99 Commits

Author SHA1 Message Date
chenjiankun
39938b951e docker: Ignore SIGURG on Linux
fix #IA9T8K
2024-07-15 17:56:41 +08:00
openeuler-ci-bot
d677a7dd4b
!305 [sync] PR-302: backport: fix CVE-2024-32473
From: @openeuler-sync-bot 
Reviewed-by: @zhangsong234 
Signed-off-by: @zhangsong234
2024-05-08 13:12:13 +00:00
chenjiankun
5bee9b894d backport: fix CVE-2024-32473
fix #I9HX2H

(cherry picked from commit d958cc81c9d6b18ecd2568727ed778de043d5fbe)
2024-05-08 17:09:55 +08:00
openeuler-ci-bot
7e5d61c0a4
!298 [sync] PR-293: docker: fix CVE-2024-29018
From: @openeuler-sync-bot 
Reviewed-by: @zhangsong234 
Signed-off-by: @zhangsong234
2024-04-12 11:31:22 +00:00
chenjiankun
c71044c2d8 docker: fix CVE-2024-29018
fix #I9A82U

(cherry picked from commit 8ed18fcd14ecac175c68eebd55399615ee13e159)
2024-04-12 17:06:03 +08:00
openeuler-ci-bot
dd49042041
!286 backport: fix CVE-2024-24557
From: @jackchan8 
Reviewed-by: @zhangsong234 
Signed-off-by: @zhangsong234
2024-03-19 11:39:51 +00:00
chenjiankun
38ff1b1b5d backport: fix CVE-2024-24557
fix #I90KVB
2024-03-19 20:12:04 +08:00
openeuler-ci-bot
d5fd3cf310
!273 docker: sync patches from upstream
From: @flyflyflypeng 
Reviewed-by: @zhangsong234 
Signed-off-by: @zhangsong234
2024-01-08 02:01:19 +00:00
flyflyflypeng
6c4fcf023e docker: sync patches from upstream
Sync patches from upstream, including:
- b033961a82
- 2a8341f252
- cae76642b6
- f43f820a8c
- b1d05350ec
- 7a24e475b3
- f89fd3df7d
- 76e4260141
- b92585a470

Signed-off-by: flyflypeng <jiangpengfei9@huawei.com>
2023-12-28 21:57:15 +08:00
openeuler-ci-bot
d35ca2ac87
!271 docker:modify runc rpm package name from docker-runc to runc
From: @zhong-jiawei-1 
Reviewed-by: @zhangsong234 
Signed-off-by: @zhangsong234
2023-11-18 08:54:34 +00:00
zhongjiawei
15a8a28493 docker:modify runc rpm package name from docker-runc to runc 2023-11-17 11:21:10 +08:00
openeuler-ci-bot
b5f00e5985
!266 [sync] PR-262: docker:add delay after freeze
From: @openeuler-sync-bot 
Reviewed-by: @duguhaotian 
Signed-off-by: @duguhaotian
2023-10-12 12:33:37 +00:00
zhongjiawei
937754a249 docker:add delay after freeze
(cherry picked from commit 2e48b57e25c721804c926c73370c33d3e769bc94)
2023-10-12 17:19:29 +08:00
openeuler-ci-bot
b89d862077
!257 [sync] PR-255: docker: fix COPY --from should preserve ownership
From: @openeuler-sync-bot 
Reviewed-by: @duguhaotian 
Signed-off-by: @duguhaotian
2023-10-09 11:47:18 +00:00
Lu Jingxiao
0b26f41390 docker: fix COPY --from should preserve ownership
Fixes: #I86H6B

Signed-off-by: Lu Jingxiao <lujingxiao@huawei.com>
(cherry picked from commit 84fd54726a663f603700e4b565b065a62c268449)
2023-10-09 18:58:59 +08:00
openeuler-ci-bot
17fe0e8e71
!252 [sync] PR-249: 修复docker pull和restart dockerd并发操作,/var/lib/docker/devicemapper/mnt/目录资源残留问题
From: @openeuler-sync-bot 
Reviewed-by: @duguhaotian 
Signed-off-by: @duguhaotian
2023-08-29 02:51:53 +00:00
flyflyflypeng
1dceeb1c20 docker: remove useless mount point dir
fix #I7UQ2Y

Signed-off-by: flyflyflypeng <jiangpengfei9@huawei.com>
(cherry picked from commit e5190694496f1b5fccb7b70e982fdf3fadb6e3cb)
2023-08-28 15:14:00 +08:00
openeuler-ci-bot
b53043d34f
!240 docker: define a dummy hostname to use for local connections
From: @jackchan8 
Reviewed-by: @duguhaotian 
Signed-off-by: @duguhaotian
2023-08-03 02:26:30 +00:00
chenjiankun
cd7070aebb docker: define a dummy hostname to use for local connections
For local communications (npipe://, unix://), the hostname is not used,
but we need valid and meaningful hostname.

