reweave/weave
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
804 Commits 7 Branches 85 Tags
ccabdc421a2caa4b6125e216d8ed9c19dcf1e111
Commit Graph
804 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
rade ccabdc421a Merge pull request #290 from bboreham/master 
Quote $@ everywhere, to guard against spaces, globbing, etc.
 2014-12-23 14:50:28 +00:00
Bryan Boreham 5bb80c7126 Quote $@ everywhere, to guard against spaces, globbing, etc. 2014-12-23 14:42:48 +00:00
Matthias Radestock 15a5e38e8b cosmetic 2014-12-23 12:59:54 +00:00
Matthias Radestock af3d2c7e7f cosmetic: break overlong lines 2014-12-23 12:27:13 +00:00
Matthias Radestock d54cc53864 install docker-ns in test VMs 
handy for debugging
 2014-12-23 12:14:33 +00:00
Ilya Dmitrichenko 73a8f32532 Merge pull request #288 from viirya/if_param 
Assign iface parameter from defined variable
 2014-12-23 12:10:53 +00:00
Liang-Chi Hsieh f5afe3b203 Merge remote-tracking branch 'upstream/master' into if_param 
Conflicts:
	weave
	weaver/Dockerfile
 2014-12-22 20:58:20 +08:00
Bryan Boreham affb9aef42 Merge pull request #283 from rade/275_do_not_log_password 
Closes #275
 2014-12-22 11:31:16 +00:00
Matthias Radestock 7ccb9e36d9 update Dockerfile MAINTAINER 
and also use what appears to be (based on some sampling of the docker
registry) the correct convention for specifying the email address.

Also ditch superfluous CMD instruction in weaver.
 2014-12-22 11:11:00 +00:00
Bryan Boreham 887f2adbc1 Merge pull request #284 from rade/276_alternative_password_supply 
LGTM.  Closes #276
 2014-12-22 11:03:28 +00:00
Liang-Chi Hsieh 1dc28e9025 Assign iface parameter from defined variable. 2014-12-22 15:59:29 +08:00
David Wragg 08a445cb6d Merge PR #281: gracefully deal with missing/old ip utility 
Addresses #279
 2014-12-21 15:36:59 +00:00
Matthias Radestock b48a66ecca add conntrack to vagrant test VMs 
Fixes #287.
 2014-12-21 15:22:00 +00:00
Matthias Radestock aa68b6d05e cosmetic 2014-12-21 15:16:21 +00:00
Matthias Radestock 41cb8a1215 ditch check_command_and_run wrapper 
Since we end up swallowing the warning when wanting to redirect stderr
of the command execution.

Fixes #286.
 2014-12-21 15:07:21 +00:00
Matthias Radestock 66e55ee421 keep stdout and stderr separate in with_container_netns 
so we don't end up swallowing warnings when redirecting stdout

Fixes #285.
 2014-12-21 14:29:54 +00:00
Matthias Radestock 7c513fc22b don't duplicate output on error in with_container_netns 
This does not cause any problems right now, since all the call sites
swallow stdout on error. But it is wrong nevertheless.
 2014-12-21 13:51:59 +00:00
Matthias Radestock fc3630da41 ignore .vagrant dir 2014-12-20 01:40:30 +00:00
Matthias Radestock e2ec460752 feed password to weave via env var, possibly via a file 
The latter is the most secure route since it keeps the password
completely out of any command lines, and the permissions on the file
can be very restrictive, e.g. 0400.

It would be somewhat nicer if the password file contained just
    <password>
rather than
    WEAVE_PASSWORD=<password>
but then we'd have to transit the password via a temporary file with
0600 permissions.
 2014-12-20 01:22:59 +00:00
Matthias Radestock 2386e75cc1 Merge branch 'master' into 276_alternative_password_supply 2014-12-20 00:21:35 +00:00
Matthias Radestock dbf09096b3 link to crypto docs from security feature 2014-12-20 00:15:11 +00:00
Matthias Radestock 33494f1b47 do not log password 
This is trickier than it may first appear. We can't just filter the
password from os.Args, since that would require recreating the flag
parsing logic, which allows flags to be specified in a wide variety of
formats. And there is no API for calling that logic either.

