toolshed/docker-cli
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
42,641 Commits 3 Branches 295 Tags
6176e25a2382358216eb91e32e45315e5eec7837
Commit Graph
42641 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
GordonTheTurtle 6176e25a23 Merge component 'engine' from git@github.com:docker/engine 18.09 2018-12-10 17:05:10 +00:00
Andrew Hsu b412443ed2 Merge pull request #131 from tonistiigi/1809-update-buildkit 
[18.09 backport] vendor: update buildkit to d9f75920
Upstream-commit: d21754a3fb453451c521ddc51df6cf109102d74c
Component: engine
 2018-12-10 16:29:04 +00:00
Andrew Hsu aafd3c7cec Merge pull request #129 from thaJeztah/18.09_backport_bump_containerd_vendoring 
[18.09 backport] update containerd vendoring to v1.2.1
Upstream-commit: b54b6d145ccfd5a47b774cd4205b48b3ff090afa
Component: engine
 2018-12-10 13:54:05 +00:00
Tonis Tiigi e27956be04 vendor: update buildkit to d9f75920 
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
(cherry picked from commit 32f48058158cce7a6a1f8f0d1526d8224b369cbc)
Upstream-commit: 43dedf397503532f8bc1313af82a9356ed8c3550
Component: engine
 2018-12-10 13:03:13 +00:00
GordonTheTurtle 3342cdc4ba Merge component 'cli' from git@github.com:docker/cli 18.09 2018-12-08 00:36:54 +00:00
Brian Goff 6290aed85c Merge pull request #1554 from thaJeztah/18.09_backport_completion-import--platform 
[18.09 backport] Add bash completion for `import --platform`
Upstream-commit: 2aa77af30f
Component: cli
 2018-12-07 13:10:27 -08:00
Brian Goff 4dce161c07 Merge pull request #1553 from thaJeztah/18.09_backport_completion-log-driver-local 
[18.09 backport] Add bash completion for "local" log driver
Upstream-commit: 456c1ce695
Component: cli
 2018-12-07 13:10:06 -08:00
GordonTheTurtle 0464f48da5 Merge component 'cli' from git@github.com:docker/cli 18.09 2018-12-07 20:36:48 +00:00
Harald Albers 0cbda9f762 Add bash completion for import --platform 
Signed-off-by: Harald Albers <github@albersweb.de>
(cherry picked from commit e0fe546c37)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
Upstream-commit: bcadc9061c
Component: cli
 2018-12-07 20:08:35 +01:00
Harald Albers f0885d1fab Add bash completion for "local" log driver 
Ref: https://github.com/moby/moby/pull/37092

Also adds log-opt `compress` to json-file log driver because this was
also added in the referenced PR.

Signed-off-by: Harald Albers <github@albersweb.de>
(cherry picked from commit c59038b15c)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
Upstream-commit: e05745b4a5
Component: cli
 2018-12-07 20:05:08 +01:00
Sebastiaan van Stijn 72b3a61238 Merge pull request #1552 from thaJeztah/18.09_backport_fix_filter_panic 
[18.09 backport] Fix panic when pruning images with label-filter
Upstream-commit: b6ecef353f
Component: cli
 2018-12-07 19:29:32 +01:00
Andrew Hsu c9df8f4688 use empty string as cgroup path to grab first find 
Signed-off-by: Andrew Hsu <andrewhsu@docker.com>
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
(cherry picked from commit 78045a5419718ba8884ed5afc0b41a3a80afc3b4)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
Upstream-commit: b66c7ad62ebff12112318db0d1ed48b14f817efa
Component: engine
 2018-12-07 18:58:03 +01:00
Andrew Hsu 42b5bd7c0f vndr libnetwork to adjust for updated runc 
Signed-off-by: Andrew Hsu <andrewhsu@docker.com>
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
(cherry picked from commit 75c4b741550a3c5cb061269cc92a5d563d153626)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
Upstream-commit: 5cd4797c89383159219716de92775138c2dd17c5
Component: engine
 2018-12-07 18:57:54 +01:00
Andrew Hsu 9f0f7c271c update containerd to v1.2.1 
Signed-off-by: Andrew Hsu <andrewhsu@docker.com>
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
(cherry picked from commit 615eecf8ac2a49385e346631e97850830360b8cf)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
Upstream-commit: 7dfd23acf1d604cde70d46e36bfe2e51df2dcf46
Component: engine
 2018-12-07 18:45:14 +01:00
GordonTheTurtle 75d17684b1 Merge component 'engine' from git@github.com:docker/engine 18.09 2018-12-07 17:04:01 +00:00
Sebastiaan van Stijn 1a759e5769 Fix panic when pruning images with label-filter 
Before this change:

