Commit Graph

1379 Commits

Author SHA1 Message Date
Miloslav Trmač 945be9db2e Drop mailing list link
Per today’s phone call, the mailing list is not currently used (and is closed to external contributors). So, drop the link.

Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2016-01-13 20:34:13 +01:00
HuKeping 1a7fd447fb Fix broken links
Signed-off-by: Hu Keping <hukeping@huawei.com>
2016-01-13 21:11:35 +08:00
Riyaz Faizullabhoy 1f7d16373e Merge pull request #439 from HuKeping/improve-logging
Log: improve error logging
2016-01-12 22:34:52 -08:00
HuKeping 31d79d77a3 Comment: improve some comment
To keep consistent with the comment about the interface.

Signed-off-by: Hu Keping <hukeping@huawei.com>
2016-01-13 10:33:14 +08:00
HuKeping 5968823ace Log: improve error logging
When pushing an image to Distribution server with Notary enabled at the
first time, client will try to get the root.json and it will fail since
there is nothing in Notary yet.

This patch enhances the error message by adding the error detail.
- "404 GET notary-distribution:5678/busybox:root"

Signed-off-by: Hu Keping <hukeping@huawei.com>
2016-01-13 10:33:14 +08:00
David Lawrence 3fa73e80b9 Merge pull request #443 from docker/riyaz-maintainer
Add to maintainers list
2016-01-12 18:07:34 -08:00
David Lawrence b6042d923f Merge pull request #442 from endophage/rotate_key_not_read_only
when doing getTransport readOnly needs to be false
2016-01-12 18:06:28 -08:00
David Lawrence 0350d56176 renaming dockerfiles for autobuilds
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-01-12 18:05:21 -08:00
Riyaz Faizullabhoy 6460e8b343 Add to maintainers list
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-01-11 18:00:07 -08:00
David Lawrence 5a9e06fe5c adding sha256 column to tuf_files database table
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-01-11 17:31:01 -08:00
David Lawrence 89f250c253 when doing getTransport readOnly needs to be false for a key rotation as write permissions are required to retrieve keys
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-01-11 17:25:23 -08:00
Ying Li eb115b987f Merge pull request #435 from cyli/revert-canonical-json
Revert "switching out to consistently use canonical json for all marshalling of TUF data
2016-01-08 15:48:26 -08:00
Ying Li cf4b77b760 Revert "switching out to consistently use canonical json for all marshalling of TUF data"
This reverts commit f417c834c4.

Signed-off-by: Ying Li <ying.li@docker.com>
2016-01-08 14:53:09 -08:00
Riyaz Faizullabhoy 05b490ae75 Merge pull request #433 from HuKeping/verbose
Verbose health check information
2016-01-08 11:03:44 -08:00
David Lawrence 5ced01a262 add test to confirm bootstrapClient with a bad URL errors
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-01-08 09:03:27 -08:00
David Lawrence 6d72fe7fd1 adding comment to bootstrapClient
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-01-08 09:03:27 -08:00
David Lawrence d11f11748c when we download during bootstrapClient we should save the root to cache
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-01-08 09:03:03 -08:00
David Lawrence 762c997104 fixing bootstrapClient to prefer cached root
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-01-08 09:03:03 -08:00
HuKeping 837f659e85 Add more information to health check
Prior to this patch, if the MySQL for signer down, the health check of
Server just warning out:
- "Trust not fully operational: Trust is not healthy"

Which is not enough to find the problem.

Signed-off-by: Hu Keping <hukeping@huawei.com>
2016-01-08 11:01:16 +08:00
Ying Li af40d720c0 Merge pull request #417 from cyli/misc-utilities
Add a miscellaneous script for testing docker trust functions with notary
2016-01-07 18:33:20 -08:00
David Lawrence 3900238ae9 Merge pull request #416 from endophage/no_role_config
removing the ability to configure role names.
2016-01-07 17:56:53 -08:00
David Lawrence 11795a4573 rename data.ValidRoles to data.BaseRoles
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-01-07 17:38:52 -08:00
David Lawrence d52dbde683 removing the ability to configure role names. It adds a lot of complexity without adding much value. If somebody wants custom role names they can implement it at the display level
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-01-07 17:38:05 -08:00
David Lawrence 160980db89 Merge pull request #428 from docker/merge-bootstrap-and-update
Combine bootstrapClient and tuf/client's Client.Update into a single Update function
2016-01-07 17:31:55 -08:00
Ying Li c1c0ccf4be Combine bootstrapClient and tuf/client's Client.Update into NotaryRepository.Update.
- it is easier to understand what's going on in the online functions of NotaryRepository
- we can test NotaryRepository.Update independently (although it'd be nice to have some way
  of ensuring that the actual public functions of NotaryRepository like ListTargets,
  GetTargetByName, and Publish actually calls Update.
- distinct error if the remote repo doesn't exist.

