7ccb9e36d9
update Dockerfile MAINTAINER and also use what appears to be (based on some sampling of the docker registry) the correct convention for specifying the email address.
Matthias Radestock2014-12-22 11:11:00 +00:00
41cb8a1215
ditch check_command_and_run wrapper Since we end up swallowing the warning when wanting to redirect stderr of the command execution.
Matthias Radestock2014-12-21 15:07:21 +00:00
66e55ee421
keep stdout and stderr separate in with_container_netns so we don't end up swallowing warnings when redirecting stdout
Matthias Radestock2014-12-21 14:29:54 +00:00
7c513fc22b
don't duplicate output on error in with_container_netns This does not cause any problems right now, since all the call sites swallow stdout on error. But it is wrong nevertheless.
Matthias Radestock2014-12-21 13:51:59 +00:00
e2ec460752
feed password to weave via env var, possibly via a file The latter is the most secure route since it keeps the password completely out of any command lines, and the permissions on the file can be very restrictive, e.g. 0400.
Matthias Radestock2014-12-20 01:22:59 +00:00
2386e75cc1
Merge branch 'master' into 276_alternative_password_supply
Matthias Radestock2014-12-20 00:21:35 +00:00
33494f1b47
do not log password This is trickier than it may first appear. We can't just filter the password from os.Args, since that would require recreating the flag parsing logic, which allows flags to be specified in a wide variety of formats. And there is no API for calling that logic either.
Matthias Radestock2014-12-19 23:56:30 +00:00
ff69868922
allow password to be set through WEAVE_PASSWORD env var so that passwords can be supplied w/o them showing up in 'ps'
Matthias Radestock2014-12-19 23:19:28 +00:00
f33ecad3fb
don't be so defensive (we are not that paranoid elsewhere)
Matthias Radestock2014-12-19 12:49:20 +00:00
1b140e3aa9
don't enter src MACs of forwarded packets in our cache There is no point, and it populates the cache with entries we don't need. Local containers will still need to issue an ARP request when they first talk to an IP corresponding to the MAC, so we learn about the MAC at that point, just as normally happens.
Matthias Radestock2014-12-18 17:39:01 +00:00
c4a64c8649
refactor and explain route calculation This was rather impenetrable and had some significant code duplication. So add some words of explanation, and refactor to remove the duplication. Some fly-by fixing of minor bug too: buildUnicastRoutes failed to exclude asymmetric connections from the first hop.
Matthias Radestock2014-11-30 16:04:55 +00:00
89a1e0fb24
eliminate a deadlock Golang locks aren't re-entrant. As result one can get deadlocks on RWMutexes like this:
Matthias Radestock2014-11-30 15:48:46 +00:00
fd6f19cc44
check for Docker version >= 1.2.0 when using "--with-dns" since --dns-search=. is is new in that version
Matthias Radestock2014-11-28 09:10:14 +00:00
f6f1916c39
Merge branch '233_stop_on_docker_run_errors' into 238_check_docker_version_when_using_dns
Matthias Radestock2014-11-28 08:53:02 +00:00
24702e3a7a
stop weavedns from complaining when a container has no docker ip e.g. when it was started with --net=none
Matthias Radestock2014-11-27 16:13:06 +00:00
Matthias Radestock