Commit Graph

230 Commits (bc07b2b81b1c6a62d29981ac564b16a15ce2bfa7)

Author SHA1 Message Date
Xiaofan Zhang 0947ed31ea vendor: update fsutil to c2c7d7b0e144 and symlink test
Signed-off-by: Xiaofan Zhang <xiaofan.zhang@clinc.com>
2020-03-31 02:59:34 +00:00
Akihiro Suda 9f90f5a985 rootless: support fuse-overlayfs
While real overlayfs is available only in Ubuntu and Debian kernels,
fuse-overlayfs is universally available for kernel >= 4.18.

For dockerized deployment, `--device /dev/fuse` needs to be added to
`docker run` flags.

Kubernetes deployment needs a custom device plugin that enables
`/dev/fuse`, e.g. https://github.com/honkiko/k8s-hostdev-plugin

Instead of a device plugin, the device can be also enabled by setting
`securityContext.privileged` to `true`.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2020-03-03 11:30:29 +09:00
Akihiro Suda 7b579cdb98 vendor: update containerd (and various packages)
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2020-02-28 10:24:10 +09:00
Tonis Tiigi a60ecfa4ae vendor: restore dependency versions
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2020-02-24 17:31:01 -08:00
Zach Badgett 1efe7b145d Fix docker dependencies
Signed-off-by: Zach Badgett <zach.badgett@gmail.com>
2020-02-24 15:47:32 -08:00
Zach Badgett 820200aa1d Fix go.mod to be compatible with go1.13
Signed-off-by: Zach Badgett <zach.badgett@gmail.com>
2020-02-24 15:44:11 -08:00
Sebastiaan van Stijn b1b5f2e626
vendor: golang.org/x/crypto v0.0.0-20200214034016-1d94cc7ab1c6
full diff: c2843e01d9...1d94cc7ab1

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-02-19 13:01:06 +01:00
Tonis Tiigi 469e7552d0 fileop: keep correct user for parent dir on userns
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2020-01-28 11:36:42 -08:00
Sebastiaan van Stijn e0ac63481a
vendor: update containerd/continuity to 26c1120b8d4107d2471b93ad78ef7ce1fc84c4c4
full diff: 75bee3e2cc...26c1120b8d

- containerd/continuity#109 Add OpenBSD support for fs subpackage
- containerd/continuity#144 Support Go Modules
- containerd/continuity#147 xattr lost when copying directory
- containerd/continuity#148 fs: don't convert syscall.Timespec to unix.Timespec directly (doesn't work with gccgo)

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-01-13 13:46:10 +01:00
Sebastiaan van Stijn 6a06e8b2f3
vendor: update fsutil 0f039a052ca1
full diff: 3d2716dd0a...0f039a052c

