kotovalexarian-likes-github/moby--moby
1
0
Fork 0
mirror of https://github.com/moby/moby.git synced 2022-11-09 12:21:53 -05:00
Code Releases Activity
moby--moby/contrib/builder/deb
History
Eric Windisch 80d99236c1 Move AppArmor policy to contrib & deb packaging 
The automatic installation of AppArmor policies prevents the
management of custom, site-specific apparmor policies for the
default container profile. Furthermore, this change will allow
a future policy for the engine itself to be written without demanding
the engine be able to arbitrarily create and manage AppArmor policies.

- Add deb package suggests for apparmor.
- Ubuntu postinst use aa-status & fix policy path
- Add the policies to the debian packages.
- Add apparmor tests for writing proc files
Additional restrictions against modifying files in proc
are enforced by AppArmor. Ensure that AppArmor is preventing
access to these files, not simply Docker's configuration of proc.
- Remove /proc/k?mem from AA policy
The path to mem and kmem are in /dev, not /proc
and cannot be restricted successfully through AppArmor.
The device cgroup will need to be sufficient here.
- Load contrib/apparmor during integration tests
Note that this is somewhat dirty because we
cannot restore the host to its original configuration.
However, it should be noted that prior to this patch
series, the Docker daemon itself was loading apparmor
policy from within the tests, so this is no dirtier or
uglier than the status-quo.

Signed-off-by: Eric Windisch <eric@windisch.us>
2015-07-21 11:05:53 -04:00
..
debian-jessie Switch verbosity in builder/*/generate.sh so that we get download progress for Go instead of the name of every single file extracted 2015-05-07 14:15:35 -06:00
debian-stretch Switch verbosity in builder/*/generate.sh so that we get download progress for Go instead of the name of every single file extracted 2015-05-07 14:15:35 -06:00
debian-wheezy Switch verbosity in builder/*/generate.sh so that we get download progress for Go instead of the name of every single file extracted 2015-05-07 14:15:35 -06:00
ubuntu-debootstrap-precise Finally add precise/12.04 as a build-deb target 2015-05-29 12:55:58 -07:00
ubuntu-debootstrap-trusty Switch verbosity in builder/*/generate.sh so that we get download progress for Go instead of the name of every single file extracted 2015-05-07 14:15:35 -06:00
ubuntu-debootstrap-utopic Switch verbosity in builder/*/generate.sh so that we get download progress for Go instead of the name of every single file extracted 2015-05-07 14:15:35 -06:00
ubuntu-debootstrap-vivid Switch verbosity in builder/*/generate.sh so that we get download progress for Go instead of the name of every single file extracted 2015-05-07 14:15:35 -06:00
ubuntu-debootstrap-wily Add Ubuntu Wily (15.10) as a build-deb target 2015-05-28 01:06:11 -07:00
build.sh Add "builder-deb" base images for building ".deb" packages properly 2015-04-06 10:43:36 -06:00
generate.sh Move AppArmor policy to contrib & deb packaging 2015-07-21 11:05:53 -04:00
README.md Add "builder-deb" base images for building ".deb" packages properly 2015-04-06 10:43:36 -06:00

README.md

dockercore/builder-deb

This image's tags contain the dependencies for building Docker .debs for each of the Debian-based platforms Docker targets.

To add new tags, see contrib/builder/deb in https://github.com/docker/docker, specifically the generate.sh script, whose usage is described in a comment at the top of the file.