Files
mq-container/CHANGELOG.md
Arthur Barr cc0f072908 Change for running as a non-root user (#276)
* Enable running container as mqm

* Fix merge problem

* Don't force root usage

* RHEL image runs as mqm instead of root

* Build on host with SELinux enabled

* Enable building on node in an OpenShift cluster

* Enable running container as mqm

* Fix merge problem

* Don't force root usage

* Merge lastest changes from master

* RHEL image runs as mqm instead of root

* Fix merge issues

* Test changes for non-root

* Make timeout properly, and more non-root test fixes

* Run tests with fewer/no capabilities

* Correct usage docs for non-root

* Add security docs

* Add temporary debug output

* Remove debug code

* Fixes for termination-log

* Allow init container to run as root

* Fixes for CentOS build

* Fixes for RHEL build

* Logging improvements

* Fix Dockerfile RHEL/CentOS build

* Fix bash error

* Make all builds specify UID

* Use redist client for Go SDK

* Inspect image before running tests

* New test for init container

* Log container runtime in runmqdevserver

* Add extra capabilities if using a RHEL image
2019-02-27 15:32:34 +00:00

3.2 KiB

Change log

vNext

  • Now runs using the "mqm" user instead of root. See new security doc
  • New IGNSTATE parameter for runmqsc START and STOP commands - From MQ version 9.1.1.0, any MQSC scripts included in the image should make use of the IGNSTATE(YES) parameter on any START and STOP commands. This allows for consistency when executing scripts multiple times (e.g. when a container is restarted)
  • Termination log moved from /dev/termination-log to /run/termination-log, to make permissions easier to handle
  • Fixes for the following issues:
    • Brackets no longer appear in termination log
    • Test timeouts weren't being used correctly

9.1.1.0 (2018-11-30)

  • Updated to MQ version 9.1.1.0
  • Created seperate RedHat Makefile for building images on RedHat machines with buildah
  • Enabled REST messaging capability for app user.
  • Added support for container supplementary groups
  • Removed IBM MQ version 9.0.5 details.
  • Added additional Diagnostics (#203)
  • Implementted GOSec to perform code scans for security vulnerabilities. ((#227))
  • Removed Queue manager create option from the MQ Console.
  • Fixes for the following issues:
    • Check explicitly for /mnt/mqm (#175)
    • Force string output in chkmqhealthy (#174)
    • Use -aG not -G when adding a group for a user
    • Security fixes for libsystemd0 systemd systemd-sysv & libudev1

9.1.0.0 (2018-07-23)

  • Updated to MQ version 9.1.0.0
  • Added Docker 1.12 tests
  • Added MQ SDK Docker image sample
  • Added MQ Golang SDK Docker image sample
  • Added Prometheus metric gathering implementation
  • Added MQ Internet Pass-Thru (MS81) Docker image sample
  • Added POWER & z/Linux image builds
  • devjmstest image now built with Maven instead of gradle
  • Added FAT manifests for Docker Hub/Docker Store
  • Added Red Hat Enterprise Linux image build
  • Added basic versioning debug information into golang programs
  • Removed 9.0.4

9.0.5.0 (2018-03-13)

  • Updated to MQ version 9.0.5.0
  • Container's stdout can now be set to JSON format (set LOG_FORMAT=json)
  • MQ error logs (in JSON or plain text) are now mirrored on stdout for the container.
  • chkmqready now waits until MQSC scripts in /etc/mqm have been applied
  • chkmqready and chkmqhealthy now run as the "mqm" user
  • Added ability to optionally use an alternative base image
  • Various build and test improvements
  • Removed 9.0.3

9.0.4 (2017-11-06)

  • Updated to MQ version 9.0.4.0
  • Updated to Go version 9
  • Removed packages curl, ca-certificates, and their dependencies, which were only used at build time
  • Improved logging
  • Helm charts now work on Kubernetes V1.6
  • Production Helm chart now includes a default image repository and tag
  • Updated to use multi-stage Docker build, so that Go code is built inside a container

9.0.3 (2017-10-17)

  • Initial version