Commit Graph

25 Commits

Author SHA1 Message Date
Chen Qi
ca34fc497f buildah: drop SRCREV_FORMAT
The source comes from one repo, there's no need to use SRCREV_FORMAT
any more. So drop it.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-03-11 06:06:33 +00:00
Bruce Ashfield
d305fb05be buildah: update to v1.39.1
Bumping buildah to version v1.39.1-1-g1c4d85879, which comprises the following commits:

    9347a39c2 Tag v1.39.1
    717fb39c4 CI config: post-branch update
    7dbd71040 chore(deps): update module github.com/go-jose/go-jose/v4 to v4.0.5 [security]
    4c0c3f0b9 chroot createPlatformContainer: use MS_REMOUNT
    c15ab104a Bump to Buildah v1.39.0
    298a64106 Bump c/storage v1.57.1, c/image 5.34.0,  c/common v0.62.0
    3c7c611c7 Update module github.com/containers/storage to v1.57.0
    d11bd71f4 CI, .cirrus: parallelize containerized integration
    bd2d78e40 ed's comment: cleanup
    ea39556a6 use seperate blobinfocache for flaky test
    72161b3a1 bump CI VMs to 4 CPUs (was: 2) for integration tests
    56078ef2d cleanup, debug, and disable parallel in blobcache tests
    708fe0aff bats tests - parallelize
    670a7bec6 pkg/overlay: cleanups
    ca957c487 RPM: include check section to silence rpmlint
    6cee07f52 RPM: use default gobuild macro on RHEL
    2119c8da3 tests: remove masked /sys/dev/block check
    4887a4fb1 vendor to latest c/{common,image,storage}
    4383e34c0 build, run: record hash or digest in image history
    3541a3ce2 Accept image names as sources for cache mounts
    9e00b6b39 Run(): always clean up options.ExternalImageMounts
    59024c41a refactor: replace golang.org/x/exp with stdlib
    a67b07957 Update to c/image @main
    d694644ae fix broken doc link
    e40f62941 run_freebsd.go: only import runtime-spec once
    eca1c8e90 fix(deps): update module github.com/docker/docker to v27.5.1+incompatible
    678dca8fd bump github.com/vbatts/tar-split
    9b9c161ff Add more checks to the --mount flag parsing logic
    1ccc34515 chroot mount flags integration test: copy binaries
    80100ac44 fix(deps): update module github.com/moby/buildkit to v0.19.0
    e7f790296 relabel(): correct a misleading parameter name
    6e62bd083 Fix TOCTOU error when bind and cache mounts use "src" values
    c30f5784d define.TempDirForURL(): always use an intermediate subdirectory
    25a3b385a internal/volume.GetBindMount(): discard writes in bind mounts
    0f5c6fc50 pkg/overlay: add a MountLabel flag to Options
    c0efbe821 pkg/overlay: add a ForceMount flag to Options
    50210d51c Add internal/volumes.bindFromChroot()
    f7155c0ab Add an internal/open package
    9a9fa9607 fix(deps): update module github.com/containers/common to v0.61.1
    ccfd61bdd fix(deps): update module github.com/containers/image/v5 to v5.33.1
    9beaf1018 [CI:DOCS] Touch up changelogs
    9b55ec998 fix(deps): update module github.com/docker/docker to v27.5.0+incompatible
    65b634b7d copy-preserving-extended-attributes: use a different base image
    292ecfe0f fix(deps): update github.com/containers/luksy digest to a3a812d
    67991e0d5 chore(deps): update module golang.org/x/net to v0.33.0 [security]
    6b53330c3 fix(deps): update module golang.org/x/crypto to v0.32.0
    727f00bf4 New VM Images
    e2b33d252 fix(deps): update module github.com/opencontainers/runc to v1.2.4
    ac9815992 fix(deps): update module github.com/docker/docker to v27.4.1+incompatible
    5a336bf1a fix(deps): update module github.com/containers/ocicrypt to v1.2.1
    adf54cde0 Add support for --security-opt mask and unmask
    77e357020 Allow cache mounts to be stages or additional build contexts
    a1dede87e [skip-ci] RPM: cleanup changelog conditionals
    d18344416 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.6
    d77314a7a fix(deps): update module github.com/moby/buildkit to v0.18.2
    62709d718 Fix an error message in the chroot unit test
    cfd98d782 copier: use .PAXRecords instead of .Xattrs
    4adca286f chroot: on Linux, try to pivot_root before falling back to chroot
    5f3975333 manifest add: add --artifact-annotation
    c41f02130 Add context to an error message
    f81b26560 Update module golang.org/x/crypto to v0.31.0
    e9932b7bb Update module github.com/opencontainers/runc to v1.2.3
    ad5b02cdc Update module github.com/docker/docker to v27.4.0+incompatible
    2b7e1e9be Update module github.com/cyphar/filepath-securejoin to v0.3.5
    a82826f56 CI: don't build a binary in the unit tests task
    8eb6b10b0 CI: use /tmp for $GOCACHE
    36f6038d3 CI: remove dependencies on the cross-build task
    83b280599 CI: run cross-compile task with make -j
    2b6cf6452 Update module github.com/docker/docker to v27.4.0-rc.4+incompatible
    4afa31d07 Update module github.com/moby/buildkit to v0.18.1
    c35374f9c Update module golang.org/x/crypto to v0.30.0
    041c1f26f Update golang.org/x/exp digest to 2d47ceb
    058a2d37f Update github.com/opencontainers/runtime-tools digest to f7e3563
    a34792457 [skip-ci] Packit: remove rhel copr build jobs
    7a8312a61 [skip-ci] Packit: switch to fedora-all for copr
    564f90f09 Update module github.com/stretchr/testify to v1.10.0
    7b45052fd Update module github.com/moby/buildkit to v0.17.2
    17ee51d75 Makefile: use `find` to detect source files
    75c8852a8 Tests: make _prefetch() parallel-safe
    8e525d445 Update module github.com/opencontainers/runc to v1.2.2
    eb7a42217 executor: allow to specify --no-pivot-root
    6cfd93424 Update module github.com/moby/sys/capability to v0.4.0
    135431f8d Makefile: mv codespell config to .codespellrc
    c2b42c5e4 Fix some codespell errors
    f0361414d Makefile,install.md: rm gopath stuff
    c07a5eb56 Makefile: rm targets working on ..
    5adb14cbf build: rm exclude_graphdriver_devicemapper tag
    967fb5ec1 Makefile: rm unused var
    f4d4bb240 Finish updating to go 1.22
    6832420b6 CI VMs: bump again
    147765b45 Bump to Buidah v1.39.0-dev
    7aa3b5ee0 Bump to Buildah v1.38.0
    e911fe4a2 Bump to c/common v0.61.0, c/image v5.33.0, c/storage v1.56.0
    356e4d41e fix(deps): update module golang.org/x/crypto to v0.29.0
    6b1e4a58c fix(deps): update module github.com/moby/buildkit to v0.17.1
    3a583bf04 fix(deps): update module github.com/containers/storage to v1.56.0
    e3950407f tests: skip two ulimit tests
    4703b5b0c CI VMs: bump f40 -> f41
    2cba66285 tests/tools: rebuild tools when we change versions
    3cf2ec21b tests/tools: update golangci-lint to v1.61.0
    a7c316ab7 fix(deps): update module github.com/moby/buildkit to v0.17.0
    701d6bbe9 Handle RUN --mount with relative targets and no configured workdir
    9a5b88d3e tests: bud: make parallel-safe
    953fb3259 fix(deps): update module github.com/opencontainers/runc to v1.2.1
    d8d117534 fix(deps): update golang.org/x/exp digest to f66d83c
    fddd1be38 fix(deps): update github.com/opencontainers/runtime-tools digest to 6c9570a
    3c4e552eb tests: blobcache: use unique image name
    1cd6346b3 tests: sbom: never write to cwd
    2797d22ab tests: mkcw: bug fixes, refactor
    aa7077164 deps: bump runc to v1.2.0
    e213d65be deps: switch to moby/sys/userns
    855ec0f0c tests/test_runner.sh: remove some redundancies
    5abf038dd Integration tests: run git daemon on a random-but-bind()able port
    27324c256 fix(deps): update module github.com/opencontainers/selinux to v1.11.1
    8b7adfa2c go.mod: remove unnecessary replace
    6c85740ba Document more buildah build --secret options
    aeb6ffeec Add support for COPY --exclude and ADD --exclude options
    57bba3469 fix(deps): update github.com/containers/luksy digest to e2530d6
    9cf613a2b chore(deps): update dependency containers/automation_images to v20241010
    6349dc4a2 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.4
    873beddba Properly validate cache IDs and sources
    0d27af46f [skip-ci] Packit: constrain koji job to fedora package to avoid dupes
    e0b7b10e6 Audit and tidy OWNERS
    714a23c26 fix(deps): update module golang.org/x/crypto to v0.28.0
    c7dd90dd7 tests: add quotes to names
    a018ec2b0 vendor: update c/common to latest
    732f77064 CVE-2024-9407: validate "bind-propagation" flag settings
    95f2e1020 vendor: switch to moby/sys/capability
    37a6bde53 Don't set ambient capabilities
    5193f21b0 Document that zstd:chunked is downgraded to zstd when encrypting
    271093d51 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.3
    03ca93fb0 buildah-manifest-create.1: Fix manpage section
    fea5c3d49 chore(deps): update dependency ubuntu to v24
    d0819591d Make `buildah manifest push --all` true by default
    2ff91b8b0 chroot: add newlines at the end of printed error messages
    5e82f27fb Do not error on trying to write IMA xattr as rootless
    c07ae2b4c fix: remove duplicate conditions
    4bc98d54d fix(deps): update module github.com/moby/buildkit to v0.16.0
    128117224 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.2
    1f02b65c6 Document how entrypoint is configured in buildah config
    baf91f2b0 In a container, try to register binfmt_misc
    81d1256bd imagebuildah.StageExecutor: clean up volumes/volumeCache
    80e15584c build: fall back to parsing a TARGETPLATFORM build-arg
    edc43c4e6 `manifest add --artifact`: handle multiple values
    b2defd39e Packit: split out ELN jobs and reuse fedora downstream targets
    0494df68b Packit: Enable sidetags for bodhi updates
    81b357e36 fix(deps): update module github.com/docker/docker to v27.2.1+incompatible
    71fc845d0 tests/bud.bats: add git source
    47297b3d5 add: add support for git source
    5184bf161 Add support for the new c/common pasta options
    7bf7da57a vendor latest c/common
    8d7286762 fix(deps): update module golang.org/x/term to v0.24.0
    e08437000 fix(deps): update module github.com/fsouza/go-dockerclient to v1.12.0
    a35380059 packit: update fedora and epel targets
    909cca8b1 cirrus: disable f39 testing
    db2a666dd cirrus: fix fedora names
    3f047d49b update to go 1.22
    ed881abfe Vendor c/common:9d025e4cb348
    9e374f9fd copier: handle globbing with "**" path components
    cee3c1311 fix(deps): update golang.org/x/exp digest to 9b4947d
    9ab093138 fix(deps): update github.com/containers/luksy digest to 2e7307c
    f88579d1f imagebuildah: make scratch config handling toggleable
    01a58991c fix(deps): update module github.com/docker/docker to v27.2.0+incompatible
    09c231f83 Add a validation script for Makefile $(SOURCES)
    510dd75f6 fix(deps): update module github.com/openshift/imagebuilder to v1.2.15
    344366935 New VMs
    e8e83bb8b Update some godocs, use 0o to prefix an octal in a comment
    a2629f528 buildah-build.1.md: expand the --layer-label description
    b695098b0 fix(deps): update module github.com/containers/common to v0.60.2
    d0988936b stage_executor: set avoidLookingCache only if mounting stage
    f1cd5ae4a imagebuildah: additionalContext is not a local built stage
    0ade01048 run: fix a nil pointer dereference on FreeBSD
    ca3b80eb0 CI: enable the whitespace linter
    0ad0ffaad Fix some govet linter warnings
    662abee0b Commit(): retry committing to local storage on storage.LayerUnknown
    8ae99121c CI: enable the gofumpt linter
    d07c3dfb0 conformance: move weirdly-named files out of the repository
    a60788c56 fix(deps): update module github.com/docker/docker to v27.1.2+incompatible
    ec87847c9 fix(deps): update module github.com/containers/common to v0.60.1
    fd3aba991 *: use gofmt -s, add gofmt linter
    24da18800 *: fix build tags
    57d820d37 fix(deps): update module github.com/containers/image/v5 to v5.32.1
    3ea43566a Add(): re-escape any globbed items that included escapes
    05da9a745 conformance tests: use mirror.gcr.io for most images
    c39f622d0 unit tests: use test-specific policy.json and registries.conf
    a1ce1c1ee fix(deps): update module golang.org/x/sys to v0.24.0
    c7b7f1272 Update to spun-out "github.com/containerd/platforms"
    832ff6cb8 Bump github.com/containerd/containerd
    ed6dd4227 test/tools/Makefile: duplicate the vendor-in-container target
    f52158f0e linters: unchecked error
    abea603df linters: don't end loop iterations with "else" when "then" would
    fdf1c75cd linters: unused arguments shouldn't have names
    6224e9a44 linters: rename checkIdsGreaterThan5() to checkIDsGreaterThan5()
    ae0d9d002 linters: don't name variables "cap"
    282cc38c3 `make lint`: use --timeout instead of --deadline
    d01e4ede3 Drop the e2e test suite
    c65328683 fix(deps): update module golang.org/x/crypto to v0.26.0
    23f241e6f fix(deps): update module github.com/onsi/gomega to v1.34.1
    277d40a2e `make vendor-in-container`: use the caller's Go cache if it exists
    aac50f661 fix(deps): fix test/tools ginkgo typo
    dd8715976 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.1
    34a7ce99b Update to keep up with API changes in storage
    00d67a48f fix(deps): update github.com/containers/luksy digest to 1f482a9
    987e63a2d install: On Debian/Ubuntu, add installation of libbtrfs-dev
    e3c1953f7 fix(deps): update module golang.org/x/sys to v0.23.0
    5f96e0392 fix(deps): update golang.org/x/exp digest to 8a7402a
    9254e5ca8 fix(deps): update module github.com/fsouza/go-dockerclient to v1.11.2
    edc1b7752 Use Epoch: 2 and respect the epoch in dependencies.
    4e78b5723 Bump to Buildah v1.38.0-dev
    5f18ba259 AddAndCopyOptions: add CertPath, InsecureSkipTLSVerify, Retry fields
    c467bd139 Add PrependedLinkedLayers/AppendedLinkedLayers to CommitOptions
    8aa9a1c22 integration tests: teach starthttpd() about TLS and pid files

