123 Commits

Author SHA1 Message Date
chenjiankun
07ce32f65f docker: fix dockerd core when release network
fix #I627ON
2022-11-22 20:49:27 +08:00
openeuler-ci-bot
8f09263541
!142 docker: cleanup netns file when stop docker daemon
From: @jackchan8 
Reviewed-by: @zhangsong234, @duguhaotian 
Signed-off-by: @duguhaotian
2022-11-22 08:13:40 +00:00
chenjiankun
6a3861c8c1 docker: cleanup netns file when stop docker daemon
fix #I5W2XY
2022-11-22 14:50:42 +08:00
openeuler-ci-bot
05e1f1370a
!139 docker: fix compile problem
From: @jackchan8 
Reviewed-by: @duguhaotian 
Signed-off-by: @duguhaotian
2022-10-19 01:55:28 +00:00
chenjiankun
0044b4982f docker: fix compile problem 2022-10-17 17:57:01 +08:00
openeuler-ci-bot
5eb470f8b2
!131 docker: add epoch for easy upgrade
From: @jackchan8 
Reviewed-by: @zhangsong234, @duguhaotian 
Signed-off-by: @duguhaotian
2022-09-21 03:28:50 +00:00
chenjiankun
7e4ff1bd42 docker: add epoch for easy upgrade 2022-09-21 11:31:26 +08:00
openeuler-ci-bot
f3d48fe017
!125 docker: ensure layer digest folder removed if ls.driver.Remove fails
From: @jackchan8 
Reviewed-by: @zhangsong234, @duguhaotian 
Signed-off-by: @duguhaotian
2022-09-16 01:21:43 +00:00
chenjiankun
54c9d1260f docker: ensure layer digest folder removed if ls.driver.Remove fails
If image pull fails of context canceled, image layer will perform a
rollback operation. When image layer is released, the diff folder of layer
will be removed first, and then the digest folder will be removed.
If the diff folder fails to be removed, such as operation not permitted or
interrupted by others, both the digest folder and diff folder will remain
on the disk, this will cause image not be complete and not repairable.

So we should remove the digest folder first for image layers rollback
and ensure image can be re-pulled completely.
2022-09-15 17:31:01 +08:00
openeuler-ci-bot
b0813e64ca
!110 docker: fix CVE-2022-36109
From: @jackchan8 
Reviewed-by: @duguhaotian, @zhangsong234 
Signed-off-by: @duguhaotian
2022-09-15 07:03:35 +00:00
chenjiankun
fc3bc485d1 docker: fix CVE-2022-36109
fix #I5QLCS
2022-09-15 11:24:04 +08:00
openeuler-ci-bot
bd7a10544c
!109 docker: Add an ExitPid field for State struct to record exit process id
From: @jackchan8 
Reviewed-by: @duguhaotian, @zhangsong234 
Signed-off-by: @duguhaotian
2022-09-13 12:18:58 +00:00
chenjiankun
214570099c docker: Add an ExitPid field for State struct to record exit process id
fix #I5OBUW
2022-09-13 20:38:42 +08:00
openeuler-ci-bot
72ff37aec5
!108 docker: fix terminal abnormal after docker run
From: @jackchan8 
Reviewed-by: @zhangsong234, @duguhaotian 
Signed-off-by: @duguhaotian
2022-09-13 11:51:50 +00:00
chenjiankun
542207bf0a docker: fix terminal abnormal after docker run
fix #I5OBZ9
fix #I5LDB4
fix #I5FTB4
2022-09-13 19:58:50 +08:00
openeuler-ci-bot
508317c338
!102 fix CVES and issue
From: @zhong-jiawei-1 
Reviewed-by: @zhangsong234, @duguhaotian 
Signed-off-by: @duguhaotian
2022-06-29 08:19:28 +00:00
zhongjiawei
777a2b05b8 fix CVE-2021-41092
fix #I5D1C0
fix CVE-2021-41092
2022-06-29 14:52:33 +08:00
zjw
69f6dc243f fix CVE-2021-41091
fix #I5CA8V
fix CVE-2021-41091
2022-06-29 09:57:50 +08:00
zjw
9d4f69f055 fix CVE-2021-41089
fix #I5CA8X
2022-06-29 09:54:58 +08:00
zjw
2b2be77fce close channel in write side to avoid panic in docker stats
fix #I5ATMV
2022-06-29 09:50:20 +08:00
zjw
6b4b0f7702 fix status inconsistent after restart container
fix #I5AIPF
fix #I5AD5N
2022-06-29 09:45:41 +08:00
openeuler-ci-bot
714f3c1ef5
!94 sync from openEuler-22.03-LTS
From: @jackchan8 
Reviewed-by: @zhangsong234, @duguhaotian 
Signed-off-by: @duguhaotian
2022-06-28 08:40:01 +00:00
chenjiankun
e676158bba sync from openEuler-22.03-LTS 2022-06-28 16:29:12 +08:00
openeuler-ci-bot
e6424e05ea
!88 docker:fix CVE-2022-24769
From: @duyiwei7w 
Reviewed-by: @yangzhao_kl, @jackchan8 
Signed-off-by: @yangzhao_kl
2022-06-16 01:33:05 +00:00
duyiwei
632b430ea3 fix CVE-2022-24769 2022-06-10 15:13:38 +08:00
openeuler-ci-bot
e41c1362c1
!87 Integrated runc
From: @fu-shanqing 
Reviewed-by: @duguhaotian, @jackchan8 
Signed-off-by: @duguhaotian
2022-04-12 08:05:42 +00:00
fushanqing
7c18e511e3 Integrated runc 2022-04-11 11:28:57 +08:00
openeuler-ci-bot
ef4057efb3
!71 remove install runc
From: @fu-shanqing 
Reviewed-by: @yangzhao_kl 
Signed-off-by: @yangzhao_kl
2022-03-16 01:15:03 +00:00
fushanqing
4b569c551b remove install runc 2022-03-07 10:57:50 +08:00
openeuler-ci-bot
a9202c81bb !60 docker:update seccomp whitelist to Linux 5.10 syscall list
From: @Vanient
Reviewed-by: @jing-rui,@duguhaotian
Signed-off-by: @duguhaotian
2021-09-27 06:35:52 +00:00
xiadanni
447f294a20 docker:update seccomp whitelist to Linux 5.10 syscall list
Signed-off-by: xiadanni <xiadanni1@huawei.com>
2021-09-26 23:57:52 +08:00
openeuler-ci-bot
fb04089b4a !54 fix rpmbuild failed
From: @wangfengtu
Reviewed-by: @jing-rui,@caihaomin
Signed-off-by: @caihaomin
2021-08-31 08:41:08 +00:00
WangFengTu
c7f907b1e3 fix rpmbuild failed
Signed-off-by: WangFengTu <wangfengtu@huawei.com>
2021-08-31 14:22:57 +08:00
openeuler-ci-bot
29ef3fd19c !53 fix dangling unpigz
From: @wangfengtu
Reviewed-by: @jianminw
Signed-off-by: @jianminw
2021-08-30 02:01:54 +00:00
WangFengTu
aa6647526e fix dangling unpigz
Signed-off-by: WangFengTu <wangfengtu@huawei.com>
2021-08-30 09:19:11 +08:00
openeuler-ci-bot
bf0cca49a9 !43 rollback if docker restart when doing BlkDiscard
From: @wangfengtu
Reviewed-by: @jing-rui,@caihaomin
Signed-off-by: @caihaomin
2021-04-02 14:03:37 +08:00
WangFengTu
82696f6e38 rollback if docker restart when doing BlkDiscard
Signed-off-by: WangFengTu <wangfengtu@huawei.com>
2021-04-01 16:25:19 +08:00
openeuler-ci-bot
41aa094cbe !38 docker:sync bugfix and fix CVE-2021-21284 2021-21285
From: @Vanient
Reviewed-by: @jing-rui,@caihaomin
Signed-off-by: @caihaomin
2021-03-19 11:18:09 +08:00
xiadanni
1bae2e5ea3 docker:sync bugfix and fix CVE-2021-21284 2021-21285
1.fix execCommands leak in health-check
2.check containerd pid before kill it
3.fix CVE-2021-21284
4.fix CVE-2021-21285

