Commit Graph

303 Commits

Author SHA1 Message Date
nvcastet ac941e6b03
Update seccomp.md
Fix #6854
2018-06-11 09:16:15 -05:00
Bryan Thornbury f32bbe902d Remove adjtimex. (#6032) 2018-05-10 09:40:37 -07:00
Gionni 5bb6473a72 less is more - avoid cat to grep something. (#6383) 2018-04-06 11:07:06 -07:00
Damien L-G 1d2b6f6fcd Update links to AppArmor's wiki (#6335) 2018-03-29 09:49:40 -07:00
Shane O'Grady a78f7d345f Fix typo (#6158)
maxumum -> maximum
2018-03-06 06:57:29 -08:00
John Gasper dd75c65162 Update https.md 2018-03-02 11:01:34 -08:00
John Gasper c1db5bd9a2 fixing a command's description
the command does not create a key, but generates a signed cert based on the CSR.
2018-03-02 11:01:34 -08:00
Jaume Casado Ruiz c267d4c1bf Fix typo in userns-remap.md 2018-03-02 10:54:50 -08:00
Drew Volz 374d240c6a Update security.md (#6037) 2018-02-20 16:00:49 -08:00
Misty Stanley-Jones a17a47dd77
Favor docker <object> <verb> format of commands (#5914)
Remove instances of:
- docker rmi
- docker images
- docker stop
- docker rm
- docker create
- docker exec
- docker attach
2018-02-05 09:33:47 -08:00
mrajphemi 288465b5fd Fix typo in user namespace docs (#5881)
There was a typo in a file name.
should be /etc/passwd not /etc/password
2018-01-31 13:03:54 -08:00
Misty Stanley-Jones a4f5e30249
Various copyedits to reduce future tense, wordiness, and use of 'please' (#5788)
* Reword lots of instances of 'will'

* Reword lots of instances of won't

* Reword lots of instances of we'll

* Eradicate you'll

* Eradicate 'be able to' type of phrases

* Eradicate 'unable to' type of phrases

* Eradicate 'has / have to' type of phrases

* Eradicate 'note that' type of phrases

* Eradicate 'in order to' type of phrases

* Redirect to official Chef and Puppet docs

* Eradicate gratuitous 'please'

* Reduce use of e.g.

* Reduce use of i.e.

* Reduce use of N.B.

* Get rid of 'sexagesimal' and correct some errors
2018-01-25 17:37:23 -08:00
gbarr01 22852c0b21 Update seccomp note and remove ref to Fedora 22 2018-01-02 17:13:00 -08:00
Misty Stanley-Jones 60286e718b
Clarify where signing and verification happen (#5149) 2017-11-10 15:26:35 -08:00
Misty Stanley-Jones 91e75c3871
Add content about antivirus (#5152) 2017-11-06 14:32:08 -08:00
Joao Fernandes 9598524ad8
Add line breaks to code snippets (#5166) 2017-10-30 16:59:11 -07:00
Gwendolynne Barr 19daed2099 Repair append redirection (#4784) 2017-10-04 15:53:47 -07:00
Tycho Andersen 972cb35179 security: remove blurb about userns conflicting with r/o (#4396)
As of
66eb2a3e8f
in runc, this is no longer true (in fact, it was never true; the problem
was a bug in runc, not a kernel check). Let's remove it.

Signed-off-by: Tycho Andersen <tycho@docker.com>
2017-09-26 20:49:43 -07:00
James Mills ee0881286b Make dockremap and testuser uid/gid match (#4667)
This example is leading to confusion when folks populate /etc/sub{g,u}id with dockremap:231072:65536 instead of testuser:231072:65536.  Step 4 (verification) of "Enable userns-remap on the daemon" doesn't match if the dockremap uid/gid is used.
2017-09-19 11:33:08 -07:00
Muyiwa Iyowu 5005c9521c append to extfile.cnf (#4541)
Append "extendedKeyUsage = clientAuth" to the openssl config file instead of replacing it.
2017-09-11 17:04:56 -07:00
Wang Jie fb870c0f52 Update userns-remap.md (#4534) 2017-09-11 17:03:25 -07:00
Wang Jie 8535b0f07d Update seccomp.md (#4518) 2017-09-11 17:00:00 -07:00
Wang Jie f238686fd7 Update security.md (#4460) 2017-09-11 09:49:36 -07:00
EvdokimovN 7aa166e698 Typo in example command (#4580)
Configuration file should be extended with new key-valye instead of overwritten by it
2017-09-11 09:40:55 -07:00
Wang Jie 7884184388 Update deploying_notary.md (#4461)
* Update deploying_notary.md