- tonistiigi/fsutil#68 fix gocrypto commit
- tonistiigi/fsutil#69 receive: use filter on receive diff
    - prevents incremental transfers with userns because the metadata
      on disk is always different than the one being transferred.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-01-08 16:50:25 +01:00
Sam Whited 00bfbab039 all: bump the systemd dep to use Go Modules
Signed-off-by: Sam Whited <sam@samwhited.com>
2019-11-11 10:45:43 -05:00
Tonis Tiigi 31a9aeea88 cache: add migration flow to new lease based format
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2019-10-16 10:35:49 -07:00
Tonis Tiigi 08194783e0 cache: update unit tests to new cache manager constructor
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2019-10-16 10:34:50 -07:00
Akihiro Suda c6641fb6d0 vendor containerd
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2019-10-16 18:28:19 +09:00
Derek McGowan d5108d038d Update to containerd 1.3.0
Signed-off-by: Derek McGowan <derek@mcgstyle.net>
2019-09-30 14:45:18 -07:00
Tonis Tiigi 211e20a587 vendor: update containerd to v1.3.0-rc.2
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2019-09-20 14:59:57 -07:00
Tonis Tiigi 5756b62927 vendor: update containerd to v1.3.0-rc.1
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2019-09-19 15:52:26 -07:00
Tonis Tiigi e3e13ad204 vendor: update go-runc to e029b79d
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2019-09-11 10:57:14 -07:00
Tonis Tiigi eba10d51b9 vendor: update containerd to v1.3.0-rc.0
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2019-09-05 17:13:39 -07:00
Tibor Vass aa3ad5f985 vendor fsutil to 3d2716dd0a4d to fix sockets handling
Signed-off-by: Tibor Vass <tibor@docker.com>
2019-08-27 20:53:37 +00:00
Tibor Vass bd8f49ed58 dockerfile: add TestCopySocket test + vendor needed continuity fix
Signed-off-by: Tibor Vass <tibor@docker.com>
2019-08-27 20:53:37 +00:00
Tonis Tiigi fdce39046a vendor: update containerd to v1.3.0-beta.2
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2019-08-21 20:22:55 -07:00
Tonis Tiigi 5d617c557d vendor: update containerd to f0821348
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2019-08-20 17:03:04 -07:00
Tonis Tiigi 615347271d vendor: update containerd to 1.3.0-beta.0
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2019-08-20 17:00:47 -07:00
Tonis Tiigi fb3f2aeb63 client: add test for output target exists
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2019-07-31 10:21:26 -07:00
Akihiro Suda d750cb188a
Merge pull request #1073 from tonistiigi/cni-net
add cni networking support
2019-07-19 10:47:27 +09:00
Tibor Vass 7901ac88e0 vendor: update containerd to 7c1e88399
To update containerd with go mod, it is NOT possible to simply do:

```
go get github.com/containerd/containerd@7c1e88399ec0
```

because it would result in:

```
v1.2.1-0.20190507210959-7c1e88399ec0
```

which is an incorrect version prefix as we want the commit 7c1e88399
from master to have higher priority than a tagged version such as v1.2.*

We want to use a `v1.3.0-0.` prefix even though v1.3.* tags do not exist,
so that when they do, those do have higher priority compared to 7c1e88399.
In other words, containerd's master branch corresponds to a v1.3 dev branch.

The following was thus used to update containerd:

```
go get -d github.com/containerd/containerd@v1.3.0-0.20190507210959-7c1e88399ec0
go get -d github.com/opencontainers/runc@v1.0.0-rc8
make vendor
```

Signed-off-by: Tibor Vass <tibor@docker.com>
2019-07-16 18:31:47 +00:00
Tonis Tiigi 0d22b5056f exporter: keep lease when exporting images
As manifests may be temporary if the same image is built in parallel one build can delete the manifest+config before the export for another finishes.

Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2019-07-12 13:12:45 -07:00
Tonis Tiigi bc7a6f2556 add cni networking support
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2019-07-10 14:42:30 -07:00
Tibor Vass 8e692507ee executor: allow setting DNSConfig to be used by resolvconf
This patch allows downstream code to pass a DNSConfig that is
then used by executor/oci.GetResolvConf.

This would allow the BuildKit-based builder in Docker to honor
the docker daemon's DNS configuration, thus fixing a feature gap
with the legacy builder.

Signed-off-by: Tibor Vass <tibor@docker.com>
2019-06-17 20:43:33 +00:00
Tibor Vass 749294397b executor: use systemd resolvconf if enabled
Signed-off-by: Tibor Vass <tibor@docker.com>
2019-06-04 15:22:47 +00:00
Tonis Tiigi 8e25187cc7 pull: fix content blobs deletion on pull race
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2019-05-28 14:39:05 -07:00
Akihiro Suda eebb08f4f6 bump google.golang.org/grpc v1.20.1
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2019-05-12 15:20:02 +09:00
Akihiro Suda 0dee033264 buildkitd: support sd_notify
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2019-05-09 03:06:29 +09:00
Tõnis Tiigi 3c78a9c736
Merge pull request #909 from fuweid/me-allow-unpack-action
exporter: support unpack opt for image exporter
2019-04-26 14:04:48 -07:00
Tonis Tiigi ac18391f2b vendor: update containerd and continuity
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2019-04-25 23:33:52 -07:00
Tonis Tiigi 9c70c31a51 vendor: patch differ deadlock
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2019-04-25 22:50:38 -07:00
Wei Fu ffad8ada79 exporter: support unpack opt for image exporter
It is enhancement which allows to unpack image into containerd
snapshotter storage by `--output type=image,<.>=<.>,unpack=true`.

