Commit graph

4724 commits

Author SHA1 Message Date
Peter Kokot
23c116b75f Fix link to requirements (#3970)
This patch fixes link to Docker registry requirements from the Apache recipe.
2017-07-26 17:15:48 -07:00
Peter Kokot
a59d321e8d Fix link to requirements in Nginx recipe (#3969) 2017-07-26 16:23:00 -07:00
Derek McGowan
edc3ab29cd Merge pull request #2316 from igmor/logrus_case_dep_update
Update logrus and logrus-logstash-hook libraries
2017-07-26 10:46:10 -07:00
Aaron Lehmann
e18fe7d3f4 Merge pull request #2346 from riyazdf/security-list
add CONTRIBUTING info for security issues
2017-07-24 17:40:39 -07:00
Stephen Day
cb851f6598 Merge pull request #2345 from mstanleyjones/put-back-image
Put back v2-registry-auth.png
2017-07-24 15:01:48 -07:00
Riyaz Faizullabhoy
f7fb45f59a add CONTRIBUTING info for security issues
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-07-24 14:58:32 -07:00
Misty Stanley-Jones
c6f6c44e56 Remove v2-registry-auth image (#3965)
Put it back upstream instead
2017-07-24 14:44:49 -07:00
Misty Stanley-Jones
1d95716792 Put back v2-registry-auth.png
Signed-off-by: Misty Stanley-Jones <misty@docker.com>
2017-07-24 14:27:16 -07:00
Stephen Day
91c507a39a Merge pull request #2340 from stevvooe/limit-payload-size
registry/{storage,handlers}: limit content sizes
2017-07-20 13:57:55 -07:00
YuJie
20f225005a Fix the sentence
Signed-off-by: YuJie <390282283@qq.com>
2017-07-20 05:52:56 +08:00
Derek McGowan
5cfdfbdce5 Merge pull request #2338 from stevvooe/api-typo
api: url typo in specification
2017-07-18 15:49:00 -07:00
Stephen J Day
5e5156afa3
api: url typo in specification
Signed-off-by: Stephen J Day <stephen.day@docker.com>
2017-07-18 14:48:55 -07:00
Aaron Lehmann
fb90a182a9 Merge pull request #2336 from fate-grand-order/fixed
fix misspelling "algorithm" for cache/redis/redis.go
2017-07-18 11:56:19 -07:00
fate-grand-order
a11fe173d5 fix misspelling "algorithm" for cache/redis/redis.go
Signed-off-by: Helen Chen <chenjg@harmonycloud.cn>
2017-07-18 16:02:42 +08:00
John Mulhausen
cb3f2ace6d Update mirror.md 2017-07-13 13:21:08 -07:00
Jim Galasyn
cf36ad3cb2 Improve tip on log messages (#3888)
* Improve tip on log messages

* Reformat per feedback
2017-07-13 12:07:43 -07:00
Jim Galasyn
82998e1077 Add tip about error message in registry cache (#3874) 2017-07-12 11:59:00 -07:00
Stephen J Day
55ea440428
registry/{storage,handlers}: limit content sizes
Under certain circumstances, the use of `StorageDriver.GetContent` can
result in unbounded memory allocations. In particualr, this happens when
accessing a layer through the manifests endpoint.

This problem is mitigated by setting a 4MB limit when using to access
content that may have been accepted from a user. In practice, this means
setting the limit with the use of `BlobProvider.Get` by wrapping
`StorageDriver.GetContent` in a helper that uses `StorageDriver.Reader`
with a `limitReader` that returns an error.

When mitigating this security issue, we also noticed that the size of
manifests uploaded to the registry is also unlimited. We apply similar
logic to the request body of payloads that are full buffered.

Signed-off-by: Stephen J Day <stephen.day@docker.com>
2017-07-06 17:13:39 -07:00
leonstrand
b19b19cc70 Fixed spelling of 'exammple' (#3769) 2017-06-30 16:40:26 -07:00
Misty Stanley-Jones
31619aedd3 Reorganize registry deployment guide (#3485)
* Reorganize registry deployment guide

Also add information about pushing non-distributable
layers to private registries

