Justin Cormack ec7885ffb8 Add support for ambient capabilities ...

Linux kernel 4.3 and later supports "ambient capabilities" which are the
only way to pass capabilities to containers running as a non root uid.

Previously there was no way to allow containers not running as root
capabilities in a useful way.

Fix #8460

Signed-off-by: Justin Cormack <justin.cormack@docker.com>
Upstream-commit: 199e19548e93262ab00873c1d761b0d05f866042
Component: engine

2016-10-10 19:29:02 +01:00

..

fixtures

Fix already loaded detection for frozen images

2016-09-12 12:55:26 -07:00

benchmark_test.go

Windows: docker top implementation

2016-09-07 16:29:02 -07:00

check_test.go

Merge pull request #26119 from cpuguy83/lazily_load_fixtures

2016-09-08 11:16:27 -07:00

daemon_swarm_hack.go

…

daemon_swarm.go

Always check err before http status

2016-09-12 12:45:08 -05:00

daemon_unix.go

Add support for docker run in swarm mode overlay

2016-09-07 21:20:41 -07:00

daemon_windows.go

Add support for docker run in swarm mode overlay

2016-09-07 21:20:41 -07:00

daemon.go

Move some test fixtures to go

2016-09-07 17:30:35 -04:00

docker_api_attach_test.go

…

docker_api_auth_test.go

[nit] integration-cli: obey Go's naming convention

2016-09-30 01:21:05 +00:00

docker_api_build_test.go

[nit] integration-cli: obey Go's naming convention

2016-09-30 01:21:05 +00:00

docker_api_containers_test.go

Enabled more test on Windows, API and Build

2016-10-06 17:18:42 -07:00

docker_api_create_test.go

[nit] integration-cli: obey Go's naming convention

2016-09-30 01:21:05 +00:00

docker_api_events_test.go

[nit] integration-cli: obey Go's naming convention

2016-09-30 01:21:05 +00:00

docker_api_exec_resize_test.go

[nit] integration-cli: obey Go's naming convention

2016-09-30 01:21:05 +00:00

docker_api_exec_test.go

[nit] integration-cli: obey Go's naming convention

2016-09-30 01:21:05 +00:00

docker_api_images_test.go

[nit] integration-cli: obey Go's naming convention

2016-09-30 01:21:05 +00:00

docker_api_info_test.go

[nit] integration-cli: obey Go's naming convention

2016-09-30 01:21:05 +00:00

docker_api_inspect_test.go

[nit] integration-cli: obey Go's naming convention

2016-09-30 01:21:05 +00:00

docker_api_inspect_unix_test.go

[nit] integration-cli: obey Go's naming convention

2016-09-30 01:21:05 +00:00

docker_api_logs_test.go

[nit] integration-cli: obey Go's naming convention

2016-09-30 01:21:05 +00:00

docker_api_network_test.go

[nit] integration-cli: obey Go's naming convention

2016-09-30 01:21:05 +00:00

docker_api_resize_test.go

[nit] integration-cli: obey Go's naming convention

2016-09-30 01:21:05 +00:00

docker_api_service_update_test.go

[nit] integration-cli: obey Go's naming convention

2016-09-30 01:21:05 +00:00

docker_api_stats_test.go

Merge pull request #27037 from Microsoft/jjh/apistatsdatarace

2016-10-05 13:06:40 -07:00

docker_api_stats_unix_test.go

[nit] integration-cli: obey Go's naming convention

2016-09-30 01:21:05 +00:00

docker_api_swarm_test.go

[nit] integration-cli: obey Go's naming convention

2016-09-30 01:21:05 +00:00

docker_api_test.go

[nit] integration-cli: obey Go's naming convention

2016-09-30 01:21:05 +00:00

docker_api_update_unix_test.go

[nit] integration-cli: obey Go's naming convention

2016-09-30 01:21:05 +00:00

docker_api_version_test.go

Add engine-api types to docker

2016-09-07 11:05:58 -07:00

docker_api_volumes_test.go

[nit] integration-cli: obey Go's naming convention

2016-09-30 01:21:05 +00:00

docker_cli_attach_test.go

…

docker_cli_attach_unix_test.go

Improve TestAttachClosedOnContainerStop

2016-10-05 15:52:09 -07:00

docker_cli_authz_unix_test.go

[nit] integration-cli: obey Go's naming convention

2016-09-30 01:21:05 +00:00

docker_cli_build_test.go

Enabled more test on Windows, API and Build

2016-10-06 17:18:42 -07:00

docker_cli_build_unix_test.go

…

docker_cli_by_digest_test.go

Use opts.FilterOpt for filter flags.

