reports/2017-04-09.md
The fifth weekly development report. Feel free to send PRs if you want to add to these reports (or correct them).
Ilya @errordeveloper (Weave) has started working on Kubernetes support. This also fits with the infrakit etcd demo that Rolf is working on. The aim is to do both a desktop version and later a full production quality deployment with high availability.
Dave @dave-tucker is working on CI, and the roadmap for testing.
Welcome everyone, looking forward to your contributions and working with you. Please open issues on github if you need help, or ask on #moby in the Docker community slack.
Ian @ijc25 added a swarmd project, that incorporates his WIP patches to run swarmkit standalone using just containerd rather than Docker.
There were updates to okernel and miragesdk.
We added a roadmap for the Landlock LSM support. Landlock is an eBPF based Linux Security Module being developed by @l0kod which promises to be an excellent match for containers.
This was a busy week, with a lot of refactoring and rebasing.
The moby run command got backend support for GCP from @dave-tucker #1492 and qemu from @thebsdbox #1521.
We stopped using the riddler tool and added a direct conversion from the yaml config to OCI for running system contaniners. More config options were added, and there is now documentation for the yaml. We stopped using some of the previous names to standardise on names closer to the underlying OCI field names, from @justincormack.
@riyazdf added support for content trust settings in the yaml file and set up signing for the kernel, which will be rolled out to other images.
@shykes suggested some section renames which we implemented, the initial containers that run once are now "onboot" and the long running ones are "services", which is much clearer.
The init section was converted to a list, so runc and containerd can easily be updated independently.
The issues with shared mounts, and allowing containers to mount on the host were hopefully all resolved in #1557.
containerd finallySecure Substrate: Least Privilege Container Deployment) that will highlight Moby