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-03-06 17:17:59 +00:00
Bruce Ashfield
343da075d5 buildah: update to v1.37.5
Bumping buildah to version v1.37.5-4-gc0602013a, which comprises the following commits:

    e4deb56f6 [release-1.37][CI:DOCS] touchup changelog
    f31d99d24 Update CHANGELOG.md
    5fd40b989 [release-1.37] Bump Buildah to v1.37.5
    b949f6572 Bump the containers/storage library to v1.55.1
    cffa820dc Properly validate cache IDs and sources
    93986b888 Packit: constrain koji job to fedora package to avoid dupes
    9dfacbb47 Tag v1.37.4
    b55cbb8eb vendor: update c/common to v0.60.4
    e289e285d CVE-2024-9407: validate "bind-propagation" flag settings
    956095ee1 [release-1.37] Bump to Buildah v1.37.3
    8165aae9e Do not error on trying to write IMA xattr as rootless
    a47261ec1 imagebuildah.StageExecutor: clean up volumes/volumeCache
    7b28b9e4e `manifest add --artifact`: handle multiple values
    8fb01fbc9 Packit: split out ELN jobs and reuse fedora downstream targets
    a8f37392f Packit: Enable sidetags for bodhi updates
    1c0e94ec6 Use Epoch: 2 and respect the epoch in dependencies.
    eadda3bc0 [release-1.37] Bump Buildah to v1.37.2
    a18969dea [release-1.37] Bump c/common to v0.60.2, c/image to v5.32.2
    67cc51e90 [release-1.37] Bump to Buildah v1.37.1
    02313cf69 [release-1.37] Bump c/common v0.60.1, c/image v5.32.1

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
dbe850feaa buildah: update to v1.37.1
Bumping buildah to version v1.37.1-1-g0117c423e, which comprises the following commits:

    67cc51e90 [release-1.37] Bump to Buildah v1.37.1
    02313cf69 [release-1.37] Bump c/common v0.60.1, c/image v5.32.1
    f9de1bbd1 Buildah v1.37.0
    7de5d5d6e Bump c/storage, c/image, c/common for v1.37.0
    6373be5a1 "build with basename resolving user arg" tests: correct ARG use
    dcf3ea5fd bud-multiple-platform-no-run test: correct ARG use
    3e38e5e13 imagebuildah: always have default values for $TARGET... args ready
    7f1fe46fc bump github.com/openshift/imagebuilder to v1.2.14
    f6f2da76d fix(deps): update module github.com/docker/docker to v27.1.1+incompatible
    5e20b928c fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.1
    54d84483a fix(deps): update module github.com/docker/docker to v27.1.0+incompatible
    3ad0fd1ed CI: use local registry, part 2 of 2
    52df6e0e0 CI: use local registry, part 1 of 2
    2a99f9bcd fix(deps): update module github.com/fsouza/go-dockerclient to v1.11.1
    b756a3d00 Revert "fix(deps): update github.com/containers/image/v5 to v5.31.1"
    b1dff416b Replace libimage.LookupReferenceFunc with the manifests version
    9bb25a6da conformance tests: enable testing CompatVolumes
    1861c1320 conformance tests: add a test that tries to chown a volume
    a7098c776 imagebuildah: make traditional volume handling not the default
    b5eafdf55 StageExecutor.prepare(): mark base image volumes for preservation
    5940e721c fix(deps): update module github.com/containers/image/v5 to v5.31.1
    e2f080554 Vendor in latest containers/(common, storage, image)
    5d8b53910 fix(deps): update module golang.org/x/term to v0.22.0
    b08c9cf1c fix(deps): update module golang.org/x/sys to v0.22.0
    2d172d50e fix(deps): update golang.org/x/exp digest to 7f521ea
    aa6f75225 fix(deps): update github.com/containers/luksy digest to a8846e2
    d6771f81a imagebuildah.StageExecutor.Copy(): reject new flags for now
    a63fbba3f bump github.com/openshift/imagebuilder to v1.2.11
    21fb5ea4f Rework parsing of --pull flags
    feb17a95c fix(deps): update module github.com/containers/image/v5 to v5.31.1
    d79a36fae imagebuildah.StageExecutor.prepare(): log the --platform flag
    3a35d2fd6 CI VMs: bump
    14f19e980 buildah copy: preserve owner info with --from= a container or image
    bfa84dfcb conformance tests: enable testing CompatSetParent
    bfaee577d containerImageRef.NewImageSource(): move the FROM comment to first
    66957cc05 commit: set "parent" for docker format only when requested
    a7224d167 Update godoc for Builder.EnsureContainerPathAs
    75ae17c0f fix(deps): update module github.com/spf13/cobra to v1.8.1
    a4cdb7879 fix(deps): update module github.com/containernetworking/cni to v1.2.0
    6bef4b71c fix(deps): update module github.com/opencontainers/runc to v1.1.13
    fe2fd8620 Change default for podman build to --pull missing
    b9c43961a fix(deps): update module github.com/containers/common to v0.59.1
    5afd52fd9 Clarify definition of --pull options
    1480f147f buildah: fix a nil pointer reference on FreeBSD
    8b0ecd787 Use /var/tmp for $TMPDIR for vfs conformance jobs
    0569f3728 Cirrus: run `df` during job setup
    5891afffe conformance: use quay.io/libpod/centos:7 instead of centos:8
    56fb08092 Stop setting "parent" in docker format
    ba0947a3d conformance: check if workdir trims path separator suffixes
    9565585a6 push integration test: pass password to docker login via stdin
    afe1a5dd5 Re-enable the "copy with chown" conformance test
    f552bd57f healthcheck: Add support for `--start-interval`
    420beb248 fix(deps): update module github.com/docker/docker to v26.1.4+incompatible
    a4f32a142 fix(deps): update module github.com/containerd/containerd to v1.7.18
    04e5423ae tests: set _CONTAINERS_USERNS_CONFIGURED=done for libnetwork
    a9e5a1496 Cross-build on Fedora
    a42019d61 Drop copyStringSlice() and copyStringStringMap()
    b8c3530cb fix(deps): update module golang.org/x/crypto to v0.24.0
    cb302075b fix(deps): update module github.com/openshift/imagebuilder to v1.2.10
    e591844e9 Provide an uptime_netbsd.go
    30c2e31d8 Spell unix as "!windows"
    e47ffc831 Add netbsd to lists-of-OSes
    159425c45 fix(deps): update golang.org/x/exp digest to fd00a4e
    bf33b9291 [skip-ci] Packit: enable c10s downstream sync
    7602e9e1d CI VMs: bump, to debian with cgroups v2
    9521672fd Document when BlobDirectory is overridden
    939a58b96 fix secret mounts for env vars when using chroot isolation
    7ff83d505 Change to take a types.ImageReference arg
    e6c7949aa imagebuildah: Support custom image reference lookup for cache push/pull
    a33fda67a fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.0
    f39d5fba2 Bump to v1.37.0-dev
    671f29870 CI: Clarify Debian use for conformance tests

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-08-20 20:31:31 +00:00
Bruce Ashfield
1195b00fe9 buildah: update to 1.36-tip
Bumping buildah to version v1.36.0-2-g0d08edeed, which comprises the following commits:

    34518c5fa Packit: enable c10s downstream sync
    6ceba8838 Bump to v1.36.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-07-11 14:07:17 +00:00
Bruce Ashfield
7179de293c buildah: update to 1.36
Bumping buildah to version v1.36.0, which comprises the following commits:

    6ceba8838 Bump to v1.36.0
    c09e08b53 build: be more selective about specifying the default OS
    3fa5531ca Bump to c/common v0.59.0
    4d1690bc3 Fix buildah prune --help showing the same example twice
    208b7111e fix(deps): update module github.com/onsi/ginkgo/v2 to v2.18.0
    c7937cd1d fix(deps): update module github.com/containers/image/v5 to v5.31.0
    183582f03 bud tests: fix breakage when vendoring into podman
    de8510c9d Integration tests: fake up a replacement for nixery.dev/shell
    d9191e17c copierWithSubprocess(): try to capture stderr on io.ErrClosedPipe
    97382f928 Don't expand RUN heredocs ourselves, let the shell do it
    864a40cbd Don't leak temp files on failures
    97d44ab9c Add release note template to split dependency chores
    4a524737f fix CentOS/RHEL build - no BATS there
    420949a5a fix(deps): update module github.com/containers/luksy to v0.0.0-20240506205542-84b50f50f3ee
    bbab575ff Address CVE-2024-3727
    6a48ae700 chore(deps): update module github.com/opencontainers/runtime-spec to v1.2.0
    d5b2e3c41 Builder.cdiSetupDevicesInSpecdefConfig(): use configured CDI dirs
    da4e2d7ad Setting --arch should set the TARGETARCH build arg
    6f1f687c3 fix(deps): update module golang.org/x/exp to v0.0.0-20240416160154-fe59bbe5cc7f
    cd1960725 [CI:DOCS] Add link to Buildah image page to README.md
    f6d49125a Don't set GOTOOLCHAIN=local
    a04741d9f fix(deps): update module github.com/cyphar/filepath-securejoin to v0.2.5
    53f2dc231 Makefile: set GOTOOLCHAIN=local
    e0077e8c6 Integration tests: switch some base images
    fdfd2237d containerImageRef.NewImageSource: merge the tar filters
    f2825bf7b fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.2
    2c1c73169 fix(deps): update module github.com/containers/luksy to v0.0.0-20240408185936-afd8e7619947
    7688d880d Disable packit builds for centos-stream+epel-next-8
    7425f6f8f Makefile: add missing files to $(SOURCES)
    fbd2b7db4 CI VMs: bump to new versions with tmpfs /tmp
    89ee4f4b0 chore(deps): update module golang.org/x/net to v0.23.0 [security]
    c01061e47 integration test: handle new labels in "bud and test --unsetlabel"
    f86c2748e Switch packit configuration to use epel-9-$arch ...
    14d964d92 Give unit tests a bit more time
    8bb87aefa Integration tests: remove a couple of duplicated tests
    3e756d507 Integration tests: whitespace tweaks
    8ee7bebd7 Integration tests: don't remove images at start or end of test
    c7f088142 Integration tests: use cached images more
    b213c5e7a Integration tests _prefetch: use registry configs
    8bdd6a66d internal: use fileutils.(Le|E)xists
    441bdc927 pkg/parse: use fileutils.(Le|E)xists
    705338379 buildah: use fileutils.(Le|E)xists
    9dcd1cc9a chroot: use fileutils.(Le|E)xists
    358814f69 vendor: update containers/(common|storage)
    be74b733f Fix issue/pr lock workflow
    a99fe1513 [CI:DOCS] Add golang 1.21 update warning
    77400c4fc heredoc: honor inline COPY irrespective of ignorefiles
    ff13a08c9 Update install.md
    5b414ad08 source-push: add support for --digestfile
    d9129b463 Fix caching when mounting a cached stage with COPY/ADD
    58579ba65 fix(deps): update github.com/containers/luksy digest to 3d2cf0e
    2cd31a069 Makefile: softcode `strip`, use it from env var
    f812c8949 Man page updates
    5198af7d7 Add support for passing CDI specs to --device
    14bf3db27 Update comments on some API objects
    2a7ff9905 pkg/parse.DeviceFromPath(): dereference src symlinks
    c1b43b57b Makefile - instead of calling `as` directly, use it from env var
    23b8d9767 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.1
    c1119f886 CI: bump VMs
    2c47fdccd fix(deps): update module github.com/docker/docker to v25.0.5+incompatible
    f95b7a188 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.0
    9cf83d8f8 Change RUN to comment in bud.bats
    5808b9603 Stop rebasing renovate PRs automatically
    37994356f Update renovate validation image
    4304d618f CVE-2024-1753 container escape fix
    516f9e9a2 correctly configure /etc/hosts and resolv.conf when using network
    9db5a16f7 buildah: refactor resolv/hosts setup.
    8c1fee7e7 rename the hostFile var to reflect the value better
    f8a7841cc vendor latest c/common
    26da74d54 [skip-ci] rpm: use go-rpm-macros supported vendoring
    547d9bf0e Update docs/buildah-add.1.md
    80f9f7cb0 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.16.0
    5cf05ac08 fix(deps): update module github.com/docker/docker to v25.0.4+incompatible
    c355679d3 fix(deps): update module github.com/containers/ocicrypt to v1.1.10
    550139916 chore(deps): update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [security]
    1a6d3513f chore(deps): update module github.com/go-jose/go-jose/v3 to v3.0.3 [security]
    bf3263ec1 Bump google.golang.org/protobuf to v1.33.0
    e635558d2 fix links to containerignore doc
    e53e50f7a [skip-ci] Makefile: update rpm target
    87ef84d3a pr-should-include-tests: use GitHub label, not commit text
    d50122aeb tests: enable pasta tests
    1bc5dd692 [CI:DOCS] Migrate buildah container image
    7c88bb372 Update .gitignore
    da81d2e2b Bump to v1.36.0-dev
    fedbd7967 Bump v1.35.0
    3164076e2 Bump c/common v0.58.0, c/image v5.30.0, c/storage v1.53.0
    b2504c263 conformance tests: don't break on trailing zeroes in layer blobs
    a2f0ebef6 Add a conformance test for copying to a mounted prior stage
    e504df188 fix(deps): update module github.com/stretchr/testify to v1.9.0
    951dccd3f cgroups: reuse version check from c/common
    bbea3eb54 Update vendor of containers/(common,image)
    6474279ed fix(deps): update github.com/containers/storage digest to eadc620
    f9d603608 fix(deps): update github.com/containers/luksy digest to ceb12d4
    53f230e2b fix(deps): update github.com/containers/image/v5 digest to cdc6802
    8a1bcd51c manifest add: complain if we get artifact flags without --artifact
    d0ffb9d37 Use retry logic from containers/common
    e9c3c1666 Vendor in containers/(storage,image,common)
    5047a3566 Update module golang.org/x/crypto to v0.20.0
    26d5b84b1 Add comment re: Total Success task name
    4853c0042 tests: skip_if_no_unshare(): check for --setuid
    63975b541 Properly handle build --pull=false
    836b9384d [skip-ci] Update tim-actions/get-pr-commits action to v1.3.1
    5748595ae Update module go.etcd.io/bbolt to v1.3.9
    fee705081 Revert "Reduce official image size"
    aee02318a Update module github.com/opencontainers/image-spec to v1.1.0
    cdb1a4ff8 Reduce official image size
    eb6269d8c Build with CNI support on FreeBSD
    98f870753 build --all-platforms: skip some base "image" platforms
    d73e21120 Bump main to v1.35.0-dev
    90c0d9794 Vendor in latest containers/(storage,image,common)
    1def7d6de Split up error messages for missing --sbom related flags
    aca884a89 `buildah manifest`: add artifact-related options
    07057917d cmd/buildah/manifest.go: lock lists before adding/annotating/pushing
    a0852e994 cmd/buildah/manifest.go: don't make struct declarations aliases
    4f0b619dd Use golang.org/x/exp/slices.Contains
    e202d62cc Disable loong64 again
    e99960085 Fix a couple of typos in one-line comments
    302a798ad egrep is obsolescent; use grep -E
    e6d179476 Try Cirrus with a newer VM version
    04847f57f Set CONTAINERS_CONF in the chroot-mount-flags integration test
    56e6ef854 Update to match dependency API update
    5d58b88c7 Update github.com/openshift/imagebuilder and containers/common
    a20d5b2a5 docs: correct default authfile path
    9d58d1382 fix(deps): update module github.com/containerd/containerd to v1.7.13
    533aac2d4 tests: retrofit test for heredoc summary
    1bfd3336f build, heredoc: show heredoc summary in build output
    811ee6797 manifest, push: add support for --retry and --retry-delay
    1a8cbc185 fix(deps): update github.com/openshift/imagebuilder digest to b767bc3
    9d516e22e imagebuildah: fix crash with empty RUN
    e14f46f2e fix(deps): update github.com/containers/luksy digest to b62d551
    a7aec1941 fix(deps): update module github.com/opencontainers/runc to v1.1.12 [security]
    f1f0d9d4d fix(deps): update module github.com/moby/buildkit to v0.12.5 [security]
    79fb3c213 Make buildah match podman for handling of ulimits
    13fd5bd2c docs: move footnotes to where they're applicable
    011736e12 Allow users to specify no-dereference
    34dff20da Run codespell on code
    86afc1ffd Fix FreeBSD version parsing
    32b8ceeb6 Fix a build break on FreeBSD
    e3d043ebf Remove a bad FROM line
    f6f6da8f0 fix(deps): update module github.com/onsi/gomega to v1.31.1
    4b5caebd7 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc6
    f157be843 docs: use reversed logo for dark theme in README
    cf69e8a18 build,commit: add --sbom to scan and produce SBOMs when committing
    b3af07dab commit: force omitHistory if the parent has layers but no history
    de7c1e1f7 docs: fix a couple of typos
    89f50af21 internal/mkcw.Archive(): handle extra image content
    4cc811f4f stage_executor,heredoc: honor interpreter in heredoc
    339839d4b stage_executor,layers: burst cache if heredoc content is changed
    dd186ee0f fix(deps): update module golang.org/x/crypto to v0.18.0
    a42bfd019 Replace map[K]bool with map[K]struct{} where it makes sense
    905551f51 fix(deps): update module golang.org/x/sync to v0.6.0
    efe76552b fix(deps): update module golang.org/x/term to v0.16.0
    d371fc7b9 Bump CI VMs
    53c65dd36 Replace strings.SplitN with strings.Cut
    b5ee4fb34 fix(deps): update github.com/containers/storage digest to ef81e9b
    114bb6f0c fix(deps): update github.com/containers/image/v5 digest to 1b221d4
    fd0899f1f fix(deps): update module github.com/fsouza/go-dockerclient to v1.10.1
    59ea8af1b Document use of containers-transports values in buildah
    b2c80f9a3 fix(deps): update module golang.org/x/crypto to v0.17.0 [security]
    b283c48db chore(deps): update dependency containers/automation_images to v20231208
    4a9dba647 manifest: addCompression use default from containers.conf
    041388f87 commit: add a --add-file flag
    81435aadc mkcw: populate the rootfs using an overlay
    5b9141887 chore(deps): update dependency containers/automation_images to v20230517
    de0c3cdaf [skip-ci] Update actions/stale action to v9
    2ab21c666 fix(deps): update module github.com/containernetworking/plugins to v1.4.0
    29d945f38 fix(deps): update github.com/containers/image/v5 digest to 7a40fee
    4276a735b Bump to v1.34.1-dev
    471460018 Ignore errors if label.Relabel returns ENOSUP

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 13:23:51 +00:00
Bruce Ashfield
d04caa21f0 buildah: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork
of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this
variable in our go recipes.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 13:16:56 +00:00
Bruce Ashfield
e3d1163c54 buildah: update to 1.34
Bumping buildah to version v1.34.0-30-gdbeb097c6, which comprises the following commits:

    30a9cd1c0 [release-1.34] Bump to v1.34.2-dev
    a2bab63fd [release-1.34] Bump to v1.34.1
    b7a4562ad [release-1.34] Vendor bumps
    83a136866 manifest: addCompression use default from containers.conf
    ae557ac9c Build with CNI support on FreeBSD
    cd59f7c16 tests: retrofit test for heredoc summary
    2a399d67b build, heredoc: show heredoc summary in build output
    be6b9c3f0 docs: correct default authfile path
    6a8e296ea Make buildah match podman for handling of ulimits
    70fd07877 imagebuildah: fix crash with empty RUN
    aa729810a docs: move footnotes to where they're applicable
    58820ffd1 Run codespell on code
    638a825b1 Fix FreeBSD version parsing
    78599048e Allow users to specify no-dereference
    029063b9f Fix a build break on FreeBSD
    bb70cfc50 Remove a bad FROM line
    6fe37a59b commit: force omitHistory if the parent has layers but no history
    b0fb0cacb docs: fix a couple of typos
    6cacd1478 stage_executor,heredoc: honor interpreter in heredoc
    b8c0e21cf stage_executor,layers: burst cache if heredoc content is changed
    702dfe84f Replace map[K]bool with map[K]struct{} where it makes sense
    f818763f3 Replace strings.SplitN with strings.Cut
    47ecb727f Document use of containers-transports values in buildah
    d49e48412 commit: add a --add-file flag
    27018aef5 mkcw: populate the rootfs using an overlay
    413a35959 Ignore errors if label.Relabel returns ENOSUP
    1b00f9e63 manifest: addCompression use default from containers.conf
    21ec7aceb Bump to v1.34.0
    6977c91e2 fix(deps): update module github.com/containerd/containerd to v1.7.11
    b9852af08 fix(deps): update github.com/containers/storage digest to 15c3cb7
    ad90fba16 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.2
    669f19f6c fix(deps): update github.com/containers/common digest to 630c929
    bdbd69e38 fix(deps): update module github.com/moby/buildkit to v0.12.4
    ec76cbb60 fix(deps): update github.com/openshift/imagebuilder digest to ef2a5fe
    7dfdcf33b [CI:DOCS] man pages: underscores, too-wide lines
    b7a0f6b13 fix(deps): update module github.com/containerd/containerd to v1.7.10
    1f9103562 run.bats: use --quiet --pull=false when using a prefetched image
    3b795dd4b internal/mkcw/embed/entrypoint.gz: rename to include the arch
    7788160cb internal/mkcw/embed/entrypoint.gz: compress with -n9
    76c9307ff fix(deps): update module golang.org/x/crypto to v0.16.0
    d10b1e35b Integration tests: make skip_if_no_unshare check --map-users
    028a3f9a3 fix(deps): update module golang.org/x/term to v0.15.0
    3c23118f6 fix(deps): update module golang.org/x/sys to v0.15.0
    d4f577b39 fix(deps): update module github.com/onsi/ginkgo to v2
    c174e9162 vendor: update c/{common,image,storage}
    a23927ab5 run: Allow using just one jail per container on FreeBSD
    12b205f69 Remove makefile targets entrypoint{,.gz} for non x86_64

