35 Commits

Author SHA1 Message Date
zhaozhen
9cd20b596b add loongarch64 support for docker 2023-03-16 20:03:19 +08:00
zhongjiawei
ff3bcc697b docker: try http for docker manifest insecure 2023-03-15 17:24:08 +08:00
JackChan8
5ecf0ca3e7 docker: fix container missing after restarting dockerd twice
fix #I6MJ4X
2023-03-14 19:27:35 +08:00
Song Zhang
8ed0a65d0b docker stats: fix 'panic: close of closed channel'
bugfix: https://gitee.com/src-openeuler/docker/issues/I6LNNW?from=project-issue

Signed-off-by: Song Zhang <zhangsong34@huawei.com>
2023-03-10 15:42:11 +08:00
chenjiankun
b78a50c378 docker: set freezer.state to Thawed to increase freeze chances
docker pause/unpause with parallel docker exec can lead to freezing
state, set freezer.state to Thawed to increase freeze chances
2023-02-17 16:39:45 +08:00
zhongjiawei
365eb0b196 docker:do not stop health check before sending signal 2022-12-01 15:19:28 +08:00
chenjiankun
3cc77fa02d docker: using VERSION-vendor to record version 2022-11-24 11:46:52 +08:00
chenjiankun
07ce32f65f docker: fix dockerd core when release network
fix #I627ON
2022-11-22 20:49:27 +08:00
chenjiankun
6a3861c8c1 docker: cleanup netns file when stop docker daemon
fix #I5W2XY
2022-11-22 14:50:42 +08:00
chenjiankun
0044b4982f docker: fix compile problem 2022-10-17 17:57:01 +08:00
chenjiankun
7e4ff1bd42 docker: add epoch for easy upgrade 2022-09-21 11:31:26 +08:00
chenjiankun
54c9d1260f docker: ensure layer digest folder removed if ls.driver.Remove fails
If image pull fails of context canceled, image layer will perform a
rollback operation. When image layer is released, the diff folder of layer
will be removed first, and then the digest folder will be removed.
If the diff folder fails to be removed, such as operation not permitted or
interrupted by others, both the digest folder and diff folder will remain
on the disk, this will cause image not be complete and not repairable.

So we should remove the digest folder first for image layers rollback
and ensure image can be re-pulled completely.
2022-09-15 17:31:01 +08:00
chenjiankun
fc3bc485d1 docker: fix CVE-2022-36109
fix #I5QLCS
2022-09-15 11:24:04 +08:00
chenjiankun
214570099c docker: Add an ExitPid field for State struct to record exit process id
fix #I5OBUW
2022-09-13 20:38:42 +08:00
chenjiankun
542207bf0a docker: fix terminal abnormal after docker run
fix #I5OBZ9
fix #I5LDB4
fix #I5FTB4
2022-09-13 19:58:50 +08:00
zhongjiawei
777a2b05b8 fix CVE-2021-41092
fix #I5D1C0
fix CVE-2021-41092
2022-06-29 14:52:33 +08:00
zjw
69f6dc243f fix CVE-2021-41091
fix #I5CA8V
fix CVE-2021-41091
2022-06-29 09:57:50 +08:00
zjw
9d4f69f055 fix CVE-2021-41089
fix #I5CA8X
2022-06-29 09:54:58 +08:00
zjw
2b2be77fce close channel in write side to avoid panic in docker stats
fix #I5ATMV
2022-06-29 09:50:20 +08:00
zjw
6b4b0f7702 fix status inconsistent after restart container
fix #I5AIPF
fix #I5AD5N
2022-06-29 09:45:41 +08:00
chenjiankun
e676158bba sync from openEuler-22.03-LTS 2022-06-28 16:29:12 +08:00
duyiwei
632b430ea3 fix CVE-2022-24769 2022-06-10 15:13:38 +08:00
fushanqing
7c18e511e3 Integrated runc 2022-04-11 11:28:57 +08:00
fushanqing
4b569c551b remove install runc 2022-03-07 10:57:50 +08:00
xiadanni
447f294a20 docker:update seccomp whitelist to Linux 5.10 syscall list
Signed-off-by: xiadanni <xiadanni1@huawei.com>
2021-09-26 23:57:52 +08:00
WangFengTu
c7f907b1e3 fix rpmbuild failed
Signed-off-by: WangFengTu <wangfengtu@huawei.com>
2021-08-31 14:22:57 +08:00
WangFengTu
aa6647526e fix dangling unpigz
Signed-off-by: WangFengTu <wangfengtu@huawei.com>
2021-08-30 09:19:11 +08:00
WangFengTu
82696f6e38 rollback if docker restart when doing BlkDiscard
Signed-off-by: WangFengTu <wangfengtu@huawei.com>
2021-04-01 16:25:19 +08:00
xiadanni
1bae2e5ea3 docker:sync bugfix and fix CVE-2021-21284 2021-21285
1.fix execCommands leak in health-check
2.check containerd pid before kill it
3.fix CVE-2021-21284
4.fix CVE-2021-21285

Change-Id: I2fe1dd40281f1786ecc63ff19d416b113710e611
Signed-off-by: xiadanni <xiadanni1@huawei.com>
2021-03-18 15:40:53 +08:00
DCCooper
0f204a4fd6 docker:remove go-md2man build require
Signed-off-by: DCCooper <1866858@gmail.com>
2021-02-09 18:51:03 +08:00
jingrui
af6293703d docker: sync bugfix
Change-Id: I4dc92059d90415199fcd143d75cc68cfdb67c430
Signed-off-by: jingrui <jingrui@huawei.com>
2021-01-19 14:03:29 +08:00
yangyanchao
4780a2ff0e docker:components:add config files for riscv
Signe:-off-by: yangyanchao <yangyanchao6@huawei.com>
2021-01-04 10:45:04 +08:00
f00231050
27493a1bf2 docker: fix registry not try hostname issue
reason: when mirror is matched, only matched mirror endpoint is added to endpoint list, but the hostname itself is not in the list, which is not compatible with the case of docker.io, docker.io will be appended to the last of the endpoint list.
2020-12-21 09:46:50 +08:00
liuzekun
294a810705 docker: sync patches from internal
Signed-off-by: liuzekun <liuzekun@huawei.com>
2020-11-28 09:37:25 +08:00
xiadanni
d6bf1f41cc spec: modify spec name
Signed-off-by: xiadanni <xiadanni1@huawei.com>
2020-11-09 16:40:06 +08:00