Commit Graph

8706 Commits

Author SHA1 Message Date
Sebastiaan van Stijn
8b42adeddc
Add /proc/acpi to masked paths
relates to CVE-2018-10892

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2018-07-06 18:38:47 +02:00
Michael Crosby
e01779a0da
Merge pull request #2442 from thaJeztah/bump_containerd_console
update containerd/console to fix race: lock Cond before Signal
2018-07-06 11:58:22 -04:00
Sebastiaan van Stijn
77a26427c3
update containerd/console to fix race: lock Cond before Signal
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2018-07-06 17:26:22 +02:00
Kenfe-Mickaël Laventure
5900361791
Merge pull request #2420 from sudeeshjohn/master
Fixing the formatting directives error during compilation
2018-07-05 08:29:07 -07:00
sudeesh john
5a4f007e48 Fix the formatting directives error during compilation
Signed-off-by: Sudeesh John <sudeesh@linux.vnet.ibm.com>
2018-07-05 20:40:21 +05:30
Michael Crosby
0b0b41298a
Merge pull request #2437 from thaJeztah/remove_go_version_check
Remove Go version check in travis
2018-07-05 09:57:00 -04:00
Sebastiaan van Stijn
383d750d4f
Workaround for gofmt change in Go 1.11
Go 1.11 uses a different formatting for maps, and now
aligns values; running `gofmt -s -w` on this file resulted
in this diff;

```patch
 content/testsuite/testsuite.go | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/content/testsuite/testsuite.go b/content/testsuite/testsuite.go
index 974c7cb8ed..d9ae9dc160 100644
--- a/content/testsuite/testsuite.go
+++ b/content/testsuite/testsuite.go
@@ -365,8 +365,8 @@ func checkLabels(ctx context.Context, t *testing.T, cs content.Store) {

 	rootTime := time.Now().UTC().Format(time.RFC3339)
 	labels := map[string]string{
-		"k1": "v1",
-		"k2": "v2",
+		"k1":                    "v1",
+		"k2":                    "v2",
 		"containerd.io/gc.root": rootTime,
 	}

@@ -402,7 +402,7 @@ func checkLabels(ctx context.Context, t *testing.T, cs content.Store) {
 	}

 	info.Labels = map[string]string{
-		"k1": "v1",
+		"k1":                    "v1",
 		"containerd.io/gc.root": rootTime,
 	}
 	preUpdate = time.Now()
```

Adding a whitespace before the long key to make it format the same
on both Go 1.11 and older versions of Go.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2018-07-05 11:05:30 +02:00
Sebastiaan van Stijn
108c9cd4cf
Remove Go version check in travis
containerd now only supports Go 1.10+, and travis is not
configured to run on older versions, so this check became
redundant.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2018-07-05 10:56:57 +02:00
Kenfe-Mickaël Laventure
39b6ba826a
Merge pull request #2431 from masters-of-cats/plugins-list-subcommand
Introduce plugins/list subcommand
2018-07-02 13:38:39 -07:00
Kenfe-Mickaël Laventure
4e64dcce85
Merge pull request #2432 from crosbymichael/ttrpc2
Update ttrpc to 94dde388801693c54f88a6596f713b51a8
2018-07-02 13:37:50 -07:00
Michael Crosby
6a83168157 Update ttrpc to 94dde388801693c54f88a6596f713b51a8
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2018-07-02 15:24:15 -04:00
Danail Branekov
3cf3881fa4 Introduce plugins/list subcommand
`Ctr` interface follows the pattern `ctr <command> <subcommand>` except
for the `plugins` command which does not have subcommands. This feels
unnatural to certain users and they would expect that they can list
containerd plugins via `ctr plugins list`.

This commit implements their expectation so that `plugins` becomes a
command "group" and its `list` subcommand actually lists the plugins.