2016-09-13 16:20:10 -04:00

docker_cli_commit_test.go

…

docker_cli_config_test.go

[nit] integration-cli: obey Go's naming convention

2016-09-30 01:21:05 +00:00

docker_cli_cp_from_container_test.go

…

docker_cli_cp_test.go

…

docker_cli_cp_to_container_test.go

…

docker_cli_cp_to_container_unix_test.go

…

docker_cli_cp_utils.go

…

docker_cli_create_test.go

…

docker_cli_daemon_experimental_test.go

…

docker_cli_daemon_test.go

Merge pull request #26882 from runcom/proxy-path

2016-10-07 09:44:39 +02:00

docker_cli_diff_test.go

…

docker_cli_events_test.go

Limit conccurent container creates in TestEventsLimit to 8

2016-09-30 14:44:05 -07:00

docker_cli_events_unix_test.go

…

docker_cli_exec_test.go

Fix missing hostname and links in exec env

2016-09-29 13:46:10 -07:00

docker_cli_exec_unix_test.go

Add TERM env var to exec

2016-09-12 09:20:27 -07:00

docker_cli_experimental_test.go

…

docker_cli_export_import_test.go

…

docker_cli_external_graphdriver_unix_test.go

…

docker_cli_external_volume_driver_unix_test.go

Add engine-api types to docker

2016-09-07 11:05:58 -07:00

docker_cli_health_test.go

Add engine-api types to docker

2016-09-07 11:05:58 -07:00

docker_cli_help_test.go

Deprecate "daemon" subcommand

2016-09-23 00:26:27 +02:00

docker_cli_history_test.go

…

docker_cli_images_test.go

…

docker_cli_import_test.go

Fix issue in docker import -c with quoted flags

2016-09-01 16:28:22 -07:00

docker_cli_info_test.go

Only output security options if there are any

2016-09-16 10:05:21 -07:00

docker_cli_info_unix_test.go

…

docker_cli_inspect_test.go

Disable HTML escaping for JSON strings in docker inspect

2016-09-29 18:16:36 -07:00

docker_cli_kill_test.go

…

docker_cli_links_test.go

…

docker_cli_links_unix_test.go

…

docker_cli_login_test.go

…

docker_cli_logout_test.go

support legacy registries in exernal stores

2016-09-07 09:45:42 +02:00

docker_cli_logs_bench_test.go

…

docker_cli_logs_test.go

…

docker_cli_nat_test.go

…

docker_cli_netmode_test.go

…

docker_cli_network_unix_test.go

[nit] integration-cli: obey Go's naming convention

2016-09-30 01:21:05 +00:00

docker_cli_oom_killed_test.go

…

docker_cli_pause_test.go

…

docker_cli_plugins_test.go

add check plugin is not used before rm

2016-09-15 13:50:57 -07:00

docker_cli_port_test.go

…

docker_cli_proxy_test.go

[nit] integration-cli: obey Go's naming convention

2016-09-30 01:21:05 +00:00

docker_cli_ps_test.go

Merge pull request #24411 from vdemeester/24393-ps-filter-managed

2016-09-29 18:54:15 +02:00

docker_cli_pull_local_test.go

support legacy registries in exernal stores

2016-09-07 09:45:42 +02:00

docker_cli_pull_test.go

Windows: Fix regression pulling linux images

2016-09-09 11:40:34 -07:00

docker_cli_pull_trusted_test.go

…

docker_cli_push_test.go

Update token server error test to not fail on retries

2016-09-01 15:18:15 -07:00

docker_cli_registry_user_agent_test.go

…

docker_cli_rename_test.go

…

docker_cli_restart_test.go

