dilim/moby
1
0 Fork 0
mirror of https://github.com/moby/moby.git synced 2026-11-06 05:17:30 +00:00
Code Issues Packages Projects Releases Wiki Activity
Files
b9ce036ac8bfd28855d8aabc53fa451ce2339e1b
moby/daemon
T
History
Cory Snider f006a6abcf libn/d/overlay: reapply rules on firewalld reload 
With the iptables firewall backend, the overlay driver programs iptables
rules which mark VXLAN datagrams of encrypted networks for encryption,
drop cleartext VXLAN datagrams received for those networks, and strip
the encryption mark from datagrams marked by local processes. A
firewalld reload can flush these rules. The node then sends the
network's VXLAN datagrams in cleartext and accepts forged cleartext
datagrams for it until the last local endpoint of the network leaves and
another joins, or the daemon restarts.

On firewalld reload, restore all rules which were previously programmed
by the overlay driver.

Signed-off-by: Cory Snider <csnider@mirantis.com>
Signed-off-by: Paweł Gronowski <pawel.gronowski@docker.com>
2026-11-03 21:10:27 +01:00
..
builder
builder: COPY --from: don't remap already remapped IDs
2026-10-08 22:49:38 -07:00
cluster
daemon/cluster: Fix image digest resolution with registry mirrors
2026-10-13 15:58:33 +02:00
command
daemon: Enable/disable extensions
2026-10-30 19:02:58 +01:00
config
daemon: Enable/disable extensions
2026-10-30 19:02:58 +01:00
container
daemon: Add State.StatusChanges to follow container status changes
2026-10-27 21:59:44 +01:00
containerd
Merge pull request #53796 from thaJeztah/annotation_consts
2026-10-27 21:16:53 +01:00
events
Merge pull request #53243 from thaJeztah/cancel_once
2026-07-30 21:47:36 +02:00
graphdriver
overlay2: Allow rootless mode with SELinux enabled
2026-10-28 13:03:45 +01:00
images
daemon/images: ImageService.ImportImage: close reader
2026-09-28 16:02:48 +02:00
initlayer
daemon: remove // import comments
2025-05-30 15:59:13 +02:00
internal
daemon: Hide empty containerd Git revisions in docker version
2026-10-29 15:44:38 +01:00
libnetwork
libn/d/overlay: reapply rules on firewalld reload
2026-11-03 21:10:27 +01:00
links
modernize: Use b.Loop (introduced in Go 1.24)
2025-12-15 18:56:33 +01:00
listeners
daemon/listeners: Support Unix socket on Windows
2026-04-16 11:02:16 +02:00
logger
daemon/logger: use t.Context
2026-09-18 18:28:44 +02:00
names
Create github.com/moby/moby/v2 module
2025-07-31 10:13:29 -07:00
network
daemon: Don't report a stale endpoint after a failed container start
2026-10-12 17:04:15 +02:00
pkg
Propagate plugin privilege fetch errors
2026-10-13 15:48:03 -04:00
server
daemon/server: fill in http request route pattern
2026-10-21 11:14:04 -05:00
snapshotter
Create github.com/moby/moby/v2 module
2025-07-31 10:13:29 -07:00
stats
api/types/container: StatsResponse: add OSType field
2025-10-27 16:39:32 +01:00
testdata
Improve CPU usage parsing and error reporting
2025-04-07 16:19:02 +02:00
volume
daemon/volume: use t.Context
2026-09-18 18:28:44 +02:00
apparmor_default_unsupported.go
daemon: add ability for custom AppArmor profiles
2026-08-24 13:13:35 +02:00
apparmor_default.go
daemon: fix gosec linting (G703)
2026-09-18 22:59:37 +02:00
apparmor_linux.go
daemon: fix AppArmor support check for detached-netns
2026-05-14 21:25:24 +09:00
apparmor_profile_linux_test.go
daemon: add ability for custom AppArmor profiles
2026-08-24 13:13:35 +02:00
apparmor_profile_linux.go
daemon: add ability for custom AppArmor profiles
2026-08-24 13:13:35 +02:00
apparmor_unsupported.go
daemon: fix AppArmor support check for detached-netns
2026-05-14 21:25:24 +09:00
