| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
| |
Signed-off-by: Tibor Vass <tibor@docker.com>
(cherry picked from commit bbdd34c370949a2db9f139720b4498bc0952e700)
|
| |
|
|
|
|
|
|
| |
The error message was changed from "unauthorized: access to the
requested resource is not authorized" to "unauthorized: authentication
required".
Signed-off-by: Kenfe-Mickael Laventure <mickael.laventure@gmail.com>
|
| |
|
|
|
|
|
|
| |
targets/releases role.
It will ignore tags in all other delegation roles.
Signed-off-by: cyli <cyli@twistedmatrix.com>
|
| |
|
|
| |
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
|
| |
|
|
|
|
|
|
| |
we have keys
and for which the tag conforms to path restrictions.
Signed-off-by: cyli <cyli@twistedmatrix.com>
|
| |
|
|
| |
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
|
| |
|
|
|
|
| |
- fix and add integration tests
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
|
| |
|
|
|
|
|
|
| |
- cherry-pick from 1.10.3 branch: 0186f4d4223a094a050d06f456355da3ae431468
- add token service test suite
- add integration test (missing in 1.10.3 branch)
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
|
| |\
| |
| | |
distribution: errors: do not retry if no credentials provided
|
| | |
| |
| |
| |
| |
| |
| |
| |
| | |
- add test for pull from private registry with no credentials
- add test for push to docker hub with no credentials
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
Signed-off-by: Antonio Murdaca <amurdaca@localhost.localdomain>
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
|
| | |
| |
| |
| |
| |
| | |
Fix and add test for case c) in #21054
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
|
| |/
|
|
|
|
|
|
|
|
|
|
|
|
| |
This PR adds the "notary" binary requirement for tests.
Previously, NotaryHosting was checking for the "notary-server"
binary under the name notaryBinary. This renames that reference to
notaryServerBinary, so that notaryBinary can rightly refer
to the actual "notary" binary.
Currently only one test actually uses the notary binary, so it's been
updated accordingly.
Signed-off-by: Christopher Jones <tophj@linux.vnet.ibm.com>
|
| |
|
|
| |
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Concurrent uploads which share layers worked correctly as of #18353,
but unfortunately #18785 caused a regression. This PR removed the logic
that shares digests between different push sessions. This overlooked the
case where one session was waiting for another session to upload a
layer.
This commit adds back the ability to propagate this digest information,
using the distribution.Descriptor type because this is what is received
from stats and uploads, and also what is ultimately needed for building
the manifest.
Surprisingly, there was no test covering this case. This commit adds
one. It fails without the fix.
See recent comments on #9132.
Signed-off-by: Aaron Lehmann <aaron.lehmann@docker.com>
|
| |
|
|
|
|
|
|
|
|
|
| |
Attempt layer mounts from up to 3 source repositories, possibly
falling back to a standard blob upload for cross repository pushes.
Addresses compatiblity issues with token servers which do not grant
multiple repository scopes, resulting in an authentication failure for
layer mounts, which would otherwise cause the push to terminate with an
error.
Signed-off-by: Brian Bland <brian.bland@docker.com>
|
| |
|
|
|
|
|
|
|
| |
per test.
This way we won't encounter any problems with one test using cached data from a different
test.
Signed-off-by: cyli <cyli@twistedmatrix.com>
|
| |
|
|
| |
Signed-off-by: Stefan Scherer <scherer_stefan@icloud.com>
|
| |
|
|
| |
Signed-off-by: Brian Bland <brian.bland@docker.com>
|
| |
|
|
| |
Signed-off-by: Stefan Scherer <scherer_stefan@icloud.com>
|
| |
|
|
|
|
|
| |
Also renames BlobSumService to V2MetadataService, BlobSum to
V2Metadata
Signed-off-by: Brian Bland <brian.bland@docker.com>
|
| |
|
|
|
|
|
|
|
| |
Tracks source repository information for each blob in the blobsum
service, which is then used to attempt to mount blobs from another
repository when pushing instead of having to re-push blobs to the same
registry.
Signed-off-by: Brian Bland <brian.bland@docker.com>
|
| |
|
|
|
|
|
| |
Add DockerSchema1RegistrySuite which uses this registry, and make
applicable integration tests run as part of this suite.
Signed-off-by: Aaron Lehmann <aaron.lehmann@docker.com>
|
| |
|
|
|
|
| |
delegations.
Signed-off-by: cyli <cyli@twistedmatrix.com>
|
| |
|
|
| |
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
|
| |
|
|
| |
Signed-off-by: Antonio Murdaca <runcom@redhat.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Add distribution package for managing pulls and pushes. This is based on
the old code in the graph package, with major changes to work with the
new image/layer model.
Add v1 migration code.
Update registry, api/*, and daemon packages to use the reference
package's types where applicable.
Update daemon package to use image/layer/tag stores instead of the graph
package
Signed-off-by: Aaron Lehmann <aaron.lehmann@docker.com>
Signed-off-by: Tonis Tiigi <tonistiigi@gmail.com>
|
| |
|
|
|
|
|
|
|
|
| |
inconsistent
This fixes an issue where two images with the same filesystem contents
and configuration but different remote IDs could share a v1Compatibility
file, resulting in corrupted manifests.
