2.0 647f31b7d0 bump gogo/protobuf v1.2.1 3d7d8a579f bump containerd/console 0650fd9eeb50bab4fc99dceb9f2e14cf58f36e7f 25e6487fc2 bump containerd 3a3f0aac8819165839a41fee77a4f4ac8b103097 447cbff50a bump containerd/continuity aaeac12a7ffcd198ae25440a9dff125c2e2703a7 3e4723cf33 bump buildkit v0.5.0 871acb1c86 Gracefully take care of the error case when a container retries to attach to a network, it is already connected to 1ada1c8391 TestIpcModeOlderClient: skip if client < 1.40 0d453115fe bump opencontainers/selinux v1.2.2 4bc310c11b bump runc binary v1.0.0-rc8 6df6fe6020 bump runc vendor v1.0.0-rc8 b6d2d12e42 Updates daemon's remove link method to use more verbose error output. 794e8111b6 add ApplyDiff to RWLayer 63a66b0eb0 rootless: optional support for lxc-user-nic SUID binary 3518383ed9 dockerd: fix rootless detection (alternative to #39024) 83ac2b4c13 Skip TestImagesFilterMultiReference on API < v1.40 05bd9958f2 Skip TestUUIDGeneration on API < v1.40 d080a866cc Skip TestPingCacheHeaders on API < v1.40 0e7b46aafe Skip TestBuildWithEmptyDockerfile on API < v1.40 566eea13e6 Fix TestVolumesCreateAndList when running against a shared daemon 2b5880c2eb Remove TestContainerAPICreateWithHostName c91c3776ea Skip TestNISDomainname on API < 1.40 b73e3407e3 Dockerfile.e2e: builder: change output directory to simplify copy 3ededb850f Dockerfile.e2e: move "contrib" to a separate build-stage e7784a6c7e Dockerfile.e2e: move dockercli to a separate build-stage 045beed6c8 Dockerfile.e2e: use /build to be consistent with main Dockerfile 63aefbfbca Dockerfile.e2e: re-order steps for caching 5554bd1a7b Dockerfile.e2e: move frozen-images to a separate stage 20262688df Dockerfile.e2e: use alpine 3.9 e1f0f77bf4 Revendor go-winio b36455258f apparmor: allow readby and tracedby 48fd0e921c Dockerfile.e2e fix TestBuildPreserveOwnership 93886fcc5a Add "import" statement to generated API types 1cfdb2ffb8 TestContainersAPICreateMountsCreate: minor optimization ec248fe61d pkg/mount/Make*: optimize a6773f69f2 daemon/mountVolumes(): eliminate MakeRPrivate call 4e65b17ac4 daemon/mountVolumes: no need to specify fstype 80fce834ad pkg/mount: Mount: minor optimization aa60541877 pkg/mount: MakeMount: minor optimization fca5ee3bd5 Support environment vars in Swarm plugins services eaad3ee3cf Make sure timers are stopped after use. bc709991b3 Use a regex to match labels 28e93ed8ca Allow socket activation And the following cli commits: 3c87f01b1 Ignore SIGURG on Linux. 48d30b5b3 Use golang.org/x/sys/execabs 5941f4104 vendor docker, docker-credential-helpers and golang/sys for execabs package 18f33b337 context: Add tarball e2e tests 9ecc69d17 context: Ensure context name is valid on import 6f49197ca context: Ensure import paths are valid 5e430753f Fix link to docker build with squash experiment 4d6bc775b Fix container creation time in test/builders 47ecb13fe vendor: github.com/docker/docker v20.10.1 a2b4d9c74 vendor: github.com/moby/buildkit v0.8.1 fa3e0bcda Help link: remove color, add "bold" style, and white-space 29bd82ba1 generate-man.sh: Only build md2man if it's not installed 06c60dea9 Deprecation: add pulling from non-compliant registries to table aa91af81c Add deprecation note for non-compliant registries c54aec5c8 vendor: BuildKit v0.8.0 aae8d2dfd vendor: github.com/docker/docker cf31b9622ae9de4b5fb7a1c9456460980ab80281 345564319 docs: un-wrap line to prevent YAML docs from using "compact" formatting 9f9c4b7f3 Remove k8s.io/kubernetes dependency 40ec81a79 build: display [auth] output 9a0a071d5 vendor: buildkit v0.8.0-rc2, docker 4cab568ab vendor: github.com/moby/term bea5bbe245bf407372d477f1361d2ff042d2f556 f8a406011 vendor: containerd 0edc412565dcc6e3d6125ff9e4b009ad4b89c638 53471faac vendor: github.com/containerd/cgroups 0b889c03f102012f1d93a97ddd3ef71cd6f4f510 2c694b323 vendor: github.com/opentracing/opentracing-go v1.2.0 74d93d1fa vendor: github.com/tonistiigi/fsutil 0834f99b7b85462efb69b4f571a4fa3ca7da5ac9 0e96d9256 vendor: golang.org/x/crypto c1f2f97bffc9c53fc40a1a28a5b460094c0050d9 d7697f9c7 AdditionalHelpMessage set in command annotations, removed env var check 0ec9e434e Additional help message is displayed in cyan 2369d9d12 Do not display help link if env var “DOCKER_HIDE_HELP_GUIDES” is set dbd65f92c Display additional help message pointing to docs.docker.com guides. Will display when user types `docker help` or `docker --help`, but not for `docker run --help`. dc287b907 Long format for flag -w --workdir 64776dd72 added ip6tables to daemon CLI and config file doc e3d93058f build: remove PersistentPreRunE hack for experimental --platform 96e69c376 vendor: github.com/Microsoft/go-winio v0.4.15 c318ec8a3 vendor: update docker/docker and moby/sys 164954043 Always enable experimental features in bash completion ae5899e2b cli/command/container/stats.go: fix goimports c94f2d20b docs/builder: fix broken link 3d84db96b Remove really outdated zsh-completion REVIEWERS file 8258fc905 Add "--containerd-namespace" daemon flags in completion and docs 184e5feb7 Use consistent formatting and sorted keys in all JSON examples for dockerd reference e08a44157 docs/builder: fix typo 1f4beebd7 vendor: github.com/containerd/console v1.0.1 32d8f358d vendor: github.com/moby/term 7f0af18e79f2784809e9cef63d0df5aa2c79d76e 4b47aed2c vendor: github.com/creack/pty v1.1.11 ef0ac7f7e vendor: github.com/docker/docker c2cc352355d4c26be60be8ea3a1acfddc20fdfd3 7ab12bf96 vendor: github.com/fvbommel/sortorder v1.0.2 f32731f90 GetDefaultAuthConfig: fix potential panic due to unhandled error 6a02a51c9 docs: remove some references to obsolete docker versions 715073668 Deprecation: add experimental docker build --stream option a40beedcc builder: print deprecation warning instead of failing for --stream 5cd19d1fe opts: fix potential integer overflow CWE-190, CWE-681 aa4cb2473 Replace deprecated instruction 857f5856f handle sigterm on running a plugin b981f2454 vendor: cloud.google.com/go v0.44.3 f5670e106 vendor: opencontainers/go-digest v1.0.0 ceffcc527 vendor: github.com/gofrs/flock v0.7.3 15c928eae vendor: docker/docker 73dc6a680cdd48f2f993f1a1b91aac1dd23d47c8 b46ef4659 man-pages: fix missing manual title in heading 74d45bbf6 vendor: github.com/spf13/cobra v1.1.1 5355f2f63 Update man-page source MarkDown to work with go-md2man v2 faac84e35 Deprecate Linux containers on Windows (LCOW) (experimental) 8328ee196 Bump vndr v0.1.2 ee4192364 docs: update 20.03 -> 20.10 in docker update docs 6c0a3dfbf docs: update 20.03 -> 20.10 in deprecated.md 06c1f784d Update version to 20.10-dev 53e2110fa Wait on waitgroup instead of using time.Sleep 7baac8c14 feat: allow ssh flag arguments 3fe574b7e docs: fix broken links in build reference 977d3ae04 Always enable experimental features e6ef3349f update docs usage output to match new format 7f3717bd2 Replace tab with spaces in usage output d9c36c287 cli: print experimental message in usage output de8b696ed docs/deprecated: remove minor versions 48822564b docs: deprecate CLI options for experimental CLI features c2225ad12 docs: add /go/experimental/ vanity URL 0d11ef305 GH Actions: run CodeQL only on cron-job, not on pull requests 3f19902ea Config-file: remove User-Agent from config.json when saving c8e3ddc76 Add CodeQL Analysis workflow (again) 2d6b5e8ab vendor: sirupsen/logrus v1.7.0 2484a3053 docs: fix generated YAML due to trailing whitespace 54bbd782b docs: update URL for security landing page 2b1138c11 Fix initializing client modifying custom HTTPHeaders bcb2a4c92 docs: fix "docker logs" example missing container name 7ecf320e1 Fix make -f docker.Makefile without buildkit enabled eec671011 deprecate Dockerfile legacy 'ENV name value' syntax 0eb3cfd26 Add test-case for env with, and without = a4a3d2f94 builder: add note about alternative syntax 0a0037c6f builder: rephrase ENV section, remove examples for ENV key value without '=' b4eb07904 Fix buildkit flags not being hidden without buildkit enabled e7203bf81 Fix 2 typos Consecutive occurrences of 'the' 33ecbbdda vendor: github.com/containerd/containerd v1.4.1 00b72960d vendor: docker/docker 7f7e4abb331a2973cfb3223710cc35a3e476b1b3 bd8948761 Fix typo 6065dccc9 Add docs and bash-completion for new Linux capabilities f19e31afe docs: add link to linux kernel source code for capabilities 72a357858 docs: resize capabilities table 5b035964c Bash-completion: add CAP_AUDIT_READ 884a5ffbd docs: document CAP_AUDIT_READ 4e58c2951 docs: document optional "CAP_" prefix for capabilities 5bbdcd1c9 docs: sort list of capabilities alphabetically 185d71262 Subcommand `docker manifest rm` b4db7e38b docs/build: add note about git subdirectories with BuildKit 1e864920a Improve bash completion for ulimits 57326f5e6 CircleCI: update to docker 19.03.12 940907951 Support ulimits in docker stack deploy a9158bdc5 Add ulimits option to docker service create/update/inspect 866e4b10a opts/UlimitOpt: sort lists by name 23660be60 Service cap-add/cap-drop: add special "RESET" value 7edc00d80 vendor: buildkit 4d1f260e8490ec438ab66e08bb105577aca0ce06 ed339fa5c vendor: update prometheus deps to match docker/docker 338e83837 vendor: github.com/golang/protobuf v1.3.5 038cc46f8 vendor: github.com/containerd/cgroups 318312a373405e5e91134d8063d04d59768a1bff 9968ccafe vendor: github.com/containerd/containerd v1.4.0-rc.1 546809278 vendor: opencontainers/runc v1.0.0-rc92 dbe2f594e vendor: golang.org/x/sys ed371f2e16b4b305ee99df548828de367527b76b e70e75605 vendor golang.org/x/net v0.0.0-20200707034311-ab3426394381 1c3a97b0f vendor golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9 9f0658fb0 vendor: github.com/gorilla/mux v1.8.0 47980a7e4 vendor: github.com/docker/docker f50a40e889fdaeebf14fce1d494f95e60092d21d 0bb70223b vendor: github.com/docker/swarmkit d6592ddefd8a5319aadff74c558b816b1a0b2590 95037299c Service cap-add/cap-drop: handle updates as "tri-state" 190c64b41 Service cap-add/cap-drop: improve handling of combinations and special "ALL" value c6ec4e081 service: Add --cap-add & --cap-drop to service cmds 0db61ff6d stack: Support cap_add and cap_drop on services 01cd748eb Dockerfile: use experimental syntax and buildkit cache-mounts 3aee35037 Makefile: use --mount instead of -v for docker socket ab72cc923 Dockerfile: use bash as default command, remove DOCKER_CLI_SHELL 7c66213f8 Dockerfile: build gotestsum from source 01d6d2e7a Dockerfile: refactor to use multi-stage build 015cb9884 Complete capabilites with and without "CAP_" prefix. 8df7a9364 man/docker-build.1:fix --memory-swamp and --network, removing = between long-form opts and values dace8fdc7 formatter: reduce minimum width for columns in table-view b951b5b8c formatter: minor refactor to reduce needless conversions 83eda5313 opts: simplify ValidateEnv to use os.LookupEnv 33510e0a6 vendor: bump github.com/fvbommel/sortorder v1.0.1 0b8f46b06 Dockerfile: fix dynbinary inside dev container 6703919c7 Replace vbom.ml/util with fvbommel/sortorder 560ef7346 Update .dockerignore 43bc71889 Dockerfiles: update shellcheck v0.7.1 9a071a993 Return zero exit-code when force-removing non-existing containers 288326da1 Fix Auto complete options available: 231597527 Bump Golang 1.13.15 0b7147a2a fix docs, completion and docker service 9a41d99a8 Update authors and mailmap 2fc608cea Fix order of processing of some xx-add/xx-rm service update flags 86cbe2851 Replaces ADD with COPY in the COPY section 3c0a167ed document deprecation of legacy `~/.dockercfg` config-file e531875ff support emulated version detection 21da11c5f docker service inspect fails when TaskTemplate.Resources is nil 097d57314 vendor: update docker/docker 0f41a77c6993ade605a639fb25994cfe5e1b3fe8 293e239e1 vendor: update containerd/continuity efbc4488d8fe1bdc16bde3b2d2990d9b3a899165 79b4d93c1 vendor: update tonistiigi/fsutil ae3a8d753069d0f76fbee396457e8b6cfd7cb8c3 5dd9bd4c2 docs: remove docs for —-from=index 074a8dcff deprecate `docker run --kernel-memory` 04ab71457 Add shorthand for --tail option 1f907fb7b Add DefaultAddressPools to docker info output #40388 52ec986b5 vendor: docker/docker 78e6ffd279b627ebba046b9675ff4849091d9cc3 c496fefe4 vendor: buildkit df35e9818d1f9066e616e03f4b8d727c97562e5b 176380db8 Revert "Add CodeQL Analysis workflow" 251861237 Replace mattn/go-shellwords with google/shlex 1c79d16d8 added 'docker build --taget' to zsh completion cdfafe03e Bump Golang 1.13.14 dc4f7fb37 Bump Golang 1.13.13 75ab44af6 Fix ConfigFile.Save() replacing symlink with file 0c2fe385b cli/formatter: reformat TestImageContext test cases d642de78f cli/command/formatter: remove deprecated compareMultipleValues() utility 454c1927c Add CodeQL Analysis workflow 77e78a2fe Move circle.yml to .circleci/config.yml 05eebb8cc scripts/make.ps1: actually define the CommitSuffix parameter fde22be3e TestServiceUpdateResolveImageChanged: use subtests 732d8b51a un-wrap some code 47fce8f4b clean-up "resolve image" option logic 55451d3c7 Add checks for dependencies that are not vendored. `make vendor` fails if any dependency is not vendored. 6776f7cdc docs/builder: add note about handling of leading whitespace cce2f7fd9 refactor opts tests af62a0529 vendor: xeipuuv/gojsonschema v1.2.0 c31efec9e vendor: mitchellh/mapstructure v1.3.2 a6cfbd235 Added env-file flag to docker exec 973713bc0 ReadKVEnvStrings/ReadKVStrings return nil if empty, and add tests 1c31e193c command/container: skip some tests on macOS beb23c996 docs: update for cgroup v2 and rootless 969580a88 config: ignore empty config file instead of printing warning d02173090 Handle errors on close in config file write. 851eeb963 Add support for pids limit in stacks (swarm) 395a6d560 Add support for --limit-pids on service create / update (swarm) c253918ea docs: fix example output for docker plugin ls 668aea3f1 vendor: golang.org/x/text v0.3.3 0f7260d1c Fix broken link 1570025f0 Remove 'images' alias from 'image ls' command 6248f2fb6 Don't filter out registries to logout from with config file contents 458c2336c vendor: containerd c80284d4b5291a351bb471bcdabb5c1d95e7a583 0d57a400b vendor: docker/docker aaf470eca7b588aa19e6681bff8bf08d17be1bf2 89089fb41 config: remove redundant os.Stat() 494f30a1a config: fix error message using incorrect filename bc5f10224 Added support for setting OS version in docker manifest annotate. Signed-off-by: Saswat Bhattacharya <sas.saswat@gmail.com> e1148e2c7 Add MOBY_DISABLE_PIGZ to dockerd environment variable docs ad301e741 Split up environment variable documentation between cli and dockerd 2ab4b4d53 Don't loose additional metadata fields 4840a8dfb list state `ready` for filtering in stack_ps.md a3af1f47d Use consistent name for errors e64d6d9ed vendor: gorilla/mux v1.7.4 41255a431 CircleCI: update docker versions used in CI 1cd69c41e Bump Golang 1.13.12 a91880a3a Deprecate classic Swarm and overlay networks using external k/v stores d30970e3b ssh: avoid setting flags through hostname a968359e0 docs/extend: fix broken link and some markdown touch-ups 1183a3e6e Explicit Z on logs timestamp examples ccd9d633b Set platform on container create API. 8c986d3ff Bump docker/docker vendor 98a3d6a48 docs: fix broken link in dockerd.md cb010db83 Fix bug with panic when DOCKER_CLI_EXPERIMENTAL environment variable is incorrect 74919d056 Run e2e tests with different engine version on Jenkins Rewrite Jenkinsfile to new declarative syntax without parallel as the e2e framework is not tailored for than (container name clash, port clash,...) 