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15 17:17:19 +00:00
Bruce Ashfield
5bd48ee74f buildah: update to 1.33.3
Bumping buildah to version v1.33.3-1-g5ca83472c, which comprises the following commits:

    21e754fd3 [release-1.33.2] Bump Buildah to v1.33.3
    b44d6bd56 [release-1.33.2] Bump c/common to 0.57.2 and c/image to 5.29.1
    7fffb3366 [release-1.33.2] Bump to v1.33.2

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-01-19 14:38:36 +00:00
Chen Qi
b3e5c517bf buildah: fix branch name
The branch 1.33.2 is not there any more. The correct branch for now
is 1.33.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-01-19 14:38:30 +00:00
Bruce Ashfield
08ec5a182d buildah: update to 1.33.2
Bumping buildah to version v1.33.2-1-g8be6786d5, which comprises the following commits:

    7fffb3366 [release-1.33.2] Bump to v1.33.2
    7add02a3b Update minimum to golang 1.20
    b92ad028b fix(deps): update module github.com/fsouza/go-dockerclient to v1.10.0
    20565e530 fix(deps): update module github.com/moby/buildkit to v0.12.3
    bd0ae2aff Bump to v1.33.2-dev
    38d6d5f11 Bump to v1.33.1
    6d66008b6 Bump to v1.31.2-dev
    f18868d06 Bump to v1.31.1
    f6cb3e474 fix(deps): update module github.com/moby/buildkit to v0.11.4 [security]
    7aa395489 test,heredoc: use fedora instead of docker.io/library/python:latest
    8fb826177 Bump to v1.33.1-dev
    98da6c8d6 Bump to v1.33.0
    2087848c3 Never omit layers for emptyLayer instructions when squashing/cwing
    3a61cc099 Add OverrideChanges and OverrideConfig to CommitOptions
    bbb55b8b8 buildah: add heredoc support for RUN, COPY and ADD
    69f52f805 vendor: bump imagebuilder to v1.2.6-0.20231110114814-35a50d57f722
    fadc0ba08 conformance tests: archive the context directory as 0:0 (#5171)
    3c61dfd4f blobcacheinfo,test: blobs must be resued when pushing across registry
    19d9a6bc0 Bump c/storage v1.51.0, c/image v5.29.0, c/common v0.57.0
    b2b761573 pkg/util.MirrorToTempFileIfPathIsDescriptor(): don't leak an fd
    1fab39559 StageExecutor.Execute: force a commit for --unsetenv, too
    4cf16730b Increase a copier+chroot test timeout
    57d863dfd Add support for --compat-auth-file in login/logout
    dcfbe69a3 Update existing tests for error message change
    5fc64afe1 Update c/image and c/common to latest
    eebecc94d fix(deps): update module github.com/containerd/containerd to v1.7.9
    fe9bdce86 build: downgrade to go 1.20
    4f3876d8e Add godoc for pkg/parse.GetTempDir
    00e73de71 conformance tests: use go-dockerclient for BuildKit builds
    0a85c0629 Make TEE types case-insensitive
    bc59f69c0 fix(deps): update module golang.org/x/crypto to v0.15.0
    10c0222d4 Tweak some help descriptions
    8df9b760b Stop using DefaultNetworkSysctl and use containers.conf only
    99cad6ee1 Implement ADD checksum flag #5135
    1d30520e8 vendor of openshift/imagebuilder #5135
    7e0d66483 Pass secrets from the host down to internal podman containers
    8f86c5784 Update cirrus and version of golang
    61de02b0f image: replace GetStoreImage with ResolveReference
    1306a64cd vendor: bump c/image to 373c52a9466f
    af394a83d pkg/parse.Platform(): minor simplification
    d1bfccf22 createConfigsAndManifests: clear history before cw-specific logic
    9f1c9a8ee Use a constant definition instead of "scratch"
    6552b619c conformance: use require.NoErrorf() more
    acf60abbe fix(deps): update module golang.org/x/term to v0.14.0
    4a470feec fix(deps): update module golang.org/x/sync to v0.5.0
    e8ae12013 fix(deps): update module github.com/spf13/cobra to v1.8.0
    fc74d5071 fix(deps): update module golang.org/x/sys to v0.14.0
    892014df1 fix(deps): update github.com/containers/common digest to 8354404
    2f118fe61 fix(deps): update module github.com/opencontainers/runc to v1.1.10
    ef439b8ad fix(deps): update github.com/containers/luksy digest to b5a7f79
    934c40e73 Log the platform for build errors during multi-platform builds
    3b96b1caf Use mask definitions from containers/common
    34ac2cc4f Vendor in latest containers/common
    2779e7062 fix(deps): update module github.com/containerd/containerd to v1.7.8
    52d48d720 fix(deps): update module go.etcd.io/bbolt to v1.3.8
    02f781b35 container.conf: support attributed string slices
    2b2a4bed8 fix(deps): update module sigs.k8s.io/yaml to v1.4.0
    03b004224 Use cutil.StringInSlice rather then contains
    48a9c4371 Add --no-hostname option to buildah containers
    c536048ca vendor c/common: appendable containers.conf strings, Part 1
    a9e06a64d fix(deps): update module github.com/onsi/gomega to v1.28.1
    2a3a956cb chroot.setupChrootBindMounts: pay more attention to flags
    a4f0d7dec chore(deps): update dependency containers/automation_images to v20231004
    7c8b51068 Vendor containers/common
    0f0ca0cfc chore(deps): update module golang.org/x/net to v0.17.0 [security]
    9c99d7ca8 run: use internal.GetTempDir with os.MkdirTemp
    7704ca6d3 fix(deps): update module github.com/containerd/containerd to v1.7.7
    07d955f27 imagebuildah,multi-stage: do not remove base images
    6fd4f0373 gitignore: add mkcw binary
    9c57af8d1 mkcw: remove entrypoint binaries
    b97f887ca fix(deps): update module golang.org/x/crypto to v0.14.0
    4e6c2b2cd fix(deps): update module golang.org/x/sys to v0.13.0
    f99de537e fix(deps): update module golang.org/x/sync to v0.4.0
    5bfc7d9a4 Update some comments related to confidential workload
    c48a459ea Use the parent's image ID in the config that we pass to imagebuilder
    2d4896f6e fix(deps): update github.com/containers/common digest to 8892536
    065c8d43e fix(deps): update github.com/containers/luksy digest to 6df88cb
    249e30c98 bug: Ensure the mount type is always BindMount by default
    ad3211c26 Protocol can be specified with --port. Ex. --port 514/udp
    a3d2c3125 fix(deps): update module github.com/onsi/gomega to v1.28.0
    8b63fa37b build,config: add support for --unsetlabel
    91f54ed54 tests/bud: add tests
    351012792 [CI:BUILD] Packit: tag @containers/packit-build on copr build failures
    ae5f11e45 stage_executor: allow images without layers
    4c6255679 vendor of containers/common
    b3084b5f4 Removing selinux_tag.sh as no longer needed after 580356f [NO NEW TESTS NEEDED]
    9dd66e4cb add/copy: make sure we handle relative path names correctly
    68ffd1e97 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc5
    abc57f8df Bump to v1.33.0-dev
    b574b806e imagebuildah: consider ignorefile with --build-context

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-01-04 02:52:53 +00:00
Bruce Ashfield
a215d8320e buildah: drop statically linked x86 entrypoint
commit e89fac6c9bf8d0b [Add `buildah mkcw`, add `--cw` to `buildah
commit` and `buildah build`] added a statically linked x86
entrypoint binary

This entrypoint is not currently used in the tested / supported
worflows.

To avoid packaging QA warnings on non-x86 architectures, we remove
the binary during the compilation phase.

If it does need to be rebuilt in the future, buildah's Makefiles
will have to be changed to not test the host for architecture
support, and use the OE defined target arch and cross compilers
instead.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-11-09 06:25:16 +00:00
Kai Kang
710f858012 umoci & buildah & podman-tui: mark incompatible with mips
Since the runtime dependency skopeo has been marked incompatible with
mips, mark for umoci accordingly.

buildah and podman-tui rdepends on podman which has been marked
incompatible with mips, so mark for them too.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-11-06 16:21:12 +00:00
Bruce Ashfield
01da1f2a29 buildah: update to 1.32.0
The new version has an internally stripped binary, so we inhibit the
QA warning.

Bumping buildah to version v1.31.0-159-g4f3d7b0b6, which comprises the following commits:

    5151ccff5 .cirrus.yml: run tests relative to the release-1.32 branch
    2326d4929 Tag v1.32.0
    e90b3502b GetTmpDir is not using ImageCopyTmpdir correctly
    ccac7ca0b Run codespell on code
    6be719454 Bump vendor containers/(common, storage, image)
    9545744e8 Cirrus: Remove multi-arch buildah image builds
    206cda149 fix(deps): update module github.com/containerd/containerd to v1.7.6
    0191bc671 Split GetTempDir from internal/util
    6e6827b27 Move most of internal/parse to internal/volumes
    292b429f6 copier: remove libimage dependency via util package
    4f3abf936 Add some docs for `build --cw`, `commit --cw`, and `mkcw`
    e89fac6c9 Add `buildah mkcw`, add `--cw` to `buildah commit` and `buildah build`
    cc619c28d Make sure that pathnames picked up from the environment are absolute
    4ee5f020a fix(deps): update module github.com/cyphar/filepath-securejoin to v0.2.4
    fd72bbee2 fix(deps): update module github.com/docker/docker to v24.0.6+incompatible
    754568580 Don't try to look up names when committing images
    d5b02e551 fix(deps): update module golang.org/x/crypto to v0.13.0
    3fc5274d3 docs: use valid github repo
    f94689199 fix(deps): update module golang.org/x/sys to v0.12.0
    6ec6f046f vendor containers/common@12405381ff
    df1bc3834 push: --force-compression should be true with --compression-format
    9c5cde533 Update module github.com/containerd/containerd to v1.7.5
    3ebeaa2dd [skip-ci] Update tim-actions/commit-message-checker-with-regex action to v0.3.2
    cc9f15f09 docs: add reference to oci-hooks
    3454d5b29 Support passing of ULimits as -1 to mean max
    f330c77be GHA: Attempt to fix discussion_lock workflow
    4942cc908 Fixing the owner of the storage.conf.
    f4e43f0e8 pkg/chrootuser: Ignore comments when parsing /etc/group on FreeBSD
    2b57cef2b Use buildah repo rather then podman repo
    a8bbc9f5f GHA: Closed issue/PR comment-lock test
    82069390f fix(deps): update module github.com/containers/storage to v1.49.0
    4c4ff3128 chore(deps): update dependency containers/automation_images to v20230816
    af3891258 Replace troff code with markdown in buildah-{copy,add}.1.md
    e997a966f [CI:BUILD] rpm: spdx compatible license field
    a3f2aa3c7 executor: build-arg warnings must honor global args
    f6fb75d9d fix(deps): update module github.com/containers/ocicrypt to v1.1.8
    5643a7fa8 chroot: `setSeccomp` add support for `ArchPARISC(64)` and `ArchRISCV64`
    8428dee36 make,cross: restore loong64
    e3cd4d790 Clear CommonBuildOpts when loading Builder status
    d68d9a237 buildah/push/manifest-push: add support for --force-compression
    3445a775a vendor: bump c/common to v0.55.1-0.20230811093040-524b4d5c12f9
    2d6e43071 chore(deps): update dependency containers/automation_images to v20230809
    065b95599 [CI:BUILD] RPM: fix buildtags
    3964ca9d6 fix(deps): update module github.com/opencontainers/runc to v1.1.9
    591b5390d chore(deps): update dependency ubuntu to v22
    204c5a1ce chore(deps): update dependency containers/automation_images to v20230807
    9ab3b526d [CI:BUILD] Packit: add fedora-eln targets
    ed2a501c9 [CI:BUILD] RPM: build docs with vendored go-md2man
    5bdb8c70d packit: Build PRs into default packit COPRs
    fc7329d7c Update install.md
    f6c4ead1b Update install.md changes current Debian stable version name
    2254ca208 fix(deps): update module golang.org/x/term to v0.11.0
    248f5a2b3 fix(deps): update module golang.org/x/crypto to v0.12.0
    ae36f6542 tests: fix layer-label tests
    f888b3d84 buildah: add --layer-label for setting labels on layers
    239b2a877 Cirrus: container/rootless env. var. passthrough
    65c1c9327 Cirrus: Remove duplicate env. var. definitions
    978be7796 fix(deps): update github.com/containers/storage digest to c3da76f
    62d405771 Add a missing .Close() call on an ImageSource
    e588986fa Create only a reference when that's all we need
    fe947ed9c Add a missing .Close() call on an ImageDestination
    597d30880 CI:BUILD] RPM: define gobuild macro for rhel/centos stream
    b9ac8d5e0 manifest/push: add support for --add-compression
    d27a82356 manifest/inspect: add support for tls-verify and authfile
    071f851da vendor: bump c/common to v0.55.1-0.20230727095721-647ed1d4d79a
    512273587 vendor: bump c/image to v5.26.1-0.20230726142307-8c387a14f4ac
    3d8616537 fix(deps): update module github.com/containerd/containerd to v1.7.3
    c20d0164f fix(deps): update module github.com/onsi/gomega to v1.27.10
    2e7dcc143 fix(deps): update module github.com/docker/docker to v24.0.5+incompatible
    6a236937a fix(deps): update module github.com/containers/image/v5 to v5.26.1
    d78f6c2a2 fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0
    dbc71b7cc Update vendor of containers/(storage,image,common)
    331fac670 fix(deps): update module github.com/opencontainers/runc to v1.1.8
    9cc5d5e8c [CI:BUILD] Packit: remove pre-sync action
    09a1cd698 fix(deps): update module github.com/containers/common to v0.55.2
    11cec8523 [CI:BUILD] Packit: downstream task script needs GOPATH
    70cb4c7e0 Vendor in containers/(common, image, storage)
    173ac7dc9 fix(deps): update module golang.org/x/term to v0.10.0
    8b84d9b8a [CI:BUILD] Packit: fix pre-sync action for downstream tasks
    97b84029a contrib/buildahimage: set config correctly for rootless build user
    cba7b9fae fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc4
    e00845797 Bump to v1.32.0-dev
    f704a67a1 Update debian install instructions
    4c72c25a2 pkg/overlay: add limited support for FreeBSD

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-11-06 16:21:12 +00:00
Bruce Ashfield
48b63ed575 buildah: update to 1.31.3
Bumping buildah to version v1.31.1-23-g0926e05c3, which comprises the following commits:

    f449589dd [release-1.31] Bump to v1.31.4-dev
    3ae75d4a4 [release-1.31] Bump to v1.31.3
    68fa52ca5 [release-1.31] Bump c/common 0.55.4, c/image 5.26.2, c/storage 1.48.1
    140f028d6 rpm: spdx compatible license field
    20b479ec4 RPM: fix buildtags
    d1e3a7bf3 [release-1.31] Bump to v1.31.3-dev
    d4d1d7513 [release-1.31] Bump to v1.31.2
    4d9260cc3 [release-1.31] Bump to v1.31.2-dev
    800b1549b [release-1.31] Bump to v1.31.1
    0a63bc63d [release-1.31] Remove zstd:chunked from man, bump c/common to v0.55.3
    98f684ff3 [CI:BUILD] Packit: add fedora-eln targets
    708c07761 [CI:BUILD] RPM: build docs with vendored go-md2man
    68fa9389a packit: Build PRs into default packit COPRs
    95e1dfb3d [CI:BUILD] Packit: remove pre-sync action
    806fcccee CI:BUILD] RPM: define gobuild macro for rhel/centos stream

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-09-15 17:30:39 +00:00
Bruce Ashfield
63dd08bf86 buildah: update to 1.31.1
Bumping buildah to version v1.31.1-3-g0cc7680cc, which comprises the following commits:

    806fcccee CI:BUILD] RPM: define gobuild macro for rhel/centos stream
    a3056cacd [release-1.31] Bump c/common
    d0de60bbf Bump 1.31.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-24 01:38:21 +00:00
Bruce Ashfield
b37f53350d buildah: update to 1.31
Bumping buildah to version v1.31.0, which comprises the following commits:

    d0de60bbf Bump 1.31.0
    723ed8e18 Bump c/common to 0.55.1 and c/image to 5.26.1
    b835631bf Update vendor of containers/common
    c4d2a8520 Run unit tests for copier and chroot without -cover
    135b5a8f0 Fix transition test to work with latest selinux policy
    d8b06097d Bump c/image to 5.26.0 and c/common to 0.54.0
    7a5a18334 chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
    a8f350fc5 rootless: use default_rootless_network_cmd config
    b3edcaa06 vendor: update c/{common,image,storage} to latest
    d22a5293b chore: pkg imported more than once
    74b885b9e buildah: add pasta(1) support
    11ba328e2 use slirp4netns package from c/common
    a5c0c8acf update c/common to latest
    14cd28c26 add hostname to /etc/hosts when running with host network
    eb135b8d5 vendor: update c/common to latest
    237ac533e [CI:BUILD] Packit: add jobs for downstream Fedora package builds
    eeaf80f95 fix(deps): update module golang.org/x/sync to v0.3.0
    b064ad7f6 fix(deps): update module golang.org/x/crypto to v0.10.0
    bdd27d393 Add smoke tests for encryption CLI helpers
    b090ae238 fix(deps): update module golang.org/x/term to v0.9.0
    fefbd04e5 fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.3
    bd32a04c3 Remove device mapper support
    92582a75c Remove use of deprecated tar.TypeRegA
    261a524b9 Update tooling to support newer golangci-lint
    6714a79eb Make cli.EncryptConfig,DecryptConfig, GetFormat public
    b3e39dfd9 Don't decrypt images by default
    14b74e7f8 fix(deps): update module github.com/onsi/gomega to v1.27.8
    1d08bd9de fix(deps): update github.com/containers/storage digest to 3f3fb2f
    0dac0dfa5 Renovate: Don't touch fragile test stuffs
    d9ecd7c59 [CI:DOCS] Update comment to remove ambiguity
    232230cae fix(deps): update github.com/containers/image/v5 digest to abe5133
    4247a3e47 fix(deps): update module github.com/sirupsen/logrus to v1.9.3
    925ff0e62 fix(deps): update module github.com/containerd/containerd to v1.7.2
    5a83012c9 Explicitly ref. quay images for CI
    9b65b12ae At startup, log the effective capabilities for debugging
    3a351f603 parse: use GetTempDir from internal utils
    6adbfeeb4 GetTmpDir: honor image_copy_tmp_dir from containers.conf
    5eb356bb8 docs/Makefile: don't show sed invocations
    a630e3513 CI: Support testing w/ podman-next COPR packages
    90f7436ac intermediate-images inherit-label test: make it debuggable
    08b9a5407 fix(deps): update github.com/containers/common digest to 462ccdd
    7e327cf18 Add a warning to `--secret` docs
    9cd28db91 vendor: bump c/storage to v1.46.2-0.20230526114421-55ee2d19292f
    0766b004b executor: apply label to only final stage
    beae5647c remove registry.centos.org
    68337bf9c Go back to setting SysProcAttr.Pdeathsig for child processes
    371bc34fe Fix auth.json path (validated on Fedora 38) wq Signed-off-by: Andreas Mack <andreas.mack@gmail.com>
    c6e73322b fix(deps): update module github.com/stretchr/testify to v1.8.3
    0b69f7029 CI: fix test broken by renovatebot
    a5ad7b047 chore(deps): update quay.io/libpod/testimage docker tag to v20221018
    86470bfd9 fix(deps): update module github.com/onsi/gomega to v1.27.7
    91ce0571d test: use debian instead of docker.io/library/debian:testing-slim
    7d9447b2f vendor: bump logrus to 1.9.2
    e2b751a0b [skip-ci] Update tim-actions/get-pr-commits action to v1.3.0
    d58d3a14b Revert "Proof of concept: nightly dependency treadmill"
    911c3b5e8 fix(deps): update module github.com/sirupsen/logrus to v1.9.1
    797f03430 vendor in containers/(common,storage,image)
    ba8a1bd0e fix(deps): update module github.com/docker/distribution to v2.8.2+incompatible
    0eb266a95 run: drop Pdeathsig
    e8d11201a chroot: lock thread before setPdeathsig
    51c03212e tests: add a case for required=false
    00581b806 fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
    be682de68 build: validate volumes on backend
    dcc7feb6f secret: accept required flag w/o value
    ba06158ab fix(deps): update module github.com/containerd/containerd to v1.7.1
    cad25dd6b fix(deps): update module golang.org/x/crypto to v0.9.0
    dffb148b3 Update the demos README file to fix minor typos
    efa0d69a2 fix(deps): update module golang.org/x/sync to v0.2.0
    e0fe30e61 fix(deps): update module golang.org/x/term to v0.8.0
    d5b32b0f0 manifest, push: use source as destination if not specified
    2fed5fc91 run,mount: remove path only if they didnt pre-exist
    4b1c5e3a9 Cirrus: Fix meta task failing to find commit
    a913dc56a parse: filter edge-case for podman-remote
    9252470c4 fix(deps): update module github.com/opencontainers/runc to v1.1.7
    0019256f2 fix(deps): update module github.com/docker/docker to v23.0.5+incompatible
    b37c4ee43 build: --platform must accept only arch
    5e43f8c9d fix(deps): update module github.com/containers/common to v0.53.0
    562172751 makefile: increase conformance timeout
    4775b247b Cap suffixDigitsModulo to a 9-digits suffix.
    07fda81df Rename conflict to suffixDigitsModulo
    4bb28899e fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
    411bdc968 fix(deps): update module github.com/opencontainers/runc to v1.1.6
    d27c59f85 chore(deps): update centos docker tag to v8
    43440ec6e Clarify the need for qemu-user-static package
    c34fbea7c chore(deps): update quay.io/centos/centos docker tag to v8
    449fd3d2e Renovate: Ensure test/tools/go.mod is managed
    6d877d89d Revert "buildah image should not enable fuse-overlayfs for rootful mode"
    e9884fc41 Bump to v1.31.0-dev
    04965f119 Bump to v1.30.0
    b5867198c fix(deps): update module github.com/containers/common to v0.52.0
    41b760f97 fix(deps): update module golang.org/x/crypto to v0.8.0
    9bd6ccf92 chore(deps): update dependency containers/automation_images to v20230405
    d57638879 vendor c/common ff62cdebdd0e
    f847463ed vendor in latest containers/(storage, image)
    45940016c fix(deps): update module github.com/opencontainers/runc to v1.1.5
    0ff4746c4 fix(deps): update module github.com/fsouza/go-dockerclient to v1.9.7
    2e25b156f buildah image should not enable fuse-overlayfs for rootful mode
    dcd7b789a stage_executor: inline network add default string
    c8c37c78f parse: add support for relabel bind mount option
    c95370cd3 build: pass process environment variables by reference
    2ad68d816 run: pass process environment variables by reference
    d45916350 fix(deps): update module github.com/containers/common to v0.51.2
    a92fe130e chore(deps): update dependency containers/automation_images to v20230330
    e67bddded fix(deps): update module github.com/docker/docker to v23.0.2+incompatible
    20861cd21 chore(deps): update dependency containers/automation_images to v20230320
    73dc43c1d fix(deps): update module github.com/onsi/gomega to v1.27.6
    e3a30b54a fix(deps): update github.com/opencontainers/runtime-tools digest to e931285
    374133c95 [skip-ci] Update actions/stale action to v8
    ce8c56780 test: don't allow to override io.buildah.version
    dfc9bb20e executor: only apply label on the final stage
    946395494 Update docs/buildah-build.1.md
    58a22053b update build instruction for Ubuntu
    aad1e994a code review
    3afa5ca74 build: accept arguments from file with --build-arg-file
    8e84bb709 run_linux: Update heuristic for mounting /sys
    78416393f [CI:BUILD] Packit: Enable Copr builds on PR and commit to main
    e8dee4083 fix(deps): update module github.com/fsouza/go-dockerclient to v1.9.6
    c0f0efada Update to Go 1.18
    db0bafef3 Disable dependabot in favor of renovate
    4055cc880 chore(deps): update dependency containers/automation_images to v20230314
    2088f6bd7 Fix requiring tests on Makefile changes
    b85a38946 Vendor in latest containers/(storage, common, image)
    b6f32e576 imagebuildah: set len(short_image_id) to 12
    499f1301f Re-enable conformance tests
    fa145b092 Skip conformance test failures with Docker 23.0.1
    bc2423ebc Cirrus: Replace Ubuntu -> Debian SID
    37afb5dbc run: add support for inline --network in RUN stmt
    e2210c3b7 vendor: bump imagebuilder to a3c3f8358ca31b1e4daa6
    db509859d stage_executor: attempt to push cache only when cacheKey is valid
    a35dbb284 Add "ifnewer" as option in help message for pull command
    c1b82d195 build: document behaviour of buildah's distributed cache
    f444d6589 fix(deps): update module golang.org/x/term to v0.6.0
    376eb73ab Add default list of capabilities required to run buildah in a container
    46ffaf935 executor,copy: honor default ARG value while eval stage
    fd5db96c0 sshagent: use ExtendedAgent instead of Agent
    9e6e15c31 tests/bud: remove unwated test
    8a8f99e09 executor: do not warn on builtin default args
    b9e4e29e9 executor: don't warn about unused TARGETARCH,TARGETOS,TARGETPLATFORM
    0ed9b4c8c Fix tutorial for rootless mode
    cf408f758 Vendor in latest containers/(common, storage, image)
    0e707faa7 Ignore the base image's base image annotations
    30f84c8ee fix(deps): update module github.com/fsouza/go-dockerclient to v1.9.5
    05785ee57 build(deps): bump github.com/containers/storage from 1.45.3 to 1.45.4
    21e6e91e4 Vendor in latest containers/common
    0b7a7f80b docs/tutorials/04: add defaults for Run()
    7baf73b2a imagebuildah.StageExecutor: suppress bogus "Pushing cache []:..."
    be10b8d20 executor: also add stage with no children to cleanupStages
    f9e51e744 [CI:BUILD] copr: fix el8 builds
    8125e45a5 Fix documentation on which Capabilities are allowed by default
    a8ed3bb58 Skip subject-length validation for renovate PRs
    956c5155d Temporarily hard-skip bud-multiple-platform-values test
    3afa7e360 fix(deps): update github.com/openshift/imagebuilder digest to 86828bf
    4875f1bc9 build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.17
    36cade0c3 build(deps): bump tim-actions/get-pr-commits from 1.1.0 to 1.2.0
    e0e43a419 build(deps): bump github.com/containers/image/v5 from 5.24.0 to 5.24.1
    24b85d217 [skip-ci] Update tim-actions/get-pr-commits digest to 55b867b
    f96e1ad4d build(deps): bump github.com/opencontainers/selinux
    2ef59fc2c build(deps): bump golang.org/x/crypto from 0.5.0 to 0.6.0
    482bf4df4 Add renovate configuration
    4dfb82890 Run codespell on codebase
    ae697555c login: support interspersed args for password
    123ef1693 conformance: use scratch for minimal test
    6a0367ff2 pkg/parse: expose public CleanCacheMount API
    5d50a7320 build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
    6d53ec7a3 build(deps): bump github.com/containerd/containerd from 1.6.15 to 1.6.16
    dbf1d43b3 docs: specify order preference for FROM
    2008a5302 Bump to v1.30.0-dev

