Commit Graph

83 Commits

Author SHA1 Message Date
Chen Qi
a8175deded podman: remove ptest
The ptest was added almost three years ago and since then nobody
ever fixed anything. It's almost impossible that the ptest never
failed. As an evidence, for the current version, the test cases
cannot even run.

Remove this ptest. People who care about podman ptest should be
maintaining it.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-06-12 10:40:41 -04:00
Bruce Ashfield
cbe8ceb787 podman: fix PACKAGECONFIG QA errors
bitbake now errors if PACKAGECONFIG is used, but doesn't have
entries for the possible values in the variable.

podman was using PACKAGECONFIG as a local feature variable in
one case (docker) and in the other, was later adding a RDEPEND
that could have been done via the packageconfig directly (rootless).

The docker issue is fixed by creating a PODMAN_FEATURES variable
and testing on it, and the rootless one is fixed by using
PACKAGECONFIG to add the rdepends

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-04-09 20:51:03 +00:00
Martin Jansa
c01273e001 metadata: add whitespace around assignments
With:
https://lists.openembedded.org/g/bitbake-devel/message/17508
there are many WARNINGs from this layer will cover src_uri.inc files
in next commit.

Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-04-03 17:56:53 +00:00
Bruce Ashfield
d7b7261eec podman: update to v5.4.1
Bumping libpod to version v5.4.1-10-g227df90eb7, which comprises the following commits:

    33b4b301fc RPM: Add riscv64 to ExclusiveArch-es
    64e2b91ab4 Fix HealthCheck log destination, count, and size defaults
    bef77d74d7 Win installer test: hardcode latest GH release ID
    88a3bfbde2 Packit: Fix action script for fetching upstream commit
    405c55b4a4 Bump to v5.4.2-dev
    b79bc8afe7 Bump to v5.4.1
    01a55d9d5c update gvproxy version to 0.8.4
    0f20d21240 Update Buildah to v1.39.2
    bdcede792f Update release notes for v5.4.1
    3e6e003173 Fix reporting summed image size for compat endpoint
    090dbc4cee podman-import only supports gz and tar
    5327df1921 quadlet kube: correctly mark unit as failed
    bc37e935ba pkg/domain/infra/abi/play.go: fix two nilness issues
    02e8a59774 kube play: don't print start errors twice
    cd8582d4f0 libpod: race in WaitForConditionWithInterval()
    ab7c54b4cf libpod: race in WaitForExit() with autoremove
    180d55165d Don't try to resolve host path if copying to container from stdin.
    b716aa17e2 Use svg for pkginstaller banner
    bff9da4e3a Create quota before _data dir for volumes
    a15623d12f Packit: clarify secondary status in CI
    118aa9ef94 Packit/RPM: Display upstream commit SHA in all rpm builds
    fea21e9bc0 podman run: fix --pids-limit -1 wrt runc
    07d7101429 vendor: update github.com/go-jose/go-jose/v3 to v3.0.4
    599a0b71a6 chore(deps): update module github.com/go-jose/go-jose/v4 to v4.0.5 [security]
    b8b0639e7c wire up --retry-delay for artifact pull
    5671cfe3ab Revert "silence false positve from golangci-lint"
    2d18a7cc47 update golangci-lint to v1.64.4
    0b31c710ce update golangci-lint to v1.64.2
    fc63a340f3 silence false positve from golangci-lint
    e50898e1f7 cmd/podman: refactor Context handling
    11ef179de2 fix new usetesting lint issue
    f5d96a5959 Packit/Copr: Fix `podman version` in rpm
    fd5eb1fdf3 Remove persist directory when cleaning up Conmon files
    223f827213 Bump to v5.4.1-dev
    f9f7d48b24 Bump to v5.4.0
    246011458c Update release notes for v5.4.0 final
    3d344ffd26 In SQLite state, use defaults for empty-string checks
    2612e3c233 Bump FreeBSD version to 13.4
    3d917a395c docs: add v5.4 to API reference
    13ebc5860c Update rpm/podman.spec
    f34d6c76db RPM: set buildOrigin in LDFLAG
    6218d42ed6 RPM: cleanup macro defs
    18249e10c1 Makefile: escape BUILD_ORIGIN properly
    d280feb96c rootless: fix hang on s390x
    fa263d2cc9 Set Cirrus DEST_BRANCH appropriately to fix CI
    0f01f00f03 Bump to v5.4.0-dev
    ad54787bf0 Bump to v5.4.0-rc3
    6c78bad0dd Update release notes for v5.4.0-rc3
    02eac2979c Add BuildOrigin field to podman info
    141eae99b8 artifact: only allow single manifest
    d5989990d5 test/e2e: improve write/removeConf()
    522f9de9e3 Add --noheading to artifact ls
    9e83191c8f Add --no-trunc to artifact ls
    4cd76ef27b Add type and annotations to artifact add
    bc8124fd62 pkg/api: honor cdi devices from the hostconfig
    57b9709b69 util: replace Walk with WalkDir
    bc5de3dfc7 fix(pkg/rootless): avoid memleak during init() contructor.
    8ee7b117b6 Add `machine init --playbook`
    5feb81d9ff RPM: include empty check to silence rpmlint
    48459db076 RPM: adjust qemu dependencies
    9b67d4c285 Force use of iptables on Windows WSL
    cadf081554 rpm: add attr as dependency for podman-tests
    d4f5817862 update gvproxy version
    fe02e390af [v5.4] Bump Buildah to v1.39.0
    9e2e7f2a77 podman exec: correctly support detaching
    e24ccdd27b libpod: remove unused ExecStartAndAttach()
    25674e05cd [v5.4] Bump c/storage to v1.57.1, c/image v5.34.0, c/common v0.62.0
    5f6adf4d80 Move detection of libkrun and intel
    599da8c50b Prevent two podman machines running on darwin
    03b100563e Remove unnecessary error handling
    bba28688f7 Remove usused Kind() function
    d475b48766 Bump to v5.4.0-dev
    14f6a69dd3 Bump to v5.4.0-rc2
    d52277db75 Update release notes for v5.4.0-rc2
    fa0e8f0582 Safer use of `filepath.EvalSymlinks()` on Windows
    1c111eead7 error with libkrun on intel-based machines
    14cd6ff1d2 chore(deps): update dependency pytest to v8.3.4
    97323a691a test/buildah-bud: skip two new problematic tests on remote
    527a51dcc4 Fix podman-restart.service when there are no containers
    3aa09dd521 Avoid upgrading from v5.3.1 on Windows
    81eb84fdaa Clean up after unexpectedly terminated build
    06c103469d system-tests: switch ls with getfattr for selinux tests
    141bd613b8 vendor latest c/{buildah,common,image,storage}
    bbf00ec6bf Makefile: Add validatepr description for 'make help' output
    0d2431dca2 docs: Enhance podman build --secret documentation and add examples
    016f41ab49 docs: mount.md - idmapped mounts only work for root user
    4bdb947d72 Define, and use, PodmanExitCleanlyWithOptions
    df9e8c3ce6 Eliminate PodmanSystemdScope
    7c40e85968 Fix image ID query
    11ee6c4f90 Revert "Use the config digest to compare images loaded/pulled using different methods"
    6639c20278 Update c/image after https://github.com/containers/image/pull/2613
    f20d9bd637 Update expected errors when pulling encrypted images
    9363c8c362 Eliminate PodmanExtraFiles
    44c5767460 Introduce PodmanTestIntegration.PodmanWithOptions
    ce1b4f72a7 Restructure use of options
    d509bb0823 Inline PodmanBase into callers
    f17590b2bd Pass all of PodmanExecOptions to various [mM]akeOptions functions
    f2d552f5db Turn PodmanAsUserBase into PodmanExecBaseWithOptions
    51d599bce3 Avoid indirect links through quadlet(5)
    5522def65a do not set the CreateCommand for API users
    5181becfde Add podman manifest rm --ignore
    f911d39457 Bump to v5.4.0-dev
    1b3528df8d Bump to v5.4.0-rc1
    6c81dc4f42 fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.8.2
    d7553fabc7 podman artifact
    b6f1364319 vendor latest c/{common,image,storage}
    cfac38a0f2 fix(deps): update module github.com/rootless-containers/rootlesskit/v2 to v2.3.2
    6ee51c5e4f cirrus: bump macos machine test timeout
    bdc195d641 pkg/machine/e2e: improve podman.exe match
    dc3a7e56be pkg/machine/e2e: improve "list machine from all providers"
    cfeefb3219 Remove JSON tag from UseImageHosts in ContainerConfig
    805e78c2aa Set network ID if available during container inspect
    969057bacc Stop creating a patch for v5.3.1 upgrades on windows
    34d42514f1 compose docs: fix typo
    d4f4cf0988 Document kube-play CDI support
    e93f0acbee docs: Add quadlet debug method systemd-analyze
    6ad44fe179 Replace instances of PodmanExitCleanly in play_kube_test.go
    6ad4742ba8 docs: add 'initialized' state to status filters
    ded5a2db82 fix(deps): update module google.golang.org/protobuf to v1.36.3
    3fb37c588d Switch all calls of assert.Nil to assert.NoError
    6565bde6e8 Add --no-hostname option
    68f29df602 Fix unescaping octal escape sequence in values of Quadlet unit files
    a91aa36367 Remove `.exe` suffix if any
    0d0a78cc6b Add kube play support for CDI resource allocation
    75b4a1b2aa add support to `;` for comments in unit files as per systemd documentation
    de1aa44cc9 Use PodmanExitCleanly in attach_test.go
    0c18beaea7 Introduce PodmanTestIntegration.PodmanExitCleanly
    ba24512959 chore(deps): update dependency setuptools to ~=75.8.0
    121caa04ca Add newer c/i to support artifacts
    fca64e5429 fix(deps): update module golang.org/x/tools to v0.29.0
    3be6c501c0 fix(deps): update module golang.org/x/net to v0.34.0
    806722b3d6 specgenutil: Fix parsing of mount option ptmxmode
    b0b1d19723 namespaces: allow configuring keep-id userns size
    6dba0d9586 Update description for completion
    0b3ad66a78 Quadlet - make sure the /etc/containers/systemd/users is traversed in rootless
    418ea52e06 Document .build for Image .container option
    c75e1c41d0 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.9.1
    62c81298fd New VM Images
    e9fb805522 update golangci/golangci-lint to v1.63.4
    4288c81da0 fix(deps): update module google.golang.org/protobuf to v1.36.2
    b23349d3bd chore(deps): update dependency setuptools to ~=75.7.0
    dd76034660 Fixing ~/.ssh/identity handling
    1dbd68f061 vendor latest c/common from main
    17a9408c0d fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.12
    481c608fd4 fix(deps): update module github.com/opencontainers/runc to v1.2.4
    1e0f03b046 specgen: fix comment
    7a51916e3b Add hint to restart Podman machine to really accept new certificates
    a445ebde9d fix(deps): update module github.com/onsi/gomega to v1.36.2
    2aff249156 fix(deps): update module github.com/moby/term to v0.5.2
    6fa234a5de Pass container hostname to netavark
    53e5e402aa Fix slirp4netns typo in podman-network.1.md
    d1a3f96cbf Add support to ShmSize in Pods with Quadlet
    de829251fc fix(deps): update module github.com/onsi/ginkgo/v2 to v2.22.1
    29c29e215f chore(deps): update module golang.org/x/crypto to v0.31.0 [security]
    1b1e0446a5 fix(deps): update module golang.org/x/net to v0.33.0 [security]
    ecd882f9f7 Kube volumes can not container _
    cbd650212a fix(deps): update module github.com/docker/docker to v27.4.1+incompatible
    f2f6eb88e9 test/system: fix "podman play --build private registry" error
    23d4908c8b test/system: CopyDirectory() do not chown files
    8729725684 test/system: remove system dial-stdio test
    153a975888 shell completion: respect CONTAINERS_REGISTRIES_CONF
    10d65f30b6 fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.6
    8b23e6d408 When generating host volumes for k8s, force to lowercase
    ff9d4e72b0 test: enable newly added test
    8b90e3f9c0 vfkit: Use 0.6.0 binary
    3021dbec7a gvproxy: Use 0.8.1 binary
    64e94efb95 systemd: simplify parser and fix infinite loop
    5f79cd3aef Revert "win-installer test: revert to v5.3.0"
    e3d2463a48 Avoid rebooting twice when installing WSL
    2bca5052f1 Avoid rebooting on Windows when upgrading and WSL isn't installed
    af607d0de4 Add win installer patch
    d582c39dc8 Bump WiX toolset version to 5.0.2
    e6d8603136 test/e2e: SkipOnOSVersion() add reason field
    e74df8c35a test/e2e: remove outdated SkipOnOSVersion() calls
    ae9120a71d Update VM images
    f1e77cf172 fix(deps): update module golang.org/x/crypto to v0.31.0 [security]
    c11fd6562d fix(deps): update module github.com/crc-org/crc/v2 to v2.45.0
    851ef2529f fix(deps): update module github.com/opencontainers/runc to v1.2.3
    cf505fe788 quadlet: fix inter-dependency of containers in `Network=`
    e4a135a6ac Add man pages to Mac installer
    5848dbee68 fix(deps): update module github.com/onsi/gomega to v1.36.1
    a70c418b7d fix(deps): update module github.com/docker/docker to v27.4.0+incompatible
    2f31a61cce Fix device limitations in podman-remote update on remote systems
    2c58af0e6b Use latest version of VS BuildTools
    9c14d15f4c bin/docker: fix broken escaping and variable substitution
    0a4885610d manifest annotate: connect IndexAnnotations
    8f45474809 Fix panic in `manifest annotate --index`
    9dbc9b5055 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.5
    45c979d6b3 fix(deps): update module golang.org/x/net to v0.32.0
    2c17ffa54d fix(deps): update module golang.org/x/tools to v0.28.0
    a9b52fdedf fix(deps): update module golang.org/x/crypto to v0.30.0
    66f9e81c17 fix(deps): update module golang.org/x/sys to v0.28.0
    8f1266c717 Fix overwriting of LinuxResources structure in the database
    c76932f4c6 api: replace inspectID with name
    18a93ec68b fix(deps): update github.com/opencontainers/runtime-tools digest to f7e3563
    e7bbcbfbf7 Replace ExclusiveArch with ifarch
    c4c3fb23ce fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.8.1
    ededb4c3c4 Improve platform specific URL handling in `podman compose` for machines
    0d3a653c30 Fix `podman info` with multiple imagestores
    43825122d4 Switch to fixed common
    49b52227b4 refact: use uptime.minutes instead of uptime.seconds
    dec8f3dca6 fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.11
    db6c2c7cdf fix(deps): update golang.org/x/exp digest to 2d47ceb
    f3d250cf27 fix(deps): update github.com/godbus/dbus/v5 digest to c266b19
    5bbfed2dc1 Cover Unix socket in inpect test on Windows platform
    48ae52c08b Add a test for forcing compression and v2s2 format
    9de7e07e56 fix(deps): update module github.com/crc-org/vfkit to v0.6.0
    9475ea8fb9 Package podman-machine on supported architectures only.
    156fc084a9 Fixes missing binary in systemd.
    6673f5c202 stats: ignore errors from containers without cgroups
    1fa27ffb62 api: Error checking before NULL dereference
    4ef773d69e [skip-ci] Packit/copr: switch to fedora-all
    2f1a1fb6f3 make remotesystem: fail early if serial tests fail
    4b38294e92 spec: clamp rlimits without CAP_SYS_RESOURCE
    6f85808707 Clarify the reason for skip_if_remote
    39e08c3ffa Sanity-check that the test is really using partial pulls
    5ff496ea2b Fix apparent typos in zstd:chunked tests
    7f6a203558 Fix compilation issues in QEMU machine files (Windows platform)
    e66b788a51 Mount volumes before copying into a container
    44b0c24ca5 Revert "libpod: remove shutdown.Unregister()"
    e608874004 docs: improve documentation for internal networks
    697c4181d2 docs: document bridge mode option
    415d762475 [skip-ci] Packit: remove epel and re-enable c9s
    e5ed7847c1 chore(deps): update dependency golangci/golangci-lint to v1.62.2
    e16f14a44d vendor: update containers/common
    ef565b76f2 OWNERS: remove edsantiago
    c2dcfca4ca fix(deps): update module github.com/onsi/gomega to v1.36.0
    506fec1fa9 fix(deps): update github.com/containers/common digest to ceceb40
    e4e7bc41f3 refact: EventerType and improve consistency
    4f7395f93a Add --hosts-file flag to container and pod commands
    dc564257a2 Add nohosts option to /build and /libpod/build
    936461e3c2 fix(deps): update module github.com/stretchr/testify to v1.10.0
    13affe96d6 Quadlet - Use = sign when setting the pull arg for build
    916b805f97 win-installer test: revert to v5.3.0
    5f907e4850 fix(deps): update module github.com/crc-org/crc/v2 to v2.44.0
    34d63459ba fix(deps): update module github.com/onsi/ginkgo/v2 to v2.22.0
    3096681ce3 chore(deps): update dependency setuptools to ~=75.6.0
    07aaa7832a Update windows installer tests
    7162c58ba2 Windows: don't install WSL/HyperV on update
    c6549fc25b Switch to non-installing WSL by default
    28305685f6 fix(deps): update github.com/containers/buildah digest to 52437ef
    a1249425bd Configure HealthCheck with `podman update`
    97ed067d1a CI: --image-volume test: robustify
    e6e9d2c21c docs: add 5.3 as Reference version
    926b31e053 Bump CI VMs
    e60e11167e libpod: pass down NoPivotRoot to Buildah
    d59794992f vendor: bump containers/buildah
    cf2ef12664 fix(deps): update module github.com/opencontainers/runc to v1.2.2
    61b57b7d7d Overlay mounts supersede image volumes & volumes-from
    d513973237 libpod: addHosts() prevent nil deref
    71f1f52894 only read ssh_config for non machine connections
    cbb2820a7e ssh_config: allow IdentityFile file with tilde
    a7120b50b1 ssh_config: do not overwrite values from config file
    8a5ec2c505 connection: ignore errors when parsing ssh_config
    7b41e28b95 Bump bundled krunkit to 0.1.4
    2e22ab3bcd fix(deps): update module google.golang.org/protobuf to v1.35.2
    315e7412e8 add support for driver-specific options during container creation
    6809bf1d90 doc: fix words repetitions
    d2d2e4a605 Update release notes on main for v5.3.0
    590fcafc2b chore(deps): update dependency setuptools to ~=75.5.0
    1c77ee6fc5 CI: system tests: parallelize 010
    34a15ae300 fix podman machine init --ignition-path
    3e47e0bc8c vendor: update containers/common
    0a69aefa41 spec: clamp rlimits in a userns
    8a192c8403 Add subpath support to volumes in `--mount` option
    da6404ba16 refactor: simplify LinuxNS type definition and String method
    0a1363d8eb test/e2e: remove FIPS test
    42e8322532 vendor containers projects to tagged versions
    fa335f99e0 fix(deps): update module github.com/moby/sys/capability to v0.4.0
    ca7703643b chore(deps): update dependency setuptools to ~=75.4.0
    969417711d system tests: safer install_kube_template()
    33398ebc1e Buildah treadmill tweaks
    9eca92d625 update golangci-lint to v1.62.0
    8d8b98b64d fix(deps): update module golang.org/x/net to v0.31.0
    e1a6c53909 fix(deps): update module golang.org/x/tools to v0.27.0
    e39ddde709 Revert "Reapply "CI: test nftables driver on fedora""
    b5c9fe948c Yet another bump, f41 with fixed kernel
    30a82cad7a test: add zstd:chunked system tests
    40534d352e pkg/machine/e2e: remove dead code
    e1fe4b4b95 fix(deps): update module golang.org/x/crypto to v0.29.0
    fbbfd07463 kube SIGINT system test: fix race in timeout handling
    b20960b860 New `system connection add` tests
    62c9627d7a Update codespell to v2.3.0
    cbf1d7fcae Avoid printing PR text to stdout in system test
    d49497ce6c Exclude symlink from pre-commit end-of-file-fixer
    9f5bbecb95 api: Add error check
    1b74ab5a85 [CI:ALL] Bump main to v5.4.0-dev
    22152a2f9c test/buildah-bud: build new inet helper
    fb3a0e93a8 test/system: add regression test for TZDIR local issue
    f6af35c695 vendor latest c/{buildah,common,image,storage}
    0e66a793bc Reapply "CI: test nftables driver on fedora"
    d770069062 Revert "cirrus: test only on f40/rawhide"
    ba5ce49c10 test f41 VMs
    6346a11b09 AdditionalSupport for SubPath volume mounts
    4e8d2dd726 wsl-e2e: Add a test to ensure port 2222 is free with usermode networking
    6cf3cb1bfc winmake.ps1: Fix the syntax of the function call Win-SSHProxy
    9a0c0b2eef volume ls: fix race that caused it to fail
    9cb80d1856 gvproxy: Disable port-forwarding on WSL
    52caa0fbb9 build: update gvisor-tap-vsock to 0.8.0
    c23d9c6f23 Log network creation and removal events in Podman
    c05987ddd3 api: Replace close function in condition body