15d6565e4 Add a new Makefile variable to override DockerInDocker engine version we use to run e2e tests 54f766d24 Partially revert cf663b526a34f3e7911e6e60138138c2023aa844 as it breaks the version negotiation with an older docker engine. 459c6082f Removing CLI plugins API documentation from official documentation as it is now deprecated. Adding depreciation notice. 1ecca982e Bump Golang 1.13.11 eeafa4015 -buildmode=pie is not supported for the mips arch reference: https://github.com/containerd/containerd/commit/4c99c81326f4026fb8c0b8c5e10542205d99c321 66dd9f29f vendor: beorn7/perks v1.0.1 cf543e130 vendor: mitchellh/mapstructure v1.0.0 4d948e468 docs: more Markdown touch-ups 0c5f97ed7 compose: add build.extra_hosts to v3.9 schema bb7ef2cb3 Update some uses of errors.Cause() to errors.Is() 466c50f93 vendor: k8s.io/klog v1.0.0-2-g4ad0115 082a8bd89 vendor: pkg/errors v0.9.1 84c0a0409 vendor: Microsoft/hcsshim v0.8.9 f6541cfd8 vendor: moby/term 73f35e472e8f0a3f91347164138ce6bd73b756a9 d10e2b9a6 vendor: golang.org/x/sys 85ca7c5b95cdf1e557abb38a283d1e61a5959c31 719169db6 Replace deprecated Cobra command.SetOutput() with command.SetOut() bc938e4de docker info: add "context" to output 181e60499 docker version: add "context" to output 803b9071e docs: fix, and touch-up "docker context" docs df5cedfc8 vendor: spf13/cobra v1.0.0, go-md2man v2.0.0, blackfriday v2.0.1 d07f44fb3 vendor: switch back to upstream spf13/pflag v1.0.5 80a225647 Swarm init: use local IPNetSliceValue e23a1fca9 docs: update dockerd usage d096339f4 docs: update usage output for dockerd (19.03) 9a58504d3 docs: fix order of flags in usage, and fix missing quote dbd2fa5c3 vendor: remove unused dependencies from vendor.conf 24ade3c13 vendor: sirupsen/logrus v1.6.0 ef414633d Update dead link and add missing info on COPY bc58d655c builder: fix broken link 116c9a1f5 docs: fix links, and minor markdown touch-ups dbc61787a info: print Cgroup Version 3dfe2ffc1 vendor: update kubernetes and dependencies v1.16.9 8b32a3f9d vendor: sirupsen/logrus v1.5.0 4f65b65e8 vendor konsorten/go-windows-terminal-sequences v1.0.3 2e83f5685 vendor: update gotest.tools v3.0.2 d2632cea7 plugin: make runplugin public 9375644e3 Add jobs support to CLI 0cd7c6aa0 service update: fix service create example 84a07a997 Add container_iface_prefix option to documentation 6a17919d3 vendor: github.com/docker/swarmkit ebe39a32e3ed4c3a3783a02c11cccf388818694c 5adc9d236 vendor: github.com/containerd/ttrpc v1.0.0 2cb9d26c2 vendor: github.com/containerd/console v1.0.0 c08557768 vendor: github.com/containerd/cgroups 44306b6a1d46985d916b48b4199f93a378af314f 9c21f28ac vendor: github.com/containerd/containerd 4d242818bf55542e5d7876ca276fea83029e803c 2b910b69b vendor: github.com/tonistiigi/fsutil c2c7d7b0e1441705cd802e5699c0a10b1dfe39fd edf70dc30 vendor: golang.org/x/oauth2 bf48bf16ab8d622ce64ec6ce98d2c98f916b6303 9a41e375b vendor: golang.org/x/time 555d28b269f0569763d25dbe1a237ae74c6bcc82 37d184fe1 vendor: golang.org/x/crypto 2aa609cf4a9d7d1126360de73b55b6002f9e052a 55d320db9 vendor: golang.org/x/sync cd5d95a43a6e21273425c7ae415d3df9ea832eeb 7b9012ddd vendor: golang.org/x/sys d5e6a3e2c0ae16fc7480523ebcb7fd4dd3215489 3aab460ee vendor: golang.org/x/net 0de0cce0169b09b364e001f108dc0399ea8630b3 e32fe12ae vendor: golang.org/x/text v0.3.2 bdce04e95 vendor: github.com/golang/protobuf v1.3.3 f36dcfd67 vendor: github.com/gogo/protobuf v1.3.1 d7c34b6a0 vendor: github.com/gogo/googleapis v1.3.2 cdde30e03 vendor: google.golang.org/genproto 3f1135a288c9a07e340ae8ba4cc6c7065a3160e8 a38db191b vendor: update google.golang.org/grpc v1.27.1 0dc9d17a2 vendor: github.com/moby/buildkit ae7ff7174f73bcb4df89b97e1623b3fb0bfb0a0c d0a80bf44 update docker, replace github.com/docker/pkg/term, github.com/docker/pkg/mount 8a30653ed config: don't call homedir on init() c4798a9da yamldocs: add description to base command 86257b0fc experimental/vlan-networks: markdown touch-ups e34c40751 docs/reference: explain "colon" e4fc8cfa2 docs/extend: reformat notes 16730a2ab docs/builder: touch up markdown, and some minor rephrasing b73df4a23 docs/reference/run.md: touch-up markdown 6ae5df423 reference docs: reformat notes 8919c228b reference docs: fix broken links and markdown touch-ups f88ae7413 Add "host-gateway" to tests for extra_hosts / --add-host a4a07c643 calculateMemUsageUnixNoCache: subtract total_inactive_file, not cache 3b256db4a Add script to regenerate test-certificate fixtures 5661cc0de vendor: update go-events to fix alignment for 32bit systems b39739123 cli: perform feature detection lazily a88a1bea2 docker build: check experimental --platform on pre-run fa11032a3 opts: use constants instead of vars for defaults and un-export them ff2c1c085 Jenkinsfile: split e2e tests to separate stages eb93a865e improve "network prune" output to mention custom networks only 687539013 Bump Golang 1.13.10 6bd09229a CI: update notary test certificates 19bcebd12 test: make sure environment vars are reset after tests 650c71758 TestHistoryContext_CreatedSince: skip on non-UTC environments d063b835b Bump Golang 1.13.9 7557c138d Adding missing title in builder.md 83478fe7c try http for docker manifest --insecure 94f513e48 Update deprecation policy to 1 stable release 99443274b Include deprecation policy on deprecated features page f30bde6ad remove unneeded comment from reference files 7c87175d8 Fix broken link in CONTRIBUTING 824a9ce64 docs: update code-hints for compatibility with "rouge" f912deeec Fix whitespace that caused short-format in generated YAML e1b362847 Fix yamldocs generator to accomodate nested subcommands 5115bfa04 Fix naming of reference docs files f64c1ff3c update shellcheck v0.7.0 b1fd38fa7 Update Windows ico 9d9568263 Replace 'numeric' with object in -q description 67ebcd6dc Skip IPAddr validation for "host-gateway" string 40aa02053 Add an exe extension to windows binary during cross build. 4313c8b3c Update Golang 1.13.8 2c0e93063 bump gotest.tools v3.0.1 for compatibility with Go 1.14 5ef0fa10d gofmt compose loader test 4cd4305b3 docs: add redirect for old location of daemon reference 11869fa42 fix panic on single-character volumes 1edb10fe3 vendor: bump golang.org/x/crypto bac4c82f6975 (CVE-2020-9283) 26d71f9e0 Bump version to 20.03.0-dev c485dab60 vendor: golang.org/x/crypto 1d94cc7ab1c630336ab82ccb9c9cda72a875c382 aad9d2c95 Fix builder prune -a/--all flag description 80b22064d Improve service tasks grouping on printing 5e5ef9e0b Update Golang 1.12.17 c84f95815 Remove deprecated docker search --automated and --stars flags 1fefbdc29 Dockerfile.e2e: don't show progress, force TLS, and follow redirects 491c819a9 deprecated: use of reserved namespaces for engine labels 3493fe2af vendor: bump swarmkit 49e35619b18200845c9365c1e953440c28868002 507e6b61c vendor: update containerd/continuity to 26c1120b8d4107d2471b93ad78ef7ce1fc84c4c4 9a690c9ac vendor: update opencontainers/runc v1.0.0-rc10 751f320ee vendor: bump google/shlex e7afc7fbc51079733e9468cdfd1efcd7d196cd1d 0fe7190d0 vendor: update fsutil 0f039a052ca1da01626278199624b62aed9b3729 48f97602f vendor: add comment that hcsshim is v0.8.7 9b549401b vendor: update docker to 58c2615208962a458ed94f4b6262eb27e5e021cd 6cb7e6fca vendor: add missing containerd/cgroups dependency 7c5440695 update vndr v0.1.1 58c76291c docs: update deprecation status of "filter" option 73c9a44d5 docs: update deprecated status for --disable-legacy-registry 74677110d docs: update deprecation status of "engine *" commands, and dab files f26e9a3a6 docs: service create: document os/arch constraints and more examples d4c0de271 docs: add status table to "deprecated.md" e8c2dba69 docs: mark deprecation of "docker engine" subcommands c7aca0849 docs: mark deprecation of "dab" files and top-level "deploy" subcommand b6875ad69 docs: sort "deprecated.md" by deprecation release 672c00e1c docs: update some release-versions in "deprecated.md" c3092d940 docs: minor touch-ups in "deprecated.md" b059c93c9 docs: service create: document non-matching/exclude constraints abeb7babd docs: service create: use markdown table for constraints 76852f82b Give an example for --reserve-memory 07436dfe7 Remove a useless '\' and enhance a script in an example in the section 'Add entries ... (--add-host)' 473a9d20c Add examples for configs 74cc062d2 Syntax corrected 17e651dc5 Add support for Kubernetes username/password auth 2a08462de Revert "connhelper: add ssh multiplexing" 29734b910 Revert "docs: document ssh multiplexing env" 5ad1d4d4c docker run: specify cgroup namespace mode with --cgroupns 27d9aa2d9 vendor: update golang.org/x/crypto 69ecbb4d6d5dab05e49161c6e77ea40a030884e1 (CVE-2020-7919) 19fd390c3 Update Golang 1.12.16 (CVE-2020-0601, CVE-2020-7919) 4f3bc1581 docs: document dockerignore update f7009ee12 docs: document build outputs 73cd257d0 docs: document cache-from 9e620e990 implement docker push -a/--all-tags 3dfcfbb2b vendor: bump gopkg.in/yaml.v2 v2.2.8 594be50a6 bump gotestsum v0.4.0 3f83832be bump gotestsum v0.3.5 97010520d bump mjibson/esc v0.2.0 7904c23df bump vndr v0.1.0 to support versioned import paths 8f5379b30 Update flag description for docker rm -v 4006c42e1 Added transforms for compose overrides a955ed647 Add notice about port binding and overriding of UFW to docker run reference 94443920b Fix: docker push --quiet suppressing errors and exit code 6cf7970cd bump imdario/mergo v0.3.8 e9b9a0014 completion: add `--max-download-attempts` 348f24cae Add content trust tests for run command 139af1f6d Add log-driver and options to service inspect "pretty" format 84c6b08cf Update Golang 1.12.15 b53ffd6c1 vendor: bump miekg/pkcs11 v1.0.3 1d6445dc9 opts: fix formatting of comments e7f720b0a cli/config: fix formatting of comments 73dcf50d5 cli/command: fix formatting of comments, and minor linting issues 6e5528b65 e2e: fix formatting of comments c804b1083 Dockerfile.e2e: update compose v1.25.1, enable buildkit c2c7503d4 Convert ports before parsing. 154a1f6df Reverse order of long-form ports 4ecbef466 docs: document ssh multiplexing env c04dd6e24 connhelper: add ssh multiplexing 3baa6d57f Refactor config and secret tests to table-driven 9698b7a37 Default config/secret target to source name 4c2d7b7f7 Detect single value advanced config/secret syntax 627a4cf7c vendor: bump docker/docker a9507c6f76627fdc092edc542d5a7ef4a6df5eec ece71412c vendor: bump buildkit 4f4e03067523b2fc5ca2f17514a5e75ad63e02fb dff269b5e vendor: bump hcsshim b3f49c06ffaeef24d09c6c08ec8ec8425a0303e2 b82206295 vendor: bump containerd acdcf13d5eaf0dfe0eaeabe7194a82535549bc2b ed8cacd6e vendor: bump runc v1.0.0-rc9 013151ff7 vendor: bump google.golang.org/grpc v1.23.1 268cc5df2 vendor: bump golang.org/x/sys 6d18c012aee9febd81bbf9806760c8c4480e870d 2d6aec78a Change example networks ce4216894 docs: document from platform 4beea5853 Bump Golang 1.12.14 ef37a8a57 Fix "make build" (non-containerized) on macOS 54ba28f40 docker info: list CLI plugins alphabetically aef6b04a7 Fix docker ps table headers with custom format and "split" or "join" 69f216f6e Fix docker ps --format with templating functions b06272631 command/container: unify list tests in a single file 6732347e5 bump containerd v1.3.0 22a291f70 config: preserve ownership and permissions on configfile c07f50afa bump buildkit f7042823e340d38d1746aa675b83d1aca431cee3 cf3f902df update runc to v1.0.0-rc8-92-g84373aaa (CVE-2019-16884) 4b267469b bump hashicorp/golang-lru v0.5.3 b104da4a0 bump containerd/continuity f2a389ac0a02ce21c09edd7344677a601970f41c 7e5451316 docs: add redirects for engine reference pages 43b2f52d0 Remove "docker engine" subcommands f540eae7f Docs: add note about management commands targeting a manager e70d6bcb8 Add docs for proxy configuration in config.json dd87cd9fe bump github.com/dgrijalva/jwt-go v3.2.0, docker/licencing 7c3de6a4f59e9e70764ea6f6901cf17b88059789 585ec4da9 docker cp: prevent NPE when failing to stat destination 99ad13e37 Remove experimental "deploy" from "dab" files e1daa22ba Modify docs to specify working of device flag 7f063899e Maintainers: remove Justin and Aaron 2e2d2e16c Move Daniel to alumni 046a13f99 Maintainers file: remove "docs maintainers" section 819551220 Fixing some links and deleting an older page reference c888809bb Typo in documentation of volume create e692381d1 e2e: add new test package "global" with TestTLSVerify 756ab2fb9 Add support for docker push --quiet 26dbc3226 cp: allow trailing slash in non-existant destination 22a5dad84 app-214 Load Client info in getter function 7eb6a29c0 Bump compose-on-kubernetes from v0.4.25-alpha1 to v0.5.0-alpha1 cb29ef6c6 Add interpolation type cast for max_replicas_per_node b7e06f284 Remove now obsolete gometalinter and use golangci-lint instead 1e7774228 service: remove unused opts from newService() (unparam) 640305f33 cli/command/stack/kubernetes: Using the variable on range scope `c` in function literal (scopelint) 542f80241 cli/command/container: Using the variable on range scope `c` in function literal (scopelint) 754fc6fe6 cli/command/stack/kubernetes: Using a reference for the variable on range scope `obj` (scopelint) c2b069f4d opts: Using the variable on range scope `tc` in function literal (scopelint) cd3dca37b cli/manifest: Using the variable on range scope `testcase` in function literal (scopelint) aafe3df8b cli/compose/template: Using the variable on range scope `tc` in function literal (scopelint) 79dc83e78 cli/command/container: suppress dogsled warnings dd4d216af e2e: remove unnecessary trailing newline (whitespace) 63e45e632 internal: remove unnecessary newlines (whitespace) 612d83d6d cli: remove unnecessary