Signed-off-by: Danail Branekov <danailster@gmail.com>
2018-07-02 10:20:20 +03:00
Phil Estes
a044b047e8
Merge pull request #2430 from Random-Liu/update-cri-to-v1.11.0
Update cri to v1.11.0.
2018-06-28 16:25:26 -04:00
Lantao Liu
f530a3c267 Update cri to v1.11.0.
Signed-off-by: Lantao Liu <lantaol@google.com>
2018-06-28 18:29:10 +00:00
Kenfe-Mickaël Laventure
e51ddf43e9
Merge pull request #2428 from crosbymichael/ttrpc
Update ttrpc and typeurl packages
2018-06-28 10:19:39 -07:00
Michael Crosby
8c709ac43a update typeurl
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2018-06-28 10:05:30 -04:00
Michael Crosby
08150bfe76 Update ttrpc for containerd repo
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2018-06-28 09:53:40 -04:00
Lantao Liu
5ad95b2db4
Merge pull request #833 from Random-Liu/update-containerd-k8s
Update containerd and k8s.
2018-06-27 17:08:01 -07:00
Lantao Liu
88c5165bfd Update containerd and k8s.
Signed-off-by: Lantao Liu <lantaol@google.com>
2018-06-27 23:08:00 +00:00
Alban Crequy
6ef65b74e1 Document how to use systemd-run
It is also useful when testing local changes, I just run:

sudo systemd-run -p Delegate=yes -p KillMode=process bin/containerd

Signed-off-by: Alban Crequy <alban@kinvolk.io>
2018-06-27 16:58:30 +02:00
Michael Crosby
ca204317ed
Merge pull request #2422 from crosbymichael/ctr-delete
Add cio.Load for loading io set
2018-06-27 08:46:18 -04:00
Lantao Liu
bc99f7a7e8
Merge pull request #832 from Random-Liu/remove-crictl-on-gce
Remove crictl on GCE for all cases.
2018-06-26 18:39:46 -07:00
Lantao Liu
f580374825 Remove crictl on GCE for all cases.
Signed-off-by: Lantao Liu <lantaol@google.com>
2018-06-26 22:37:23 +00:00
Lantao Liu
c68b60514e
Merge pull request #831 from Random-Liu/fix-link
Fix another link.
2018-06-26 14:44:39 -07:00
Lantao Liu
fd71c9f065 Fix another link.
Signed-off-by: Lantao Liu <lantaol@google.com>
2018-06-26 13:30:32 -07:00
Lantao Liu
47b8d30bb3
Merge pull request #828 from yujuhong/fix-gce-link
Fix the link to the GCE getting-started guide
2018-06-26 13:07:50 -07:00
Lantao Liu
0e42438e7a
Merge pull request #829 from Random-Liu/local-stream-server
Set stream server to serve on localhost on GCE.
2018-06-26 11:23:06 -07:00
Kenfe-Mickaël Laventure
08f7ee9828
Merge pull request #2423 from crosbymichael/shim-procs
Set shim max procs via env var
2018-06-26 10:40:40 -07:00
Michael Crosby
fdceb13b14 Add cio.Load for loading io set
This adds a `Load` Opt for cio to load a tasks io/fifos without
attaching or starting the copy routines.

It adds the load method in `ctr` by default so that fifos or other IO
are removed from disk on delete methods inbetween command runs.  It is
not the default for all task loads for backwards compat. and a user may
want to keep io around to reuse or if log files are used.

Fixes #2421

Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2018-06-26 11:48:26 -04:00
Michael Crosby
68e144c637 Set shim max procs via env var
This sets the shim's max procs to 2, like we already have hard coded in
the shim, with the env var so that it is set at go runtime boot.

Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2018-06-26 10:49:59 -04:00
Lantao Liu
f6ab733f9e Set stream server to serve on localhost on GCE.
Signed-off-by: Lantao Liu <lantaol@google.com>
2018-06-26 07:13:00 +00:00
Stephen Day
1ac546b3c4
Merge pull request #2411 from flx42/move-containerflags
Move ContainerFlags to "commands" package
2018-06-25 13:37:35 -07:00
Yu-Ju Hong
e23c0e708a
Fix link to GCE getting started guide
Signed-off-by: Yu-Ju Hong <yjhong@google.com>
2018-06-25 12:10:03 -07:00
Michael Crosby
e239f65590 Handle abs path for rootfs in oci hook
Fixes #2412

Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2018-06-25 14:10:17 -04:00
Michael Crosby
f15c3be348
Merge pull request #2417 from dmcgowan/update-arm64-normalize
Normalize arm64 to an empty variant
2018-06-25 11:45:14 -04:00
Derek McGowan
db3c5afc6d
Normalize arm64 to an empty variant
Signed-off-by: Derek McGowan <derek@mcgstyle.net>
2018-06-23 16:35:46 -07:00
Derek McGowan
47a128d455
Merge pull request #2414 from dmcgowan/platform-arm-normalization
Fix arm platform matching
2018-06-22 13:15:23 -07:00
Phil Estes
995310cda9
Merge pull request #2408 from estesp/carry-2363
Update architecture.md (Carry PR 2363)
2018-06-22 11:49:23 -04:00
Derek McGowan
7049671465
Add support for proxy plugins in configuration
Signed-off-by: Derek McGowan <derek@mcgstyle.net>
2018-06-21 18:57:42 -07:00
Derek McGowan
37ab93e2c8
Fix arm platform matching
The normalization was being inconsistently applied causing a
failure to match some platforms in manifest lists.
Fix the matcher and normalization to be more consistent and
add changes to parser to prevent the defaulted variants from being
set in the platform structure.

Signed-off-by: Derek McGowan <derek@mcgstyle.net>
2018-06-21 17:07:58 -07:00
Lantao Liu
4eb4a29577
Merge pull request #825 from abhi/cni_config
Change to keep in sync with latest cni config
2018-06-21 16:14:31 -07:00
Abhinandan Prativadi
860971025f vendoring latest go-cni with fixes
Signed-off-by: Abhinandan Prativadi <abhi@docker.com>
2018-06-21 20:43:51 +00:00
Abhinandan Prativadi
263b0b99d0 Change to keep in sync with latest cni config
This commit contains change to pick the latest cni config
from the configured CNIConfDir.
With this change any changes made to the cni config file will
be picked up on the kubelet's runtime status check call.
Ofcourse this would lead to undefined behavior when the cni config
change is made in parallel during pod creation. However its
reasonable to assume that the operator is aware of the need to
drain the nodes of pods before making cni configuration change.
The behavior is currently not defined in kubernetes. However
I see that similar approach being adopted in the upstream kubernetes
with dockershim. Keeping the behavior consistent for now.

Signed-off-by: Abhinandan Prativadi <abhi@docker.com>
2018-06-21 20:43:38 +00:00
Lantao Liu
07020dbdda
Merge pull request #820 from filbranden/usercap1
Update github.com/opencontainers/runtime-tools to v0.6.0
2018-06-21 09:49:51 -07:00
Phil Estes
7ff2748f9c
Merge pull request #2410 from tonistiigi/mlist-error
images: provide better error for manifest list match error
2018-06-20 23:03:37 -04:00
Felix Abecassis
5dd22a20af Move ContainerFlags to "commands" package
Commit 05513284e7 exposed the "rootfs"
and "no-pivot" flags for the "containers" command, but it accidentally
removed them for "run" since package-level variables are initialized
before package-level init functions in golang. Hoisting these flags to
a package imported by both commands solves the problem.

Signed-off-by: Felix Abecassis <fabecassis@nvidia.com>
2018-06-20 18:33:59 -07:00
Filipe Brandenburger
01d77d44f5 Update github.com/opencontainers/runtime-tools to v0.6.0
Also add new dependencies on github.com/xeipuuv/gojson* (brought up by
new runtime-tools) and adapt the containerd/cri code to replace the APIs
that were removed by runtime-tools.

In particular, add new helpers to handle the capabilities, since
runtime-tools now split them into separate sets of functions for each
capability set.

Replace g.Spec() with g.Config since g.Spec() has been deprecated in the
runtime-tools API.

Signed-off-by: Filipe Brandenburger <filbranden@google.com>
2018-06-20 13:52:50 -07:00
Tonis Tiigi
53fe31d6de images: provide better error for manifest list match error
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-06-20 13:43:27 -07:00
Lantao Liu
441a57aa56
Merge pull request #821 from Random-Liu/fix-snapshotter-panic
Fix snapshotter nil panic.
2018-06-20 10:31:01 -07:00
Lantao Liu
9cb82aaecd
Merge pull request #823 from Random-Liu/update-crictl
Update crictl to v1.11.0.
2018-06-20 10:30:34 -07:00