Mike Brown
c7793564fc
switches from not CA signed to self CA signed for streaming TLS
...
Signed-off-by: Mike Brown <brownwm@us.ibm.com>
2018-04-02 17:50:12 -05:00
Lantao Liu
334f7ddf0a
Update cri test to include RunAsGroup test.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2018-04-02 21:29:09 +00:00
Stephen Day
8c2acf45fb
Merge pull request #2265 from stevvooe/lockdown-api
...
api: lock down api for 1.1 release
2018-04-02 14:21:16 -07:00
Lantao Liu
d36d62ecd4
Merge pull request #714 from mikebrow/disable-tls-flag
...
adds a new flag to enable TLS support (insecure for now)
2018-04-02 14:20:37 -07:00
Lantao Liu
b287fec35d
Upgrade the tarball version in ansible.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2018-04-02 20:06:20 +00:00
Andrea Kao
c0c92f6b34
Edit Containerd license info so GitHub recognizes it
...
GitHub uses a library called Licensee to identify a project's license
type. It shows this information in the status bar and via the API if it
can unambiguously identify the license.
This commit removes the LICENSE.docs file and updates the README to
refer readers directly to the CC-BY-4.0 license on the Creative Commons
site. It also updates the copyright reference to "The containerd
Authors" and removes a reference to copyright year in the LICENSE file
(per a recommendation from the CNCF).
This change allows Licensee to successfully identify the license
type of Containerd's codebase as Apache 2.0.
Signed-off-by: Andrea Kao <eirinikos@gmail.com>
2018-04-02 12:31:15 -07:00
Stephen J Day
ebd96a19d3
api: lock down api for 1.1 release
...
While there were no changes to the core API for the 1.1 release, we
still need to lock down the 1.1 version of the API to follow the
process.
Signed-off-by: Stephen J Day <stephen.day@docker.com>
2018-04-02 11:56:40 -07:00
Lantao Liu
c4f80aecb7
Merge pull request #711 from tklauser/libapparmor-dep
...
Drop libapparmor dependency from build docs
2018-04-02 11:55:27 -07:00
Stephen Day
04efcc83a2
Merge pull request #2261 from AkihiroSuda/native-snapshotter
...
enable native (formerly naive) snapshotter by default
2018-04-02 11:33:25 -07:00
Mike Brown
2f9f721b63
adds a new flag to enable TLS support insecure for now
...
Signed-off-by: Mike Brown <brownwm@us.ibm.com>
2018-04-02 12:27:55 -05:00
Akihiro Suda
83e35b3d3a
enable native (formerly naive) snapshotter by default
...
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2018-04-02 13:29:19 +09:00
Tobias Klauser
d29678a3c4
Drop libapparmor dependency from build docs
...
As of opencontainers/runc@db093f6 runc no longer depends on libapparmor
thus libapparmor-dev no longer needs to be installed to build it or
anythind that depends on it (like containerd or cri-containerd). Adjust
the documentation accordingly.
containerd/containerd#2238 did the same for containerd.
Signed-off-by: Tobias Klauser <tklauser@distanz.ch>
2018-03-31 18:18:12 +02:00
Lantao Liu
ed92befab7
Merge pull request #710 from Random-Liu/support-run-as-group
...
Add RunAsGroup support.
2018-03-30 17:21:25 -07:00
Stephen Day
bf5112e8ec
Merge pull request #2259 from Random-Liu/cleanup-with-user
...
Improve WithUser comments and code style.
2018-03-30 15:29:08 -07:00
Lantao Liu
ed20174ce4
Add RunAsGroup support.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2018-03-30 22:26:07 +00:00
Michael Crosby
1a9f9e65b9
Merge pull request #2258 from mlaventure/fix-stupid-typo
...
Fix typo in CreateUnixSocket error message
2018-03-30 16:44:34 -04:00
Lantao Liu
00b600a605
Improve WithUser comments and code style.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2018-03-30 20:34:12 +00:00
Michael Crosby
c0f7fcd910
Merge pull request #2257 from Random-Liu/add-with-user
...
Add oci.WithUser helper function.
2018-03-30 16:26:28 -04:00
Kenfe-Mickael Laventure
81feacd393
Fix typo in CreateUnixSocket error message
...
Signed-off-by: Kenfe-Mickael Laventure <mickael.laventure@gmail.com>
2018-03-30 13:14:55 -07:00
Lantao Liu
45b0045593
Add oci.WithUser helper function.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2018-03-30 20:06:25 +00:00
Stephen Day
84a7b9c115
Merge pull request #2255 from mlaventure/unix-socket-toolong-error-msg
...
Return a better error message is unix socket path is too long.
2018-03-30 10:16:22 -07:00
Kenfe-Mickael Laventure
3c3a676490
Return a better error message is unix socket path is too long.
...
Signed-off-by: Kenfe-Mickael Laventure <mickael.laventure@gmail.com>
2018-03-30 09:00:02 -07:00
Michael Crosby
606be14859
Merge pull request #2238 from tklauser/runc-libapparmor-dep
...
Drop libapparmor dependency from runc build docs
2018-03-30 10:18:34 -04:00
Derek McGowan
ac5432a06b
Merge pull request #2253 from stevvooe/report-zfs-correctly
...
vendor: update zfs dependency
2018-03-29 18:30:57 -07:00
Akihiro Suda
7722db0bc5
Merge pull request #2251 from stevvooe/report-aufs-correctly
...
vendor: update aufs dependency
2018-03-30 09:55:20 +09:00
Stephen J Day
ca4ccf4afc
vendor: update zfs dependency
...
