{"push_id":1080298391,"size":21,"distinct_size":21,"ref":"refs/heads/master","head":"5aea9df7a70c8c4c65fd95de64f7d43d55f82274","before":"1f16bd9b2a8ac8b8358a5d911587145d461efc71","commits":[{"sha":"daa22603c4128a6994d07a18439052360876e07b","author":{"email":"1a73af9e7ae00182733b2292511b814be66f065f@tmrts.com","name":"Tamer Tas"},"message":"tests: find LCA to detect commit differences\n\nCreates a function to find the lowest common ancestor between two commits.\n\nFixes #2423","distinct":true,"url":"https://api.github.com/repos/coderhaoxin/rkt/commits/daa22603c4128a6994d07a18439052360876e07b"},{"sha":"cd08a4b32da3d1e61176b127a9998c657d6fa4d9","author":{"email":"08b3ee9e6b18a12a2e38b65d7c8561c9337dccee@kinvolk.io","name":"Iago López Galeiras"},"message":"rkt/image: strip \"Authorization\" on redirects to a different host\n\nWe shouldn't pass the \"Authorization\" header if the redirect goes to a\ndifferent host, it can leak sensitive information to unexpected third\nparties.\n\nThis fixes an issue where rkt gets redirected to Amazon S3 when\ndownloading an ACI from quay and S3 returns a 400 (Bad Request) with\nthis error message:\n\n\"Only one auth mechanism allowed; only the X-Amz-Algorithm query\nparameter, Signature query string parameter or the Authorization header\nshould be specified\"\n\nThe problem happens because we're sending \"Authorization\" and the URL on\nthe redirect already includes a \"Signature\" query string parameter.","distinct":true,"url":"https://api.github.com/repos/coderhaoxin/rkt/commits/cd08a4b32da3d1e61176b127a9998c657d6fa4d9"},{"sha":"3e9f618715cf2d529c91d39938e6ff7953a81c05","author":{"email":"08b3ee9e6b18a12a2e38b65d7c8561c9337dccee@kinvolk.io","name":"Iago López Galeiras"},"message":"Merge pull request #2465 from kinvolk/iaguis/dont-redirect-auth\n\nrkt/image: strip \"Authorization\" on redirects to a different host","distinct":true,"url":"https://api.github.com/repos/coderhaoxin/rkt/commits/3e9f618715cf2d529c91d39938e6ff7953a81c05"},{"sha":"2438736f65b23f4feb6542be3e9ac33ee35d37dc","author":{"email":"08b3ee9e6b18a12a2e38b65d7c8561c9337dccee@kinvolk.io","name":"Iago López Galeiras"},"message":"functional tests: fix detectChanges function\n\nWhen we did the refactoring of the CI build script, we inverted the\ncondition that checks if we're in origin/master to always run the tests\nin that case. That caused tests not running on the master branch\nanymore.","distinct":true,"url":"https://api.github.com/repos/coderhaoxin/rkt/commits/2438736f65b23f4feb6542be3e9ac33ee35d37dc"},{"sha":"d18dbc91a42a455fd0c9f28b0484ea64740216d0","author":{"email":"08b3ee9e6b18a12a2e38b65d7c8561c9337dccee@kinvolk.io","name":"Iago López Galeiras"},"message":"Merge pull request #2466 from kinvolk/iaguis/fix-ci-build\n\nfunctional tests: fix detectChanges function","distinct":true,"url":"https://api.github.com/repos/coderhaoxin/rkt/commits/d18dbc91a42a455fd0c9f28b0484ea64740216d0"},{"sha":"474d05ea08b5ec4fa6de0ed1539aca54b081b369","author":{"email":"08b3ee9e6b18a12a2e38b65d7c8561c9337dccee@kinvolk.io","name":"Iago López Galeiras"},"message":"Merge pull request #2447 from tmrts/improve/doc-detection\n\nFind LCA to detect commit differences","distinct":true,"url":"https://api.github.com/repos/coderhaoxin/rkt/commits/474d05ea08b5ec4fa6de0ed1539aca54b081b369"},{"sha":"81a40aee87082c0ce4af8f594cdf2fb093b1c03b","author":{"email":"1a73af9e7ae00182733b2292511b814be66f065f@tmrts.com","name":"Tamer Tas"},"message":"tests: rename \"Semaphore\" to \"Semaphore CI system\"\n\nTo prevent confusion, usage of \"Semaphore\" is changed to \"Semaphore CI