So instead we log the results of the flag parsing, eliding the
password, and using a straight golang map for formatting (so we don't
have to get creative).
 2014-12-19 23:56:30 +00:00
Matthias Radestock ff69868922 allow password to be set through WEAVE_PASSWORD env var 
so that passwords can be supplied w/o them showing up in 'ps'
 2014-12-19 23:19:28 +00:00
Matthias Radestock f33ecad3fb don't be so defensive 
(we are not that paranoid elsewhere)
 2014-12-19 12:49:20 +00:00
Matthias Radestock f381d0af98 gracefully deal with missing/old ip utility 2014-12-19 12:18:01 +00:00
Matthias Radestock 3b3d5e6261 document mac_cache max age constraint 2014-12-18 18:21:31 +00:00
Matthias Radestock 1b140e3aa9 don't enter src MACs of forwarded packets in our cache 
There is no point, and it populates the cache with entries we don't
need. Local containers will still need to issue an ARP request when
they first talk to an IP corresponding to the MAC, so we learn about
the MAC at that point, just as normally happens.
 2014-12-18 17:39:01 +00:00
Matthias Radestock 867683ad05 show how to get passwordless ssh into the vagrant VMs 2014-12-18 17:28:29 +00:00
Matthias Radestock 6692dc403e work with latest (1.4) golang 2014-12-18 17:00:08 +00:00
Matthias Radestock eba1d95ddb add anchor for crypto 2014-12-15 19:02:44 +00:00
David Wragg 2db4b7e2ec Add a comment with a link to the gh-pages instructions 
It's easier to find the gh-pages scripts than it is to find the
instructions on their use.
 2014-12-15 14:38:22 +00:00
David Wragg 75ec838833 Merge PR #269 from 'rade/40_crypto_docs' 
Addresses #40
 2014-12-15 14:23:05 +00:00
David Wragg 9f25726bc2 Typos 2014-12-15 13:35:35 +00:00
Bryan Boreham 849a51c842 Update README.md 
Updated email address
 2014-12-15 10:44:03 +00:00
Matthias Radestock 801b2f6761 refactor for consistency 2014-12-13 10:19:17 +00:00
Matthias Radestock b1bde561bd fix typo 2014-12-13 10:06:40 +00:00
Matthias Radestock dc1942395d use the same /24 IP for DNS server everywhere 2014-12-12 23:24:37 +00:00
Matthias Radestock 27b12990a9 correct instructions for DNS sub-net 2014-12-12 23:23:59 +00:00
Matthias Radestock 215149a096 ungarble 2014-12-12 23:20:27 +00:00
Matthias Radestock 6b741bef27 state that nonce prepending is normal in NaCl 2014-12-12 18:50:09 +00:00
Matthias Radestock 5ab6d7bd1f cosmetic 2014-12-12 18:46:21 +00:00
Matthias Radestock ee19e39712 make it clear that key pairs are created per connection 2014-12-12 18:45:36 +00:00
Matthias Radestock b7d129b353 fix typo 2014-12-12 18:41:40 +00:00
Matthias Radestock f99fd9b8fb some rewording and some links 2014-12-12 18:29:15 +00:00
Matthias Radestock e04e2ab769 Merge branch 'master' into 40_crypto_docs 
Conflicts:
	site/how-it-works.md
 2014-12-12 18:12:25 +00:00
Matthias Radestock d012b0d5ce grrr 2014-12-12 18:10:22 +00:00
Matthias Radestock 3c52afb11e oops 2014-12-12 18:07:32 +00:00
Matthias Radestock 7b0d2cdeda cosmetic 2014-12-12 18:03:52 +00:00
Matthias Radestock 4c9cf3a0fe move explanation of peers and peer names 
...plus some related doc shuffling
 2014-12-12 17:59:41 +00:00
Matthias Radestock 2a1316553c simplify encapsulation diagrams 
by dropping the standard packet headers
 2014-12-12 17:44:23 +00:00