Commit Graph

210 Commits

Author SHA1 Message Date
Marc Nimmerrichter 27e529ce3e
Update content_trust.md
Make it clear that DCT does not protect against layer tampering on the docker host.
2020-01-20 18:02:41 +01:00
Sebastiaan van Stijn 91c5d19a14
Merge pull request #9662 from pjbgf/patch-2
Remove ptrace from blocked syscalls
2019-12-03 16:28:20 +01:00
Paulo Gomes 9c2520fa27
Fix table 2019-11-28 12:33:15 +00:00
Paulo Gomes 1962410b61
Corrections based on feedback 2019-11-28 12:30:44 +00:00
Paulo Gomes 432b7c4134
Improve clarity. 2019-11-28 09:06:03 +00:00
Akihiro Suda 40747fcca7 Add "Run the Docker daemon as a non-root user (Rootless mode)"
Add "Run the Docker daemon as a non-root user (Rootless mode)":
`engine/security/rootless.md`

The content is based on https://github.com/moby/moby/blob/master/docs/rootless.md

`rootless.md` in `moby/moby` will be replaced of the link to
the `docs.docker.com` page compiled from `rootless.md` in this repo.

Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
2019-11-15 16:02:08 +09:00
Paulo Gomes 2adcf3bd66
Add minKernel details for ptrace
Changes brought up by commit:

1124543ca8 (diff-0ebf5796a57d68894d5550c407061035)
2019-10-29 14:51:22 +00:00
Paulo Gomes 5c0c1eed40
Remove ptrace from blocked syscalls
Update documentation to reflect that ptrace is no longer blocked on the default profile.

More information:
1124543ca8 (diff-0ebf5796a57d68894d5550c407061035)
2019-10-17 09:59:47 +01:00
Paulo Gomes d32f93ca93
Remove reference to socket and socketcall 2019-10-17 09:53:28 +01:00
Paulo Gomes 04b5f87b28
Remove socket from blocked syscalls
Socket syscalls are no longer blocked on the default profile for a while now. More information: 
dcf2632945 (diff-0ebf5796a57d68894d5550c407061035)
2019-10-17 09:44:40 +01:00
Sujay Pillai 1a684b91a1 Updated userns-remap.md (#9629)
Updated the links to solve https://github.com/docker/docker.github.io/issues/9419
2019-10-14 10:54:24 -07:00
Adrian Plata b25ec58b72 Add DCT Linux note
Signed-off-by: Adrian Plata <adrian.plata@docker.com>
2019-10-10 16:18:43 -07:00
Dawn W e5c4444db8
Merge pull request #9038 from AkihiroSuda/patch-11
Strongly recommend TLS for API socket
2019-07-23 11:18:40 -07:00
ollypom 4524319333
Merge branch 'master' into amberjack 2019-07-19 14:23:33 +00:00
Akihiro Suda b690a3213d
Strongly recommend TLS for API socket 2019-07-09 15:45:10 +09:00
Olly P 9878f22b17
Formatting nit 2019-07-02 10:00:19 +01:00
nirajrules db7d8d4b3f
The notary config file had a comma missing
Docker SA from South East
2019-07-01 18:23:21 -04:00
Jameson Hyde e7d69b14a7 Include service support for DCT in engine (#1177)
Signed-off-by: Jameson Hyde <jameson.hyde@docker.com>
2019-06-13 12:50:35 -07:00
Akihiro Suda 2778995f15
Fix dockremap calculation 2019-06-12 19:13:34 +09:00
Rajasekharan Vengalil a43165a37c
Remove redundant "be" 2019-04-06 13:57:06 -07:00
Maria Bermudez c3b0c02153
Audit branch (#8564)
* Update trust-with-remote-ucp.md

* Fix link texts

* Addresses 8446

* Update trust_delegation.md

* - Addresses 8446
- Cleans up broken links
- Fixes vague link texts

Addresses 8446

Update trust_delegation.md

* Update running_ssh_service.md

* Update running_ssh_service.md

Fixed formatting and wording. Also moved note above the code.

* Update running_ssh_service.md

Fixed typo.

* Compose: Update build docs, Add --quiet flag

* Fix destroy reference page link

Relates to https://github.com/docker/docker.github.io/pull/8441

* Rephrase Ubuntu 14.04 note

* Revert "Compose: Update build docs, Add --quiet flag"

* # This is a combination of 4 commits.
# This is the 1st commit message:

- Addresses 8446
- Cleans up broken links
- Fixes vague link texts

Addresses 8446

Update trust_delegation.md

# This is the commit message #2:

# This is a combination of 2 commits.
# This is the 1st commit message:

- Addresses 8446
- Cleans up broken links
- Fixes vague link texts

Addresses 8446

Update trust_delegation.md

# This is the commit message #2:

Update trust-with-remote-ucp.md
# This is the commit message #3:

- Addresses 8446
- Cleans up broken links
- Fixes vague link texts

# This is the commit message #4:

Fix destroy reference page link

Relates to https://github.com/docker/docker.github.io/pull/8441

* - Addresses 8446
- Cleans up broken links
- Fixes vague link texts

* Addresses 8446 with text and link cleanup.

