{"push_id":544914983,"size":29,"distinct_size":8,"ref":"refs/heads/acirenderer","head":"8c893322aa2799520e50e7d48be4c29bb73d1f0c","before":"9788a9d3c1195ad795b6a5215522bb3c9261c65c","commits":[{"sha":"4582685fce259b0252e0b510c2a2bde630a62a5b","author":{"email":"f09eaae3593d4e9e732cdbf62a73c189ff7949e6@coreos.com","name":"Vito Caputo"},"message":"stage1/init: handle relative /etc/localtime symlinks","distinct":false,"url":"https://api.github.com/repos/sgotti/rocket/commits/4582685fce259b0252e0b510c2a2bde630a62a5b"},{"sha":"8553ea1649d4de3bde4b860d08110b2985762b2a","author":{"email":"f09eaae3593d4e9e732cdbf62a73c189ff7949e6@coreos.com","name":"Vito Caputo"},"message":"stage1/diagexec: use execvp() to facilitate `rkt enter`\n\nIn `rkt enter` usage, users are likely to specify a filename rather than a\npath expecting $PATH lookup resolution to occur.","distinct":false,"url":"https://api.github.com/repos/sgotti/rocket/commits/8553ea1649d4de3bde4b860d08110b2985762b2a"},{"sha":"265731eb587244a53025596ecd7daaac539de4af","author":{"email":"f09eaae3593d4e9e732cdbf62a73c189ff7949e6@coreos.com","name":"Vito Caputo"},"message":"rkt enter: implement entering app namespaces\n\nThis introduces a stage1 /enter entrypoint which expects:\n * the CWD to be the container root (/var/lib/rkt/containers/$cuuid)\n * argv[1] to be the shorthash app imageid to enter\n * argv[2] to be the command for executing via execvp\n * argv[3+] any additional arguments for the command\n\nAn example manual /enter shell invocation would be:\n cd /var/lib/rkt/containers/9793daa1-e064-49a6-9d52-261a992bddd8 && \\\n ./enter sha512-9e6a3ab113ed783c1ffdcbbaa7d16f3b /bin/bash -i\n\n\"rkt enter\" effectively does this after some simple argv parsing/checks and\nverification of the container being presently active.\n\nWhat must occur within /enter is stage1-implementation specific, hence its\ninclusion within the stage1 rootfs.\n\nThe /enter implemented here consists of a statically-linked minimal C\nprogram which:\n   * reads the container's PID from ./pid\n   * enters the namespaces of the container's PID 1\n   * forks to realize CLONE_NEWPID\n   * execs /diagexec in the child using the argv[] /enter received\n   * waits for the child to exit\n\nThe UX side looks like:\n rkt enter [--imageid IMAGEID] UUID [CMD [ARGS ...]]\n\n If no IMAGEID is specified, and the container is a singleton then its lone\n app is entered.  Otherwise a list of apps and their ids is printed and the\n user must specify which app to enter in a separate invocation via --imageid.\n\n If no cmd is specified, /bin/bash is assumed.\n\n Examples:\n\n  Multiple images, ambiguous enter:\n   $ rkt enter 7324849e-80b7-4874-a14b-79de35291485\n   Container \"7324849e-80b7-4874-a14b-79de35291485\" contains multiple apps:\n           sha512-8a4a96dac7216ca311962d19ffa00b6c: pauser\n           sha512-2893e1a4714bea23ee9f21c7dd6561a4: sleeper\n   Unable to determine image id: specify app using \"rkt enter --imageid ...\"\n\n  Multiple images, specified \"pauser\":\n   $ rkt enter --imageid sha512-8a4a96dac7216ca311962d19ffa00b6c 7324849e-80b7-4874-a14b-79de35291485\n   No command specified, assuming \"/bin/bash\"\n   bash-4.3#\n\n  Multiple images, enter \"pauser\", run /pause:\n   $ rkt enter --imageid sha512-8a4a96dac7216ca311962d19ffa00b6c 7324849e-80b7-4874-a14b-79de35291485 /pause\n   paused...