…odule volume for the tests that need to run modprobe.

Signed-off-by: Billy Ridgway <[email protected]>

Signed-off-by: Billy Ridgway <[email protected]>

Signed-off-by: Billy Ridgway <[email protected]>

- Introduced back the Invalidate
- optimized the rebroadcast logic

Signed-off-by: Flavio Crisciani <[email protected]>

join/leave fixes:
 - when a node leaves the network will deletes all the other nodes entries but will keep track of its
   to make sure that other nodes if they are tcp syncing will be aware of them being deleted. (a node that
   did not yet receive the network leave will potentially tcp/sync)

add network reapTime, was not being set locally

Signed-off-by: Flavio Crisciani <[email protected]>

Before when a node was failing, all the nodes would bump the lamport time of all their
entries. This means that if a node flap, there will be a storm of update of all the entries.
This commit on the base of the previous logic guarantees that only the node that joins back
will readvertise its own entries, the other nodes won't need to advertise again.

Signed-off-by: Flavio Crisciani <[email protected]>

Signed-off-by: Flavio Crisciani <[email protected]>

This reverts commit 99290ab.

Signed-off-by: Flavio Crisciani <[email protected]>

Signed-off-by: Flavio Crisciani <[email protected]>

Signed-off-by: Frank Yang <[email protected]>

This reverts commit de61c2f.

Signed-off-by: Flavio Crisciani <[email protected]>

Remove the need for the wait group and avoid new
locks
Added utility to print the method name and the caller name

Signed-off-by: Flavio Crisciani <[email protected]>

Move the sandbox init logic into the go routine that handles
peer operations.
This is to avoid deadlocks in the use of the pMap.Lock for the
network

Signed-off-by: Flavio Crisciani <[email protected]>

This patch improves debugging for the resolver;

- prefix debug messages with `[resolver]` for easier finding in the daemon logs
- use `A` / `AAAA` for query-types in the logs instead of their numeric code
- add debug messages if the external DNS did not return a result
- print sucessful results (t.b.d.)

Signed-off-by: Sebastiaan van Stijn <[email protected]>

Fix case sensitivity issue
Update docker and runc vendors

Signed-off-by: Derek McGowan <[email protected]>

…So now there are twice as many port bindings.

Signed-off-by: Billy Ridgway <[email protected]>

…r bridge, setup_ip_tables, firewalld and iptables.

Signed-off-by: Billy Ridgway <[email protected]>

Signed-off-by: Billy Ridgway <[email protected]>

Refreshed the PR: moby#1585
Addressed comments suggesting to remove the IPAlias logic not anymore used

Signed-off-by: Flavio Crisciani <[email protected]>

…oth IPv4 and IPv6

Signed-off-by: Billy Ridgway <[email protected]>

The peerDbDelete was passing the wrong field to the underlay
Delete operation causing the mac entry to not being deleted
from the bridge on the overlay. This caused connectivity issue
when a container that before was remote was now scheduled
on the local node. The entry was such:
bridge fdb show | grep -i 02:42:0a:01:00:02
02:42:0a:01:00:02 dev vxlan0 master br0
02:42:0a:01:00:02 dev vxlan0 dst 172.31.14.63 link-netnsid 0 self permanent
That was still pointing to a remove node

Signed-off-by: Flavio Crisciani <[email protected]>

In the peerDelete the updateDB flag was always true
In the peerAdd the updateDB flag was always true except for
the initSandbox case. But now the initSandbox is handled by the
go routing of the peer operations, so we can move that flag
down and remove it from the top level functions

Signed-off-by: Flavio Crisciani <[email protected]>

Prevents an issue where the goroutine may jump to a new OS thread during
execution putting it into a mount/network NS that is unexpected.

Signed-off-by: Brian Goff <[email protected]>
(cherry picked from commit 65bb58f)
Signed-off-by: Brian Goff <[email protected]>

`/etc/resolv.conf` is not an essential file in filesystem. (see
http://man7.org/linux/man-pages/man5/resolv.conf.5.html)

> If this file does not exist, only the name server on the local machine
> will be queried

It's baffling to users that containers can start with an empty
`resolv.conf` but cannot without this file.

This PR:
* ignore this error and use default servers for containers in `bridge`
  mode networking.
* create an empty resolv.conf in `/var/lib/docker/containers/<id>` in
  `host` mode networking.

Signed-off-by: Yuanhong Peng <[email protected]>

The cluster provider interface does not need GetNetworkKeys
and SetNetworkKeys

Signed-off-by: Hui Kang <[email protected]>

Signed-off-by: Hui Kang <[email protected]>

Use the string concatenation operator instead of using Sprintf for
simple string concatenation. This is usually easier to read, and allows
the compiler to detect problems with the type or number of operands,
which would be runtime errors with Sprintf.

Signed-off-by: Aaron Lehmann <[email protected]>

Signed-off-by: Tomoya Tabuchi <[email protected]>

Signed-off-by: Flavio Crisciani <[email protected]>

Signed-off-by: Abhinandan Prativadi <[email protected]>

Fix marshalling and add test

Signed-off-by: Flavio Crisciani <[email protected]>

Signed-off-by: Sebastiaan van Stijn <[email protected]>

Without `-n`, iptables will attempt to lookup hostnames for IP
addresses, which can slow down the call dramatically.
Since we don't need this, and generally don't even care about the
output, use the `-n` flag to disable this.

Signed-off-by: Brian Goff <[email protected]>

Signed-off-by: Madhan Raj Mookkandy <[email protected]>

…h Madhu.

Signed-off-by: Pradip Dhara <[email protected]>

Bumps the Go version used to 1.8.4, which contains security fixes;
https://groups.google.com/forum/#!topic/golang-announce/1hZYiemnkdE

Signed-off-by: Sebastiaan van Stijn <[email protected]>

In case of merge commit, the sha passed to the codecov tool
is the one of the merged commit intstead of the merge commit
this creates error because the base commit is always different.
Passing it explicitely should fix it

Signed-off-by: Flavio Crisciani <[email protected]>

…ing runs before v6 and the userland proxy is up already. Complete FIXME for appending rule to FORWARD chain for IPv6.

Signed-off-by: Billy Ridgway <[email protected]>

Signed-off-by: Billy Ridgway <[email protected]>