newlines (whitespace) 2ec424a2d cli/command: Using the variable on range scope `testcase` in function literal (scopelint) 7c4b63b1c cli/command/trust: Using the variable on range scope `keyBytes` in function literal (scopelint) a269e17d7 cli/command/context: Using the variable on range scope `c` in function literal (scopelint) 1736662be e2e/cli-plugins: Using the variable on range scope `args` in function literal (scopelint) 96ec7299d cli/compose/loader: Using a reference for the variable on range scope `overrideService` (scopelint) 54d48de21 templates: Using the variable on range scope `testCase` in function literal (scopelint) c828fa141 service/logs: Using the variable on range scope `testcase` in function literal (scopelint) 5a2a9d9ca cli/config: Using the variable on range scope `tc` in function literal (scopelint) e74e2c774 cli/command/formatter: Error return value of `ContainerWrite` is not checked (errcheck) 008f6a2da cli/command: Error return value of `cli.Apply` is not checked (errcheck) 9275e2cb6 cli/command/formatter: Error return value of `ImageWrite` is not checked (errcheck) fe3cc6eb7 cli/context/store: SA5001: should check returned error before deferring f.Close() (staticcheck) 709728e72 cli/command/image: SA1006: printf-style with no further arguments (staticcheck) ea64a1ceb cli/command/utils: SA1006: printf-style with no further arguments (staticcheck) f0614ca78 cli/command/trust: SA1006: printf-style with no further arguments (staticcheck) 0e4bd30cf cli/command/image/build: G107: Potential HTTP request made with variable url (gosec) 8d64c2af1 cli/command/service: SA1012: do not pass a nil Context (staticcheck) 1850a0595 cli/command/secret: G101: Potential hardcoded credentials (gosec) 34f595975 cli/compose/convert: driverObjectConfig - result 1 (error) is always nil (unparam) 6205ef33b e2e/container: containerExistsWithStatus - t is unused (unparam) b83545ebb cli/command/image/build/context_test.go:244:38: `createTestTempDir` - `prefix` always receives `"builder-context-test"` (unparam) 4be924a0a cli/command/registry/login_test.go:66:25: unnecessary conversion (unconvert) c23737916 cli/compose/convert/service_test.go:274:72: unnecessary conversion (unconvert) 6047259e5 File is not `goimports`-ed (goimports) 0153624a5 cli/command/trust/sign_test.go:119:70: unnecessary conversion (unconvert) f123e43c1 Disable unparam linter: e2e/image/push_test.go:299:27: `withNotaryPassphrase` - `pwd` always receives `"foo"` (unparam) 7d823438b Disable unparam linter: cli/required.go:102:16: `pluralize` - `word` always receives `"argument"` (unparam) 9118b2b2b compose/loader: define type for transformer-functions 6eb0c9c61 disable unparam linter on these functions, as we need an error in these function signatures d640f44df cli/compose/convert: result 1 (error) is always nil (unparam) 47741f81d cli/command/system/info.go:116:68: prettyPrintClientInfo - result 0 (error) is always nil (unparam) a3c7cb4f1 cli/command/stack/kubernetes/deploy_test.go:65:68: `checkOwnerReferences` - `stackName` always receives `"test"` (unparam) ab1aeedb2 cli/command/plugin/list_test.go:61:31: `TestList$1` - `filter` is unused (unparam) 75c60c1af cli/command/image/build_session.go:133:45: getBuildSharedKey - result 1 (error) is always nil (unparam) 28ac2f82c cli/command/image/build_buildkit.go:450:56: parseSSH - result 1 (error) is always nil (unparam) 0ce2eae5a cli/command/image/build/context_test.go:252:71: `createTestTempFile` - `perm` always receives `0777` (`511`) (unparam) 70bd64d03 cli/command/image/build/context_test.go:244:38: `createTestTempDir` - `dir` always receives `""` (unparam) e1c0c7979 unchecked errors 584da3775 cli/command/container/attach.go:141:15: nilness: impossible condition: nil != nil (govet) b3d4c6aac opts/ulimit_test.go:11:13: composites: `*github.com/docker/cli/vendor/github.com/docker/go-units.Ulimit` composite literal uses unkeyed fields (govet) 1bfe81318 cli/compose/types/types.go:106:2: structtag: struct field tag `yaml:",inline", json:"-"` not compatible with reflect.StructTag.Get: key:"value" pairs not separated by spaces (govet) 5ceed3059 cli/registry/client/fetcher.go:106:9: nilness: impossible condition: nil != nil (govet) 9afeb6f43 cli/command/container/start.go:157:20: nilness: nil dereference in type assertion (govet) 85cfd4e51 cli/command/stack/kubernetes/list.go:32:47: nilness: tautological condition: non-nil != nil (govet) f5e838706 cli/command/trust/key_generate.go:112:9: nilness: impossible condition: nil != nil (govet) 3a428202b SA1019: httputil.ErrPersistEOF is deprecated: No longer used. (staticcheck) 7da936047 cli/command/container/stats.go:211:21: SA1015: using time.Tick leaks the underlying ticker, consider using it only in endless functions, tests and the main package, and use time.NewTicker here (staticcheck) 8018a850c cli/command/trust/inspect_pretty_test.go:399:24: SA4010: this result of append is never used, except maybe in other appends (staticcheck) 296297190 opts/throttledevice.go:51:5: SA4003: unsigned values are never < 0 (staticcheck) 2d0c10d77 kubernetes/conversion_test: use test-builders package 270defa17 internal/test/builders: don't set EndpointSpec by default e4d3c360b Bump Compose on Kubernetes 758d12e65 unused-for is a deprecated synonym 56729bc0a Return empty string if image createdAt is zero 568ea3a32 Refactor the `stack services` command to be uniform 20424e2f5 Add test for ServiceStatus 7405ac5c2 Services: use ServiceStatus on API v1.41 and up 228e0f5e7 TestStackServicesErrors: use sub-tests, and return tasks 962015b05 internal/builders: add GlobalService, ServiceStatus, NodeList() 0a21de05d compose/loader: fix TestIsAbs not testing all combinations 54411e5a9 cli/command/container: Using a reference for the variable on range scope `n` (scopelint) 648199b32 cli/command/service: Using a reference for the variable on range scope `entry` (scopelint) 167b3906f Update flag doc 3e78cbc02 Gometalinter: raise deadline to 3 minutes 7f6cd6433 bump docker/docker to a09e6e323e55e1a9b21df9c2c555f5668df3ac9b 5e4c7eba4 bump Microsoft/hcsshim 2226e083fc390003ae5aa8325c3c92789afa0e7a 937e65cac CircleCI: add some info steps, and re-group jobs 46f3f9ac0 update Jenkins Build Status urls for README 71e525f74 gometalinter: fix configuration 87cf5b606 bump hashicorp/go-version v1.2.0 ad4ca6f0d bump gofrs/flock v0.7.1 9b9280465 bump logrus v1.4.2 6a26d370a bump mattn/go-shellwords v1.0.6 c07b1b275 bump creack/pty v1.1.9 4b5ecc982 bump gorilla/mux v1.7.3 474d522ee Update Golang 1.12.12 (CVE-2019-17596) 79aa6cce1 TestFormatInfo: add extra test-case 8f11fbc87 Fix lint issue 415f60862 Add test case to cover non-empty auth entry 86281a7b4 daemon: document --max-download-attempts option 0076ee6cd Fix typo fc19fb6d9 Fix erroneous space indentation of shell script 7b8c6a632 bump github.com/xeipuuv/gojsonpointer 02993c407bfbf5f6dae44c4f4b1cf6a39b5fc5bb 937ce69b4 Adjusting glossary reference and clarrifying the start of a Dockerfile 06f34ba50 bump github.com/xeipuuv/gojsonschema v1.1.0 ba7ec36de Minor formatting changes and a typo fix. 7a279af43 config: revert to using pkg/homedir cd9b39fc5 Add bash completion for `builder build` options 7eecbb96a Annotate flags that are not supported by Buildkit 37e9cabf1 Allow username/password in config file 70a4eb2a4 vendor: update grpc to v1.23.0 72bc29a2a vendor: update go-winio to v0.4.14 38c02a928 vendor: align with engine at b6684a403c99aaf6be5b8ce0bef3c6650fcdcd12 c3990f3ba build: remove --stream 91cf8b04c vendor: Bump gopkg.in/yaml.v2 86ae871e0 Add bash completion for `builder build` 8743e36a4 bump golang 1.12.10 (CVE-2019-16276) ee76ac8f9 fix formatting issue of encoded urlSigned-off-by: Sam <samashah@microsoft.com> 47f059db7 config: keep configDir empty when homedir errors 031bd2d53 Adding experimental feature info 0df5d6427 vendor: update buildkit to 10cef0c and fsutil 7f9f923 c2626a827 cli/config: use os.UserHomeDir instead of github.com/docker/docker/pkg/homedir 821f5ecf5 Add option remove `env_file` entry after merged 131eefc54 Clarifying docker config rules b3a1681fd Add clarification when using USER UID:GI 41aa20b6b Add riscv64 to manifest annotation and bash completion 6ebcc211a Move filtering to __docker_complete_services, as suggested by @albers b85e1e2ef Fix substitution of comma to space character, suggested by @albers f55c5b656 Make service completion faster 34447852b Sort services from stack from swarm 5bc1f24df Add docker-compose schema v3.9 bba0a4d5a Updating deprecated command example in search.md 7634872a3 fix(pull_test): for quiet option 2f7b364cb add rudimentary fish completions for docker network e25e077a2 restore support for env variables to configure proxy regression introduced by b34f34 close #39654 265bee4d5 Update service_create.md a0dd6e025 Fix phrasing when referring to the freezer cgroup 54428b1f3 bump miekg/pkcs11 v1.0.2 d9856049e Bump golang 1.12.9 de1523d22 Adjust tests for changes in Go 1.12.8 / 1.11.13 bbd179f25 Bump golang 1.12.8 (CVE-2019-9512, CVE-2019-9514) 778052b06 bump x/sys to fix riscv64 epoll 893db86d6 e2e: enable buildkit ae58e356e Circle-CI: use progress=plain 9a6519db7 Circle-CI: enable buildkit 82e01807b Update dockerignore d1b6676df Update AUTHORS and mailmap f7ab2987c Explain -s flag on docker ps bc4ed69a2 TestSigProxyWithTTY: fix f290a8084 switch kr/pty to creack/pty v1.1.7 b1a3c1aad Disable TLS for e2e docker-in-docker daemon e9ada56a8 builder.md: Correct copy/paste error 0d3022c6d Dockerfile: use GO_VERSION build-arg for overriding Go version 64f0ae425 bump docker-credential-helpers v0.6.3 de01e7245 e2e: remove docker engine testing remnants 1fdbd6181 docker ps: add State field to formatting 988b9a0d9 docs: add info for events backlog and scope b06f9e959 Bump golang 1.12.7 d6dd08d56 Detect Windows absolute paths on non-Windows CLI 8b19c1d73 Update CircleCI Docker version to 18.09.3 53fc63a93 Circle-CI: fix indentation in circle.yml 08fd6dd63 e2e: use stable-dind image for testing f7b75eeb9 adding nvidia gpu access info Signed-off-by: Adrian Plata <adrian.plata@docker.com> efdf36fa8 Rollback config type interpolation on fields "parallelism" and "max_failure_ratio" were missing, as it uses the same type as update_config. c8e9233b9 Deprecate AuFS storage driver 7cf1a8d4c Add test for --sig-proxy with a TTY ee2950492 Do not disable sig-proxy when using a TTY 15d361fd7 Windows: skip permissions check on key 4d7e6bf62 Fix advanced options for backward compatibility 8b4e52f0b deprecate registry v2 schema 1 81e3457c2 bump gorilla/mux v1.7.2 1dc756e8d fix: docker login autocomplete for zsh 459099e17 Bump golang 1.12.6 f6a4c76fb bump docker-credential-helpers v0.6.2 1877ed6aa bump compose-on-kubernetes v0.4.23 17e043828 completion with container names on restart 5f9350966 Fix detection of invalid context files when importing 668a9ff8e vendor: update net and sys 291e86289 Introduce .zip import for docker context bb8e89bb2 cli-plugins: add test names for easier debugging 6ca878373 cli-plugins: add concept of experimental plugin, only enabled in experimental mode c455193d1 Push check for kubernetes requirement down into the endpoint 520be05c4 Dynamically register kubernetes context store endpoint type. f820766f6 Export `DefaultContextStoreConfig()` and `ResolveDefaultContext()` 1433e2742 Allow dynamically registered context endpoint to provide their defaults. 4f14c4995 Add a helper to iterate over all endpoint types in a context store 087c3f7d0 Support dynamic registration of context store endpoint types d5d693aa6 e2e: add a test for `context ls` d84e278aa fix a few typos 33a9a6392 Revert "add a 10s timeout to the client object." 909b85460 bump LK4D4/vndr v0.0.3 and revendor 8635abd66 Use underlying `NewKubernetesConfig` directly from compose-on-kubernetes. 1e5129f02 rename package import kubcontext → kubecontext 41fe46413 add containerd/ttrpc f02858b1457c5ca3aaec3a0803eb0d59f96e41d6 51de9a883 bump golang.org/x/crypto 88737f569e3a9c7ab309cdc09a07fe7fc87233c3 4de6cb013 bump gogo/protobuf v1.2.1 415cb3d90 bump gogo/googleapis v1.2.0 4cb01169e bump containerd/console 0650fd9eeb50bab4fc99dceb9f2e14cf58f36e7f dbfeaae5e bump containerd/continuity aaeac12a7ffcd198ae25440a9dff125c2e2703a7 8ea94a172 bump containerd aaeac12a7ffcd198ae25440a9dff125c2e2703a7 a4f01d876 vendor: bump runc v1.0.0-rc8 1ae6ec7f2 bump docker/docker 3998dffb806f3887f804b813069f59bc14a7f3c1 529ef6e89 vendor buildkit to f238f1e c52e1f248 context: ClientOpts() now includes WithAPIVersionNegotiation if version is missing 5331358d3 Fix PowerShell codehint for rouge 93d76c5c9 bump google.golang.org/grpc v1.20.1 ff44305c4 context: produce consistent output on `context create`. 59defcb34 add a 10s timeout to the client object. e5c86dbcf Forcing the creation of tmp directory so that build doesn't fail when it already exists e6f73bc50 Bump version to 19.09.0-dev c1639e1e4 Add bash completion for `events --filter node` b55992afc Add bash completion for `context create --from` 7f45a0e52 vendor buildkit to 646fc0af6d283397b9e47cd0a18779e9d0376e0e (v0.5.1) c32d1de57 Bump golang 1.12.5 daca70d82 build: add --platform local 8adcedd65 build: honor BUILDKIT_PROGRESS env config dcc414be3 CircleCI: store junit.xml as artifact 50a45baba bash completion: add node type filter 483c53ad9 Use single table for all ContainerImagePullPolicy tests ffba7659c Improve testing of never pull and always pull scenarios ec56136d6 Use closure for common pulling and tagging bevior in container creation 965664d89 Improve flow pull behavior before container creation. a06b5db59 Update cli/command/container/create.go 22cd41896 Adds flag modifying pull behavior for running and creating containers 15130e304 Support GOARM and windows .exe in binary target af200f14e cli-plugins: fix when plugin does not use PersistentPreRun* hooks ffc168ed5 Update AUTHORS and mailmap 7d0645c5f Use command.Cli instead of command.DockerCli 40a6cf7c4 Include CLI plugins in help output on unknown flag. 79a75da0f Hide experimental builtin commands in help output on unknown flag. d57175aa2 Move subtests of TestGlobalHelp into actual subtests 1648d6c4a Add bash completion for `--security-opt systempaths=unconfined` bfa43d298 Remove deprecated storage drivers from bash completion 70d8e0b86 Add ip and ip6 to advanced network syntax Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce: update to v19.03.15-ceBruce Ashfield2021-02-051-2/+2