system\"","distinct":true,"url":"https://api.github.com/repos/coderhaoxin/rkt/commits/81a40aee87082c0ce4af8f594cdf2fb093b1c03b"},{"sha":"cba545f421f3229f63cad76a8afeb9fce5720acb","author":{"email":"0d47477beef1d882e8812885f3dcf66c4a47c346@gmail.com","name":"Jonathan Boulle"},"message":"tests: simplify Semaphore CI references","distinct":true,"url":"https://api.github.com/repos/coderhaoxin/rkt/commits/cba545f421f3229f63cad76a8afeb9fce5720acb"},{"sha":"41948391606e5b3b03843f5b633f28dc47066077","author":{"email":"5d61c11e6df8ed8ffd2a3627a86b97e825765970@kinvolk.io","name":"Alban Crequy"},"message":"stage1/prepare-app: avoid recursive bind-mounts on /sys\n\nStarting a pod with 100 apps is really slow. This patch fixes the\nslowness.\n\nprepare-app recursively bind-mounts /sys from stage1 to the stage2\n(apps' rootfs). \"Recursive\" means it includes all the cgroup mounts\nbecause they are in /sys/fs/cgroup. Moreover, rkt bind mounts some\ncgroup knob files in the cgroup filesystem for enabling the memory and\ncpu isolator.\n\nThe number of cgroup bind mounts in stage1 is linear with the number of\napps: O(n)\n\nThe number of cgroup bind mounts in stage2 is quadratic with the number\nof apps: O(n^2)\n\nWith one app, I have 17 bind mounts related to cgroups. With 100 apps,\n17 * 100 * 100 = 170.000 bind mounts.\n\nFor each change in the mount table, systemd is notified via inotify on\n/proc/self/mountinfo and it checks the configuration of that mount in\n/etc/systemd/system, /run/systemd/system, /usr/local/lib/systemd/system\nand /usr/lib64/systemd/system.\n\nsystemd does about 30 syscalls per new mount notified via\n/proc/self/mountinfo. That was 5.100.000 syscalls for mounting\ncgroups in a 100-app pod.\n\nThis patch changes the logic to bind mount /sys:\n- in the usual non-unified cgroup hierarchy: bind mount /sys\n  non-recursively and instead bind-mount each cgroup hierarchy\n  individually, non-recursively.\n- in the unified cgroup hierarchy: keep the recursive bind mount because\n  we will not have per-app bind mounts on knob files in this case.","distinct":true,"url":"https://api.github.com/repos/coderhaoxin/rkt/commits/41948391606e5b3b03843f5b633f28dc47066077"},{"sha":"cb2047f12266ea399fe062b6fe50e2be0b0092c0","author":{"email":"3d54fd66df56b29b98f5b3fb74890e24318f663d@coreos.com","name":"Sergiusz Urbaniak"},"message":"doc/CONTRIBUTING: enhace PR and issue workflow\n\nCurrently it is unspecified what a contributor is supposed to do after\nsubmitting a pull request. This explains further actions after\nthe pull request submission.\n\nAlso rkt has some critical runtime dependency, namly systemd, the\nkernel, and the operation system. This introduces a github issue template.\n\nFixes #2406","distinct":true,"url":"https://api.github.com/repos/coderhaoxin/rkt/commits/cb2047f12266ea399fe062b6fe50e2be0b0092c0"},{"sha":"6db56deda9cb47943fc0892e4e2a0904304a6d58","author":{"email":"3d54fd66df56b29b98f5b3fb74890e24318f663d@coreos.com","name":"Sergiusz Urbaniak"},"message":"scripts: add changelog generator\n\nThis adds a new script changelog.sh to generate changelog\nentries automatically.\n\nFixes #2433","distinct":true,"url":"https://api.github.com/repos/coderhaoxin/rkt/commits/6db56deda9cb47943fc0892e4e2a0904304a6d58"},{"sha":"4ffb061680b5e9094d252841e470d21cbd0367c8","author":{"email":"5d61c11e6df8ed8ffd2a3627a86b97e825765970@kinvolk.io","name":"Alban Crequy"},"message":"Merge pull request #2386 from kinvolk/alban/pod-100-apps\n\nstage1/prepare-app: avoid recursive bind-mounts on /sys","distinct":true,"url":"https://api.github.com/repos/coderhaoxin/rkt/commits/4ffb061680b5e9094d252841e470d21cbd0367c8"},{"sha":"634a1ca4c26a0c02acf05ecacad8bb2ae5df78e4","author":{"email":"0d47477beef1d882e8812885f3dcf66c4a47c346@gmail.com","name":"Jonathan