reweave/weave
1
0 Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
817 Commits 7 Branches 85 Tags
ef82e81c3faecd758b41f01fc90477667a35830e
Commit Graph
817 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
Michael Bridgen ef82e81c3f Push tagged images to docker 2014-12-24 11:04:52 +00:00
Michael Bridgen 801ca43fbf Better (working) way of checking for a release 2014-12-24 11:04:52 +00:00
Michael Bridgen ab4aa21cca Up to the point of making a git release 
(under my own account for the minute)
 2014-12-24 11:04:52 +00:00
Michael Bridgen ccf7e9993a Add version reporting to weaver 2014-12-24 11:04:51 +00:00
Michael Bridgen bfc9df4d25 Skeleton of a release script 2014-12-24 11:04:51 +00:00
Matthias Radestock 99c1163862 fmt 2014-12-24 10:54:38 +00:00
Matthias Radestock 5ccc753367 kill stale connections 
The weave protocol already effectively performs heartbeating -
FetchAll is performed at regular intervals. Hence we can detect stale
connections by the lack of receiving any data for approximately that
interval (we use x2).

We use the same interval to set a time limit on the handshake too, and
any subsequent interactions prior to the connection being fully
established.

Fixes #272.
 2014-12-24 10:33:37 +00:00
Matthias Radestock 3c50909a49 nodelay is the default, according to the docs 2014-12-24 09:09:00 +00:00
Matthias Radestock ad67dc5d07 don't swallow error 
Since sometimes the error is different from what we expect.
 2014-12-23 19:50:08 +00:00
Matthias Radestock 34db7044e4 cosmetic 2014-12-23 17:49:16 +00:00
rade e5699fcfcb Merge pull request #292 from errordeveloper/fix_282 
Simplify docker version sed expression

Fixes #282.
 2014-12-23 17:00:10 +00:00
Ilya Dmitrichenko c61ed4010a Simplify docker version sed expression (close #282) 2014-12-23 16:24:10 +00:00
Matthias Radestock d0846961e3 cosmetic(ish): consistently use $(...) instead of ... 2014-12-23 14:52:15 +00:00
rade ccabdc421a Merge pull request #290 from bboreham/master 
Quote $@ everywhere, to guard against spaces, globbing, etc.
 2014-12-23 14:50:28 +00:00
Bryan Boreham 5bb80c7126 Quote $@ everywhere, to guard against spaces, globbing, etc. 2014-12-23 14:42:48 +00:00
Matthias Radestock 15a5e38e8b cosmetic 2014-12-23 12:59:54 +00:00
Matthias Radestock af3d2c7e7f cosmetic: break overlong lines 2014-12-23 12:27:13 +00:00
Matthias Radestock d54cc53864 install docker-ns in test VMs 
handy for debugging
 2014-12-23 12:14:33 +00:00
Ilya Dmitrichenko 73a8f32532 Merge pull request #288 from viirya/if_param 
Assign iface parameter from defined variable
 2014-12-23 12:10:53 +00:00
Liang-Chi Hsieh f5afe3b203 Merge remote-tracking branch 'upstream/master' into if_param 
Conflicts:
	weave
	weaver/Dockerfile
 2014-12-22 20:58:20 +08:00
Bryan Boreham affb9aef42 Merge pull request #283 from rade/275_do_not_log_password 
Closes #275
 2014-12-22 11:31:16 +00:00
Matthias Radestock 7ccb9e36d9 update Dockerfile MAINTAINER 
and also use what appears to be (based on some sampling of the docker
registry) the correct convention for specifying the email address.

Also ditch superfluous CMD instruction in weaver.
 2014-12-22 11:11:00 +00:00
Bryan Boreham 887f2adbc1 Merge pull request #284 from rade/276_alternative_password_supply 
LGTM.  Closes #276
 2014-12-22 11:03:28 +00:00
Liang-Chi Hsieh 1dc28e9025 Assign iface parameter from defined variable. 2014-12-22 15:59:29 +08:00
David Wragg 08a445cb6d Merge PR #281: gracefully deal with missing/old ip utility 
Addresses #279
 2014-12-21 15:36:59 +00:00
Matthias Radestock b48a66ecca add conntrack to vagrant test VMs 
Fixes #287.
 2014-12-21 15:22:00 +00:00
Matthias Radestock aa68b6d05e cosmetic 2014-12-21 15:16:21 +00:00
Matthias Radestock 41cb8a1215 ditch check_command_and_run wrapper 
Since we end up swallowing the warning when wanting to redirect stderr
of the command execution.