| | | | | | | | | | | | | | | | | | | | | The following docker-ce commits are in this bump: 8ba93ae231 centos-8: work around CentOS repo bug preventing to enable PowerTools b61c54e644 CentOS 8: manually import GPG key 7c5dfa21ab Bump VERSION to 19.03.15 c48e2f23e4 context: Add tarball e2e tests 51b4c45634 context: Ensure context name is valid on import 6a4daa87e5 context: Ensure import paths are valid 736dcbb76c pull: Validate layer digest format e0b182f9fd buildkit: Apply apparmor profile e2fc17e3cd vendor buildkit 396bfe20b590914cd77945ef0d70d976a0ed093c 77ef9e3963 Use real root with 0701 perms bb9d1ea5f7 Do not set DOCKER_TMP to be owned by remapped root 65f17f139b Ensure MkdirAllAndChown also sets perms bc73c89f8b docs: un-wrap line to prevent YAML docs from using "compact" formatting 6cfdb61f0a Bump VERSION to 19.03.14 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* moby: update to v19.03.14Bruce Ashfield2020-12-071-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Incorporating the following moby commits: d3c5506330 update containerd binary to v1.3.9 (address CVE-2020-15257) 1babdf81e7 update containerd binary to v1.3.8 f80f6304e2 Bump libnetwork 4b181db52b bump up rootlesskit to v0.11.0 7487dca8a5 docs: fix builder-version swagger c7253a0e1a dockerd-rootless.sh: support containerd v1.4 shim socket path convention 88eec2e811 Also trim "~..." from AppArmor versions ecd3baca25 pkg/aaparser: support parsing version like "3.0.0-beta1" 74c0c5b7f1 Fix gcplogs memory/connection leak 5f32bd9ced awslogs: Update aws-sdk-go to support IMDSv2 8cf9d50fc0 [19.03] vendor: buildkit v0.6.4-32-gdf89d4dc a4e96a486f swagger: fix MemTotal units in SystemInfo endpoint 9fe291827a Bump Golang 1.13.15 a15a770e1b update containerd to v1.3.7 9380ec7397 update containerd to v1.3.6 80cef48453 update containerd to v1.3.5 fc8f88dc14 update containerd to v1.3.4 89a4208757 update containerd binary to v1.3.3 490c45b756 Update containerd to v1.3.2 56d897347d Update containerd to v1.3.1 d4c63720e9 update containerd binary v1.3.0 ec14dc44d1 Fix log file rotation test. a958fc3e65 Fix flakey test for log file rotate. 89da709cb7 Check for context error that is wrapped in url.Error 83baeafc3c oci: correctly use user.GetExecUser interface dae08c333e vendor: vishvananda/netns db3c7e526aae966c4ccfa6c8189b693d6ac5d202 93cb737687 [19.03] vendor: vishvananda/netns 0a2b9b5464df8343199164a0321edf3313202f7e and the following libnetwork commits: 90990763 service_linux: Fix null dereference in findLBEndpointSandbox 8565f0b1 log error instead if disabling IPv6 router advertisement failed and finally, the following cli commits: 01fc5a1ec3 Replace deprecated instruction 3b3e295c4b docs: update 20.03 -> 20.10 in deprecated.md d1b44aa298 docs: fix broken links in build reference 20bc15f618 docs/deprecated: remove minor versions 3172219932 docs: deprecate CLI options for experimental CLI features f132c8ad4a docs: add /go/experimental/ vanity URL df5ca0c950 docs: fix generated YAML due to trailing whitespace 5057d34272 docs: update URL for security landing page 278f30b82b Add test-case for env with, and without = f526bcdb53 builder: add note about alternative syntax 10973d6ddf builder: rephrase ENV section, remove examples for ENV key value without '=' 8c8fb03f15 docs: fix "docker logs" example missing container name c9a03ab5f4 Bash-completion: add CAP_AUDIT_READ ffa0e1d36e docs: document CAP_AUDIT_READ 3d74f7ab48 docs: document optional "CAP_" prefix for capabilities 0a207d5095 docs: sort list of capabilities alphabetically 75411a2233 Complete capabilites with and without "CAP_" prefix. 896eb7123a [19.03] vendor: stop using docker/engine fork for vendoring aebe8b0660 [19.03] vendor: buildkit v0.6.4-32-gdf89d4dc d6b05747dd [19.03] vendor: tonistiigi/fsutil v0.0.0-20191018213012-0f039a052ca1 9a65c1c861 docs/build: add note about git subdirectories with BuildKit a6c15a5e60 Replace vbom.ml/util with fvbommel/sortorder 36cdb166dc Bump Golang 1.13.15 5c5486d910 Replaces ADD with COPY in the COPY section 9152bf265e docs: remove docs for —-from=index e5e227672b Bump Golang 1.13.14 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce: update to v19.03.14Bruce Ashfield2020-12-071-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Incorporating the following docker-ce commits: 6cfdb61f0a Bump VERSION to 19.03.14 d62f3a4335 update containerd binary to v1.3.9 (address CVE-2020-15257) 223df488a1 update containerd binary to v1.3.8 f1d658df7c Bump libnetwork b42dd308b7 bump up rootlesskit to v0.11.0 ddd056dcd3 docs: fix builder-version swagger 406cc5ef47 Replace deprecated instruction a48b2a414f dockerd-rootless.sh: support containerd v1.4 shim socket path convention de76075442 docs: update 20.03 -> 20.10 in deprecated.md d8fa7ac2c1 Also trim "~..." from AppArmor versions 0a1553c648 pkg/aaparser: support parsing version like "3.0.0-beta1" caae6f925a static: add containerd-shim-runc-v2 94ab0479b0 To allow build for selective distros from top directory. e.g.- for rpm- RHEL_RELEASES= CENTOS_RELEASES= FEDORA_RELEASES=centos-8 make rpm for deb- RASPBIAN_VERSIONS= UBUNTU_VERSIONS= DEBIAN_VERSIONS=ubuntu-xenial make deb 5b7be532be docs: fix broken links in build reference 4afdfee131 Fix gcplogs memory/connection leak f9159f95b9 docs/deprecated: remove minor versions a7d8e5b15e docs: deprecate CLI options for experimental CLI features 265d2d874b docs: add /go/experimental/ vanity URL 45fe9c589c docs: fix generated YAML due to trailing whitespace d54dee5350 docs: update URL for security landing page 8b51565ec3 Add test-case for env with, and without = 4e0e5427b2 builder: add note about alternative syntax fb91a7f7e0 builder: rephrase ENV section, remove examples for ENV key value without '=' 4c5ada19a3 docs: fix "docker logs" example missing container name 5fd841f066 awslogs: Update aws-sdk-go to support IMDSv2 8ff047ef9d Bash-completion: add CAP_AUDIT_READ 12b5d3b4cb docs: document CAP_AUDIT_READ 532ea20102 docs: document optional "CAP_" prefix for capabilities a240747846 docs: sort list of capabilities alphabetically 19498650c3 Bump VERSION to 19.03.13 da428b1aec Complete capabilites with and without "CAP_" prefix. 4056693640 [19.03] vendor: stop using docker/engine fork for vendoring f6cc6fa133 [19.03] vendor: buildkit v0.6.4-32-gdf89d4dc d61bf277b8 [19.03] vendor: tonistiigi/fsutil v0.0.0-20191018213012-0f039a052ca1 4024535260 [19.03] vendor: buildkit v0.6.4-32-gdf89d4dc 9a44f43fb9 swagger: fix MemTotal units in SystemInfo endpoint a75083ebf0 docs/build: add note about git subdirectories with BuildKit 112d03e8ea plugins: update buildx to v0.4.2 ef44b94189 buildx: use v0.4.1 8a18415110 Bump buildx to master to check if it builds on the CI 0100e1c0be Replace vbom.ml/util with fvbommel/sortorder 53c69c574e Bump Golang 1.13.15 87867aff90 Bump Golang 1.13.15 76060cc4a0 Bump Golang 1.13.15 8a905386a1 update containerd to v1.3.7 0ffc8f1e55 update containerd to v1.3.6 aff3f55db8 update containerd to v1.3.5 61f6fac7a1 update containerd to v1.3.4 c938231789 update containerd binary to v1.3.3 ba94dd5a0d Update containerd to v1.3.2 13106ca34e Update containerd to v1.3.1 c5ad02b467 update containerd binary v1.3.0 a0edb6a8cb Fix log file rotation test. b17b2f05b6 Fix flakey test for log file rotate. efe3cf2163 Replaces ADD with COPY in the COPY section 5a861b676c Check for context error that is wrapped in url.Error a438db9875 docs: remove docs for —-from=index 475484e351 Bump VERSION to 19.03.13-beta2 3f7bf34392 oci: correctly use user.GetExecUser interface And the following libnetwork commits: 90990763 service_linux: Fix null dereference in findLBEndpointSandbox 8565f0b1 log error instead if disabling IPv6 router advertisement failed Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: add more kernel-module RRECOMMENDSBruce Ashfield2020-10-081-1/+1
| | | | | | | The kernel RRECOMMENDS, wasn't complete and in some minimal systems we are missing modules to start dockerd. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-moby: update to 19.03 latestBruce Ashfield2020-08-171-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating to the latest 19.03 commits: 88820a4793 Merge pull request #41287 from thaJeztah/19.03_backport_bump_netns dae08c333e vendor: vishvananda/netns db3c7e526aae966c4ccfa6c8189b693d6ac5d202 93cb737687 [19.03] vendor: vishvananda/netns 0a2b9b5464df8343199164a0321edf3313202f7e 7d597ee2c9 Merge pull request #41273 from thaJeztah/19.03_backport_swagger_fixes 22c458b67c Merge pull request #41274 from thaJeztah/19.03_backport_Double_RLock 8b97280f11 Merge pull request #41279 from thaJeztah/19.03_bump_buildkit eda52d433e [19.03] vendor: moby/buildkit v0.6.4-28-gda1f4bf1 168254fcfa Merge pull request #41277 from AkihiroSuda/rootlesskit-0.10.0-1903 9dc455dffb bump up rootlesskit to v0.10.0 c200868fa2 Merge pull request #41271 from thaJeztah/19.03_backport_remove_dockerproject_from_tests 9eade7d03c docs: API v1.39: move system version response to definitions 4685e9ef72 docs: API v1.40: move system version response to definitions d8f22d0307 swagger: move system version response to definitions 32366de5f9 plugin: fix a double RLock bug ad0278f002 docs: API v1.39: fix type for BuildCache CreatedAt and LastUsedAt cb8b7a282d docs: API v1.40: fix type for BuildCache CreatedAt and LastUsedAt e1ae07b7a0 swagger: fix type for BuildCache CreatedAt and LastUsedAt d49278cc17 Merge pull request #41269 from thaJeztah/19.03_update_buildkit 892c228219 Remove apt.dockerproject.org from test a7e309944b Merge pull request #41248 from thaJeztah/19.03_backport_swagger_updates 765245d54b [19.03] vendor: moby/buildkit v0.6.4-26-ga1e4f48e 2d4bfdc789 Merge pull request #41081 from thaJeztah/19.03_backport_fix_sandbox_cleanup b990b6c2b0 Merge pull request #41235 from thaJeztah/19.03_backport_bump_golang_1.13.14 4d9397c268 swagger: sync updates to v1.39 51bd95dc95 swagger: sync updates to v1.40 d5ba93575c docs: sync API v1.40 swagger formatting with current version 12b7746a84 docs: sync API v1.39 swagger formatting with current version 0c6bdf5974 docs: add example calculations to container stats API 630185b4ae swagger: add DeviceRequests to container create, inspect example d7423180e7 swagger: move NetworkingConfig to definitions c30ff6885e swagger: reformat, and wrap to ~80-chars 7005841048 swagger: clarify the meaning of Image field in ContainerInspect endpoint 1608292c09 Bump Golang 1.13.14 1763b4e88b Bump Go 1.13.13 5e8ab898c7 Merge pull request #41222 from thaJeztah/19.03_bump_buildkit 23d47bd12e [19.03] vendor: moby/buildkit v0.6.4-20-g4cb720ef 789bd1c67b Merge pull request #41192 from ameyag/19.03-hcsshim-vndr 0eaa22b95d Merge pull request #41185 from thaJeztah/19.03_bump_buildkit 9d6053eda2 Revendor hcsshim to fix image import bug 589b07262c vendor: Microsoft/hcsshim v0.8.9 e7c2b106ec [19.03] vendor: buildkit dc6afa0f755f6cbb7e85f0df4ff4b87ec280cb32 (v0.6.4-15-gdc6afa0f) a40b877fbb Merge pull request #41133 from roidelapluie/bsd2 7dd9fdcfbe Enable client on netbsd and dragonfly 9dc6525e61 Merge pull request #41124 from thaJeztah/19.03_bump_libnetwork b4ca19a992 vendor: docker/libnetwork 026aabaa659832804b01754aaadd2c0f420c68b6 (bump_19.03 branch) ae158b371c allocateNetwork: fix network sandbox not cleaned up on failure And the following cli changes: 80fd48bcb Merge pull request #2635 from thaJeztah/19.03_backport_bump_golang_1.13.14 e5e227672 Bump Golang 1.13.14 79a6c494e Merge pull request #2633 from thaJeztah/19.03_backport_bump_golang_1.13.13 5e05ef345 Merge pull request #2631 from cpuguy83/19.03_handle_close_error_on_save 64d25cc6e Bump Golang 1.13.13 1b96aa29c Merge pull request #2629 from thaJeztah/19.03_backport_circleci_updates aaf117052 Handle errors on close in config file write. 14010c88b config: preserve ownership and permissions on configfile 3d64a5d4b Move circle.yml to .circleci/config.yml d0b656088 CircleCI: update docker versions used in CI b0a78cc1a Merge pull request #2623 from s0j/s0j_19.03_bump-crypto-readconsole ab8bd02fc vendor: golang.org/x/crypto 2aa609cf4a9d7d1126360de73b55b6002f9e052a 18d6f8f6b Merge pull request #2620 from thaJeztah/19.03_backport_builder_comment_info 7498d9cc4 docs/builder: add note about handling of leading whitespace cb59cafc3 Merge pull request #2609 from thaJeztah/19.03_backport_docs_fixes 541f050e1 Merge pull request #2608 from thaJeztah/19.03_backport_vendor_bumps ac7723056 docs: fix example output for docker plugin ls 9c9ff4369 list state `ready` for filtering in stack_ps.md e3b981c18 vendor konsorten/go-windows-terminal-sequences v1.0.3 ec276f3a6 vendor: mitchellh/mapstructure v1.0.0 c9125cc39 vendor: beorn7/perks v1.0.1 0ed913b88 Merge pull request #2592 from thaJeztah/19.03_backport_logout_config_out_of_sync2 5a12f90b4 Don't filter out registries to logout from with config file contents Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce: update to tip of 19.03Bruce Ashfield2020-08-171-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This update comprises the following commits: ff3fbc9d55 Merge pull request #655 from tiborvass/bump_19.03.13-beta2 475484e351 Bump VERSION to 19.03.13-beta2 321dc6b4bd Merge component 'engine' from git@github.com:moby/moby 19.03 9b85caeb7c Merge pull request #41287 from thaJeztah/19.03_backport_bump_netns b82e19207e vendor: vishvananda/netns db3c7e526aae966c4ccfa6c8189b693d6ac5d202 69223588df [19.03] vendor: vishvananda/netns 0a2b9b5464df8343199164a0321edf3313202f7e 32c58830e3 Merge pull request #654 from tiborvass/bump_19.03.13-beta1 f2cad45d0a Merge branch '19.03' of github.com:docker/docker-ce into 19.03 a2fa6c7fb3 Merge component 'engine' from git@github.com:moby/moby 19.03 1015e8af79 Merge component 'engine' from git@github.com:moby/moby 19.03 1d7d9d001f Merge pull request #41273 from thaJeztah/19.03_backport_swagger_fixes 3087b3114f Merge pull request #41274 from thaJeztah/19.03_backport_Double_RLock 520fc10363 Merge pull request #41279 from thaJeztah/19.03_bump_buildkit 120511a214 Merge pull request #642 from tiborvass/19.03-switch-to-moby a4f55cdbab [19.03] vendor: moby/buildkit v0.6.4-28-gda1f4bf1 bee145aad2 Merge component 'engine' from git@github.com:docker/engine 19.03 b768eabf04 Merge component 'engine' from git@github.com:docker/engine 19.03 4e9725b988 Merge pull request #41277 from AkihiroSuda/rootlesskit-0.10.0-1903 c13dfa3f39 bump up rootlesskit to v0.10.0 b714998077 Merge pull request #41271 from thaJeztah/19.03_backport_remove_dockerproject_from_tests 009eca42ef docs: API v1.39: move system version response to definitions 