reports/2017-06-11.md
This report covers weekly developments in the linuxkit, virtsock, linuxkit-ci and rtf repositories. There will be a Moby development Summit in the Docker office in San Francisco on June 19, with several of the LinuxKit developers.
Homebrew: On MacOS there is a brew tap available. Detailed instructions are at
linuxkit/homebrew-linuxkit,
and the short summary is (#2012 @justincormack @riyazdf)
brew tap linuxkit/linuxkit
brew install --HEAD moby
brew install --HEAD linuxkit
This week also saw the addition of several new backends for LinuxKit:
Hyper-V: Add a new Hyper-V backend that provides interactive console access in Powershell (and potentially bash, untested). It supports networking via an existing switch, and supports multiple disks. (#2017 @rn @justincormack).
Microsoft Azure: The CLI now has linuxkit run azure functionality by
integrating with the Azure Go SDK. (#1933 #1421 @radu-matei).
AWS support: following on from the initial addition last week, the CLI now
has push and run support for AMIs (#1918 #1964 @kencochrane
@dave-tucker @justincormack @riyazdf).
The AWS provider in the metadata Go package was also enhanced to include more
data (#2014 @kencochrane @riyazdf @rn), and the default image name is
now set correctly if one is not supplied (#1969 @DieterReuter). If you are
debugging the push support, there is now more verbose logging available
(#1973 @kencochrane @riyazdf).
VMWare VCenter: Added the capability to wait for the OpenVM tools to report
the IP of new VM on doing a linuxkit vcenter run (#1968 @thebsdbox).
Meanwhile, the tools all compile cleanly on Linux, macOS and Windows now (#2000 @rn @mor1)
and there is a make local target that does not use Docker (#2011 @justincormack).
ctr exec -t that used to hang (#1837 @rn).size parameter is now in gigabytes instead of megabytes (#2009 @rn)Getty containerised: Added a getty pkg that containerises the serial handling (#1977 #1993 #1997 @deitch @justincormack @riyazdf).
Also update linuxkit/init to remove the getty logic, and the getty package to relevant examples (#2004 #2016 @riyazdf @deitch @justincormack @rn).
Leave no port behind: The containerd metrics port is now not exposed by default (#1951 @dave-tucker @rn @justincormack @ijc @riyazdf). See the issue for discussion about further security implications of which ports to leave open.
vsudd virtual communication: There is a new package vsudd that clones and builds linuxkit/virtsock/cmd/vsudd for virtsock communication (#1960 @MagnusS).
Other packaging activity:
linuxkit run instead of moby run (#2007 @riyazdf)GOOS and GOARCH over-writeable (#1984 @riyazdf @rn)sshd pkg should have additional mounts (@justincormack @rn @deitch)The MirageSDK was the topic of this week's Moby Security SIG#2, so there is a presentation available (see the SIG notes). There were various updates in the tree to continue to build the DHCP container (#1965 #2013 #1952 @yomimono [@samoht] @avsm @m4rcu5 @riyazdf).
The projects/aws was removed now that the functionality is mainline (#1975 @avsm @riyazdf).
The probational channel proposal PR was closed (#1945 @tych0) with the following actions based on feedback from the SIG.
moby tool to do the userspace init mergingprojects/ so e.g. the stuff that merges kernel command lines and such needs to be integrated into the moby tool properThese guidelines above generally help to reduce the difference in tooling between experimental projects and the mainline LinuxKit distribution tools.
Discussion continues on the issues about EBPF Jit verification ([linuxkit#1623] @l0kod @thestinger @tych0) and the containerd test harness ([linuxkit/linuxkit#1906] @justincormack @AkihiroSuda)
docker.json from linuxkit.yml (#1996 @justincormack @rn).mailmap to make auto-generating work (#2001 @justincormack @thaJeztah)moby/tool (#2002 @riyazdf)/pkg/vpnkit-forwarder ([linuxkit#2008] @MagnusS @justincormack @ijc)Other reports in this series can be browsed directly in the repository at linuxkit:/reports.