In order to support this feature, we needs to extend the Snapshotter
witwh `Name() string` function. Because we needs to set gc label for
snapshotter which need snapshotter name.

fix: #908

Signed-off-by: Wei Fu <fuweid89@gmail.com>
2019-04-24 21:24:06 +08:00
Akihiro Suda aa9c666e16 add example/kube-consistent-hash
Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2019-04-23 19:35:29 +09:00
Tonis Tiigi 894da35fed fix unit tests for idmapping support
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
Signed-off-by: Tibor Vass <tibor@docker.com>
2019-04-02 20:35:18 -07:00
Tonis Tiigi ad81e72aa3 vendor: add vt100
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2019-04-01 19:49:04 -07:00
Akihiro Suda 4f4bcade64
Merge pull request #907 from tonistiigi/tarball-exporter
exporter: add tarball exporter
2019-03-29 12:29:00 +09:00
Tõnis Tiigi 758c61e873
Merge pull request #570 from kunalkushwaha/entirlement-revised
security entitlement support
2019-03-28 16:14:06 -07:00
Tonis Tiigi c1a1d7033d exporter: add tar exporter
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2019-03-27 09:40:24 -07:00
Tonis Tiigi 01a8de7d74 integration: secmode switch support and security testcase
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
Signed-off-by: Kunal Kushwaha <kunal.kushwaha@gmail.com>
2019-03-27 13:57:03 +09:00
Akihiro Suda 2f007a47a9 client: add docker:// connhelper
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2019-03-26 21:25:01 +09:00
Akihiro Suda fbf04740d6 update containerd
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2019-03-22 15:28:33 +09:00
Tonis Tiigi d8cd5f49cd vendor: update docker to e7b5f7dbe98c
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2019-03-19 17:54:39 -07:00
Tonis Tiigi e8432d677b vendor: update fsutil to 1bdbf123ad
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2019-03-18 19:11:39 -07:00
Tonis Tiigi 33955c9b9e vendor: revendor new packages
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2019-03-15 17:49:58 -07:00
Tonis Tiigi 171feaafeb vendor: add fsutil copy package
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2019-03-15 17:49:44 -07:00
Tonis Tiigi 4ac089a7b6 vendor: update fsutil to 1ec198358
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2019-03-14 15:18:50 -07:00
Tonis Tiigi 632797cef0 vendor: udpate fsutil to b4281fa
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2019-03-05 17:34:01 -08:00
Derek McGowan edd603e4cd Update containerd vendor
Signed-off-by: Derek McGowan <derek@mcgstyle.net>
2019-02-13 11:03:48 -08:00
Tibor Vass ad8b35e3d4 Migrate from vndr to go mod
go get -u github.com/tiborvass/gomod
  GO111MODULE=on gomod init
  GO111MODULE=on go mod tidy
  GO111MODULE=on go mod vendor

Signed-off-by: Tibor Vass <tibor@docker.com>
2019-01-31 22:44:47 +00:00
Tibor Vass 601817163d Update docker/cli dependency
Signed-off-by: Tibor Vass <tibor@docker.com>
2019-01-26 22:10:04 +00:00
Akihiro Suda 6e7617e889 support local cache exporter and importer
Export:

  $ buildctl build ... --export-cache type=local,store=/path/to/output-dir

Import:

  $ buildctl build ... --import-cache type=local,store=/path/to/input-dir

Impact on CLI:
* Old (deprecated but still effective): `--export-cache localhost:5000/myrepo:buildcache --export-cache-opt mode=max`
* New: `--export-cache type=registry,ref=localhost:5000/myrepo:buildcache,mode=max`

Impact on API:
* New fields are added to control.proto and gateway.proto. The daemon
internally translates old API calls to the new ones.
* While new API can be used for `registry` caches, the client continues
to use the legacy API for `registry` caches to ensure compatibility with
old daemons.
* To import `local` caches with a frontend, the frontend needs to support
a new frontend opt `cache-imports`.

Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2019-01-19 02:38:26 +09:00
Akihiro Suda 6ed72d683f update containerd to v1.2.1, runc to v1.0.0-rc6
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2018-12-26 19:48:01 +09:00
Akihiro Suda 048130d1d0 simplify rootless
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2018-10-16 14:05:58 +09:00
Tonis Tiigi fb9e2c1030 vendor: update containerd to v1.2.0-rc.1
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-10-12 15:27:54 -07:00
Tonis Tiigi a8f4bf22d3 vendor: update fsutil to 2862f6bc
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-10-11 17:02:38 -07:00
Ian Campbell 8b69292087 Bump github.com/tonistiigi/fsutil dependency to f567071bed24
7e391b0e78...f567071bed

Signed-off-by: Ian Campbell <ijc@docker.com>
2018-10-03 11:46:35 +01:00
John Howard 2de2c04c8e Revendoring to move boltdb to bbolt
Signed-off-by: John Howard <jhoward@microsoft.com>
2018-09-18 11:18:08 -07:00
Michael Crosby 29eb67fa97 Update containerd to 1597270d0468ccebd29b78164c2e902514f426fd
Signed-off-by: Michael Crosby <crosbymichael@gmail.com>
2018-09-11 14:22:22 -07:00
Tõnis Tiigi 1508ae0fc7
Merge pull request #608 from tonistiigi/ssh-forwarding
sshforward: implement ssh socket forwarding
2018-09-11 08:01:58 -07:00
Tonis Tiigi 1604b1b9ed vendor: add x/crypto
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-09-10 14:12:46 -07:00
Tonis Tiigi 7a22457717 vendor: update fsutil to 7e391b0
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-09-07 11:48:29 -07:00
Tonis Tiigi cf614adb7f vendor: add toml parser
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-08-30 16:12:01 -07:00
Derek McGowan 279a144686 Update containerd vendor
Picks up platform changes

Signed-off-by: Derek McGowan <derek@mcgstyle.net>
2018-08-28 14:26:14 -07:00
Akihiro Suda 2fa4c37854 update containerd (binary: v1.1.3, library: Aug 23, 2018)
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2018-08-23 16:21:55 +09:00
Tibor Vass 49906c6292
Merge pull request #576 from ijc/bump-gogo-googleapis
Bump github.com/gogo/googleapis to b23578765ee5
2018-08-21 13:06:00 -07:00
Derek McGowan 110c829d15 Update containerd v1.2 beta
Signed-off-by: Derek McGowan <derek@mcgstyle.net>
2018-08-17 13:12:02 -07:00
Ian Campbell 6398c26ec7 Bump github.com/gogo/googleapis to b23578765ee5
This is the next commit and merely adds a LICENSE file.