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-03-24 18:42:34 +00:00
Chen Qi
af1d32686e go-metalinter: remove it from podman's DEPENDS
This package is pure source package and its only user is podman's
DEPENDS. The current podman does not need it to be built successfully.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
c2e487745f podman: update to v5.3.1-tip
Bumping libpod to version v5.3.1-21-g8dc23e107e, which comprises the following commits:

    d9a47a6d87 Revert "win-installer test: revert to v5.3.0"
    957b4da983 Avoid rebooting twice when installing WSL
    439136d76e Avoid rebooting on Windows when upgrading and WSL isn't installed
    434b0b6e4f Add win installer patch
    d4a7688b06 Bump WiX toolset version to 5.0.2
    1ca5ab6e9c Add man pages to Mac installer
    139fd2a7cf Replace ExclusiveArch with ifarch
    cd1b2981b4 Fixes missing binary in systemd.
    d4976e0677 Packit: remove epel and re-enable c9s
    fee50f0f31 Packit/copr: switch to fedora-all
    0d22d7b74e Quadlet - Use = sign when setting the pull arg for build
    62c096bbce win-installer test: revert to v5.3.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2025-01-17 19:17:09 +00:00
Bruce Ashfield
f220803306 podman: update to v5.3.1
Bumping libpod to version v5.3.1-5-gc2f09d78d5, which comprises the following commits:

    0d22d7b74e Quadlet - Use = sign when setting the pull arg for build
    62c096bbce win-installer test: revert to v5.3.0
    7bf22277ca Bump to v5.3.2-dev
    4cbdfde5d8 Bump to v5.3.1
    50960afe33 Update release notes for v5.3.1
    d26990702c Update windows installer tests
    2739822424 Windows: don't install WSL/HyperV on update
    a8d61c034b Switch to non-installing WSL by default
    98353f27ed docs: add 5.3 as Reference version
    4886a0ba64 only read ssh_config for non machine connections
    93562b4955 ssh_config: allow IdentityFile file with tilde
    28e7b239ba ssh_config: do not overwrite values from config file
    c49944ea02 connection: ignore errors when parsing ssh_config
    f7877bf9db spec: clamp rlimits in a userns
    dcedf5f211 cirrus: set proper DEST_BRANCH for 5.3
    a39a749ce3 libpod: addHosts() prevent nil deref
    9a9f07aa4b Bump bundled krunkit to 0.1.4
    5546dc6c20 fix podman machine init --ignition-path
    8efa1c1075 Bump to v5.3.1-dev
    874bf2c301 Bump to v5.3.0
    2e3836d226 Update release notes for v5.3.0
    31df1bb97c [v5.3] Bump to Buildah v1.38.0
    9556882bbf [v5.3] Skip FIPS mode secrets run test
    c6dd2c77ab [v5.3] Buildah treadmill tweaks
    0710e83c41 test/buildah-bud: build new inet helper
    d852c58d6c test/system: add regression test for TZDIR local issue
    ac59fb9231 vendor latest c/{buildah,common,image,storage}
    1f0e2db2a9 Reapply "CI: test nftables driver on fedora"
    16acfd7edb Revert "cirrus: test only on f40/rawhide"
    dc97a7e0de test f41 VMs
    9e38b455e4 volume ls: fix race that caused it to fail
    44df7344fe AdditionalSupport for SubPath volume mounts
    17224fcb05 Bump to v5.3.0-dev
    8469dcc4f0 Bump to v5.3.0-rc3
    a18365c665 Update release notes for v5.3-rc3
    10309bfb45 podman: update roadmap
    b237b4dc2a libpod: journald do not lock thread
    2597eeae70 Add key to control if a container can get started by its pod
    c6be5a6684 Honor users requests in quadlet files
    2c01264568 CI: systests: workaround for parallel podman-stop flake
    528b085438 Fix inconsistent line ending in win-installer project
    5ae5ab8c26 fix(deps): update module github.com/opencontainers/runc to v1.2.1
    dbfc8cccda Quadlet - support image file based mount in container file
    e6d987882e API: container logs flush status code
    768ad8653a rework event code to improve API errors
    e3abf5c9e8 events: remove memory eventer
    6348778348 libpod: log file use Wait() over event API
    0acd192b59 Makefile: vendor target should always remove toolchain
    ef20e75a77 cirrus: check consitent vendoring in test/tools
    f4ad93d5f6 test/tools/go.mod: remove toolchain
    3f15f710ce fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.10
    d8311353b9 fix(deps): update module github.com/onsi/gomega to v1.35.1
    37c8e10031 doc: explain --interactive in more detail
    cd1b6b7121 fix(deps): update golang.org/x/exp digest to f66d83c
    2dff79bd2c fix(deps): update github.com/opencontainers/runtime-tools digest to 6c9570a
    5722304613 fix(deps): update github.com/linuxkit/virtsock digest to cb6a20c
    1e7593d17f Bump to v5.3.0-dev
    ffad01fbc8 Bump to v5.3.0-rc2
    b6919a5712 Update release notes for v5.3.0-rc2
    314dece926 add default polling interval to Container.Wait
    d633824a95 Instrument cleanup tracer to log weird volume removal flake
    6b8e8cbbf7 make podman-clean-transient.service work as user
    b455f94ca8 Add default remote socket path if empty
    48a8a9c22c Use current user if no user specified
    e523734ab6 Add support for ssh_config for connection
    c98538db7d libpod: use pasta Setup() over Setup2()
    c7ff3b75cb fix(deps): update module github.com/onsi/ginkgo/v2 to v2.21.0
    5a1bc6126e fix(deps): update module github.com/onsi/gomega to v1.35.0
    bd75a4e0e0 logformatter: add cleanup tracer log link
    2a0a52469c docs: fix broken example
    f4be5e34c2 docs: add missing swagger links for the stable branches
    b9fed4fcf2 readthedocs: build extra formats
    ce24ab0683 pkg/machine/e2e: remove debug
    4a54fd8756 fix(docs): Integrate pasta in rootless tutorial
    5f66277138 chore(deps): update dependency setuptools to ~=75.3.0
    1f44d0f8b2 libpod: report cgroups deleted during Stat() call
    9abc17f1e1 chore: fix some function names in comment
    41a82c9a95 CI: parallelize 450-interactive system tests
    10d056cc5e CI: parallelize 520-checkpoint tests
    e6b7e4ff84 CI: make 070-build.bats use safe image names
    64516e1b8f test/system: add podman network reload test to distro gating
    743a0d49eb System tests: clean up unit file leaks
    c0f4e2ce67 healthcheck: do not leak service on failed stop
    6069cdda00 healthcheck: do not leak statup service
    45e1ffb799 fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.8.0
    afedb83917 Add Startup HealthCheck configuration to the podman inspect
    d2ba730f33 buildah version display: use progress()
    825eed4bde new showrun() for displaying and running shell commands
    9db04e87b6 Buildah treadmill: redo the .cirrus.yml tweaks
    a925c9f831 Buildah treadmill: more allow-empty options
    ba8375c9e4 Buildah treadmill: improve test-failure instructions
    ee9c681f31 Buildah treadmill: improve wording in test-fail instructions
    eb90154975 doc: Remove whitespace before comma
    da783f3f70 fix(deps): update module github.com/checkpoint-restore/checkpointctl to v1.3.0
    0cdb9b3b22 ps: fix display of exposed ports
    73fb6623cd ps: do not loop over port protocol
    390aec18b2 readme: Add reference to pasta in the readme
    5b131b8273 test/system: Fix spurious "duplicate tests" failures in pasta tests
    6fd0e227b4 Improve "podman load - from URL"
    77ef28c14f Try to repair c/storage after removing an additional image store
    1d7ec1ef5f Use the config digest to compare images loaded/pulled using different methods
    bf8f2b5551 Simplify the additional store test
    3bc6072142 Fix the store choice in "podman pull image with additional store"
    6a11e75c48 Bump to v5.3.0-dev
    d306e80127 Bump to v5.3.0-rc1
    23ab7b858a Set quota on volume root directory, not _data
    1a5ff0765e fix(deps): update module github.com/opencontainers/runc to v1.2.0
    94878af151 test: set soft ulimit
    ef26488fd7 Vagrantfile: Delete
    642b61a091 Enable pod restore with crun
    2e94ca5816 vendor: update c/{buildah,common,image,storage}
    fdc9feea0e Fix 330-corrupt-images.bats in composefs test runs
    67e0fa8b89 quadlet: add default network dependencies to all units
    57b022782b quadlet: ensure user units wait for the network
    203ab6573b add new podman-user-wait-network-online.service
    a6c4e00e9a contrib/systemd: switch user symlink for file symlinks
    1462b52090 Makefile: remove some duplication from install.systemd
    21d0711a02 contrib/systemd: move podman-auto-update units
    9c6b1e20a3 quadlet: do not reject RemapUsers=keep-id as root
    ada75c0bb8 test/e2e: test quadlet with and without --user
    fa920f54c7 CI: e2e: fix checkpoint flake
    fe96c843bf APIv2 test fix: image history
    67e39c1ec5 pasta udp tests: new bytecheck helper
    a92958eb0c Document packaging process
    cf124ee1bb [skip-ci] RPM: remove dup Provides
    927cb7624c Update dependency setuptools to ~=75.2.0
    1ddb15c81f System tests: safer pause-image creation
    40d4f7240b Update module github.com/opencontainers/selinux to v1.11.1
    1227f19393 Added escaping to invoked powershell command for hyperv stubber.
    b7b2ef48e8 use slices.Clone instead of assignment
    768aaadca1 libpod API: only return exit code without conditions
    b3302e8e18 Housekeeping: remove duplicates from success_task
    1bf37eecf3 Thorough overhaul of CONTRIBUTING doc.
    b0f2ebbe9d test/e2e: fix default signal exit code test
    dc55b59987 Test new VM build
    1b57dcab61 CI: fix changing-rootFsSize flake
    feb46513f0 scp: add option types
    06b470d79b Unlock mutex before returning from function
    7ea6120794 Note in the README that we are moving to timed releases
    5d10e6e16b cirrus: let tar extract figure out the compression
    94dcf76eb2 Make error messages more descriptive
    3a4c4468f2 Mention containers.conf settings for podman machine commands
    7dc58c105b [skip-ci] Packit: re-enable CentOS Stream 10/Fedora ELN teasks"
    3d57560a21 cmd: use logrus to print error
    71d5ee0e04 podman: do not set rlimits to the default value
    5ebba75dbd spec: always specify default rlimits
    8896ace2a4 vendor: update containers/common
    92a188ea38 Note in the README that we are moving to timed releases
    7f836df303 Revert "CI: test nftables driver on fedora"
    9e35fead03 cirrus: use zstd over bzip2 for repo archive
    6e69978d2e cirrus: use shared repo_prep/repo_artifacts scripts
    7eb4a6fe2b cirrus: speed up postbuild
    04dffbc2c7 cirrus: change alt arch task to only compile binaries
    9082a14d76 cirrus: run make with parallel jobs where useful
    bc3db7c95b Makefile: allow man-page-check to be run in parallel
    39963cc984 cirrus: use fastvm for builds
    4e3a03795d test/e2e: skip some Containerized checkpoint tests
    fe404959ed test: update timezone checks
    a79fec5e98 cirrus: update CI images
    f517e52167 test/e2e: try debug potential pasta issue
    38803713d6 CI: quadlet system tests: use airgapped testimage
    bac655a6b1 Allow removing implicit quadlet systemd dependencies
    05a449c61e fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.4
    b3829a2932 libpod API: make wait endpoint better against rm races
    3215d5124f podman-remote run: improve how we get the exit code
    3d1a4301af [skip-ci] Packit: constrain koji and bodhi jobs to fedora package to avoid dupes
    e7833d52cf 055-rm test: clean up a test, and document
    3cedd0c2b5 CI: remove skips for libkrun
    858472aa83 Bump bundled krunkit to 0.1.3
    43a4bddd10 fix(deps): update module google.golang.org/protobuf to v1.35.0
    385e2ea650 fix(deps): update module golang.org/x/net to v0.30.0
    45df394072 server: fix url parsing in info
    b8dbe09f98 fix(deps): update module golang.org/x/tools to v0.26.0
    e2e1996c6a Makefile: fix ginkgo FOCUS option
    fbd9fe45cb fix(deps): update module golang.org/x/crypto to v0.28.0
    d0cb62aacc podman-systemd.unit.5: adjust example options
    374844817d docs: prefer --network to --net
    1470961e6c fix(deps): update module golang.org/x/term to v0.25.0
    567906ed5b fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.24
    53785ed055 fix(deps): update module golang.org/x/sys to v0.26.0
    505c585b49 OWNERS file audit and update
    8061553c0f Exposed ports are only included when not --net=host
    e46ae46f18 libpod: hasCurrentUserMapped checks for gid too
    e948c4ed90 [CI:DOCS] Document TESTFLAGS in test README file
    985b57d9f7 Validate the bind-propagation option to `--mount`
    d8b26ac1b4 Fix typo in secret inspect examples
    6f9cc3755a Mention `no_hosts` and `base_hosts_file` configs in CLI option docs
    043b82ef59 Fixes for vendoring Buildah
    83a0299309 vendor: update buildah to latest
    23f256349b Makefile - silence skipped tests when focusing on a file
    dde1c3d98c vendor: update to latest c/common
    fc25a3a5fc Quadlet - prefer "param val" over "param=val" to allow env expansion
    410537808e System tests: sdnotify: wait for socket file creation
    28e01cc8cc Switch to moby/sys/capability
    6a91149b53 platformInspectContainerHostConfig: rm dead code
    b791dfb558 CI: require and test CI_DESIRED_NETWORK on RHEL
    edc3dc5e11 Add ExposedPorts to Inspect's ContainerConfig
    28d3775c4d fix(deps): update golang.org/x/exp digest to 701f63a
    abc4cfb049 quadlet: allow variables in PublishPort
    7cde3abd17 fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.9
    8ef495594c fix(deps): update github.com/godbus/dbus/v5 digest to a817f3c
    bb35ad1da4 Document that zstd:chunked is downgraded to zstd when encrypting
    ce9716ee41 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.3
    ece76a2537 chore(deps): update dependency ubuntu to v24
    b5e1863d1c rpm: do not load iptables modules on f41+
    e07c31068f adding docs for network-cmd-path
    a619c03eff Include exposed ports in inspect output when net=host
    1dd90dbe20 feat(libpod): support kube play tar content-type (#24015)
    1950555b26 podman mount: some better error wrapping
    5c3019e028 podman mount: ignore ErrLayerUnknown
    ebbec00b0d Quadlet - make sure the order of the UnitsDir is deterministic
    f47abd8e1e packit: disable Centos Stream/fedora ELN teasks
    5de7b7c3f3 libpod: remove shutdown.Unregister()
    0bbef4b830 libpod: rework shutdown handler flow
    2de82d523b libpod: ensure we are not killed during netns creation
    27838b26d6 Update module github.com/moby/sys/capability to v0.3.0
    6e4ef2c54d Update documentation of `--no-hosts`, `--hostname`, and `--name` CLI options
    c67d8baeb6 Update documentation of `--add-host` CLI option
    70c131ed68 System tests: set a default XDG_RUNTIME_DIR
    e9b8564690 Modify machine "Remove machine" test
    73cbc13190 CORS system test: clean up
    de856dab99 Add --health-max-log-count, --health-max-log-size, --health-log-destination flags
    7fbc6d9370 troubleshooting: adjust home path in tip 44
    1f2658e0ef test/system: For pasta port forwarding tests don't bind socat server
    24deec835c Update connection on removal
    c709be3a29 Simplify `RemoveConnections`
    9febd2c27a Move `DefaultMachineName` to `pkg/machine/define`
    7f29233a3f vendor: update containers/image
    c81c77109b vendor: update containers/storage
    fd4c63838b CI: skip the flaking quadlet test
    faf4604883 CI: make systemd tests parallel-safe (*)
    09ba5db035 CI: run and collect cleanup tracer logs
    0b59f67c3a add epbf program to trace podman cleanup errors
    4be6bf2270 CI: parallelize logs test as much as possible
    600634c62c CI: format test: use local registry if available
    d92f2d39ee CI: make 700-play parallel-safe
    62e5eb4734 docs: Fix missing negation
    6ef0288ca6 bin/docker support warning message suppression from user config dir
    6d4006b123 Update module github.com/docker/docker to v27.3.1+incompatible
    133ea31ffb Quadlet - add full support for Symlinks
    792796183f libpod: setupNetNS() correctly mount netns
    f6bda786ed vendor latest c/common
    7dccf8faee docs: remove usage of deprecated `--storage`
    597773464c Update module github.com/docker/docker to v27.3.0+incompatible
    a08ae98161 CI: Quadlet rootfs test: use container image as rootfs
    9c51eead06 CI: system test registry: use --net=host
    e3af5a38d3 CI: rm system test: bump grace period
    3396dabdf3 CI: system tests: minor documentation on parallel
    31cdf1197b fix typo in error message Fixes: containers/podman#24001
    1d5c8ac18e CI: system tests: always create pause image
    5e5c68ffbe CI: quadlet system test: be more forgiving
    6dcda2196a vendor latest c/common
    6fe832d5d6 CI: make 200-pod parallel-safe
    d7335855d7 allow exposed sctp ports
    755a06aa44 test/e2e: add netns leak check
    2d469e517d test/system: netns leak check for rootless as well
    2505381551 test/system: Improve TODO comments on IPv6 pasta custom DNS forward test
    4919440428 test/system: Clarify "Local forwarder" pasta tests
    63e286ac55 test/system: Simplify testing for nameserver connectivity
    6c79fe292b test/system: Consolidate "External resolver" pasta tests
    85045406b5 test/system: Move test for default forwarder into its own case
    5468718f22 CI: make 090-events parallel-safe
    8402b6535f Misc minor test fixes
    7fcf94d7b5 Add network namespace leak check
    b3da5be2b1 Add workaround for buildah parallel bug
    5fc3de5583 registry: lock start attempts
    bf6131780a Update system test template and README
    6502e30cfd bats log: differentiate parallel tests from sequential
    6b621d9571 ci: bump system tests to fastvm
    bcffa9ce30 clean_setup: create pause image
    812c7e9436 CI: make 012-manifest parallel-safe
    00c13afcb9 podman-manifest-remove: update docs and help output
    aa108924ea test/system: remove wait workaround
    fbed3a01d2 wait: fix handling of multiple conditions with exited
    e04668c8ca Match output of Compat Top API to Docker
    d571ca6536 system test parallelization: enable two-pass approach
    8d119f0c2d New VMs: test crun 1.17
    a5e9b4d126 libpod: hides env secrets from container inspect
    111a4bbe71 CI: e2e: workaround for events out-of-sequence flake
    49a07fce49 update golangci-lint to 1.61.0
    432325236b libpod: convert owner IDs only with :idmap
    f4d0e124d6 Podman CLI --add-host with multiple host for a single IP
    a664708f35 Quadlet - Split getUnitDirs to small functions
    1a1001d824 fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.5
    c436a9b658 chore(deps): update dependency setuptools to ~=75.1.0
    fdb2edf46a Fxi typo in cache-ttl.md
    b2e6d53265 Get WSL disk as an OCI artifact
    c6616004f1 CI: make 260-sdnotify parallel-safe
    42a1f5e87c quadlet: do not log ENOENT errors
    91dbd6dc33 pkg/specgen: allow pasta when running inside userns
    9a8e17816a troubleshooting: add tip about the user containers
    95833a6207 chore(deps): update dependency setuptools to v75
    1857d7e50f Convert windows paths in volume arg of the build command
    d124d90e18 Improve error when starting multiple machines
    fe08440ec3 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.2
    01a1761fd9 Minor typo noticed when reading podman man page
    e041f2a7b7 Remove `RemoveFilesAndConnections`
    54b71b637c Add `GetAllMachinesAndRootfulness`
    ac4a31cc4a rewrite typo osascript
    089d2513d8 typo
    31a1fd8f33 fix(deps): update module github.com/docker/docker to v27.2.1+incompatible
    cb03ca31b2 Add radio buttons to select WSL or Hyper-V in windows setup.exe
    297ec1c083 [skip-ci] Packit: split out ELN jobs and reuse fedora downstream targets
    5f6a22dc1b [skip-ci] Packit: Enable sidetags for bodhi updates
    b9fe4097dd vendor: update c/common
    e61682f50e CI: make 710-kube parallel-safe
    0ff89a00af CI: mark 320-system-df *NOT* parallel safe
    db12343e27 Add kube play support for image volume source
    837755e643 refactor: add sshClient function
    a83fef34a9 fix(deps): update module golang.org/x/tools to v0.25.0
    22ec8ea06d CI: make 505-pasta parallel safe
    18932e0339 CI: make 020-tag parallel-safe
    a165289574 CI: make 410-selinux parallel-safe
    359092e463 Bump VMs. ShellCheck is now built-in
    005d9b543b troubleshooting: add tip about auto, keep-id, nomap
    a1e6603133 libpod: make use of new pasta option from c/common
    2f858675b3 vendor latest c/common
    0abbcfa50a podman images: sort repository with tags
    eb396705c6 Remove containers/common/pkg/config from pkg/util
    2840b21862 fix(deps): update module golang.org/x/net to v0.29.0
    38555305c2 fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.23
    1c23bd5acf fix(deps): update module golang.org/x/crypto to v0.27.0
    133bbd3769 Fix CI
    c203c48c70 Detect and fix typos using codespell
    12b3d01438 Fix typo: replace buildin with built-in
    4700b5a58a Add codespell config, pre-commit definition, and move options from Makefile
    901f621daa prune: support clearing build cache using CleanCacheMount
    1543c5f0ad test/e2e: fix network prune flake
    bdf96e7df2 Add support for Job to kube generate & play
    c317da8deb Add podman-rootless.7 man page
    15bde1abdb Add DNS, DNSOption and DNSSearch to quadlet pod
    0f77363ff5 podman.1.md: improve policy.json section
    579e8b2d7a e2e: flake fix: SIGPIPE in hook test
    01296038dc libpod: fix rootless cgroup path with --cgroup-parent
    5a15e70345 vendor: update c/storage
    7b019e9905 CI: make 055-rm parallel-safe
    e5624510ce CI: make 130-kill parallel-safe
    f38953c156 CI: make 125-import parallel-safe
    0e1ac9cee1 CI: make 110-history parallel-safe
    bca7c20530 CI: system tests: parallelize low-hanging fruit
    8eb7eff899 Add disclaimer to `podman machine info` manpage.
    d803bb3407 man pages: refactor two more options
    beffd05d5a update github.com/opencontainers/runc to v1.2.0-rc.3
    77702d73ef update go.etcd.io/bbolt to v1.3.11
    a269f098cd update github.com/onsi/{ginkgo,gomega}
    e9a4534cb1 Update module github.com/shirou/gopsutil to v4
    54b8c4fb64 packit: update fedora and epel targets
    f93fcf7dee bump go to 1.22
    d03e8ffc56 cirrus: test only on f40/rawhide
    2ca4efb9f4 cirrus: remove CI_DESIRED_NETWORK reference
    e598bcafb8 cirrus: prebuild use f40 for extra tests
    c68c2974a3 chore(deps): update dependency setuptools to ~=74.1.0
    60af13ca0f libpod: fix HostConfig.Devices output from 'podman inspect' on FreeBSD
    70358ecf18 fix(deps): update golang.org/x/exp digest to 9b4947d
    1732338630 Implement publishing API UNIX socket on Windows platforms
    c6fe5e5395 Vendor c/common:8483ef6022b4
    71fd15726d quadlet: support container network reusing
    f40eb5f06a docs: update read the docs changes
    abea5ad4ac CI: parallel-safe network system test
    2b14db2af3 Quadlet - Support multiple image tags in .build files
    3bdddea8fa fix(deps): update module github.com/vbauerster/mpb/v8 to v8.8.3
    6a0ab6f7bc cirrus: remove _bail_if_test_can_be_skipped
    d5c5261e6f cirrus: move renovate check into validate
    ac18b1a0af cirrus: remove 3rd party connectivity check
    34a7d8dd10 cirrus: remove cross jobs for aarch64 and x86_64
    186f50ad7d cirrus: do not upload alt arch cross artifacts
    94431c29b4 cirrus: remove ginkgo-e2e.json artifact
    78be80f2cd cirrus: fix default timeouts
    775d27fcd8 github: remove fcos-podman-next-build-prepush
    63545126c2 Clarify podman machine volume mounting behavior under WSL
    41f945fc24 machine: Add -all-providers flag to machine list
    5389eee737 Create a podman-troubleshooting man page
    33b96e78c8 chore(deps): update dependency setuptools to v74
    565ad236a5 fix(deps): update module github.com/docker/docker to v27.2.0+incompatible
    6e027c0e37 Fix an improperly ignored error in SQLite
    678323efd8 CI: flake workaround: ignore socat waitpid warnings
    00027bc251 fix(deps): update module github.com/rootless-containers/rootlesskit/v2 to v2.3.1
    4f4ebdce5b Stop skipping machine volume test on Hyper-V
    a89fef6e2a cleanup: add new --stopped-only option
    bf74797c69 fix races in the HTTP attach API
    dbd2adc798 cirrus: skip windows/macos machine task on RHEL branches
    a508d7631f Update module github.com/containers/gvisor-tap-vsock to v0.7.5
    dc724e5e80 run: fix detach passthrough and --rmi
    8e78028e2c podman run: ignore image rm error
    7c5d8bec0d Add support for AddHost in quadlet .pod and .container
    07c9fe82a8 [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.3
    df3c9efb03 update github.com/vishvananda/netlink to v1.3.0
    5f57f4ea22 build: Update gvisor-tap-vsock to 0.7.5
    3e58e04d3e Quote systemd DefaultEnvironment Proxy values, as documented in systemd.conf man page:
    16007e4370 fix typo in podman-network-create.1.md
    6c68f4ad97 Use HTTP path prefix of TCP connections to match Docker context behavior
    cae427e2f8 Makefile: remotesystem: use real podman server, no --url
    215af114ab Update module github.com/openshift/imagebuilder to v1.2.15
    11547942b1 CI: parallel-safe userns test
    7164177c68 Update module github.com/onsi/ginkgo/v2 to v2.20.1
    d55b12f70b Add support for IP in quadlet .pod files
    b2fb944e19 Specify format to use for referencing fixed bugs.
    68efa7e3a1 CI: parallel-safe run system test
    4dc5708f14 Revert "test/e2e: work around for pasta issue"
    17193af962 CI: On vX.Y-rhel branches, ensure that some downstream Jira issue is linked
    4fbfa7de6e quadlet: support user mapping in pod unit
    5ccaa699f1 Update Release Process
    154d832696 Test new VM build
    29071ac498 command is not optional to podman exec
    9c3921ca58 CI: parallel-safe namespaces system test
    13b31845c8 [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.2
    1ccccde183 quadlet: add key CgroupsMode
    458ba5a8af Fix `podman stop` and `podman run --rmi`
    e5c91ff03a quadlet: set infra name to %s-infra
    990fc335fa chore(deps): update dependency setuptools to v73
    76e1bbb57d [skip-ci] Packit: update targets for propose-downstream
    fc30620cdb Do not segfault on hard stop
    d5cd388729 Fix description of :Z to talk about pods
    145c7511aa CI: disable ginkgo flake retries
    b755a1c60b vendor: update go-criu to latest
    84a85319e1 golangci-lint: make darwin linting happy
    666d839157 golangci-lint: make windows linting happy
    cd2a4c7cac test/e2e: remove kernel version check
    6c0d94328f golangci-lint: remove most skip dirs
    942f789a88 set !remote build tags where needed
    c17daf2b09 update golangci-lint to 1.60.1
    57016f5cc3 test/e2e: rm systemd start test
    e2e2763b0e fix(deps): update module github.com/vbauerster/mpb/v8 to v8.8.1
    80639df27a podman wait: allow waiting for removal of containers
    ddece758a4 libpod: remove UpdateContainerStatus()
    7a7aec355b podman mount: fix storage/libpod ctr race
    480d43748a CI: quadlet tests: make parallel-safe
    420bd16a21 CI: system tests: make random_free_port() parallel-safe
    478b262f9b remove trailing comma in example
    1a1d2646df CI: format test: make parallel-safe
    004c040ca2 Fix podman-docker.sh under -eu shells (fixes #23628)
    6fb10421fb docs: update podman-wait man page
    94fd5fe6f7 libpod: remove duplicated HasVolume() check
    a65aecd260 podman volume rm --force: fix ABBA deadlock
    b6beed9f76 test/system: fix network cleanup restart test
    30eb6b6aae libpod: do not stop pod on init ctr exit
    8a943311db libpod: simplify WaitForExit()
    5b6de98ee8 CI: remove build-time quay check
    6b1c7de3d5 Fix known_hosts file clogging and remote host id
    c4cdb6defa Update docker.io/library/golang Docker tag to v1.23
    0d1c19248a Update dependency setuptools to ~=72.2.0
    9945736a3e Update module github.com/docker/docker to v27.1.2+incompatible
    0d7e14fb83 healthcheck system check: reduce raciness
    30ee9c0114 CI: healthcheck system test: make parallel-safe
    8f191618e4 Validate renovate config in every PR
    0177f74dc6 pkg/machine: Read stderr from ssh-keygen correctly
    e30b0978b8 Fix renovate config syntax error
    36f9a04499 CI: 080-pause.bats: make parallel-safe
    6656a18c3f CI: 050-stop.bats: make parallel-safe
    25d66d97d2 Additional potential race condition on os.Readdir
    5ec413fac7 pkg/bindings/containers: handle ignore for stop
    6fce734f42 remote: fix invalid --cidfile + --ignore
    e111b6c0be Update/simplify renovate config header comment
    6c0b8b64d4 Migrate renovate config to latest schema
    d33abcdf10 Fix race condition when listing /dev
    d26341332c docs/podman-systemd: Try to clarify `Exec=` more
    ecf88f17b6 libpod: reset state error on init
    20f3e8909e test/system: pasta_test_do add explicit port check
    20a32d33cd test/e2e: work around new push warning
    be41ee4131 vendor: update c/common to latest
    4aaa5cb6f0 stopIfOnlyInfraRemains: log all errors
    78cb1e28cb libpod: do not save expected stop errors in ctr state
    f276d53532 libpod: fix broken saveContainerError()
    b0948a5cd0 Quadlet: fix filters failure when the search paths are symlinks
    2043d1647c readme: replace GPG with PGP
    a48cd241ad Drop APIv2 CNI configuration
    dcdb5408de De-duplicate docker-py testing
    ec59508d4c chore(podmansnoop): explain why crun comm is 3
    f2a03e5753 libpod: cleanupNetwork() return error
    61a889de4c fix(deps): update module golang.org/x/sys to v0.24.0
    7936809f75 Reduce python APIv2 test net dependency
    bf091abdc5 Fix not testing registry.conf updates
    be2212804b test/e2e: improve command timeout handling
    52ff2a41fa Update module github.com/onsi/ginkgo/v2 to v2.20.0
    09639a07fb Update module github.com/moby/sys/user to v0.3.0
    f041d059b5 Add passwd validate and generate steps
    4620e91f86 podman container cleanup: ignore common errors
    795851edd3 Quadlet - Allow the user to override the default service name
    1a2e1eb46e CI: e2e: serialize root containerPort tests
    a06a7d7ba8 Should not force conversion of manifest type to DockerV2ListMediaType
    2038d88680 fix(deps): update module golang.org/x/tools to v0.24.0
    6714b6302d fix(deps): update github.com/containers/common digest to 05b2e1f
    f99c7ead92 CI: mount system test: parallelize
    53ae4ea927 Update module golang.org/x/net to v0.28.0
    81003f2d08 Ignore ERROR_SHARING_VIOLATION error on windows
    f9b67cea57 CI: manifest system tests: make parallel-safe
    eb7ce80cf9 Create volume path before state initialization
    84a5119d17 vendor: update c/storage
    029f9b38cc CI: fix broken libkrun test
    1912dd4bf6 test/e2e: work around for pasta issue
    71bcd25ab6 test/e2e: fix missing exit code checks
    082650b68f Test new CI images
    abd586cb1c Remove another race condition when mounting containers or images
    91b3fdbba3 fix(deps): update github.com/containers/common digest to c0cc6b7
    01d739a65e Change Windows installer MajorUpgrade Schedule
    d628e14355 Ignore missing containers when calling GetExternalContainerLists
    37226e2e93 Remove runc edit to lock to specific version
    67ce828152 fix(deps): update module golang.org/x/sys to v0.23.0
    87dad1caef CI: podman-machine: do not use cache registry
    bfb42b3b15 CI: completion system test: use safename
    e429160e5b Temporarly disable failing Windows Installer CI test
    3ae1568933 libpod: fix volume copyup with idmap
    61def05cd9 libpod: avoid hang on errors
    457c64564a Temp. disable PM basic Volume ops test
    029a9aa34e Add libkrun Mac task
    014b7af4f3 Never skip checkout step in release workflow
    83e90a2f5b System tests: leak_test: readable output
    f446f59d71 fix(deps): update github.com/docker/go-plugins-helpers digest to 45e2431
    75a316aae4 vendor: bump c/common
    fcf7cd7d5c Version: bump to v5.3.0-dev
    7610cedc80 libpod: inhibit SIGTERM during cleanup()
    2550a7290a Tweak versions in register_images.go
    4c3531a1a4 fix network cleanup flake in play kube
    84f57e4ba0 WIP: Fixes for vendoring Buildah
    b8a9b184af Add --compat-volumes option to build and farm build
    286fbf98d1 Bump to Buildah v1.37.0
    7d9c1a2c53 Quadlet test - Split between success, warning and error cases
    77081df8cd libpod: bind ports before network setup
    cfac059d14 Disable compose-warning-logs if PODMAN_COMPOSE_WARNING_LOGS=false
    1c46686a41 Use new syntax for selinux options in quadlet
    616005e0ad fix(deps): update module github.com/onsi/gomega to v1.34.1
    396961069c CI: kube test: fix broken external-storage test
    8b5b9d0bb5 Update dependency setuptools to v72
    bf3f207a49 Convert additional build context paths on Windows
    1b91df012d pkg/api: do not leak config pointers into specgen
    f3a86266e6 Quadlet - Allow the user to set the service name for .pod files
    1c4fbe7965 Quadlet tests - allow overriding the expected service name
    41cc3ae6f9 fix(deps): update module github.com/moby/sys/user to v0.2.0
    884c43d416 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.5
    7bb3b83c17 CI: enable root user namespaces
    b59918e536 libpod: force rootfs for OCI path with idmap
    1d23f3ff11 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.1
    a18bd3e9c0 Add test steps for automount with multi images
    25fffdb74f CI: cp tests: use safename
    1ecb68d92b [skip-ci] RPM: podman-iptables.conf only on Fedora
    fd0ff9060f CI: 700-play: fix a leaked non-safename
    d9c2806461 test: check that kube generate/play restores the userns
    fef125c7b1 test: disable artifacts cache with composefs
    8403f4c33f test: fix podman pull tests
    90411b2290 vendor: bump c/storage
    eadfbbc809 Update module github.com/cyphar/filepath-securejoin to v0.3.1
    ce7dded38b Add /run/containers/systemd, ${XDG_RUNTIME_DIR}/containers/systemd quadlet dirs
    599c0d167c build: Update gvisor-tap-vsock to 0.7.4
    2e20681f05 test/system: fix borken pasta interface name checks
    da3edce4e6 test/system: fix bridge host.containers.internal test
    f70976a7e2 api: honor the userns for the infra container
    fa2590a97a play: handle 'private' as 'auto'
    61f0230c31 kube: record infra user namespace
    bf8c3065f2 infra: user ns annotation higher precedence
    bbe0e4a5db specgenutil: record the pod userns in the annotations
    e97bb79b7a kube: invert branches
    64f2d85e4f CI: system log test: use safe names
    84eb640160 Update encryption tests to avoid a warning if zstd:chunked is the default
    059c298389 Fix "podman pull and decrypt"/"from local registry"
    6c55ef505d Use unique image names for the encrypted test images
    b61667470c CI: system tests: instrument to allow failure analysis
    96771eec53 Fix outdated comment for the build step win-gvproxy
    71d6e2fbaf Add utility to convert VMFile to URL for UNIX sockets
    7768cf235e Run codespell on source
    83160b1d02 fix(deps): update module github.com/docker/docker to v27.1.0+incompatible
    a493a584c0 chore(deps): update dependency setuptools to ~=71.1.0
    a05a9cae07 logformatter: tweaks to pass html tidy
    174190132c More information for podman --remote build and running out of space.
    2e4b640ad2 Fix windows installer deleting machine provider config file
    7202e6172d Use uploaded .zip for Windows action
    5e9ab00063 pr-should-include-tests: no more CI:DOCS override