archive_tarcopyoptions_unix.go
daemon: prepare archive options before entering container filesystem
2026-08-05 13:40:34 +02:00
archive_tarcopyoptions.go
daemon: ContainerExtractToDir: make AllowOverwriteDirWithFile opt-in
2025-07-13 16:37:36 +02:00
archive_unix.go
vendor: github.com/moby/go-archive v0.3.3
2026-08-05 17:45:49 +02:00
archive_windows.go
fix: typos in comments
2026-01-19 20:07:56 +09:00
archive.go
Create github.com/moby/moby/v2 module
2025-07-31 10:13:29 -07:00
attach.go
api/pkg/stdcopy: move stdWriter to daemon/internal
2025-10-09 20:13:26 -04:00
auth.go
Create github.com/moby/moby/v2 module
2025-07-31 10:13:29 -07:00
build.go
Create github.com/moby/moby/api module
2025-07-21 09:30:05 -07:00
cdi.go
daemon: CDI: fix missing error in logs
2026-02-21 21:43:11 +01:00
changes.go
daemon: Remove isWindows const and inline runtime.GOOS check
2026-09-25 18:35:27 +02:00
checkpoint_test.go
daemon: use t.Context
2026-09-18 18:28:46 +02:00
checkpoint.go
daemon: Prevent checkpoint ID path traversal
2026-08-20 14:51:38 +02:00
cluster.go
daemon: report IPAM status for Swarm networks
2025-09-11 15:25:14 -04:00
commit.go
daemon: Remove isWindows const and inline runtime.GOOS check
2026-09-25 18:35:27 +02:00
configs.go
Create github.com/moby/moby/api module
2025-07-21 09:30:05 -07:00
container_linux.go
daemon: allow RawSysInfo to return an error
2026-06-11 17:39:03 +09:00
container_operations_test.go
daemon: Reject non-link-local addresses passed as link-local IPs
2026-10-13 18:55:59 +02:00
container_operations_unix.go
libnetwork: write resolver files only when asked
2026-10-02 16:31:27 -04:00
container_operations_windows.go
chore: enable use-any rule from revive
2025-08-08 17:07:07 +02:00
container_operations.go
Merge pull request #52480 from sahilsGit/51758-preserve-networks-on-failed-start
2026-11-02 15:59:38 +01:00
container_unix_test.go
daemon: TestContainerWarningHostAndPublishPorts: use sub-tests
2026-05-14 00:42:27 +02:00
container_windows.go
Create github.com/moby/moby/v2 module
2025-07-31 10:13:29 -07:00
container.go
daemon: Refactor namegenerator into extension
2026-09-03 11:06:16 +02:00
containerfs_linux_test.go
daemon: fix docker cp with nested bind mounts
2026-09-17 18:20:03 -04:00
containerfs_linux.go
daemon: Fix docker cp with read-only socket mounts in rootless mode
2026-10-19 12:33:05 +02:00
content.go
daemon: configureLocalContentStore: use FreelistMapType for bolt db
2026-07-09 16:30:11 +02:00
create_unix.go
volume: Fix file subpath mount over existing image file
2026-05-11 13:55:43 +02:00
create_windows.go
Daemon.createContainerOSSpecificSettings - remove redundant param
2025-11-16 18:25:42 +00:00
create.go
daemon/internal: select the maximum arm64 variant supported by the CPU
2026-10-10 09:40:00 +02:00
daemon_linux_test.go
internal/testutils: merge with internal/testutil
2025-09-08 10:08:35 +02:00
daemon_linux.go
daemon: kernelSupportsRecursivelyReadOnly: use sync.OnceValue
2026-11-02 13:04:47 +01:00
daemon_test.go
fix formatting strings for go1.26
2026-04-21 15:59:27 +02:00
daemon_unix_test.go
daemon: reject container hostnames longer than HOST_NAME_MAX
2026-07-21 16:44:07 +05:30
daemon_unix.go
libnetwork: keep the netns directory in the controller config
2026-10-09 14:31:01 -04:00
daemon_unsupported.go
rootless: support detach-netns mode
2026-04-10 02:02:51 +09:00
daemon_windows_test.go
daemon: remove // import comments
2025-05-30 15:59:13 +02:00
daemon_windows.go
builder-next: set the sandbox key through ocihook
2026-10-07 19:06:00 -04:00
daemon.go
Merge pull request #53947 from vvoland/ext-containerstate
