Commit Graph

1585 Commits

Author SHA1 Message Date
Diogo Mónica 26d3f3f92b Merge pull request #413 from endophage/fix_root_download
fixing bootstrapClient to prefer cached root
2016-01-13 15:48:39 -08:00
Diogo Mónica e8e4155005 Merge pull request #438 from endophage/db_sha256_column
adding sha256 column to tuf_files database table
2016-01-13 15:48:29 -08:00
David Lawrence 06d23e14c9 add test for invalid remote URL
add offline store for use when we can't initialize a remote store
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-01-13 15:26:57 -08:00
Diogo Mónica 8e3126dc9e Merge pull request #447 from endophage/dockerfile_rename
Dockerfile rename
2016-01-13 15:17:21 -08:00
Diogo Mónica a7e9b9b1fd Merge pull request #448 from HuKeping/broken-links
Fix broken links
2016-01-13 15:16:49 -08:00
Diogo Mónica 66397d4d40 Merge pull request #450 from mtrmac/no-mailing-list
Drop mailing list link
2016-01-13 15:16:35 -08:00
Miloslav Trmač 945be9db2e Drop mailing list link
Per today’s phone call, the mailing list is not currently used (and is closed to external contributors). So, drop the link.

Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2016-01-13 20:34:13 +01:00
HuKeping 1a7fd447fb Fix broken links
Signed-off-by: Hu Keping <hukeping@huawei.com>
2016-01-13 21:11:35 +08:00
Riyaz Faizullabhoy 1f7d16373e Merge pull request #439 from HuKeping/improve-logging
Log: improve error logging
2016-01-12 22:34:52 -08:00
HuKeping 31d79d77a3 Comment: improve some comment
To keep consistent with the comment about the interface.

Signed-off-by: Hu Keping <hukeping@huawei.com>
2016-01-13 10:33:14 +08:00
HuKeping 5968823ace Log: improve error logging
When pushing an image to Distribution server with Notary enabled at the
first time, client will try to get the root.json and it will fail since
there is nothing in Notary yet.

This patch enhances the error message by adding the error detail.
- "404 GET notary-distribution:5678/busybox:root"

Signed-off-by: Hu Keping <hukeping@huawei.com>
2016-01-13 10:33:14 +08:00
David Lawrence 3fa73e80b9 Merge pull request #443 from docker/riyaz-maintainer
Add to maintainers list
2016-01-12 18:07:34 -08:00
David Lawrence b6042d923f Merge pull request #442 from endophage/rotate_key_not_read_only
when doing getTransport readOnly needs to be false
2016-01-12 18:06:28 -08:00
David Lawrence 0350d56176 renaming dockerfiles for autobuilds
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-01-12 18:05:21 -08:00
Riyaz Faizullabhoy 6460e8b343 Add to maintainers list
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-01-11 18:00:07 -08:00
David Lawrence 5a9e06fe5c adding sha256 column to tuf_files database table
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-01-11 17:31:01 -08:00
David Lawrence 89f250c253 when doing getTransport readOnly needs to be false for a key rotation as write permissions are required to retrieve keys
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-01-11 17:25:23 -08:00
Ying Li eb115b987f Merge pull request #435 from cyli/revert-canonical-json
Revert "switching out to consistently use canonical json for all marshalling of TUF data
2016-01-08 15:48:26 -08:00
Ying Li cf4b77b760 Revert "switching out to consistently use canonical json for all marshalling of TUF data"
This reverts commit f417c834c4.

Signed-off-by: Ying Li <ying.li@docker.com>
2016-01-08 14:53:09 -08:00
Riyaz Faizullabhoy 05b490ae75 Merge pull request #433 from HuKeping/verbose
Verbose health check information
2016-01-08 11:03:44 -08:00
David Lawrence 5ced01a262 add test to confirm bootstrapClient with a bad URL errors
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-01-08 09:03:27 -08:00
David Lawrence 6d72fe7fd1 adding comment to bootstrapClient
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-01-08 09:03:27 -08:00
David Lawrence d11f11748c when we download during bootstrapClient we should save the root to cache
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-01-08 09:03:03 -08:00
David Lawrence 762c997104 fixing bootstrapClient to prefer cached root
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-01-08 09:03:03 -08:00
HuKeping 837f659e85 Add more information to health check
Prior to this patch, if the MySQL for signer down, the health check of
Server just warning out:
- "Trust not fully operational: Trust is not healthy"

Which is not enough to find the problem.