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-12-10 03:47:54 +00:00
Bruce Ashfield
c7834dbd3c podman: update to v5.2.3
Bumping libpod to version v5.2.3-4-g18e0d84c6c, which comprises the following commits:

    daae27b7b0 vendor: update c/common to v0.60.4
    f6a31e013d Bump to v5.2.4-dev
    c5366a308e Bump to v5.2.3
    b5ededbce5 Update release notes for v5.2.3
    35d2fc8de6 [v5.2] Bump Buildah to v1.37.3
    f0ddea707a pkg/specgen: allow pasta when running inside userns
    aaf15f81c4 libpod: convert owner IDs only with :idmap
    ec4ac087b4 docs: update read the docs changes
    c60961839a allow exposed sctp ports
    a995b6db5d libpod: setupNetNS() correctly mount netns
    d2c2539ee0 vendor: update c/common to v0.60.3
    a17fd8c0aa [skip-ci] Packit: split out ELN jobs and reuse fedora downstream targets
    b9691547ca [skip-ci] Packit: Enable sidetags for bodhi updates
    02d400e7b7 build: Update gvisor-tap-vsock to 0.7.5
    5c856c81b0 CI: podman-machine: do not use cache registry
    2f7011ab43 [CI:DOCS] Add v5.2.2 lib updates to RELEASE_NOTES.md
    602f71991c Bump to v5.2.3-dev
    fcee48106a Bump to v5.2.2
    37af07836a Update RELEASE_NOTES for v5.2.2
    570fbc49aa [v5.2] Bump Buildah to v1.37.2, c/common v0.60.2, c/image v5.32.2
    458d15cf5d [v5.2] golangci-lint: make darwin linting happy
    faf3edb5f4 [v5.2] golangci-lint: make windows linting happy
    b96312af0f [v5.2] test/e2e: remove kernel version check
    462c1c6d8e [v5.2] golangci-lint: remove most skip dirs
    35290c9b32 [v5.2] set !remote build tags where needed
    3ca3c1d456 [v5.2] update golangci-lint to 1.60.1
    d61b5d9409 Packit: update targets for propose-downstream
    dbdff97042 Create volume path before state initialization

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-11-15 19:50:00 +00:00
Bruce Ashfield
5141d3f3f9 podman: add VIRTUAL-RUNTIME_container_dns to RDEPENDS
Allow aardvark-dns to be specified as a rdepends for podman

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-11-15 19:50:00 +00:00
Bruce Ashfield
82fe694454 podman: update to v5.2.1
Bumping libpod to version v5.2.1-5-g679276e136, which comprises the following commits:

    dbdff97042 Create volume path before state initialization
    628446c88c Update Cirrus DEST_BRANCH
    30f104cf36 Bump to v5.2.2-dev
    d0582c9e1e Bump to v5.2.1
    1cec5dc24e Update release notes for v5.2.1
    8227722c3c [v5.2] Add zstd:chunked test fix
    854e0c2eb4 [v5.2] Bump Buildah to v1.37.1, c/common v0.60.1, c/image v5.32.1
    8f198092d7 libpod: reset state error on init
    669767c3a9 libpod: do not save expected stop errors in ctr state
    851ec1f81c libpod: fix broken saveContainerError()
    6b45888959 Bump to v5.2.1-dev
    b22d5c61ee Bump to v5.2.0
    3f13c38048 Never skip checkout step in release workflow
    c83c891fb2 Bump to v5.2.0-dev
    028bee289e Bump to v5.2.0-rc3
    23c6e0fb9f Update release notes for v5.2.0-rc3
    784856b6ae Tweak versions in register_images.go
    d6ae7427f7 fix network cleanup flake in play kube
    c0f3ce462c WIP: Fixes for vendoring Buildah
    a8f4c12003 Add --compat-volumes option to build and farm build
    8bc493324a Bump Buildah, c/storage, c/image, c/common
    4fbcece05f libpod: bind ports before network setup
    3f14fcf7c3 pkg/api: do not leak config pointers into specgen
    02a932372b build: Update gvisor-tap-vsock to 0.7.4
    929c64ecf3 test/system: fix borken pasta interface name checks
    c231ba8b23 test/system: fix bridge host.containers.internal test
    b1ad869560 CI: system tests: instrument to allow failure analysis
    5da126dc49 Use uploaded .zip for Windows action
    5f4acdf227 RPM: podman-iptables.conf only on Fedora
    11f56fa42c Bump to v5.2.0-dev
    716874f44e Bump to v5.2.0-rc2
    d72fefc418 Update release notes for v5.2.0-rc2
    5209495865 test/e2e: fix ncat tests
    b6b61a6a49 libpod: add hidden env to set sqlite timeout
    0ecd6fa59f Add support for StopSignal in quadlet .container files
    55b6e4c3e8 podman pod stats: fix race when ctr process exits
    742d29e9d8 Update module github.com/vbauerster/mpb/v8 to v8.7.4
    5e8884ab0d libpod: correctly capture healthcheck output
    5a7199015a Bump bundled krunkit to 0.1.2
    55749af0c7 podman stats: fix race when ctr process exists
    7995e3de53 nc -p considered harmful
    182224defb podman pod stats: fix pod rm race
    e1caf80e81 podman ps: fix racy pod name query
    85f4f89810 system connection remove: use Args function to validate
    f630eebcfa pkg/machine/compression: skip decompress bar for empty file
    7100ead475 nc -p considered harmful
    46f4044893 podman system df: fix fix ErrNoSuchCtr/Volume race
    1413a28409 podman auto-update: fix ErrNoSuchCtr race
    02c094425f Fix name for builder in farm connection
    2f7fd64e98 700-play.bats: use unique pod/container/image/volume names
    380ed3a40d safename: consistent within same test, and, dashes
    6d01ce417d 700-kube.bats: refactor $PODMAN_TMPDIR/test.yaml
    987d15a378 700-play.bats: eliminate $testYaml
    48aea083c0 700-play.bats: refactor clumsy yamlfile creation
    517c6e6f10 700-play.bats: move _write_test_yaml up near top
    ed71000e6d chore(deps): update dependency setuptools to v71
    3c52ef43f5 Expand drop-in search paths * top-level (pod.d) * truncated (unit-.container.d)
    5666100c2e Remove references and checks for --gpus
    1ec3edd3f6 Do not crash on invalid filters
    692d2a5b08 fix(deps): update module github.com/rootless-containers/rootlesskit/v2 to v2.2.0
    59696341b5 Bump to v5.2.0-dev
    973e865422 Bump to v5.2.0-rc1
    f3e945c86e Keep the volume-driver flag deprecated
    b28027148b System tests: safe container/image/volume/etc names
    d26f0ca90f Implement disable default mounts via command line
    fa75599569 Remove the unused machine volume-driver

