945be9db2e 
								
							 
						 
						
							
							
								
								Drop mailing list link  
							
							... 
							
							
							
							Per today’s phone call, the mailing list is not currently used (and is closed to external contributors). So, drop the link.
Signed-off-by: Miloslav Trmač <mitr@redhat.com> 
							
						 
						
							2016-01-13 20:34:13 +01:00  
				
					
						
							
							
								 
						
							
								1a7fd447fb 
								
							 
						 
						
							
							
								
								Fix broken links  
							
							... 
							
							
							
							Signed-off-by: Hu Keping <hukeping@huawei.com> 
							
						 
						
							2016-01-13 21:11:35 +08:00  
				
					
						
							
							
								 
						
							
								1f7d16373e 
								
							 
						 
						
							
							
								
								Merge pull request  #439  from HuKeping/improve-logging  
							
							... 
							
							
							
							Log: improve error logging 
							
						 
						
							2016-01-12 22:34:52 -08:00  
				
					
						
							
							
								 
						
							
								31d79d77a3 
								
							 
						 
						
							
							
								
								Comment: improve some comment  
							
							... 
							
							
							
							To keep consistent with the comment about the interface.
Signed-off-by: Hu Keping <hukeping@huawei.com> 
							
						 
						
							2016-01-13 10:33:14 +08:00  
				
					
						
							
							
								 
						
							
								5968823ace 
								
							 
						 
						
							
							
								
								Log: improve error logging  
							
							... 
							
							
							
							When pushing an image to Distribution server with Notary enabled at the
first time, client will try to get the root.json and it will fail since
there is nothing in Notary yet.
This patch enhances the error message by adding the error detail.
- "404 GET notary-distribution:5678/busybox:root"
Signed-off-by: Hu Keping <hukeping@huawei.com> 
							
						 
						
							2016-01-13 10:33:14 +08:00  
				
					
						
							
							
								 
						
							
								3fa73e80b9 
								
							 
						 
						
							
							
								
								Merge pull request  #443  from docker/riyaz-maintainer  
							
							... 
							
							
							
							Add to maintainers list 
							
						 
						
							2016-01-12 18:07:34 -08:00  
				
					
						
							
							
								 
						
							
								b6042d923f 
								
							 
						 
						
							
							
								
								Merge pull request  #442  from endophage/rotate_key_not_read_only  
							
							... 
							
							
							
							when doing getTransport readOnly needs to be false 
							
						 
						
							2016-01-12 18:06:28 -08:00  
				
					
						
							
							
								 
						
							
								0350d56176 
								
							 
						 
						
							
							
								
								renaming dockerfiles for autobuilds  
							
							... 
							
							
							
							Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage) 
							
						 
						
							2016-01-12 18:05:21 -08:00  
				
					
						
							
							
								 
						
							
								6460e8b343 
								
							 
						 
						
							
							
								
								Add to maintainers list  
							
							... 
							
							
							
							Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com> 
							
						 
						
							2016-01-11 18:00:07 -08:00  
				
					
						
							
							
								 
						
							
								5a9e06fe5c 
								
							 
						 
						
							
							
								
								adding sha256 column to tuf_files database table  
							
							... 
							
							
							
							Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage) 
							
						 
						
							2016-01-11 17:31:01 -08:00  
				
					
						
							
							
								 
						
							
								89f250c253 
								
							 
						 
						
							
							
								
								when doing getTransport readOnly needs to be false for a key rotation as write permissions are required to retrieve keys  
							
							... 
							
							
							
							Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage) 
							
						 
						
							2016-01-11 17:25:23 -08:00  
				
					
						
							
							
								 
						
							
								eb115b987f 
								
							 
						 
						
							
							
								
								Merge pull request  #435  from cyli/revert-canonical-json  
							
							... 
							
							
							
							Revert "switching out to consistently use canonical json for all marshalling of TUF data 
							
						 
						
							2016-01-08 15:48:26 -08:00  
				
					
						
							
							
								 
						
							
								cf4b77b760 
								
							 
						 
						
							
							
								
								Revert "switching out to consistently use canonical json for all marshalling of TUF data"  
							
							... 
							