* No '$' on one-line CLI snippets pls!
2017-09-05 14:24:37 -07:00
Tycho Andersen 876bdfeaa7 add two little auth docs blurbs (#4405) 2017-08-29 14:23:56 -07:00
Misty Stanley-Jones fe90c11382 Fix some 404s (#4281) 2017-08-18 14:14:42 -07:00
Pierre Carru 2454ab8b7f Typo (#3869)
user ->use
2017-07-12 11:54:49 -07:00
Deborah Gertrude Digges ce4a5a4ecd Update security.md (#3777)
- Update broken link
- Fix Typo in security.md
2017-07-05 16:47:15 -07:00
Misty Stanley-Jones 17e1da077b Tighten up base image and parent image terminology (#3720) 2017-06-28 11:56:41 -07:00
Misty Stanley-Jones c1dbb5b012 Add information about userns-remap (#3678)
* Add information about userns-remap

* Split into its own topic, do some TOC magic
2017-06-26 10:14:07 -07:00
Riyaz Faizullabhoy 172e448122 fix trust env var name (#3504)
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2017-06-06 10:43:19 -07:00
Lenny Linux 9a1f99cd11 add warning class and a linebreake to the warning blogquote (#2937)
* Update fedora.md

add warning class to blogquote

* Update linux-postinstall.md

add warning class to blogquote

* Update ubuntu.md

add warning class to blogquote

* Update https.md

add warning class to blogquote

* Update swarm_manager_locking.md

add warning class to blogquote

* Update dockerlinks.md

add warning class to blogquote

* Update deploying.md

add warning class to blogquote

* Update deploying.md

add warning class to blogquote

* Update insecure.md

add warning class to blogquote

* Update discovery.md

add warning class to blogquote

* Update dockerd.yaml

add warning class to blogquote

* Update docker_secret_rm.yaml

add warning class to blogquote

* Update docker_service_rm.yaml

add warning class to blogquote

* Update docker_secret_rm.yaml

add warning class to blogquote

* Update scale-your-cluster.md

add warning class to blogquote

* Update resource_constraints.md

add warning class to blogquote

* Update binaries.md

add warning class to blogquote

* Update content_trust.md

add warning class to blogquote

* Update secrets.md

add warning class to blogquote

* Update index.md

add warning class to blogquote

* Update install-sandbox-2.md

add warning class to blogquote

* Update docker-toolbox.md

add warning class to blogquote

* Update index.md

add warning class to blogquote

* Update centos.md

add warning class to blogquote

* Update debian.md

add warning class to blogquote

* Update faqs.md

add linebreak after Looking for popular FAQs on Docker for Windows?

* Update install.md

add linebreake after **Already have Docker for Windows?**

* Revert "Update dockerd.yaml"

This reverts commit 3a98eb86f700ade8941483546c33f69a9dab8ac3.

* Revert "Update docker_secret_rm.yaml"

This reverts commit 5dc1e75f37033932486c11287052b7d64bf83e55.

* Revert "Update docker_service_rm.yaml"

This reverts commit a983380a5625b471f1a03f8ed2301ead72f98f1b.

* Revert "Update docker_secret_rm.yaml"

This reverts commit 4c454b883c300e26fbb056b954bb49ec2933b172.
2017-04-25 11:33:27 -07:00
Bill a3a7ae1e0b replaced docker/docker with moby/moby (#2879)
* replaced docker/docker with moby/moby