Fixes #286.
 2014-12-21 15:07:21 +00:00
Matthias Radestock 66e55ee421 keep stdout and stderr separate in with_container_netns 
so we don't end up swallowing warnings when redirecting stdout

Fixes #285.
 2014-12-21 14:29:54 +00:00
Matthias Radestock 7c513fc22b don't duplicate output on error in with_container_netns 
This does not cause any problems right now, since all the call sites
swallow stdout on error. But it is wrong nevertheless.
 2014-12-21 13:51:59 +00:00
Matthias Radestock fc3630da41 ignore .vagrant dir 2014-12-20 01:40:30 +00:00
Matthias Radestock e2ec460752 feed password to weave via env var, possibly via a file 
The latter is the most secure route since it keeps the password
completely out of any command lines, and the permissions on the file
can be very restrictive, e.g. 0400.

It would be somewhat nicer if the password file contained just
    <password>
rather than
    WEAVE_PASSWORD=<password>
but then we'd have to transit the password via a temporary file with
0600 permissions.
 2014-12-20 01:22:59 +00:00
Matthias Radestock 2386e75cc1 Merge branch 'master' into 276_alternative_password_supply 2014-12-20 00:21:35 +00:00
Matthias Radestock dbf09096b3 link to crypto docs from security feature 2014-12-20 00:15:11 +00:00
Matthias Radestock 33494f1b47 do not log password 
This is trickier than it may first appear. We can't just filter the
password from os.Args, since that would require recreating the flag
parsing logic, which allows flags to be specified in a wide variety of
formats. And there is no API for calling that logic either.

So instead we log the results of the flag parsing, eliding the
password, and using a straight golang map for formatting (so we don't
have to get creative).
 2014-12-19 23:56:30 +00:00
Matthias Radestock ff69868922 allow password to be set through WEAVE_PASSWORD env var 
so that passwords can be supplied w/o them showing up in 'ps'
 2014-12-19 23:19:28 +00:00
Matthias Radestock f33ecad3fb don't be so defensive 
(we are not that paranoid elsewhere)
 2014-12-19 12:49:20 +00:00
Matthias Radestock f381d0af98 gracefully deal with missing/old ip utility 2014-12-19 12:18:01 +00:00
Matthias Radestock 3b3d5e6261 document mac_cache max age constraint 2014-12-18 18:21:31 +00:00
Matthias Radestock 1b140e3aa9 don't enter src MACs of forwarded packets in our cache 
There is no point, and it populates the cache with entries we don't
need. Local containers will still need to issue an ARP request when
they first talk to an IP corresponding to the MAC, so we learn about
the MAC at that point, just as normally happens.
 2014-12-18 17:39:01 +00:00
Matthias Radestock 867683ad05 show how to get passwordless ssh into the vagrant VMs 2014-12-18 17:28:29 +00:00
Matthias Radestock 6692dc403e work with latest (1.4) golang 2014-12-18 17:00:08 +00:00
Matthias Radestock eba1d95ddb add anchor for crypto 2014-12-15 19:02:44 +00:00
David Wragg 2db4b7e2ec Add a comment with a link to the gh-pages instructions 
It's easier to find the gh-pages scripts than it is to find the
instructions on their use.
 2014-12-15 14:38:22 +00:00
David Wragg 75ec838833 Merge PR #269 from 'rade/40_crypto_docs' 
Addresses #40
 2014-12-15 14:23:05 +00:00
David Wragg 9f25726bc2 Typos 2014-12-15 13:35:35 +00:00
Bryan Boreham 849a51c842 Update README.md 
Updated email address
 2014-12-15 10:44:03 +00:00
Matthias Radestock 801b2f6761 refactor for consistency 2014-12-13 10:19:17 +00:00
Matthias Radestock b1bde561bd fix typo 2014-12-13 10:06:40 +00:00
Matthias Radestock dc1942395d use the same /24 IP for DNS server everywhere 2014-12-12 23:24:37 +00:00