3.0.0
First release of rootless Docker ACAP!
For reference see the announcement on Axis Developer Community about Removal of root-privileged access, etc.
Major Changes
Breaking
- Application user changed to dynamic user, i.e. it does no longer have root privileges. (#208)
- Removed migration of SD Card data root location introduced in 2.0.0 (#228)
- ACAP SDK update to 4.14 and manifest schema 1.7.0 means that minimum Axis OS version is now 11.10 (#208, #221)
Other
- Added cgis for uploading TLS certificates to the application (#201)
Note on upgrading from earlier versions of Docker ACAP
If an earlier version of the Docker ACAP has been used on the device and the SDCardSupport
option is used, we recommend the following migration path. On a device running Axis OS 11.10 or 11.11:
- Make sure AllowRoot is set to
True
for installing applications - Install and start Docker ACAP 2.0.0 to migrate the SD card contents to the new data root location.
- With AllowRoot still set to
True
install Docker ACAP 3.0.0. This will allow the postinstall script to run and set the correct permissions for the data root contents on SD card. - Set the AllowRoot toggle to
False
What's Changed
- Log warnings instead of errors for missing TLS certs by @killenheladagen in #192
- Allow debug logging from multiple threads by @killenheladagen in #189
- Refactoring Dockerfile by @madelen-at-work in #200
- Upload and delete certificates using HTTP requests by @killenheladagen in #201
- Make dockerd 'allow start' flag thread safe by @killenheladagen in #202
- Step app version to 2.1 after release by @madelen-at-work in #203
- Set PATH variable in code by @madelen-at-work in #205
- Workflow: make cache key more unique by @madelen-at-work in #207
- Restart dockerd after successful file upload by @killenheladagen in #209
- Reject upload of malformed TLS files by @killenheladagen in #211
- Allow dockerd to recover when uploading a new file by @killenheladagen in #210
- Removed typos with compose by @madelen-at-work in #215
- Break out function for building daemon command line by @killenheladagen in #217
- Set status and log errors consistently by @killenheladagen in #218
- Create empty daemon.json without a source file by @killenheladagen in #216
- Manifest and postinstall updated for rootless by @madelen-at-work in #208
- Add env variables for rootless by @madelen-at-work in #206
- Updated Dockerfile for rootless by @madelen-at-work in #204
- Create rootlesskit command by @madelen-at-work in #193
- Clean up docker.pid file in /var/run/user by @killenheladagen in #213
- Set and restore permissions for /var/run/user/UID by @killenheladagen in #219
- Remove unnecessary check that child process was started by @killenheladagen in #222
- Set ownership of empty daemon.json when running postinstall as root by @killenheladagen in #224
- Use rootlesskit instead of dockerd where relevant by @killenheladagen in #225
- Updated documentation for rootless release by @madelen-at-work in #133
- Remove superfluous DOCKER_HOST variable by @killenheladagen in #227
- Set IPC socket group ownership to addon by @killenheladagen in #226
- Remove SD Card migration by @madelen-at-work in #228
- Log exit code by @killenheladagen in #230
- Remove duplication of XDG runtime dir by @killenheladagen in #229
- Dockerfile stage change by @madelen-at-work in #233
- Move and rename process exit callback by @killenheladagen in #231
- Simplify concatenation of formatted strings by @killenheladagen in #232
- Add sdk group by @madelen-at-work in #234
- Free resources in the reverse order of allocation by @killenheladagen in #237
- Fix memory leak during child process exit code checking by @killenheladagen in #236
- Remove unnecessary cleanup of AXParameter callbacks by @killenheladagen in #235
- Clean up AXParameter callback registration code by @killenheladagen in #239
- Handle HTTP requests one-by-one by @killenheladagen in #238
- Don't refer to a release until it is done by @madelen-at-work in #241
- Set dockerd default log-level to warning by @madelen-at-work in #242
- SDK version 1.14-rc.3 by @madelen-at-work in #243
- Log missing SD card as a warning rather than an error by @killenheladagen in #246
- Log missing TLS certificates as a warning rather than an error by @killenheladagen in #245
- Remove repetitive log messages by @killenheladagen in #244
- Try to change ownership of files on SD card during installation by @killenheladagen in #247
- Set ACAP native SDK version to 1.14 by @madelen-at-work in #221
- Update links for release by @madelen-at-work in #250
Full Changelog: 2.0.0...3.0.0