Change-Id: I2fe1dd40281f1786ecc63ff19d416b113710e611
Signed-off-by: xiadanni <xiadanni1@huawei.com>
2021-03-18 15:40:53 +08:00
openeuler-ci-bot
773302aeb3 !30 docker: remove go-md2man build require
From: @DCCooper
Reviewed-by: @jingxiaolu,@caihaomin
Signed-off-by: @caihaomin
2021-02-09 19:05:15 +08:00
DCCooper
0f204a4fd6 docker:remove go-md2man build require
Signed-off-by: DCCooper <1866858@gmail.com>
2021-02-09 18:51:03 +08:00
openeuler-ci-bot
791686bbfe !26 docker: sync bugfix
From: @jing-rui
Reviewed-by: @flyflyflypeng
Signed-off-by: @flyflyflypeng
2021-01-19 14:15:08 +08:00
jingrui
af6293703d docker: sync bugfix
Change-Id: I4dc92059d90415199fcd143d75cc68cfdb67c430
Signed-off-by: jingrui <jingrui@huawei.com>
2021-01-19 14:03:29 +08:00
openeuler-ci-bot
baf4fbe362 !20 support the riscv
From: @riscv-spare
Reviewed-by: @jing-rui
Signed-off-by: @jing-rui
2021-01-15 10:22:13 +08:00
yangyanchao
4780a2ff0e docker:components:add config files for riscv
Signe:-off-by: yangyanchao <yangyanchao6@huawei.com>
2021-01-04 10:45:04 +08:00
openeuler-ci-bot
a6a851b83b !18 docker: append the passed hostname to the endpoint when pull image with mirror
From: @abelvon
Reviewed-by: @jing-rui
Signed-off-by: @jing-rui
2020-12-21 16:57:07 +08:00
f00231050
27493a1bf2 docker: fix registry not try hostname issue
reason: when mirror is matched, only matched mirror endpoint is added to endpoint list, but the hostname itself is not in the list, which is not compatible with the case of docker.io, docker.io will be appended to the last of the endpoint list.
2020-12-21 09:46:50 +08:00
openeuler-ci-bot
63ea1458e1 !10 sync patches from internal
From: @zvier
Reviewed-by: @jing-rui,@jing-rui
Signed-off-by: @jing-rui,@jing-rui
2020-11-28 09:39:36 +08:00
liuzekun
294a810705 docker: sync patches from internal
Signed-off-by: liuzekun <liuzekun@huawei.com>
2020-11-28 09:37:25 +08:00
openeuler-ci-bot
47add6b492 !9 spec: modify spec name
From: @Vanient
Reviewed-by: @chenyanpanHW
Signed-off-by:
2020-11-09 17:39:51 +08:00