Signed-off-by: Ian Campbell <ijc@docker.com>
2018-08-17 14:22:52 +01:00
Akihiro Suda 56fa35725a vendor: update containerd
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2018-07-25 16:37:42 +09:00
Tonis Tiigi de50176daa vendor: update fsutil to b19464cd
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-07-24 23:28:12 -07:00
Tonis Tiigi 8331b9b2c6 vendor: update containerd to fb1084d9
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-07-17 11:22:44 -07:00
Tonis Tiigi 5c3cfe5553 vendor: update fsutil to cb2ad947b
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-07-16 13:47:24 -07:00
Tonis Tiigi 0514acbff8 vendor: update units to 6950e57a
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-07-11 16:40:42 -07:00
Tonis Tiigi 4e76ea20f2 vendor: update containerd to b4163374
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-07-06 14:18:33 -07:00
Akihiro Suda 72327724c0 rootless: refactor libcontainer_specconv
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2018-07-04 19:27:54 +09:00
Tõnis Tiigi f3b743bd13
Merge pull request #467 from dmcgowan/export-oci-media-types
Support creating and pushing OCI types
2018-06-28 14:46:34 -07:00
Derek McGowan 618f34a1f9 Support creating and pushing OCI types
Adds image and oci exporter option "oci-mediatypes"
Ensures that the images created in the content store
have the correct type which matches the manifest.
Sets the correct media type on the descriptor in push from
reading the type specified in the manifest.
Removes use of distribution manifest packages.

Signed-off-by: Derek McGowan <derek@mcgstyle.net>
2018-06-28 11:23:35 -07:00
Tonis Tiigi dcd7e594b5 vendor: update containerd to 08f7ee982
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-06-26 21:22:07 -07:00
Akihiro Suda 7690ff1d34 vendor runc ad0f5255060d36872be04de22f8731f38ef2d7b1
For https://github.com/opencontainers/runc/pull/1819

Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2018-06-16 03:45:49 +09:00
Vincent Demeester 79241f25d5
Update tests to use gotest.tools 👼
Signed-off-by: Vincent Demeester <vincent@sbr.pm>
2018-06-11 15:52:17 +02:00
Tonis Tiigi 30461204da vendor: update fsutil to fix local source bug
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-06-10 09:22:59 -07:00
Tonis Tiigi 6ce604740f vendor: replace locker pkg for legal
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-06-08 11:00:37 -07:00
Tõnis Tiigi 7943598281
Merge pull request #439 from AkihiroSuda/vendor-containerd-20180606
update containerd library
2018-06-08 10:33:10 -07:00
Akihiro Suda 47a00b84fe update containerd library
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2018-06-08 21:44:17 +09:00
Tonis Tiigi 668eca4685 vendor: update fsutil
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-06-05 23:54:08 -07:00
Tõnis Tiigi ad20ed1fe3
Merge pull request #430 from tonistiigi/update-fsutil
vendor: update fsutil to 30b4fcc5
2018-06-04 23:59:35 -07:00
Tõnis Tiigi 43e758232a
Merge pull request #422 from thaJeztah/update_microsoft_vendors
Update containerd and dependencies
2018-06-04 10:37:46 -07:00
Sebastiaan van Stijn b5028a234b
Update containerd and dependencies
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2018-06-04 10:14:06 -07:00
Tonis Tiigi b590c0d970 vendor: update fsutil to 30b4fcc5
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-06-01 23:09:38 -07:00
Tonis Tiigi a4bc39542f vendor: add missing test dependencies
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-06-01 20:13:46 -07:00
Tonis Tiigi 76d15da0d5 dockerfile: update imports
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-06-01 20:10:18 -07:00
Tonis Tiigi 9dc5ea28e7 vendor: update moby
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-06-01 11:57:58 -07:00
Akihiro Suda adef0dedef oci-worker: experimental support for rootless mode
Signed-off-by: Akihiro Suda <suda.akihiro@lab.ntt.co.jp>
2018-05-31 16:05:13 +09:00
Tonis Tiigi ff501ac064 vendor: update containerd to 7f800e0a
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
2018-05-29 10:30:33 -07:00
Tõnis Tiigi 160231c665
Merge pull request #389 from tiborvass/fix-invalid-dockerignore
dockerfile: fix hanging when encountering invalid dockerignore pattern
2018-05-16 17:08:02 -07:00