Signed-off-by: Aaron Lehmann <aaron.lehmann@docker.com>
|
| |
|
|
| |
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
|
| |
|
|
| |
Signed-off-by: Hu Keping <hukeping@huawei.com>
|
| |
|
|
| |
Signed-off-by: Diogo Monica <diogo@docker.com>
|
| |
|
|
| |
Signed-off-by: Diogo Monica <diogo@docker.com>
|
| |
|
|
|
|
|
| |
Notary is capable of acting in offline mode, making use of cache TUF data.
When ping is not successful, notary should still be attempted without error.
Signed-off-by: Derek McGowan <derek@mcgstyle.net> (github: dmcgowan)
|
| |
|
|
|
|
| |
This test relies on a race condition, and has been failing often in CI.
Signed-off-by: Aaron Lehmann <aaron.lehmann@docker.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
The practice of buffering to a tempfile during a pushing contributes massively
to slow V2 push performance perception. The protocol was actually designed to
avoid precalculation, supporting cut-through data push. This means we can
assemble the layer, calculate its digest and push to the remote endpoint, all
at the same time.
This should increase performance massively on systems with slow disks or IO
bottlenecks.
Signed-off-by: Stephen J Day <stephen.day@docker.com>
|
| |
|
|
| |
Signed-off-by: Arnaud Porterie <arnaud.porterie@docker.com>
|
| |
|
|
|
|
| |
This reverts commit 810d3b2642d4a82dc186d6eff8c2e487ee624bc5.
Signed-off-by: Arnaud Porterie <arnaud.porterie@docker.com>
|
| |
|
|
|
|
| |
Update UX to use aliases for root, snapshot, and target key
Signed-off-by: Derek McGowan <derek@mcgstyle.net> (github: dmcgowan)
|
| |
|
|
|
|
|
| |
Currently some notary tests change the system clock to check for expiration.
Skip these tests until the code can be refactored to not rely on updating the system clock.
Signed-off-by: Derek McGowan <derek@mcgstyle.net> (github: dmcgowan)
|
| |
|
|
| |
Signed-off-by: Brian Goff <cpuguy83@gmail.com>
|
| |
|
|
|
|
|
|
| |
Update help line to allow 90 characters instead of 80
The trust flag pushes out the help description column wider, requiring more room to display help messages.
Signed-off-by: Derek McGowan <derek@mcgstyle.net> (github: dmcgowan)
|
| |
|
|
| |
Signed-off-by: Diogo Monica <diogo@docker.com>
|
| |
|
|
|
|
|
|
|
| |
Clean up tests to remove duplicate code
Add tests which run pull and create in an isolated configuration directory.
Add build test for untrusted tag
Signed-off-by: Derek McGowan <derek@mcgstyle.net> (github: dmcgowan)
|
| |
|
|
|
|
| |
Fix failing tests for create, push, and pull
Signed-off-by: Diogo Monica <diogo@docker.com>
|
| |
|
|
|
|
| |
Created date util function
Signed-off-by: Nathan McCauley <nathan.mccauley@docker.com>
|
| |
|
|
| |
Signed-off-by: Diogo Monica <diogo@docker.com>
|
| |
|
|
|
|
|
| |
Added notary server to docker base image.
Created trust suite which runs trust server for running trusted commands.
Signed-off-by: Derek McGowan <derek@mcgstyle.net> (github: dmcgowan)
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
pushV2Tag already deduplicates layers, but the scope of this
deduplication is only for a particular tag. If we are pushing all tags
in a repository, we may check layers several times. Fix this by moving
the layersSeen map from the pushV2Tag function to the v2Pusher struct.
In addition to avoiding some useless round-trips, this makes the "docker
push" output less confusing. It formerly could contain many repeated
lines like:
124e2127157f: Image already exists
124e2127157f: Image already exists
...
Add test coverage based on the "docker push" output: a hash should not
appear multiple times when pushing multiple tags.
Fixes #14873
Signed-off-by: Aaron Lehmann <aaron.lehmann@docker.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
- integration-cli/docker_cli_attach_test.go
- integration-cli/docker_cli_attach_unix_test.go
- integration-cli/docker_cli_build_test.go
- integration-cli/docker_cli_build_unix_test.go
- integration-cli/docker_cli_by_digest_test.go
- integration-cli/docker_cli_commit_test.go
- integration-cli/docker_cli_config_test.go
- integration-cli/docker_cli_cp_test.go
- integration-cli/docker_cli_create_test.go
- integration-cli/docker_cli_pause_test.go
- integration-cli/docker_cli_port_test.go
- integration-cli/docker_cli_port_unix_test.go
- integration-cli/docker_cli_proxy_test.go
- integration-cli/docker_cli_ps_test.go
- integration-cli/docker_cli_pull_test.go
- integration-cli/docker_cli_push_test.go
- docker_api_attach_test.go
- docker_api_containers_test.go
- docker_api_events_test.go
- docker_api_exec_resize_test.go
- docker_api_exec_test.go
- docker_api_images_test.go
- docker_api_info_test.go
Signed-off-by: Vincent Demeester <vincent@sbr.pm>
|
| |
|
|
| |
Signed-off-by: Yuan Sun <sunyuan3@huawei.com>
|
| |
|
|
|
|
| |
IT'S ABOUT TIME. :tada:
Signed-off-by: Andrew "Tianon" Page <admwiggin@gmail.com>
|