4f25b9eed4 docs: API v1.40: move system version response to definitions 0ea6312f6d swagger: move system version response to definitions 9f4029e6dc plugin: fix a double RLock bug dff89f8092 docs: API v1.39: fix type for BuildCache CreatedAt and LastUsedAt 95599eb2e6 docs: API v1.40: fix type for BuildCache CreatedAt and LastUsedAt 81bd78b07a swagger: fix type for BuildCache CreatedAt and LastUsedAt d9cb8734cf Merge component 'engine' from git@github.com:docker/engine 19.03 820098ff18 Merge pull request #41269 from thaJeztah/19.03_update_buildkit 0994e492c5 Remove apt.dockerproject.org from test a49a4f288a Bump VERSION to 19.03.13-beta1 a89cfd520d Merge component 'engine' from git@github.com:docker/engine 19.03 dcaed39807 Upstream-commit: a7e309944b3bdefbca4186ce41a8374784133be2 Component: engine 422fa1b13e [19.03] vendor: moby/buildkit v0.6.4-26-ga1e4f48e 81dab2018b Merge component 'engine' from git@github.com:docker/engine 19.03 1490b1df51 Merge pull request #41081 from thaJeztah/19.03_backport_fix_sandbox_cleanup c6c4809630 Merge component 'engine' from git@github.com:docker/engine 19.03 9eea25a62f Merge pull request #41235 from thaJeztah/19.03_backport_bump_golang_1.13.14 f224762af0 Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 19.03 0850d19f24 Merge pull request #485 from thaJeztah/19.03_backport_remove_eoan 5ba0889c4a swagger: sync updates to v1.39 7d189e5b0b swagger: sync updates to v1.40 047a3b6ca8 docs: sync API v1.40 swagger formatting with current version d5a51018d4 docs: sync API v1.39 swagger formatting with current version 69aae6c1db docs: add example calculations to container stats API bf77a77bab swagger: add DeviceRequests to container create, inspect example d43b66d55c swagger: move NetworkingConfig to definitions c210a26d28 swagger: reformat, and wrap to ~80-chars 0d1edc403c swagger: clarify the meaning of Image field in ContainerInspect endpoint f3b514426e Merge component 'cli' from git@github.com:docker/cli 19.03 07d59f4164 Merge pull request #2635 from thaJeztah/19.03_backport_bump_golang_1.13.14 289eec988f Remove Ubuntu 19.10 "Eoan" (EOL: 2020-07-17) eeec8d3ba5 Remove Ubuntu 19.04 "Disco Dingo" (EOL: 2020-01-23) 02ab061844 Remove Fedora 30 (EOL: 2020-05-26) 391d22f0e0 Bump Golang 1.13.14 a033b71571 Bump Go 1.13.13 03ae74b5b7 Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 19.03 20042180c1 Bump Golang 1.13.14 aaf10aa9c6 Merge pull request #482 from thaJeztah/19.03_backport_bump_golang_1.13.14 fc9fece6e1 Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 19.03 d552a52dbb Bump Golang 1.13.14 887f0eb7c6 Merge pull request #479 from thaJeztah/19.03_backport_bump_golang 8a9e1bdc07 Merge component 'engine' from git@github.com:docker/engine 19.03 ab25bbca2f Merge component 'cli' from git@github.com:docker/cli 19.03 f56046026b Merge pull request #2633 from thaJeztah/19.03_backport_bump_golang_1.13.13 bbdb18fa3a Merge pull request #41222 from thaJeztah/19.03_bump_buildkit a48c990d07 Merge component 'cli' from git@github.com:docker/cli 19.03 e1e647a270 [19.03] vendor: moby/buildkit v0.6.4-20-g4cb720ef 021a6048e6 Merge pull request #2631 from cpuguy83/19.03_handle_close_error_on_save a6c6dce3a6 Bump Golang 1.13.13 a252aaae7a Merge component 'cli' from git@github.com:docker/cli 19.03 f19d902423 Merge pull request #2629 from thaJeztah/19.03_backport_circleci_updates 4e3a5637b4 Handle errors on close in config file write. 19d2ee3b78 config: preserve ownership and permissions on configfile 08fd87da44 Move circle.yml to .circleci/config.yml 45b3865643 CircleCI: update docker versions used in CI c6012e45cc Update Golang 1.13.13 3a19c4a1df Merge component 'engine' from git@github.com:docker/engine 19.03 b636594b37 Merge pull request #41192 from ameyag/19.03-hcsshim-vndr 177165b75d Merge component 'engine' from git@github.com:docker/engine 19.03 d2e020dbd1 Merge component 'cli' from git@github.com:docker/cli 19.03 d0a4b67aee Merge pull request #41185 from thaJeztah/19.03_bump_buildkit d4e6d9b301 Merge pull request #2623 from s0j/s0j_19.03_bump-crypto-readconsole 06d576d294 Merge component 'cli' from git@github.com:docker/cli 19.03 80e9882cdf vendor: golang.org/x/crypto 2aa609cf4a9d7d1126360de73b55b6002f9e052a e0c24158ad Merge pull request #2620 from thaJeztah/19.03_backport_builder_comment_info d7e86d9c77 Revendor hcsshim to fix image import bug 14ab1c306d vendor: Microsoft/hcsshim v0.8.9 03a47bb4c5 [19.03] vendor: buildkit dc6afa0f755f6cbb7e85f0df4ff4b87ec280cb32 (v0.6.4-15-gdc6afa0f) fd33ebfc36 Merge component 'engine' from git@github.com:docker/engine 19.03 fb095d16b8 Merge pull request #41133 from roidelapluie/bsd2 d0a8d03b7b docs/builder: add note about handling of leading whitespace b56ef36968 Merge component 'cli' from git@github.com:docker/cli 19.03 d2a8fe0e12 Merge pull request #2609 from thaJeztah/19.03_backport_docs_fixes e453c06e79 Merge pull request #2608 from thaJeztah/19.03_backport_vendor_bumps dac7a0fe9a docs: fix example output for docker plugin ls 8c8b82eeb3 list state `ready` for filtering in stack_ps.md 055ee582e3 vendor konsorten/go-windows-terminal-sequences v1.0.3 037e7383ec vendor: mitchellh/mapstructure v1.0.0 2f446000e0 vendor: beorn7/perks v1.0.1 8f8179e576 Enable client on netbsd and dragonfly 5b2eac44f7 allocateNetwork: fix network sandbox not cleaned up on failure f620b6de75 components: use moby/moby instead of docker/engine Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: move docker.init back to files directory to use it from docker-mobyMartin Jansa2020-07-021-0/+0
| | | | | | | | | | | | | * it was moved for some reason in: http://git.yoctoproject.org/cgit/cgit.cgi/meta-virtualization/commit/?id=929372946aeb85953d1ca6acc428d73fbac52a56 but docker-moby uses it as well and now started to fail with: ERROR: docker-moby-19.03.12+git9dc6525e6118a25fab2be322d1914740ea842495-r0 do_fetch: Fetcher failure: Unable to find file file://docker.init anywhere. .. Signed-off-by: Martin Jansa <martin.jansa@lge.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce: remove unused docker-registry.service fileMartin Jansa2020-07-021-19/+0
| | | | | Signed-off-by: Martin Jansa <martin.jansa@lge.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce/docker-moby: fixup GO compiler callsBruce Ashfield2020-07-0111-0/+165
| | | | | | | | | | | | | | | | | | | | With oe-core commit c23f9e80492e4b [tcmode-default: use go-binary-native by default], we must explictly call the proper cross go binary, versus just the go-native variant. These builds were working by luck, since the go compiler was capable of building the target binaries previously (in its build-from-source creation). We fixup the calls and we no longer see fpu build issues: fatal error: gnu/stubs-soft.h: No such file or directory 7 | # include <gnu/stubs-soft.h> | ^~~~~~~~~~~~~~~~~~ This commit also moves the docker-ce patches from "files" to a named directory to reduce confusion. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker/moby: update to v19.03.12Bruce Ashfield2020-07-011-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating moby to the latest 19.03 release, which comprises the following commits: moby: b4ca19a992 vendor: docker/libnetwork 026aabaa659832804b01754aaadd2c0f420c68b6 (bump_19.03 branch) 5fce12cf25 int-cli/TestRunInvalidCPUShares: fix for newer runc 058ea43c5c Bump Golang 1.13.12 77e06fda0c vendor libnetwork to 153d0769a1181bf591a9637fd487a541ec7db1e6 c104a50de4 integration: Add TestDaemonDNSFallback 9482566a5c vendor libnetwork to 71d4d82a5ce50453b1121d95544f0a2ae95bef9b d4e12315cd hack: add more debugging to understand exit codepath 4c24512241 Dockerfile: bump CRIU 3.14 29796375c9 Bump Golang 1.13.11 8f1ab4e612 Fix bug in gotestsum installer causing dependencies to not be downloaded 0a3b2bda34 pkg/archive: escape ":" symbol in overlay lowerdir 9057ddf37c dockerd-rootless.sh: bump up slirp4netns requirement to v0.4.0 a76633684b vendor: update buildkit to a7d7b7f1 706008a1da bump up rootlesskit to v0.9.5 57f6c9a0ef SELinux: fix ENOTSUP errors not being detected when relabeling 7d4dd91a52 logfile: Check if log is closed on close error during rotate edf2c49410 vendor: pkg/errors v0.9.1 63841af153 [19.03] vendor: buildkit v0.6.4-5-g59e305aa 946d0ff67e bump up rootlesskit to v0.9.4 70e7d6fe4a Update CRIU to v3.13 "Silicon Willet" e4f239d68e [19.03] vendor: swarmkit 0b8364e7d08aa0e972241eb59ae981a67a587a0e e149ff62fe vendor: update go-events to fix alignment for 32bit systems a6beb24dc5 [19.03] update libnetwork b9bcf0c3fba9ef8897c9676c5b70ba0345b84b17 282567a58d Bump Golang 1.13.10 b66813eb45 api docs: fix broken link on GitHub 9d8eccec8e Fix TEST_FILTER to work for both "integration" and "integration-cli" 08a2fe0d56 [19.03] vendor buildkit b26cff2413cc6a466f8739262efa13bd126f8fc7 5ba2bf37a8 Bump Golang 1.13.9 f432a04243 Update Golang 1.13.8 81458b3144 Update Golang 1.13.7 (CVE-2020-0601, CVE-2020-7919) 6e1d159680 Update Golang 1.13.6 4241093b63 Update Golang 1.13.5 162fd8b856 Bump Golang 1.13.4 05a1ebd0fd Bump Golang 1.13.3 (CVE-2019-17596) f8d4276a89 bump golang 1.13.1 (CVE-2019-16276) 7df2d881f3 Bump Golang version 1.13.0 fed832e224 Update to using alpine 3.10 4581499848 Switch to s390x Ubuntu 18.04 f34a5b5af0 builder: fix concurrent map write 9f5a5da4cb docs: add API versions v1.30 - v1.37 284bbde996 seccomp: add 64-bit time_t syscalls 359edd8cbf [19.03] vendor: containerd 481103c8793316c118d9f795cde18060847c370e 021258661b Update libnetwork and DNS library 100d240d86 Move schema1 deprecation notice 57d5105759 bump windows-container-utility aa1ba87e99b68e0113bd27ec26c60b88f9d4ccd9 68db0c1739 Dockerfile: switch to iptables-legacy to match the host 4aaf3ead97 Dockerfile: switch golang image to "buster" variant, and update btrfs packages a070874828 hack/make: ignore failure to stop apparmor 237843a059 Dockerfile: align consecutive COPY lines 400b2850ff Dockerfile: order COPY lines by change frequency ddfeaf32ff Dockerfile: sort packages alphabetically cb813faebf Dockerfile: use build-arg for vpnkit 0499db23d1 Dockerfile: use spaces for indentation c77e7cb3d0 [19.03] Dockerfile: move CRIU_VERSION lower c6511ee4db bump vndr v0.1.1 0fa8a0c575 bump vndr v0.1.0 to support versioned import paths f3009e2f51 Use build args to override binary commits in dockerfile 92ca652fc9 Revert "dockerfile: update vndr to 85886e1a" fdad16840c go-swagger: fix panic 075e057de5 Dockerfile: set GO111MODULE=off fe2a25a785 fix backingFs assignment e6c9e2736f Fix rate limiting for logger, increase refill rate 911ecc3376 Set the bip network value as the subnet 08420b1c95 AppArmor: add missing rules for running in userns fbb08f525f AppArmor: remove rules for linkgraph.db SQLite database 1a830501b7 Use FILE_SHARE_DELETE for log files on Windows. dcae74c44a Fix docker crash when creating namespaces with UID in /etc/subuid and /etc/subgid 4076c57b50 Fix more signal handling issues in tests. 68e1150357 DaemonCli: Move check into startMetricsServer b813c398bb Add `FromClient` to test env execution libnetwork 8565f0b1 log error instead if disabling IPv6 router advertisement failed 153d0769 bridge: disable IPv6 router advertisements fdaaa027 Resolver: fix error handling if we didn't receive a response b09f24d1 Fix NPE due to null value returned by ep.Iface() 8068671f Fixes a panic in the DNS resolver 536ae722 Dockerfile: update to Go 1.13.8 dcd95280 Fix gofmt in preparation of Go 1.13 update f0b038ea regenerate protobufs with debian buster 34c8de58 Dockerfile: switch to debian "buster" 96600117 Dockerfile: update to Golang 1.12.17 libcli 5a12f90b4 Don't filter out registries to logout from with config file contents 6cb678f16 vendor: golang.org/x/text v0.3.3 4515c5187 vendor: golang.org/x/text v0.3.2 cfa1fd9ac Don't loose additional metadata fields 31d338dd3 Bump Golang 1.13.12 936d328da Use consistent name for errors 2ee798198 ssh: avoid setting flags through hostname e90b6bcb6 Fix bug with panic when DOCKER_CLI_EXPERIMENTAL environment variable is incorrect 97afb7295 docs/extend: fix broken link and some markdown touch-ups c280cdfd6 docs: fix broken link in dockerd.md 0f59532a1 Run e2e tests with different engine version on Jenkins Rewrite Jenkinsfile to new declarative syntax without parallel as the e2e framework is not tailored for than (container name clash, port clash,...) 95df3499b Add a new Makefile variable to override DockerInDocker engine version we use to run e2e tests 2d1476c6f Partially revert cf663b526a34f3e7911e6e60138138c2023aa844 as it breaks the version negotiation with an older docker engine. 