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-01 14:42:25 -04:00
Martin Jansa
f964138a21 buildah: add seccomp and ipv6 to REQUIRED_DISTRO_FEATURES
* because it rdepends on podman with the same restriction

* BTW: .gitignore has:
  build*/
  which gets triggered for buildah as well:
  meta-virtualization $ git add ./recipes-containers/buildah/buildah_git.bb
  The following paths are ignored by one of your .gitignore files:
  recipes-containers/buildah

  I've adjusted it to /build*/ only.

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-04-12 13:10:11 -04:00
Bruce Ashfield
ba2158e3e5 buildah: update to 1.29.x
We drop our backported patch, since it is now part of the upstream
project.

We also drop {LINKSHARED} from the build, as with the updated buildah
and golang version bumps in oe-core, we get the following build error:

  | # github.com/containers/buildah/cmd/buildah
  | type:*crypto/elliptic.nistCurve[*crypto/internal/nistec.P384Point]: unreachable sym in relocation: crypto/elliptic.(*nistCurve[*crypto/internal/nistec.P384Point]).Add
  | type:*crypto/elliptic.nistCurve[*crypto/internal/nistec.P384Point]: unreachable sym in relocation: crypto/elliptic.(*nistCurve[*crypto/internal/nistec.P384Point]).Add

It is unclear what the linked shared flag was providing in our build,
and we are generally ok with statically linked go applications. So we
drop the flag until a compelling reason exists to debug the linking
failure.

Bumping buildah to version v1.29.1-1-g7fa17a842, which comprises the following commits:

    faf0d4fcb [release-1.29] Bump to Buildah v1.29.1
    7d5ff3012 Update to c/image 5.24.1
    94b723cb5 Bump to v1.29.0
    c9cbc6d7d tests: improve build-with-network-test
    5e3f26de2 Bump c/storagev1.45.3, c/imagev5.24.0, c/commonv0.51.0
    b70fb1765 build(deps): bump github.com/onsi/gomega from 1.25.0 to 1.26.0
    fe0256d38 Flake 3710 has been closed. Reenable the test.
    f9ef51cbb [CI:DOCS] Fix two diversity issues in a tutorial
    3ef898e41 build(deps): bump github.com/fsouza/go-dockerclient from 1.9.2 to 1.9.3
    0d87e38b6 vendor in latests containers/(storage, common, image)
    15bdd2aad fix bud-multiple-platform-with-base-as-default-arg flake
    ac7458e70 stage_executor: while mounting stages use freshly built stage
    e1cfcb240 build(deps): bump github.com/fsouza/go-dockerclient from 1.9.0 to 1.9.2
    d1c82c29a build(deps): bump github.com/onsi/gomega from 1.24.2 to 1.25.0
    4dec25346 vendor in latests containers/(storage, common, image, ocicyrpt)
    c0f6c6b7a [Itests: change the runtime-flag test for crun
    186b30168 [CI:DOCS] README: drop sudo
    1950ab687 Fix multi-arch manifest-list build timeouts
    d106e425a Cirrus: Update VM Images
    67ab55bbb bud: Consolidate multiple synthetic LABEL instructions
    9fced965e build, secret: allow realtive mountpoints wrt to work dir
    938c03556 fixed squash documentation
    59da1a7f7 build(deps): bump github.com/containerd/containerd from 1.6.14 to 1.6.15
    4952862a2 Correct minor comment
    820fafc88 Vendor in latest containers/(common, image, storage)
    a75b263f7 system tests: remove unhelpful assertions
    356668389 buildah: add prune command and expose CleanCacheMount API
    a5e177586 vendor: bump c/storage to a747b27
    60be7f250 Add support for --group-add to buildah from
    00d8d94cb build(deps): bump actions/stale from 6 to 7
    e33bb8678 Add documentation for buildah build --pull=missing
    5828918bc build(deps): bump github.com/containerd/containerd from 1.6.12 to 1.6.14
    4aa28f6a7 build(deps): bump github.com/docker/docker
    7a4702ae2 parse: default ignorefile must not point to symlink outside context
    67c2e4de5 buildah: wrap network setup errors
    d9578d32c build, mount: allow realtive mountpoints wrt to work dir
    57a77073a Update to F37 CI VM Images, re-enable prior-fedora
    798a250d4 Update vendor or containers/(image, storage, common)
    ca96c3678 build(deps): bump golang.org/x/crypto from 0.3.0 to 0.4.0
    e0054a03d Update contact information
    e5cc78c43 build(deps): bump golang.org/x/term from 0.2.0 to 0.3.0
    46eea3158 Replace io/ioutil calls with os calls
    0183471b9 [skip-ci] GHA/Cirrus-cron: Fix execution order
    8428bc87b Vendor in containers/common
    e60c4d7e5 build(deps): bump golang.org/x/sys from 0.2.0 to 0.3.0
    ffed85036 remote-cache: support multiple sources and destinations
    a1698cde6 Update c/storage after https://github.com/containers/storage/pull/1436
    025a8df51 util.SortMounts(): make the returned order more stable
    5e792e97b version: Bump to 1.29.0-dev
    498b45770 [CI:BUILD] Cirrus: Migrate OSX task to M1
    94560581d Update vendor of containers/(common, storage, image)
    e6eb05f75 mount=type=cache: seperate cache parent on host for each user
    20dd347b9 Fix installation instructions for Gentoo Linux
    e162302df build(deps): bump github.com/containerd/containerd from 1.6.9 to 1.6.10
    1cfb5eafb GHA: Reuse both cirrus rerun and check workflows
    5bd5a4f9d Vendor in latest containers/(common,image,storage)
    8e4979e81 build(deps): bump github.com/onsi/gomega from 1.24.0 to 1.24.1
    3d755b5eb copier.Put(): clear up os/syscall mode bit confusion
    1a18ab341 build(deps): bump golang.org/x/sys from 0.1.0 to 0.2.0
    646c28290 Use TypeBind consistently to name bind/nullfs mounts
    d4c661a77 Add no-new-privileges flag
    1f372c08a Update vendor of containers/(common, image, storage)
    b2054360a imagebuildah:build with --all-platforms must honor args for base images
    a17238891 codespell code
    217b2d524 Expand args and env when using --all-platforms
    c554e5330 build(deps): bump github.com/onsi/gomega from 1.23.0 to 1.24.0
    ed3707765 GHA: Simplify Cirrus-Cron check slightly
    1091222b2 Stop using ubi8
    cec864147 remove unnecessary (hence misleading) rmi
    ffb00243f chroot: fix mounting of ro bind mounts
    a237085fe executor: honor default ARG value while eval base name
    481b3cc95 userns: add arbitrary steps/stage to --userns=auto test
    dc733f1d2 Don't set allow.mount in the vnet jail on Freebsd
    e867db39b copier: Preserve file flags when copying archives on FreeBSD
    bf4420f25 Remove quiet flag, so that it works in podman-remote
    8b1a490bd test: fix preserve rootfs with --mount for podman-remote
    b24449990 test: fix prune logic for cache-from after adding content summary
    4290ab5af vendor in latest containers/(storage, common, image)
    1d0dd78c3 Fix RUN --mount=type=bind,from=<stage> not preserving rootfs of stage
    7aa34b86f Define and use a safe, reliable test image
    87e379d5b Fix word missing in Container Tools Guide
    57f370d9d Makefile: Use $(MAKE) to start sub-makes in install.tools
    3223610ff imagebuildah: pull cache from remote repo after adding content summary
    f9693d0a5 Makefile: Fix install on FreeBSD
    835668715 Ensure the cache volume locks are unlocked on all paths
    0d7414703 Vendor in latest containers/(common,storage)
    60382209e Simplify the interface of GetCacheMount and getCacheMount
    8f955f801 Fix cache locks with multiple mounts
    bdd62ef87 Remove calls to Lockfile.Locked()
    cfa10d16c Maintain cache mount locks as lock objects instead of paths
    ffb2f27a8 test: cleaning cache must not clean lockfiles
    6838cbc81 run: honor lockfiles for multiple --mount instruction
    f2e0af5c4 mount,cache: lockfiles must not be part of users cache content
    6fa774ddc Update vendor containers/(common,image,storage)
    bdb549478 [CI:BUILD] copr: buildah rpm should depend on containers-common-extra
    eb9f3648b pr-should-include-tests: allow specfile, golangci
    da214d6d4 build(deps): bump dawidd6/action-send-mail from 3.7.0 to 3.7.1
    5baed90cd build(deps): bump github.com/docker/docker
    82431441a build(deps): bump github.com/fsouza/go-dockerclient from 1.8.3 to 1.9.0
    9226bd312 Update vendor containers/(common,image,storage)
    26a29674a build(deps): bump actions/upload-artifact from 2 to 3
    cadd801fc build(deps): bump actions/checkout from 2 to 3
    8ec69a9ad build(deps): bump actions/stale from 1 to 6
    356ab96d7 build(deps): bump dawidd6/action-send-mail from 2.2.2 to 3.7.0
    27032ea0f build(deps): bump tim-actions/get-pr-commits from 1.1.0 to 1.2.0
    5038a0dae sshagent: LockOSThread before setting SocketLabel
    4f272ee49 Update tests for error message changes
    788fddb1d Update c/image after https://github.com/containers/image/pull/1299
    f232da006 Fix ident for dependabot gha block
    acc230dc3 build(deps): bump github.com/containers/ocicrypt from 1.1.5 to 1.1.6
    dc81652ff Fix man pages to match latest cobra settings
    7260a4b0d build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0
    fba8daf13 build(deps): bump github.com/onsi/gomega from 1.20.2 to 1.22.1
    df8f0fa88 test: retrofit 'bud with undefined build arg directory'
    9d43eb95e imagebuildah: warnOnUnsetBuildArgs while processing stages from executor
    1a2af6864 Update contrib/buildahimage/Containerfile
    e1c7a5df1 Cirrus CI add flavor parameter
    b5c86a8e0 Correction - `FLAVOR` not `FLAVOUR`
    f5fc96e79 Changed build argument from `RELEASE` to `FLAVOUR`
    36afa3530 Combine buildahimage Containerfiles
    472c46f98 bud.bats refactoring: $TEST_SCRATCH_DIR, part 2 of 2
    ca65736da bud.bats refactoring: $TEST_SCRATCH_DIR, part 1 of 2
    2adbe2a58 System test cleanup: document, clarify, fix
    bf0a6e073 test: removing unneeded/expensive COPY
    94ea37767 test: warning behaviour for unset/set TARGETOS,TARGETARCH,TARGETPLATFORM
    eae3415b1 Bump to v1.28.1-dev