Signed-off-by: Stephen J Day <stephen.day@docker.com>
2018-03-29 14:48:12 -07:00
Stephen J Day
bea2304ca4
vendor: update aufs dependency
...
Signed-off-by: Stephen J Day <stephen.day@docker.com>
2018-03-29 13:33:10 -07:00
Michael Crosby
cbfc9223a9
Merge pull request #2241 from justincormack/ambient_seccomp
...
The set of bounding capabilities is the largest group
2018-03-29 13:44:30 -04:00
Phil Estes
def3069a67
Merge pull request #2245 from darrenstahlmsft/CloseFail
...
Make hcsshim layerwriter close a fatal error
2018-03-29 11:55:57 -04:00
Tobias Klauser
a74903a307
Drop libapparmor dependency from runc build docs
...
As of opencontainers/runc@db093f621f runc
no longer depends on libapparmor thus libapparmor-dev no longer needs to
be installed to build it. Adjust the documentation accordingly.
Signed-off-by: Tobias Klauser <tklauser@distanz.ch>
2018-03-29 09:18:45 +02:00
Darren Stahl
84f6fce240
Make hcsshim layerwriter close a fatal error
...
Signed-off-by: Darren Stahl <darst@microsoft.com>
2018-03-28 18:02:45 -07:00
Justin Cormack
9435aeeb30
The set of bounding capabilities is the largest group
...
No capabilities can be granted outside the bounding set, so there
is no point looking at any other set for the largest scope.
Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2018-03-28 17:36:46 -07:00
Lantao Liu
f99f0be5ae
Merge pull request #707 from Random-Liu/fix-log-output
...
Fix a log output.
2018-03-28 16:18:58 -07:00
Lantao Liu
0fc1372b77
Merge pull request #706 from tkellen/patch-1
...
fully specify --container-runtime-endpoint flag
2018-03-28 16:18:44 -07:00
Lantao Liu
71c8b6b9e0
Merge pull request #704 from Random-Liu/use-systemd
...
Use systemd service cgroup and oom score adj.
2018-03-28 14:53:24 -07:00
Lantao Liu
be43ad09da
Fix a log output.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2018-03-28 21:31:44 +00:00
Tyler Kellen
11189f6e8b
fully specify --container-runtime-endpoint flag
...
Resolves this warning:
"/run/containerd/containerd.sock" as endpoint is deprecated please
consider using full url format "unix:///run/containerd/containerd.sock"
Signed-off-by: Tyler Kellen <tyler@sleekcode.net>
2018-03-28 17:23:43 -04:00
Stephen Day
79963209f6
Merge pull request #2239 from estesp/fix-test-typeurl
...
Fix typo in metadata test typeurl string
2018-03-28 12:05:29 -07:00
Lantao Liu
2073d270a5
Merge pull request #705 from Random-Liu/update-vendors
...
Update cri-tools, containerd and kubernetes version.
2018-03-28 09:56:53 -07:00
Phil Estes
dd1085c922
Fix typo in metadata test typeurl string
...
Incorrectly spelled "containerd" in test string.
Signed-off-by: Phil Estes <estesp@linux.vnet.ibm.com>
2018-03-28 12:35:42 -04:00
Phil Estes
fec0a1ba89
Merge pull request #2237 from dmcgowan/fix-pull-uncompressed-label
...
client/pull: fix label being put on snapshot instead of content
2018-03-28 12:32:28 -04:00
Phil Estes
bfa7e59cba
Merge pull request #2236 from dmcgowan/update-releases-md
...
Add CRI API to releases file
2018-03-28 09:27:42 -04:00
Derek McGowan
d608e3d9dc
Fix label being put on snapshot instead of content
...
The uncompressed label should be placed on content instead
of snapshots. Currently the uncompressed label is getting
passed into as a label option for apply, which is used to commit
snapshots. The content is already committed, but after apply
the uncompressed diff digest is verified and can be reliably used
to update the content with the label.
Signed-off-by: Derek McGowan <derek@mcgstyle.net>
2018-03-27 17:55:35 -07:00
Lantao Liu
bb480ceabd
Update cri-tools, containerd and kubernetes version.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2018-03-28 00:45:01 +00:00
Lantao Liu
ddda05211b
Use systemd service cgroup and oom score adj.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2018-03-28 00:30:59 +00:00
Derek McGowan
e0424e2c76
Add CRI API to releases file
...
Signed-off-by: Derek McGowan <derek@mcgstyle.net>
2018-03-27 16:33:47 -07:00
Derek McGowan
7833fb49fd
Merge pull request #2225 from dmcgowan/prepare-1.1.0-rc0
...
Prepare 1.1.0-rc.0 release
2018-03-27 09:19:04 -07:00
Derek McGowan
92198a60c5
Prepare 1.1.0-rc.0 release
...
Add the release notes and update release docs.
Increments version number.
Signed-off-by: Derek McGowan <derek@mcgstyle.net>
2018-03-27 00:10:41 -07:00
Derek McGowan
ea37521fda
Merge pull request #2233 from Random-Liu/update-cri
...
Update cri to v1.0.0-rc.0
2018-03-27 00:06:34 -07:00
Lantao Liu
74e45c0392
Update cri validation test version.
...
Signed-off-by: Lantao Liu <lantaol@google.com>
2018-03-27 05:15:14 +00:00