Basically we want to run go test on all directories where _test.go
files reside excluding functional tests and Godeps. I'm rather not
sure about the last one - it might be useful to check if our Godeps
pass their tests.
We also want to check for formatting and suspicious constructs on all
.go files.
So instead of hardcoding the list, employ some basic tools to produce
the list for us. That way we don't have to maintain the list - nobody
ever remembers about that thing.
Run go vet against packages in FORMATTABLE list instead of
TESTABLE_AND_FORMATTABLE. The TESTABLE part should be only about
packages that provide _test.go source files.
Also, add more packages to check for formatting and suspicious
constructs.
- Create general tests/README.md describing current situation.
- Remove circle.yml for now until we have it working.
- Add copyright header to inspects.go
Authorization configuration is searched for first in
/usr/lib/rkt/auth.d directory (for vendors) and then in
/etc/rkt/auth.d. Directories, symlinks and files with no ".json"
suffix inside auth.d directory are simply ignored.
Configuration file format is described in
Documentation/config-format.md.
- Move metadatasvc into rkt as a subcommand
- Add option to spawn metadatasvc from rkt run
- Register container with metadatasvc
- Removes anti-spoofing logic -- this belongs in the network plugin
Fixes#33
Unfortunately the recent fetch refactoring inverted the logic from what
it should be; we want to first check if the supplied image name is a
valid URL, and, if so, we should just pass it through. Otherwise,
newDiscoveryApp will return bogus results because
discovery.NewAppFromString does not expect to get URLs.
Also adds a few test cases for NewDiscoveryApp.
Note this only quotes the arguments, not the path. There's a bug in
systemd which prevents quoting the path; it thinks the executable's path
is not absolute when quoted. This prevents things like an executable path
containing spaces from working:
https://bugs.freedesktop.org/show_bug.cgi?id=86171
The fix landed in systemd upstream Dec 18th, which should make it into v219.
Also added keys to the unit.UnitOption composite literals to satisfy govet.
Fixes#321.
This patch adds support for managing trusted opengpg keys in a keystore backed
by the local filesystem. Trusted keys are stored in following directories by
default:
* /etc/rkt/trustedkeys/root.d
* /etc/rkt/trustedkeys/prefix.d
* /usr/lib/rkt/trustedkeys/root.d
* /usr/lib/rkt/trustedkeys/prefix.d
Each trusted key is stored using the key fingerprint as the name and the key
in OpenPGP ASCII Armor format as the contents.
OS vendors can store system-wide trusted keys in the trusted keys directories
under /usr, which can be overridden by creating an empty file under /etc with a
matching name (fingerprint).
This patch also adds support for validating ACI signatures against trusted keys
found in the local keystore.
Fixes#215
The appc spec has moved! Its new home is at https://github.com/appc/spec
This removes the spec (since it has already been migrated), and adds
placeholders linking to the new repo. It also updates rocket to
reference the spec repo _directly_ (i.e. NOT godepped). This means that
people will need to maintain the spec in their gopath for now when
building rocket.
Alban Crequy