Commit Graph
236 Commits
Author SHA1 Message Date
Ryo Ota 6469b210cc use .tgz instead of .tar.gz 2020-09-04 07:36:23 +09:00
Aðalsteinn Rúnarsson 51cf315c4e Change wording for setting capabilities lists
Update the wording for allow/deny approach for setting capabilities.
2020-08-27 15:07:46 +00:00
Sebastiaan van Stijn 021e13a5ed Remove EE "trust pinning" section
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-07-02 23:37:01 +02:00
Sebastiaan van Stijn 2b4833a355 Remove some references to enterprise products
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-07-02 23:36:48 +02:00
Akihiro Suda a7e2591552 rootless.md: fix markdown
Fix #11017

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2020-06-26 14:27:33 +09:00
Akihiro Suda b7eec33cfe rootless.md: fix a typo (#11013) 2020-06-18 09:08:55 +01:00
Usha Mandya f91c2a28f6 Rootless Docker: Style edits and minor updates (#11001)
Rootletts: Style edits and minor updates, and fix prereq example
2020-06-17 11:33:24 +02:00
Usha Mandya 786c89bdf6 Merge pull request #10965 from AkihiroSuda/rootless
rootless.md: massive update
2020-06-16 14:55:44 +01:00
José Fernando CordovaandSebastiaan van Stijn e3c3484c47 Fix 404 Not Found - Broken Link (#10997)
* Fix 404 Not Found - Broken Link

Co-authored-by: Sebastiaan van Stijn <thaJeztah@users.noreply.github.com>
2020-06-16 14:55:51 +02:00
Akihiro Suda a06b01802c rootless.md: massive update
* Add Ubuntu 20.04
* Remove Fedora 30 (EOL)
* `docker run --net=host` does not work in the most expected way
* Allow installation as the root
* Nightly channel
* `docker context create rootless`
* `DOCKER_HOST=ssh://...`
* Alternatives to cgroup flags (`docker run --cpus --memory --pids-limit`)
* A bunch of troubleshooting tips

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2020-06-16 19:20:18 +09:00
Amal 12b8e799c7 Typo fixture (#10950)
* Typo fixture

* Minor typo fix

* Typo fix
2020-06-03 19:21:11 +01:00
Jan Kanis b4ab954d3f fix description for ptrace in seccomp.md
The existing description leads the reader to believe that dropping CAP_SYS_PTRACE already blocks all ptraces. That is not true, it only blocks ptracing arbitrary processes. Ptracing child processes is still allowed.
2020-05-22 13:36:45 +02:00
Sebastiaan van Stijn 67cb46bcf2 Merge pull request #10758 from shirhatti/patch-1
s/CAP_PTRACE/CAP_SYS_PTRACE
2020-05-14 14:56:46 +02:00
Flavien Berwick 0d8d653f4f Auto-restart of Docker rootless on boot requires an additional command
Related to issue [#10770](https://github.com/docker/docker.github.io/issues/10770)
2020-05-07 19:10:04 +02:00
Sourabh Shirhatti 6f893ed1c6 s/CAP_PTRACE/CAP_SYS_PTRACE 2020-05-04 14:03:02 -05:00
ajay143444andSebastiaan van Stijn aa57de37d3 Few corrections and suggestions in doc (#10728)
* Removed is from line 80

Removed is from line 80 as this is not required

* changed text to link at line 129

changed text to link at line 129 to make it easy for user to navigate

* changed the URL to link

changed the URL to link for easy navigation

* added these before flags in line 186

added these before flags in line 186

Co-Authored-By: Sebastiaan van Stijn <thaJeztah@users.noreply.github.com>
2020-05-01 18:30:28 +02:00
Sebastiaan van Stijn 3ce8fd8006 Merge pull request #10724 from ajay143444/patch-10
changed line 56 by adding do before not
2020-04-30 12:15:37 +02:00
ajay143444 b37c6506d8 changed line 56 by adding do before not
changed line 56 by adding do before not
2020-04-29 17:55:29 +05:30
ajay143444 10dfe1827d removed with from line 41
removed with from line 41 as it is not required
2020-04-29 16:26:00 +05:30
Sebastiaan van Stijn 777c5d23da engine: use relative markdown links
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-04-23 13:03:32 +02:00
Sebastiaan van Stijn 331554f4b3 Fix various links that were generating URLs with .md (#10548)
* Fix incorrect links in compose section

there's a bug causing wrapped links to not work, and replacing
some links to point to the .md file, so that IDE's can check
if the anchors are valid. Also replaced some links to point
to their new location.

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>

* engine/swarm: update links

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>

* Fix various broken links

There's a bug in the "jekyll-relative-links" plugin that causes wrapped links to not work.
Also replacing some links to point to the .md file, so that IDE's can check if the anchors
are valid. Finally, replaced some links to point to their new locations, so that users don't
get redirected..

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-04-01 12:05:50 +01:00
Sebastiaan van Stijn 14bbe621e5 Update markdown language hints to work with "rouge"
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2020-03-17 14:49:51 +01:00
Usha Mandya fefc750abd Update Hub support alias (#10432) 2020-03-10 18:30:43 +00:00
scott-vsi e7eedf3b7f fix link (#10402)
fix a link that was possibly broken by automatic text formatting/wrapping
2020-03-09 10:19:45 +00:00
pcworld e1f41c15ed rootless.md: Fix typo in path 2020-03-06 18:47:46 +01:00
LORIS INTERGALACTIQUEandUsha Mandya 711567c5af Fixed typos on the rootless mode page (#10330)
* Fixed typos