936e9717e Bump Golang 1.13.11 489c7e9cd docs: more Markdown touch-ups 9a57ea886 Update some uses of errors.Cause() to errors.Is() 345b0e79e vendor: pkg/errors v0.9.1 62a9babca vendor: k8s.io/klog v1.0.0-2-g4ad0115 dbc73eafc docs: fix, and touch-up "docker context" docs e06fc01c1 Update dead link and add missing info on COPY 8434242c7 config: don't call homedir on init() 65c37227a docs: update usage output for dockerd (19.03) 55a5ab0f0 docs: fix order of flags in usage, and fix missing quote c150ba2b8 builder: fix broken link 81909d70f docs: fix links, and minor markdown touch-ups cf663b526 cli: perform feature detection lazily c44c18e08 docker build: check experimental --platform on pre-run 25f04876d app-214 Load Client info in getter function 4ad65fc35 fix panic on single-character volumes 83d4cb900 vendor: bump gopkg.in/yaml.v2 v2.2.8 0cfe29431 service update: fix service create example 2dc593f67 Add container_iface_prefix option to documentation 4fe6b837b bump gotest.tools v3.0.1 for compatibility with Go 1.14 a8454a4d9 update vndr v0.1.1 950dcedd9 bump vndr v0.1.0 to support versioned import paths 0d26cbf5b yamldocs: add description to base command d4e4fa3b4 experimental/vlan-networks: markdown touch-ups de12dbfb1 docs/reference: explain "colon" 7ae77e51f docs/extend: reformat notes 733ae82da docs/builder: touch up markdown, and some minor rephrasing 9a1ba7d39 docs/reference/run.md: touch-up markdown 6ba9a3e4c reference docs: reformat notes 96eb0888f reference docs: fix broken links and markdown touch-ups 2676c603f Adding missing title in builder.md 365bae4f8 Add clarification when using USER UID:GI c38b26007 improve "network prune" output to mention custom networks only fd9eedce3 Add "host-gateway" to tests for extra_hosts / --add-host 365118982 Skip IPAddr validation for "host-gateway" string a0f0ed1f5 vendor: update go-events to fix alignment for 32bit systems de6a5fa44 Bump Golang 1.13.10 19ccd4f5d CI: update notary test certificates f8fc68f17 Bump Golang 1.13.9 22cbf9161 Update deprecation policy to 1 stable release 288cdec29 Include deprecation policy on deprecated features page ffffc1ed4 remove unneeded comment from reference files 9fd323afd Fix whitespace that caused short-format in generated YAML c936ea969 Fix yamldocs generator to accomodate nested subcommands d484456c2 Fix naming of reference docs files 6a02465f4 docs: update code-hints for compatibility with "rouge" 6e07d210a Update Golang 1.13.8 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: update to v19.03.12Bruce Ashfield2020-07-011-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping docker-ce to pickup engine and libnetworking changes as follows: docker: 62af9260f7 Bump version to 19.03.12 936779c56d Don't filter out registries to logout from with config file contents c5052816e1 Add MOBY_DISABLE_PIGZ to dockerd environment variable docs fcb50896d6 Split up environment variable documentation between cli and dockerd a8985be19b Fix broken link efc8054c3e vendor: docker/libnetwork 026aabaa659832804b01754aaadd2c0f420c68b6 (bump_19.03 branch) a01cfb62a8 vendor: golang.org/x/text v0.3.3 b6c18bda19 vendor: golang.org/x/text v0.3.2 5ff139ae19 Don't loose additional metadata fields c7821b2eff Bump Golang 1.13.12 80212697cc int-cli/TestRunInvalidCPUShares: fix for newer runc 6812565155 Use consistent name for errors 7df914b706 Bump Golang 1.13.12 42e35e61f3 Bump version to 19.03.11 f1aa3eed9f vendor libnetwork to 153d0769a1181bf591a9637fd487a541ec7db1e6 411bf397cb Bump version to 19.03.10 8c9977e182 ssh: avoid setting flags through hostname e002ed9b22 Fix bug with panic when DOCKER_CLI_EXPERIMENTAL environment variable is incorrect 9c06987b4f docs/extend: fix broken link and some markdown touch-ups e0305a0d5d integration: Add TestDaemonDNSFallback 0b5e7e9157 vendor libnetwork to 71d4d82a5ce50453b1121d95544f0a2ae95bef9b e18049ede6 hack: add more debugging to understand exit codepath 9b224f2a82 Dockerfile: bump CRIU 3.14 060380053a docs: fix broken link in dockerd.md bf5af5d807 Run e2e tests with different engine version on Jenkins Rewrite Jenkinsfile to new declarative syntax without parallel as the e2e framework is not tailored for than (container name clash, port clash,...) 9ff792b4b1 Add a new Makefile variable to override DockerInDocker engine version we use to run e2e tests ddc55e5dae Partially revert cf663b526a34f3e7911e6e60138138c2023aa844 as it breaks the version negotiation with an older docker engine. 830231a085 Bump Golang 1.13.11 09dc8edc28 Bump Golang 1.13.11 90e25f2053 Fix bug in gotestsum installer causing dependencies to not be downloaded a36b2dcf99 pkg/archive: escape ":" symbol in overlay lowerdir eef871ea69 Add 19.03.9 Changelog 08289ce2b7 dockerd-rootless.sh: bump up slirp4netns requirement to v0.4.0 e86a81ae52 vendor: update buildkit to a7d7b7f1 d64ef9e79f docs: more Markdown touch-ups 7a62f198f7 bump up rootlesskit to v0.9.5 085915af4b Update some uses of errors.Cause() to errors.Is() 6a461fe7db vendor: pkg/errors v0.9.1 dab9e682ae SELinux: fix ENOTSUP errors not being detected when relabeling 61b260f95e vendor: k8s.io/klog v1.0.0-2-g4ad0115 3e7fc6b34b docs: fix, and touch-up "docker context" docs 55cac16b19 Update dead link and add missing info on COPY 98b86525c7 config: don't call homedir on init() d4a9c8b0ff Bump Version to 19.03.9 9854078c74 logfile: Check if log is closed on close error during rotate ba985fa151 vendor: pkg/errors v0.9.1 b7053372f9 deb: use DEBIAN_FRONTEND=noninteractive for all dockerfiles 29f7b93a38 docs: update usage output for dockerd (19.03) 4105fc6eeb docs: fix order of flags in usage, and fix missing quote 9efc9eb996 Jenkinsfile: use docker/docker instead of docker/engine dc09faf67a Remove Ubuntu 18.10 "cosmic", as it reached EOL 229ba25b29 Add rhel for s390x f63e79f08f Add Fedora 32, remove Fedora 29 16cea5e8af CentOS: fix failing repository on aarch64 (arm64) 09b724c472 Fix CentOS 8 build 5f18965a2d Undo baseurl string replace for altarch d9d139d449 Add Support for Centos-8 d3673fb117 remove fedora 28 because it is eol 3a5d16fc01 Makefile: remove SOURCE_FILES, SOURCES variables 1807473253 rpm/Makefile: use DISTROS intermediate variable, similar to deb cd431fd2bd rpm/Makefile: remove parameterization of Dockerfile 6d5a139b67 Enable Ubuntu Focal in Jenkinsfile 782cbb1279 Add Ubuntu 20.04 Focal Fossa 3bfab8878a Add build target for ubuntu-eoan f1510b7e2e deb: add missing format version 02ec900b6e Update README to include Ubuntu 19.10 2a11310df0 deb: remove unused DOCKER_GOPATH variable eea48a1e84 Add LICENSE (copy of docker/docker's Apache-2.0 file) 4668185399 Makefile: chown engine dir during cleanup f957acd1a7 update list of reviewers in unir config 76caab9e0f Remove more remnants from image-based engine ca19008e19 Makefile: enable buildkit when building images 5084dc0eeb Remove some remnants related to image-based builds ec06e50ff4 Remove image-based build (for docker engine activate) a00d1a3e8c Dockerfiles: re-use DISTRO, SUITE build-args where possible 5137026e84 deb: Only recommend aufs-tools on amd64 ffd08c257e Re-order common env variables 5ad37075fa ADDED gomodules=off to docker-ce-packaging files b54abb7962 Update packages list c1b70372fa plugins: remove (now) redundant .gitkeep e04831b31a Dockerfiles: remove unused GO_VERSION beb28205b6 Makefile: rely on targets in deb/rpm 2b8e543708 rpm/Makefile: simplify and fix c6c1776bc3 deb/Makefile: simplify and fix 4e553fe39f builder: fix broken link 550ea4a513 [19.03] vendor: buildkit v0.6.4-5-g59e305aa 5bcd2b4368 docs: fix links, and minor markdown touch-ups 5d14c92bcf cli: perform feature detection lazily 0060d37eff docker build: check experimental --platform on pre-run 86b614aec2 app-214 Load Client info in getter function 1eae0fe109 fix panic on single-character volumes 63a0f1b5da vendor: bump gopkg.in/yaml.v2 v2.2.8 d0c4d1bb7d service update: fix service create example a2811833ab Add container_iface_prefix option to documentation b90b044e91 bump up rootlesskit to v0.9.4 33201484aa Update CRIU to v3.13 "Silicon Willet" 296f651e6c Use "buster" variant of Go images 1e9d8254a7 bump gotest.tools v3.0.1 for compatibility with Go 1.14 00802b8595 Bump Golang 1.13.10 4f45952397 Update Golang 1.13.9 10944a9554 Update Golang 1.13.8 ad04f7c12f plugins/buildx: force go modules to use vendor mode d5e9bda107 update vndr v0.1.1 c69ca2c5e7 bump vndr v0.1.0 to support versioned import paths 36c6db1980 yamldocs: add description to base command df84528c7a experimental/vlan-networks: markdown touch-ups 828d4770b6 docs/reference: explain "colon" aa6083444d docs/extend: reformat notes bfd17cb063 docs/builder: touch up markdown, and some minor rephrasing db5c1e4e51 docs/reference/run.md: touch-up markdown 5631277cc4 reference docs: reformat notes 299fb4e282 reference docs: fix broken links and markdown touch-ups 26605e5a3b Adding missing title in builder.md 838d67c5a0 Add clarification when using USER UID:GI c05754a365 [19.03] vendor: swarmkit 0b8364e7d08aa0e972241eb59ae981a67a587a0e d7b734a61f vendor: update go-events to fix alignment for 32bit systems d88786fb81 improve "network prune" output to mention custom networks only 62e46c2b66 Add "host-gateway" to tests for extra_hosts / --add-host 3199cd1856 Skip IPAddr validation for "host-gateway" string e9eeb762f5 vendor: update go-events to fix alignment for 32bit systems 870586b77d Bump Golang 1.13.10 2e46b1e331 [19.03] update libnetwork b9bcf0c3fba9ef8897c9676c5b70ba0345b84b17 650989cffa CI: update notary test certificates d68161f5ca Bump Golang 1.13.10 3f6cbafb87 api docs: fix broken link on GitHub 03a2b6f3e5 Fix TEST_FILTER to work for both "integration" and "integration-cli" 386205e278 [19.03] vendor buildkit b26cff2413cc6a466f8739262efa13bd126f8fc7 825df7e593 Bump Golang 1.13.9 5ceee878a0 Bump Golang 1.13.9 f9e55973fd Update Golang 1.13.8 6239c3658e Update Golang 1.13.7 (CVE-2020-0601, CVE-2020-7919) ca646694e0 Update Golang 1.13.6 5df7607049 Update Golang 1.13.5 ba70026a0f Bump Golang 1.13.4 5d41640c38 Bump Golang 1.13.3 (CVE-2019-17596) 0ce2031f1d bump golang 1.13.1 (CVE-2019-16276) 03ea68926d Bump Golang version 1.13.0 f2377417ee Update to using alpine 3.10 cdcca890cc Switch to s390x Ubuntu 18.04 330f0aec13 builder: fix concurrent map write 17a1f3f112 docs: add API versions v1.30 - v1.37 e83446f765 seccomp: add 64-bit time_t syscalls 7a88b57398 [19.03] vendor: containerd 481103c8793316c118d9f795cde18060847c370e 0adbd79f8a Update libnetwork and DNS library 30e89b9771 Update deprecation policy to 1 stable release d444120281 Include deprecation policy on deprecated features page 9ea6bbb5fe remove unneeded comment from reference files a1c631a95d Fix whitespace that caused short-format in generated YAML ee8847c1ae Fix yamldocs generator to accomodate nested subcommands 240eda98bf Fix naming of reference docs files c2de31670c docs: update code-hints for compatibility with "rouge" 3fe5e22b5d Move schema1 deprecation notice d071a64684 bump windows-container-utility aa1ba87e99b68e0113bd27ec26c60b88f9d4ccd9 773359a601 Dockerfile: switch to iptables-legacy to match the host 3b64f62c34 Dockerfile: switch golang image to "buster" variant, and update btrfs packages 0c599907a5 hack/make: ignore failure to stop apparmor 14461409c2 Dockerfile: align consecutive COPY lines f422d243fe Dockerfile: order COPY lines by change frequency 60af9b2b9c Dockerfile: sort packages alphabetically edc3150b30 Dockerfile: use build-arg for vpnkit c3939550e0 Dockerfile: use spaces for indentation bf61271ddc [19.03] Dockerfile: move CRIU_VERSION lower 30c60fc2a3 bump vndr v0.1.1 9ac5b25cb5 bump vndr v0.1.0 to support versioned import paths 21e7bfd059 Use build args to override binary commits in dockerfile c37bec6230 Revert "dockerfile: update vndr to 85886e1a" c7b33768a6 go-swagger: fix panic d69a049009 Dockerfile: set GO111MODULE=off 63369ad083 fix backingFs assignment 6bf8bed5fc Fix rate limiting for logger, increase refill rate 680fd72af7 Update Golang 1.13.8 194ea663d9 Set the bip network value as the subnet b9b1b0b8f0 AppArmor: add missing rules for running in userns 20666c2d62 AppArmor: remove rules for linkgraph.db SQLite database 64e3e12354 Use FILE_SHARE_DELETE for log files on Windows. af7196a03b Fix docker crash when creating namespaces with UID in /etc/subuid and /etc/subgid bb990f060a Fix more signal handling issues in tests. 188bdab73b DaemonCli: Move check into startMetricsServer 72f7e5a414 Add `FromClient` to test env execution libnetwork: 8565f0b1 log error instead if disabling IPv6 router advertisement failed 153d0769 bridge: disable IPv6 router advertisements fdaaa027 Resolver: fix error handling if we didn't receive a response b09f24d1 Fix NPE due to null value returned by ep.Iface() 8068671f Fixes a panic in the DNS resolver 536ae722 Dockerfile: update to Go 1.13.8 dcd95280 Fix gofmt in preparation of Go 1.13 update f0b038ea regenerate protobufs with debian buster 34c8de58 Dockerfile: switch to debian "buster" 96600117 Dockerfile: update to Golang 1.12.17 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: enable docker.socket instead of docker.serviceDan Callaghan2020-06-051-1/+1
| | | | | | | | | The docker daemon supports systemd socket activation. If we enable docker.socket (and not docker.service) then the daemon will be started when it is first used. Signed-off-by: Dan Callaghan <dan.callaghan@opengear.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-moby: update to v19.03.8Bruce Ashfield2020-03-151-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping to 19.03.8 to pickup bugfixes and security changes. The following commits comprise the chnage: moby: aa6a9891b0 vendor: add local copy of archive/tar 0d4f412ecd dockerfile: update vndr to 85886e1a libnetwork: c7bae399 Merge pull request #2525 from trapier/bump_19.03/cleanup-vfp-during-network-removal 8c407f52 Cleanup VFP during overlay network removal bd5c6080 Merge pull request #2520 from SamWhited/19.03_backport_dns_update 74b17410 Bump the DNS library and revendor cli: eb310fca Merge pull request #2373 from tiborvass/19.03-bump-grpc-1.23.1 0e40b919 vendor: bump google.golang.org/grpc v1.23.1 a51e9e63 vendor: update grpc to v1.23.0 Testing has been performed across x86-64/arm64 via cli and through higher level frameworks. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce: update to v19.03.8Bruce Ashfield2020-03-151-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updating to 19.03.8 to pickup bugfixes and security changes. The following commits comprise this update: docker: afacb8b7f0 Bump Version to 19.03.8 f0867e5a51 Merge component 'engine' from git@github.com:docker/engine 19.03 07428504dc vendor: add local copy of archive/tar 618fcb5466 dockerfile: update vndr to 85886e1a 7141c199a2 Merge pull request #644 from tiborvass/bump-19.03.7 3cf22484bf Bump Version to 19.03.7 70aa6b7044 Merge component 'cli' from git@github.com:docker/cli 19.03 43289e30e1 Merge pull request #2373 from tiborvass/19.03-bump-grpc-1.23.1 2887460cc7 vendor: bump google.golang.org/grpc v1.23.1 09986ab5ca vendor: update grpc to v1.23.0 e126c63873 Merge component 'engine' from git@github.com:docker/engine 19.03 8d208698a3 Merge pull request #40604 from thaJeztah/19.03_backport_mis_unlock f096143c86 Merge pull request #40476 from cpuguy83/19.03_fix_exec_id_client 1aa048bde4 Merge pull request #40461 from AkihiroSuda/cherrypick-40243-1903 d3d2e44a59 daemon/cluster: add a missing Unlock 2de3fd06af Merge pull request #40566 from thaJeztah/19.03_backport_bump_grpc f0e27e52c1 Merge component 'cli' from git@github.com:docker/cli 19.03 6c810a4023 Merge pull request #40586 from thaJeztah/19.03_revert_jenkinsfile_pin_older_windows 65550b7564 Merge pull request #2352 from thaJeztah/19.03_backport_add_daemon_redirect 118ddd9ac0 docs: add redirect for old location of daemon reference baa53b1dcc Merge pull request #2344 from thaJeztah/19.03_backport_builder_prune_flags 29ef942a84 Revert "Jenkinsfile: temporarily pin windows image to 10.0.17763.973" 7b2f8d7926 Use certs.d from XDG_CONFIG_HOME when in rootless mode 169aca7c55 Merge pull request #40575 from thaJeztah/19.03_backport_unify_apis 2f8f8550c8 docs: add API versions v1.25 - v1.29, v1.38 - v1.40 56a7c6cd63 Merge pull request #40477 from cpuguy83/19.03_40446_check_other_mounts 7167b9b338 Merge pull request #40547 from thaJeztah/19.03_backport_update_selinux_v1.3.1 e631d419ad Merge pull request #40560 from thaJeztah/19.03_backport_33434_api_doc_base64url ec69262a25 Merge pull request #40557 from thaJeztah/19.03_bump_buildkit_v0.6.4 84340bb84b Merge pull request #40555 from fuweid/cp1903-40137 2c8b487132 bump google.golang.org/grpc v1.23.1 b029f9629f Fixes #33434 - API docs to specify using base64url c86ab2bc0e vendor: update buildkit v0.6.4 c17e991798 daemon: add grpc.WithBlock option d9f362f57b Merge pull request #40549 from cpuguy83/19.03_stats_use_cond_var 4acaa303f2 Merge pull request #40551 from thaJeztah/19.03_backport_jenkinsfile_pin_older_windows 3336316a08 Jenkinsfile: temporarily pin windows image to 10.0.17763.973 bfb975ac72 Use condition variable to wake stats collector. 