aboutsummaryrefslogtreecommitdiff
path: root/utils/docker-ce
Commit message (Collapse)AuthorAge
* docker-ce: docker-ce -> dockerdGerard Ryan2020-12-15
| | | | | | | | The source is being deprecated and split into the CLI and engine/daemon repositories, So `docker-ce` will now be the `dockerd` and a separate package will be made for the `docker` CLI. Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
* docker-ce: Added firewall.extra_iptables_argsGerard Ryan2020-11-30
| | | | | | | | This is a convenience argument to primarily facilitate outbound wan connections from a docker container. However, all docker containers can't bidirectionally communicate with the internet by default. Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
* docker-ce: Normalized variable dereference styleGerard Ryan2020-11-30
| | | | Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
* docker-ce: update PKG_RELEASE versionFlorian Eckert2020-11-19
| | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* docker-ce: do not delete generated iptables by docker-ceFlorian Eckert2020-11-19
| | | | | | | | | Deleting rules that docker has created is error-prone, because with every update docker we have to check if anything has changed. Cleaning up the firewall rules is part of the docker and should and must be cleaned up and handeled by them when the service is terminated. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* docker-ce: add device option to expand interface blockingFlorian Eckert2020-11-19
| | | | | | | | | | | | | If docker-ce handles the firewall and fw3 is not envolved because the rules get not proceed, then not only docker0 should be handled but also other interfaces and therefore other docker networks. This commit extends the handling and introduces a new uci option `device` in the docker config firewall section. This can be used to specify which device is allowed to access the container. Up to now only docker0 is covert. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* docker-ce: remove not applicable uciupdateFlorian Eckert2020-11-19
| | | | | | | As the protocol is set to none, this makes no sense here, as it cannot be controlled and thus processed by the netifd. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* docker-ce: set proto for docker bridge device to noneFlorian Eckert2020-11-19
| | | | | | | Set proto from `static` to `none`. This makes it clear that this interface is not handled by the netifd. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* docker-ce: make docker-ce firewall handling configurableFlorian Eckert2020-11-19
| | | | | | | | | | | | | | | | | | | Openwrt has a own firewall service called fw3, that supports firewall zones. Docker can bypass the handling of the zone rules in openwrt via custom tables. These are "always" processed before the openwrt firewall. Which is prone to errors! Since not everyone is aware that the firewall of openwrt will not be passed. And this is a security problem because a mapped port is visible on all interfaces and so also on the WAN side. If the firewall handling in docker is switched off, then the port in fw3 must be explicitly released and it cannot happen that the port is accidentally exported to the outside world via the interfaces on the WAN zone. So all rules for the containers should and so must be made in fw3. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* docker-ce: add arguments call to uciadd and ucidelFlorian Eckert2020-11-19
| | | | | | | | Up to now only the docker0 interface and bridge is created by default. In order to create other interfaces and to integrate them into the openwrt these functions can now be called with arguments. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* docker-ce: blocked_interfaces releaseGerard Ryan2020-11-11
| | | | Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
* docker-ce: Added blocked_interfaces config optionGerard Ryan2020-11-11
| | | | | | | | * blocked_interfaces blocks all packets to docker0 from the given interface. This is needed because all the iptables commands dockerd adds operate before any of the fw3 generated rules. Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
* docker-ce: Refactored init scriptGerard Ryan2020-11-11
| | | | | | | * Changed iptables commands to use long options * Added `uci_quiet` in missed instances Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
* docker-ce: Added mkdir for alt_config_fileGerard Ryan2020-11-11
| | | | Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
* docker-ce: Made some shellcheck recommendationsGerard Ryan2020-11-11
| | | | Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
* docker-ce: use new extra_command function definitionFlorian Eckert2020-11-04
| | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* golang: Share build cache across package buildsJeffery To2020-10-06
| | | | | | | This also adds a config option GOLANG_BUILD_CACHE_DIR to customize the location of the build cache directory. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* docker-ce: Updated to 19.03.13Gerard Ryan2020-09-24
| | | | | | * Added optional kernel option to better enable cgroup networking Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
* docker-ce: update PKG_RELEASEFlorian Eckert2020-08-11
| | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* docker-ce: add bridge device to network uci backendFlorian Eckert2020-08-11
| | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* docker-ce: fix hosts type to listFlorian Eckert2020-08-11
| | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* docker-ce: add postinst and prerm script for service start and stopFlorian Eckert2020-08-11
| | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* docker-ce: Enabled cgroups v1 by defaultGerard Ryan2020-08-10
| | | | Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
* docker-ce: fix bip default config valueFlorian Eckert2020-07-31
| | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* docker-ce: add uci config on bootFlorian Eckert2020-07-29
| | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* docker-ce: fix typo for registry_mirrors uci optionFlorian Eckert2020-07-29
| | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* docker-ce: add bip uci to default configFlorian Eckert2020-07-29
| | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* docker-ce: add hosts optionFlorian Eckert2020-07-29
| | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* docker-ce: add default bridge to openwrt uci backendFlorian Eckert2020-07-29
| | | | | | | | | | | | | This commit adds two additional init.d targets: * uciadd: This command adds the default docker0 bridge to the network configuration. Additional, a new firewall zone docker is created * ucidel This command removes default docker0 bridge from the network configuration. The new docker firewall zone gets also deleted. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* docker-ce: add reload handlingFlorian Eckert2020-07-21
| | | | | | | If the uci configuration is changed send dockerd a SIGHUP to reload the generated daemon.json file with the new configuration. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* docker-ce: update PKG_RELEASEFlorian Eckert2020-07-07
| | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* docker-ce: cleanup firewall rules on service stopFlorian Eckert2020-07-07
| | | | | | | | Until now, the firewall rules from the dockerd were preserved after the service was stopped. This is not nice. With this change the firewall rules created by dockerd will be deleted when the dockerd service is stopped. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* docker-ce: remove obsulte docker default configuration fileFlorian Eckert2020-07-07
| | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* docker-ce: add uci support for dockerdFlorian Eckert2020-07-07
| | | | Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* docker-ce: Updated to 19.03.12Javier Marcet2020-07-02
| | | | Signed-off-by: Javier Marcet <javier@marcet.info>
* docker-ce: Updated to 19.03.11Gerard Ryan2020-06-20
| | | | | | * Automated dependency version checking Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
* docker-ce: Simplified config layout for menuconfigGerard Ryan2020-06-20
| | | | | | cgroupfs-mount: Replaced dependency with cgroup config option Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
* docker-ce: Updated to 19.03.9Gerard Ryan2020-05-26
| | | | Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
* golang: Rename GoPackage/Environment to GO_PKG_VARSJeffery To2020-05-13
| | | | | | | | | | The variable is a list of shell variables; the new name is more in-line with other parts the build system (CONFIGURE_VARS, MAKE_VARS, etc.). GoPackage/Environment is kept (for now) in case other feeds are using it. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* docker-ce: fix docker info warningFlorian Eckert2020-05-05
| | | | | | | | | | | If we execute `docker info` we get the following warning: WARNING: bridge-nf-call-iptables is disabled WARNING: bridge-nf-call-ip6tables is disabled To fix this enable this in sysctl if docker is installed. Signed-off-by: Florian Eckert <fe@dev.tdt.de>
* docker-ce: Updated to 19.03.8Gerard Ryan2020-03-14
| | | | Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
* golang: Reorganize GoPackage/Environment and Makefile variablesJeffery To2020-02-05
| | | | | | | | | | | | | | | * Move more environment variables into GoPackage/Environment * Split GoPackage/Environment into target and build sections * Do not set GOROOT_FINAL for Go packages (setting it should only affect the Go compiler and not Go packages) * Set CGO_LDFLAGS to $(TARGET_LDFLAGS) * Move GO_TARGET_* variables from golang-values.mk, and GO_VERSION_* variables from golang-version.mk, into golang/Makefile This also updates runc, containerd, and docker-ce to reflect the changes in GoPackage/Environment. Signed-off-by: Jeffery To <jeffery.to@gmail.com>
* docker-ce: bump to version 19.03.5Johann Neuhauser2019-11-16
| | | | Signed-off-by: Johann Neuhauser <johann@it-neuhauser.de>
* docker-ce: fix cross compilation and enable build for aarch64 and armJohann Neuhauser2019-11-06
| | | | | | | Compile-tested on: bcm2710, imx6 Runtime-tested on: bcm2710, imx6 Signed-off-by: Johann Neuhauser <johann@it-neuhauser.de>
* docker-ce: Updated to 19.03.4Gerard Ryan2019-10-24
| | | | Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
* docker-ce: Updated to 19.03.3Gerard Ryan2019-10-21
| | | | Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
* docker-ce: Updated to 19.03.2Gerard Ryan2019-10-06
| | | | | | | | * Added warning logging * Added missing default kmod * Added missing kernel feature for IO scheduling Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
* cgroups-mount,docker-ce,lxc: rework kernel feature dependencyYousong Zhou2019-09-12
| | | | | | | | | | | | | Fix that KERNEL_CGROUPS is enabled (selected) automatically along with cgroups-mount Replace "if PACKAGE_docker-ce" with a menu to avoid circular denpendency issue involving PACKAGE_docker-ce, PACKAGE_cgroups-mount and KERNEL_CGRUOPS docker-ce, lxc: replace KERNEL_LXC_MISC with more specific options Signed-off-by: Yousong Zhou <yszhou4tech@gmail.com>
* docker-ce: Expand nofile from 1024(soft) 4096(hard) as large as possible ↵Student4142019-08-30
| | | | | | | | | when using procd. When we run docker image and export too many ports, dockerd will output some errors like "too many open files", it is caused by max-file limitation. Now, we start dockerd using procd, just add a statement to fix this problem. Signed-off-by: Fuying Wang <805447391@qq.com>
* docker-ce: Updated to 19.03.1Gerard Ryan2019-08-10
| | | | Signed-off-by: Gerard Ryan <G.M0N3Y.2503@gmail.com>
Powered by cgit, Themed by Ted Yin.