Removed runtime support for Polymorphic Linux from our Docker containers. (#9566)
* Remove runtime support for Polymorphic Linux from our Docker containers. This removes our runtime support for Polyverse's Polymorphic Linux from our Docker containers. The actual support is currently broken due to upstream changes, but we have decided to just remove it instead of fixing it due to it providing limited practical benefit to our users and not being supported across all of our supported platforms. We had previously removed build-time usage of this functionality for the same reasons to reduce the final image size for our 64-bit x86 Docker images. * Remove docs for Polyverse support.
Austin S. Hemmelgarn committed
Jul 23, 2020 at 07:12 UTC
83bf2924aa63fdc132d76cd90828ec5699ffbb36
2 files changed
-16
packaging/docker/README.md
-6
@@ -32,12 +32,6 @@ directive, not a COMMAND directive. Please adapt your execution scripts accordin
32
ENTRYPOINT vs COMMAND in the [Docker
33
documentation](https://docs.docker.com/engine/reference/builder/#understand-how-cmd-and-entrypoint-interact).
34
35
-### Package scrambling in runtime (x86_64 only)
36
-
37
-Our x86_64 Docker images provide support for using [Polymorphic Polyverse Linux package
38
-scrambling](https://polyverse.com/products/polymorphing-linux-security/) to protect against buffer overflow errors. To
39
-activate this, set the environemnt variable `RESCRAMBLE=true` while starting Netdata with a Docker container.
40
-
35
## Run the Agent with the Docker command
36
37
Quickly start a new Agent with the `docker run` command.
packaging/docker/run.sh
-10
@@ -12,16 +12,6 @@ if [ ! "${DO_NOT_TRACK:-0}" -eq 0 ] || [ -n "$DO_NOT_TRACK" ]; then
12
fi
13
14
echo "Netdata entrypoint script starting"
15
-if [ ${RESCRAMBLE+x} ] && [ "$(uname -m)" == "x86_64" ]; then
16
- echo "Injecting packages from Polymorphic Linux"
17
- apk update && apk upgrade
18
- curl https://sh.polyverse.io | sh -s install gcxce5byVQbtRz0iwfGkozZwy support+netdata@polyverse.io
19
- # shellcheck disable=SC2181
20
- if [ $? -eq 0 ]; then
21
- apk update && apk upgrade --available --no-cache && sed -in 's/^#//g' /etc/apk/repositories
22
- fi
23
-fi
24
-
15
if [ -n "${PGID}" ]; then
16
echo "Creating docker group ${PGID}"
17
addgroup -g "${PGID}" "docker" || echo >&2 "Could not add group docker with ID ${PGID}, its already there probably"