9b30897146 Merge pull request #40490 from thaJeztah/19.03_backport_swagger_document_constraints 0c7625e047 Merge pull request #40540 from thaJeztah/19.03_update_containerd_1.2.13 2175a93304 Merge pull request #40533 from thaJeztah/19.03_update_golang_1.12.17 dac6fed0eb vendor: update opencontainers/selinux v1.3.1 5321005e4e Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 19.03 d97f4c303b Merge pull request #432 from thaJeztah/19.03_backport_bump_golang_1.12.17 e08e107ddc Merge component 'cli' from git@github.com:docker/cli 19.03 058ac7dc90 Merge pull request #2342 from thaJeztah/19.03_backport_bump_golang_1.12.17 c68e88f348 update containerd runtime v1.2.13 84d75db7ac Fix builder prune -a/--all flag description 29db22eecc unused-for is a deprecated synonym 6da959331a Merge pull request #40462 from AkihiroSuda/cherrypick-40210-1903 2f76c46e36 Update Golang 1.12.17 f49613c3ae Update Golang 1.12.17 afa2b687e0 Update Golang 1.12.17 499e12df0c Exec inspect field should be "ID" not "ExecID" d4c418d850 swagger: document "node.platform.(arch|os)" constraints 789f1ad281 Merge pull request #40460 from AkihiroSuda/cherrypick-40406-1903 dcd9e43a90 Check tmpfs mounts before create anon volume c3a1bdbbdb overlay[2]: rm fs checks 7f44c538ef Fix/improve overlay support check a5c9db1fa1 overlay: move supportsMultipleLowerDir to utils 806947ebfa Use fewer modprobes ec2e4c6eca dockerd-rootless.sh: remove confusing code comment libnetwork: c7bae399 Merge pull request #2525 from trapier/bump_19.03/cleanup-vfp-during-network-removal 8c407f52 Cleanup VFP during overlay network removal bd5c6080 Merge pull request #2520 from SamWhited/19.03_backport_dns_update 74b17410 Bump the DNS library and revendor Testing has been performed across x86-64/arm64 via cli and through frameworks such as cri-o and kubernetes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-moby: fix buildMartin Jansa2020-03-032-0/+62
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * apply similar patch to what was applied to docker-ce in: http://git.yoctoproject.org/cgit/cgit.cgi/meta-virtualization/commit/recipes-containers/docker?id=e7787cb01be91d3798594687a475d5b085f29ede it's very similar, but needs to be separate .patch file, because the path to make/.binary is different in docker-ce and docker-moby. since the recent upgrade: http://git.yoctoproject.org/cgit/cgit.cgi/meta-virtualization/commit/?id=f770151b3ff0938bea4972abdd1ee7f6cbc3a074 docker-moby needs the same change or fails like this: | ERROR: Execution of 'work/raspberrypi4-oe-linux-gnueabi/docker-moby/19.03.6+git71373c6105e3cbc9702935b96d8ee01214c405e7-r0/temp/run.do_compile.31754' failed with exit code 2: | | Package devmapper was not found in the pkg-config search path. | Perhaps you should add the directory containing `devmapper.pc' | to the PKG_CONFIG_PATH environment variable | No package 'devmapper' found | Removing bundles/ | | ---> Making bundle: dynbinary (in bundles/dynbinary) | Building: bundles/dynbinary-daemon/dockerd-19.03.6 | GOOS="linux" GOARCH="arm" GOARM="7" | # runtime/cgo | exec: "arm-linux-gnueabihf-gcc": executable file not found in $PATH | WARNING: work/raspberrypi4-oe-linux-gnueabi/docker-moby/19.03.6+git71373c6105e3cbc9702935b96d8ee01214c405e7-r0/temp/run.do_compile.31754:1 exit 2 from 'VERSION="19.03.6" DOCKER_GITCOMMIT="${SRCREV_docker}" ./hack/make.sh dynbinary' | ERROR: Task (meta-virtualization/recipes-containers/docker/docker-moby.bb:do_compile) failed with exit code '1' Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-moby: fix DOCKER_GITCOMMITMartin Jansa2020-03-031-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * SRCREV_docker isn't defined in docker-moby recipes at all so it passes unexpanded ${SRCREV_docker} as noticed in error log: | ERROR: Execution of 'work/raspberrypi4-oe-linux-gnueabi/docker-moby/19.03.6+git71373c6105e3cbc9702935b96d8ee01214c405e7-r0/temp/run.do_compile.31754' failed with exit code 2: | | Package devmapper was not found in the pkg-config search path. | Perhaps you should add the directory containing `devmapper.pc' | to the PKG_CONFIG_PATH environment variable | No package 'devmapper' found | Removing bundles/ | | ---> Making bundle: dynbinary (in bundles/dynbinary) | Building: bundles/dynbinary-daemon/dockerd-19.03.6 | GOOS="linux" GOARCH="arm" GOARM="7" | # runtime/cgo | exec: "arm-linux-gnueabihf-gcc": executable file not found in $PATH | WARNING: work/raspberrypi4-oe-linux-gnueabi/docker-moby/19.03.6+git71373c6105e3cbc9702935b96d8ee01214c405e7-r0/temp/run.do_compile.31754:1 exit 2 from 'VERSION="19.03.6" DOCKER_GITCOMMIT="${SRCREV_docker}" ./hack/make.sh dynbinary' | ERROR: Task (meta-virtualization/recipes-containers/docker/docker-moby.bb:do_compile) failed with exit code '1' this build issue is somehow caused by recent upgrade: http://git.yoctoproject.org/cgit/cgit.cgi/meta-virtualization/commit/?id=f770151b3ff0938bea4972abdd1ee7f6cbc3a074 and this build error is not fixed by this change, but see 2nd to last line which shows DOCKER_GITCOMMIT="${SRCREV_docker}" Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce/moby: update to latest 19.03.x revisionsBruce Ashfield2020-03-022-10/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping the docker recipes to the latest 19.03 changes: f0e27e52c1 Merge component 'cli' from git@github.com:docker/cli 19.03 65550b7564 Merge pull request #2352 from thaJeztah/19.03_backport_add_daemon_redirect 118ddd9ac0 docs: add redirect for old location of daemon reference baa53b1dcc Merge pull request #2344 from thaJeztah/19.03_backport_builder_prune_flags 5321005e4e Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 19.03 d97f4c303b Merge pull request #432 from thaJeztah/19.03_backport_bump_golang_1.12.17 e08e107ddc Merge component 'cli' from git@github.com:docker/cli 19.03 058ac7dc90 Merge pull request #2342 from thaJeztah/19.03_backport_bump_golang_1.12.17 84d75db7ac Fix builder prune -a/--all flag description 29db22eecc unused-for is a deprecated synonym 2f76c46e36 Update Golang 1.12.17 f49613c3ae Update Golang 1.12.17 369ce74a3c Merge pull request #643 from arkodg/19.03 bee80f7cbf Bump Version to 19.03.6 78e3d7a827 Merge component 'cli' from git@github.com:docker/cli 19.03 a53add6c25 Merge pull request #2320 from thaJeztah/19.03_docs_backports b21b8c4427 docs: update deprecated status for --disable-legacy-registry ee91f95834 docs: add status table to "deprecated.md" 672cbe85e0 docs: mark deprecation of "docker engine" subcommands 1697838c76 docs: mark deprecation of "dab" files and top-level "deploy" subcommand 293ca94147 docs: sort "deprecated.md" by deprecation release 8ac182f3d5 docs: update some release-versions in "deprecated.md" 7877cc4a39 docs: minor touch-ups in "deprecated.md" 22b4b51d54 docs: service create: document os/arch constraints and more examples 09315bfb9c docs: service create: document non-matching/exclude constraints 275af80811 docs: service create: use markdown table for constraints 969ddd8937 Give an example for --reserve-memory 70114cfeab Merge component 'cli' from git@github.com:docker/cli 19.03 0056d8cf4a Merge pull request #2315 from thaJeztah/19.03_backport_carry_855_config_opts c3831cea9c Remove a useless '\' and enhance a script in an example in the section 'Add entries ... (--add-host)' d9eb3c2d18 Add examples for configs 586103a655 Merge component 'cli' from git@github.com:docker/cli 19.03 9e55c7c6ff Merge pull request #2311 from thaJeztah/19.03_backport_carry_1889_build_docs_update fc0328309a Syntax corrected 94739e3a28 docs: document dockerignore update 49c91f0de5 docs: document build outputs 0350afa412 docs: document cache-from b9eb7e03e8 Add notice about port binding and overriding of UFW to docker run reference 97049ac8a1 Merge pull request #640 from arkodg/19.03 6d6ce58b31 Bump version to 19.03.6.rc2 76a635b4c1 Merge component 'engine' from git@github.com:docker/engine 19.03 92806c13e9 Merge pull request #40453 from thaJeztah/19.03_bump_containerd 74ceaefc0f Merge component 'engine' from git@github.com:docker/engine 19.03 6e493ff731 update runc library to v1.0.0-rc10 (CVE-2019-19921) 4b4ef42785 update runc binary to v1.0.0-rc10 (CVE-2019-19921) 0a962fdb56 [19.03] Update containerd binary to v1.2.12 e88a6aff54 Merge pull request #40440 from tonistiigi/1903-update-buildkit 8d4dd9cf04 Merge pull request #40432 from thaJeztah/19.03_bump_swarmkit 7b4d2e6d4b vendor: update buildkit to 57e8ad5 57d13bfe2a Merge pull request #40433 from thaJeztah/19.03_bump_golang_1.12.16 2fb2d60efe [19.03] vendor: bump swarmkit 062b694b46c0744d601eebef79f3f7433d808a04 2cf45c5bcb vendor: update golang.org/x/crypto 69ecbb4d6d5dab05e49161c6e77ea40a030884e1 6466a776b3 [19.03] Update Golang 1.12.16 (CVE-2020-0601, CVE-2020-7919) 3e58daafc4 Merge component 'cli' from git@github.com:docker/cli 19.03 68d0178e83 Merge pull request #2302 from thaJeztah/19.03_bump_golang_1.12.16 e5e1976a91 Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 19.03 4e8f5d9d7d Merge pull request #429 from thaJeztah/19.03_backport_bump_golang_1.12.16 9dd99e2dc3 Update Golang 1.12.16 (CVE-2020-0601, CVE-2020-7919) 5974a91053 vendor: update golang.org/x/crypto 69ecbb4d6d5dab05e49161c6e77ea40a030884e1 (CVE-2020-7919) d3739cb2c9 Update Golang 1.12.16 (CVE-2020-0601, CVE-2020-7919) a5b1206510 Merge component 'cli' from git@github.com:docker/cli 19.03 a2bc745cee Merge pull request #2291 from thaJeztah/19.03_backport_update_flag_description 80c58bbf63 Merge component 'cli' from git@github.com:docker/cli 19.03 7b094d6ad6 Merge pull request #2292 from thaJeztah/19.03_backport_hide_unsupported_buildkit_flags 45171da30b Annotate flags that are not supported by Buildkit 7f9957e9d5 Update flag description for docker rm -v 77739a9875 Merge pull request #639 from arkodg/19.03 855b0a0806 Bump version to 19.03.6.rc1 8af945c717 Merge component 'engine' from git@github.com:docker/engine 19.03 7cdc0a43bc Merge pull request #454 from thaJeztah/19.03_backport_lgetxattr_panic 4bd7815ea5 Merge component 'engine' from git@github.com:docker/engine 19.03 78567fe9cc Merge pull request #429 from thaJeztah/19.03_backport_windows_1903_fixes 8b00f36b33 Merge pull request #240 from thaJeztah/19.03_backport_lcowfromscratch 80cebcf36a Merge pull request #443 from thaJeztah/19.03_backport_health_race 5effd71d27 Merge pull request #441 from thaJeztah/19.03_backport_fix_double_host 102b097aff Merge pull request #439 from arkodg/19.03 4e53bffc7f Merge pull request #442 from thaJeztah/19.03_backport_errdefs_no_recurse c094d5a10c Merge pull request #444 from thaJeztah/19.03_backport_fix_unmount_ipc_ignore_enotexist 6c41819f16 Merge pull request #446 from thaJeztah/19.03_backport_ctx_upload_cancel 8f7f8f44fe Merge pull request #447 from thaJeztah/19.03_backport_fix_containerStart_unhandled_error 084a766569 Merge pull request #449 from thaJeztah/19.03_backport_move_windows_gopath_out_of_goroot 4e02c9f299 Merge pull request #440 from thaJeztah/19.03_backport_remove_cocky 446d2c5c1c Merge pull request #448 from thaJeztah/19.03_backport_gofmt_pkg_parsers 3a72499a38 Merge pull request #450 from thaJeztah/19.03_backport_bump_docker_py_4.1.0 169849fb47 Merge pull request #451 from thaJeztah/19.03_backport_swagger_fixes 9d81f4dc77 Merge pull request #452 from thaJeztah/19.03_bump_golang_1.12.15 cda3e3908a Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 19.03 ff42a8ba90 Merge pull request #425 from thaJeztah/19.03_backport_file_permissions db575945f1 Merge component 'engine' from git@github.com:docker/engine 19.03 89d170efa5 Merge pull request #453 from tonistiigi/1903-update-buildkit cebe170ea9 Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 19.03 45d8672a7c Merge pull request #423 from thaJeztah/19.03_backport_eq_fix bb2ce33fe5 Merge pull request #419 from thaJeztah/19.03_backport_bump_golang_1.12.15 8e8ca6cefd Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 19.03 165fa60cf6 deb: make init and postinst files executable ea068ad379 deb: make "rules" executable 8d381059b1 Update Golang 1.12.15 00f93046eb fix eq issue 86c51432c5 Merge pull request #424 from thaJeztah/19.03_fix_engine_build_branch 811ee1c9eb [19.03] Jenkinsfile: fix image-based engine using wrong branch 47f2060ce6 vendor: update buildkit to 926935b5 5ad9cc8ca2 Merge component 'cli' from git@github.com:docker/cli 19.03 3a0d01d07d Merge pull request #2276 from thaJeztah/19.03_backport_bump_golang_1.12.15 6dba05f752 Update Golang 1.12.15 2e17c08fc0 Bump Golang 1.12.14 1ee8d32fb1 Merge component 'engine' from git@github.com:docker/engine 19.03 10edafeba6 Merge pull request #434 from AkihiroSuda/bump-up-rootlesskit-1903 934fe5908d rootless: fix proxying UDP packets 54e2eea263 Merge component 'engine' from git@github.com:docker/engine 19.03 ebff06c64d Merge pull request #445 from thaJeztah/19.03_backport_only_add_btrfs_when_needed_please 14944dac60 Merge component 'cli' from git@github.com:docker/cli 19.03 a6a5fe3f42 [19.03] Bump Golang 1.12.15 d60a0ce710 Merge pull request #2264 from thaJeztah/19.03_backport_passthrough_user_pass 06f4c68830 Merge pull request #2265 from thaJeztah/19.03_backport_fix_pull_test b8f99514f5 Merge pull request #2266 from thaJeztah/19.03_backport_circleci_updates 2bdad99c18 Merge pull request #2267 from thaJeztah/19.03_backport_fix_print 2558f6da19 Merge pull request #2268 from thaJeztah/19.03_backport_docs_changes 43a7e621fa Change example networks 6eeb780d69 Add docs for proxy configuration in config.json bd178e5d35 Fixing some links and deleting an older page reference e027dee044 Update service_create.md 7c3c6bde38 Docs: add note about management commands targeting a manager 8adb5acdec fix formatting issue of encoded url 37661a3bde CircleCI: add some info steps, and re-group jobs 33e6e19119 fix(pull_test): for quiet option 72f8164a81 Fix lint issue 292158ca22 