Age | Commit message (Collapse) | Author | |
---|---|---|---|
2021-03-01 | Make Daemon UID and GID uints | Balasankar "Balu" C | |
Signed-off-by: Balasankar "Balu" C <balasankarc@autistici.org> | |||
2021-03-01 | Pass address of Config to app class and make the config field explicit | Balasankar "Balu" C | |
Signed-off-by: Balasankar "Balu" C <balasankarc@autistici.org> | |||
2021-03-01 | Pass address of Config to daemon class | Balasankar "Balu" C | |
Signed-off-by: Balasankar "Balu" C <balasankarc@autistici.org> | |||
2021-03-01 | Move configuration parsing to Config package | Balasankar "Balu" C | |
Changelog: changed Signed-off-by: Balasankar "Balu" C <balasankarc@autistici.org> | |||
2021-02-02 | Add MkDirAll to jail | Jaime Martinez | |
2021-02-02 | Remove wd and add note for pages-root | Jaime Martinez | |
2021-02-02 | Ensure pages-root is abs | Jaime Martinez | |
MkdirAll in jail so the full pages-root path is created | |||
2021-02-02 | Use pages-root as jail path | Jaime Martinez | |
2021-01-21 | Merge branch 'etc-hosts' into 'master' | Vladimir Shushlin | |
Include /etc/hosts in chroot jail See merge request gitlab-org/gitlab-pages!124 | |||
2021-01-21 | Include /etc/hosts in chroot jail | Ismo Toijala | |
2020-11-18 | Support for HTTPS over PROXYv2 protocol | Igor Wiedler | |
2020-09-02 | Remove `LazyUnbind` method | Kamil Trzciński | |
2020-09-02 | Unshare mount namespace to fix `getcwd` | Kamil Trzciński | |
Previously we would call `LazyUnbind` as soon as proces starts. This does break `getcwd` as it starts returning `(unreachable)` due to mountpoint being gone from `chroot`. This removes the need for `LazyUnbind` and instead `unshare` mount namespace, making the new process to have it's own mounts that are not shared with parent process. The mounts gets cleaned-up once the process exists. | |||
2020-06-30 | Ensure that cmd.Env is always appended to and not overwritten | Jonathon Reinhart | |
2020-06-30 | Copy certificates from SSL_CERT_DIR into jail | Jonathon Reinhart | |
Refactor out jailDaemonCerts() from jailDaemon() | |||
2019-12-04 | Improve error reporting in the main package | Grzegorz Bizon | |
2019-10-07 | Remove unused Admin gRPC API | Krasimir Angelov | |
It was ever used. See gitlab-org/omnibus-gitlab/merge_requests/3444#note_194217889 for more details. Done as part of https://gitlab.com/gitlab-org/gitlab/issues/28781. | |||
2018-04-27 | Restore the old in-place chroot behaviour as a command-line option | Nick Thomas | |
2018-04-26 | Create /dev/random and /dev/urandom when daemonizing and jailing | Nick Thomas | |
Go on Linux normally uses the getrandom() syscall to get entropy. However, this is onl available for Linux version >= 3.17 Making /dev/random and /dev/urandom available in the chrooted jail allows the daemon to operate correctly on these systems. It's important to handle this automatically, as the previous workaround of manually creating these character devices is made more difficult by the use of a random directory in $TMPDIR. | |||
2018-04-23 | Add gRPC admin health check | Jacob Vosmaer (GitLab) | |
2018-03-21 | Add /etc/resolv.conf and /etc/ssl/certs to pages chroot | Alessio Caiazza | |
2018-03-13 | Add more logging to gitlab pages daemon | maxmeyer | |
2018-03-07 | Structured logging | Jacob Vosmaer (GitLab) | |
2017-03-08 | Use fmt/log.Println, not the println builtin | Nick Thomas | |
2017-02-23 | Only pass a metrics fd to the daemon child if a metrics address was specified | Nick Thomas | |
2017-02-20 | Pass the metrics address fd to the child process | Nick Thomas | |
2016-09-09 | Allow -listen-http, -listen-https and -listen-proxy to be given more than once | Nick Thomas | |
Per issue #13, sometimes you want to listen on more than one port for each type of listener. This commit adds support for that. | |||
2016-02-16 | Fix small bugs | Kamil Trzcinski | |
2016-02-16 | Execute unprivileged daemon in chroot | Kamil Trzcinski | |
2016-02-16 | Execute in chroot | Kamil Trzcinski | |
2016-02-12 | Make daemonized name to gitlab-pages-unprivilegedv0.1.0 | Kamil Trzcinski | |
2016-02-12 | Make verify happy | Kamil Trzcinski | |
2016-02-12 | Pass actual signal | Kamil Trzcinski | |
2016-02-12 | Pass more signals | Kamil Trzcinski | |
2016-02-12 | Display the uid and gid of daemon | Kamil Trzcinski | |
2016-02-12 | Allow to daemonize the app | Kamil Trzcinski | |
2016-02-12 | Daemonize | Kamil Trzcinski | |