Aleksa Sarai e7e4e93352 apparmor: make pkg/aaparser work on read-only root ...

This is necessary because normally `apparmor_parser -r` will try to
create a temporary directory on the host (which is not allowed if the
host has a rootfs). However, the -K option bypasses saving things to the
cache (which avoids this issue).

  % apparmor_parser -r /tmp/docker-profile
  mkstemp: Read-only file system
  % apparmor_parser -Kr /tmp/docker-profile
  %

In addition, add extra information to the ensureDefaultAppArmorProfile
errors so that problems like this are easier to debug.

Fixes: 2f7596aaef3a ("apparmor: do not save profile to /etc/apparmor.d")
Signed-off-by: Aleksa Sarai <asarai@suse.de>
Upstream-commit: dd340c52cb37d29d8bae687fdc60e039341b4295
Component: engine

2017-05-18 00:05:13 +10:00

..

caps

…

cluster

Merge pull request #32237 from jlhawn/update_container_wait

2017-05-17 02:39:52 +02:00

config

Expose trust key path in config

2017-05-10 14:16:27 -07:00

discovery

The returned err should be printed

2017-03-29 09:00:50 +08:00

events

…

exec

…

graphdriver

Do not remove containers from memory on error

2017-05-05 17:02:04 -04:00

initlayer

…

links

…

logger

Update comments describing new behaviour

2017-05-15 11:08:16 +12:00

network

…

stats

Correct CPU usage calculation in presence of offline CPUs and newer Linux

2017-03-10 10:24:33 +00:00

apparmor_default_unsupported.go

…

apparmor_default.go

apparmor: make pkg/aaparser work on read-only root

2017-05-18 00:05:13 +10:00

archive_tarcopyoptions_unix.go

daemon/archive.go: Fix copy routines to preserve UID.

2017-04-12 10:33:19 +00:00

archive_tarcopyoptions_windows.go

daemon/archive.go: Fix copy routines to preserve UID.

2017-04-12 10:33:19 +00:00

archive_tarcopyoptions.go

daemon/archive.go: Fix copy routines to preserve UID.

2017-04-12 10:33:19 +00:00

archive_unix.go

Windows: Fail fs ops on running Hyper-V containers gracefully

2017-03-15 13:31:41 -07:00

archive_windows.go

Windows: Fail fs ops on running Hyper-V containers gracefully

2017-03-15 13:31:41 -07:00

archive.go

Expose a smaller interface for the Builder retrieving images from daemon

2017-05-10 17:58:57 -04:00

attach.go

Update ContainerWait API

2017-05-16 15:11:39 -07:00

auth.go

…

bindmount_solaris.go

…

bindmount_unix.go

…

build.go

Refactor imageContexts into two different structs.

2017-05-10 17:59:30 -04:00

cache.go

…

changes.go

…

checkpoint.go

check err and add print

2017-05-05 14:50:00 +08:00

cluster.go

Fix race condition between swarm and libnetwork

2017-05-10 21:16:52 -07:00

commit.go

Cleanup all the mutate + defer revert of b.runConfig in the builder

2017-05-01 18:36:53 -04:00

configs_linux.go

Add config support to executor backend

2017-05-11 10:08:21 -07:00

configs_unsupported.go

Add Windows configs support

2017-05-16 14:25:32 -07:00

configs_windows.go

Add Windows configs support

2017-05-16 14:25:32 -07:00

configs.go

Add config support to executor backend

2017-05-11 10:08:21 -07:00

container_linux.go

…

container_operations_solaris.go

…

container_operations_unix.go

Update ContainerWait API

2017-05-16 15:11:39 -07:00

container_operations_windows.go

Add Windows configs support

2017-05-16 14:25:32 -07:00

container_operations.go

Do not error out on serv bind deactivation if no sbox is found

2017-04-10 09:13:41 -07:00

container_windows.go

…

container.go

set 1ms as container duration minimum value

2017-04-12 15:45:29 -07:00

create_unix.go

Switch to using opencontainers/selinux for selinux bindings

2017-04-24 21:29:47 +02:00

create_windows.go

…

create.go

Merge pull request #29554 from cpuguy83/keep_running_count_of_states

2017-05-05 16:15:22 -04:00

daemon_experimental.go

…

daemon_linux_test.go

…

daemon_linux.go

…

daemon_solaris.go

Switch to using opencontainers/selinux for selinux bindings

2017-04-24 21:29:47 +02:00

daemon_test.go

…

daemon_unix_test.go

…

daemon_unix.go

Update moby to runc and oci 1.0 runtime final rc

2017-05-05 13:45:45 -07:00

daemon_unsupported.go

…

daemon_windows.go

Fix scaling of NanoCPUs on Hyper-V containers

2017-04-12 16:54:27 -07:00

daemon.go

Merge pull request #33075 from x1022as/stop

2017-05-17 09:27:47 -04:00

debugtrap_unix.go

…

debugtrap_unsupported.go

…

debugtrap_windows.go

…

debugtrap.go

…

delete_test.go

Use a test table in the daemon delete unit tests

2017-04-18 10:30:40 +03:00

delete.go

Update Container Wait Backend

2017-05-16 15:09:14 -07:00

dependency.go

Add config support to executor backend

2017-05-11 10:08:21 -07:00

disk_usage.go

Prevent multiple parallel SystemDiskUsage call

2017-04-24 09:11:29 -07:00

errors.go

…

events_test.go

…

events.go

…

exec_linux.go

daemon: also ensureDefaultApparmorProfile in exec path

2017-03-13 15:20:05 +11:00

exec_solaris.go

…

exec_windows.go

…

exec.go

Update ContainerWait API

2017-05-16 15:11:39 -07:00

export.go

…

getsize_unix.go

…

health_test.go

Added start period option to health check.