Also add an example of running a registry as a swarm service
2017-06-28 08:31:29 -07:00
Misty Stanley-Jones
8ac75794dd Point to newer registry topic (#3719) 2017-06-27 16:33:43 -07:00
Aaron Lehmann
f86db6b226 Merge pull request #2315 from ipanova/mediatype-typo
Fixing image manifest schema2 medaitype typo in docs.
2017-06-27 11:58:08 -07:00
Aaron Lehmann
caa175c710 Merge pull request #2299 from dmage/regulator
Fix signalling Wait in regulator.enter
2017-06-23 15:25:35 -07:00
Derek McGowan
b9f76758ae Merge pull request #2310 from dmage/digest
Update Docker-Content-Digest if manifest list is rewritten
2017-06-23 15:07:39 -07:00
Igor Morozov
a97d7c0c15 moved Sirupsen to sirupsen on a case sensitive system
Signed-off-by: Igor Morozov <igor@adhoc05-sjc1.prod.uber.internal>
2017-06-23 20:28:48 +00:00
Ina Panova
5ccd03d28a Fixing image manifest schema2 medaitype typo in docs.
Signed-off-by: Ina Panova <ipanova@redhat.com>
2017-06-23 12:25:52 +02:00
Pieter Scheffers
55aec8a4f7 htpasswd passwords should use bcrypt hashing (#3401) 2017-06-22 15:59:24 -07:00
Jim Galasyn
c60e7107fa Add use case for China registry mirror (#3682) 2017-06-22 13:08:43 -07:00
Wassim Dhif
6508f123f8 Reword sentence 2017-06-20 11:01:52 -07:00
Oleg Bulatov
5b1b6afae2 Update Docker-Content-Digest if manifest list is rewritten
If the client doesn't support manifest lists, the registry will
rewrite a manifest list into the old format. The Docker-Content-Digest
header should be updated in this case.

Signed-off-by: Oleg Bulatov <oleg@bulatov.me>
2017-06-16 16:20:14 +02:00
Wang Jie
bbbafb0e72 Update notifications.md (#3399) 2017-06-02 11:44:17 -07:00
Wang Jie
efa76b98d0 Update oss.md (#3448) 2017-06-02 10:04:01 -07:00
Wang Jie
4da4fc02c0 Update compatibility.md (#3445) 2017-06-02 10:01:29 -07:00
Wang Jie
528d227917 Update insecure.md (#3444) 2017-06-02 10:00:58 -07:00
Wang Jie
78d250137b Update garbage-collection.md (#3443) 2017-06-02 10:00:20 -07:00
Wang Jie
a6fc3fa7fa Update osx-setup-guide.md (#3442) 2017-06-02 09:59:46 -07:00
Wang Jie
2c19d1ca88 Update apache.md (#3441) 2017-06-02 09:58:28 -07:00
Oleg Bulatov
258345ba0d Fix signalling Wait in regulator.enter
In some conditions, regulator.exit may not send a signal to blocked
regulator.enter.

Let's assume we are in the critical section of regulator.exit and r.available
is equal to 0. And there are three more gorotines. One goroutine also executes
regulator.exit and waits for the lock. Rest run regulator.enter and wait for
the signal.

We send the signal, and after releasing the lock, there will be lock
contention:

  1. Wait from regulator.enter
  2. Lock from regulator.exit

If the winner is Lock from regulator.exit, we will not send another signal to
unlock the second Wait.

Signed-off-by: Oleg Bulatov <obulatov@redhat.com>
2017-06-02 15:41:55 +02:00
Luca Bruno
119a48eb79
docs/spec: provide a valid manifest-v2-s1 example
Signed-off-by: Luca Bruno <luca.bruno@coreos.com>
2017-05-30 14:32:58 +00:00
Luca Bruno
3244e471de
docs/spec: provide a valid manifest-list-v2-s2 example
Signed-off-by: Luca Bruno <luca.bruno@coreos.com>
2017-05-30 14:32:32 +00:00
Kevin Robatel
b9220191fc Fix typo in markdown (#3371) 2017-05-24 16:49:29 -07:00
Chaos John
864905cfac "as mall as possible"=>"as small as possible" (#3372) 2017-05-24 16:48:56 -07:00
Wang Jie
a5b2b63bcb Update deploying.md (#3373) 2017-05-24 16:48:29 -07:00
Jim Galasyn
aed6cb22b5 Reverted (#3393) 2017-05-24 14:29:08 -07:00
Stephen Day
1e2f10eb65 Merge pull request #2281 from sixeyed/patch-1
Add ARGs for cross-compiling
2017-05-24 13:58:24 -07:00
Derek McGowan
a1576d6e21 Merge pull request #2165 from kevinetc123/patch-1
fix some misspells
2017-05-24 11:18:20 -07:00
Jim Galasyn
1b6da36acd Add section on China registry mirror (#3379) 2017-05-24 09:05:43 -07:00
Misty Stanley-Jones
7c5b1e60c2 Remove registry/architecture.md from docs repo (#3365)
This file is specifically not published to the
site anyway
2017-05-23 16:14:03 -07:00
Derek McGowan
49bb3242da Merge pull request #2282 from mstanleyjones/put-back-architecture-doc
Put architecture.md back into distribution repo
2017-05-23 13:10:21 -07:00
Misty Stanley-Jones
b0f98e9382 Put architecture.md back into distribution repo
Signed-off-by: Misty Stanley-Jones <misty@docker.com>
2017-05-23 11:24:11 -07:00