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-08-20 13:24:32 +00:00
Bruce Ashfield
ac6a273778 podman: update to v5.2.0-rc1
Bumping libpod to version v5.2.0-rc1-2-g72fd507205, which comprises the following commits:

    59696341b5 Bump to v5.2.0-dev
    973e865422 Bump to v5.2.0-rc1
    eb750f61f6 Vendor in latest containers(common, storage,image, buildah)
    b08b630c84 test: drop unmount for overlay
    e16e528f39 test: gracefully terminate server
    fbc4768a00 libpod: shutdown Stop waits for handlers completion
    6832a35f65 libpod: cleanup store at shutdown
    54fce37968 Add NetworkAlias= support to quadlet
    317a88ee4e cmd: call shutdown handler stop function
    3280da0500 fix race conditions in start/attach logic
    04fb77efe2 swagger: exlude new docker network types
    f90bd48859 vendor: bump c/storage
    e24367aa14 update to docker 27
    b1e535b911 contrib: use a distinct --pull-option= for each flag
    02af4f8bd6 Update warning message when using external compose provider
    7c775a3f4c Update module github.com/cyphar/filepath-securejoin to v0.3.0
    830e550073 Ignore result of EvalSymlinks on ENOENT
    926547f7d3 test/upgrade: fix tests when netavark uses nftables
    5856adb9f8 test/system: fix network reload test with nftables
    c4b2015e3a test/e2e: rework some --expose tests
    9945981afb test: remove publish tests from e2e
    43f6173cc6 CI: test nftables driver on fedora
    07b69943a4 CI: use local registry, part 3 of 3: for developers
    dd1bcabae9 CI: use local registry, part 2 of 3: fix tests
    2e8c074234 CI: use local registry, part 1 of 3: setup
    d4c0e7ecbd CI: test composefs on rawhide
    176630b5db chore(deps): update module google.golang.org/grpc to v1.64.1 [security]
    4487f17a47 chore(deps): update dependency setuptools to ~=70.3.0
    bd71b75de4  Improve container filenname ambiguity.
    4336c5a4f5 containers/attach: Note bug around goroutine leak
    1dd8a35b2f Drop minikube CI test
    6f6e0e7126 add libkrun test docs
    766955fc6d fix(deps): update module tags.cncf.io/container-device-interface to v0.8.0
    4b7aaafb2d cirrus: check for header files in source code check
    336c45f68e pkg/machine/e2e: run debug command only for macos
    c819c7a973 create runtime's worker queue before queuing any job
    34ba26ec52 test/system: fix pasta host.containers.internal test
    81250cc5a9 Visual Studio BuildTools as a MinGW alternative
    a2c83cb0fd SetupRootless(): only reexec when needed
    3350cd3eed pkg/rootless: simplify reexec for container code
    049942db04 cirrus: add missing test/tools to danger files
    1d9ac9a203 fix(deps): update module golang.org/x/tools to v0.23.0
    e2ff5d4e5d Windows Installer: switch to wix5
    f90060bff3 fix(deps): update module golang.org/x/net to v0.27.0
    5e3d821814 pkg/machine/e2e: print tests timings at the end
    527c0f0bfa pkg/machine/e2e: run debug commands after init
    ada4e1a8c1 pkg/machine/e2e: improve timeout handling
    62956ac192 libpod: first delete container then cidfile
    ea86582f6c fix(deps): update module golang.org/x/term to v0.22.0
    a181b7bc61 System test fixes
    55ad0d6e0e cirrus.yml: automatic skips based on source
    2c2da039de fix(deps): update module github.com/containers/ocicrypt to v1.2.0
    d00e68e550 podman events: fix error race
    b6f151ad1c chore(deps): update dependency setuptools to ~=70.2.0
    1c704157c2 fix(deps): update module github.com/gorilla/schema to v1.4.1 [security]
    5c41eb6df8 Update CI VM images
    3c0176b2d0 pkg/machine/e2e: fix broken cleanup
    f84f4a9cce pkg/machine/e2e: use tmp file for connections
    fad1f757cc test/system: fix podman --image-volume to allow tmpfs storage
    e810b340ef CI: mount tmpfs for container storage
    9814ed40c7 docs: --network remove missing leading sentence
    83863a6863 specgen: parse devices even with privileged set
    5e156c424f vendor: update c/storage
    22b57d3230 feat(quadlet): log option handling
    786ea01a64 Error when machine memory exceeds system memory
    0d0418a5bf machine: Always use --log-file with gvproxy
    c9e3458c99 CI: Build-Each-Commit test: run only on PRs
    d2ca2058c6 Small fixes for testing libkrun
    069eace84b Podman machine resets all providers
    e58e715583 Clearly indicate names w/ URLencoded duplicates
    926e6dd0aa [skip-ci] Packit: split rhel and centos-stream jobs
    fdb736d282 apple virtiofs: fix racy mount setup
    67df6d60c3 cirrus: fix broken macos artifacts URL
    6db8ff7f7b libpod/container_top_linux.c: fix missing header
    3703cbf1d7 refactor(build): improve err when file specified by -f does not exist
    905e7ae070 Minor: Remove unhelpful comment
    541cdaa441 Update module github.com/openshift/imagebuilder to v1.2.11
    439fe90208 Minor: Rename the OSX Cross task
    02b922ebfc [skip-ci] Remove conditionals from changelog
    65ed96585d podman top: join the container userns
    6c75a10875 Run linting in parallel with building
    7ff4bbae26 Fix missing Makefile target dependency
    a3d5842746 build API: accept platform comma separated
    180cc6f863 [skip-ci] RPM: create podman-machine subpackage
    de58c5f292 ExitWithError() - more upgrades from Exit()
    a7415c9316 test/e2e: remove podman system service tests
    a0b2b0d34c cirrus: reduce int tests timeout
    8f2d403cd1 cirrus: remove redundant skip logic
    7562f4ccdb pkg/machine/apple: machine stop timeout
    1a6a200403 CI: logformatter: link to correct PR base
    d1bfc6d8d0 Update module github.com/crc-org/crc/v2 to v2.38.0
    f50734636c ExitWithError(): continued
    31888f23aa test/system: Add test steps for journald log check in quadlet
    def182d396 restore: fix missing network setup
    a158eae7ff podman run use pod userns even with --pod-id-file
    5815195528 macos-installer: bundle krunkit
    e404976d1b remote API: fix pod top error reporting
    29ecf5984c libpod API: return proper error status code for pod start
    945226a844 fix #22233
    5d009715f6 added check for `registry.IsRemote()`. and correct error message.
    e4f64f91fe fix #20686
    4dc98e3a5a pkg/machine/e2e: Remove unnecessary copy of machine image.
    49eb5af301 libpod: intermediate mount if UID not mapped into the userns
    08a8429459 libpod: avoid chowning the rundir to root in the userns
    c81f075f43 libpod: do not chmod bind mounts
    094bc673ef libpod: unlock the thread if possible
    d53fee511f CI Cleanup: Remove cgroups v1 support
    d810f4187e ExitWithError() - more upgrades from Exit()
    4b3890ccac remote: fix incorrect CONTAINER_CONNECTION parsing
    7d22f04f56 container: pass KillSignal and StopTimeout to the systemd scope
    e48f3137c0 libpod: fix comment
    8be9ec7216 e2e: test container restore in pod by name
    c22ae53d31 docs: Adds all PushImage supported paramters to openapi docs.
    3f785e8735 systests: kube: bump up a timeout
    f134ab77bc cirrus.yml: add CI:ALL mode to force all tests
    d9183f0587 cirrus.yml: implement skips based on source changes
    2f680eb4b5 CI VMs: bump
    7dc288dbed restore: fix container restore into pod
    6dd9abf9ec sqlite_state: Fix RewriteVolumeConfig
    83549ba11f chore(deps): update dependency setuptools to ~=70.1.0
    91a5c0de2a Quadlet - use specifier for unescaped values for templated container name
    0eaec1a2e9 cirrus: check for system test leaks in nightly
    4e0cd49148 test/system: check for leaks in teardown suite
    81c90f51c2 test/system: speed up basic_{setup,teardown}()
    a2352fa3ea test/system: fix up many tests that do not cleanup
    e9c6cd1559 test/system: fix podman --authfile=nonexistent-path
    f611ac9304 Update module github.com/containernetworking/plugins to v1.5.1
    043ce618bc Update module github.com/checkpoint-restore/checkpointctl to v1.2.1
    f4aa71e730 Update module github.com/spf13/cobra to v1.8.1
    0627fce798 Update module github.com/gorilla/schema to v1.4.0
    5c1e5cd026 pkg/machine/wsl: force terminate wsl instance
    bd906cb314 pkg/machine/wsl: wrap command errors
    dca94be028 [CI:DOCS] Quadlet - add note about relative path resolution
    c20767120f CI: do not install python packages at runtime
    54edf3d8ee Release workflow: Include candidate descriptor
    19989380b8 Minor: Fix indentation in GHA release workflow
    82973c38e4 GHA: Send release notification mail
    ad56dc7e2b GHA: Validate release version number
    64091777fe Remove references to --pull=true and --pull=false
    267d838e38 ExitWithError, continued
    730a215025 podman: add new hidden flag --pull-option
    5a4416be08 [CI:DOCS] Fix typos in podman-build
    8fececcdb9 infra: mark storageSet when imagestore is changed
    18c7a55ccd [CI:DOCS] Add jnovy as reviewer and approver
    5b24d1b48c fix(deps): update module google.golang.org/protobuf to v1.34.2
    0c587f0246 refactor(machine,wsl): improve operations of Windows API
    ad8fc6a74b --squash --layers=false should be allowed
    858b3b7def fix(deps): update module github.com/checkpoint-restore/checkpointctl to v1.2.0
    fa4f11facc update golangci-lint to v1.59.1
    3825e73120 Rename master to main in CONTRIBUTING.md
    cec6859369 podman 5, pasta and inter-container networking
    a9de888a15 libpod: do not resuse networking on start
    4b29c9dd73 machine/linux: Switch to virtiofs by default
    bf541c6740 machine/linux: Support virtiofs mounts (retain 9p default)
    406f130590 machine/linux: Use memory-backend-memfd by default
    f317eb29ab ExitWithError() - continued
    550cb07fc0 Enable libkrun provider to open a debug console
    dcec81e694 Add new targets on Windows makefile (winmake.ps1)
    5b23a2e1c7 fix(deps): update module github.com/docker/docker to v26.1.4+incompatible
    2334a7ea6c fix(deps): update module github.com/crc-org/crc/v2 to v2.37.1
    f4b14c11ef fix(deps): update module golang.org/x/tools to v0.22.0
    8cc9bb1842 fix(deps): update module golang.org/x/net to v0.26.0
    ffc8522646 libpod: fix 'podman kube generate' on FreeBSD
    df0c2e5d03 fix(deps): update module golang.org/x/sys to v0.21.0
    e8ea1e7632 libpod: do not leak systemd hc startup unit timer
    15a4e1dffd vendor latest c/common
    7c5c60bc39 pkg/rootless: set _CONTAINERS_USERNS_CONFIGURED correctly
    80ed85dc17 run bats -T, to profile timing hogs
    350dfabf66 test/system: speed up podman ps --external
    8fa1ffbbec test/system: speed up podman network connect/disconnect
    8640ce998c test/system: speed up podman network reload
    609146fb75 test/system: speed up quadlet - pod simple
    7f3bb2d238 test/system: speed up podman parallel build should not race
    8852614792 test/system: speed up podman cp dir from host to container
    8d3f65b026 test/system: speed up podman build - workdir, cmd, env, label
    471e001c7f test/system: speed up podman --log-level recognizes log levels
    26bdb5d110 test/system: remove obsolete debug in net connect/disconnect test
    c466377013 test/system: speed up quadlet - basic
    6b021dd4ba test/system: speed up user namespace preserved root ownership
    2e70d4201f System tests: add `podman system check` tests
    fec58a4571 Add `podman system check` for checking storage consistency
    f18298181b fix(deps): update module github.com/crc-org/crc/v2 to v2.37.0
    7243c7109c fix(libpod): add newline character to the end of container's hostname file
    6e4d7c7159 fix(deps): update module github.com/openshift/imagebuilder to v1.2.10
    e8514bde85 fix(deps): update github.com/containers/image/v5 digest to aa93504
    af7bd67d4e Fix 5.1 release note re: runlabel
    164573dc34 test/e2e: use local skopeo not image
    b9b60f14b4 fix(deps): update golang.org/x/exp digest to fd00a4e
    e4123026b5 [CI:DOCS] Add contrib/podmanimage/stable path back in repo
    b146f9126a chore(deps): update dependency requests to ~=2.32.3
    dffac6ecb1 fix(deps): update github.com/containers/image/v5 digest to 2343e81
    900e29549a libpod: do not move podman with --cgroups=disabled
    12f634edf0 Update release notes on Main to v5.1.0
    5dc1738c05 test: look at the file base name
    6243f5cebe tests: simplify expected output
    7552735fa9 Sigh, new VMs again
    4adb5cbbff Fail earlier when no containers exist in stats
    fb4ddf86cc Add Hyper-V option in windows installer
    4ece83bdf9 libpod: cleanup default cache on system reset
    aa08552bf6 vendor: update c/image
    ad661b5b31 test/system: speed up kube generate tmpfs on /tmp
    bff0697de8 test/system: speed up podman kube play tests
    67356a71b3 test/system: speed up podman shell completion test
    01642c64ea test/system: simplify test signal handling in containers
    6fa064f991 test/system: speed up podman container rm ...
    37120bbe80 test/system: speed up podman ps - basic tests
    4f3c691087 test/system: speed up read-only from containers.conf
    edf6f1814e test/system: speed up podman logs - multi ...
    fe05e25edf test/system: speed up podman run --name
    1ae05473c1 Debian: switch to crun
    1093ebb72b test/system: speed up podman generate systemd - envar
    15606148e5 test/system: speed up podman-kube@.service template
    42f43fb3a3 test/system: speed up kube play healthcheck initialDelaySeconds
    9e321aafda test/system: speed up exit-code propagation test
    94ba2cf1a1 test/system: speed up "podman run --timeout"
    82bffb9c50 test/system: fix slow kube play --wait with siginterrupt
    7ce3c6bf1e undo auto-formatting
    9a7ffaa077 test/system: speed up podman events tests
    9f823ecb25 Quadlet: Add support for .build files
    9de1d4f653 test/system: speed up "podman auto-update using systemd"
    a09152ab28 test/system: remove podman wait test
    7f567a4e51 tests: disable tests affected by a race condition
    2b43f62233 update golangci-lint to v1.59.0
    6dcde80999 kubernetes_support.md: Mark volumeMounts.subPath as supported
    b45364254f working name of pod on start and stop
    c5597cb12c fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.0
    f8cc1b4807 Bump Buildah to v1.36.0
    661e9ee804 fix(deps): update module github.com/burntsushi/toml to v1.4.0
    9c92bc64a7 fix typo in Tutorials.rst
    74e8f98772 Mac PM test: Require pre-installed rosetta
    db3abd0d28 test/e2e: fix new error message
    23c830704d Add configuration for podmansh
    4fd425429b Update containers/common to latest main
    046c0e5fc2 Only stop chowning volumes once they're not empty
    d094a9f18e podman: fix --sdnotify=healthy with --rm
    e166f6bfe0 libpod: wait another interval for healthcheck
    ad1d3f8fc7 quadlet: Add a network requirement on .image units
    d418391ce6 test, pasta: Ignore deprecated addresses in tests
    18557659e4 [CI:DOCS] performance: update network docs
    08507f3ffe fix(deps): update module github.com/onsi/ginkgo/v2 to v2.18.0
    93ef340071 CI: disable minikube task
    8f8dfb971f [CI:DOCS] Fix windows action trigger
    1766a1a24b chore(deps): update dependency setuptools to v70
    3ab9e864f6 Check AppleHypervisor before accessing it
    e590cced06 fix(deps): update module github.com/containernetworking/plugins to v1.5.0
    d9d0840a4d [CI:DOCS] Update dependency golangci/golangci-lint to v1.58.2
    63df724a40 add podman-clean-transient.service service to rootless
    9a8c3433c1 [CI:DOCS] Update podman network docs
    fb2ab832a7 fix incorrect host.containers.internal entry for rootless bridge mode
    54ce5c6af1 vendor latest c/common main
    fe7cc67ef4 Add Rosetta support for Apple Silicon mac
    ad297b1823 bump main to 5.2.0-dev
    8afa06ee89 Use a defined constant instead of a hard-coded magic value
    47f01e85c5 cirrus: use faster VM's for integration tests
    943ddfb0fe fix(deps): update github.com/containers/gvisor-tap-vsock digest to 01a1a0c
    4b0ae78e00 [CI:DOCS] Fix Mac pkg link
    061bcc06ea test: remove test_podman* scripts
    cb905f59ea test/system: fix documentation
    6408a05927 Return StatusNotFound when multiple volumes matching occurs
    35375e0af8 container_api: do not wait for healtchecks if stopped
    b06c58b4a5 libpod: wait for healthy on main thread
    bcb7edfded remote API: restore v4 payload in container inspect
    6c78a72995 Remove duplicate  call
    164aef814e fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.3
    590fec7a78 Change tmpDir for macOS
    120660e239 fix: close resource file

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-07-16 14:07:08 +00:00
Bruce Ashfield
c3c9c8a01f podman: update to 5.1.1
Bumping libpod to version v5.1.1-2-gef359624cb, which comprises the following commits:

