docker-cli

Files

Justin Cormack 980ac6c629 Add a test that the default seccomp profile allows execution of 32 bit binaries

While testing #24510 I noticed that 32 bit syscalls were incorrectly being
blocked and we did not have a test for this, so adding one.

This is only tested on amd64 as it is the only architecture that
reliably supports 32 bit code execution, others only do sometimes.

There is no 32 bit libc in the buildpack-deps so we cannot build
32 bit C code easily so use the simplest assembly program which
just calls the exit syscall.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
Upstream-commit: 93bbc76ee53240e0862c6f1ff409e7a4ee0883dc
Component: engine

2016-07-27 18:42:34 +01:00

.build-deb

Uncomment the TasksMax val later in the deb build

2016-07-12 16:30:31 -05:00

.build-rpm

Remove docker.socket from rpm based systems

2016-07-19 09:31:43 -07:00

.resources-windows

Windows: Support running dockerd as a service

2016-04-26 14:04:47 -07:00

.binary

Build two binaries client and daemon.

2016-04-22 11:26:01 -04:00

.binary-setup

Make the docker proxy a standalone binary not a re-exec

2016-07-07 12:53:39 +01:00

.detect-daemon-osarch

Add explicit code to handle older versions of Docker, too

2016-03-14 09:30:45 -07:00

.ensure-emptyfs

Move scripts back to hack/, leave docs in project/

2015-03-13 14:04:08 -06:00

.ensure-frozen-images

Adjust "hack/make/.detect-daemon-osarch" to be the source of truth for "platform detection"

2016-03-10 20:07:21 -08:00

.ensure-frozen-images-windows

Windows: Ensure frozen cope with prefix

2016-06-23 16:39:16 -07:00

.ensure-httpserver

Improve remote integration-cli tests

2016-02-11 07:31:49 -08:00

.ensure-nnp-test

Add support for NoNewPrivileges in docker

2016-03-07 09:47:02 -08:00

.ensure-syscall-test

Add a test that the default seccomp profile allows execution of 32 bit binaries

2016-07-27 18:42:34 +01:00

.go-autogen

Windows: Support running dockerd as a service

2016-04-26 14:04:47 -07:00

.integration-daemon-setup

Add support for NoNewPrivileges in docker

2016-03-07 09:47:02 -08:00

.integration-daemon-start

Fixing the PATH in .integration-daemon-start to find dynamic docker binary

2016-04-25 11:18:34 -04:00

.integration-daemon-stop

Windows CI: No integration daemon stop

2016-01-05 10:52:59 -08:00

.validate

.: remove trailing white spaces

2015-03-25 13:38:17 -04:00

binary

Add make install task

2016-06-03 12:08:33 +02:00

binary-client

Add make install task

2016-06-03 12:08:33 +02:00

binary-daemon

Make the docker proxy a standalone binary not a re-exec

2016-07-07 12:53:39 +01:00

build-deb

Require manpages for packages.

2016-07-22 16:34:46 -04:00

build-rpm

Require manpages for packages.

2016-07-22 16:34:46 -04:00

clean-apt-repo

add scripts to clean experimental rpms and debs

2016-01-27 15:54:53 -08:00

clean-yum-repo

add scripts to clean experimental rpms and debs

2016-01-27 15:54:53 -08:00

cover

Make "DEST" a make.sh construct instead of ad-hoc

2015-05-30 11:16:43 -07:00

cross

Add make install task

2016-06-03 12:08:33 +02:00

dynbinary

Fix spelling in comments, strings and documentation

2016-07-03 20:58:11 +03:00

dynbinary-client

Make dockerd debuggable

2016-04-26 09:35:22 -07:00

dynbinary-daemon

docker-proxy: Force external linking to add BuildID information to please rpm

2016-07-12 19:59:48 -07:00

dyngccgo

*: purge dockerinit from source code

2016-01-26 23:47:02 +11:00

gccgo

Make the docker proxy a standalone binary not a re-exec

2016-07-07 12:53:39 +01:00

generate-index-listing

Fix index generator for apt/yum packages

2016-02-16 21:54:07 -05:00

install-binary

Add make install task

2016-06-03 12:08:33 +02:00

install-binary-client

Add make install task

2016-06-03 12:08:33 +02:00

install-binary-daemon

Make the docker proxy a standalone binary not a re-exec

2016-07-07 12:53:39 +01:00

install-script

Create a bundle for the install script to support other domains

2016-01-21 20:42:20 -08:00

README.md

Move scripts back to hack/, leave docs in project/

2015-03-13 14:04:08 -06:00

release-deb

Fix the value of the Components value in apt {In,}Release files

2016-06-21 12:01:41 -07:00

release-rpm

Fix release scripts

2016-03-25 11:55:26 -04:00

run

Add target for make run

2016-07-08 16:25:21 -04:00

sign-repos

Also generate "InRelease" files for newer APT clients

2016-03-31 17:39:50 -07:00

test-deb-install

Update build-deb to make correct use of DOCKER_BUILD_PKGS

2016-05-02 11:22:01 -07:00

test-docker-py

docker-py: upgrade and fix test script

2015-10-28 12:56:50 -04:00

test-install-script

add test script for built debs

2015-10-19 16:15:27 -07:00

test-integration-cli

Prevent CI from getting stuck if shims are left alive

2016-06-28 10:05:05 -07:00

test-old-apt-repo

add script to test the old apt-repo

2015-11-04 16:01:19 -08:00

test-unit

Dont run man generation as part of test-unit.

2016-07-19 12:00:35 -04:00

tgz

Make the docker proxy a standalone binary not a re-exec

2016-07-07 12:53:39 +01:00

ubuntu

Make manpages in a conatiner.

2016-07-22 16:32:51 -04:00

update-apt-repo

fix common misspell

2016-02-11 15:49:36 -08:00

validate-dco

hack/make/test-integration-cli: introduce MAKEDIR variable

2015-04-15 10:44:14 +02:00

validate-default-seccomp

add validation for generating default secccomp profile

2016-02-08 13:04:52 -08:00

validate-gofmt

hack/make/test-integration-cli: introduce MAKEDIR variable

2015-04-15 10:44:14 +02:00

validate-lint

Fix few comments in validate scripts

2015-10-10 11:21:04 +02:00

validate-pkg

Add new "validate-pkg" bundlescript

2015-06-12 12:28:23 -07:00

validate-test

Fix few comments in validate scripts

2015-10-10 11:21:04 +02:00

validate-toml

Fix few comments in validate scripts

2015-10-10 11:21:04 +02:00

validate-vendor

Add a validate-vendor script

2016-01-07 19:57:50 +01:00

validate-vet

Fix few comments in validate scripts

2015-10-10 11:21:04 +02:00

win

Windows libnetwork integration

2016-03-09 20:33:21 -08:00

README.md

This directory holds scripts called by make.sh in the parent directory.

Each script is named after the bundle it creates. They should not be called directly - instead, pass it as argument to make.sh, for example:

./hack/make.sh test
./hack/make.sh binary ubuntu

# Or to run all bundles:
./hack/make.sh

To add a bundle:

Create a shell-compatible file here
Add it to $DEFAULT_BUNDLES in make.sh