moby--moby/hack/make
Justin Cormack 93bbc76ee5 Add a test that the default seccomp profile allows execution of 32 bit binaries
While testing #24510 I noticed that 32 bit syscalls were incorrectly being
blocked and we did not have a test for this, so adding one.

This is only tested on amd64 as it is the only architecture that
reliably supports 32 bit code execution, others only do sometimes.

There is no 32 bit libc in the buildpack-deps so we cannot build
32 bit C code easily so use the simplest assembly program which
just calls the exit syscall.

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
2016-07-27 18:42:34 +01:00
..
.build-deb Uncomment the TasksMax val later in the deb build 2016-07-12 16:30:31 -05:00
.build-rpm Remove docker.socket from rpm based systems 2016-07-19 09:31:43 -07:00
.resources-windows Windows: Support running dockerd as a service 2016-04-26 14:04:47 -07:00
.binary Build two binaries client and daemon. 2016-04-22 11:26:01 -04:00
.binary-setup Make the docker proxy a standalone binary not a re-exec 2016-07-07 12:53:39 +01:00
.detect-daemon-osarch Add explicit code to handle older versions of Docker, too 2016-03-14 09:30:45 -07:00
.ensure-emptyfs Move scripts back to hack/, leave docs in project/ 2015-03-13 14:04:08 -06:00
.ensure-frozen-images Adjust "hack/make/.detect-daemon-osarch" to be the source of truth for "platform detection" 2016-03-10 20:07:21 -08:00
.ensure-frozen-images-windows Windows: Ensure frozen cope with prefix 2016-06-23 16:39:16 -07:00
.ensure-httpserver Improve remote integration-cli tests 2016-02-11 07:31:49 -08:00
.ensure-nnp-test Add support for NoNewPrivileges in docker 2016-03-07 09:47:02 -08:00
.ensure-syscall-test Add a test that the default seccomp profile allows execution of 32 bit binaries 2016-07-27 18:42:34 +01:00
.go-autogen Windows: Support running dockerd as a service 2016-04-26 14:04:47 -07:00
.integration-daemon-setup Add support for NoNewPrivileges in docker 2016-03-07 09:47:02 -08:00
.integration-daemon-start Fixing the PATH in .integration-daemon-start to find dynamic docker binary 2016-04-25 11:18:34 -04:00
.integration-daemon-stop Windows CI: No integration daemon stop 2016-01-05 10:52:59 -08:00
.validate .: remove trailing white spaces 2015-03-25 13:38:17 -04:00
README.md Move scripts back to hack/, leave docs in project/ 2015-03-13 14:04:08 -06:00
binary Add `make install` task 2016-06-03 12:08:33 +02:00
binary-client Add `make install` task 2016-06-03 12:08:33 +02:00
binary-daemon Make the docker proxy a standalone binary not a re-exec 2016-07-07 12:53:39 +01:00
build-deb Require manpages for packages. 2016-07-22 16:34:46 -04:00
build-rpm Require manpages for packages. 2016-07-22 16:34:46 -04:00
clean-apt-repo add scripts to clean experimental rpms and debs 2016-01-27 15:54:53 -08:00
clean-yum-repo add scripts to clean experimental rpms and debs 2016-01-27 15:54:53 -08:00
cover Make "DEST" a make.sh construct instead of ad-hoc 2015-05-30 11:16:43 -07:00
cross Add `make install` task 2016-06-03 12:08:33 +02:00
dynbinary Fix spelling in comments, strings and documentation 2016-07-03 20:58:11 +03:00
dynbinary-client Make dockerd debuggable 2016-04-26 09:35:22 -07:00
dynbinary-daemon docker-proxy: Force external linking to add BuildID information to please rpm 2016-07-12 19:59:48 -07:00
dyngccgo *: purge dockerinit from source code 2016-01-26 23:47:02 +11:00
gccgo Make the docker proxy a standalone binary not a re-exec 2016-07-07 12:53:39 +01:00
generate-index-listing Fix index generator for apt/yum packages 2016-02-16 21:54:07 -05:00
install-binary Add `make install` task 2016-06-03 12:08:33 +02:00
install-binary-client Add `make install` task 2016-06-03 12:08:33 +02:00
install-binary-daemon Make the docker proxy a standalone binary not a re-exec 2016-07-07 12:53:39 +01:00
install-script Create a bundle for the install script to support other domains 2016-01-21 20:42:20 -08:00
release-deb Fix the value of the Components value in apt {In,}Release files 2016-06-21 12:01:41 -07:00
release-rpm Fix release scripts 2016-03-25 11:55:26 -04:00
run Add target for `make run` 2016-07-08 16:25:21 -04:00
sign-repos Also generate "InRelease" files for newer APT clients 2016-03-31 17:39:50 -07:00
test-deb-install Update build-deb to make correct use of DOCKER_BUILD_PKGS 2016-05-02 11:22:01 -07:00
test-docker-py docker-py: upgrade and fix test script 2015-10-28 12:56:50 -04:00
test-install-script add test script for built debs 2015-10-19 16:15:27 -07:00
test-integration-cli Prevent CI from getting stuck if shims are left alive 2016-06-28 10:05:05 -07:00
test-old-apt-repo add script to test the old apt-repo 2015-11-04 16:01:19 -08:00
test-unit Dont run man generation as part of test-unit. 2016-07-19 12:00:35 -04:00
tgz Make the docker proxy a standalone binary not a re-exec 2016-07-07 12:53:39 +01:00
ubuntu Make manpages in a conatiner. 2016-07-22 16:32:51 -04:00
update-apt-repo fix common misspell 2016-02-11 15:49:36 -08:00
validate-dco hack/make/test-integration-cli: introduce MAKEDIR variable 2015-04-15 10:44:14 +02:00
validate-default-seccomp add validation for generating default secccomp profile 2016-02-08 13:04:52 -08:00
validate-gofmt hack/make/test-integration-cli: introduce MAKEDIR variable 2015-04-15 10:44:14 +02:00
validate-lint Fix few comments in validate scripts 2015-10-10 11:21:04 +02:00
validate-pkg Add new "validate-pkg" bundlescript 2015-06-12 12:28:23 -07:00
validate-test Fix few comments in validate scripts 2015-10-10 11:21:04 +02:00
validate-toml Fix few comments in validate scripts 2015-10-10 11:21:04 +02:00
validate-vendor Add a validate-vendor script 2016-01-07 19:57:50 +01:00
validate-vet Fix few comments in validate scripts 2015-10-10 11:21:04 +02:00
win Windows libnetwork integration 2016-03-09 20:33:21 -08:00

README.md

This directory holds scripts called by make.sh in the parent directory.

Each script is named after the bundle it creates. They should not be called directly - instead, pass it as argument to make.sh, for example:

./hack/make.sh test
./hack/make.sh binary ubuntu

# Or to run all bundles:
./hack/make.sh

To add a bundle:

  • Create a shell-compatible file here
  • Add it to $DEFAULT_BUNDLES in make.sh