    7a1f39dc4d Bump to v5.1.2-dev
    bda6eb03dc Bump to v5.1.1
    cd0a0d7d6d Update release notes for v5.1.1
    aa031ad1ba libpod: do not leak systemd hc startup unit timer
    d79b94c82b Check AppleHypervisor before accessing it
    a9377a8ec3 [v5.1] Bump c/common to v0.59.1
    4dc75c67f9 [v5.1] pkg/rootless: set _CONTAINERS_USERNS_CONFIGURED ... correctly
    d5cc37f78a test/e2e: use local skopeo not image
    2906582149 [v5.1] Mac PM test: Require pre-installed rosetta
    7ad138c3db Fix typo in release notes
    515e44be74 Bump to v5.1.1-dev
    4e9486dbc6 Bump to v5.1.0
    2f343ce778 Release notes for v5.1
    8ba3626c94 Add configuration for podmansh
    8eff425410 [v5.1] Bump c/* for vendor dance
    178600e531 test/e2e: fix new error message
    7df3715430 Add Hyper-V option in windows installer
    6ad6132987 Only stop chowning volumes once they're not empty
    65d26b0cde remote API: restore v4 payload in container inspect
    3949bf8af1 Fix windows action trigger
    acf137b342 Update podman network docs
    7207461196 Add Rosetta support for Apple Silicon mac
    d1a86a4b61 fix incorrect host.containers.internal entry for rootless bridge mode
    c837ebc44e vendor latest c/common main
    97251d0ee6 Bump to v5.1.0-dev
    6a8f2e7f29 Bump to v5.1.0-rc1
    bd4e4a1d8f Add release notes for v5.1.0 (preliminary)
    c46884aa93 `podman events`: check for an error after we finish reading events
    277312d282 Fix updating connection when SSH port conflict happens
    2a609b0f74 rootless: fix reexec to use /proc/self/exe
    d4e40fedaf ExitWithError() - enforce required exit status & stderr
    82f9811a8d ExitWithError() - a few that I missed
    44825ab428 [skip-ci] Packit: use only one value for `packages` key for `trigger: commit` copr builds
    92338642d1 Revert "Temporarily disable rootless debian e2e testing"
    5901bf52b9 CI tests: enforce TMPDIR on tmpfs
    6e655c7fd2 use new CI images with tmpfs /tmp
    e771618531 run e2e test on tmpfs
    3122549d6b Update module github.com/crc-org/crc/v2 to v2.36.0
    6830d0e3c8 Address CVE-2024-3727
    07ed2ddb93 [CI:DOCS] Use checkout@v4 in GH Actions
    755fc021f9 ExitWithError() - rmi_test
    5e240ab1f5 ExitWithError() - more r files
    0c22de7811 ExitWithError() - s files
    03f036b515 ExitWithError() - more run_xxx tests
    3b1c735b67 Fix podman-remote support for `podman farm build`
    71473976ac [CI:DOCS] Trigger windows installer action properly
    8433a01aa2 Revert "container stop: kill conmon"
    3fa8e98a31 Ensure that containers do not get stuck in stopping
    279e2d0cb2 [CI:DOCS] Improvements to make validatepr
    9e43e586c9 ExitWithError() - rest of the p files
    dfbb6ea9ff [CI:DOCS] Update dependency golangci/golangci-lint to v1.58.1
    a2cf948f90 Graceful shutdown during podman kube down
    521bbab864 test/system: fix broken "podman volume globs" test
    6d1098f823 Quadlet/Container: Add GroupAdd option
    7bfac4f349 Don't panic if a runtime was configured without paths
    d4c7ca39fd update c/{buildah,common,image,storage} to latest main
    6bdebea8ae update golangci-lint to 1.58
    ee5153c545 machine: Add LibKrun provider detection
    641cd7c5a2 ExitWithError() - continue tightening
    b59edad58b fix(deps): update module google.golang.org/protobuf to v1.34.1
    303d0b398e test: improve test for powercap presence
    9865511d00 fix(deps): update module go.etcd.io/bbolt to v1.3.10
    be5cbc443e fix(deps): update module golang.org/x/tools to v0.21.0
    36c05b5c6a [skip-ci] RPM: `bats` required only on Fedora
    42cc712485 fix(deps): update module golang.org/x/exp to v0.0.0-20240506185415-9bf2ced13842
    e3b0e58d2e gpdate and remove parameter settings in `.golangci.yml`
    7d12ae0973 ExitWithError() - play_kube_test.go
    02b8fd7156 Temporarily disable rootless debian e2e testing
    7745854155 fix(deps): update module golang.org/x/crypto to v0.23.0
    b520e909e0 CI Docs: Clarify passthrough_envars() comments
    87747ca820 Skip machine tests if they don't need to be run
    e8ef36e26e Update CI VMs to F40, F39, D13
    83ee16b9ba ExitWithError() - v files
    22eff26916 Update module golang.org/x/term to v0.20.0
    431cbffab6 machine: Add provider detection API
    419efb9eb5 util: specify a not empty pause dir for root too
    1d1dba3843 Add missing option 'healthy' to output of `podman run --help`
    b09f764ef5 [CI:DOCS] Add info on the quay.io images to the README.md
    4fd84190b8 Add a random suffix to healthcheck unit names
    7a43c2ed1b test/e2e: remove toolbox image
    46f247d880 Also substitute $HOME in runlabel with user's homedir
    7f6108233f Update module github.com/cyphar/filepath-securejoin to v0.2.5
    275c068df7 ExitWithError() - pod_xxx tests
    c378f2d03a ExitWithError() -- run_test.go
    f8115d203c Update module golang.org/x/exp to v0.0.0-20240416160154-fe59bbe5cc7f
    a96326f608 Update module github.com/shirou/gopsutil/v3 to v3.24.4
    61b09333a8 Update module github.com/docker/docker to v26.1.1+incompatible
    8942e2dbda GHA: Attempt fix exceeded a secondary rate limit
    1bc6f16bd0 vendor ginkgo 2.17.2 into test/tools
    a140c74ba4 Fix machine volumes with long path and paths with dashes
    d1f8933a93 Update module google.golang.org/protobuf to v1.34.0
    d886d87edf Update module github.com/crc-org/crc/v2 to v2.35.0
    c17f7af6b4 Update module github.com/onsi/gomega to v1.33.1
    88b80c1df6 test/e2e: podman unshare image mount fix tmpdir leak
    0faded53b8 test/e2e: do not leak /tmp/private_file
    88a625d319 test/e2e: "persistentVolumeClaim with source" do not leak file
    eaf60c7fe7 e2e tests: use /var/tmp, not $TMPDIR, as workdirs
    60b5488308 Update dependency pytest to v8.1.2
    cd6ff71cc3 Remove unncessary lines at the end of specfile summary
    e412eff33f Clean machine pull cache
    d2c1de5993 Add krun support to podman machine
    ca23774b5b Use custom image for make validatepr
    9a0ed6929a test/e2e: force systemd cgroup manager
    d1bfdc7900 e2e and bindings tests: fix $PATH setup
    5040c6e390 Makefile: remove useless HACK variable in e2e test
    537c21a49a test/e2e: fix volumes and suid/dev/exec options
    31034a1b6f test/e2e: volumes and suid/dev/exec options works remote
    cc6e999f2a test/e2e: fix limits test
    c2d7b5415f Update module github.com/rootless-containers/rootlesskit/v2 to v2.1.0
    3c1c6a44ef Correct option name `ip` -> `ip6`
    30e2c923d6 Add the ability to automount images as volumes via play
    693ae0ebc6 Add support for image volume subpaths
    5f57571d65 Bump Buildah to latest main
    e8a9c58125 Update Makefile to Go 1.22 for in-container
    e4c9910aec ExitWithError() - yet more low-hanging fruit
    80c3a22440 ExitWithError() - more low-hanging fruit
    4da5c5d3aa ExitWithError() - low-hanging fruit
    c681df35c0 chore: fix function names in comment
    3f78c39c50 Remove redundant Prerequisite before build section
    fa1fd1646e Remove PKG_CONFIG_PATH
    3b28cdfb20 Add installation instructions for openSUSE
    83dbbc3a51 Replace golang.org/x/exp/slices with slices from std
    c04d03ef8c Update to go 1.21
    c31728ca57 fix(deps): update module github.com/docker/docker to v26.1.0+incompatible
    c22eefb939 [CI:DOCS] Fix artifact action
    333682132a [skip-ci] Packit/rpm: remove el8 jobs and spec conditionals
    ac04cb4ac5 e2e tests: stop littering
    27174ff3fb [CI:DOCS] format podman-pull example as code
    e7f0c1947e [CI:DOCS] Build & upload release artifacts with GitHub Actions
    2681ab23d1 libpod: getHealthCheckLog() remove unessesary check
    2ae6d0d4dd add containers.conf healthcheck_events support
    33def2eea7 vendor latest c/common
    b026e1d635 libpod: make healthcheck events more efficient
    ce9054ff45 libpod: wrap store setup error message
    e83b2cce82 [skip-ci] Packit: enable CentOS 10 Stream build jobs
    e58972cd1d pkg/systemd: use fileutils.(Le|E)xists
    acc78af0c3 pkg/bindings: use fileutils.(Le|E)xists
    94c699192f pkg/util: use fileutils.(Le|E)xists
    0e8d1ad811 pkg/trust: use fileutils.(Le|E)xists
    1991990d5a pkg/specgen: use fileutils.(Le|E)xists
    aab06ac445 pkg/rootless: use fileutils.(Le|E)xists
    af24326133 pkg/machine: use fileutils.(Le|E)xists
    cbffddc72e pkg/domain: use fileutils.(Le|E)xists
    bd00c6fef9 pkg/api: use fileutils.(Le|E)xists
    5656ad40b1 libpod: use fileutils.(Le|E)xists
    90304dd507 cmd: use fileutils.(Le|E)xists
    598fc516a6 vendor: update containers/{buildah,common,image,storage}
    a169c4ec5c fix(deps): update module github.com/docker/docker to v26.0.2+incompatible [security]
    dc68a47d7a fix podman-pod-restart.1.md typo
    eacc3f07e5 [skip-ci] Packit: switch to EPEL instead of centos-stream+epel-next
    af78b69208 fix(deps): update module github.com/onsi/gomega to v1.33.0
    422eb0e58a Add more annnotation information to podman kupe play man page
    b1736c472a test/compose: remove compose v1 code
    2c61ee9a31 CI: remove compose v1 tests
    713c026b4d [CI:DOCS] Fix windows installer action
    d6b68ecfad fix(deps): update module tags.cncf.io/container-device-interface to v0.7.2
    7b3456b5d9 add `list` as an alias to list networks
    482ef7bfcf Add support for updating restart policy
    ddea30e40e Add Compat API for Update
    be3f075402 Make `podman update` changes persistent
    7ef0290a1d Emergency fix (well, skip) for failing bud tests
    7c4f2c79ea fix swagger doc for manifest create
    d4ecae59bd [CI:DOCS] options/network: fix markdown lists
    714920512e Makefile: do not hardcode `GOOS` in `podman-remote-static` target
    3dc69a01e3 chore(deps): update module golang.org/x/crypto to v0.17.0 [security]
    0e291ce760 chore(deps): update dependency setuptools to ~=69.5.0
    1600cfffa5 Fix some comments
    e8055904e1 swagger fix infinitive recursion on some types
    5e9725983d install swagger from source
    f95b9d4e37 Revert "Swap out javascript engine"
    5e68fbd132 podman exec CID without command should exit 125
    df69b36ee5 (minor) prefetch systemd image before use
    49729c82a9 Update go-swagger version
    1b6e8d73aa Swap out javascript engine
    3418405351 fix(deps): update module github.com/docker/docker to v26.0.1+incompatible
    08a49389c8 Add os, arch, and ismanifest to libpod image list
    e773ed42b3 [CI:DOCS]Initial PR validation
    4a07131f83 fix(deps): update github.com/containers/gvisor-tap-vsock digest to d744d71
    67c6d7ec80 vendor ginkgo 2.17.1 into test/tools
    999d6c0750 fix "concurrent map writes" in network ls compat endpoint
    26f866b5df chore(deps): update dependency pytest to v8
    2d9159821a e2e: redefine ExitWithError() to require exit code
    8de92ec912 docs: fix missleading run/create --expose description
    0bedf7f1d2 podman ps: show exposed ports under PORTS as well
    aee1e1408d rootless: drop function ReadMappingsProc
    9d18a48803 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.3
    0313693d48 New CI VMs, to give us pasta 2024-04-05
    394820c4f0 Add big warning to GHA workflow
    7f0268a2e7 GHA: Fix intermittent workflow error
    266801bf2d fix(deps): update module golang.org/x/tools to v0.20.0
    847ca1f9ea e2e tests: remove requirement for fuse-overlayfs
    36e4d512b3 docs: update Quadlet volume Options desc
    b8670a3834 fix(deps): update module golang.org/x/sync to v0.7.0
    0b36126e92 Fix relabeling failures with Z/z volumes on Mac
    f8533c71c4 fix(deps): update module golang.org/x/net to v0.24.0
    b9a8a2c61c Makefile: fix annoying errors in docs generation
    59ee130048 chore: fix function names in comment
    a40cf3195a Bump tags.cncf.io/container-device-interface to v0.7.1
    3f83164526 fix(deps): update module golang.org/x/crypto to v0.22.0
    3560ccd5df Detect unhandled reboots and require user intervention
    fcf9327773 podman --runroot: remove 50 char length restriction
    10995192f8 update github.com/rootless-containers/rootlesskit to v2
    156ae500f2 Update module github.com/gorilla/schema to v1.3.0
    beb4fd1b4a Update dependency requests-mock to ~=1.12.1
    e8f26699df Update module github.com/crc-org/crc/v2 to v2.34.1
    f2c365c6f6 rm --force work for more than one arg
    71f6f50ee1 [CI:DOCS] Update kube docs
    81d2ef889b fix(deps): update module github.com/shirou/gopsutil/v3 to v3.24.3
    0f949d884c [CI:DOCS] Add GitHub action to update version on Podman.io
    ccb71f9ffa [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.2
    ff133a544d Windows: clean up temporary perl install
    498445871c pkg/util: FindDeviceNodes() ignore ENOENT errors
    549dbf8327 [CI:DOCS] build deps: make-validate needs docs
    a61ae8c0a9 test/system: add rootless-netns test for setup errors
    ce04fbc16a vendor latest c/common main
    519a66c6a9 container: do not chown to dest target with U
    fbd6df92d4 [CI:DOCS] golangci-lint: update deprecated flags
    d27313ad10 systests: conditionalize slirp4netns tests
    e697631af9 CI: systests: instrument flaky tests
    d2143fac59 s3fs docs
    7d68362cf5 test: do not skip tests under rootless
    d3927f9076 Add note about host networking to Kube PublishPort option
    1a99d87746 Inject additional build tags from the environment
    d81319eb71 libpod: use original IDs if idmap is provided
    f3434298df Switch back to checking out the same branch the action script runs in
    f7b9168649 docs/podman-login: Give an example of writing the persistent path
    aab4674feb CI: Bump VMs to 2024-03-28
    4c2a44ef9b [skip-ci] Update dawidd6/action-send-mail action to v3.12.0
    fc18dbad70 fix(deps): update module github.com/openshift/imagebuilder to v1.2.7
    ffb8b2dc36 Fix reference to deprecated types.Info
    c0e32e93c0 Use logformatter for podman_machine_windows_task
    d305e70af8 applehv: Print vfkit logs in --log-level debug
    23bf357fc3 [CI:DOCS]Add Mario to reviewers list
    c8e1e0034a [CI:DOCS] Document CI-maintenance job addition
    48b8d7f8be Add golang 1.21 update warning
    b56331cd2f Add rootless network command to `podman info`
    80e2bc6966 libpod: don't warn about cgroupsv1 on FreeBSD
    c62c74970f hyperv: error if not admin
    83671f95d8 Properly parse stderr when updating container status
    492f0b7c5f [skip-ci] Packit: specify fedora-latest in propose-downstream
    11415b3e74 Use built-in ssh impl for all non-pty operations
    83fe867c14 Add support for annotations
    a6ffb5656f hyperv: fix machine rm -r
    f632663f26 [skip-ci] Packit: Enable CentOS Stream 10 update job
    3c611c47e4 5.0 release note fix typo in cgroupv1 env var
    3a9968ef81 fix remote build isolation on client side
    17aa152459 chore: remove repetitive words
    b2d0b92db2 Dont save remote context in temp file but stream and extract
    493179be45 fix remote build isolation when server runs as root
    4740367330 util: use private propagation with bind
    9a13b8f17d util: add some tests for ProcessOptions
    50d764b0e6 util: refactor ProcessOptions into an internal function
    49ab250cf9 util: rename files to snake case
    c03256e23c Add LoongArch support for libpod
    f2073ca397 fix(deps): update github.com/containers/common digest to bc5f97c
    5e017a87a0 [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.1
    5fe1945e41 fix(deps): update module github.com/docker/docker to v25.0.5+incompatible [security]
    77c4cb5721 fix(deps): update module github.com/onsi/gomega to v1.32.0
    c66400f624 [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.0
    a872003a2a Update module github.com/cpuguy83/go-md2man/v2 to v2.0.4
    b1fd03f9f5 Fix type-o
    3f2b8bb314 Use correct extension in suite
    aa5c4879b4 minikube: instrument tests, to allow debugging failures
    15b8bb72a8 libpod: restart always reconfigure the netns
    dc1795b4b2 use new c/common pasta2 setup logic to fix dns
    2566ee2f38 utils: drop conversion float->string->float
    816c7279e1 utils: do not generate duplicate range
    f16ab115ed logformatter: handle Windows logs
    0e38815387 utils: add test for the new function
    cda3dc83d8 utils: move rootless code to a new function
    079bfb085a CVE-2024-1753 fix for main
    1141962e2a xref-helpmsgs-manpages: cross-check Commands.rst
    23433ec7bd test/system: Add support for multipath routes in pasta networking tests
    73a12b0c07 [skip-ci] rpm: use macro supported vendoring
    7fbdd9e6e2 Adjust to the standard location of gvforwarder used in new images
    7711833827 Makefile: add target `podman-remote-static`
    fdad9ab1ff Switch to 5.x WSL machine os stream using new automation
    3a9eef4bee Cleanup build scratch dir if remote end disconnects while passing the context
    ee4b1efb24 bump main to 5.1.0-dev
    3f068d1973 Use faster gzip for compression for 3x speedup for sending large contexts to remote
    e82d196269 pkg/machine: make checkExclusiveActiveVM race free
    b238303a40 pkg/machine/wsl: remove unused CheckExclusiveActiveVM()
    c9a5c4b943 pkg/machine: CheckExclusiveActiveVM should also check for starting
    1dfd3d3d12 pkg/machine: refresh config after we hold lock
    d5e0ecc619 Update dependency setuptools to ~=69.2.0
    60a3eb8491 [skip-ci] rpm: update containers-common dep on f40+
    2ff5716b7e fix invalid HTTP header values when hijacking a connection
    c6ae7fd145 Add doc to build podman on windows without MSYS
    1901403eda Removing CRI-O related annotations
    83e671a2c5 fix(deps): update module github.com/containers/ocicrypt to v1.1.10
    d7fa0aa351 Pass the restart policy to the individual containers
    cb81da9bee kube play: always pull when both imagePullPolicy and tag are missing

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-07-10 15:59:26 +00:00
Marcus Flyckt
e8214becb9 podman: Use slirp4netns instead of pasta
podman uses pasta as the default rootless network command since 5.0.0,
but only slirp4netns is available when building for Yocto.

This commit adds a containers.conf file setting slirp4netns as default
rootless command if 'rootless' is set in PACKAGECONFIG

Signed-off-by: Marcus Flyckt <mafl@kvaser.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-31 16:20:17 +00:00
Bruce Ashfield
2fdfa68445 podman: convert remaining WORKDIR references to UNPACKDIR
While the WORKDIR references seem to work, they may not continue
to work. We switch to using UNPACKDIR which is where the SRC_URI
referenced elements / files will be placed by the fetcher.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 13:16:56 +00:00
Bruce Ashfield
754c3134c2 podman: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork
of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this
variable in our go recipes.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-29 13:16:56 +00:00
Patrick Wicki
380eae7bdd podman: require catatonit
Alternatively, we could add it to RRECOMMENDS. But I would say, given
its name, managing pods is part of podman's core functionality and that
requires catatonit, which is currently only pulled in for the ptest:

root@qemux86-64:~# podman pod create
Error: building local pause image: finding pause binary: exec: "catatonit": executable file not found in $PATH

Signed-off-by: Patrick Wicki <patrick.wicki@siemens.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-13 22:32:38 -04:00
Patrick Wicki
992253f871 podman: remove skopeo rdepends
Podman does not require skopeo to run. They are both independent tools.
In distros like Debian, Fedora and Arch they don't depend on it either.
Skopeo also seems to be used in some of podman's tests, so it makes
sense to keep it around for the ptest.

We do require skopeo's libdevmapper dependency, so include that
directly. And inherit container-host to make sure the container configs
are present on the device.

Signed-off-by: Patrick Wicki <patrick.wicki@siemens.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-13 22:32:38 -04:00
Theodore A. Roth
74455bb615 podman: Fix missing brace in FILES
When converting to use {systemd_user_unitdir}, the closing brace was
omitted

Signed-off-by: Theodore A. Roth <theodore_roth@trimble.com>
Signed-off-by: Theodore A. Roth <troth@openavr.org>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-05-02 17:58:45 +00:00
Lukasz Czechowski
0b5cf63796 podman: fix location of user systemd service units
The value of USERSYSTEMDDIR is currently set to
${systemd_unitdir}/user, which might not be present in user unit
search path.
Use dedicated bitbake variable ${systemd_user_unitdir} instead.

Signed-off-by: Lukasz Czechowski <lukasz.czechowski@thaumatec.com>
Cc: Bruce Ashfield <bruce.ashfield@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-04-22 15:02:52 +00:00
Bruce Ashfield
b2777a4389 podman: update to 5.0.1
Bumping libpod to version v5.0.1-4-gbb81e85a4, which comprises the following commits:

    63f6a78eb Packit: Enable CentOS Stream 10 update job
    e22c9dd65 Bump to v5.0.2-dev
    946d055df Bump to v5.0.1
    131f3d089 Add release notes for v5.0.1
    2967eb9a2 [v5.0] libpod: restart always reconfigure the netns
    92b3cda79 [v5.0] use new c/common pasta2 setup logic to fix dns
    b1dbd477e [v5.0] Bump Buildah to v1.35.3
    ebe3f395b hyperv: error if not admin
    4b54d1824 libpod: don't warn about cgroupsv1 on FreeBSD
    312313872 Use built-in ssh impl for all non-pty operations
    70fe2a1c9 fix remote build isolation on client side
    bfc63cc32 fix remote build isolation when server runs as root

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-04-04 19:57:46 +00:00
Bruce Ashfield
fb2d44b8a0 podman: add new kernel module rrecommends
Testing podman + netavark without kernel-modules installed
in the image shows some are missing from the rrecomends.