* fixed incorrect name changes in release notes

* fixed mentions of moby/moby in code
2017-04-20 15:32:18 -05:00
Cory Locklear e0ff65e6c9 Provide a bit more context around where commands should be executed. Fixes #995. (#2920) 2017-04-20 14:24:45 -05:00
Jesse Adametz 5787368f1f Fixes links to Notary repository (#2840) 2017-04-18 13:58:19 -05:00
Misty Stanley-Jones 730ec4717d Document new rules for seccomp profile 2017-04-05 17:45:44 -07:00
Anh e9b5e56bbe Update https.md (#2594) 2017-04-03 15:27:13 -07:00
Scott Stientjes 7dcc7469b0 Update content_trust.md
Removed "Using default tag: latest" from sample command output.  The testing tag was specified in the command, so it would not being using the default tag.
2017-03-23 14:54:43 -07:00
Misty Stanley-Jones fb7c73908b Update the styleguide (#2332)
* Update the styleguide

Also normalize admonition titles with the colon outside the bold.
2017-03-15 09:46:30 -07:00
Roman Vynar 504fdf9295 Fix the command for generating content trust delegation cert. (#2163) 2017-03-08 14:29:36 -08:00
Wang Jie 670a2d580a Update content_trust.md (#1912)
* Update content_trust.md
2017-03-01 14:30:00 -08:00
Wang Jie 63bd8f6d41 Update trust_key_mng.md (#1883)
* Update trust_key_mng.md

* Update trust_key_mng.md

I don‘t know how the whitespace appears, and it seems that it appears because something happened related to its original format (right-aligned pipe characters) and my change. Still unknown. 

Now I've deleted some redundant whitespace.

* Update 

I don‘t know how the whitespace appears, and it seems that it appears because something happened related to its original format (right-aligned pipe characters) and my change. Still unknown. 

Now I've deleted some redundant whitespace.
2017-03-01 14:27:47 -08:00
Misty Stanley-Jones 9122e75ca5 Merge pull request #1877 from scjane/patch-38
Update apparmor.md
2017-03-01 14:26:37 -08:00
Wang Jie 1e03ea30b2 Update trust_sandbox.md (#2000)
Should it be "Now, you xxx" or "Now that you xxx"?
2017-02-27 12:59:15 -08:00
scjane 41d57e3ba0 Update trust_sandbox.md (#1966)
Added a colon (:). But I'm not sure whether a period (.) is more appropriate here.
2017-02-24 13:53:39 -08:00
Tim H d636c8781d Add troubleshooting tip for default https port
Rename the CA certificate file to ca.crt: It is not the cert of the server, but of the CA.
2017-02-23 13:42:51 +01:00
scjane 39eb8edf8a Update apparmor.md
Fixed the indentation for the codeblock (indented by 4 spaces). Thank you for your careful review.
2017-02-23 14:03:06 +08:00
Misty Stanley-Jones 7b24cef2c1 Merge pull request #1880 from scjane/patch-40
Update seccomp.md
2017-02-22 10:08:41 -08:00
scjane e55d2893bf Update trust_delegation.md (#1866)
* Update trust_delegation.md