							
							
							This reverts commit f417c834c4 
							
						 
						
							2016-01-08 14:53:09 -08:00  
				
					
						
							
							
								 
						
							
								05b490ae75 
								
							 
						 
						
							
							
								
								Merge pull request  #433  from HuKeping/verbose  
							
							... 
							
							
							
							Verbose health check information 
							
						 
						
							2016-01-08 11:03:44 -08:00  
				
					
						
							
							
								 
						
							
								5ced01a262 
								
							 
						 
						
							
							
								
								add test to confirm bootstrapClient with a bad URL errors  
							
							... 
							
							
							
							Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage) 
							
						 
						
							2016-01-08 09:03:27 -08:00  
				
					
						
							
							
								 
						
							
								6d72fe7fd1 
								
							 
						 
						
							
							
								
								adding comment to bootstrapClient  
							
							... 
							
							
							
							Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage) 
							
						 
						
							2016-01-08 09:03:27 -08:00  
				
					
						
							
							
								 
						
							
								d11f11748c 
								
							 
						 
						
							
							
								
								when we download during bootstrapClient we should save the root to cache  
							
							... 
							
							
							
							Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage) 
							
						 
						
							2016-01-08 09:03:03 -08:00  
				
					
						
							
							
								 
						
							
								762c997104 
								
							 
						 
						
							
							
								
								fixing bootstrapClient to prefer cached root  
							
							... 
							
							
							
							Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage) 
							
						 
						
							2016-01-08 09:03:03 -08:00  
				
					
						
							
							
								 
						
							
								837f659e85 
								
							 
						 
						
							
							
								
								Add more information to health check  
							
							... 
							
							
							
							Prior to this patch, if the MySQL for signer down, the health check of
Server just warning out:
- "Trust not fully operational: Trust is not healthy"
Which is not enough to find the problem.
Signed-off-by: Hu Keping <hukeping@huawei.com> 
							
						 
						
							2016-01-08 11:01:16 +08:00  
				
					
						
							
							
								 
						
							
								af40d720c0 
								
							 
						 
						
							
							
								
								Merge pull request  #417  from cyli/misc-utilities  
							
							... 
							
							
							
							Add a miscellaneous script for testing docker trust functions with notary 
							
						 
						
							2016-01-07 18:33:20 -08:00  
				
					
						
							
							
								 
						
							
								3900238ae9 
								
							 
						 
						
							
							
								
								Merge pull request  #416  from endophage/no_role_config  
							
							... 
							
							
							
							removing the ability to configure role names. 
							
						 
						
							2016-01-07 17:56:53 -08:00  
				
					
						
							
							
								 
						
							
								11795a4573 
								
							 
						 
						
							
							
								
								rename data.ValidRoles to data.BaseRoles  
							
							... 
							
							
							
							Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage) 
							
						 
						
							2016-01-07 17:38:52 -08:00  
				
					
						
							
							
								 
						
							
								d52dbde683 
								
							 
						 
						
							
							
								
								removing the ability to configure role names. It adds a lot of complexity without adding much value. If somebody wants custom role names they can implement it at the display level  
							
							... 
							
							
							
							Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage) 
							
						 
						
							2016-01-07 17:38:05 -08:00  
				
					
						
							
							
								 
						
							
								160980db89 
								
							 
						 
						
							
							
								
								Merge pull request  #428  from docker/merge-bootstrap-and-update  
							
							... 
							
							
							
							Combine bootstrapClient and tuf/client's Client.Update into a single Update function 
							
						 
						
							2016-01-07 17:31:55 -08:00  
				
					
						
							
							
								 
						
							
								c1c0ccf4be 
								
							 
						 
						
							
							
								
								Combine bootstrapClient and tuf/client's Client.Update into NotaryRepository.Update.  
							
							... 
							