Boulle"},"message":"Merge pull request #2451 from s-urbaniak/changelog\n\nExtend contributing guidelines regarding pull requests and issues.","distinct":true,"url":"https://api.github.com/repos/coderhaoxin/rkt/commits/634a1ca4c26a0c02acf05ecacad8bb2ae5df78e4"},{"sha":"f8f06071970734ebe903ac05183ad4cc8724ea13","author":{"email":"0d47477beef1d882e8812885f3dcf66c4a47c346@gmail.com","name":"Jonathan Boulle"},"message":"Merge pull request #2468 from jonboulle/tmrts-rename/semaphore-ci\n\ntests: clarify references to Semaphore CI","distinct":true,"url":"https://api.github.com/repos/coderhaoxin/rkt/commits/f8f06071970734ebe903ac05183ad4cc8724ea13"},{"sha":"9d62321ce365d07810de4db3037c61c9a5bff866","author":{"email":"08b3ee9e6b18a12a2e38b65d7c8561c9337dccee@kinvolk.io","name":"Iago López Galeiras"},"message":"rkt/image: render images on fetch\n\nrkt was delaying rendering images to the tree store until they were\nabout to run for the first time which caused that first run to be slow\nfor big images.\n\nThis commit renders the image to the tree store at fetch time.\n\nIf the system doesn't support overlayfs, we don't render it because we\ndon't use the tree store when overlayfs is not used.\n\nStartup time benchmark:\n\nrkt run a Docker nginx image, pre-fetched. Size = 188MiB when unextracted\nThe insecure option `ondisk` was used.\n\ncommand | time (rkt master) | time (rkt master + https://github.com/coreos/rkt/pull/2398)\n--------|-------------------|---------------------------\n1st time run | real 0m4.964s, user 0m3.570s, sys 0m0.813s | real 0m0.333s, user 0m0.097s, sys 0m0.050s\n2nd time run | real 0m0.350s, user 0m0.063s, sys 0m0.077s | real 0m0.343s, user 0m0.073s, sys 0m0.070s","distinct":true,"url":"https://api.github.com/repos/coderhaoxin/rkt/commits/9d62321ce365d07810de4db3037c61c9a5bff866"},{"sha":"333b5ef7cc2aafa7ea6a7f7e391d42044c027374","author":{"email":"08b3ee9e6b18a12a2e38b65d7c8561c9337dccee@kinvolk.io","name":"Iago López Galeiras"},"message":"functional tests: test render on fetch","distinct":true,"url":"https://api.github.com/repos/coderhaoxin/rkt/commits/333b5ef7cc2aafa7ea6a7f7e391d42044c027374"},{"sha":"961568e948f705de1d6460763aeef2275b9aa9c0","author":{"email":"5d61c11e6df8ed8ffd2a3627a86b97e825765970@kinvolk.io","name":"Alban Crequy"},"message":"kvm: not experimental anymore","distinct":true,"url":"https://api.github.com/repos/coderhaoxin/rkt/commits/961568e948f705de1d6460763aeef2275b9aa9c0"},{"sha":"95723aa18fa274169857c08e1d5d2e7933852ea8","author":{"email":"5d61c11e6df8ed8ffd2a3627a86b97e825765970@kinvolk.io","name":"Alban Crequy"},"message":"Merge pull request #2485 from kinvolk/alban/kvm-experimental\n\nkvm: not experimental anymore","distinct":true,"url":"https://api.github.com/repos/coderhaoxin/rkt/commits/95723aa18fa274169857c08e1d5d2e7933852ea8"},{"sha":"423215a46df9308a9f0578dfcd8436529d1c846e","author":{"email":"d1835e556e43d967dfd0248fdeeacf76517d4bdb@gmail.com","name":"Yifan Gu"},"message":"Merge pull request #2398 from kinvolk/iaguis/render-on-fetch\n\nrkt/image: render images on fetch","distinct":true,"url":"https://api.github.com/repos/coderhaoxin/rkt/commits/423215a46df9308a9f0578dfcd8436529d1c846e"},{"sha":"27fa8b7d7dc26ef4c24221ebbe812aa5c974b540","author":{"email":"1a73af9e7ae00182733b2292511b814be66f065f@tmrts.com","name":"Tamer Tas"},"message":"*: fix gofmt errors\n\nFixes gofmt errors throught the code.\n\nRelated to #2390","distinct":true,"url":"https://api.github.com/repos/coderhaoxin/rkt/commits/27fa8b7d7dc26ef4c24221ebbe812aa5c974b540"}]}