2026-11-02 17:52:22 +01:00
debugtrap_unix.go
Create github.com/moby/moby/v2 module
2025-07-31 10:13:29 -07:00
debugtrap_unsupported.go
daemon: remove // import comments
2025-05-30 15:59:13 +02:00
debugtrap_windows.go
Create github.com/moby/moby/v2 module
2025-07-31 10:13:29 -07:00
delete_test.go
daemon: check for error-type for "removal already in progress"
2026-09-07 16:59:45 +02:00
delete.go
daemon: Set the paused and dead flags through State methods
2026-10-27 21:59:41 +01:00
dependency.go
daemon: remove // import comments
2025-05-30 15:59:13 +02:00
devices_amd_linux.go
Use CDI for GPU injection for AMD devices for --gpus
2026-03-04 13:07:26 +00:00
devices_linux.go
daemon/devices: Turn RegisterGPUDeviceDrivers into func
2026-03-04 18:22:18 +01:00
devices_nonlinux.go
daemon/devices: Turn RegisterGPUDeviceDrivers into func
2026-03-04 18:22:18 +01:00
devices_nvidia_linux.go
Use CDI for GPU injection for AMD devices for --gpus
2026-03-04 13:07:26 +00:00
devices_test.go
Use CDI for GPU injection for AMD devices for --gpus
2026-03-04 13:07:26 +00:00
devices.go
go fix (GOOS=linux and windows)
2026-03-25 23:23:41 +01:00
disk_usage.go
daemon: Daemon.imageDiskUsage: explicitly exclude "-1" for containers
2026-04-10 21:57:45 +02:00
errors_test.go
…
errors.go
fix grammar: user defined / user specified -> user-(defined|specified)
2026-01-19 13:43:06 +01:00
events_test.go
*: don't manually call Events.Evict() in tests
2026-07-29 15:45:40 +02:00
events.go
daemon: prevent invalid swarm events from unknown action kinds
2026-02-22 15:26:24 +09:00
exec_linux_test.go
daemon: use t.Context
2026-09-18 18:28:46 +02:00
exec_linux.go
api: Add container umask configuration
2026-09-03 10:41:23 +02:00
exec_windows.go
Create github.com/moby/moby/v2 module
2025-07-31 10:13:29 -07:00
exec.go
daemon: Daemon.execCommandGC: pass-through context
2026-09-22 22:44:48 +02:00
export.go
daemon: Remove isWindows const and inline runtime.GOOS check
2026-09-25 18:35:27 +02:00
extensions_containerstate_test.go
Add an extension point for watching container state
2026-10-28 15:56:21 +01:00
extensions_containerstate.go
Add an extension point for watching container state
2026-10-28 15:56:21 +01:00
extensions_default_test.go
daemon: Enable/disable extensions
2026-10-30 19:02:58 +01:00
extensions_default.go
Merge pull request #53947 from vvoland/ext-containerstate
2026-11-02 17:52:22 +01:00
extensions_monolith.go
Add an extension point for watching container state
2026-10-28 15:56:21 +01:00
extensions.go
daemon: Enable/disable extensions
2026-10-30 19:02:58 +01:00
health_test.go
daemon: simplify healthcheck tests
2026-09-04 17:27:03 +02:00
health.go
Merge pull request #52317 from ogulcanaydogan/fix/46747-health-start-period-interval
2026-09-01 16:25:08 +02:00
hosts_test.go
image: pull/load/save attestation manifest and signatures with image
2025-11-12 07:53:46 -08:00
hosts.go
daemon: fix perfsprint linting
2026-07-06 15:36:20 +02:00
id.go
daemon: remove // import comments
2025-05-30 15:59:13 +02:00
image_service.go
api: add GET /images/{name}/attestations endpoint
2026-06-12 13:40:58 +04:00
image_store_choice_test.go
daemon: Fix image store choice priority for prior graphdriver state
2025-11-13 10:05:49 +01:00
image_store_choice.go
daemon: Fix image store choice priority for prior graphdriver state
2025-11-13 10:05:49 +01:00
info_unix_test.go
daemon: remove // import comments
2025-05-30 15:59:13 +02:00
info_unix.go
daemon: Hide empty containerd Git revisions in docker version
2026-10-29 15:44:38 +01:00
info_windows.go
daemon: remove deprecation warning for "windows-dns-proxy" feature flag
