
|
updating rpms in docker containersa project by jordimassaguerpla The docker way of updating containers is to build a new image with the updated binaries and files, which creates a security concern. The docker way is not anymore running "zypper update" in the containment but to update the whole image in the image registry (hub docker if we are talking about public registry) and then pull the image update from there, stop the outdated containments and replace them by starting new containments based on the new image. |
Discourse forum instance for internal usea project by kpimenov Discourse is a really great opensource forum, written in Ruby on Rails and Ember.js. We should try to use it to complement mailing lists and IRC in internal communication, when we need persistent, searchable discussions (with helpful links to the outside world) for a broad and offtopicky subjects. |
Work reports 2.0a project by kalabiyau Micro-service for - making a report |
Portus: build Docker images from Dockerfilea project by flavio_castelli Minimal objectiveThis is what we consider is the minimum result we can achieve at the end of the hackweek. |
Docker: Image Rebasingan invention by cyphar
|
Golang: Hack on DroneCIan idea by tboerger I want to spend some time on hacking missing features of the awesome CI tool Drone. It's written in Golang and is built around docker. |
Add PIDs cgroup support to runC and Dockeran invention by cyphar Currently, dealing with forkbombs and similar issues with Docker and runC is not very nice (you have to set a global limit for all Docker processes or you have to limit kernel memory which isn't very practical). I'm going to work on getting some [patches][2] merged into runC and Docker to enable PIDs support for Docker. |
zypper-docker with multiple backends and an APIa project by mssola During the last CSM workshop I started to refactor zypper-docker in a way that: - The CLI code and the "library" part got split. |
Rootless Containersan invention by cyphar In many cases, people want to start containers on a system where the administrator is not happy about granting privileges to users or installing any new software. For example, when I was a researcher and wanted to run Python 3 on a computing cluster it was not possible to get the administrator to install Docker or Python 3. In recent Linux kernels, it has been possible to create containers without any privileges. All that's missing is a container runtime that allows you to do this. LXC is close but falls short (it requires certain privileged processes and PAM modules for everything to work). |
Migrate drone plugins to new versiona project by tboerger As I'm already a maintainer of the plugins for Drone CI and we are nearby of a new releases which totally changed the structure of the plugins I would like to start migrating the existing plugins to the new structure. A list of pending plugins can be found here. For communication it makes sense to join the Gitter chat. |
Docker registry UI in Go and ReactJSa project by tboerger I would like to continue to work on a web UI for the Docker registry. I know we already got Portus which is based on Ruby on Rails, but I would prefer a project based on Golang with a singlepage application for the frontend based on RactJS. So because of the singlepage application we are forced to write proper APIs that gets consumed by the javascript application, beside that I also want to add a CLI client for managing the system. You can find the project at https://github.com/harborapp. |
SLES/openSUSE integration for Claira project by tboerger Clair is a static vulnerability analyzer for containers. Currently it supports containers based on Debian, Ubuntu and RedHat. I already started this project on the CSM workshop, now I want to finish the integration for openSUSE and SLES based container images. You can track the changes at https://github.com/coreos/clair/pull/199. |
|
zypper-docker reloadeda project by mssola The aim of this project is to finish up the work already done in previous editions of Hackweek in regards to zypper-docker. That being: - Separation of the CLI part and the library. |
|
|
|
|
|
monitor kubernetes and docker with prometheusan invention by dmaiocchi Starting from prometheus ( and grafana if needed), learn how to monitor kubernetes and docker and do some valid alert/graph etc. https://docs.docker.com/config/thirdparty/prometheus/ |
[unassigned] linter for containers, images, appliancesan idea by lnussel [kiwi generated] appliances, containers or any kind of image suffer from reoccuring problems like left over log files or UUIDs, e.g. /etc/machine-id |
SUSE Manager containerizationa project by mbologna Let's containerize SUSE Manager! This will open up different (and interesting) scenarios: - From a development perspective: learn about all the components that constitute SUSE Manager |