Fix subject-pronoun disaggrement.
2017-02-22 09:51:49 -08:00
scjane 80483cd487 Update seccomp.md (#1879) 2017-02-21 18:50:42 -08:00
scjane 76754d2502 Update trust_sandbox.md 2017-02-21 11:41:50 -08:00
scjane ff4a20f18e Update trust_key_mng.md 2017-02-21 11:34:19 -08:00
scjane b1cd25ff94 Update trust_key_mng.md 2017-02-21 11:33:38 -08:00
scjane 1dc6441a6a Update seccomp.md 2017-02-21 16:15:53 +08:00
scjane 3f293f1060 Update apparmor.md
I'm a little confused about which one is better to be used here, a period (.) or a colon (:),  as a command is given below. Or both are OK, and we only have to keep consistency in a single page.
2017-02-21 15:24:40 +08:00
scjane d709c6c68c Update trust_sandbox.md (#1872) 2017-02-20 03:08:10 -08:00
scjane 33fdf82c32 Update trust_sandbox.md (#1871) 2017-02-20 03:07:44 -08:00
scjane 866aeebd88 Update trust_delegation.md (#1864) 2017-02-20 03:05:51 -08:00
scjane 6b2f5cc8eb Update content_trust.md (#1861) 2017-02-20 03:05:23 -08:00
scjane d98ad39ee9 Update content_trust.md (#1860) 2017-02-20 03:04:44 -08:00
scjane 14ee5d6515 Update certificates.md (#1859) 2017-02-20 03:04:03 -08:00
scjane 69aedaf28a Update security.md (#1858) 2017-02-20 03:03:26 -08:00
scjane a7773cd9e9 Update trust_delegation.md (#1863) 2017-02-20 03:02:46 -08:00
scjane 4a950fb6f3 Update trust_delegation.md (#1865)
Quotation marks deleted to keep the style for links consistent on this page and conform to the conventions about "Link" described in "Style guide for Docker documentation" . (Another link on this page is "For more detailed information about how to use Notary outside of the default Docker Content Trust use cases, please refer to the Notary CLI documentation.")
2017-02-20 02:59:56 -08:00
scjane 59535b9524 Update deploying_notary.md (#1867)
Add an ending period for step 1 as it is a complete setence and step 2 and step 3 both end with a period.
2017-02-20 02:50:41 -08:00
scjane 6a3651b393 Update trust_delegation.md (#1868) 2017-02-20 02:50:11 -08:00
scjane 173e9611d8 Update trust_key_mng.md (#1869) 2017-02-20 02:49:43 -08:00
scjane ae2d431d3d Update trust_key_mng.md (#1870) 2017-02-20 02:49:20 -08:00
Misty Stanley-Jones 79a97249a7 Added some redirects (#1294) 2017-01-20 11:24:36 -08:00
Sebastiaan van Stijn d2826a8995 Add engine changes that were lost in syncing
When syncing docs from the docker/docker repository (e4bce35ac2)
some commits were not included. This includes those changes, by copying the documentation from

8658748ef7,
which is the last commit before the docs were removed from the docker/docker
repository in 29f08cf49b

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2017-01-19 10:16:52 -08:00
Sebastiaan van Stijn 8f8b4a25fe Remove Ubuntu 15.10 Wily Werewolf
As of July 28, 2016, Ubuntu 15.10 is officially EOL
(https://lists.ubuntu.com/archives/ubuntu-announce/2016-July/000210.html),
and will receive no further updates.

Support for 15.10 was removed in Docker 1.13 through
https://github.com/docker/docker/pull/27042

(e9a8105708)

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2017-01-19 10:16:51 -08:00
Derek McGowan 10590cfc4b Update note about custom certs with system certs
Fixed incorrect statement about example layout

Related to https://github.com/docker/docker/pull/27918

Signed-off-by: Derek McGowan <derek@mcgstyle.net> (github: dmcgowan)
2017-01-19 10:16:51 -08:00
Christopher Jones 4e2241748e update apparmor documentation to reflect changes in 1.13.0
Updates the apparmor docs to reflect recent changes, specifically that
we are no longer saving to /etc/apparmor.d/. Also removes the seccomp
profile and instead links to the generating template.

Signed-off-by: Christopher Jones <tophj@linux.vnet.ibm.com>
2017-01-19 10:12:41 -08:00
Misty Stanley-Jones e3a3145cd9 Sync vnext-engine branch to docker/docker SHA 2f12d2808464dcfdf45e0920fd508ce0ff12bd29
This branch will contain forward-looking Engine-specific docs
and be the equivalent of docker/docker master for docs
2017-01-19 10:10:15 -08:00
Peter Dave Hello 5919563eb8 Lossless Image optimization (#959)
* re-compress jpg images losslessly using jpegoptim

* re-compress png images losslessly using zopflipng
2016-12-21 11:12:13 -08:00
Thomas JOUANNOT d917992df0 Update certificates.md
seems like the certificate directory on the client has to include the port to work
2016-12-08 16:20:57 +01:00
Trapier Marshall 04f4cef524 correct typo in engine securitydoc (#809) 2016-12-06 16:38:01 -08:00
Misty Stanley-Jones a9e535f3bd Merge pull request #610 from fbouliane/add-dns-host-to-instructions
Add DNS SubjectAltName to certificate recipe
2016-11-28 11:59:16 -08:00
Riyaz Faizullabhoy 4725674a2f Pin notary-server to v0.4.2
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-11-17 14:11:56 -08:00
Félix Bouliane 71368b49c3 Add DNS SubjectAltName to certificate recipe
If a SubjectAltName is present, the certificates CommonName should be
discarded by the clients. This ensure that people following the guide
generates valid certificates.
2016-11-16 17:59:59 -05:00
Gaetan a5e01e1844 fix type of keywords entry in frontmatter (in /engine/) (#552)
keywords should be a string, not an array containing one string