2026-02-17 16:19:34 +01:00
info.go
Merge pull request #52771 from vvoland/apparmor-custom-profiles
2026-08-28 22:27:21 +02:00
inspect_test.go
daemon: make getInspectData() reusable
2026-05-12 12:48:03 +02:00
inspect.go
daemon: make getInspectData() reusable
2026-05-12 12:48:03 +02:00
keys_unsupported.go
daemon: remove // import comments
2025-05-30 15:59:13 +02:00
keys.go
daemon: modifyRootKeyLimit: cleanup and touch-up godoc
2026-07-03 20:39:13 +02:00
kill_test.go
daemon: Pass context through container kill operations
2026-07-27 19:11:36 +02:00
kill.go
daemon: Pass context through container kill operations
2026-07-27 19:11:36 +02:00
licensing_test.go
Create github.com/moby/moby/v2 module
2025-07-31 10:13:29 -07:00
licensing.go
Create github.com/moby/moby/v2 module
2025-07-31 10:13:29 -07:00
links.go
Create github.com/moby/moby/v2 module
2025-07-31 10:13:29 -07:00
list_test.go
daemon: don't fail container list when size lookup fails
2026-10-13 12:26:09 +00:00
list_unix.go
Create github.com/moby/moby/v2 module
2025-07-31 10:13:29 -07:00
list_windows.go
Create github.com/moby/moby/v2 module
2025-07-31 10:13:29 -07:00
list.go
daemon: don't fail container list when size lookup fails
2026-10-13 12:26:09 +00:00
logdrivers_linux.go
Create github.com/moby/moby/v2 module
2025-07-31 10:13:29 -07:00
logdrivers_windows.go
Create github.com/moby/moby/v2 module
2025-07-31 10:13:29 -07:00
logs_test.go
Create github.com/moby/moby/api module
2025-07-21 09:30:05 -07:00
logs.go
daemon/server/backend: ContainerLogsOptions: use time.Time for since, until
2026-03-03 21:53:23 +01:00
migration_test.go
daemon: use t.Context
2026-09-18 18:28:46 +02:00
migration.go
daemon/server: move GetImageOpts, ImageInspectOpts to imagebackend
2025-10-05 13:41:22 +02:00
monitor.go
Merge pull request #53947 from vvoland/ext-containerstate
2026-11-02 17:52:22 +01:00
mounts_test.go
daemon: use t.Context
2026-09-18 18:28:46 +02:00
mounts.go
daemon: Avoid container package shadowing
2026-07-22 18:22:20 +02:00
names_extension_test.go
daemon: Move name-generator provider resolution out of extpoints
2026-10-26 21:35:07 +01:00
names_extension.go
daemon: Move name-generator provider resolution out of extpoints
2026-10-26 21:35:07 +01:00
names.go
daemon: Move name-generator provider resolution out of extpoints
2026-10-26 21:35:07 +01:00
network_test.go
api/types/network: use netip types as appropriate
2025-10-03 21:39:14 +02:00
network_windows.go
Create github.com/moby/moby/v2 module
2025-07-31 10:13:29 -07:00
network.go
daemon: remove unused Daemon.GetNetworksByIDPrefix
2026-11-02 17:15:23 +01:00
oci_linux_test.go
daemon: use OCI domainname field
2026-10-08 15:18:12 -07:00
oci_linux.go
daemon: use OCI domainname field
2026-10-08 15:18:12 -07:00
oci_opts.go
Create github.com/moby/moby/v2 module
2025-07-31 10:13:29 -07:00
oci_windows_test.go
Create github.com/moby/moby/v2 module
2025-07-31 10:13:29 -07:00
oci_windows.go
go fix (GOOS=linux and windows)
2026-03-25 23:23:41 +01:00
pause.go
daemon: Set the paused and dead flags through State methods
2026-10-27 21:59:41 +01:00
prune.go
daemon/internal/timestamp: replace GetTimestamp for Parse
2026-03-03 21:51:41 +01:00
reload_test.go
libnetwork: keep the netns directory in the controller config
2026-10-09 14:31:01 -04:00
reload_unix.go
daemon: remove name for unused reloadTxn args
2026-07-03 18:56:15 +02:00
reload_windows.go
Create github.com/moby/moby/v2 module
2025-07-31 10:13:29 -07:00
reload.go
daemon: Preserve prefixes on config reload
2026-09-22 16:43:35 -06:00
rename.go
