David Scott

Workaround problems with hardened runtime, needed for notarization

2

On macOS 10.15 Catalina and later applications need to be [Notarized](https://developer.apple.com/documentation/security/notarizing_your_app_before_distribution#3087722) where notarization is an Apple malware- and security-check of the released binaries. As part of the notarization process, Apple...

Consider using kqueue in hypervisor socket implementation

5

The core of hyperkit uses `kqueue` via `mevent.c` but `pci_virtio_sock.c` uses plain old `select`. If `hyperkit` is used together with `vpnkit` in Docker for Mac and large numbers (> 1024)...

Assertion failed: (!REPLY_RING_EMPTY(sc)), function send_response_common, file src/lib/pci_virtio_sock.c, line 934.

1

In https://github.com/docker/for-mac/issues/2872#issuecomment-386560236 a Docker container is shutdown and a set of `AF_VSOCK` connections are simultaneously closed: ``` 2018-05-02 15:21:58.519471-0700 localhost com.docker.driver.amd64-linux[19791]: proxy : shutdown: socket is not connected 2018-05-02 15:21:58.561133-0700...

virtio-vsock can't handle a high connection rate

1

This Docker for Mac bug report: https://github.com/docker/for-mac/issues/1417 contains an interesting set of repro steps: ``` dd if=/dev/zero of=zero.txt bs=1000 count=1 docker run -dit -p 8888:80 --name apache -v "$PWD":/usr/local/apache2/htdocs/ httpd:2.4...

vCPU thaw triggering VMEXIT_ABORT

1

In [docker/for-mac#85] the report with diagnostic bundle ID `264231A3-7008-4FAA-9D89-83D089716817/20160817-153827` shows a hyperkit crash on wake: (hostname and username redacted) ``` Aug 17 14:59:30 Docker[com.docker.driver.amd64-linux][27183] : System wants to go to...

This is based on the existing "gateway forwards" mechanism which allowed traffic sent to the gateway to be forwarded. A `forwards.json` can be dynamically updated with IP network matches and...

This is to help debug a strange Windows failure: Add a `vpnkit.exe curl http://example.com` test program Add verbose debug logging around TCP connections

win: add Dockerfile

1

Signed-off-by: David Scott

Signed-off-by: David Scott

Include explicit device access for /dev/net/tun , see https://github.com/opencontainers/runc/pull/3468