Tõnis Tiigi
89978e7069
Merge pull request #1370 from thaJeztah/bump_crypto
...
vendor: golang.org/x/crypto v0.0.0-20200214034016-1d94cc7ab1c6
2020-02-19 10:16:01 -08:00
Sebastiaan van Stijn
b1b5f2e626
vendor: golang.org/x/crypto v0.0.0-20200214034016-1d94cc7ab1c6
...
full diff: c2843e01d9...1d94cc7ab1
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-02-19 13:01:06 +01:00
Akihiro Suda
2f5ad30ae5
Merge pull request #1351 from tonistiigi/security-devices
...
mount whitelist of devices on insecure security mode
2020-02-14 16:52:26 +09:00
Akihiro Suda
3c53f48f22
Merge pull request #1365 from tonistiigi/base-upt
...
dockerfile: update static base images
2020-02-13 15:52:11 +09:00
Tonis Tiigi
eccae3e469
dockerfile: update static base images
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2020-02-12 22:02:10 -08:00
Akihiro Suda
b5fb8c4428
Merge pull request #1356 from tonistiigi/lazy-results
...
solver: evaluate solve results lazily
2020-02-10 00:15:43 +09:00
Tonis Tiigi
b0e76973ee
solver: use correct context for getting cache managers lazily
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2020-02-06 15:11:49 -08:00
Tibor Vass
0b130cca04
Merge pull request #1357 from AkihiroSuda/add-hinshun-maintainers
...
MAINTAINERS: add @hinshun
2020-02-06 12:16:02 -08:00
Akihiro Suda
9d2a0d318b
MAINTAINERS: add @hinshun
...
@hinshun has been a very valuable contributor to the project,
especially for the solver component.
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2020-02-07 04:40:21 +09:00
Tonis Tiigi
8cfe2de889
solver: evaluate solve results lazily
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2020-02-05 15:29:43 -08:00
Tibor Vass
98ce74b987
Merge pull request #1352 from tonistiigi/windows-build-fix
...
file: fix compilation on windows
2020-01-30 20:49:19 -08:00
Tonis Tiigi
e0e29722e2
file: fix compilation on windows
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2020-01-30 20:21:40 -08:00
Tonis Tiigi
8f52339933
dockerfile: add test for whitelisted devices
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2020-01-30 18:43:04 -08:00
Tonis Tiigi
572a2b5718
entitlements: mount loop devices relative to next free device
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2020-01-30 13:47:44 -08:00
Tonis Tiigi
fc186a8b89
oci: mount whitelist of devices on insecure security mode
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2020-01-30 13:07:29 -08:00
Tibor Vass
fac9c1b402
Merge pull request #1342 from tonistiigi/userns-chown
...
fileop: keep correct user for parent dir on userns
2020-01-30 11:26:24 -08:00
Tõnis Tiigi
3cd32c0c25
Merge pull request #1347 from TBBle/run_hack_util_with_bash
...
Remove bashism from shared shell script
2020-01-29 10:02:02 -08:00
Tõnis Tiigi
6f4420b3c1
Merge pull request #1314 from TBBle/low_hanging_windows_fruit
...
Low-hanging Windows fruit
2020-01-29 10:01:23 -08:00
Paul "TBBle" Hampson
b9cf317850
Distinguish containerd failure from process exit code
...
Signed-off-by: Paul "TBBle" Hampson <Paul.Hampson@Pobox.com>
2020-01-30 00:39:11 +11:00
Paul "TBBle" Hampson
e11b881c12
Set sensible defaults for Windows installations
...
Non-packaged execution will need this to be overridden anyway, and it
avoids a surprise "Drop state data into the current working directory"
event.
Signed-off-by: Paul "TBBle" Hampson <Paul.Hampson@Pobox.com>
2020-01-30 00:34:44 +11:00
Paul "TBBle" Hampson
2bee17a65a
Don't always fail euid check on Windows
...