daemon: improve validation for container rename
2025-10-29 18:42:36 +01:00
resize_test.go
daemon: use t.Context() in tests
2025-09-25 22:53:48 +02:00
resize.go
Create github.com/moby/moby/v2 module
2025-07-31 10:13:29 -07:00
restart.go
daemon: Validate restart signals before changing container state
2026-10-29 19:40:33 +01:00
runtime_unix_test.go
chore: enable use-any rule from revive
2025-08-08 17:07:07 +02:00
runtime_unix.go
daemon: isPermissibleC8dRuntimeName: fx link to c8d runtime conventions
2026-05-14 00:42:57 +02:00
runtime_windows.go
chore: enable use-any rule from revive
2025-08-08 17:07:07 +02:00
seccomp_linux_test.go
Create github.com/moby/moby/v2 module
2025-07-31 10:13:29 -07:00
seccomp_linux.go
daemon: allow RawSysInfo to return an error
2026-06-11 17:39:03 +09:00
seccomp_unsupported.go
Create github.com/moby/moby/v2 module
2025-07-31 10:13:29 -07:00
secrets.go
Create github.com/moby/moby/api module
2025-07-21 09:30:05 -07:00
start_linux.go
rootless: support detach-netns mode
2026-04-10 02:02:51 +09:00
start_notlinux.go
Create github.com/moby/moby/v2 module
2025-07-31 10:13:29 -07:00
start_unix.go
explicitly access Container.State instead of through embedded struct
2025-09-19 16:02:14 +02:00
start_windows.go
Fix custom runtimes handling on Windows
2025-08-08 21:41:17 +02:00
start.go
daemon: Prevent checkpoint ID path traversal
2026-08-20 14:51:38 +02:00
stats_collector.go
daemon: move machineMemory initialization out of newStatsCollector
2026-07-13 03:36:22 +09:00
stats_unix_test.go
Refactor CPU usage stats test to use go:embed
2025-05-16 10:23:49 -04:00
stats_unix.go
daemon: report network stats for Windows containerd runtime
2026-07-28 10:45:41 -07:00
stats_windows_test.go
daemon: report network stats for Windows containerd runtime
2026-07-28 10:45:41 -07:00
stats_windows.go
daemon: report network stats for Windows containerd runtime
2026-07-28 10:45:41 -07:00
stats.go
daemon: report network stats for Windows containerd runtime
2026-07-28 10:45:41 -07:00
stop.go
daemon: Pass context through container kill operations
2026-07-27 19:11:36 +02:00
top_unix_test.go
daemon: remove // import comments
2025-05-30 15:59:13 +02:00
top_unix.go
explicitly access Container.State instead of through embedded struct
2025-09-19 16:02:14 +02:00
top_windows.go
Fix missing error check in ContainerTop on Windows
2026-02-10 12:35:48 -05:00
unpause.go
daemon: Set the paused and dead flags through State methods
2026-10-27 21:59:41 +01:00
update_linux_test.go
daemon: support per-device blkio throttle in ContainerUpdate
2026-06-12 15:52:14 +02:00
update_linux.go
daemon: support per-device blkio throttle in ContainerUpdate
2026-06-12 15:52:14 +02:00
update_windows.go
daemon: support per-device blkio throttle in ContainerUpdate
2026-06-12 15:52:14 +02:00
update.go
daemon: support per-device blkio throttle in ContainerUpdate
2026-06-12 15:52:14 +02:00
volumes_linux_test.go
Create github.com/moby/moby/api module
2025-07-21 09:30:05 -07:00
volumes_linux.go
Create github.com/moby/moby/v2 module
2025-07-31 10:13:29 -07:00
volumes_unit_test.go
Create github.com/moby/moby/v2 module
2025-07-31 10:13:29 -07:00
volumes_unix.go
daemon: sortMounts: move to container.SortMounts
2026-09-01 11:37:19 +02:00
volumes_windows.go
daemon: sortMounts: move to container.SortMounts
2026-09-01 11:37:19 +02:00
volumes.go
daemon: sortMounts: move to container.SortMounts
2026-09-01 11:37:19 +02:00
wait.go
explicitly access Container.State instead of through embedded struct
2025-09-19 16:02:14 +02:00
workdir.go
update github links to moby/moby
2025-08-01 01:48:55 +02:00