* Update syntax language from none to bash

* Update index.md
2019-04-01 14:45:04 -04:00
Wang Jie 8a8ea7d666
Update seccomp.md 2019-03-25 09:35:26 +08:00
Maria Bermudez 7ddb16f25e
Merge pull request #8492 from scjane/patch-117
Update trust_sandbox.md
2019-03-20 19:30:42 -04:00
Maria Bermudez d4bc0df73c
Merge pull request #8491 from scjane/patch-116
Update trust_key_mng.md
2019-03-20 19:30:08 -04:00
Maria Bermudez 97abe99850
Merge pull request #8490 from scjane/patch-115
Update trust_automation.md
2019-03-20 19:29:30 -04:00
Wang Jie 1ade15fa72
Update trust_sandbox.md 2019-03-20 10:58:43 +08:00
Wang Jie 882216b114
Update trust_key_mng.md 2019-03-20 10:45:19 +08:00
Wang Jie ac03de9586
Update trust_automation.md 2019-03-20 10:30:02 +08:00
Wang Jie af6ad4fd99
Update content_trust.md 2019-03-20 10:05:15 +08:00
Wang Jie c28b4a6c4a
Update certificates.md 2019-03-15 11:11:05 +08:00
Maria Bermudez a7c76f2012
Add DTR Content trust page to related links 2019-03-14 10:09:14 -07:00
Maria Bermudez 13430936b3
Addresses 8446 2019-03-13 16:55:46 -07:00
Maria Bermudez 9cff41abd5
Merge pull request #8438 from scjane/patch-112
Update https.md
2019-03-11 11:53:41 -07:00
Maria Bermudez ef9779fe27
Update trust_delegation.md 2019-03-11 10:02:11 -07:00
Wang Jie 46cd211d3f
Update https.md 2019-03-11 14:15:56 +08:00
ollypom ed7513b2ef
Docker Client Registry URL patch 2019-03-09 19:53:07 +00:00
Maria Bermudez e0807ed29c
Merge pull request #8426 from ollypom/contenttrustpatch
Updated Content Trust Docs
2019-03-08 15:49:51 -08:00
Maria Bermudez f9c29e2125
Editorial review 2019-03-08 15:49:29 -08:00
Maria Bermudez ccbb5e2630 Revert "Revert "Merge branch 'master' of github.com:docker/docker.github.io""
This reverts commit 4b5fbbdbc9.
2019-03-08 10:53:00 -08:00
ollypom 9a00acab84
Using Docker Trust with a Notary Server with Auth 2019-03-08 16:23:06 +00:00
ollypom eb68c3d408
Added Docker Pull to the content trust verification process 2019-03-08 16:11:02 +00:00
Paige Hargrave 4b5fbbdbc9 Revert "Merge branch 'master' of github.com:docker/docker.github.io"
This reverts commit 813f45bdd7, reversing
changes made to 2349c62566.
2019-02-28 13:11:13 -05:00
L-Hudson 2234622d5f
Merge pull request #8195 from ollypom/trustwithremoteucp
Added Using DTR Trust Data with a Remote UCP
2019-02-26 07:29:42 -05:00
Eric Chiang 652674a6d5 engine/security: update apparmor docs to not unload all profiles
Fixes #8289

Signed-off-by: Eric Chiang <ericchiang@google.com>
2019-02-19 15:43:50 -08:00
ollypom 80d2051937 Updated the existing DTR Trust pages from Notary CLI to DCT CLI
Signed-off-by: ollypom <oppomeroy@gmail.com>
2019-02-09 23:44:38 +00:00
Sebastiaan van Stijn 03d5b3396d
Use consistent formatting for notes
Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
2019-02-09 00:49:57 +01:00
jondkent ebbceda772
Updated as certicate as expire in documented version
The current  documentation points to use a version of notary which has an expired certicate.

Updated the version of notary_autobuilds to 0.5.1 from 0.4.2.

Change the shared volume to notarycerts:/var/lib/notary/fixtures from notarycerts:/go/src/github.com/docker/notary/fixtures  as location of certificate has changed.
2019-02-07 19:45:59 +00:00
L-Hudson 7e19d7c4d3
Update trust_delegation.md
editorial crx
2019-02-05 10:35:21 -05:00
L-Hudson 45dcde622b
Update trust_delegation.md
editorial crx
2019-02-05 10:32:55 -05:00
ollypom 7b41a19159
Updated Notary Git URL, Added a Docker Client Config Section, Expanded Trust initiated documentation 2019-02-05 11:27:17 +00:00