    docker image prune --force --filter "label=foobar"
    panic: assignment to entry in nil map

    goroutine 1 [running]:
    github.com/docker/cli/vendor/github.com/docker/docker/api/types/filters.Args.Add(...)
    /go/src/github.com/docker/cli/vendor/github.com/docker/docker/api/types/filters/parse.go:167
    github.com/docker/cli/cli/command/image.runPrune(0x1db3a20, 0xc000344cf0, 0x16e0001, 0xc00015e600, 0x4, 0x3, 0xc00024e160, 0xc000545c70, 0x5ab4b5)
    /go/src/github.com/docker/cli/cli/command/image/prune.go:79 +0xbaf
    github.com/docker/cli/cli/command/image.NewPruneCommand.func1(0xc00029ef00, 0xc0004a8180, 0x0, 0x3, 0x0, 0x0)
    /go/src/github.com/docker/cli/cli/command/image/prune.go:32 +0x64
    github.com/docker/cli/vendor/github.com/spf13/cobra.(*Command).execute(0xc00029ef00, 0xc000038210, 0x3, 0x3, 0xc00029ef00, 0xc000038210)
    /go/src/github.com/docker/cli/vendor/github.com/spf13/cobra/command.go:762 +0x473
    github.com/docker/cli/vendor/github.com/spf13/cobra.(*Command).ExecuteC(0xc000127180, 0xc000272770, 0x1836ce0, 0xc000272780)
    /go/src/github.com/docker/cli/vendor/github.com/spf13/cobra/command.go:852 +0x2fd
    github.com/docker/cli/vendor/github.com/spf13/cobra.(*Command).Execute(0xc000127180, 0xc000127180, 0x1d60880)
    /go/src/github.com/docker/cli/vendor/github.com/spf13/cobra/command.go:800 +0x2b
    main.main()
    /go/src/github.com/docker/cli/cmd/docker/docker.go:180 +0xdc

With this patch applied:

    docker image prune --force --filter "label=foobar"
    Total reclaimed space: 0B

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
(cherry picked from commit 1e1dd5bca4)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
Upstream-commit: e380ddaddf
Component: cli
 2018-12-07 17:58:38 +01:00
Andrew Hsu c19e3d0b29 Merge pull request #128 from thaJeztah/18.09_backport_containerd_v1.2.1-GA 
[18.09 backport] update just installer of containerd to 1.2.1
Upstream-commit: 6c633fbe18e0a69db3db1aed28b3fa23bc795dfe
Component: engine
 2018-12-07 06:18:48 -08:00
Andrew Hsu 37a56d2599 update just installer of containerd to 1.2.1 
Signed-off-by: Andrew Hsu <andrewhsu@docker.com>
(cherry picked from commit 1014b2bb66050a11bba833349346b35e6472688b)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
Upstream-commit: 2c64d7c858b5fd16d0d14d692a3765cf8d5a5d7e
Component: engine
 2018-12-07 11:20:22 +01:00
Andrew Hsu bca00687d8 Merge pull request #571 from andrewhsu/rc1 
[18.09] bump ver 18.09.1-rc1 and update changelog
 2018-12-06 18:12:05 -08:00
Andrew Hsu fe0ed1581f bump ver 18.09.1-rc1 and update changelog 
Signed-off-by: Andrew Hsu <andrewhsu@docker.com>
 2018-12-06 23:45:38 +00:00
GordonTheTurtle 7bdb3c6b87 Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 18.09 2018-12-05 21:03:38 +00:00
Andrew Hsu 66c694875f Merge pull request #280 from thaJeztah/18.09_backport_remove_spec 
[18.09 backport] Remove unused spec files
Upstream-commit: abbaa92613ec98ce92b7d868975f67bb1927d693
Component: packaging
 2018-12-05 11:38:57 -08:00
Eli Uriegas 89559b9c3c Remove unused spec files 
We don't use these spec files to actually build from anymore so we
should just go through and remove them.

