Commit Graph

2166 Commits

Author SHA1 Message Date
Daniel Jiang
e5fae8d4ff Merge pull request #1493 from knackworks/volumes-selinux
label volumes for SELinux
2017-03-07 09:59:15 +08:00
Aron Parsons
8ab45d439b label volumes for SELinux
allow Harbor to run when dockerd is running with --selinux-enabled

example AVC denials:
type=AVC msg=audit(1488384855.681:154671): avc:  denied  { read } for  pid=454 comm="registry" name="config.yml" dev="dm-8" ino=12583048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c298,c958 tcontext=system_u:object_r:default_t:s0 tclass=file
type=AVC msg=audit(1488384855.681:154671): avc:  denied  { open } for  pid=454 comm="registry" path="/etc/registry/config.yml" dev="dm-8" ino=12583048 scontext=system_u:system_r:svirt_lxc_net_t:s0:c298,c958 tcontext=system_u:object_r:default_t:s0 tclass=file
type=AVC msg=audit(1488384855.687:154672): avc:  denied  { append } for  pid=350 comm=72733A6D61696E20513A526567 name="registry.log" dev="dm-5" ino=4315920 scontext=system_u:system_r:svirt_lxc_net_t:s0:c599,c800 tcontext=system_u:object_r:default_t:s0 tclass=file
type=AVC msg=audit(1488384856.895:154702): avc:  denied  { remove_name } for  pid=708 comm="mysqld" name="4691d4d62464.lower-test" dev="dm-12" ino=402656159 scontext=system_u:system_r:svirt_lxc_net_t:s0:c149,c797 tcontext=system_u:object_r:default_t:s0 tclass=dir
type=AVC msg=audit(1488384856.926:154703): avc:  denied  { lock } for  pid=708 comm="mysqld" path="/var/lib/mysql/ibdata1" dev="dm-12" ino=402656097 scontext=system_u:system_r:svirt_lxc_net_t:s0:c149,c797 tcontext=system_u:object_r:default_t:s0 tclass=file
type=AVC msg=audit(1488384857.958:154736): avc:  denied  { open } for  pid=924 comm="harbor_jobservi" path="/etc/jobservice/app.conf" dev="dm-8" ino=142 scontext=system_u:system_r:svirt_lxc_net_t:s0:c102,c158 tcontext=system_u:object_r:default_t:s0 tclass=file
type=AVC msg=audit(1488384858.089:154737): avc:  denied  { read } for  pid=1017 comm="nginx" name="nginx.conf" dev="dm-8" ino=4194445 scontext=system_u:system_r:svirt_lxc_net_t:s0:c847,c996 tcontext=system_u:object_r:default_t:s0 tclass=file
type=AVC msg=audit(1488384858.089:154737): avc:  denied  { open } for  pid=1017 comm="nginx" path="/etc/nginx/nginx.conf" dev="dm-8" ino=4194445 scontext=system_u:system_r:svirt_lxc_net_t:s0:c847,c996 tcontext=system_u:object_r:default_t:s0 tclass=file
2017-03-03 14:13:39 -05:00
kun wang
09833b2fc4 Merge pull request #1261 from guiguan/patch-1
LGTM
2017-02-15 12:08:14 +08:00
Daniel Jiang
9533c13120 Merge pull request #1325 from ywk253100/170207_multinamespace
Support multiple namespaces in repo name
2017-02-08 13:42:55 +08:00
Wenkai Yin
dc432d5575 support multiple namespace fix #1217 2017-02-07 13:13:42 +08:00
Daniel Jiang
88cca745c4 Merge pull request #1318 from hainingzhang/master
update readme of documentation
2017-01-24 12:15:48 +08:00
Henry Zhang
74d1f8dd88 Merge remote-tracking branch 'hupstream/master' 2017-01-23 22:11:06 +08:00
Henry Zhang
63d2aa9321 update document README 2017-01-23 22:08:41 +08:00
Haining Henry Zhang
d786f12f11 Merge pull request #1317 from hainingzhang/master
udpate migration guide
2017-01-23 21:59:06 +08:00
Henry Zhang
67cf2df307 update migration guide 2017-01-23 21:24:25 +08:00
Henry Zhang
d0648efbb9 update migration guide 2017-01-23 21:17:06 +08:00
Haining Henry Zhang
e05a125b64 Merge pull request #1287 from vmware/yhua123-patch-1
Update migration_guide.md
2017-01-23 21:03:48 +08:00
Wenkai Yin
deab033c8b update downloading images part of doc (#1311)
LGTM
2017-01-20 15:24:17 +08:00
Wenkai Yin
4e84fabd41 Merge pull request #1270 from kdada/harbor-master
update kubernetes deployment
2017-01-19 18:24:37 +08:00
Kira
00259567a8 update kubernetes deployment 2017-01-16 12:06:35 +08:00
Wenkai Yin
af1589b9c8 Merge pull request #1285 from feilengcui008/master
add registry python api and cli tool
2017-01-05 18:27:34 +08:00
yhua123
789797f400 Update migration_guide.md 2017-01-04 18:45:26 +08:00