The check for running as a non-admin euid() doesn't work on Windows,
always returning -1.
For now, treat -1 as "Probably root", and let the failures happen later.
Signed-off-by: Paul "TBBle" Hampson <Paul.Hampson@Pobox.com>
2020-01-30 00:34:44 +11:00
Paul "TBBle" Hampson
e801cc8238
Recognise Runtime V2 containerd plugins
...
This makes this code successfully discover the Windows Runtime V2
(hcsshim-based) plugin now that the Windows Runtime V1 (runhcs-based)
plugin has been removed upstream.
Signed-off-by: Paul "TBBle" Hampson <Paul.Hampson@Pobox.com>
2020-01-30 00:34:44 +11:00
Paul "TBBle" Hampson
c67499de09
Create a new Error when there is no Error to wrap
...
Wrapping a `nil` error produces `nil`, which causes the calling code to
see success, and continue on with a default-created WorkerOpt, which
causes segfaults later.
Signed-off-by: Paul "TBBle" Hampson <Paul.Hampson@Pobox.com>
2020-01-30 00:34:44 +11:00
Paul "TBBle" Hampson
1036fafffa
Support npipe the same way we support Unix sockets
...
The same function used to support Unix sockets automatically supports
Named Pipes on Windows.
This makes the default configuration option for the daemon address work
correctly on Windows.
Signed-off-by: Paul "TBBle" Hampson <Paul.Hampson@Pobox.com>
2020-01-30 00:34:43 +11:00
Paul "TBBle" Hampson
539b08cd5d
Remove bashism from shared shell script
...
This file is consumed by both validate-vendor (inside an Alpine-based
Docker container where bash is not installed), and the other scripts.
Apart from validate-vendor, all the other scripts in hack/ use bash.
Fixes CI logging a complaint:
> ./hack/validate-vendor: 31: [: pull_request: unexpected operator
Signed-off-by: Paul "TBBle" Hampson <Paul.Hampson@Pobox.com>
2020-01-30 00:20:51 +11:00
Tõnis Tiigi
3790395364
Merge pull request #1343 from AkihiroSuda/dockerfile-runc-rc10
...
Dockerfile: update dependencies (including runc rc10)
2020-01-28 14:40:29 -08:00
Tonis Tiigi
469e7552d0
fileop: keep correct user for parent dir on userns
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2020-01-28 11:36:42 -08:00
Tõnis Tiigi
291a480723
Merge pull request #1341 from jingxiaolu/make_images
...
Makefile: specify DOCKER_BUILDKIT when make images
2020-01-27 21:58:52 -08:00
Tõnis Tiigi
53db5b474c
Merge pull request #1344 from AkihiroSuda/kube-runasnonroot
...
Dockerfile: support Kubernetes runAsNonRoot
2020-01-27 21:56:50 -08:00
l00397676
e6d003d27e
Makefile: specify DOCKER_BUILDKIT when make images
...
When `make images` with buildmode docker-buildkit,
DOCKER_BUILDKIT=1 should be added to environments.
Signed-off-by: Lu Jingxiao <lujingxiao@huawei.com>
2020-01-26 18:13:11 +08:00
Tõnis Tiigi
dd13194761
Merge pull request #1345 from HowJMay/fix_typo
...
fix: Fix typo
2020-01-25 09:11:46 -08:00
HowJMay
b19698c4fc
fix: Fix typo
...
fix typo in code
Signed-off-by: HowJMay <vulxj0j8j8@gmail.com>
2020-01-25 15:53:07 +08:00
Akihiro Suda
55009bee88
Dockerfile: support Kubernetes runAsNonRoot
...
Kubernetes runAsNonRoot requires `USER` in Dockerfile to be numeric:
https://github.com/kubernetes/kubernetes/blob/v1.18.0-alpha.2/pkg/kubelet/kuberuntime/security_context.go#L98
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2020-01-25 04:36:56 +09:00
Akihiro Suda
b7e189d77d
Dockerfile: update dependencies (including runc rc10)
...
