-
Notifications
You must be signed in to change notification settings - Fork 229
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #1074 from EnterpriseDB/release/2021-03-16
Production Release 2021-03-16 Former-commit-id: 5577abf
- Loading branch information
Showing
14 changed files
with
275 additions
and
80 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
186 changes: 186 additions & 0 deletions
186
.devcontainer/library-scripts/docker-in-docker-debian.sh
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,186 @@ | ||
| #!/usr/bin/env bash | ||
| #------------------------------------------------------------------------------------------------------------- | ||
| # Copyright (c) Microsoft Corporation. All rights reserved. | ||
| # Licensed under the MIT License. See https://go.microsoft.com/fwlink/?linkid=2090316 for license information. | ||
| #------------------------------------------------------------------------------------------------------------- | ||
| # | ||
| # Docs: https://github.com/microsoft/vscode-dev-containers/blob/master/script-library/docs/docker-in-docker.md | ||
| # Maintainer: The VS Code and Codespaces Teams | ||
| # | ||
| # Syntax: ./docker-in-docker-debian.sh [enable non-root docker access flag] [non-root user] [use moby] | ||
|
|
||
| ENABLE_NONROOT_DOCKER=${1:-"true"} | ||
| USERNAME=${2:-"automatic"} | ||
| USE_MOBY=${3:-"true"} | ||
|
|
||
| set -e | ||
|
|
||
| if [ "$(id -u)" -ne 0 ]; then | ||
| echo -e 'Script must be run as root. Use sudo, su, or add "USER root" to your Dockerfile before running this script.' | ||
| exit 1 | ||
| fi | ||
|
|
||
| # Determine the appropriate non-root user | ||
| if [ "${USERNAME}" = "auto" ] || [ "${USERNAME}" = "automatic" ]; then | ||
| USERNAME="" | ||
| POSSIBLE_USERS=("vscode" "node" "codespace" "$(awk -v val=1000 -F ":" '$3==val{print $1}' /etc/passwd)") | ||
| for CURRENT_USER in ${POSSIBLE_USERS[@]}; do | ||
| if id -u ${CURRENT_USER} > /dev/null 2>&1; then | ||
| USERNAME=${CURRENT_USER} | ||
| break | ||
| fi | ||
| done | ||
| if [ "${USERNAME}" = "" ]; then | ||
| USERNAME=root | ||
| fi | ||
| elif [ "${USERNAME}" = "none" ] || ! id -u ${USERNAME} > /dev/null 2>&1; then | ||
| USERNAME=root | ||
| fi | ||
|
|
||
| # Function to run apt-get if needed | ||
| apt-get-update-if-needed() | ||
| { | ||
| if [ ! -d "/var/lib/apt/lists" ] || [ "$(ls /var/lib/apt/lists/ | wc -l)" = "0" ]; then | ||
| echo "Running apt-get update..." | ||
| apt-get update | ||
| else | ||
| echo "Skipping apt-get update." | ||
| fi | ||
| } | ||
|
|
||
| # Ensure apt is in non-interactive to avoid prompts | ||
| export DEBIAN_FRONTEND=noninteractive | ||
|
|
||
| # Install docker/dockerd dependencies if missing | ||
| if ! dpkg -s apt-transport-https curl ca-certificates lsb-release lxc pigz iptables > /dev/null 2>&1 || ! type gpg > /dev/null 2>&1; then | ||
| apt-get-update-if-needed | ||
| apt-get -y install --no-install-recommends apt-transport-https curl ca-certificates lsb-release lxc pigz iptables gnupg2 | ||
| fi | ||
|
|
||
| # Swap to legacy iptables for compatibility | ||
| update-alternatives --set iptables /usr/sbin/iptables-legacy | ||
| update-alternatives --set ip6tables /usr/sbin/ip6tables-legacy | ||
|
|
||
| # Install Docker / Moby CLI if not already installed | ||
| if type docker > /dev/null 2>&1 && type dockerd > /dev/null 2>&1; then | ||
| echo "Docker / Moby CLI and Engine already installed." | ||
| else | ||
| if [ "${USE_MOBY}" = "true" ]; then | ||
| DISTRO=$(lsb_release -is | tr '[:upper:]' '[:lower:]') | ||
| CODENAME=$(lsb_release -cs) | ||
| curl -s https://packages.microsoft.com/keys/microsoft.asc | (OUT=$(apt-key add - 2>&1) || echo $OUT) | ||
| echo "deb [arch=amd64] https://packages.microsoft.com/repos/microsoft-${DISTRO}-${CODENAME}-prod ${CODENAME} main" > /etc/apt/sources.list.d/microsoft.list | ||
| apt-get update | ||
| apt-get -y install --no-install-recommends moby-cli moby-engine | ||
| else | ||
| curl -fsSL https://download.docker.com/linux/$(lsb_release -is | tr '[:upper:]' '[:lower:]')/gpg | (OUT=$(apt-key add - 2>&1) || echo $OUT) | ||
| echo "deb [arch=amd64] https://download.docker.com/linux/$(lsb_release -is | tr '[:upper:]' '[:lower:]') $(lsb_release -cs) stable" | tee /etc/apt/sources.list.d/docker.list | ||
