mirror of
				https://github.com/moby/moby.git
				synced 2022-11-09 12:21:53 -05:00 
			
		
		
		
	Merge pull request #21003 from riyazdf/hardware-signing-ga
Move hardware signing out of experimental
This commit is contained in:
		
						commit
						e6d3a9849c
					
				
					 10 changed files with 11 additions and 13 deletions
				
			
		| 
						 | 
					@ -205,7 +205,7 @@ RUN useradd --create-home --gid docker unprivilegeduser
 | 
				
			||||||
 | 
					
 | 
				
			||||||
VOLUME /var/lib/docker
 | 
					VOLUME /var/lib/docker
 | 
				
			||||||
WORKDIR /go/src/github.com/docker/docker
 | 
					WORKDIR /go/src/github.com/docker/docker
 | 
				
			||||||
ENV DOCKER_BUILDTAGS apparmor seccomp selinux
 | 
					ENV DOCKER_BUILDTAGS apparmor pkcs11 seccomp selinux
 | 
				
			||||||
 | 
					
 | 
				
			||||||
# Let us use a .bashrc file
 | 
					# Let us use a .bashrc file
 | 
				
			||||||
RUN ln -sfv $PWD/.bashrc ~/.bashrc
 | 
					RUN ln -sfv $PWD/.bashrc ~/.bashrc
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -151,7 +151,7 @@ RUN useradd --create-home --gid docker unprivilegeduser
 | 
				
			||||||
 | 
					
 | 
				
			||||||
VOLUME /var/lib/docker
 | 
					VOLUME /var/lib/docker
 | 
				
			||||||
WORKDIR /go/src/github.com/docker/docker
 | 
					WORKDIR /go/src/github.com/docker/docker
 | 
				
			||||||
ENV DOCKER_BUILDTAGS apparmor seccomp selinux
 | 
					ENV DOCKER_BUILDTAGS apparmor pkcs11 seccomp selinux
 | 
				
			||||||
 | 
					
 | 
				
			||||||
# Let us use a .bashrc file
 | 
					# Let us use a .bashrc file
 | 
				
			||||||
RUN ln -sfv $PWD/.bashrc ~/.bashrc
 | 
					RUN ln -sfv $PWD/.bashrc ~/.bashrc
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -162,7 +162,7 @@ RUN useradd --create-home --gid docker unprivilegeduser
 | 
				
			||||||
 | 
					
 | 
				
			||||||
VOLUME /var/lib/docker
 | 
					VOLUME /var/lib/docker
 | 
				
			||||||
WORKDIR /go/src/github.com/docker/docker
 | 
					WORKDIR /go/src/github.com/docker/docker
 | 
				
			||||||
ENV DOCKER_BUILDTAGS apparmor seccomp selinux
 | 
					ENV DOCKER_BUILDTAGS apparmor pkcs11 seccomp selinux
 | 
				
			||||||
 | 
					
 | 
				
			||||||
# Let us use a .bashrc file
 | 
					# Let us use a .bashrc file
 | 
				
			||||||
RUN ln -sfv $PWD/.bashrc ~/.bashrc
 | 
					RUN ln -sfv $PWD/.bashrc ~/.bashrc
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -154,7 +154,7 @@ RUN useradd --create-home --gid docker unprivilegeduser
 | 
				
			||||||
 | 
					
 | 
				
			||||||
VOLUME /var/lib/docker
 | 
					VOLUME /var/lib/docker
 | 
				
			||||||
WORKDIR /go/src/github.com/docker/docker
 | 
					WORKDIR /go/src/github.com/docker/docker
 | 
				
			||||||
ENV DOCKER_BUILDTAGS apparmor selinux
 | 
					ENV DOCKER_BUILDTAGS apparmor pkcs11 selinux
 | 
				
			||||||
 | 
					
 | 
				
			||||||
# Let us use a .bashrc file
 | 
					# Let us use a .bashrc file
 | 
				
			||||||
RUN ln -sfv $PWD/.bashrc ~/.bashrc
 | 
					RUN ln -sfv $PWD/.bashrc ~/.bashrc
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -133,7 +133,7 @@ RUN useradd --create-home --gid docker unprivilegeduser
 | 
				
			||||||
 | 
					
 | 
				
			||||||
VOLUME /var/lib/docker
 | 
					VOLUME /var/lib/docker
 | 
				
			||||||
WORKDIR /go/src/github.com/docker/docker
 | 
					WORKDIR /go/src/github.com/docker/docker
 | 
				
			||||||
ENV DOCKER_BUILDTAGS apparmor selinux
 | 
					ENV DOCKER_BUILDTAGS apparmor pkcs11 selinux
 | 
				
			||||||
 | 
					
 | 
				
			||||||
# Let us use a .bashrc file
 | 
					# Let us use a .bashrc file
 | 
				
			||||||
RUN ln -sfv $PWD/.bashrc ~/.bashrc
 | 
					RUN ln -sfv $PWD/.bashrc ~/.bashrc
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -113,7 +113,7 @@ fi
 | 
				
			||||||
if [ "$DOCKER_EXPERIMENTAL" ]; then
 | 
					if [ "$DOCKER_EXPERIMENTAL" ]; then
 | 
				
			||||||
	echo >&2 '# WARNING! DOCKER_EXPERIMENTAL is set: building experimental features'
 | 
						echo >&2 '# WARNING! DOCKER_EXPERIMENTAL is set: building experimental features'
 | 
				