* Minor wording update

Co-authored-by: Usha Mandya <47779042+usha-mandya@users.noreply.github.com>
2020-02-21 17:52:37 +00:00
Marc Nimmerrichter 27e529ce3e Update content_trust.md
Make it clear that DCT does not protect against layer tampering on the docker host.
2020-01-20 18:02:41 +01:00
Sebastiaan van Stijn 91c5d19a14 Merge pull request #9662 from pjbgf/patch-2
Remove ptrace from blocked syscalls
2019-12-03 16:28:20 +01:00
Paulo Gomes 9c2520fa27 Fix table 2019-11-28 12:33:15 +00:00
Paulo Gomes 1962410b61 Corrections based on feedback 2019-11-28 12:30:44 +00:00
Paulo Gomes 432b7c4134 Improve clarity. 2019-11-28 09:06:03 +00:00
Akihiro Suda 40747fcca7 Add "Run the Docker daemon as a non-root user (Rootless mode)"
Add "Run the Docker daemon as a non-root user (Rootless mode)":
`engine/security/rootless.md`

The content is based on https://github.com/moby/moby/blob/master/docs/rootless.md

`rootless.md` in `moby/moby` will be replaced of the link to
the `docs.docker.com` page compiled from `rootless.md` in this repo.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2019-11-15 16:02:08 +09:00
Paulo Gomes 2adcf3bd66 Add minKernel details for ptrace
Changes brought up by commit:

https://github.com/moby/moby/commit/1124543ca8071074a537a15db251af46a5189907#diff-0ebf5796a57d68894d5550c407061035
2019-10-29 14:51:22 +00:00
Paulo Gomes 5c0c1eed40 Remove ptrace from blocked syscalls
Update documentation to reflect that ptrace is no longer blocked on the default profile.

More information:
https://github.com/moby/moby/commit/1124543ca8071074a537a15db251af46a5189907#diff-0ebf5796a57d68894d5550c407061035
2019-10-17 09:59:47 +01:00
Paulo Gomes d32f93ca93 Remove reference to socket and socketcall 2019-10-17 09:53:28 +01:00
Paulo Gomes 04b5f87b28 Remove socket from blocked syscalls
Socket syscalls are no longer blocked on the default profile for a while now. More information: 
https://github.com/moby/moby/commit/dcf2632945b87acedeea989a5aa36c084a20ae88#diff-0ebf5796a57d68894d5550c407061035
2019-10-17 09:44:40 +01:00
Sujay Pillai 1a684b91a1 Updated userns-remap.md (#9629)
Updated the links to solve https://github.com/docker/docker.github.io/issues/9419
2019-10-14 10:54:24 -07:00
Adrian Plata b25ec58b72 Add DCT Linux note
Signed-off-by: Adrian Plata <adrian.plata@docker.com>
2019-10-10 16:18:43 -07:00
Dawn W e5c4444db8 Merge pull request #9038 from AkihiroSuda/patch-11
Strongly recommend TLS for API socket
2019-07-23 11:18:40 -07:00
ollypom 4524319333 Merge branch 'master' into amberjack 2019-07-19 14:23:33 +00:00
Akihiro Suda b690a3213d Strongly recommend TLS for API socket 2019-07-09 15:45:10 +09:00
Olly P 9878f22b17 Formatting nit 2019-07-02 10:00:19 +01:00
nirajrules db7d8d4b3f The notary config file had a comma missing
Docker SA from South East
2019-07-01 18:23:21 -04:00
Jameson Hyde e7d69b14a7 Include service support for DCT in engine (#1177)
Signed-off-by: Jameson Hyde <jameson.hyde@docker.com>
2019-06-13 12:50:35 -07:00
Akihiro Suda 2778995f15 Fix dockremap calculation 2019-06-12 19:13:34 +09:00
Rajasekharan Vengalil a43165a37c Remove redundant "be" 2019-04-06 13:57:06 -07:00
Maria Bermudez c3b0c02153 Audit branch (#8564)
* Update trust-with-remote-ucp.md

* Fix link texts

* Addresses 8446

* Update trust_delegation.md

* - Addresses 8446
- Cleans up broken links
- Fixes vague link texts

Addresses 8446

Update trust_delegation.md

* Update running_ssh_service.md

* Update running_ssh_service.md

Fixed formatting and wording. Also moved note above the code.

* Update running_ssh_service.md

Fixed typo.

* Compose: Update build docs, Add --quiet flag

* Fix destroy reference page link

Relates to https://github.com/docker/docker.github.io/pull/8441

* Rephrase Ubuntu 14.04 note

* Revert "Compose: Update build docs, Add --quiet flag"

* # This is a combination of 4 commits.
# This is the 1st commit message:

- Addresses 8446
- Cleans up broken links
- Fixes vague link texts

Addresses 8446

Update trust_delegation.md

# This is the commit message #2:

# This is a combination of 2 commits.
# This is the 1st commit message:

- Addresses 8446
- Cleans up broken links
- Fixes vague link texts

Addresses 8446

Update trust_delegation.md

# This is the commit message #2:

Update trust-with-remote-ucp.md
# This is the commit message #3:

- Addresses 8446
- Cleans up broken links
- Fixes vague link texts

# This is the commit message #4:

Fix destroy reference page link

Relates to https://github.com/docker/docker.github.io/pull/8441

* - Addresses 8446
- Cleans up broken links
- Fixes vague link texts

* Addresses 8446 with text and link cleanup.

* Update syntax language from none to bash

* Update index.md
2019-04-01 14:45:04 -04:00
Wang Jie 8a8ea7d666 Update seccomp.md 2019-03-25 09:35:26 +08:00
Maria Bermudez 7ddb16f25e Merge pull request #8492 from scjane/patch-117
Update trust_sandbox.md
2019-03-20 19:30:42 -04:00
Maria Bermudez d4bc0df73c Merge pull request #8491 from scjane/patch-116
Update trust_key_mng.md
2019-03-20 19:30:08 -04:00