Signed-off-by: Gaetan de Villele <gdevillele@gmail.com>
2016-11-11 14:45:24 -08:00
Gaetan 57b45d5f8d fix duplicated page titles (#512)
this also breaks page consistency, regarding anchor links (see #510)

Signed-off-by: Gaetan de Villele <gdevillele@gmail.com>
2016-11-09 16:35:33 -08:00
Misty Stanley-Jones eb5c8670bc Change instances of alias: to redirect_from:
Signed-off-by: Misty Stanley-Jones <misty@docker.com>
2016-11-04 17:07:02 -07:00
John Mulhausen 558314bf56 Converges titles to imperative-form, front-matter based, and sentence-case (#438)
Multiple title fixes, consistency fixes, convergence into metadata-based titles.
2016-11-04 15:38:40 -07:00
Misty Stanley-Jones 1a193d749b Revert "Merge pull request #437 from gdevillele/fix_keywords_format"
This reverts commit 13ddc1350e, reversing
changes made to 7a11f05943.
2016-11-04 13:33:29 -07:00
Gaetan 8bb4d6226a fix more frontmatter keywords values (#439)
* fix format of frontmatter keyword entry in some .md files

Signed-off-by: Gaetan de Villele <gdevillele@gmail.com>
2016-11-04 10:48:38 -07:00
Adrien Duermael 8fa5f3a5de absolute links to docs.docker.com are now relative links
Signed-off-by: Adrien Duermael <adrien@duermael.com>
2016-11-01 17:01:41 -07:00
John Mulhausen 66c34857a6 Fixes #393 2016-10-31 16:09:06 -07:00
Sebastiaan van Stijn 109a25c230 Merge pull request #366 from riyazdf/dirty-cow
Add dirty COW security event
2016-10-29 00:58:27 -07:00
Riyaz Faizullabhoy 196a1886b7 dirty COW security event
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-10-29 00:11:33 -07:00
Thomas Sjögren 05e7b79da0 add L62-L77
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2016-10-27 11:26:33 +02:00
Thomas Sjögren a61c5998f1 remove line numbers from caps link
Signed-off-by: Thomas Sjögren <konstruktoid@users.noreply.github.com>
2016-10-21 15:23:36 +02:00
Misty Stanley-Jones 01910ab6d9 Update branding for macOS
Apple has changed their branding guidelines from 'OS X' to 'macOS'
so we should update ours to be within trademark / branding
guidelines. See http://www.apple.com/macos/sierra/

Signed-off-by: Misty Stanley-Jones <misty@docker.com>
2016-10-18 09:21:09 -07:00
yuexiao-wang adbe6d1dac Fix the command and typo for trust_sandbox
Signed-off-by: yuexiao-wang <wang.yuexiao@zte.com.cn>
2016-10-14 17:35:13 +08:00
Misty Stanley-Jones e916f7f88e Change 'draft: true' to 'published: false' for Jekyll 2016-10-10 16:19:47 -07:00
John Mulhausen d6794bf9fc Update trust_sandbox.md 2016-10-06 22:25:54 -07:00
Matthew Lapworth 6129e9d3f9
Updated documentation on using the trust sandbox to fix an issue where the notary server tag was not found.
Signed-off-by: Matthew Lapworth <matthewl@bit-shift.net>
2016-10-05 21:15:45 -07:00
John Mulhausen 5389e6cb12 Update https.md 2016-10-05 16:07:08 -07:00
John Mulhausen a0ee6c6004 Rendering fixes, part 1 (up through cs-engine) 2016-09-30 19:38:30 -07:00
John Mulhausen 066b78bf86 Content rendering fixes 2016-09-30 01:51:56 -07:00
Misty Stanley-Jones d53c6798c9 Convert TOML to YAML, tweaks to work with Jekyll 2016-09-29 17:16:03 -07:00
Misty Stanley-Jones 9d5e59d503 Moved engine imported docs to the engine subdirectory 2016-09-29 11:19:31 -07:00