|
|
Try Docker openSUSE image on Windows Server 2019an invention by michalnowak Docker for Windows 18.03 CE supports Linux containers on Windows Server. Let's try that. |
Make "salt-toaster" available to be used outside SUSEa project by PSuarezHernandez The |
Modernize Mash deploymenta project by seanmarlow Mash is a Python based CI/CD pipeline for automated testing and publishing of public cloud images. Currently the production and development deployment for the package is inconsistent, slow and manual. This is a barrier to rapid development, deployment and testing. It also means the development workflow is different than production. This can lead to production issues which were not seen during development. In order to modernize the Mash workflow I plan to spend the week digging into a plethora of tools to first learn then build out a new workflow. The goal is to simplify deployment by choosing tools that provide consistency, modularity and repeatability. By leveraging the best tools available we can harden the code and accelerate the release cycle. |
Home assistant that doesn't spy on you - developer's editiona project by DKarakasilis There are various home assistant solutions out there but all of them transfer your voice to some server for processing. This is a no-go for sane people although the technology is interesting and could be useful. There are various open source tools out there to achieve the same result but there is no turn key open source self hosted solution. The goal of this project is to implement a way to have a home assistant running locally - ideally with one command. The project that is closer to the desired result is Mycroft (https://mycroft.ai/). It is very easy to run the client side components using one docker command but their backend is running remotely. All the tools they use though are open source so it only needs one to do the work and package them in a nice little docker-compose file (https://mycroft-ai.gitbook.io/docs/about-mycroft-ai/faq#can-mycroft-run-completely-offline-can-i-self-host-everything). |
Zero-ish downtime deploy on da cheap!a project by josegomezr Zero-ish downtime deploy on da cheap!This project aims to get a 0-ish downtime deployments (very easily achievable with Kubernetes) just using: |
Migrate suntorytimed/resourcespace container to an openSUSE basea project by suntorytimed Project DescriptionFor quite some time I am providing a ResourceSpace container on Docker Hub. It is meanwhile pulled about 234K times but unfortunately still based on Ubuntu. Meanwhile I have updated the base to Ubuntu 20.04, but I would like to move it to openSUSE instead. With ResourceSpace 9.5 coming out soon I see a possibility of introducing this switch. Enno Gotthold also did a great job of packaging ResourceSpace on OBS, so this could be used as a starting point for the container. |
|
|
Package docker compose v2a record by hennevogel Package compose and compose-switch to replace the python-docker-compose. |
Improve SLE Release Management Containera project by suntorytimed Project DescriptionIn this project I would like to extend the capabilities of the SLE Release Management Container. This container is used by some colleagues in the SLE Release Management team to have access to osc and other Release Management critical commands inside a container environment. This includes the beta-emails project to send our beta announcements. |
|
Improve Docker registry listing toola project by rbranco Project Descriptionregview is a heavily modified fork of the (no longer maintained) reg tool by Jess Frazelle for listing images in a Docker registry. Some features of reg were removed (like the webserver, to make it only cli) and others added. Some bugs were fixed (and PR's submitted) and others added as well. |
Containerized git server/client for playground and tutorialsa project by mberti Project DescriptionCreate a set of container images for serving a mock git server and mock git clients in a Kubernetes cluster that can be used as building blocks for an interactive git playground. |
A set of utilities to produce a "from scratch" OCI/Docker container using Opensuse/SLE rpmsa project by ldragon Project DescriptionI recently used melange and apko to build a from scratch image. The result was a set of auditable and easy to use container and apk repository. The toolkit reduces the work need to make from scratch images with minimal work on the actual docker container(which can be quite painful if you've tried making a from scratch image on your own). |
|
Serving web pages for a registered domain from a container behind proxyan invention by tjyrinki_suse Project descriptionFor example Nginx proxy + docker + apache/nginx + let's encrypt combination. |