reports/2018-02-28.md
This report covers the development in the linuxkit/linuxkit linuxkit/lcow linuxkit/kubernetes linuxkit/virtsock linuxkit/rtf linuxkit/homebrew-linuxkit moby/tool repositories. There were 378 contributions (PRs/Issues/Comments) from 29 individual contributors. 56 new PRs were opened and 52 PRs were merged. 17 new issues were opened and 15 issues were closed.
In February we merged the initial support for the RealTime Linux kernel via the PREEMPT_RT patches contributed. We also merged the first steps towards supporting s390x as a new architecture. More PRs are in the pipeline and they should get merged soon.
On the kernel side, we switched the default LinuxKit kernel to the 4.14.x series as it receives critical bug fixes quicker and has better mitigation against Meltdown/Spectre. We also had no less than 8 kernel updates as well as two updates to WireGuard. The latest supported kernels are 4.15.7/4.4.23/4.9.85/4.4.119.
On the Kubernetes front we now have a test harness to perform quick smoke tests.
The Linux Container on Windows (LCOW) project had significant additions to its test suite (and more are in the pipeline). To this end, we also updated the rtf utility to allow running test written in Powershell on macOS and Linux. The VirtSock project received a major rewrite of the Hyper-V socket implementation.
On the tooling and package side, containerd was updated to v1.0.2 and initial steps towards supporting booting from qcow2 EFI images was merged. We also added a new complete example to create a LinuxKit image for the full "TICK" stack (InfluxDB, Chronograf, Kapacitor, Telegraf).
To start the already installed kubernetes cluster (linuxkit/kubernetes#41 @aadhik @ijc)
cri-containerd: hostpath mounted read only (linuxkit/kubernetes#59 @yvespp @ijc)
WARN[0003] certificate with CN ABC DEF is near expiry (linuxkit/kubernetes#62 @rodlogic @ijc)
Bind mount host to container: very slow write speed (linuxkit/lcow#7 @Yivan @rn)
linuxkit/test-ltp does not build (linuxkit/linuxkit#2342 @rn @cji)
Make it possible to key the package tags off of top level tree hash (linuxkit/linuxkit#2887 @rvs @justincormack @deitch @rn)
Improve/extend kernel config test (linuxkit/linuxkit#2890 @rn)
4.9.79 kernel crash on GCP (linuxkit/linuxkit#2903 @rn)
Improve kernel patching (linuxkit/linuxkit#2906 @rn @tjfontaine)
Backport vmbus trace points (linuxkit/linuxkit#2910 @rn)
Switch default kernel to 4.14 (linuxkit/linuxkit#2918 @rn @justincormack)
Per arch selection of kernel builds (linuxkit/linuxkit#2921 @rn)
Running linuxkit run vbox --networking bridged does not start VM in bridged mode on Mac (linuxkit/linuxkit#2929 @obergner @justincormack)
Remove support for Hyper-V socket pre Windows build 14393 (linuxkit/virtsock#51 @rn)
Implement accept()/Listen() for windows (linuxkit/virtsock#52 @rn)
Flakey rtf tests (linuxkit/kubernetes#64 @ijc)
Reorganise the test to follow 'docker <command>' (linuxkit/lcow#13 @rn)
onboot logs not showing up anywhere (linuxkit/linuxkit#1688 @deitch @riyazdf @eyz @ernoaapa)
Combine linuxkit and Docker Swarm Mode (linuxkit/linuxkit#1989 @nrocco @kencochrane @dweomer @jtvhk @asbjornenge @justincormack)
Passing config options for image build (linuxkit/linuxkit#2817 @rvs @deitch @errordeveloper @justincormack @w9n)
Support Preempt-RT Linux kernel (linuxkit/linuxkit#2856 @TiejunChina)
Resolve certificate with CN ABC DEF is near expiry messages (linuxkit/linuxkit#2911 @ijc @justincormack)
4.16 Jailhouse non-root cell support flag for x86-64 (linuxkit/linuxkit#2917 @fntlnz @rn)
switch to Alpine Edge again? (linuxkit/linuxkit#2922 @justincormack)
Configure guest with 9P mount and vsock port when using existing VPNKit instance (linuxkit/linuxkit#2933 @ekcasey)
Convert manifest signing to use docker manifest and docker trust sign (linuxkit/linuxkit#2936 @rn)
Add s390 support for linuxkit kernel (linuxkit/linuxkit#2939 @alicefr)
Script to generate s390 kernel configs (linuxkit/linuxkit#2940 @alicefr)
Add logging to /var/log for onboot containers (linuxkit/linuxkit#2942 @deitch @justincormack)
Update tools/alpine (wireguard tools and s390x) (linuxkit/linuxkit#2943 @rn @justincormack @ijc)
NVIDIA driver with LinuxKit host (linuxkit/linuxkit#2944 @jbremmer @rn @justincormack)
go: client on Linux get EOF on read (linuxkit/virtsock#55 @rn)
Enable 'moby build' for private repos (moby/tool#202 @rn)