^C\n   $\n\n  Single image:\n   $ rkt enter 98d688dc-5665-496c-8556-f553020ccd57\n   No command specified, assuming \"/bin/bash\"\n   bash-4.3#","distinct":false,"url":"https://api.github.com/repos/sgotti/rocket/commits/265731eb587244a53025596ecd7daaac539de4af"},{"sha":"0c50c5bffea6ea7f550b34f7a809d876f1546045","author":{"email":"27c24459b5ba4724e54142a5ec5c41135e2587f6@gnugeneration.com","name":"Vito Caputo"},"message":"Merge pull request #330 from vcaputo/enter_post_make\n\nrkt enter","distinct":false,"url":"https://api.github.com/repos/sgotti/rocket/commits/0c50c5bffea6ea7f550b34f7a809d876f1546045"},{"sha":"77c63316694163d88da75ea6c92553cf22d17a38","author":{"email":"492bbd9949cb08d095ba79b9bfaafdf77dc93f28@gmail.com","name":"Simone Gotti"},"message":"pkg/tar: add overwrite option to ExtractTar.\n\nAdd an overwrite option to ExtractTar so, calling the function on a non empty\ndirectory, will overwrite existing files instead of returning an error.\n\nIt's needed during ACI rendering, as (in the actual implementation), extracting\na dependency list of ACIs over the same directory, the files provided by the\nnext ACI in the list have to overwrite the ones previously extracted.","distinct":false,"url":"https://api.github.com/repos/sgotti/rocket/commits/77c63316694163d88da75ea6c92553cf22d17a38"},{"sha":"2a5abe00d29c48fcf96894c3b72b2663b701d3c1","author":{"email":"f92b368882cd2572f758088f2681ade9129a01f8@coreos.com","name":"Eugene Yakubovich"},"message":"vendor netlink library","distinct":false,"url":"https://api.github.com/repos/sgotti/rocket/commits/2a5abe00d29c48fcf96894c3b72b2663b701d3c1"},{"sha":"39ac3a2edf7c91a3d9848ef71ae2574a0c7d4381","author":{"email":"f92b368882cd2572f758088f2681ade9129a01f8@coreos.com","name":"Eugene Yakubovich"},"message":"added proposed network plumbing","distinct":false,"url":"https://api.github.com/repos/sgotti/rocket/commits/39ac3a2edf7c91a3d9848ef71ae2574a0c7d4381"},{"sha":"ce149c53256886aac5e7b75a2e58a11c1c698510","author":{"email":"f92b368882cd2572f758088f2681ade9129a01f8@coreos.com","name":"Eugene Yakubovich"},"message":"added bridge net plugin","distinct":false,"url":"https://api.github.com/repos/sgotti/rocket/commits/ce149c53256886aac5e7b75a2e58a11c1c698510"},{"sha":"cda3e4255579b440f246484cd9c6f00225b71e8a","author":{"email":"f92b368882cd2572f758088f2681ade9129a01f8@coreos.com","name":"Eugene Yakubovich"},"message":"incorporating code review feedback","distinct":false,"url":"https://api.github.com/repos/sgotti/rocket/commits/cda3e4255579b440f246484cd9c6f00225b71e8a"},{"sha":"a4dec0aded19dfb38ff5c0034093df11d4ea81d9","author":{"email":"f92b368882cd2572f758088f2681ade9129a01f8@coreos.com","name":"Eugene Yakubovich"},"message":"add copyright notice and rename module","distinct":false,"url":"https://api.github.com/repos/sgotti/rocket/commits/a4dec0aded19dfb38ff5c0034093df11d4ea81d9"},{"sha":"9305cc3c604bd4d580688c38fd72d6eca5b9abe2","author":{"email":"99fbc7bd13df49d8bdfdb413f83440381212d6da@gmail.com","name":"Eugene Yakubovich"},"message":"Merge pull request #345 from eyakubovich/network-base\n\nAdd proposed networking (take 2)","distinct":false,"url":"https://api.github.com/repos/sgotti/rocket/commits/9305cc3c604bd4d580688c38fd72d6eca5b9abe2"},{"sha":"6cc9661f2d82602a5c37c9aaa6e06380f62f0eb3","author":{"email":"f09eaae3593d4e9e732cdbf62a73c189ff7949e6@coreos.com","name":"Vito Caputo"},"message":"pkg/lock: add DirLock.Unlock()\n\nIn creating a more general interface to the container dirs a method for\nunlocking a DirLock without closing it became necessary.