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2020-01-25 04:30:54 +09:00
Tõnis Tiigi
490b277c91
Merge pull request #1286 from hinshun/llbstate-from-result
...
Allow previous solve results to be used in new solves
2020-01-23 16:41:55 -08:00
Edgar Lee
c83e8bf2a9
Add gateway apicap for CapReferenceOutput and move reference llb.Output to method ToOutput()
...
Signed-off-by: Edgar Lee <edgarl@netflix.com>
2020-01-23 11:36:30 -08:00
Edgar Lee
f937656b1a
Verify platform is stored in state directly in defop test
...
Signed-off-by: Edgar Lee <edgarl@netflix.com>
2020-01-23 11:02:40 -08:00
Edgar Lee
0a76749067
Add platform defop test, force renames in copy tests, and move forwarded solve test to dockerfile package
...
Signed-off-by: Edgar Lee <edgarl@netflix.com>
2020-01-23 11:02:40 -08:00
Edgar Lee
be7f1a36fa
Return def bytes instead of remarshalling definition from pb.Op
...
Signed-off-by: Edgar Lee <edgarl@netflix.com>
2020-01-23 11:02:40 -08:00
Edgar Lee
2edb431a0f
Allow previous solve results to be used in new solves
...
Signed-off-by: Edgar Lee <edgarl@netflix.com>
2020-01-23 11:02:40 -08:00
Tõnis Tiigi
8a267827cd
Merge pull request #1316 from coryb/goroutine-leak
...
ensure context is cancelled to prevent goroutine leaks from grpc.newClientStream
2020-01-16 17:35:11 -08:00
Akihiro Suda
aa4311b7fa
Merge pull request #1328 from tonistiigi/combinedcache-panic
...
solver: avoid panic on combined cache load
2020-01-15 12:30:45 +09:00
Akihiro Suda
2949a7d442
Merge pull request #1324 from tonistiigi/onbuild-clear
...
dockerfile: clear onbuild rules after triggering
2020-01-15 12:30:14 +09:00
Akihiro Suda
e7d97db9aa
Merge pull request #1329 from hinshun/fix/1327
...
Detect support for protobuf array ref on server on frontend return call
2020-01-15 12:24:56 +09:00
Edgar Lee
d81832cf6c
Detect support for protobuf array ref on server on frontend return call
...
Signed-off-by: Edgar Lee <edgarl@netflix.com>
2020-01-14 17:16:21 -08:00
Tonis Tiigi
7fc7f6dbf6
solver: avoid panic on combined cache load
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2020-01-14 11:19:18 -08:00
Tonis Tiigi
393f388ed3
dockerfile: clear onbuild rules after triggering
...
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2020-01-13 17:09:28 -08:00
Tõnis Tiigi
34bda27311
Merge pull request #1323 from thaJeztah/bump_continuity
...
vendor: update containerd/continuity to 26c1120b8d4107d2471b93ad78ef7ce1fc84c4c4
2020-01-13 11:03:29 -08:00
Tõnis Tiigi
d709f87c92
Merge pull request #1320 from lugeng/fix/legacy-medieType-octet-stream
...
fix baseimage with unknown application/octet-stream as config media type
2020-01-13 11:02:50 -08:00
Sebastiaan van Stijn
e0ac63481a
vendor: update containerd/continuity to 26c1120b8d4107d2471b93ad78ef7ce1fc84c4c4
...
full diff: 75bee3e2cc...26c1120b8d
- containerd/continuity#109 Add OpenBSD support for fs subpackage
- containerd/continuity#144 Support Go Modules
- containerd/continuity#147 xattr lost when copying directory
- containerd/continuity#148 fs: don't convert syscall.Timespec to unix.Timespec directly (doesn't work with gccgo)
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-01-13 13:46:10 +01:00