The current code used the client's `addr` as hostname in some cases, which
could contain the path for the unix-socket (`/var/run/docker.sock`), which
gets rejected by go1.20.6 and go1.19.11 because of a security fix for
[CVE-2023-29406 ][1], which was implemented in  https://go.dev/issue/60374.

Prior versions go Go would clean the host header, and strip slashes in the
process, but go1.20.6 and go1.19.11 no longer do, and reject the host
header.

This patch introduces a `DummyHost` const, and uses this dummy host for
cases where we don't need an actual hostname.
2023-08-02 16:30:20 +08:00
openeuler-ci-bot
1b1985ecc6
!234 [sync] PR-233: docker: sync patches from master
From: @openeuler-sync-bot 
Reviewed-by: @duguhaotian 
Signed-off-by: @duguhaotian
2023-07-13 06:41:08 +00:00
chenjiankun
f69d70d2e2 docker: sync patches from master
(cherry picked from commit faa68fcbfa7bc543cdf70f004b82eed8431c7c77)
2023-07-13 11:26:08 +08:00
openeuler-ci-bot
1d0f48e769
!229 docker:remove invalid libcgroup dependencies
From: @zhong-jiawei-1 
Reviewed-by: @zhangsong234, @duguhaotian 
Signed-off-by: @duguhaotian
2023-07-12 04:00:06 +00:00
zhongjiawei
1beb1da2de docker:remove invalid libcgroup dependencies 2023-07-12 11:39:01 +08:00
openeuler-ci-bot
d0e04590e6
!217 docker:thinpool full because docker daemon restart when docker pull
From: @zhong-jiawei-1 
Reviewed-by: @zhangsong234, @duguhaotian 
Signed-off-by: @duguhaotian
2023-06-09 04:01:58 +00:00
zhongjiawei
a4edd1edf4 docker:thinpool full because docker daemon restart when docker pull 2023-06-09 11:06:25 +08:00
openeuler-ci-bot
f366ec1425
!207 [sync] PR-205: docker:fix CVE-2023-28840 CVE-2023-28841 CVE-2023-28842
From: @openeuler-sync-bot 
Reviewed-by: @zhangsong234, @duguhaotian 
Signed-off-by: @duguhaotian
2023-04-06 12:31:54 +00:00
zhongjiawei
7a60984014 docker:fix CVE-2023-28840 CVE-2023-28841 CVE-2023-28842
(cherry picked from commit f021f5c385bf7dd11a892a128888f5998f754b24)
2023-04-06 20:00:21 +08:00
openeuler-ci-bot
2aa7dd8759
!200 [sync] PR-198: docker:backport upstream patches
From: @openeuler-sync-bot 
Reviewed-by: @zhangsong234, @duguhaotian 
Signed-off-by: @duguhaotian
2023-03-30 06:10:01 +00:00
zhongjiawei
cf3b5bbff6 docker:sync some patches
(cherry picked from commit 5004ebff5b6cd0eeff1a8edaf8f59dea0f348021)
2023-03-30 10:02:42 +08:00
openeuler-ci-bot
d6c7ceaf25
!189 [sync] PR-186: docker:try http for docker manifest insecure
From: @openeuler-sync-bot 
Reviewed-by: @zhangsong234, @duguhaotian 
Signed-off-by: @duguhaotian
2023-03-16 07:12:37 +00:00
zhongjiawei
9c2234772a docker: try http for docker manifest insecure
(cherry picked from commit ff3bcc697b172784a8dacd637576cd932801399a)
2023-03-16 14:27:21 +08:00
openeuler-ci-bot
e3c5b359c0
!182 [sync] PR-181: docker: fix container missing after restarting dockerd twice
From: @openeuler-sync-bot 
Reviewed-by: @duguhaotian 
Signed-off-by: @duguhaotian
2023-03-15 02:51:07 +00:00
JackChan8
2f5e04a8aa docker: fix container missing after restarting dockerd twice
fix #I6MJ4X

