Mike Brown
|
9144ce9677
|
shows our runc.v2 default options in the containerd default config
Signed-off-by: Mike Brown <brownwm@us.ibm.com>
|
2021-04-08 14:09:59 -05:00 |
|
Mike Brown
|
d4be6aa8fa
|
rm mirror defaults; doc registry deprecations
Signed-off-by: Mike Brown <brownwm@us.ibm.com>
|
2021-04-07 12:29:43 -05:00 |
|
Maksym Pavlenko
|
ddd4298a10
|
Migrate current TOML code to github.com/pelletier/go-toml
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>
|
2021-03-25 13:13:33 -07:00 |
|
Fu, Wei
|
80fa9fe32a
|
Merge pull request #5135 from AkihiroSuda/default-config-crypt
add imgcrypt stream processors to the default config
|
2021-03-25 14:31:38 +08:00 |
|
pacoxu
|
ffff688663
|
upgrade pause image to 3.5 for non-root
Signed-off-by: pacoxu <paco.xu@daocloud.io>
|
2021-03-16 23:20:35 +08:00 |
|
Akihiro Suda
|
ecb881e5e6
|
add imgcrypt stream processors to the default config
Enable the following config by default:
```toml
version = 2
[plugins."io.containerd.grpc.v1.cri".image_decryption]
key_model = "node"
[stream_processors]
[stream_processors."io.containerd.ocicrypt.decoder.v1.tar.gzip"]
accepts = ["application/vnd.oci.image.layer.v1.tar+gzip+encrypted"]
returns = "application/vnd.oci.image.layer.v1.tar+gzip"
path = "ctd-decoder"
args = ["--decryption-keys-path", "/etc/containerd/ocicrypt/keys"]
env = ["OCICRYPT_KEYPROVIDER_CONFIG=/etc/containerd/ocicrypt/ocicrypt_keyprovider.conf"]
[stream_processors."io.containerd.ocicrypt.decoder.v1.tar"]
accepts = ["application/vnd.oci.image.layer.v1.tar+encrypted"]
returns = "application/vnd.oci.image.layer.v1.tar"
path = "ctd-decoder"
args = ["--decryption-keys-path", "/etc/containerd/ocicrypt/keys"]
env = ["OCICRYPT_KEYPROVIDER_CONFIG=/etc/containerd/ocicrypt/ocicrypt_keyprovider.conf"]
```
Fix issue 5128
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
|
2021-03-15 13:27:16 +09:00 |
|
Iceber Gu
|
f37ae8fc35
|
move to v3.4.1 for the pause image
Signed-off-by: Iceber Gu <wei.cai-nat@daocloud.io>
|
2021-03-07 15:21:20 +08:00 |
|
Derek McGowan
|
b2642458f9
|
Update make snapshot annotations disabled by default
This experimental feature should not be enabled by default as
it is not used by any default snapshotters.
Signed-off-by: Derek McGowan <derek@mcg.dev>
|
2020-10-27 21:32:25 -07:00 |
|
Maksym Pavlenko
|
3508ddd3dd
|
Refactor CRI packages
Signed-off-by: Maksym Pavlenko <pavlenko.maksym@gmail.com>
|
2020-10-07 14:45:57 -07:00 |
|
Derek McGowan
|
b22b627300
|
Move cri server packages under pkg/cri
Organizes the cri related server packages under pkg/cri
Signed-off-by: Derek McGowan <derek@mcg.dev>
|
2020-10-07 13:09:37 -07:00 |
|