This also stops wrapping signed.ErrExpired in client.ErrExpired, and just passes
signed.ErrExpired on directly.

Signed-off-by: Ying Li <ying.li@docker.com>
2016-01-07 16:58:46 -08:00
David Lawrence cf57eaa511 Merge pull request #419 from docker/errmeta-message
improve message for ErrMetaNotFound
2016-01-07 16:47:01 -08:00
David Lawrence 7992a7da3d Merge pull request #429 from endophage/json_logs
using JSON logging format
2016-01-07 11:53:48 -08:00
David Lawrence 13eaaf1a22 Merge pull request #426 from endophage/canonical_json
use canonical json for all marshalling of TUF data
2016-01-07 11:36:02 -08:00
Riyaz Faizullabhoy 320d565f3b Merge pull request #427 from docker/delegation-var
Move regex compilation to outside var for optimization
2016-01-07 09:50:47 -08:00
Riyaz Faizullabhoy a64ffd4ae9 Move regex compilation to outside var for optimization
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-01-07 09:26:04 -08:00
Ying Li aff9eb929a Merge pull request #430 from HuKeping/dockerfile
Fix the exposed port in Dockerfile
2016-01-07 09:16:43 -08:00
Ying Li e920e90b1f Merge pull request #432 from useidel/master
added /usr/lib64 to search paths
2016-01-07 09:10:44 -08:00
Udo Seidel f1067998f6 added /usr/lib64 to search paths
Signed-off-by: Udo Seidel <udoseidel@gmx.de>
2016-01-07 11:56:22 +01:00
HuKeping 9822c6d9be Fix the exposed port in Dockerfile
4443 is default used by Server and 4444 is for Signer.

Signed-off-by: Hu Keping <hukeping@huawei.com>
2016-01-07 09:42:28 +08:00
David Lawrence b56372a1d8 using JSON logging format for notary server and signer for easier integration with backend metrics platforms
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-01-06 17:09:38 -08:00
Riyaz Faizullabhoy c826329d66 improve message for ErrMetaNotFound
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-01-06 11:50:43 -08:00
David Lawrence 02ec86cd1b adding testify/require dependency
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-01-06 11:39:55 -08:00
David Lawrence f417c834c4 switching out to consistently use canonical json for all marshalling of TUF data
Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage)
2016-01-06 11:15:27 -08:00
Ying Li cc03297c77 Merge pull request #418 from HuKeping/prompt
Fix here document
2016-01-06 11:04:21 -08:00
Ying Li 6a45508107 Add a miscellaneous script for testing docker trust functions with notary.
Signed-off-by: Ying Li <ying.li@docker.com>
2016-01-06 10:46:07 -08:00
Ying Li f211b1826d Merge pull request #421 from justincormack/arm
Update jose2go to latest to fix #239
2016-01-06 08:39:37 -08:00
Justin Cormack 00efd4a4c9 Update jose2go to latest to fix #239
This seems to have never been applied; fixes Arm build

Signed-off-by: Justin Cormack <justin.cormack@unikernel.com>
2016-01-06 14:04:25 +00:00
HuKeping 39701bc858 Fix here document
It seems the prompt doesn't work here.

Signed-off-by: Hu Keping <hukeping@huawei.com>
2016-01-06 14:46:06 +08:00
Diogo Mónica 30c488b3b4 Merge pull request #393 from docker/path-fix
use path instead of filepath to express TUF roles
2016-01-04 19:26:13 -08:00
Diogo Mónica 2dfd22dbef Merge pull request #401 from cyli/list-targets-lists-role
When listing targets, the role the target belongs to is also listed
2016-01-04 19:18:38 -08:00
Ying Li 61bbf7be49 Change ListTargetes and GetTargetsByName to return TargetWithRole.
This object has both the target and the role in which the target was found.

Signed-off-by: Ying Li <ying.li@docker.com>
2016-01-04 17:15:44 -08:00
Riyaz Faizullabhoy 53bf7a943f Merge pull request #394 from docker/style-cleanup
fix up style according to comments
2016-01-04 16:35:41 -08:00
Riyaz Faizullabhoy 077c28b65d Use path operation for delegation role check, update RoleTargetsPath to
use path for role name URL

Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-01-04 16:23:02 -08:00
Riyaz Faizullabhoy dbb8c1065f use path instead of filepath to express TUF roles
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-01-04 16:23:02 -08:00
Riyaz Faizullabhoy a1178bfc96 improved slice copying and appending
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com>
2016-01-04 16:20:19 -08:00