| apt-get update | ||
| apt-get -y install --no-install-recommends docker-ce-cli docker-ce | ||
| fi | ||
| fi | ||
|
|
||
| echo "Finished installing docker / moby" | ||
|
|
||
| # Install Docker Compose if not already installed | ||
| if type docker-compose > /dev/null 2>&1; then | ||
| echo "Docker Compose already installed." | ||
| else | ||
| LATEST_COMPOSE_VERSION=$(curl -sSL "https://api.github.com/repos/docker/compose/releases/latest" | grep -o -P '(?<="tag_name": ").+(?=")') | ||
| curl -sSL "https://github.com/docker/compose/releases/download/${LATEST_COMPOSE_VERSION}/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose | ||
| chmod +x /usr/local/bin/docker-compose | ||
| fi | ||
|
|
||
| # If init file already exists, exit | ||
| if [ -f "/usr/local/share/docker-init.sh" ]; then | ||
| echo "/usr/local/share/docker-init.sh already exists, so exiting." | ||
| exit 0 | ||
| fi | ||
| echo "docker-init doesnt exist..." | ||
|
|
||
| # Add user to the docker group | ||
| if [ "${ENABLE_NONROOT_DOCKER}" = "true" ]; then | ||
| if ! getent group docker > /dev/null 2>&1; then | ||
| groupadd docker | ||
| fi | ||
| usermod -aG docker ${USERNAME} | ||
| fi | ||
|
|
||
| tee /usr/local/share/docker-init.sh > /dev/null \ | ||
| << 'EOF' | ||
| #!/usr/bin/env bash | ||
| #------------------------------------------------------------------------------------------------------------- | ||
| # Copyright (c) Microsoft Corporation. All rights reserved. | ||
| # Licensed under the MIT License. See https://go.microsoft.com/fwlink/?linkid=2090316 for license information. | ||
| #------------------------------------------------------------------------------------------------------------- | ||
| sudoIf() | ||
| { | ||
| if [ "$(id -u)" -ne 0 ]; then | ||
| sudo "$@" | ||
| else | ||
| "$@" | ||
| fi | ||
| } | ||
| # explicitly remove dockerd and containerd PID file to ensure that it can start properly if it was stopped uncleanly | ||
| # ie: docker kill <ID> | ||
| sudoIf find /run /var/run -iname 'docker*.pid' -delete || : | ||
| sudoIf find /run /var/run -iname 'container*.pid' -delete || : | ||
| set -e | ||
| ## Dind wrapper script from docker team | ||
| # Maintained: https://github.com/moby/moby/blob/master/hack/dind | ||
| export container=docker | ||
| if [ -d /sys/kernel/security ] && ! sudoIf mountpoint -q /sys/kernel/security; then | ||
| sudoIf mount -t securityfs none /sys/kernel/security || { | ||
| echo >&2 'Could not mount /sys/kernel/security.' | ||
| echo >&2 'AppArmor detection and --privileged mode might break.' | ||
| } | ||
| fi | ||
| # Mount /tmp (conditionally) | ||
| if ! sudoIf mountpoint -q /tmp; then | ||
| sudoIf mount -t tmpfs none /tmp | ||
| fi | ||
| # cgroup v2: enable nesting | ||
| if [ -f /sys/fs/cgroup/cgroup.controllers ]; then | ||
| # move the init process (PID 1) from the root group to the /init group, | ||
| # otherwise writing subtree_control fails with EBUSY. | ||
| sudoIf mkdir -p /sys/fs/cgroup/init | ||
| sudoIf echo 1 > /sys/fs/cgroup/init/cgroup.procs | ||
| # enable controllers | ||
| sudoIf sed -e 's/ / +/g' -e 's/^/+/' < /sys/fs/cgroup/cgroup.controllers \ | ||
| > /sys/fs/cgroup/cgroup.subtree_control | ||
| fi | ||
| ## Dind wrapper over. | ||
| # Handle DNS | ||
| set +e | ||
| cat /etc/resolv.conf | grep -i 'internal.cloudapp.net' | ||
| if [ $? -eq 0 ] | ||
| then | ||
| echo "Setting dockerd Azure DNS." | ||
| CUSTOMDNS="--dns 168.63.129.16" | ||
| else | ||
| echo "Not setting dockerd DNS manually." | ||
| CUSTOMDNS="" | ||
| fi | ||
| set -e | ||
| # Start docker/moby engine | ||
| ( sudoIf dockerd $CUSTOMDNS > /tmp/dockerd.log 2>&1 ) & | ||
| set +e | ||
| # Execute whatever commands were passed in (if any). This allows us | ||
| # to set this script to ENTRYPOINT while still executing the default CMD. | ||
| exec "$@" | ||
| EOF | ||
|
|
||
| chmod +x /usr/local/share/docker-init.sh | ||
| chown ${USERNAME}:root /usr/local/share/docker-init.sh |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
4 changes: 2 additions & 2 deletions
4
product_docs/docs/migration_portal/3.0.1/02_supported_platforms.mdx
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Oops, something went wrong.