\n\nThis should have been added when lock.NewLock() became public.","distinct":false,"url":"https://api.github.com/repos/sgotti/rocket/commits/6cc9661f2d82602a5c37c9aaa6e06380f62f0eb3"},{"sha":"bc80ce91c5ac0f19a94e4be950f9eec20ae70cef","author":{"email":"f09eaae3593d4e9e732cdbf62a73c189ff7949e6@coreos.com","name":"Vito Caputo"},"message":"stage1: add rootfs/enter/enter to .gitignore","distinct":false,"url":"https://api.github.com/repos/sgotti/rocket/commits/bc80ce91c5ac0f19a94e4be950f9eec20ae70cef"},{"sha":"3d30cd9afb7bfd769a4963a644d0e83cff4ce574","author":{"email":"27c24459b5ba4724e54142a5ec5c41135e2587f6@gnugeneration.com","name":"Vito Caputo"},"message":"Merge pull request #368 from vcaputo/dirlock_unlock\n\npkg/lock: add DirLock.Unlock()","distinct":false,"url":"https://api.github.com/repos/sgotti/rocket/commits/3d30cd9afb7bfd769a4963a644d0e83cff4ce574"},{"sha":"c2456c753c2ca04b673cd51eeac2152588335676","author":{"email":"0d47477beef1d882e8812885f3dcf66c4a47c346@gmail.com","name":"Jonathan Boulle"},"message":"Merge pull request #370 from vcaputo/gitignore\n\nstage1: add rootfs/enter/enter to .gitignore","distinct":false,"url":"https://api.github.com/repos/sgotti/rocket/commits/c2456c753c2ca04b673cd51eeac2152588335676"},{"sha":"ffc83935cdce00ac08d089736c40a535bc5206f2","author":{"email":"0d47477beef1d882e8812885f3dcf66c4a47c346@gmail.com","name":"Jonathan Boulle"},"message":"Merge pull request #348 from sgotti/taroverwrite\n\npkg/tar: add overwrite option to ExtractTar.","distinct":false,"url":"https://api.github.com/repos/sgotti/rocket/commits/ffc83935cdce00ac08d089736c40a535bc5206f2"},{"sha":"bad73895c9e3904d055839f365c8534e106a0bd6","author":{"email":"53ec011e097711cd4d64f846b963503de903d128@gmail.com","name":"Kelsey Hightower"},"message":"fetch: add signature validation\n\nCurrently rocket does not perform signature validation for ACI images.\n\nFix the issue by validating all ACI images during the initial download.\n\nExample Usage:\n\n```\n$ sudo rkt run example.com/hello:0.0.1\nrkt: starting to discover app img example.com/hello:0.0.1\n...\nrkt: example.com/hello:0.0.1 verified signed by:\n  Kelsey Hightower (ACI signing key) <kelsey.hightower@coreos.com>\n```\n\nThis patch introduces a new global flag `-insecure-skip-verify`, which\ndisables signature validation for a single run.\n\n```\n$ sudo rkt -insecure-skip-verify run example.com/hello:0.0.1\n...\n```\n\nThis patch changes the behaviour of the fetch and run subcommands. By\ndefault rocket will attempt to verify all ACI images and fail if the\ndetached signature is missing.\n\nThis patch also includes a new tutorial on how to sign, host, and verify\nACI images.","distinct":false,"url":"https://api.github.com/repos/sgotti/rocket/commits/bad73895c9e3904d055839f365c8534e106a0bd6"},{"sha":"1cf92232eb7d7c7c814fa970a6a2b18a2c53b22f","author":{"email":"53ec011e097711cd4d64f846b963503de903d128@gmail.com","name":"Kelsey Hightower"},"message":"Merge pull request #335 from kelseyhightower/add-encryption-and-verification\n\nfetch: add signature validation","distinct":false,"url":"https://api.github.com/repos/sgotti/rocket/commits/1cf92232eb7d7c7c814fa970a6a2b18a2c53b22f"},{"sha":"a3c2c97e982f807654c78c905d687bb9b5f70fdf","author":{"email":"0d47477beef1d882e8812885f3dcf66c4a47c346@gmail.com","name":"Jonathan Boulle"},"message":"Merge pull request #358 from vcaputo/handle_relative_etc_localtime\n\nstage1/init: handle relative /etc/localtime symlinks","distinct":false,"url":"https://api.github.com/repos/sgotti/rocket/commits/a3c2c97e982f807654c78c905d687bb9b5f70fdf"},{"sha":"bdefb8f50d2dd77b83bafe6dfead8fc892f9f27d","author":{"email":"53ec011e097711cd4d64f846b963503de903d128@gmail.com","name":"Kelsey Hightower"},"message":"fetch: remove unused HTML template from tests","distinct":false,"url":"https://api.github.com/repos/sgotti/rocket/commits/bdefb8f50d2dd77b83bafe6dfead8fc892f9f27d"}]}