(cherry picked from commit 5ecf0ca3e74f004180222c8ec9ea3e240bf96d15)
2023-03-15 10:03:30 +08:00
openeuler-ci-bot
4eb3292100
!177 [sync] PR-176: docker stats: fix 'panic: close of closed channel'
From: @openeuler-sync-bot 
Reviewed-by: @duguhaotian 
Signed-off-by: @duguhaotian
2023-03-10 09:24:25 +00:00
Song Zhang
725d53a12b docker stats: fix 'panic: close of closed channel'
bugfix: https://gitee.com/src-openeuler/docker/issues/I6LNNW?from=project-issue

Signed-off-by: Song Zhang <zhangsong34@huawei.com>
(cherry picked from commit 8ed0a65d0b666a1f05e3b9c2e0f906859a1c4acb)
2023-03-10 16:39:45 +08:00
openeuler-ci-bot
42eaf1976e
!172 [sync] PR-170: docker: set freezer.state to Thawed to increase freeze chances
From: @openeuler-sync-bot 
Reviewed-by: @duguhaotian 
Signed-off-by: @duguhaotian
2023-02-17 09:38:46 +00:00
chenjiankun
8eacb70a4e docker: set freezer.state to Thawed to increase freeze chances
docker pause/unpause with parallel docker exec can lead to freezing
state, set freezer.state to Thawed to increase freeze chances

(cherry picked from commit b78a50c378d2ccef2254cf694991f4d52eec1fe9)
2023-02-17 16:52:06 +08:00
openeuler-ci-bot
6cac8f8bc6
!164 [sync] PR-160: docker:do not stop health check before sending signal
From: @openeuler-sync-bot 
Reviewed-by: @duguhaotian 
Signed-off-by: @duguhaotian
2022-12-01 12:29:18 +00:00
zhongjiawei
748628a918 docker:do not stop health check before sending signal
(cherry picked from commit 365eb0b1969d296e7e6894af9f913b3e24f81c21)
2022-12-01 16:28:49 +08:00
openeuler-ci-bot
4e8201a56d
!157 [sync] PR-154: docker: using VERSION-vendor to record version
From: @openeuler-sync-bot 
Reviewed-by: @duguhaotian 
Signed-off-by: @duguhaotian
2022-11-24 07:34:25 +00:00
chenjiankun
ec922e1fed docker: using VERSION-vendor to record version
(cherry picked from commit 3cc77fa02d5a0efb77b71d4f506b44f209329b1d)
2022-11-24 14:31:40 +08:00
openeuler-ci-bot
33724df909
!151 [sync] PR-148: docker: fix dockerd core when release network
From: @openeuler-sync-bot 
Reviewed-by: @duguhaotian 
Signed-off-by: @duguhaotian
2022-11-23 02:36:53 +00:00
chenjiankun
025a686650 docker: fix dockerd core when release network
fix #I627ON

(cherry picked from commit 07ce32f65f1a3d9d812fe0fbb0276353472c035d)
2022-11-22 20:40:56 +08:00
openeuler-ci-bot
b3ee12551d
!145 [sync] PR-142: docker: cleanup netns file when stop docker daemon
From: @openeuler-sync-bot 
Reviewed-by: @duguhaotian 
Signed-off-by: @duguhaotian
2022-11-22 12:37:25 +00:00
chenjiankun
6c95d358c2 docker: cleanup netns file when stop docker daemon
fix #I5W2XY

(cherry picked from commit 6a3861c8c1449da33e37ccbd0f8a9327394dff6b)
2022-11-22 16:36:27 +08:00
openeuler-ci-bot
dc16083004
!141 [sync] PR-139: docker: fix compile problem
From: @openeuler-sync-bot 
Reviewed-by: @duguhaotian 
Signed-off-by: @duguhaotian
2022-10-19 02:29:08 +00:00
chenjiankun
3adcb38631 docker: fix compile problem
(cherry picked from commit 0044b4982fe164af275802e9901040e9c588a2b2)
2022-10-19 09:56:49 +08:00
openeuler-ci-bot
5106a479a6
!135 [sync] PR-131: docker: add epoch for easy upgrade
From: @openeuler-sync-bot 
Reviewed-by: @duguhaotian 
Signed-off-by: @duguhaotian
2022-09-21 06:16:07 +00:00
chenjiankun
ffbd659b2d docker: add epoch for easy upgrade
(cherry picked from commit 7e4ff1bd426180bbdb05f55a57db9ec03034a257)
2022-09-21 11:29:00 +08:00
openeuler-ci-bot
37e7f70f10
!129 [sync] PR-125: docker: ensure layer digest folder removed if ls.driver.Remove fails
From: @openeuler-sync-bot 
Reviewed-by: @duguhaotian 
Signed-off-by: @duguhaotian
2022-09-16 06:51:20 +00:00