2017-04-06 12:35:34 +02:00

health.go

Added start period option to health check.

2017-04-06 12:35:34 +02:00

image_delete.go

…

image_exporter.go

…

image_history.go

…

image_inspect.go

…

image_pull.go

Expose a smaller interface for the Builder retrieving images from daemon

2017-05-10 17:58:57 -04:00

image_push.go

…

image_tag.go

…

image.go

Expose a smaller interface for the Builder retrieving images from daemon

2017-05-10 17:58:57 -04:00

images.go

Ignore layer does not exist error from docker images

2017-03-16 09:21:51 +08:00

import.go

Refacator pkg/streamformatter

2017-05-02 17:38:12 -04:00

info_unix_test.go

Refactor "init" version parsing, and add unit-test

2017-04-08 11:28:37 +02:00

info_unix.go

Fix missing Init Binary in docker info output

2017-04-10 16:54:07 +05:30

info_windows.go

…

info.go

Merge pull request #29554 from cpuguy83/keep_running_count_of_states

2017-05-05 16:15:22 -04:00

inspect_solaris.go

…

inspect_unix.go

…

inspect_windows.go

…

inspect.go

Update ContainerWait API

2017-05-16 15:11:39 -07:00

keys_unsupported.go

…

keys.go

…

kill.go

Update ContainerWait API

2017-05-16 15:11:39 -07:00

links.go

…

list_unix.go

…

list_windows.go

…

list.go

28722: List of containers with networkID filter is not working

2017-03-31 08:57:09 +00:00

logdrivers_linux.go

…

logdrivers_windows.go

…

logs_test.go

…

logs.go

Prevent ContainerLogs from hanging if container doesn't run for long

2017-04-20 12:27:51 +01:00

metrics_unix.go

Add support for metrics plugins

2017-05-12 00:30:09 -04:00

metrics_unsupported.go

Add support for metrics plugins

2017-05-12 00:30:09 -04:00

metrics.go

Add support for metrics plugins

2017-05-12 00:30:09 -04:00

monitor_linux.go

…

monitor_solaris.go

…

monitor_windows.go

…

monitor.go

Do not remove containers from memory on error

2017-05-05 17:02:04 -04:00

mounts.go

Fix issue backporting mount spec to pre-1.13 obj

2017-05-11 12:31:53 -04:00

names.go

…

network.go

Fix race condition between swarm and libnetwork

2017-05-10 21:16:52 -07:00

oci_linux.go

Add config support to executor backend

2017-05-11 10:08:21 -07:00

oci_solaris.go

…

oci_windows.go

Add Windows configs support

2017-05-16 14:25:32 -07:00

pause.go

…

prune.go

unexport error errPruneRunning

2017-05-16 23:37:30 +08:00

reload_test.go

Add daemon option to push foreign layers

2017-05-16 14:36:36 -07:00

reload.go

Add daemon option to push foreign layers

2017-05-16 14:36:36 -07:00

rename.go

…

resize.go

…

restart.go

…

search_test.go

…

search.go

…

seccomp_disabled.go

…

seccomp_linux.go

Update moby to runc and oci 1.0 runtime final rc

2017-05-05 13:45:45 -07:00

seccomp_unsupported.go

…

secrets_linux.go

…

secrets_unsupported.go

Add Windows secrets support

2017-05-16 11:30:06 -07:00

secrets_windows.go

Add Windows secrets support

2017-05-16 11:30:06 -07:00

secrets.go

Add config support to executor backend

2017-05-11 10:08:21 -07:00

selinux_linux.go

Switch to using opencontainers/selinux for selinux bindings

2017-04-24 21:29:47 +02:00

selinux_unsupported.go

…

start_unix.go

…

start_windows.go

…

start.go

…

stats_collector.go

…

stats_unix.go

…

stats_windows.go

…

stats.go

…

stop.go

Update ContainerWait API

2017-05-16 15:11:39 -07:00

top_unix_test.go

Fixing issue of docker top command failure when dealing with -m option

2017-03-10 02:50:21 +00:00

top_unix.go

Fixing issue of docker top command failure when dealing with -m option

2017-03-10 02:50:21 +00:00

top_windows.go

…

unpause.go

…

update_linux.go

Add --cpus support for docker update

2017-04-06 15:40:12 -07:00

update_solaris.go

…

update_windows.go

…

update.go

Remove ContainerUpdateCmdOnBuild, it does nothing.

2017-05-03 10:59:38 -04:00

volumes_unit_test.go

…

volumes_unix_test.go

Fix issue backporting mount spec to pre-1.13 obj

2017-05-11 12:31:53 -04:00

volumes_unix.go

…

volumes_windows.go

…

volumes.go

Add continue on error in mountspec backport

2017-05-15 15:49:07 -04:00

wait.go

Update ContainerWait API

2017-05-16 15:11:39 -07:00

workdir.go

…