Signed-off-by: Hu Keping <hukeping@huawei.com>
2016-01-08 11:01:16 +08:00
Ying Li af40d720c0 Merge pull request #417 from cyli/misc-utilities
Add a miscellaneous script for testing docker trust functions with notary
2016-01-07 18:33:20 -08:00
David Lawrence 3900238ae9 Merge pull request #416 from endophage/no_role_config
removing the ability to configure role names.
2016-01-07 17:56:53 -08:00
David Lawrence 11795a4573 rename data.ValidRoles to data.BaseRoles
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-01-07 17:38:52 -08:00
David Lawrence d52dbde683 removing the ability to configure role names. It adds a lot of complexity without adding much value. If somebody wants custom role names they can implement it at the display level
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-01-07 17:38:05 -08:00
David Lawrence 160980db89 Merge pull request #428 from docker/merge-bootstrap-and-update
Combine bootstrapClient and tuf/client's Client.Update into a single Update function
2016-01-07 17:31:55 -08:00
Ying Li c1c0ccf4be Combine bootstrapClient and tuf/client's Client.Update into NotaryRepository.Update.
- it is easier to understand what's going on in the online functions of NotaryRepository
- we can test NotaryRepository.Update independently (although it'd be nice to have some way
  of ensuring that the actual public functions of NotaryRepository like ListTargets,
  GetTargetByName, and Publish actually calls Update.
- distinct error if the remote repo doesn't exist.

This also stops wrapping signed.ErrExpired in client.ErrExpired, and just passes
signed.ErrExpired on directly.

Signed-off-by: Ying Li <ying.li@docker.com>
2016-01-07 16:58:46 -08:00
David Lawrence cf57eaa511 Merge pull request #419 from docker/errmeta-message
improve message for ErrMetaNotFound
2016-01-07 16:47:01 -08:00
David Lawrence 7992a7da3d Merge pull request #429 from endophage/json_logs
using JSON logging format
2016-01-07 11:53:48 -08:00
David Lawrence 13eaaf1a22 Merge pull request #426 from endophage/canonical_json
use canonical json for all marshalling of TUF data
2016-01-07 11:36:02 -08:00
Riyaz Faizullabhoy 320d565f3b Merge pull request #427 from docker/delegation-var
Move regex compilation to outside var for optimization
2016-01-07 09:50:47 -08:00
Riyaz Faizullabhoy a64ffd4ae9 Move regex compilation to outside var for optimization
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-01-07 09:26:04 -08:00
Ying Li aff9eb929a Merge pull request #430 from HuKeping/dockerfile
Fix the exposed port in Dockerfile
2016-01-07 09:16:43 -08:00
Ying Li e920e90b1f Merge pull request #432 from useidel/master
added /usr/lib64 to search paths
2016-01-07 09:10:44 -08:00
Udo Seidel f1067998f6 added /usr/lib64 to search paths
Signed-off-by: Udo Seidel <udoseidel@gmx.de>
2016-01-07 11:56:22 +01:00
HuKeping 9822c6d9be Fix the exposed port in Dockerfile
4443 is default used by Server and 4444 is for Signer.

Signed-off-by: Hu Keping <hukeping@huawei.com>
2016-01-07 09:42:28 +08:00
David Lawrence b56372a1d8 using JSON logging format for notary server and signer for easier integration with backend metrics platforms
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-01-06 17:09:38 -08:00
Riyaz Faizullabhoy c826329d66 improve message for ErrMetaNotFound
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-01-06 11:50:43 -08:00
David Lawrence 02ec86cd1b adding testify/require dependency
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-01-06 11:39:55 -08:00
David Lawrence f417c834c4 switching out to consistently use canonical json for all marshalling of TUF data
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-01-06 11:15:27 -08:00
Ying Li cc03297c77 Merge pull request #418 from HuKeping/prompt
Fix here document
2016-01-06 11:04:21 -08:00
Ying Li 6a45508107 Add a miscellaneous script for testing docker trust functions with notary.
Signed-off-by: Ying Li <ying.li@docker.com>
2016-01-06 10:46:07 -08:00
Ying Li f211b1826d Merge pull request #421 from justincormack/arm
Update jose2go to latest to fix #239
2016-01-06 08:39:37 -08:00
Justin Cormack 00efd4a4c9 Update jose2go to latest to fix #239
This seems to have never been applied; fixes Arm build

Signed-off-by: Justin Cormack <justin.cormack@unikernel.com>
2016-01-06 14:04:25 +00:00
HuKeping 39701bc858 Fix here document
It seems the prompt doesn't work here.

Signed-off-by: Hu Keping <hukeping@huawei.com>
2016-01-06 14:46:06 +08:00
Diogo Mónica 30c488b3b4 Merge pull request #393 from docker/path-fix
use path instead of filepath to express TUF roles
2016-01-04 19:26:13 -08:00