							
							
							- it is easier to understand what's going on in the online functions of NotaryRepository
- we can test NotaryRepository.Update independently (although it'd be nice to have some way
  of ensuring that the actual public functions of NotaryRepository like ListTargets,
  GetTargetByName, and Publish actually calls Update.
- distinct error if the remote repo doesn't exist.
This also stops wrapping signed.ErrExpired in client.ErrExpired, and just passes
signed.ErrExpired on directly.
Signed-off-by: Ying Li <ying.li@docker.com> 
							
						 
						
							2016-01-07 16:58:46 -08:00  
				
					
						
							
							
								 
						
							
								cf57eaa511 
								
							 
						 
						
							
							
								
								Merge pull request  #419  from docker/errmeta-message  
							
							... 
							
							
							
							improve message for ErrMetaNotFound 
							
						 
						
							2016-01-07 16:47:01 -08:00  
				
					
						
							
							
								 
						
							
								7992a7da3d 
								
							 
						 
						
							
							
								
								Merge pull request  #429  from endophage/json_logs  
							
							... 
							
							
							
							using JSON logging format 
							
						 
						
							2016-01-07 11:53:48 -08:00  
				
					
						
							
							
								 
						
							
								13eaaf1a22 
								
							 
						 
						
							
							
								
								Merge pull request  #426  from endophage/canonical_json  
							
							... 
							
							
							
							use canonical json for all marshalling of TUF data 
							
						 
						
							2016-01-07 11:36:02 -08:00  
				
					
						
							
							
								 
						
							
								320d565f3b 
								
							 
						 
						
							
							
								
								Merge pull request  #427  from docker/delegation-var  
							
							... 
							
							
							
							Move regex compilation to outside var for optimization 
							
						 
						
							2016-01-07 09:50:47 -08:00  
				
					
						
							
							
								 
						
							
								a64ffd4ae9 
								
							 
						 
						
							
							
								
								Move regex compilation to outside var for optimization  
							
							... 
							
							
							
							Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com> 
							
						 
						
							2016-01-07 09:26:04 -08:00  
				
					
						
							
							
								 
						
							
								aff9eb929a 
								
							 
						 
						
							
							
								
								Merge pull request  #430  from HuKeping/dockerfile  
							
							... 
							
							
							
							Fix the exposed port in Dockerfile 
							
						 
						
							2016-01-07 09:16:43 -08:00  
				
					
						
							
							
								 
						
							
								e920e90b1f 
								
							 
						 
						
							
							
								
								Merge pull request  #432  from useidel/master  
							
							... 
							
							
							
							added /usr/lib64 to search paths 
							
						 
						
							2016-01-07 09:10:44 -08:00  
				
					
						
							
							
								 
						
							
								f1067998f6 
								
							 
						 
						
							
							
								
								added /usr/lib64 to search paths  
							
							... 
							
							
							
							Signed-off-by: Udo Seidel <udoseidel@gmx.de> 
							
						 
						
							2016-01-07 11:56:22 +01:00  
				
					
						
							
							
								 
						
							
								9822c6d9be 
								
							 
						 
						
							
							
								
								Fix the exposed port in Dockerfile  
							
							... 
							
							
							
							4443 is default used by Server and 4444 is for Signer.
Signed-off-by: Hu Keping <hukeping@huawei.com> 
							
						 
						
							2016-01-07 09:42:28 +08:00  
				
					
						
							
							
								 
						
							
								b56372a1d8 
								
							 
						 
						
							
							
								
								using JSON logging format for notary server and signer for easier integration with backend metrics platforms  
							
							... 
							
							
							
							Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage) 
							
						 
						
							2016-01-06 17:09:38 -08:00  
				
					
						
							
							
								 
						
							
								c826329d66 
								
							 
						 
						
							
							
								
								improve message for ErrMetaNotFound  
							
							... 
							
							
							
							Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com> 
							
						 
						
							2016-01-06 11:50:43 -08:00  
				
					
						
							
							
								 
						
							
								02ec86cd1b 
								
							 
						 
						
							
							
								
								adding testify/require dependency  
							
							... 
							
							
							
							Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage) 
							
						 
						
							2016-01-06 11:39:55 -08:00  
				
					
						
							
							
								 
						
							
								f417c834c4 
								
							 
						 
						
							
							
								
								switching out to consistently use canonical json for all marshalling of TUF data  
							
							... 
							