feilengcui008
233bbda16c remove v1 flag in getManifestWithConf 2017-01-04 15:11:16 +08:00
feilengcui008
5e258741d9 add registry python api and cli tool 2017-01-03 19:34:51 +08:00
Haining Henry Zhang
0399f6abe5 Merge pull request #1274 from hainingzhang/master
update readme
2016-12-29 23:22:37 +08:00
Henry Zhang
29615c6349 update README 2016-12-29 15:05:55 +08:00
Henry Zhang
a4320d6949 update README 2016-12-29 15:02:44 +08:00
Guan Gui
9ca7d3014f Added escape for angle brackets in email_from
This solved the "[ERROR] [password.go:83]: Send email failed: 555 5.5.2 Syntax error. b192sm9510409pga.30 - gsmtp" error.
2016-12-21 16:31:52 +11:00
Daniel Jiang
e1b2ba0e23 Merge pull request #1233 from ywk253100/161209_replic_dead_lock
Fix sync deadlock and filter notification
2016-12-12 14:36:15 +08:00
Wenkai Yin
d6d4711700 1.fix issue: deleting repo action will fall in deadlock between two Harbor if they are configured to sync to each other 2. Filter notification request in nginx 2016-12-09 18:10:20 +08:00
Haining Henry Zhang
000a8539fe Merge pull request #1226 from ywk253100/161208_doc
Update docs
2016-12-08 22:16:28 +08:00
Wenkai Yin
62c1c2d50b update docs 2016-12-08 21:37:09 +08:00
Daniel Jiang
9e4c90e406 Merge pull request #1216 from ywk253100/161206_collect_log
Fix exposure issue when collecting logs
2016-12-06 16:03:20 +08:00
yhua123
bd862a4165 Merge pull request #1215 from wknet123/master-fix-pagination
Update pagination of UI.
2016-12-06 15:14:53 +08:00
Wenkai Yin
bad8835c79 fix exposure issue when collecting logs 2016-12-06 14:54:49 +08:00
Haining Henry Zhang
97d4df67a3 Merge pull request #1211 from hainingzhang/master
update docs of virtual appliance
2016-12-06 12:49:15 +08:00
kunw
47ddd97182 Update pagination of UI. 2016-12-06 12:16:59 +08:00
Daniel Jiang
9ab756e2b7 Merge pull request #1209 from ywk253100/161202_sed_escape
Remove the workaround for DNS issue and escape special characters used in sed
2016-12-06 10:03:27 +08:00
Henry Zhang
588cc375a5 update docs 2016-12-06 01:01:03 +08:00
Henry Zhang
8359c91e66 update docs 2016-12-06 00:41:05 +08:00
Daniel Jiang
8333e54d75 Merge pull request #1210 from ywk253100/161204_ova_install_guide
Move self-registrition option to authentication group in installation guide
2016-12-05 17:14:53 +08:00
Wenkai Yin
65a2c87a7c fixes: root password contains special characters 2016-12-05 12:16:27 +08:00
Daniel Jiang
8974003547 Merge pull request #1208 from reasonerjt/master
fix build issue
2016-12-05 01:12:08 +08:00
Tan Jiang
5bb053acbb fix build issue 2016-12-05 01:05:50 +08:00
Wenkai Yin
d808c402d2 move self-registrition option to authentication group in installation guide 2016-12-04 21:54:33 +08:00
Wenkai Yin
01dc77b606 escape special characters used in sed 2016-12-04 16:35:47 +08:00
Haining Henry Zhang
fac0bd9a30 Merge pull request #1196 from ywk253100/161130_ova_doc
user guide for ova
2016-12-02 21:51:44 +08:00
Wenkai Yin
ad4560b50f user guide for ova 2016-12-02 17:47:41 +08:00
Daniel Jiang
68ab0e5efc Merge pull request #1201 from reasonerjt/build-fix
fix build error
2016-12-02 17:07:28 +08:00
Tan Jiang
645543a2d2 fix build error 2016-12-02 16:41:53 +08:00
Wenkai Yin
f4e0d3c774 remove the workaround of DNS issue 2016-12-02 14:29:52 +08:00
Daniel Jiang
b8169f251e Merge pull request #1197 from dejwsz/patch-1
remove rsyslogd.pid before start to allow container restarts
2016-12-02 13:15:54 +08:00
dejwsz
719072e0ba remove rsyslogd.pid before start to allow container restarts
This change mitigate problems with container restarts (stop, start) or automatic restart after host machine restart. Rsyslogd strictly checks existence of its pid file and won't start if such one exists.
2016-12-01 15:31:14 +01:00
Wenkai Yin
43f427cfe9 Merge pull request #1193 from reasonerjt/replication-timeout
remove timeout for replicating large image
2016-11-30 18:02:57 +08:00
Tan Jiang
3f6301b587 remove timeout for replicating large image 2016-11-30 17:43:04 +08:00