30 Commits

Author SHA1 Message Date
zhongjiawei
2e483250b2 docker:thinpool full because docker daemon restart when docker pull
Signed-off-by: zhongjiawei <zhongjiawei1@huawei.com>
2023-06-08 16:32:46 +08:00
zhongjiawei
3b459012b6 docker:fix CVE-2023-28840 CVE-2023-28841 CVE-2023-28842 2023-04-06 16:19:21 +08:00
zhongjiawei
59f6a66701 docker:sync some patches 2023-03-29 15:16:12 +08:00
zhongjiawei
ff3bcc697b docker: try http for docker manifest insecure 2023-03-15 17:24:08 +08:00
JackChan8
5ecf0ca3e7 docker: fix container missing after restarting dockerd twice
fix #I6MJ4X
2023-03-14 19:27:35 +08:00
Song Zhang
8ed0a65d0b docker stats: fix 'panic: close of closed channel'
bugfix: https://gitee.com/src-openeuler/docker/issues/I6LNNW?from=project-issue

Signed-off-by: Song Zhang <zhangsong34@huawei.com>
2023-03-10 15:42:11 +08:00
chenjiankun
b78a50c378 docker: set freezer.state to Thawed to increase freeze chances
docker pause/unpause with parallel docker exec can lead to freezing
state, set freezer.state to Thawed to increase freeze chances
2023-02-17 16:39:45 +08:00
zhongjiawei
365eb0b196 docker:do not stop health check before sending signal 2022-12-01 15:19:28 +08:00
chenjiankun
3cc77fa02d docker: using VERSION-vendor to record version 2022-11-24 11:46:52 +08:00
chenjiankun
07ce32f65f docker: fix dockerd core when release network
fix #I627ON
2022-11-22 20:49:27 +08:00
chenjiankun
6a3861c8c1 docker: cleanup netns file when stop docker daemon
fix #I5W2XY
2022-11-22 14:50:42 +08:00
chenjiankun
7e4ff1bd42 docker: add epoch for easy upgrade 2022-09-21 11:31:26 +08:00
chenjiankun
54c9d1260f docker: ensure layer digest folder removed if ls.driver.Remove fails
If image pull fails of context canceled, image layer will perform a
rollback operation. When image layer is released, the diff folder of layer
will be removed first, and then the digest folder will be removed.
If the diff folder fails to be removed, such as operation not permitted or
interrupted by others, both the digest folder and diff folder will remain
on the disk, this will cause image not be complete and not repairable.

So we should remove the digest folder first for image layers rollback
and ensure image can be re-pulled completely.
2022-09-15 17:31:01 +08:00
chenjiankun
fc3bc485d1 docker: fix CVE-2022-36109
fix #I5QLCS
2022-09-15 11:24:04 +08:00
chenjiankun
214570099c docker: Add an ExitPid field for State struct to record exit process id
fix #I5OBUW
2022-09-13 20:38:42 +08:00
chenjiankun
542207bf0a docker: fix terminal abnormal after docker run
fix #I5OBZ9
fix #I5LDB4
fix #I5FTB4
2022-09-13 19:58:50 +08:00
zhongjiawei
777a2b05b8 fix CVE-2021-41092
fix #I5D1C0
fix CVE-2021-41092
2022-06-29 14:52:33 +08:00
zjw
69f6dc243f fix CVE-2021-41091
fix #I5CA8V
fix CVE-2021-41091
2022-06-29 09:57:50 +08:00
zjw
9d4f69f055 fix CVE-2021-41089
fix #I5CA8X
2022-06-29 09:54:58 +08:00
zjw
2b2be77fce close channel in write side to avoid panic in docker stats
fix #I5ATMV
2022-06-29 09:50:20 +08:00
zjw
6b4b0f7702 fix status inconsistent after restart container
fix #I5AIPF
fix #I5AD5N
2022-06-29 09:45:41 +08:00
chenjiankun
e676158bba sync from openEuler-22.03-LTS 2022-06-28 16:29:12 +08:00
xiadanni
447f294a20 docker:update seccomp whitelist to Linux 5.10 syscall list
Signed-off-by: xiadanni <xiadanni1@huawei.com>
2021-09-26 23:57:52 +08:00
WangFengTu
c7f907b1e3 fix rpmbuild failed
Signed-off-by: WangFengTu <wangfengtu@huawei.com>
2021-08-31 14:22:57 +08:00
xiadanni
1bae2e5ea3 docker:sync bugfix and fix CVE-2021-21284 2021-21285
1.fix execCommands leak in health-check
2.check containerd pid before kill it
3.fix CVE-2021-21284
4.fix CVE-2021-21285

Change-Id: I2fe1dd40281f1786ecc63ff19d416b113710e611
Signed-off-by: xiadanni <xiadanni1@huawei.com>
2021-03-18 15:40:53 +08:00
DCCooper
0f204a4fd6 docker:remove go-md2man build require
Signed-off-by: DCCooper <1866858@gmail.com>
2021-02-09 18:51:03 +08:00
jingrui
af6293703d docker: sync bugfix
Change-Id: I4dc92059d90415199fcd143d75cc68cfdb67c430
Signed-off-by: jingrui <jingrui@huawei.com>
2021-01-19 14:03:29 +08:00
liuzekun
294a810705 docker: sync patches from internal
Signed-off-by: liuzekun <liuzekun@huawei.com>
2020-11-28 09:37:25 +08:00
xiadanni
8cd4d200f6 docker: fix SOURCE0 addr
Signed-off-by: xiadanni <xiadanni1@huawei.com>
2020-09-14 14:46:45 +08:00
xiadanni1
07877c6fda docker: use git-commit to store commit ID
Change-Id: Id13ecdba61708f62595d6db593c670c304abf0bb
Signed-off-by: xiadanni1 <xiadanni1@huawei.com>
2020-06-16 02:07:26 +08:00