Signed-off-by: Eli Uriegas <eli.uriegas@docker.com>
(cherry picked from commit b98d7aad1e153c18da5b488afc40ba751f90cb36)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
Upstream-commit: 9d68fe72f3649fad5e3f902602c8ae9ab4a6abe5
Component: packaging
 2018-12-05 15:12:29 +01:00
Eli Uriegas 74239bfbe1 Merge pull request #570 from andrewhsu/b2 
[18.09] bump ver 18.09.1-beta2
 2018-12-03 16:12:12 -08:00
GordonTheTurtle 24b031ea42 Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 18.09 2018-12-03 23:53:35 +00:00
GordonTheTurtle 64e00cdf94 Merge component 'engine' from git@github.com:docker/engine 18.09 2018-12-03 23:53:23 +00:00
GordonTheTurtle 6d1bca6a6c Merge component 'cli' from git@github.com:docker/cli 18.09 2018-12-03 23:26:41 +00:00
Andrew Hsu 129720636e bump ver 18.09.1-beta2 
Signed-off-by: Andrew Hsu <andrewhsu@docker.com>
 2018-12-03 23:26:14 +00:00
Andrew Hsu dce40a7ca6 Merge pull request #279 from andrewhsu/golang 
[18.09] bump golang to 1.10.5
Upstream-commit: 47d440b14714e57f8cda9f042299db1d35b2b592
Component: packaging
 2018-12-03 14:49:31 -08:00
Andrew Hsu 11442eb1e7 bump golang to 1.10.5 
Signed-off-by: Andrew Hsu <andrewhsu@docker.com>
(cherry picked from commit c658dc545952bf4728e0ef3ff281bfa8823d60cb)
Signed-off-by: Andrew Hsu <andrewhsu@docker.com>
Upstream-commit: df92c55b0ceefb75736d5d1f31a13f8400534a8b
Component: packaging
 2018-12-03 22:21:44 +00:00
Andrew Hsu 679c1150b8 Merge pull request #126 from thaJeztah/18.09_backport_mask_asound 
[18.09 backport] Masked /proc/asound
Upstream-commit: 82a4418f57d5aa0d58c8bba630d701a918094c3b
Component: engine
 2018-12-03 14:06:43 -08:00
Andrew Hsu 66abfda9b2 Merge pull request #1542 from thaJeztah/18.09_backport_completion_cli_experimental 
[18.09 backport] Add bash completion for experimental CLI commands (manifest)
Upstream-commit: 12834eeff6
Component: cli
 2018-12-03 13:34:56 -08:00
GordonTheTurtle 46a88fbe88 Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 18.09 2018-12-03 21:04:39 +00:00
docker-unir[bot] 5efaa09256 Merge pull request #276 from andrewhsu/sock 
Merged with https://github.com/seemethere/unir
Upstream-commit: be8c06f8a7ebaec9e7d30663c82131e0e2ae1aac
Component: packaging
 2018-12-03 19:45:33 +00:00
Eli Uriegas 9b0d684d7f Add docker.socket requirement for docker.service 
Without this the docker.socket would not start by default when starting
the docker.service leading to failures to start.

Signed-off-by: Eli Uriegas <eli.uriegas@docker.com>
(cherry picked from commit 88885d18b1bb0ef91eab4ad3311773f9c40838b7)
Signed-off-by: Andrew Hsu <andrewhsu@docker.com>
Upstream-commit: 93f125a2602b7eb72128cbc16d9d35c9d92ed18a
Component: packaging
 2018-12-03 19:42:41 +00:00
docker-unir[bot] ffd5999784 Merge pull request #260 from thaJeztah/18.09_remove_telemetry_remnants 
Merged with https://github.com/seemethere/unir
Upstream-commit: 091c4453b8e294b0e10ea9fe24c784c2086719be
Component: packaging
 2018-12-03 19:40:52 +00:00
Andrew Hsu d3184b7576 Merge pull request #569 from andrewhsu/b1 
[18.09] bump ver 18.09.1-beta1
 2018-11-30 14:53:27 -08:00
GordonTheTurtle c5d1399959 Merge component 'engine' from git@github.com:docker/engine 18.09 2018-11-30 22:35:25 +00:00
Andrew Hsu 23a01f3126 bump ver 18.09.1-beta1 
Signed-off-by: Andrew Hsu <andrewhsu@docker.com>
 2018-11-30 22:14:01 +00:00
GordonTheTurtle e04edd81d4 Merge component 'cli' from git@github.com:docker/cli 18.09 2018-11-30 22:08:33 +00:00
Andrew Hsu be73976052 Merge pull request #1544 from thaJeztah/18.09_bump_go_to_1.10.5 
[18.09] Bump Go to 1.10.5
Upstream-commit: bb46da9fba
Component: cli
 2018-11-30 14:03:12 -08:00
Andrew Hsu 3948a779cf Merge pull request #123 from tonistiigi/1809-builder-net 
[18.09] builder: set externalkey option for faster hook processing
Upstream-commit: e7a4385e240a1cfb1d795ed8d622c97f6c217585
Component: engine
 2018-11-30 14:02:12 -08:00
Andrew Hsu 0e511427f5 Merge pull request #127 from thaJeztah/18.09_bump_go_to_1.10.5 
[18.09] Bump Go to 1.10.5
Upstream-commit: 09251ef9ca78a74d9a86ddb32bb4ab399032c3ba
Component: engine
 2018-11-30 13:59:38 -08:00
GordonTheTurtle 5c9b82e262 Merge component 'packaging' from git@github.com:docker/docker-ce-packaging 18.09 2018-11-30 21:01:58 +00:00
Sebastiaan van Stijn 9ff11286df Bump Go to 1.10.5 
go1.10.5 (released 2018/11/02) includes fixes to the go command, linker,
runtime and the database/sql package. See the milestone on the issue
tracker for details:

List of changes; https://github.com/golang/go/issues?q=milestone%3AGo1.10.5

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
Upstream-commit: 871d24d3fc
Component: cli
 2018-11-30 21:59:54 +01:00
Eli Uriegas 4fa2dbdf38 Merge pull request #274 from seemethere/1809_sockles 
[18.09] Add socket activation for RHEL based distributions
Upstream-commit: d2f8b45e8edb15960219b1e9ee88a6eec376ac73
Component: packaging
 2018-11-30 12:54:23 -08:00
Eli Uriegas 8293f65feb Add socket activation for RHEL based distributions 
Removes the systemd drop-in unit file for socket activation and instead
prefers socket activation by default for both RHEL based and DEBIAN
based distributions.

Socket activation for RHEL based distributions was tested on CentOS 7 and Fedora 28.

Signed-off-by: Eli Uriegas <eli.uriegas@docker.com>
(cherry picked from commit 91c85cd38197b9d92d5b3e8a1b577d3178d73fcc)
Signed-off-by: Eli Uriegas <eli.uriegas@docker.com>
Upstream-commit: 6a7e302c260a2ff7e4d8b7a6d01249a09c140618
Component: packaging
 2018-11-30 19:43:29 +00:00
Sebastiaan van Stijn 67db4a25e1 Bump Go to 1.10.5 
go1.10.5 (released 2018/11/02) includes fixes to the go command, linker,
runtime and the database/sql package. See the milestone on the issue
tracker for details:

List of changes; https://github.com/golang/go/issues?q=milestone%3AGo1.10.5

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
Upstream-commit: 00ad8e7c5730f3c50ae2e548b47d1340202f72b2
Component: engine
 2018-11-30 20:43:05 +01:00
Jonathan A. Schweder b15b31936b Masked /proc/asound 
@sw-pschmied originally post this in #38285

While looking through the Moby source code was found /proc/asound to be
shared with containers as read-only (as defined in
https://github.com/moby/moby/blob/master/oci/defaults.go#L128).

This can lead to two information leaks.

---

**Leak of media playback status of the host**

Steps to reproduce the issue:

 - Listen to music/Play a YouTube video/Do anything else that involves
sound output
 - Execute docker run --rm ubuntu:latest bash -c "sleep 7; cat
/proc/asound/card*/pcm*p/sub*/status | grep state | cut -d ' ' -f2 |
grep RUNNING || echo 'not running'"
 - See that the containerized process is able to check whether someone
on the host is playing music as it prints RUNNING
 - Stop the music output
 - Execute the command again (The sleep is delaying the output because
information regarding playback status isn't propagated instantly)
 - See that it outputs not running

**Describe the results you received:**

A containerized process is able to gather information on the playback
status of an audio device governed by the host. Therefore a process of a
container is able to check whether and what kind of user activity is
present on the host system. Also, this may indicate whether a container
runs on a desktop system or a server as media playback rarely happens on
server systems.

The description above is in regard to media playback - when examining
`/proc/asound/card*/pcm*c/sub*/status` (`pcm*c` instead of `pcm*p`) this
can also leak information regarding capturing sound, as in recording
audio or making calls on the host system.

Signed-off-by: Jonathan A. Schweder <jonathanschweder@gmail.com>

(cherry picked from commit 64e52ff3dbdb31adc0a9930b3ea74b04b0df8d86)

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
Upstream-commit: 5fffdb32261145b1178f571e25fbd71572769d58
Component: engine
 2018-11-30 14:57:51 +01:00
GordonTheTurtle 3fe8afdba7 Merge component 'engine' from git@github.com:docker/engine 18.09 2018-11-30 09:04:38 +00:00