							
							
							Signed-off-by: David Lawrence <david.lawrence@docker.com> (github: endophage) 
							
						 
						
							2016-01-06 11:15:27 -08:00  
				
					
						
							
							
								 
						
							
								cc03297c77 
								
							 
						 
						
							
							
								
								Merge pull request  #418  from HuKeping/prompt  
							
							... 
							
							
							
							Fix here document 
							
						 
						
							2016-01-06 11:04:21 -08:00  
				
					
						
							
							
								 
						
							
								6a45508107 
								
							 
						 
						
							
							
								
								Add a miscellaneous script for testing docker trust functions with notary.  
							
							... 
							
							
							
							Signed-off-by: Ying Li <ying.li@docker.com> 
							
						 
						
							2016-01-06 10:46:07 -08:00  
				
					
						
							
							
								 
						
							
								f211b1826d 
								
							 
						 
						
							
							
								
								Merge pull request  #421  from justincormack/arm  
							
							... 
							
							
							
							Update jose2go to latest to fix  #239  
							
						 
						
							2016-01-06 08:39:37 -08:00  
				
					
						
							
							
								 
						
							
								00efd4a4c9 
								
							 
						 
						
							
							
								
								Update jose2go to latest to  fix   #239  
							
							... 
							
							
							
							This seems to have never been applied; fixes Arm build
Signed-off-by: Justin Cormack <justin.cormack@unikernel.com> 
							
						 
						
							2016-01-06 14:04:25 +00:00  
				
					
						
							
							
								 
						
							
								39701bc858 
								
							 
						 
						
							
							
								
								Fix here document  
							
							... 
							
							
							
							It seems the prompt doesn't work here.
Signed-off-by: Hu Keping <hukeping@huawei.com> 
							
						 
						
							2016-01-06 14:46:06 +08:00  
				
					
						
							
							
								 
						
							
								30c488b3b4 
								
							 
						 
						
							
							
								
								Merge pull request  #393  from docker/path-fix  
							
							... 
							
							
							
							use path instead of filepath to express TUF roles 
							
						 
						
							2016-01-04 19:26:13 -08:00  
				
					
						
							
							
								 
						
							
								2dfd22dbef 
								
							 
						 
						
							
							
								
								Merge pull request  #401  from cyli/list-targets-lists-role  
							
							... 
							
							
							
							When listing targets, the role the target belongs to is also listed 
							
						 
						
							2016-01-04 19:18:38 -08:00  
				
					
						
							
							
								 
						
							
								61bbf7be49 
								
							 
						 
						
							
							
								
								Change ListTargetes and GetTargetsByName to return TargetWithRole.  
							
							... 
							
							
							
							This object has both the target and the role in which the target was found.
Signed-off-by: Ying Li <ying.li@docker.com> 
							
						 
						
							2016-01-04 17:15:44 -08:00  
				
					
						
							
							
								 
						
							
								53bf7a943f 
								
							 
						 
						
							
							
								
								Merge pull request  #394  from docker/style-cleanup  
							
							... 
							
							
							
							fix up style according to comments 
							
						 
						
							2016-01-04 16:35:41 -08:00  
				
					
						
							
							
								 
						
							
								077c28b65d 
								
							 
						 
						
							
							
								
								Use path operation for delegation role check, update RoleTargetsPath to  
							
							... 
							
							
							
							use path for role name URL
Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com> 
							
						 
						
							2016-01-04 16:23:02 -08:00  
				
					
						
							
							
								 
						
							
								dbb8c1065f 
								
							 
						 
						
							
							
								
								use path instead of filepath to express TUF roles  
							
							... 
							
							
							
							Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com> 
							
						 
						
							2016-01-04 16:23:02 -08:00  
				
					
						
							
							
								 
						
							
								a1178bfc96 
								
							 
						 
						
							
							
								
								improved slice copying and appending  
							
							... 
							
							
							
							Signed-off-by: Riyaz Faizullabhoy <riyaz.faizullabhoy@docker.com> 
							
						 
						
							2016-01-04 16:20:19 -08:00