…

docker_cli_rm_test.go

…

docker_cli_rmi_test.go

Move some test fixtures to go

2016-09-07 17:30:35 -04:00

docker_cli_run_test.go

Windows: Support credential specs

2016-10-06 09:32:22 -07:00

docker_cli_run_unix_test.go

Add support for ambient capabilities

2016-10-10 19:29:02 +01:00

docker_cli_save_load_test.go

…

docker_cli_save_load_unix_test.go

…

docker_cli_search_test.go

…

docker_cli_service_create_test.go

Add engine-api types to docker

2016-09-07 11:05:58 -07:00

docker_cli_service_health_test.go

integration: wait for task running in TestServiceHealthRun

2016-09-29 07:44:00 -07:00

docker_cli_service_scale_test.go

validate service parameter in client side to avoid api call

2016-09-26 17:18:02 +08:00

docker_cli_service_update_test.go

Windows: docker top implementation

2016-09-07 16:29:02 -07:00

docker_cli_sni_test.go

…

docker_cli_stack_test.go

add docker stack ls

2016-09-22 19:31:39 +00:00

docker_cli_start_test.go

…

docker_cli_stats_test.go

…

docker_cli_stop_test.go

…

docker_cli_swarm_test.go

Add a new "is-task" ps filter

2016-09-28 12:45:30 +02:00

docker_cli_tag_test.go

…

docker_cli_top_test.go

Windows: docker top implementation

2016-09-07 16:29:02 -07:00

docker_cli_update_test.go

…

docker_cli_update_unix_test.go

Add engine-api types to docker

2016-09-07 11:05:58 -07:00

docker_cli_userns_test.go

Add test for checking created directories on remapped root

2016-09-05 13:02:13 +03:00

docker_cli_v2_only_test.go

…

docker_cli_version_test.go

…

docker_cli_volume_test.go

[nit] integration-cli: obey Go's naming convention

2016-09-30 01:21:05 +00:00

docker_cli_wait_test.go

…

docker_deprecated_api_v124_test.go

[nit] integration-cli: obey Go's naming convention

2016-09-30 01:21:05 +00:00

docker_deprecated_api_v124_unix_test.go

…

docker_experimental_network_test.go

…

docker_hub_pull_suite_test.go

…

docker_test_vars.go

Add isolation to info

2016-09-23 12:13:29 -07:00

docker_utils.go

Add isolation to info

2016-09-23 12:13:29 -07:00

events_utils.go

test: fix trivial code convention noncompliance

2016-09-12 07:36:52 +00:00

fixtures_linux_daemon.go

Fix already loaded detection for frozen images

2016-09-12 12:55:26 -07:00

fixtures.go

Move some test fixtures to go

2016-09-07 17:30:35 -04:00

npipe_windows.go

…

npipe.go

…

registry_mock.go

…

registry.go

…

requirements_unix.go

Add support for ambient capabilities

2016-10-10 19:29:02 +01:00

requirements.go

Remove --read-only restriction when user ns enabled

2016-09-09 13:23:41 -04:00

test_vars_exec.go

…

test_vars_noexec.go

…

test_vars_noseccomp.go

…

test_vars_seccomp.go

…

test_vars_unix.go

Windows: docker top implementation

2016-09-07 16:29:02 -07:00

test_vars_windows.go

Windows: docker top implementation

2016-09-07 16:29:02 -07:00

test_vars.go

Windows: docker top implementation

2016-09-07 16:29:02 -07:00

trust_server.go

Fix govet for go1.7

2016-09-02 19:07:54 -07:00

utils.go

…