			||||||
	echo >&2
 | 
						echo >&2
 | 
				
			||||||
	DOCKER_BUILDTAGS+=" experimental pkcs11"
 | 
						DOCKER_BUILDTAGS+=" experimental"
 | 
				
			||||||
fi
 | 
					fi
 | 
				
			||||||
 | 
					
 | 
				
			||||||
if [ -z "$DOCKER_CLIENTONLY" ]; then
 | 
					if [ -z "$DOCKER_CLIENTONLY" ]; then
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -5,8 +5,8 @@ VERSION = $(shell cat VERSION)
 | 
				
			||||||
override_dh_gencontrol:
 | 
					override_dh_gencontrol:
 | 
				
			||||||
	# if we're on Ubuntu, we need to Recommends: apparmor
 | 
						# if we're on Ubuntu, we need to Recommends: apparmor
 | 
				
			||||||
	echo 'apparmor:Recommends=$(shell dpkg-vendor --is Ubuntu && echo apparmor)' >> debian/docker-engine.substvars
 | 
						echo 'apparmor:Recommends=$(shell dpkg-vendor --is Ubuntu && echo apparmor)' >> debian/docker-engine.substvars
 | 
				
			||||||
	# if we are building experimental we recommend yubico-piv-tool
 | 
						# recommend yubico-piv-tool since we include pkcs11 by default
 | 
				
			||||||
	echo 'yubico:Recommends=$(shell [ "$DOCKER_EXPERIMENTAL" ] && echo "yubico-piv-tool (>= 1.1.0~)")' >> debian/docker-engine.substvars
 | 
						echo 'yubico:Recommends="yubico-piv-tool (>= 1.1.0~)"' >> debian/docker-engine.substvars
 | 
				
			||||||
	dh_gencontrol
 | 
						dh_gencontrol
 | 
				
			||||||
 | 
					
 | 
				
			||||||
override_dh_auto_build:
 | 
					override_dh_auto_build:
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -60,12 +60,10 @@ Requires: device-mapper >= 1.02.90-2
 | 
				
			||||||
%global with_selinux 1
 | 
					%global with_selinux 1
 | 
				
			||||||
%endif
 | 
					%endif
 | 
				
			||||||
 | 
					
 | 
				
			||||||
%if 0%{?_experimental}
 | 
					# yubico-piv-tool recommends
 | 
				
			||||||
# yubico-piv-tool conditional
 | 
					 | 
				
			||||||
%if 0%{?fedora} >= 20 || 0%{?centos} >= 7 || 0%{?rhel} >= 7
 | 
					%if 0%{?fedora} >= 20 || 0%{?centos} >= 7 || 0%{?rhel} >= 7
 | 
				
			||||||
Requires: yubico-piv-tool >= 1.1.0
 | 
					Requires: yubico-piv-tool >= 1.1.0
 | 
				
			||||||
%endif
 | 
					%endif
 | 
				
			||||||
%endif
 | 
					 | 
				
			||||||
 | 
					
 | 
				
			||||||
# start if with_selinux
 | 
					# start if with_selinux
 | 
				
			||||||
%if 0%{?with_selinux}
 | 
					%if 0%{?with_selinux}
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -36,7 +36,7 @@ if [ "$(go env GOOS)" == "linux" ] ; then
 | 
				
			||||||
	esac
 | 
						esac
 | 
				
			||||||
fi
 | 
					fi
 | 
				
			||||||
 | 
					
 | 
				
			||||||
if [ "$IAMSTATIC" == "true" ] && [ "$(go env GOHOSTOS)" == "linux" ] && [ "$DOCKER_EXPERIMENTAL" ]; then
 | 
					if [ "$IAMSTATIC" == "true" ] && [ "$(go env GOHOSTOS)" == "linux" ]; then
 | 
				
			||||||
	if  [ "${GOOS}/${GOARCH}" == "darwin/amd64" ]; then
 | 
						if  [ "${GOOS}/${GOARCH}" == "darwin/amd64" ]; then
 | 
				
			||||||
		export CGO_ENABLED=1
 | 
							export CGO_ENABLED=1
 | 
				
			||||||
		export CC=o64-clang
 | 
							export CC=o64-clang
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
| 
						 | 
					@ -60,7 +60,7 @@ To build the Docker daemon, you will additionally need:
 | 
				
			||||||
* btrfs-progs version 3.16.1 or later (unless using an older version is
 | 
					* btrfs-progs version 3.16.1 or later (unless using an older version is
 | 
				
			||||||
  absolutely necessary, in which case 3.8 is the minimum)
 | 
					  absolutely necessary, in which case 3.8 is the minimum)
 | 
				
			||||||
* libseccomp version 2.2.1 or later (for build tag seccomp)
 | 
					* libseccomp version 2.2.1 or later (for build tag seccomp)
 | 
				
			||||||
* yubico-piv-tool version 1.1.0 or later (for experimental)
 | 
					* yubico-piv-tool version 1.1.0 or later
 | 
				
			||||||
 | 
					
 | 
				
			||||||
Be sure to also check out Docker's Dockerfile for the most up-to-date list of
 | 
					Be sure to also check out Docker's Dockerfile for the most up-to-date list of
 | 
				
			||||||
these build-time dependencies.
 | 
					these build-time dependencies.
 | 
				
			||||||
| 
						 | 
					
 | 
				
			||||||
		Loading…
	
	Add table
		Add a link
		
	
		Reference in a new issue