Add test case to cover non-empty auth entry 5caedcf1e7 Allow username/password in config file 2da9c2471c Fix possible runtime panic in Lgetxattr b2ff3fc218 Fix Engine API version history typo 02ea27bc5e swagger: add missing container Health docs 517eb6a711 swagger: move ContainerState to definitions 7bc205f9f7 Fix phrasing when referring to the freezer cgroup 371d0446b2 Update service networks documentation 53051b43bd swagger: restore bind options information 2d9b525418 /containers/{id}/json missing Platform d29437ceda Document `message` parameter to `/images/create` 2f58c245d9 Fix indentation in some description c025267db2 fix swagger.yaml #39484 45e4107de0 bump docker-py to 4.1.0 91d2ac3c90 Move GOPATH out from under the GO source tree 7bc5833224 pkg/parsers/kernel: gofmt hex value (preparation for Go 1.13+) 3a8b05b8b2 daemon:containerStart() fix unhandled error for saveApparmorConfig f72d87c0fc builder-next: close build context upload on cancel 04be8ea7c7 daemon: Remove btrfs_noversion build flag c49c729ba2 Fix "no such file or directory" warning when unmounting IPC mount 759272227c Avoid a data race in container/health.go dd7239f025 errdefs: remove unneeded recursive calls ec423339f0 daemon: don't listen on the same address multiple times 303c74632d Remove cocky from names-generator 3552b026fd Merge component 'engine' from git@github.com:docker/engine 19.03 e7074b6956 Merge component 'cli' from git@github.com:docker/cli 19.03 00159b2d54 Bump 19.03 libnetwork refpoint a2f2b955f2 Merge pull request #2195 from tiborvass/19.03-fix-cp cfe657d671 Merge component 'engine' from git@github.com:docker/engine 19.03 a62d4a6ea5 Merge pull request #424 from thaJeztah/19.03_backport_39608_short_libnetwork_id bb0b936f68 Merge component 'cli' from git@github.com:docker/cli 19.03 982bbfbb9d Merge pull request #2184 from thaJeztah/19.03_backport_fix_max_replicas_per_node_interpolation 9e38db328e Merge pull request #423 from thaJeztah/19.03_backport_win_restore_no_parallelism d6cc247196 Merge pull request #427 from thaJeztah/19.03_backport_40232-comply_with_gelf_spec 403d9c3fcb Merge pull request #425 from cpuguy83/backport_40169_windows_version_quad 788a8e1b4a Merge pull request #435 from thaJeztah/19.03_bump_golang_1.12.14 817461b421 Merge pull request #428 from thaJeztah/19.03_bump_containerd_1.2.11 245f1458e5 Merge pull request #437 from thaJeztah/19.03_backport_skip_broken_docker_py_test 27678e7a7f Merge pull request #438 from ydcool/19.03_backport_fix_compiling_errors_on_mips 642b00b68e Merge component 'cli' from git@github.com:docker/cli 19.03 ebf04109a4 Merge pull request #2261 from zappy-shu/19.03_backport_2250-reverse-port-long-format-order aeec1f7a39 Reverse order of long-form ports 169540b729 cast Dev and Rdev of Stat_t to uint64 for mips 84bf606e9d Merge component 'cli' from git@github.com:docker/cli 19.03 3a9fa3f639 Merge pull request #2239 from thaJeztah/19.03_backport_carry_golangci_lint 482879a6bc Merge pull request #2240 from thaJeztah/19.03_backport_carry_platform_docs 2b51a9c7a8 docs: document from platform a3fb446453 docker-py: skip broken ImageCollectionTest::test_pull_multiple c14d933c6c docker-py: re-enable tests that were fixed in v4.1.0 ffc1e0d1e8 Remove now obsolete gometalinter and use golangci-lint instead b12cb0425d cli/command/stack/kubernetes: Using the variable on range scope `c` in function literal (scopelint) 06b7cc4b21 cli/command/container: Using the variable on range scope `c` in function literal (scopelint) e10677a913 cli/command/stack/kubernetes: Using a reference for the variable on range scope `obj` (scopelint) ad3520d231 opts: Using the variable on range scope `tc` in function literal (scopelint) b88c92188a cli/manifest: Using the variable on range scope `testcase` in function literal (scopelint) b1f12aeb53 cli/compose/template: Using the variable on range scope `tc` in function literal (scopelint) 19a5404f7c cli/command/container: suppress dogsled warnings 05d443cf6e e2e: remove unnecessary trailing newline (whitespace) 95a8c8d361 internal: remove unnecessary newlines (whitespace) bbd8228b8b cli/command: Using the variable on range scope `testcase` in function literal (scopelint) 4bd7b2790b cli: remove unnecessary newlines (whitespace) 709d853810 cli/command/trust: Using the variable on range scope `keyBytes` in function literal (scopelint) e4dd0c48c0 cli/command/context: Using the variable on range scope `c` in function literal (scopelint) 941a48cf6c e2e/cli-plugins: Using the variable on range scope `args` in function literal (scopelint) 1bd87c8870 cli/compose/loader: Using a reference for the variable on range scope `overrideService` (scopelint) cf3ad51330 templates: Using the variable on range scope `testCase` in function literal (scopelint) 938050f6df service/logs: Using the variable on range scope `testcase` in function literal (scopelint) 892f49ecc1 cli/config: Using the variable on range scope `tc` in function literal (scopelint) 86637da9e1 cli/command/formatter: Error return value of `ContainerWrite` is not checked (errcheck) f1226e4803 cli/command: Error return value of `cli.Apply` is not checked (errcheck) c16e5c5cb6 cli/command/formatter: Error return value of `ImageWrite` is not checked (errcheck) 6980a9fa85 cli/context/store: SA5001: should check returned error before deferring f.Close() (staticcheck) 3b21601ee7 cli/command/image: SA1006: printf-style with no further arguments (staticcheck) 6607bae1ed cli/command/utils: SA1006: printf-style with no further arguments (staticcheck) 63aecdcc56 cli/command/trust: SA1006: printf-style with no further arguments (staticcheck) 8dce5cdba3 cli/command/image/build: G107: Potential HTTP request made with variable url (gosec) 356d918639 cli/command/service: SA1012: do not pass a nil Context (staticcheck) 406e58f349 cli/command/secret: G101: Potential hardcoded credentials (gosec) b60f19d443 cli/compose/convert: driverObjectConfig - result 1 (error) is always nil (unparam) feabf9a1a7 e2e/container: containerExistsWithStatus - t is unused (unparam) dc7ad38270 cli/command/image/build/context_test.go:244:38: `createTestTempDir` - `prefix` always receives `"builder-context-test"` (unparam) a96c9f7fb3 cli/command/registry/login_test.go:66:25: unnecessary conversion (unconvert) 6fc683021d File is not `goimports`-ed (goimports) e04f71b179 cli/compose/convert/service_test.go:274:72: unnecessary conversion (unconvert) e0a19e5428 cli/command/trust/sign_test.go:119:70: unnecessary conversion (unconvert) 6ebeec5a54 Disable unparam linter: e2e/image/push_test.go:299:27: `withNotaryPassphrase` - `pwd` always receives `"foo"` (unparam) fc40566c78 Disable unparam linter: cli/required.go:102:16: `pluralize` - `word` always receives `"argument"` (unparam) 7ce0919e99 compose/loader: define type for transformer-functions 3e2e85ac3f disable unparam linter on these functions, as we need an error in these function signatures cd2bfde567 cli/compose/convert: result 1 (error) is always nil (unparam) b591d5805c cli/command/system/info.go:116:68: prettyPrintClientInfo - result 0 (error) is always nil (unparam) 0110e1a9fa cli/command/stack/kubernetes/deploy_test.go:65:68: `checkOwnerReferences` - `stackName` always receives `"test"` (unparam) cdaadd3714 cli/command/plugin/list_test.go:61:31: `TestList$1` - `filter` is unused (unparam) 949cd3a5a5 cli/command/image/build_session.go:133:45: getBuildSharedKey - result 1 (error) is always nil (unparam) 4de862fd32 cli/command/image/build_buildkit.go:450:56: parseSSH - result 1 (error) is always nil (unparam) 142ccde3b1 cli/command/image/build/context_test.go:252:71: `createTestTempFile` - `perm` always receives `0777` (`511`) (unparam) e6a8833c39 cli/command/image/build/context_test.go:244:38: `createTestTempDir` - `dir` always receives `""` (unparam) 7c4745bb2b unchecked errors 8f63ddef03 cli/command/container/attach.go:141:15: nilness: impossible condition: nil != nil (govet) db9be2bb14 opts/ulimit_test.go:11:13: composites: `*github.com/docker/cli/vendor/github.com/docker/go-units.Ulimit` composite literal uses unkeyed fields (govet) de156d566e cli/compose/types/types.go:106:2: structtag: struct field tag `yaml:",inline", json:"-"` not compatible with reflect.StructTag.Get: key:"value" pairs not separated by spaces (govet) f97c9969e2 cli/registry/client/fetcher.go:106:9: nilness: impossible condition: nil != nil (govet) 5e679e1088 cli/command/container/start.go:157:20: nilness: nil dereference in type assertion (govet) 6c3a85d5bd cli/command/stack/kubernetes/list.go:32:47: nilness: tautological condition: non-nil != nil (govet) 46b5db8f92 cli/command/trust/key_generate.go:112:9: nilness: impossible condition: nil != nil (govet) 34db4b6f2d SA1019: httputil.ErrPersistEOF is deprecated: No longer used. (staticcheck) 40eae09556 cli/command/container/stats.go:211:21: SA1015: using time.Tick leaks the underlying ticker, consider using it only in endless functions, tests and the main package, and use time.NewTicker here (staticcheck) abd320c8ee cli/command/trust/inspect_pretty_test.go:399:24: SA4010: this result of append is never used, except maybe in other appends (staticcheck) 11cd9341cf opts/throttledevice.go:51:5: SA4003: unsigned values are never < 0 (staticcheck) c7898382f0 compose/loader: fix TestIsAbs not testing all combinations 8f6e057d58 Gometalinter: raise deadline to 3 minutes db568b7af3 gometalinter: fix configuration 775adaed88 [19.03] Bump Golang 1.12.14 aa6bfe79fc Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 19.03 c3d8c3468e Merge pull request #413 from arkodg/19.03 ec67290985 Add ubuntu-disco and ubuntu-eoan to deb Makefile 8529189e00 Add Ubuntu 19.10 "eoan" 45b0e46ce5 Merge pull request #638 from tiborvass/bump19036test e3e3a4e994 Bump VERSION to 19.03.6-test1 b875282b34 Merge component 'cli' from git@github.com:docker/cli 19.03 6fed018433 Merge pull request #2222 from thaJeztah/19.03_backport_fix_docker_cp_npe 250fddee49 docker cp: prevent NPE when failing to stat destination 93bf0c971f Bump hcsshim to b3f49c06ffaeef24d09c6c08ec8ec8425a 6ad4cf704c TestRunAttachFailedNoLeak: Compare lowercase a44ab059da bump Microsoft/hcsshim 2226e083fc390003ae5aa8325c3c92789afa0e7a f521821787 integration-cli: remove unnescessary conversions (unconvert) 08d18a123f Rename "v1" to "statsV1" c6b9bdb87c bump containerd/cgroups 5fbad35c2a7e855762d3c60f2e474ffcad0d470a c8bfd0a7a9 bump containerd/cgroups c4b9ac5c7601384c965b9646fc515884e091ebb9 298f6e1c08 Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 19.03 0c8d8151ac RHEL8 iptables build fix (#410) 67f4391ce0 [19.03] Update containerd binary to v1.2.11 31d684a683 [19.03] Update to runc v1.0.0-rc9 df4aa4947c LCOW: Fix FROM scratch cdd97d5eee logger/gelf: Skip empty lines to comply with spec cbc9071e4a daemon: Use short libnetwork ID in exec-root & update libnetwork 60e2f6b3c9 Windows: Only set VERSION_QUAD if unset 1232d6d690 Windows: Use system specific parallelism value on containers restart 17870bcb42 cp: allow trailing slash in non-existant destination dfba6b8680 Add interpolation type cast for max_replicas_per_node Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: fix init script for busyboxPhil Coval2020-02-271-1/+1
| | | | | | | | | | | Observed issue using BusyBox v1.30.1 not supporting bashism /etc/init.d/docker.init: line 43: syntax error: unexpected redirection Change-Id: I9f73564cfb56352fbf7d80723ea938b66eceb5c7 Forwarded: https://lists.yoctoproject.org/g/meta-virtualization Signed-off-by: Philippe Coval <rzr@users.sf.net> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce: allow custom build tags via packageconfigRicardo Salveti2020-02-201-2/+3
| | | | | | | | | | | As done by the docker-moby recipe, move the definition of the default build tags outside do_compile and let the docker build tags be customized via the packageconfig options set by the recipe. This is required for enabling seccomp support during build time. Signed-off-by: Ricardo Salveti <ricardo@foundries.io> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce: update to v19.03.5Stefan Agner2020-01-171-3/+3
| | | | | | | | | | Bump the git hashes to Docker CE v19.03.5. This requires to get the docker daemon binary from a different location as the symlink from the latest/ subdirectory has been removed. See also commit deaac5d4b3fa ("hack/make.sh remove "latest" symlink") in the docker-ce repository. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: remove docker.service.rpmChen Qi2020-01-082-0/+2
| | | | | | | This file is useless and misleading. Remove it. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker.inc: Add xt-addrtype kernel moduleNorbert Kaminski2019-12-011-1/+1
| | | | | | | | | | | | | | | | | | | Trying to use docker info and hello world container without this module causes a daemon error. docker info error log: Cannot connect to the Docker daemon at unix:///var/run/docker.sock. Is the docker daemon running? dockerd error log: PREROUTING chain: iptables failed: iptables --wait -t nat -A PREROUTING -m addrtype --dst-type LOCAL -j DOCKER: iptables v1.8.3 (legacy): Couldn't load match `addrtype':No such file or directory Signed-off-by: Norbert Kaminski <norbert.kaminski@3mdeb.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker/moby: 19.03.x updateBruce Ashfield2019-09-262-66/+4
| | | | | | | Updating the moby recipes to the match the 19.03.x updates pulled into docker/docker-ce Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: add transient configuration packageconfigMatt Spencer2019-09-243-4/+13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Since commit: [ Author: Tom Rini <trini@konsulko.com> Date: Fri Feb 8 13:22:35 2019 -0500 docker: Move /etc/docker to a symlink to volatiles The only thing which docker uses /etc/docker for is a TLS key for connecting with other TLS-enabled services. Make /etc/docker a symlink to the existing docker volatiles directory so that we can use docker on a read-only rootfs. Signed-off-by: Tom Rini <trini@konsulko.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> ] We've had a transient / volatile docker configuration since we point our /etc configuration to /run. This is not always a good thing if a static configuration for keys, etc, is desired. We maintain this functionality under the 'transient-config' PACKAGECONFIG, and also allow the existing static/permanent config to be used. Signed-off-by: Matt Spencer <matthew@thespencers.me.uk> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>