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-02-27 09:17:00 -05:00
Bruce Ashfield
2119189361 treewide: bulk update patches with status field
While the insane.bbclass upstream-status check hasn't been made
default, users of meta-virtualization may have it enabled in their
distros .. so the effect is the same. We must have this tracking
tag in out patches.

This is a bulk update to add the tag and silence the QA message.

As packages get updated, the normal/routine process of checking
the patches will continue, and the status fields may (or may not)
get more useful.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-01-27 10:32:06 -05:00
Bruce Ashfield
0b9260ade5 buildah: fix build with btrfs-tools 6.1
We'd really prefer to bump the vendor SRCREV and allow the fetcher
to bring in the pending change without needing a patch, but there
are other API changes that trickle through the code.

So we extract just the patch we need, and leave the SRCREV info
in the recipe, to document the source. When the upstream updates
its vendor/ directory, we can drop this (as the patch will no
longer apply)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-01-10 13:58:07 -05:00
Bruce Ashfield
a49eaf45a4 buildah: update to 1.28.x
Bumping buildah to version v1.25.0-547-gcfefbb64, which comprises the following commits:

    ea9b705a [release-1.28] Bump to c/storage v1.43.1 for s390x sigsegv fix
    6eb52c6b [release-1.28] Bump c/image to v5.23.1
    5fb010fe version: bump to 1.28.2
    69d3fcd8 Stop using ubi8
    9fa3c167 Define and use a safe, reliable test image
    9136e86e version: bump to v1.28.1
    ff08605b copier.Put(): clear up os/syscall mode bit confusion
    6bc044dc retrofit, test: ubi8 changed architecture string
    79f41e32 Bump to v1.28.0
    1deec7ce No longer modify buildah.spec
    a53f342f Update for https://github.com/klauspost/pgzip/pull/50
    3c5f9886 Update vendor containers/(common,image)
    88615e98 [CI:DOCS] Add quay-description update reminder
    95bb0250 vendor: bump c/common to v0.49.2-0.20220929111928-2d1b45ae2423
    aaba84ff build(deps): bump github.com/opencontainers/selinux
    675a7332 Vendor in latest containers/storage
    28195ac9 Changing shell list operators from `;` to `&&`
    fc458032 Fix buildahimage container.conf permissions regression
    9ae09bf7 Set sysctls from containers.conf
    e67bb090 refactor: stop using Normalize directly from containerd package
    3cd0fa2b config,builder: process variant while populating image spec
    899ecaaf Proof of concept: nightly dependency treadmill
    31dc089c Run codespell on code
    07ab5a5c Check for unset build args after TARGET args
    ea81614a pkg/cli: improve completion test
    bb285e53 vendor in latest containers/(common,storage,image)
    f3a73b70 copier: work around freebsd bug for "mkdir /"
    16a4eee2 vendor: update c/image
    02d4a6b5 test: run in the host cgroup namespace
    5cde04cd vendor: update c/storage
    e3d48600 vendor: update c/common
    94ab98d6 cmd: check for user UID instead of privileges
    4c9fc47f run,build: conflict --isolation=chroot and --network
    de9c3841 Fix broken dns test (from merge collision)
    8d5d7632 Fix stutters
    b4135818 Fix broken command completion
    fc3ae53b buildah bud --network=none should have no network
    3c092e5e build: support --skip-unused-stages for multi-stage builds
    87d4ae88 Prevent use of --dns* options with --net=none
    fd14bfe5 buildah: make --cache-ttl=0s equivalent to --no-cache
    ac30ed23 parse: make processing flags in --mount order agnostic
    deb2d903 Minor test fix for podman-remote
    a30b71db build: honor <Containerfile>.containerignore as ignore file
    46db0211 Update install.md: Debian 11 (Bullseye) is stable
    4e5be719 build(deps): bump github.com/docker/docker
    4407875a Use constants from containers/common for finding seccomp.json
    4808f3b7 Don't call os.Exit(1) from manifest exist
    9f435de8 manifest: add support for buildah manifest exists
    0bdbd1a8 Buildah should ignore /etc/crio/seccomp.json
    9c147ab8 chroot: Fix cross build break
    309f714b chroot: Move isDevNull to run_common.go
    363bf9c5 chroot: Fix setRlimit build on FreeBSD
    dc49c3cb chroot: Move parseRLimits and setRlimits to run_common.go
    b64d8143 chroot: Fix runUsingChrootExecMain on FreeBSD
    4d963eb5 chroot: Move runUsingChrootExecMain to run_common.go
    0a61e4b2 chroot: Factor out Linux-specific unshare options from runUsingChroot
    3b42b515 chroot: Move runUsingChroot to run_common.go
    350c509e chroot: Move RunUsingChroot and runUsingChrootMain to run_common.go
    188dcc36 chroot: Factor out /dev/ptmx pty implementation
    f9814601 chroot: Add FreeBSD support for run with chroot isolation
    b9db9574 build(deps): bump github.com/docker/go-units from 0.4.0 to 0.5.0
    64534a88 Replace k8s.gcr.io/pause in tests with registry.k8s.io/pause
    168a39dd build(deps): bump github.com/onsi/gomega from 1.20.0 to 1.20.1
    514ff3dc Cirrus: use image with fewer downloaded dependencies
    a96eb0b0 build(deps): bump github.com/opencontainers/runc from 1.1.3 to 1.1.4
    9934b173 run: add container gid to additional groups
    f46ef3b2 buildah: support for --retry and --retry-delay for push/pull failures
    811741fe Makefile: always call $(GO) instead of `go`
    010ac5e0 build(deps): bump github.com/fsouza/go-dockerclient from 1.8.2 to 1.8.3
    0c4b19ba test: use `T.TempDir` to create temporary test directory
    90cf4fc0 mount,cache: enable SElinux shared content label option by default
    354f96f6 commit: use race-free RemoveNames instead of SetNames
    491ad027 Drop util/util.Cause()
    9637a244 cmd/buildah: add "manifest create --amend"
    7533aa56 build(deps): bump github.com/fsouza/go-dockerclient from 1.8.1 to 1.8.2
    17e6fe01 docs: specify git protocol is not supported for github hosted repo
    da4647bd Scrub user and group names from layer diffs
    2eb519fb build(deps): bump github.com/containerd/containerd from 1.6.6 to 1.6.8
    3a6919b5 version: bump to 1.28.0-dev

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-01-10 13:58:07 -05:00
Bruce Ashfield
2542c4b3b0 buildah: update to 1.27.2
Bumping buildah to version v1.25.0-420-g13622b14, which comprises the following commits:

    9c640b00 tag v1.27.2
    264c825f Fix broken command completion
    be919817 build: support --skip-unused-stages for multi-stage builds
    40cd1053 release: bump to v1.27.1
    4a8bf740 run: add container gid to additional groups
    db8d5921 release: tag v1.27.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-28 16:30:45 -04:00
Bruce Ashfield
13c1312c5b buildah: update to 1.27
Bumping buildah to version v1.25.0-411-gdb8d5921, which comprises the following commits:

    db8d5921 release: tag v1.27.0
    50a4acb0 make,cross: ignore loong64 from target list
    15b0a250 Allow chflags operations inside the container
    fb6da991 Don't try to call runLabelStdioPipes if spec.Linux is not set
    e8c7e3fe build(deps): bump github.com/golangci/golangci-lint in /tests/tools
    b7f51ea3 build: support filtering cache by duration using --cache-ttl
    b218fdf3 build: support building from commit when using git repo as build context
    99488b06 build: clean up git repos correctly when using subdirs
    8bbeed70 integration tests: quote "?" in shell scripts
    5f34c5e2 Fix a copy/paste error
    f96bf7c5 build(deps): bump github.com/golangci/golangci-lint in /tests/tools
    50183aa0 vendor c/common@v0.49.1
    dfba70e9 test: manifest inspect should have OCIv1 annotation
    873a9e1f vendor: bump to c/common@87fab4b701
    81b4edfa Failure to determine a file or directory should print an error
    5e3f7cea build(deps): bump github.com/containernetworking/cni from 1.1.1 to 1.1.2
    ad4976d0 refactor: remove unused CommitOptions from generateBuildOutput
    dbd22863 stage_executor: generate output for cases with no commit
    adbd7ef5 stage_executor, commit: output only if last stage in build
    bb149ea6 Use errors.Is() instead of os.Is{Not,}Exist
    ac5d37c0 Minor test tweak for podman-remote compatibility
    a47dee2c Cirrus: Use the latest imgts container
    239c06cf imagebuildah: complain about the right Dockerfile
    bef61d79 tests: don't try to wrap `nil` errors
    c9407334 cmd/buildah.commitCmd: don't shadow "err"
    36006c9a cmd/buildah.pullCmd: complain about DecryptConfig/EncryptConfig
    0ded0dca Fix a copy/paste error message
    aed3fdc7 Fix a typo in an error message
    6f660bde build,cache: support pulling/pushing cache layers to/from remote sources
    6c96dd95 Update vendor of containers/(common, storage, image)
    ac4b39a2 Rename chroot/run.go to chroot/run_linux.go
    79bc4a38 Don't bother telling codespell to skip files that don't exist
    62954c89 Set user namespace defaults correctly for the library
    c79f7272 imagebuildah: optimize cache hits for COPY and ADD instructions
    6841f92e Cirrus: Update VM images w/ updated bats
    6243a938 build(deps): bump github.com/onsi/gomega from 1.19.0 to 1.20.0
    eb4ec4a9 docs, run: show SELinux label flag for cache and bind mounts
    a51011f4 build(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0
    05d48980 imagebuildah, build: remove undefined concurrent writes
    d0a675ed bump github.com/opencontainers/runtime-tools
    dc1bc10d Add FreeBSD support for 'buildah info'
    80870d50 Vendor in latest containers/(storage, common, image)
    4387e7e3 Add freebsd cross build targets
    d0ef62ae Make the jail package build on 32bit platforms
    36d95b05 Cirrus: Ensure the build-push VM image is labeled
    e1f3468a GHA: Fix dynamic script filename
    7c0f2253 Vendor in containers/(common, storage, image)
    6fb7bb4b Run codespell
    2c8436a7 Remove import of github.com/pkg/errors
    34026835 Avoid using cgo in pkg/jail
    ad389b19 Rename footypes to fooTypes for naming consistency
    cdac8e1b Move cleanupTempVolumes and cleanupRunMounts to run_common.go
    4b7c61d5 Make the various run mounts work for FreeBSD
    57a73847 Move get{Bind,Tmpfs,Secret,SSH}Mount to run_common.go
    0832ea2f Move runSetupRunMounts to run_common.go
    9c808c76 Move cleanableDestinationListFromMounts to run_common.go
    c21f4bd2 Make setupMounts and runSetupBuiltinVolumes work on FreeBSD
    cf079d01 Move setupMounts and runSetupBuiltinVolumes to run_common.go
    417c6018 Tidy up - runMakeStdioPipe can't be shared with linux
    95a18737 Move runAcceptTerminal to run_common.go
    1ab56715 Move stdio copying utilities to run_common.go
    ba5ff64d Move runUsingRuntime and runCollectOutput to run_common.go
    b290c861 Move fileCloser, waitForSync and contains to run_common.go
    bff1c193 Move checkAndOverrideIsolationOptions to run_common.go
    75ae8040 Move DefaultNamespaceOptions to run_common.go
    acdf4777 Move getNetworkInterface to run_common.go
    8e36f5fc Move configureEnvironment to run_common.go
    f68f1092 Don't crash in configureUIDGID if Process.Capabilities is nil
    7ea97716 Move configureUIDGID to run_common.go
    a405d62c Move runLookupPath to run_common.go
    4d9a035e Move setupTerminal to run_common.go
    42010799 Move etc file generation utilities to run_common.go
    1c0a08e3 Add run support for FreeBSD
    3faa6984 Add a simple FreeBSD jail library
    6bb4efdb Add FreeBSD support to pkg/chrootuser
    76a0c821 Sync call signature for RunUsingChroot with chroot/run.go
    8dca0a65 test: verify feature to resolve basename with args
    f146c718 vendor: bump openshift/imagebuilder to master@4151e43
    d300c614 GHA: Remove required reserved-name use
    35bfc66a buildah: set XDG_RUNTIME_DIR before setting default runroot
    9d7ac758 imagebuildah: honor build output even if build container is not commited
    9445aa12 chroot: honor DefaultErrnoRet
    48c888a6 [CI:DOCS] improve pull-policy documentation
    0e745d15 tests: retrofit test since --file does not supports dir
    ce384684 Switch to golang native error wrapping
    825561b2 BuildDockerfiles: error out if path to containerfile is a directory
    066b5448 define.downloadToDirectory: fail early if bad HTTP response
    fc9255f5 GHA: Allow re-use of Cirrus-Cron fail-mail workflow
    7a22c40e add: fail on bad http response instead of writing to container
    dab6d12e build(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0
    263f5adc [CI:DOCS] Update buildahimage comment
    252bf17b lint: inspectable is never nil
    869c705d vendor: c/common to common@7e1563b
    5686018e build: support OCI hooks for ephemeral build containers
    c0be04e6 [CI:BUILD] Install latest buildah instead of compiling
    1fd5d73f Add subid support with BuildRequires and BUILDTAG [NO NEW TESTS NEEDED]
    d6340b6c build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.7.5
    ffce8b36 Make sure cpp is installed in buildah images
    404852be demo: use unshare for rootless invocations
    198b4c36 buildah.spec.rpkg: initial addition
    74f2c9bd build: fix test for subid 4
    d3eeea37 build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0
    20c5c5c6 build, userns: add support for --userns=auto
    ecae0e2f Fix building upstream buildah image
    e54c9efa Remove redundant buildahimages-are-sane validation
    cf6b1bcf Docs: Update multi-arch buildah images readme
    0a1d828d Cirrus: Migrate multiarch build off github actions
    0d3246ff retrofit-tests: we skip unused stages so use stages
    08bc5d91 stage_executor: dont rely on stage while looking for additional-context
    25f9ff84 buildkit, multistage: skip computing unwanted stages
    dc07d9ff More test cleanup
    b23a20ee copier: work around freebsd bug for "mkdir /"
    f577fc4f Replace $BUILDAH_BINARY with buildah() function
    0b7c5002 Fix up buildah images
    be3b9c36 Make util and copier build on FreeBSD
    9042b86b Vendor in latest github.com/sirupsen/logrus
    8bbe7a60 build(deps): bump github.com/opencontainers/runc from 1.1.2 to 1.1.3
    8d9e9d6f Makefile: allow building without .git
    2d4d2824 run_unix: don't return an error from getNetworkInterface
    79bab77a run_unix: return a valid DefaultNamespaceOptions
    39880517 Update vendor of containers/storage
    c06c6dbb chroot: use ActKillThread instead of ActKill
    ed4412b9 use resolvconf package from c/common/libnetwork
    ee3d131d update c/common to latest main
    7cc5f198 copier: add `NoOverwriteNonDirDir` option
    3aea4093 Sort buildoptions and move cli/build functions to internal
    d452494d build(deps): bump github.com/fsouza/go-dockerclient from 1.8.0 to 1.8.1
    9c7ce03f build(deps): bump github.com/docker/docker
    f2dae989 build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2
    2182e0af build(deps): bump github.com/containerd/containerd from 1.6.5 to 1.6.6
    236c0bab Fix TODO: de-spaghettify run mounts
    6225b23d Move options parsing out of build.go and into pkg/cli
    7cf6dbd4 [CI:DOCS] Tutorial 04 - Include Debian/Ubuntu deps
    495add93 build, multiarch: support splitting build logs for --platform
    1ac1f035 build(deps): bump github.com/containerd/containerd from 1.6.4 to 1.6.5
    be9ef3b6 [CI:BUILD] WIP Cleanup Image Dockerfiles
    0bcc7c5e build(deps): bump github.com/fsouza/go-dockerclient from 1.7.11 to 1.8.0
    60b625ce cli remove stutter
    e80fed06 docker-parity: ignore sanity check if baseImage history is null
    c61ecc69 build, commit: allow disabling image history with --omit-history
    4cf93e3e Fix use generic/ambiguous DEBUG name
    73a5ec42 build(deps): bump github.com/containernetworking/cni from 1.1.0 to 1.1.1
    1a79fbed Cirrus: use Ubuntu 22.04 LTS
    0986de40 Fix codespell errors
    00d46292 Remove util.StringInSlice because it is defined in containers/common
    b3fbb598 buildah: add support for renaming a device in rootless setups
    149880a1 squash: never use build cache when computing last step of last stage
    7cc18838 Update vendor of containers/(common, storage, image)
    f7ea2d84 build(deps): bump github.com/golangci/golangci-lint in /tests/tools
    c2adbade buildkit: supports additionalBuildContext in builds via --build-context
    f4ad4faa test cleanup
    73e0ad71 buildah source pull/push: show progress bar
    45bd47b4 run: allow resuing secret twice in different RUN steps
    7dbc5ce8 test helpers: default to being rootless-aware
    c80e6a31 Add --cpp-flag flag to buildah build
    e4d25d53 build(deps): bump github.com/golangci/golangci-lint in /tests/tools
    784a8c4c build: accept branch and subdirectory when context is git repo
    177141d4 build(deps): bump github.com/docker/docker
    82e9c841 Vendor in latest containers/common
    714fbed4 build(deps): bump github.com/opencontainers/runc from 1.1.1 to 1.1.2
    8d57bff9 vendor: update c/storage and c/image
    1c1ba51c build(deps): bump github.com/golangci/golangci-lint in /tests/tools
    5e338aad Fix gentoo install docs
    f45fbf77 build(deps): bump github.com/docker/docker
    cf2bb5a1 copier: move NSS load to new process
    063abf6f Add test for prevention of reusing encrypted layers
    fccc7895 Make `buildah build --label foo` create an empty "foo" label again
    6750810f Bump to v1.27.0-dev
    0a9d6e6e Bump to v1.26.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-25 22:55:48 -04:00
sakib.sajal@windriver.com
13839c7b13 buildah: add recipe for buildah v1.26
buildah is a command line tool, to be installed and run on target,
that can be used to:
   - create a working container, either from scratch or using an image
     as a starting point
   - create an image, either from a working container or via the
     instructions in a Dockerfile
   - images can be built in either the OCI image format or the
     traditional upstream docker image format
   - mount a working container's root filesystem for manipulation
   - unmount a working container's root filesystem
   - use the updated contents of a container's root filesystem as a
     filesystem layer to create a new image
   - delete a working container or an image
   - rename a local container

Testing:
Setup the build directory:
   $ . oe-init-build-env <build_dir>

Add to local.conf:
   IMAGE_INSTALL:append = " buildah kernel-modules"
   KERNEL_FEATURES += "features/overlayfs/overlayfs.cfgi \
                       features/netfilter/netfilter.scc  \
                       features/lxc/lxc-enable.scc"
   IMAGE_ROOTFS_EXTRA_SPACE = "5242880"

Build image:
   $ bitbake core-image-minimal

Run the image:
   $ runqemu nographic kvm qemuparams="-m 4096"

On target:
Pull an image:
   > cnt=$(buildah from fedora)

Or build from Dockerfile
   > buildah bud -t <image_name>:<tag> .

Mount the image:
   > mnt=$(buildah mount ${cnt})

Install packages on the container rootfs:
   > dnf install --installroot $mnt <packages_to_install> -y

Copy local files to the container:
   > buildah copy $cnt <local_file> <dest_on_container>

Save the changes to an image
   > buildah commit --format docker $cnt <name>:<tag>

Run the image using buildah:
   > buildah run $cnt /bin/sh

Or using docker:
   > docker run -it <name>:<tag>

Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-06-20 12:11:17 -04:00