It could be argued that they belong in netavark, but since
podman + netavark are almost always used together, we group
them here.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-23 00:54:44 +00:00
Bruce Ashfield
081ef3c19c podman: update to 5.0.0
Tested with cni:

   root@qemux86-64:~# podman version
   Client:       Podman Engine
   Version:      5.0.1-dev
   API Version:  5.0.1-dev
   Go Version:   go1.22.0
   Git Commit:   177ea856f579914e0047655f32eb4f9fbc3ddbc4-dirty
   Built:        Thu Mar 21 17:59:57 2024
   OS/Arch:      linux/amd64

   root@qemux86-64:~# rpm -qa | grep cni
   cni-v1.2.0+rc0+gitb62753aa2bfa365c1ceaff6f25774a8047c896b50+b62753aa2b_b6a0e0bc96-r0.core2_64

   root@qemux86-64:~# rpm -qa | grep neta

Tested with netavark:

   root@qemux86-64:~# podman version
   Client:       Podman Engine
   Version:      5.0.1-dev
   API Version:  5.0.1-dev
   Go Version:   go1.22.0
   Git Commit:   177ea856f579914e0047655f32eb4f9fbc3ddbc4-dirty
   Built:        Thu Mar 21 17:59:57 2024
   OS/Arch:      linux/amd64
   root@qemux86-64:~# rpm -qa | grep netavark
   netavark-1.10.3-r0.core2_64

Bumping libpod to version v5.0.0-4-g177ea856f, which comprises the following commits:

    bfc63cc32 fix remote build isolation when server runs as root
    f32338dfc bump version to v5.0.1-dev
    e71ec6f1d New release: v5.0.0
    6b93d9e11 Update RELEASE_NOTES.md with CVE-2024-1753
    eb2b16d6d [v5.0] Bump Buildah to v1.35.1
    43b9ea8b9 Adjust to the standard location of gvforwarder used in new images
    4a84f39b3 Switch to 5.x WSL machine os stream using new automation
    a03de4c14 rpm: use macro supported vendoring
    069439820 Bump to v5.0.0-dev
    f8888a13b Bump to v5.0.0-RC7
    2e387df07 Add release notes for v5.0.0-rc7
    d36ce9c2b fix invalid HTTP header values when hijacking a connection
    8891d592b Use faster gzip for compression for 3x speedup for sending large contexts to remote
    59512272b pkg/machine: make checkExclusiveActiveVM race free
    51eee609c pkg/machine/wsl: remove unused CheckExclusiveActiveVM()
    412648207 pkg/machine: CheckExclusiveActiveVM should also check for starting
    1ca93f3fb pkg/machine: refresh config after we hold lock
    71320df8e rpm: update containers-common dep on f40+
    e58cb97de Change API socket to be machine name isolated
    dbf38779b Makefile: drop tests-included from validate target
    0fdd83173 Add release notes for v5.0.0
    d7bc7b7b4 do not require policy.json
    82597144b Machine decompress.go refactoring follow-up
    abaa179aa Add target win-gvproxy in winmake.ps1
    4c5d26f6f Add final machine endpoint
    068ddfd19 update API doc version to 5.0.0
    f2af295e4 Bump to 5.0.0-dev
    d26113ca8 Bump to 5.0.0-rc6
    52ed774c2 docs: generate-systemd: add clarification statement
    3d6758a61 docs: quadlet: improve docs on root/rootless dirs
    885dd2add [CI:DOCS] performance: fix URL and kernel version requirement
    e6ac569a1 [CI:DOCS] Remove outdated references
    364813da6 Add note for RHEL 8.5
    e220d1ce6 Update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [SECURITY]
    f91b8e77b Update module github.com/go-jose/go-jose/v3 to v3.0.3 [SECURITY]
    9b21a5b79 Bump to v5.0.0-dev
    bbad09bb0 Bump to v5.0.0-rc5
    432f4fbf9 Fix Mac CI
    d54a37399 Complete policy.json inclusion
    b234bb55e Bump Buildah to v1.35.0
    5d3a19f8d podman compose: enable machine socket connection
    6f4ee16d9 [CI:DOCS] Add farm command to commands list
    25f3a8ce7 podman machine start/stop do not write config unlocked
    75fa38d52 [CI:BUILD] Build universal Podman binary for Mac installer
    7a7591492 podman machine init: do not write config unlocked
    7bfe5e700 Fail on failures to close the file descriptors, and especially the SparseWriter
    5e0b7e54c Avoid reliance on fs.ErrClosed in SparseWriter users
    4c6505be5 Fix the logic for detecting an unexpected close error
    81906081e vendor libhvee-0.7.0
    3c9c5be7d podman machine set: change options only locked
    a65b546c6 Remove copySparseFile
    2ba3a2d56 pkg/machine: fix relative DefaultPolicyJSONPath
    724c5a06b Don't read full VM File before decompressing
    ff81cf7c7 [CI:DOCS] Fix windows installer action
    4d2fc293c machine: make more use of strongunits
    92b67a69a Fix wrong units size return
    79012795a fix(deps): update github.com/containers/libhvee digest to 7cee23c
    d6d260174 [CI:DOCS] Migrate podman container image
    a349f8d10 fix(deps): update module google.golang.org/protobuf to v1.33.0
    39851a0b9 CI: try to fix more flakes
    835cfbc05 [CI:BUILD] rpm: Put the podmansh(1) manual in the podmansh sub-package
    945995be1 e2e: fix potential race in file-locks test
    02403c2e6 Makefile: podman should have correct selinux label
    9ee96a956 properly implement pull-error event status
    155cd463d fix(deps): update module golang.org/x/tools to v0.19.0
    6272abbbb Resurrect auto-port reassignment, but for all providers
    ef7727238 Refactor env dir and port functions into new leaf pkgs
    eabf0acfa fix(deps): update module golang.org/x/net to v0.22.0
    3b72f9178 Revert "Expose as-tested Mac/Windows repository state"
    24516f3ef fix(deps): update module golang.org/x/term to v0.18.0
    e8bf9a323 Update podman-for-windows.md
    8c9222848 fix(deps): update github.com/containers/libhvee digest to 0ff33af
    e09444327 machine init: print output to improve UX
    530782e11 logformatter: fixes for Macintosh
    ebce0e71d test/e2e: check for stderr errors in cleanup()
    ef6d38752 Bump to FreeBSD 13.3 (13.2 vanished)
    fc4e16366 Bump to v5.0.0-dev
    bce14b1e6 fix(deps): update module github.com/stretchr/testify to v1.9.0
    cfc5b8e0f Bump to v5.0.0-RC4
    185981fa5 Copy past golang/expansion form ks8.io/kubernetes

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-22 18:52:13 +00:00
Bruce Ashfield
3fbc1ae7ca podman: conditionally add cni build tag
We should ensure that cni is built as part of podman if
that's the configured virtual runtime.

Although cni is not a primary networking backend for
podman, this also allows it to be skipped if netavark is
used.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-22 18:37:08 +00:00
Bruce Ashfield
a9f0f00637 podman: update to 5.0.0-rc
Bumping libpod to version v5.0.0-rc4-2-g460fc4d65, which comprises the following commits:

    fc4e16366 Bump to v5.0.0-dev
    cfc5b8e0f Bump to v5.0.0-RC4
    0898b338b Use stop timeout of zero for system reset
    542883b9b chore(deps): update dependency python-dateutil to ~=2.9.0
    99bb2bfce CI: must-add-tests check: use GH label, not text
    c5c294a35 fix(deps): update module github.com/shirou/gopsutil/v3 to v3.24.2
    3abc488c8 Vendor in containers/(buildah, common)
    4a03da22a Run codespell on code
    03f6589f3 Fix events by fully adding the new PullError event
    52fd284fd Update dependency pytest to v7.4.4
    2b86ab5a1 Change image-path to image for tests
    527b3793b Use machine image as specified in containers.conf
    4c1c4c082 Vendor latest c/common and fix tests
    c50826cea test: fix manifest e2e test assumption
    f168b3c11 podman manifest add: support creating artifact manifest on the fly
    2bbed8f20 Add man page content for artifacts
    d8bb63705 pkg/env.Join(): don't modify passed-in maps
    66d60384f add --retry --retry-delay to podman run/create
    c3c0c4ab9 Add support for podman push --retry --retry-delay
    e5ee0bb5f pullImage does not need to be exported
    2c9c7273c Vendor in latest containers/common
    99b2f369d test/system: fix mount external container test
    35133c842 Move locks to shim layer
    6957c7819 CI: run logformatter on mac
    fd1d95126 Move ignition functions into Containerfiles
    b58f20bdb machine/ociartifact: Include image name in error
    064258b49 Reenable boltdb upgrade tests
    77bcf233e fix: split string Entrypoint by space
    90e6478cf refacto: unknown signal return signal number without prefix
    1de94dceb ci: fix module not found
    585af039d feat: allow compatibility with podman v4 machine
    facad62af tests: fix after make podman inspect cmd return compatible with Docker API v1.44
    23d6377ac chore: rename var host hostIP
    2cd72c272 tests: add docker api compatibility test
    de845a5b4 feat: make inspect compatible with docker v1.44
    950f612b5 logging: new mode -l passthrough-tty
    5952486df podman network inspect: include running containers
    8f02822c1 Remove xz unit tests as they are flaky
    f8abd7ff7 machine config: make write atomic
    26ec570c6 Ensure HyperV 9p mounts work when a dir doesn't exist
    dfae51a4b Clean up gvproxy if machine start fails
    ee52f9cd7 systests: kube play URL: workaround for ECONNREFUSED
    7e374a52a Vendor in latest containers/(image,storage)
    698219cf9 Expose as-tested Mac/Windows repository state
    9f5c20f9b macos installer: Add vfkit entitlement
    15734f8c5 macos-installer: Remove hvf.entitlements
    74b87874b macos installer: Default to using ad-hoc signing
    c2a2113bb new vms, with rc6 rawhide kernel
    7b6d9a586 Fixup: avoid overriding io.Copy error
    59704665a Avoid overriding io.Copy error
    24a33a538 Move code for sparse optimized copy to a dedicated method
    50a0c5176 [CI:BUILD] rpm: Add fallback for $SOURCE_DATE_EPOCH not being set
    e32c9bb5e Makefile: add machine policy.json to podman-remote.zip
    1e5b5a889 macos installer: install default policy.json file
    bed61806c pkg/machine/ocipull: add default policy.json file
    f5a268319 Makefile: add MACHINE_POLICY_JSON_DIR option
    a02aa8f6a pkg/machine/ocipull: add custom policy.json location
    a210a4d7c test/compose: add test for default connection
    d9aff9b41 podman compose: only trim path suffix when ssh protocol
    3cada0409 podman compose: correctly accept --connection/--url
    6d3571dcf podman compose: build for all arches
    7d5a68c9c CI: e2e: use distinct ports, not just 5000
    5e387cd8a [CI:BUILD] rpm: Use $SOURCE_DATE_EPOCH instead of the current date
    8d9ff04d1 vendor update gopkg.in/yaml.v2 to v3
    cc7b19279 [CI:BUILD] rpm: Make BuildRequires independent of the environment
    5b28a2b4a Fix podman stop -t -1 CID
    656bf7b76 Change QEMU netdev to Unix domain socket
    19b676f85 Enable lint for Darwin and fix identified issues
    1b068b79f Fix nightly cron checks
    83671ac34 systests: enable ipv6 tests
    188404366 Update github.com/containers/libhvee digest to c1bda9d
    f099250be Better file close and err handling
    ea4553d59 integrating changes from #21768
    fa99b9be9 renamed testfiles as testdata
    0b3f3f0ef Use faster gzip reader
    2245cf8dc Remove duplication and make consistent usage of the progress bar
    c42d3a74e Add a comment to explain why we look at file name for zip files
    95aa2c4e6 Use github.com/stretchr/testify assert in compression_test.go
    88af8852d Refactor machine decompress.go
    ecda4eab3 Update module go.etcd.io/bbolt to v1.3.9
    53b5fc781 Update module golang.org/x/tools to v0.18.0
    608976902 Update module github.com/openshift/imagebuilder to v1.2.6
    3b127286a Adds example for secret creation from environment variable
    b68d3c7a0 Fix race conditions in hyperv readiness checking
    127a8060a Ignore docker's end point config when the final network mode isn't bridge.
    5d303ca26 Reformulate sparseWriter to deal with starting/ending zeroes explicitly
    c5434bf71 Expand sparseWriter tests
    a9ee31b92 Bump to v5.0.0-dev
    54795efeb Bump to v5.0.0-RC3
    3e76e594b Fix assumptions in 'push with --add-compression and --force-compression'
    8e99c697f Fix assumptions in 'push test --force-compression"'
    7acb49875 Update module golang.org/x/net to v0.21.0
    f601a446b Bump VMs. New pasta, gvisor
    d85a71b4d Update module github.com/klauspost/compress to v1.17.7
    d7f7f07c9 Stop using rm'd inspect format templates in tests
    be9aba7cc Remove image provenance from `machine inspect`
    d68240b15 Update machine files rm order and add QEMU rm
    4078a4405 libpod/events: remove duplicated Details ID field
    6f6925cca pkg/machine: ignore gvproxy pidfile not exists error
    8f1cebf96 cmd/podman: remove duplicated event ToHumanReadable()
    a3a1b44c3 libpod/events: Update event time format and add timeNano
    f218f8430 machine: implement http proxy logic for all providers
    c4e68bdae Cirrus: Reuse shared clone script on Mac
    2af73b83f Vendor vfkit v0.5.1 and gopsutil v3.24.1
    f7d1726f9 Rearrange CI tasks for safety + efficiency
    89b415ba3 Comply to Kubernetes specifications for annotation size.
    a31e8d2a2 zstd now default compression for podman machine
    1c61f766d CI: fix search-test flakes
    0b861350c machine: add sparse file writer
    7746e2a3f systests: auto-update: minor cleanup
    09095acf2 machine: Add `ConnectionInfo` to `MachineConfig`
    5effdcca3 Fix up example description of podman-system commands
    ec68f07c0 Fix Lint on Windows and enable the job
    66fd41ff1 cirrus logcollector: update package list
    5327ddfdf Build with CNI support on FreeBSD
    c5a71c4fd Apply suggestions from code review
    67ead5cb5 Apply suggestions from code review
    408772d34 Apply suggestions from code review
    1612ff69c Fix up example description of podman-inspect.1.md.in
    62148bf61 Apply suggestions from code review
    b8c1a8e79 Apply suggestions from code review
    66f39eee5 machine: Remove unnecessary TODOs
    5b5343b38 Apply suggestions from code review
    9d73dc6ed Apply suggestions from code review
    f7659b12e Apply suggestions from code review
    4f13b836b Codespell code
    fc7140151 Fix up example description of podman-mount.1.md.in
    ee078a7e6 Update docs/source/markdown/podman-cp.1.md
    606865a47 Fix up example description of podman-container commands
    22effe8d4 Fix up example description of podman-stats.1.md.in
    3fd09dd18 System tests: enable debugging for parallel-rm test
    49400ecce Extract waitForGvProxy into shared utility function
    a0109caa7 Fix up example description of podman-volume commands
    803410f1a Fix up example description of podman-kill.1.md.in
    bc5a4fbb2 Fix up example description of podman-pod commands
    93a0c242c [skip-ci] Packit: Update downstream task targets
    8ed6d4fe5 Fix up example description of podman-build.1.md.in
    433efc1f5 Fix up example description of podman-commit.1.md
    fe910ae96 Fix up example description of podman-logout.1.md.in
    12af4f36b Fix up example description of podman-images.1.md.in
    66ed46987 Apply suggestions from code review
    de7cb639c Fix up example description of podman-export/export commands
    f59a5f135 Fix running container from docker client with rootful in rootless podman.
    10d748f58 Introduce Podman machine reset
    d4b3ab521 Fix up example description of podman-create.1.md.in
    717c00569 Fix up example description of podman-diff.1.md.in
    4e268c667 Fix up example description of podman-events.1.md
    537490cb9 Fix up example description of podman-farm commands
    aad195ca3 Fix up example description of podman-network commands
    777b258a7 Fix up example description of podman-image commands
    664d4ed28 Fix up example description of podman-port.1.md.in
    1116e68dd Fix up example description of podman-push.1.md.in
    79a10419c Fix up example description of podman-unshare.1.md
    63d9bf128 Fix up example description of podman-pause.1.md.in
    4b6ca1687 Fix up example description of podman-start.1.md.in
    f5c666d07 Fix up example description of podman-rm.1.md.in
    6c8123325 Fix up example description of podman-info.1.md
    8cbbd631d Fix up example description of podman-history.1.md
    1a06ec802 Fix up example description of podman-healthcheck-run.1.md
    10af44854 Fix up example description of podman-exec.1.md.in
    7e611f60b Fix up example description of podman-cp.1.md
    47d0aa1bc Fix up example description of podman-manifest commands
    7ba23cd6f Allow podman pull to specify --retry and --retry-delay
    f036476cf fix usermode test
    24b8d1446 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0
    2846027dc machine init: validate machine name and username
    8be1c0b04 [CI:DOCS] Update dependency golangci/golangci-lint to v1.56.2
    30a18fc02 pkg/machine: make only one AddConnection() call
    7f2a6c735 Bump to v5.0.0-dev
    f620aa0fb Bump to v5.0.0-rc2
    d60757cca pkg/machine: cleanup MakeSSHURL
    e0a766854 Improve cross platform support in QEMU machine sources
    bd0a9e903 Fix remove docker.sock symlink
    1f64ae10f Prune FCOS related code
    4fffa78ee Manually discover wsl.exe location
    889454104 Turn WSL machine tests back on
    a9401dead Build tag out QEMU for Darwin
    c7537d193 man-page xref: make nested-structure warnings fatal
    d221e0b00 Remove log-level from runSystemCommand since wsl does not support it
    9ee17d422 machine/qemu: use extra gvproxy socket
    3ca221360 Add a helper for stopping pods and containers in E2E
    bcec7e627 machine: ocipull do not error if downloaddir exists
    e5f86f862 More test tweaks to avoid "StopSignal ... 10 seconds" warning
    144e420bb Add testcase for WSL dist conflicts
    d23dd35dc Correct VM existance check on WSL
    db34827bb Test PR, add a inconsequential period to docs
    9abc04232 Fix small bug in ocipull
    42a78c714 Add volumes-from support using annotation in kube yaml
    068d4e81c Allow CI user to cleanup own files
    41c3f9d4b chore(deps): update docker.io/library/golang docker tag to v1.22
    3de467d9f machine: Re-enable USBs check for wsl machine set
    0e9d86755 machine: `machine set` only when machine's stopped
    92d6194f0 Fix freebsd indentation + enable release-testing tasks
    f9bc9a85b Replace panic with no-op
    45b701b12 chore(deps): update dependency setuptools to ~=69.1.0
    464638cc8 Enable windows and PM windows testing
    001824b9f Windows uses USERPROFILE not HOME
    4c0d05718 Readme updates for Podman
    87947761e [CI:BUILD] Add VFKit into pkginstaller, remove QEMU
    7f2d8ae80 [CI:DOCS] Update dependency golangci/golangci-lint to v1.56.1
    66e292ebb Fix build on Main
    c29fde265 libpod: correctly map UID/GID for existing dirs
    2430fc71a Allow podman machine to download from oci registry
    ad55ba6eb Handle DOCKER_HOST environment for podman-docker package
    36853c0d0 Consistant handling DESTDIR variable expansion
    5eb801a56 Bump CI VMs to ones with netavark 1.10.3
    f7f4d1064 Fix the build on main
    eb8428df5 podman-image-scp: Load images without the use of a temporary file.
    f8847ea04 Improve comments on waitOnProcess
    d3328d4f3 Don't panic on podman4 machine configs
    00180bd5b Enforce podman-machine mac CI results
    667311c7d Use persist dir for oom file
    1f8a69bc9 docs: clarify when a URL is treated as a git repo
    bb7d8fdc4 Workaround connection hangups in start/stop racing
    09b86e26d Improve robustness of pipe checks
    487219d80 Complete WSL implementation, refactor a few areas
    d7cb66492 wsl - wip
    e74d268bf Minor cleanup from podman 4
    2a61998f0 Fail if vm exists in hyperv already
    477cb90a3 Update .cirrus.yml
    325d7f489 Re-enable mac testing
    7ecc41467 Vendor crc CopySparse
    69163af2a Remove gitleaks scanning
    5b6b68976 Remove disused Containerfile and docs
    d676c1b1a fix(deps): update module github.com/docker/docker to v25.0.3+incompatible
    4413e75f0 [CI:BUILD] rpm: bump podman module version
    1ca608ea9 fix "podman run port forward range" flake
    41cd90a8e image scp: don't require port for ssh URL
    dbfa201c9 new testimage and systemd-image
    a2c086c78 [CI:DOCS] fix userns.pod.md mapping table
    3495aae42 docs: resole hierarchical issues with userns parameters
    7be6cd4b0 machine: USB passthrough
    02eb907db machine: change getDefaultDevices signature
    dc0d07c71 document new connection/farm storage location
    ef8e63cb2 update c/common to latest main
    10265661e Fix Quadlet Options=key=value documentation/example
    9f38b2215 pkg/machine: make it build for freebsd
    bcd48a6a7 Bump to v5.0.0-dev
    dc218a3c6 Bump to v5.0.0-rc1
    7e73bb341 Add v4.8, v4.9 to release notes
    30fb5de71 Restore Cirrus DEST_BRANCH to main
    72f1617fa Bump Go module to v5
    c023b789f Re-enable passing a logfile to gvproxy
    69d54c482 Bump gvisor-tap-vsock from 0.7.2 to 0.7.3
    e20b70c2e Upgrade tests: reenable, but revamped
    d47979761 Quadlet - do not look for line continuation in comment lines
    90c938737 Add functionality for `podman machine set --rootful`
    f23b144c6 Podman Machine AppleHV CI fixes
    d5eb8f3b7 AppleHV - make gz ops sparse
    85d828148 create machine dirs at discovery
    b1ce6ef9a podman machine 5 - hyperv
    6b02c4894 Podman 5 machine refactor - applehv
    e8501ca99 Implement generic providers
    9bb191df5 [CI:MACHINE]Podman5 QEMU refactor
    b9bcfa474 podman5 machine reconfig 1
    c89dd4a92 Use tmpfs mounts when creating a memory-backed emptyDir volume
    3cf2f8ccf Handle more states during refresh
    77847bd67 docs: make --seccomp=profile.json clearer
    6ca6184ed gomod: Update containers/psgo to 1.9.0
    a8b2256cc Set interface name to the network_interface name for macvlan and ipvlan networks
    6e0decbe0 Send container stats over API on a per-interface basis
    9983e8744 Remove leftover autoremove containers during refresh
    43a01d7dc Temporarily ignore windows-linting failures
    defbf4237 Lint before windows-cross build
    d44bafc3c Reimplement lint with improved compatibility
    c7910e75e Show network name network events with podman -remote events
    46fe7ef3b use pkg/strongunits from c/common
    5de4bd5d1 vendor: update c/common + libhvee to latest main
    a997d7d81 test/e2e: unskip netavark macvlan/ipvlan tests
    7d15bc2ef fix userns + restart policy with slirp4netns
    fcae70220 Reuse timezone code from containers/common
    85904e01f Vendor in containers/common
    01a8539ef Warn if cgroups-v1
    d3281cf88 Use tmpfs mounts when creating a memory-backed emptyDir volume
    2eee3cd81 Corrected markdown documentation for `--stars`
    35d1f1221 make podman pod inspect output a json array
    26cd01ee5 Do not test CNI in CI
    ee923358c Vendor c/common
    249474a84 drop support for "pasta" as a network name
    a09889910 Use semi-colon as the field separator for internal volumes-from inspect annotation
    d217de642 [skip-ci] Update github/issue-labeler action to v3.4
    9e3d61a9d fix(deps): update module github.com/docker/docker to v25.0.2+incompatible
    39f22c382 Include machine-tests in cirrus-cron jobs
    7de64b47f Vendor c/storage main
    9fb57d346 Cease using deprecated runc userlookup
    91b8f208a Bump to runc main
    6a727fdbe Fix updated runc dep breaking pod devices cgroup
    2818abf84 Update to runc main, removing pin to an older version
    0da405453 Verify the empty  mounts.conf does not generate warnings.
    1ab55defb Test new CI VMs
    c5c079932 Scan-secrets: Fix PR forcepush detection condition
    0a4beea6d Scanning-secrets: Support new-branch/renovate link
    0e9b07a02 Secret-scanning: Fix newly-opened PR conditional
    3f3d1e4de Temporarily ignore mac-linting failures
    d9ad7cbc9 Run lint for mac builds
    90d6e92f2 fix(deps): update module github.com/opencontainers/runc to v1.1.12 [security]
    a06685a54 Farm build should read server registries.conf
    28856b6c1 Make leak-detection readable by humans
    b028f6aa7 add new libpod/images/$name/resolve endpoint
    f3ab6268a fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.21
    74454bf59 rework system connection and farm storage
    a1c47f029 Return nil health when inspecting containers without healthchecks
    6eca2f651 [skip-ci] Update dawidd6/action-send-mail action to v3.11.0
    76791a21c pkginstaller: bump Qemu version to 8.2.1
    d202acd86 Bump containers/common to latest main
    174631f72 Convert SpecGen values to be nullable where possible
    f8e1ea414 Fix SSH Host argument in tag command during scp.
    3136f0fca Don't require engine connection for farm
    0ec84b8ec Revert "Enable win podman-machine test failure"
    39e53e6dc chore: extract duplicate codes
    8d14d4155 Run codespell on code
    d5bed05df docs: fix podman-manifest-rm header
    3592b56c3 docs: fix unclosed code block
    6678260eb man: Minor wording tweak for host/connection
    cd5982e98 quadlet: Add tests for templates
    dc94a10d6 quadlet: Add documentation about template use to manpage
    01dccba50 quadlet: When loading dropin files for foo@instance, also load those for foo@.
    bb6dec46f quadlet: Support [Install] for templated units
    7e1942ed4 systemd.parser: Add GetTemplateParts()
    2df994ba0 quadlet: Don't put @ in container names for templated units
    b73eec88d [CI:DOCS] Packit: podman5 downstream for f40+
    7dcbc75aa [CI:DOCS] minor man page cleanup
    202cab612 Fix inspect test that rely on digest
    ffd7a8998 Update module github.com/google/uuid to v1.6.0
    848078c93 Fix auto-update digest comparison
    93510a299 bindings: suggest using -tags remote to reduce file size
    f18ebad1e bindings: pods uses entities/types
    668d517af bindings: volumes uses entities/types
    df6cc8550 bindings: secrets uses entities/types
    aee733c58 bindings: network uses entities/types
    c736a8e20 bindings: manifests uses entities/types
    34cc55741 bindings: play uses entities/types
    528414970 bindings: generate uses entities/types
    5ddc82f7a bindings: images uses entities/types
    08cd7ce41 specgen: use storageTypes instead of storage package
    7aede410d bindings: containers/update uses entities/types
    40cc962a5 bindings: containers/exec uses directly Docker type
    88fb291a3 bindings: containers/create uses entities/types
    6c5704a09 bindings: containers/containers uses entities/types
    2d8231efe bindings: containers/commit uses directly Docker type
    9f0ea0dc8 bindings: containers/checkpoint uses entities/types
    b304ac1ea bindings: containers/archive uses entities/types
    923123420 domain: move system structs to types sub-package
    48a99c651 domain: move Event to types sub-package
    ee61b130a [CI:DOCS] Update farm docs
    90867d987 Fix image filters parsing
    7c8c94549 Vendor in latest c/common
    27e76f3ee Update module github.com/mattn/go-sqlite3 to v1.14.20
    505ed030e [CI:BUILD] rpm: use go-rpm-macros on RHEL 10
    56cf5b6df Update module github.com/docker/docker to v25.0.1+incompatible
    3e6bfb6e9 Update module github.com/docker/docker to v25
    269149a9f Kube Play - allow creating image based volumes
    cf0b436b9 Deprecate BoltDB, preventing creation of new databases.
    d3a49fded Add information about --latest support on man pages
    d792cc448 Warn about whitespace in /etc/subuid and /etc/subgid files
    5cc83da1c Pass the OCI runtime an empty entrypoint when there is no entrypoint
    f53cb9c27 chore: remove unused file [NO NEW TESTS NEEDED]
    2e38b9816 Restrict building the pkg/fileserver implementation to windows
    17613cc96 podman farm is no longer hidden. Enable doc checks.
    0e64e107b Fix Mount Unit Option
    660778b2e [skip-ci] Update dawidd6/action-send-mail action to v3.10.0
    8d733b6d0 Update module github.com/onsi/gomega to v1.31.1
    a2cc04b15 Update module github.com/opencontainers/image-spec to v1.1.0-rc6
    a0c914c6d [CI:DOCS]Remove final references to varlink
    70c3accf7 Update module golang.org/x/tools to v0.17.0
    75790b42b Label host volume mounted content in machine as nfs_t
    7472bdb16 Ensure podman temp directory is created on Start as well.
    a5612bc54 Quadlet: ensure all keys are documented
    0c3b5e433 quadlet.go: clean up keys
    77389bd05 Add missing check for errors returned from SpecGenToOCI to MakeContainer.
    6226b5669 Update module github.com/onsi/gomega to v1.31.0
    4c583e7a1 Update module golang.org/x/net to v0.20.0
    e757f7631 Update module github.com/onsi/ginkgo/v2 to v2.14.0
    728e842db Update module github.com/docker/go-connections to v0.5.0
    f9a05717a Update module github.com/vbauerster/mpb/v8 to v8.7.2
    c566551e9 gvproxy: Update to 0.7.2 release
    1964dbd40 Set up podman machine remote user correctly
    1c88b1220 rm pod with podman run if ctr creation failed
    79fad91db Add a net health recovery service to Qemu machines
    e66413b51 CI: reenable tests that are working again
    3fef531d9 applehv: return socket path from setupAPIForwarding
    90f69891d applehv: Remove unneeded cmd.ExtraFiles assignment
    ab1316551 fix mongo-driver dependency
    971f2eb45 [NO NEW TESTS NEEDED] [FreeBSD] Fix crash when running podman inspect
    dbe0e6789 Man pages: tighter documenting of --format fields
    d95710a89 farm build: push built images to registry
    992e83d20 machine: Enable console autologin by default
    f374e07fb AppleHV: update LastUp time
    b94be90a1 Remove Libpod special-init conditions
    46cfc9858 Make --gpus work with nvidia gpus
    0e09527bd systests: kube with policies test: fix race
    f6107f631 Assign separate ports for each appleHV machine
    eeff3d2de Fix machine inspect test config
    7bd5dd42c Fix `podman machine set --rootful` for applehv
    585fbe373 Run mac jobs on labeled hosts
    a60fe34fd Fix `podman system reset` with external containers
    522934d5c Replace strings.SplitN with strings.Cut
    3714ae342 quadlet: fix quoting of example option values in container unit file documentation
    4e4c3e3db cmd: support --config option to locate authentication file
    83fa4843f Fix podman machine ssh command
    780733415 System tests: fixes for RHEL8 gating failures
    380fa1c83 Remove redundant code in generateSpec()
    a8c2b84c2 docs: update mariadb example
    d7760b23c labeler: Use `machine` label
    bccfda505 [CI:DOCS]Periodic update to OWNERS file
    3b881d4ec feat: disable pid max in the podman machine
    c90e9dad7 e2e: reenable warning checks on Debian
    e3f167f77 Add API forwarding support for HyperV
    a0a541351 consolidate ignition ready socket unit
    8341ca0e7 Remove --latest from podman CMD --help output
    06064150e machine: use GlobalDataDir helper
    8bdf77aa2 Refactor: replace StringInSlice with slices.Contains
    25602a03a fix(deps): update module golang.org/x/sys to v0.16.0
    3bfdd7915 Fix init teardown on bad ignition path
    b01a330d3 Use single persistent ssh key for all machines
    260f814bd test/system: add test for mounting issue in the init container
    f0319d5b7 Error messages not being reported unless more then one error present
    49e2589a5 fix(deps): update module golang.org/x/sync to v0.6.0
    450862054 xref-manpages script: more regression tests
    e63513542 Vendor latest c/image
    98f332d48 Use parser.UnitFile
    c728eeb39 Create `pkg/machine/ignition` package
    560455cbd docs: fix typos
    2a2d0b0e1 chore: delete obsolete // +build lines
    92f3bacc6 machine/qemu: A few debugging prints
    876b2207e ci/labeler: Add area/machine label
    f5a986f4e Set applehv as default darwin provider
    689d97a1d Quadlet - add StopTimeout key for .container file
    ac0353aec chore: remove unused link
    8c546cf7e CI: bump VMs
    f9de9809e docs/build_osx.md: Describe external gvproxy
    5827ecb42 fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.12
    70a53cb76 Quadlet - fix trailing whitespaces handling
    c315c8e74 Makefile - make sure gitvalidation is installed before calling it
    55b08d3ba applehv - fix vm lookup
    ec5422af5 e2e: Skip journalctl if journald is unavailable
    4f94c96b9 remote: fix podman-remote kube play --publish-all
    4083ddbb0 Kube Generate - check options in bind-mount-options exist before accessing
    f10a7bfd4 Add mmap cache option to QEMU mount
    2fc862d39 chore(deps): update module github.com/containerd/containerd to v1.7.11 [security]
    90b09b586 chore(deps): update module golang.org/x/crypto to v0.17.0 [security]
    f90b4e79a Tests for xref-helpmsgs-manpages
    1322f3193 abi: drop check for IsRootless()
    9d0da9d0f Strip key/values of external quotes
    4dd58f226 Move golang requirement from 1.18 to 1.20
    f169fc76a Allow PublishPorts to be used with [Pod] entry
    6a96c8b5f quadlet container support multiple Ulimit options
    ccc3eb774 Improve compose tests
    e51bab3c9 Remove duplicated content in docs
    d76bb978b docs: oci-dir does not support compress as suggested
    f02fe73c3 Update module github.com/vbauerster/mpb/v8 to v8.7.1
    5c4c76b8c Update module github.com/mattn/go-sqlite3 to v1.14.19
    db68764d8 Fix Docker API compatibility with network alias (#17167)
    7c72d8c2f Fix path to example files
    5cc5b4347 Error on HyperV VM start when gvproxy has failed to start
    58edd06ff [skip-ci] Update actions/upload-artifact action to v4
    d026ccf9a Kube Play - pass arguments to build
    e4ecd7cca doc cleanup
    1c59a9ced CI: safer podman-stop tests
    8d94fc156 fix(deps): update module github.com/containers/libhvee to v0.6.0
    3a842027a CheckExclusiveArch should use local JSON too
    c290a561b Update gitleaks baseline w/ harmless findings
    446df4379 machine e2e : set default disk size to 11
    126670d5d Fix push endpoint stream
    232c32bd3 CI: systests: safer isolation in registry & tests
    f51ff7764 Support podman ps --format '{{ .Label label }}'
    36e04599a fix(deps): update module golang.org/x/tools to v0.16.1
    5ca255c2c fix(deps): update module github.com/google/uuid to v1.5.0
    5c7f74546 Remove deprecated field ContainerState.NetworkStatusOld
    e5c726daf Make hyperv pass
    e5a4f00b7 Podman 5 machine config file - Step 1
    95eb22c71 Support a machine-test only mode
    0f02e43ce cli: podman manifest annotate --annotation use StringArray()
    d8c3e5b3c cli: podman manifest add --annotation use StringArray()
    3e10a6832 cli: podman kube play --configmap use StringArray()
    2be4b007b cli: podman kube play --log-opt use StringArray()
    48ab4aec3 podman kube play: fix broken annotation parsing
    e916f49f0 cli: podman kube play --annotation use StringArray()
    47b65086e cli: podman image trust set --pubkeysfile use StringArray()
    cdb178e95 cli: podman push --encryption-key use StringArray()
    3e1b9146f cli: podman pull --decryption-key use StringArray()
    36e29a843 Fix WSL machine test regressions
    6415471dc EMERGENCY: fix broken CI
    952c70890 added system test
    23f6c4851 Add test for relative idmap mount
    e7eb97b84 fix checking of relative idmapped mount
    c823d49fd CI: unskip tests
    4590b663a add test for podman exec --env-file
    06cee546a cli: podman exec --env-file use StringArray()
    7866f6c6e cli: podman run/create --blkio-weight-device use StringArray()
    432be1330 cli: podman run/create --device-{read,write}-bps use StringArray()
    8de13271c cli: podman run/create --device-{read,write}-iops use StringArray()
    e763cc62b cli: podman run/create --device use StringArray()
    833163ff3 add podman create --label-file test
    19571f750 cli: podman run/create --label-file use StringArray()
    24d08a94d cli: podman run/create --decryption-key use StringArray()
    f9b2da3eb [CI:BUILD] override crun-wasm in fcos + podman-next image build
    6c2a0196a machine: usb: Fix 'passtrough' typo
    201920f6a cli: podman run/create --chrootdirs use StringArray()
    dbbec9936 cli: podman run/create --log-opt use StringArray()
    b011aa443 cli: podman run/create --env-file use StringArray()
    ef10073b5 cli: podman run/create --annotation use StringArray()
    c5258d463 cli: podman --hooks-dir use StringArray()
    12c39ffda cli: podman --module use StringArray()
    c97560841 cli: add docs for StringArray vs StringSlice options
    1ebd507fb Fix regression in e2e machine test suite
    95145d957 buildah treadmill: cleaner YAML, uglier script
    0d1b90d36 CI: systests: fix flaking --since test
    9a963221b [CI:DOCS]use nginx in podman tutorial
    a1cc99dd4 [CI:DOCS] compat api: fix formatting syntax
    cac4aa3b4 [skip-ci] Update actions/stale action to v9
    19457f382 system service: split out cgroups call into linux specific file
    03d411abc libpod: split out cgroups call into linux specific file
    32c25c602 pkg/specgen/generate: NOP verifyContainerResources() on freebsd
    a687c3886 use rootless netns from c/common
    3d740674b Improve error handling in win-lib.ps1
    d78212a00 Update vendor of containers/storage
    98df5b397 Fix user-mode net init flag on first time install
    10db6442d [skip-ci] Update actions/setup-go action to v5
    8d8fb726f fix broken labeler.yml config
    4d2125baf systests: cp: add wait_for_ready
    7cc6501cf Add e2e tests for quadlet Entrypoint option
    01d397a65 podman: new option --preserve-fd
    a943be7e8 Kube Play - set ReportWriter when building an image
    972ffaca4 Add support for Entrypoint in quadlet
    94e67cfc7 fix(deps): update module github.com/containernetworking/plugins to v1.4.0
    1f42aff93 systests: debug systemd failures
    7f4b0f208 apiv2 tests: fix race
    f1dc126bf Do not aggregate failing mac test status
    2d46d0537 Implement bare-metal Mac M1 podman-machine testing
    b7a81c1ce Fix command failure not resulting in task failure
    ca66a90b8 [skip-ci] Update actions/labeler action to v5
    b1eccedf5 [CI:DOCS] Update health-start-periods docs
    bb1307970 fix(deps): update github.com/opencontainers/runtime-spec digest to 0625254
    07104fb27 fix podman-systemd.unit.5 Mask/Unmask placement
    0a72e3dad fix(deps): update github.com/docker/go-connections digest to fa09c95
    7e2a8d58a Quadlet .pod - add support for the Volume Key
    212b4c9e9 Quadlet .pod - add support for the Network Key
    0d260bdc1 Quadlet - fix pod service file name
    04519234e Add support for the userns annotation in kube play
    f384bdf66 Handle symlinks when checking DB vs runtime configs
    e14aa09bb Update podman-systemd.unit.5.md
    6efba48e2 fix(deps): update github.com/containers/image/v5 digest to 671ab94
    4e21ce5ba fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.11
    45e53ed7b libpod: Detect whether we have a private UTS namespace on FreeBSD
    00d96c2b9 fix(deps): update github.com/openshift/imagebuilder digest to ef2a5fe
    b1acb43d7 CI: fix system_test_aarch64 dependencies
    f9e8585c5 Enable win podman-machine test failure
    269f8ff06 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.2
    c1eea91a0 fix(deps): update common, image, and storage deps
    31df9c237 Move the --farm flag to farm build command
    fa0aa9113 @@option volume.image: be specific that -v only affects RUN
    426db6fcc Accept a config blob alongside the "changes" slice when committing
    e197cf57d container create: use ParseUserNamespace to parse a user namespace setting
    f95dd21d5 deferred test failures: handle a corner case
    42ea21121 Fix locking error in WSL machine rm -f
    d5cf46e80 support lookup of intermediate IDs in gidmapping/uidmapping options in userns=auto
    5b3d82f9b sqlite: set busy timeout to 100s
    d4ac2f3dd libpod: Allow using just one jail per container on FreeBSD
    55373dcce Vendor c/common
    3e7041508 Gating test fixes
    86296ff8d pkg/bindings: add new APIVersionError error type
    a5d11f404 Set `BUILDAH_ISOLATION=chroot` within Podman containers
    f35d1c1c2 Don't update health check status during initialDelaySeconds
    8ee262202 quadlet: Support systemd style dropin files
    93bcd2a25 fix podman-remote exec regression with v4.8
    cf1ad300b utils: close a couple of ReadClosers
    4314b1c34 Fix transferring data using tar
    7b4d6a295 [CI:DOCS] Fix markdown bugs
    a2bf8c6d5 refactor(machine): improve machine marker value
    572f38c0d Set correct exitcode in remove events and change ContainerExitCode from int to int ptr
    d7b970a4c sqlite: fix issue in ValidateDBConfig()
    e26f677b1 sqlite: fix missing Commit() in RemovePodContainers()
    248cbc6f6 docs: drop default for tmpfs-mode
    6b2f48129 Quadlet - Add support for .pod units
    c664cfe88 [systests] podman mount no-dereference: complete rewrite
    13e548820 [CI:DOCS] performance: document sometimes slow native overlayfs
    b39f76474 fix(deps): update module github.com/gorilla/schema to v1.2.1
    07a7b3ae5 fix(deps): update module golang.org/x/tools to v0.16.0
    c8f262fec Use idtools.SafeChown and SafeLchown everywhere
    29d18079c [systests] new defer-assertion-failure
    f07b15105 fix(deps): update module golang.org/x/net to v0.19.0
    8e2d5e191 Fix wsl.conf generation when user-mode-networking is disabled
    d280e481a test/compose: remove debug leftovers
    ac3d57016 [CI:BUILD] rpm: remove dnsname
    386c8d6bf swagger: document play kube annotations param
    f6b2a1378 Clean up farm-build miscommit
    c7f6844c0 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.0
    41a6b992a system: enhance check for re-exec into rootless userns
    e82465773 Fix Ulimit syntax.
    fe65f059a libpod: drop dead code
    cd21973f4 pkg/util: use code from c/storage
    98c525cf9 Remove unnencessary pregenerated doc
    3ca8b4013 fix(deps): update module github.com/crc-org/vfkit to v0.5.0
    da9349ce4 podman machine image from oci updates
    75638a72a If API calls for kube play --replace, then replace pod
    414642efd [CI:DOCS] Add podman farm build doc
    ddd6cdfd7 Ignore SELinux relabel on unsupported file systems
    e85cedf43 Use configured timeout in list_test.go
    478afa728 vendor: update containers/{common,storage,image,buildah}
    48cf44f23 machine applehv: create better error on start failure
    6cb2f9b12 quadlet: Support `healthy` for `Notify` directives
    2b95700bc No longer support deprecated legacy QEMU machine structures
    e40d70cec new 'no-dereference' mount option
    be2463330 Bump to v5.0.0-dev
    e75fbe54e Update dependency setuptools to v69
    ae9b63fbf Check for imageID, not imageName
    ff80e40ad Use NewStoreReference instead of ParseStoreReference
    e9587f5e3 Don't re-assign imageID
    c85068220 Remove clearly dead code
    87cef3654 Update release notes from v4.7 branch
    8b2667ef6 More rootless-tutorial fixes
    62060f323 Get masked paths and readonly masked patchs from containers/common
    4c249a219 Change default QEMU CPU level to `qemu64` on Windows amd64

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-03-15 17:17:19 +00:00
Ming Liu
f33765288d podman: add test instructions for podman system service
Signed-off-by: Ming Liu <liu.ming50@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-01-19 14:29:24 +00:00
Bruce Ashfield
01a60446c5 podman: update to v4.8.2
Bumping libpod to version v4.8.2-2-g0ec4c8b1d, which comprises the following commits:

    4aab4e3fe bump release to v4.8.3-dev
    aa546902f v4.8.2
    a9b20a4a2 [CI:DOCS] Update RELEASE_NOTES.md for v4.8.2
    775054343 Kube Play - set ReportWriter when building an image
    1864ea94f Fix user-mode net init flag on first time install
    3c0d66d83 bump c/common to v0.57.1
    b0e2ffc51 bump version to v4.8.2-dev
    ef6e5ac40 v4.8.1
    0b72d1bf2 Update RELEASE_NOTES.md for v4.8.1
    2d20d2e5c Handle symlinks when checking DB vs runtime configs
    6bbbfaa05 libpod: Detect whether we have a private UTS namespace on FreeBSD
    a8b8dc570 pkg/bindings: add new APIVersionError error type
    86bb91001 fix podman-remote exec regression with v4.8
    9c9d2fcaf sqlite: fix issue in ValidateDBConfig()
    1e5a1336f sqlite: fix missing Commit() in RemovePodContainers()
    429080f02 sqlite: set busy timeout to 100s
    a72c39a53 Fix locking error in WSL machine rm -f
    a7c522dfe Gating test fixes
    a62b81d90 If API calls for kube play --replace, then replace pod
    70ba64f4c Fix wsl.conf generation when user-mode-networking is disabled
    e627de1b4 Bump to v4.8.1-dev
    c4dfcf148 Bump to v4.8.0
    0efc6ea30 Update release notes for 4.8.0
    4b95c6c30 Add notes on upcoming deprecations to release notes
    1c1477ddf [v4.8] Bump to Buildah v1.33.2
    f02155142 [CI:DOCS] Update release notes
    697e66c78 machine applehv: create better error on start failure
    53f176732 Bump to v4.8.0-dev
    ac1d54e68 Bump to v4.8.0-rc1
    66cba2794 Create release notes for v4.8.0
    ac290f446 Update release notes from v4.7 branch
    883ce7704 Cirrus: Update operating branch
    9ea390191 rootless_tutorial: modernize
    ee1654622 Bump Buildah to v1.33.1
    3d86a9658 Bump Buildah to v1.33.0
    60d9f9b80 Update to libhvee 0.5.0
    d32f61d91 vmtypes names cannot be used as machine names
    d0b32255e Add support for --compat-auth-file in login/logout
    a3d5814e0 Update tests for a c/common error message change
    ced07a55f Update c/image and c/common to latest, c/buildah to main
    a10b88cb2 CI: test overlay and vfs
    da899b92d [CI:DOCS] Add link to podman py docs
    d2a4ec867 Test fixes for debian
    23ead49de pasta tests: remove some skips
    d711c3f46 VM images: bump to 2023-11-16
    5f3f8a3ca fix(deps): update module k8s.io/kubernetes to v1.28.4 [security]
    3d88f614f [CI:DOCS] Machine test timeout env var
    e35fc92c0 Quadlet - add support for UID and GID Mapping
    dc709e4d7 Quadlet - Allow using symlink on the base search paths
    7b826b230 [skip-ci] Update dessant/lock-threads action to v5
    ea89eaa1c Avoid empty SSH keys on applehv
    33ddd79e2 qemu,parseUSB: minor refactor
    669829447 fix(deps): update module github.com/gorilla/handlers to v1.5.2
    49b152f49 docs: fix relabeling command
    5dc807487 Pass secrets from the host down to internal podman containers
    047da19b5 (Temporary) Emergency CI fix: quay search is broken
    e1f3ae0d8 Update podman-stats.1.md.in
    6fa4a975c [CI:BUILD] packit: handle builds for RC releases
    bd375058c Quadlet test - add case for multi = sign in mount
    5e0471ba7 set RLIMIT_NOFILE soft limit to match the hard limit on mac
    d636ce8d7 rootless: use functionalities from c/storage
    6b5b39912 CI: e2e: fix a smattering of test bugs that slipped in
    d07263f34 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.1
    fbd1ba68f vendor: update c/storage
    956c0d6ec Improve the documentation of quadlet
    39d647a2f Fix socket mapping socket mapping nits
    5388836c1 fix(deps): update module golang.org/x/tools to v0.15.0
    60f67eec7 fix(deps): update github.com/containers/libhvee digest to 9651e31
    9cd975d59 [skip-ci] Update github/issue-labeler action to v3.3
    b8d59030c Document --userns=auto behaviour for rootless users
    c23963d7a machine: qemu: add usb host passthrough
    4a75a2b3c fix(deps): update module golang.org/x/net to v0.18.0
    1c5bc7e09 fix(deps): update module github.com/onsi/gomega to v1.30.0
    b2c56365b Refactor Ignition configuration for virt providers
    81dc3f183 [CI:BUILD] rpm: disable GOPROXY
    78798cab0 Automatic code cleanups - JetBrains
    a45ba06d0 Refactor key machine objects
    1c969219d systests: add [NNN] prefix in logs, NNN = filename
    92cd7b25f systests: add a last-minute check for db backend
    d44f71c13 applehv: allow virtiofs to mount to /
    c2de6d34c Run codespell on podman
    8f5c46c9e update completion scripts for cobra v1.8.0
    28f3e9fe3 Fix man page display of podman-kube-generate
    8effb7825 Try to fix the broken formatting of man podman‐kube‐apply(1).
    3eb2d5ceb fix(deps): update module golang.org/x/text to v0.14.0
    108d2bc43 docs: make CNI removal explicit
    c1fe1f9d3 fix(deps): update module github.com/gorilla/mux to v1.8.1
    e78288344 fix(deps): update module github.com/spf13/cobra to v1.8.0
    0824e45c8 fix(deps): update module golang.org/x/sync to v0.5.0
    da897bd04 fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.18
    420316ef6 Podman push --help should reveal default compression
    942bcf34b Update container-device-interface (CDI) to v0.6.2
    375b0cc13 fix: adjust helper string in machine_common
    9e05fb14a fix: adjust helper string in machine_common
    607aff55f remote,test: remove .dockerignore which is a symlink
    6b7d7f6fb [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.2
    b5f854458 fix: adjust helper string in machine_common
    ce334ed9d vendor: update github.com/coreos/go-systemd/v22 to latest main
    2a17baa29 CI: default to sqlite
    33753db47 vendor: update c/common
    613f50c7a check system connections before machine init
    ea4775ec9 Consume OCI images for machine image
    d2a37222b freebsd: drop dead code
    06a07c98e libpod: make removePodCgroup linux specific
    e4f1c87ea containers: drop special handling for ErrCgroupV1Rootless
    0b6abfe1e compose: fix compose provider debug message
    aefa9abf4 image: replace GetStoreImage with ResolveReference
    03419d6da vendor: bump c/image to 373c52a9466f
    ce9c1b9b8 Refactor machine socket mapping
    f6ec210f3 AppleHV: Fix machine rm error message
    af0ef47f0 Add status messages to podman --remote commit
    3241b3259 End-of-Life policy for github issues
    390e9ddc9 fix(deps): update module github.com/shirou/gopsutil/v3 to v3.23.10
    18d6bb40d Support passing of Ulimits as -1 to mean max
    78765b14d fix(deps): update github.com/docker/go-connections digest to 0b8c1f4
    ffb96ad8b fix(deps): update github.com/crc-org/vfkit digest to f3c783d
    7153124f9 Log gvproxy and server9 to file on log-level=debug
    d9c388e2f Change to using gopsutil for cross-OS process ops
    642fa9897 Initial addition of 9p code to Podman
    b332ca7a0 libpod: fix /etc/hostname with --uts=host
    89d7b2735 systests: stty test: retry once on flake
    6b94c8fd3 systests: pasta: avoid hangs
    4c67a6aed Fix secrets scanning GHA Workflow
    2193bb8fc [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
    e9dd41183 docs: clarify systemd cgroup mount
    a1577ec7b podman build --remote URI Dockerfile shoud not be treated as file
    95a5ad258 Small fixes for wacko CI environments
    c6d410cc3 Do not add powercap mask if no paths are masked
    3743955d6 compose: try all possible providers before throwing an error
    91df369ae podman kube play --replace should force removal of pods and containers
    3ce62d3cc Sort kube options alphabetically
    e966c86d9 container.conf: support attributed string slices
    91ccd7cd2 CI: podman farm tests cleanup
    be7dd128e Mask /sys/devices/virtual/powercap
    05a607f14 Update module github.com/google/uuid to v1.4.0
    6a0b2c680 fix(deps): update module github.com/docker/docker to v24.0.7+incompatible
    6badb659c fix(deps): update module go.etcd.io/bbolt to v1.3.8
    9e3363c5e CI: systest: safer random_rfc1918_subnet
    c841fa9e9 CI: e2e: safer GetPort()
    fd5140d87 Fix broken code block markup in Introduction.rst
    d0ce60c63 chore(deps): update module google.golang.org/grpc to v1.57.1 [security]
    15969a60b chore: remove npipe const and use vmtype const for checking
    2158e1540 Update module github.com/onsi/gomega to v1.29.0
    c0fb8fe59 CI: try to fix more networking flakes
    c21f28813 fix: check wsl npipe when executing podman compose
    9ea1ed6d4 [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.1
    76cca08f8 Quadlet - explicit support for read-only-tmpfs
    c13b8e3c9 compat API: fix image-prune --all
    0e15861c5 Makefile - allow more control over Ginkgo parameters
    ebe01ca29 Add e2e tests for farm build
    989afd910 vendor c/{buildah,common}: appendable containers.conf strings, Part 1
    dd8f57a3b Add podman farm build command
    2e88d580a Add emulation package
    06b726497 Use buildah default isolation when working with podman play kube
    0a2aae119 docs(API): Fix compat network (dis-)connect
    1b466ccbd test/e2e: do not import buildah
    8a0968baa pkg/specgen: remove config_unsupported.go
    cb9dfeb8e pkg/parallel/ctr: add !remote tag
    d4a67cf45 pkg/domain/filters: add !remote tag
    9cecae8c2 pkg/ps: add !remote tag
    1d1630990 pkg/systemd/generate: add !remote tag
    bad25da92 libpod: add !remote tag
    abb5c86b6 pkg/autoupdate: add !remote tag
    01a750699 vendor latest c/common
    3615af903 libpod: remove build support non linux/freebsd
    1850670f1 Fix typo
    2e57746ff test/apiv2: adapt apiv2 test on cgroups v1 environment
    c3ba0221e ginkgo setup: retry cache pulls
    ee6070888 Support size option when creating tmpfs volumes
    8876380af not mounted layers should be reported as info not error
    85cc4092f CI: stop using registry.k8s.io
    a8e1a5ed1 fix(deps): update module github.com/vbatts/git-validation to v1.2.1
    6d99cb5cd test fixes for c/common tag chnages
    dfdd93323 vendor latest c/common
    d6f44d956 hyperV: Update lastUp time
    1ac110835 [CI:DOCS] Update dependency golangci/golangci-lint to v1.55.0
    9e648a1f5 lint: disable testifylint
    29273cda1 lint: fix warnings found by perfsprint
    64f43fed4 lint: fix warnings found by inamedparam
    c21f42a4e lint: fix warnings found by protogetter
    03947ab03 libpod: skip DBUS_SESSION_BUS_ADDRESS in conmon
    936e30f68 Use node hostname in kube play when hostNetwork=true
    bd953fdc7 cirrus setup: special-case perl unicode
    ca9efb0cd network: document ports and macvlan interaction
    f2bc63894 quadlet: document cgroupv2 requirement
    e8183e836 [skip-ci] Update actions/checkout digest to b4ffde6
    1d2589c3f Revert "Emergency workaround for CI breakage"
    f48a706ab remote: exec: do not leak session IDs on errors
    ad1ab71b8 fix(deps): update github.com/containers/storage digest to 79aa304
    d1086281b fix(deps): update module k8s.io/kubernetes to v1.28.3
    657029da7 System tests: fix broken silence127
    b72bb1162 Add TERM iff TERM not defined in container when podman exec -t
    44ed415b2 Emergency workaround for CI breakage
    d4d76479c Kill gvproxy when machine rm -f
    cad4d0ee9 Fix path for omvf vars on Darwin/arm64
    285718915 Allow systemd specifiers in User and Group Quadlet keys
    caef657c5 libpod: rename confusing import name
    efe5e98d0 use FindInitBinary() for init binary
    1d3ec78e0 vendor latest c/common
    fa19e1baa exec: do not leak session IDs on errors
    1efcd1ecf systests: cp test: lots of cleanup
    2d65e57ae Define better error message for container name conflicts with external storage.
    9b8e01efd Quadlet - support ImageName for .image files
    64171043a test/system: ignore 127 if it is the expected rc
    c65d1c02b test/apiv2/20-containers.at: fix NanoCPUs tests on cgroups v1
    831844b59 image history: fix walking layers
    ad5319025 fix(api): Ensure compatibality for network connect
    e0561301c [CI:DOCS] Add cross-build target info.
    dc705d370 machine set: document --rootful better
    bbd6281ec libpod: restart+userns cleanup netns correctly
    3b6a4ac37 Minor log and doc fixes
    f875ae317 Quadlet man page - discuss volume removal explicitly
    5d5facbd7 Quadlet - add support for KubeDownForce
    6ba67ba96 System Test - Quadlet kube oneshot
    9637fed2f Fix output of podman --remote top
    dcb421bc5 buildah-bud: test relative TMPDIR
    c8604081e Fix handling of --read-only-tmpfs flag
    1b0be2f34 Vendor common and buildah main
    5db3b753a remote,build: wire unsetlabels
    331e47acb test: build with TMPDIR as relative
    6cf3dd493 docs: add unsetlabel
    64ff14932 vendor: bump buildah to v1.32.1-0.20231012130144-244170240d85
    74ed1d6e7 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.6.2
    b9f2c4d17 fix: pull error response docker rest api compatibility
    29f5c563e Show client info even if remote connection fails
    52112fc5c fix(deps): update github.com/containers/libhvee digest to e51be96
    cb53bcf23 Run codespell
    987dc2b8b SetLock for all virt providers
    61e0b64b9 Machine: Teardown on init failure
    99a14332e healthcheck: make sure to always show health_status events
    7b84b55da Apply suggestions from code review
    ca518888e [CI:DOCS]rtd: implement v2 build file
    702f15528 Quadlet - support oneshot .kube files
    3cc9db862 libpod: fix deadlock while parallel container create
    2301320f6 fix(deps): update module golang.org/x/net to v0.17.0
    8b46e852e api: add `compatMode` paramenter to libpod's pull endpoint
    76fec1227 api: break out compat image pull
    40f897653 fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.3
    29ae51600 use sqlite as default database
    8a52e638e vendor latest c/common
    acd0a93c3 fix(deps): update module github.com/nxadm/tail to v1.4.11
    d18369ee8 Check for image with /libpod/containers/create
    8ac2aa793 container: always check if mountpoint is mounted
    787b1b25c fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.0
    9beb3a972 vendor: update c/storage
    36bf90518 api: drop debug statement
    d321d427d Quadlet - add support for global arguments
    732cec794 Add system test
    10aa39068 fix(deps): update module golang.org/x/tools to v0.14.0
    3fdb6ee2d Don't ignore containerfiles outside of build context
    b3209dc5d fix(deps): update github.com/containers/libhvee digest to fcf1cc2
    eda275820 fix(deps): update module golang.org/x/term to v0.13.0
    da6c86dfc Update module golang.org/x/sys to v0.13.0
    1c0780097 [CI:DOCS] Add updating version on podman.io to release process
    362eca669 containers.conf: add `privileged` field to containers table
    6cb10425d Implement secrets/credential scanning
    106abd13b Cirrus: Execute Windows podman-machine e2e tests
    338e4f590 vendor: bump c/storage
    8807243cc Update module golang.org/x/sync to v0.4.0
    2168f0745 [CI:DOCS] update swagger version on docs.podman.io
    0414f88b3 Create Qemu command wrapper
    df6a00026 Adjust to path name change for resolved unit
    2a38f30b6 Revert "Fix WSL systemd detection"
    f622a2a54 [CI:BUILD] rpm/copr: gvforwarder recommends for RHEL
    27f58803d [CI:DOCS] update kube play delete endpoint docs
    3fc7c42e1 [CI:DOCS] Remove dead link from README
    1b3cedbf3 test/system: --env-file test fixes
    617af9bea Revert "feat(env): support multiline in env-file"
    5f340487e Revert "docs(env-file): improve document description"
    9599589f1 Revert "fix(env): parsing --env incorrect in cli"
    7e6e26732 Filter health_check and exec events for logging in console
    0443c5166 inspect: ignore ENOENT during device lookup
    b576b7932 test, manifest: test push retry
    cbca39529 Fix locale issues with WSL version detection
    b988eadaf vendor: update module github.com/docker/distribution to v2.8.3+incompatible
    1ebd22303 vendor: bump c/common to v0.56.1-0.20231002091908-745eaa498509
    8b647cdb5 Update github.com/containers/libhvee digest to e9b1811
    cc946daff windows: Use prebuilt gvproxy/win-sshproxy binaries
    979c77f10 Volume create - fast exit when ignore is set and volume exists
    874e4466a Update golang.org/x/exp digest to 9212866
    22a1d015c Update github.com/opencontainers/runtime-spec digest to c0e9043
    229734c10 remove selinux tag as not needed anymore
    049a5fb92 [skip-ci] Improve podmansh(1)
    85ed9edde Build applehv for Intel Macs
    7ef8519f4 Revert "GHA Workflow: Faster discussion-locking"
    59e0919bc update vfkit vendored code
    17cebb3ff Add DefaultMode to kube play
    ba788c1bb Fix broken podman images filters
    9b3964111 Remove `c.ExtraFiles` line in machine
    f21c1d238 podman: run --replace prints only the new container id
    bcfd9f340 New machines should show Never as LastUp
    94818f594 podman machine: disable zincati update service
    b284128d7 Revert "cirrus setup: install en_US.UTF-8 locale"
    b28188de2 Cirrus: CI VM images w/ newer automation-library
    2b9c0555f CI VMs: bump to f39 + f38
    ecd7b3802 [CI:DOCS] Update podman load doc
    58b5ae22e Update mac installer to latest gvproxy release
    5b990c383 Fix WSL systemd detection
    be823b388 Add documentation for the vrf option on netavark
    fda028ca0 fix(deps): update github.com/containers/common digest to 9342cdd
    6306e8985 fix: typos in links, path and code example
    ccb7da52c e2e: ExitCleanly(): manual special cases
    611db19b3 e2e: ExitCleanly(): the final fron^Wcommit
    149d3f7ad [CI:DOCS] Add win-sshproxy target to winmake
    0d4526e61 wsl: enable machine init tests
    455d16549 Update docs/source/markdown/options/rdt-class.md
    bfbd0c896 move IntelRdtClosID to HostConfig
    4853320ce use default when user does not provide rdt-class
    77336de8f Add documentation for Intel RDT support
    24b2f829b Add test for Intel RDT support
    40d3c3b9b Add Intel RDT support
    295439265 [CI:DOCS] Fix podman form update --help examples
    f0eb45667 Quadlet container mount - support non key=val options
    0b5ea1e6e test/e2e: default to netavark
    4ed9dc1ad [skip-ci] Update dawidd6/action-send-mail action to v3.9.0
    48ea4b9ec fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.7.1
    90eb73629 fix(deps): update github.com/containers/common digest to 4619314
    172494423 applehv: enable machine tests for start
    2ff43429f applehv: machine tests for stop and rm
    127ebe2b2 Update machine tests README
    995a6a8ac Add podman socket info to machine inspect
    80952db0b Fix podman machine info test for hyperV
    7ade97210 libpod: pass entire environment to conmon
    e4b7455b7 e2e: ExitCleanly(): manual fixes to get tests working
    dbd946a93 e2e: ExitCleanly(): a few more
    59ffea80d FCOS+podman-next: correct GHA conditional syntax
    8bad842a4 pkg/machine/e2e: wsl stop
    217c4d546 wsl: machine tests for inspect
    e4bfcfc25 wsl: machine tests for ssh
    5636d0219 fix(deps): update github.com/containers/common digest to e18cda8
    a112ee895 wsl: machine start test
    d3d5011dc wsl machine tests: set
    cc4917d81 wsl: machine tests
    ec68a7489 Skip proxy test for hyperV
    33a92aa00 Enable machine e2e test for applehv
    65ce03486 hyperV: Respect rootful option on machine init
    52ba1bfff [CI:BUILD] FCOS image: enable nightly build
    ffd67cf75 e2e: use safe fedora-minimal image
    41e51f473 hyperv: machine e2e tests for set command
    59e295f2a podman build: correct default pull policy
    6293ec2e2 fix handling of static/volume dir
    26b5b1dd3 unbreak CI: useradd not found
    08936db35 hyperv: set more realistic starting state
    2bef573f3 hyperv: use StopWithForce with remove
    f52b02f40 Fix all ports exposed by kube play
    cd4f61181 Fix setting timezone on HyperV
    172369b54 fix(deps): update github.com/containers/gvisor-tap-vsock digest to 97028a6
    e0b44bcf3 Fix farm update to check for connections
    d8e305716 Adjust machine CPU tests
    8188a6fcf Bump version on main
    e65874903 [CI:BUILD] Packit: show SHORT_SHA in `podman --version` for COPR builds
    96142c2f7 Vendor c/common
    af2665c28 pod rm: do not log error if anonymous volume is still used
    4916f7d77 e2e: ExitCleanly(): manual fixes to get tests passing
    8e743fa1d e2e: ExitCleanly(): a few more
    c66aa3b7b fixes for pkg/machine/e2e on hyperv
    83b6975d1 test: fix rootless propagation test
    6c2493f78 [CI:BUILD] packit: tag @containers/packit-build team on copr build failures
    92f4dcb09 Enable disk resizing for applehv
    5b3801776 Various updates for hyperv and machine e2e tests
    682ca6b2e test: update fedoraMinimal version
    8d3010d06 specgen, rootless: fix mount of cgroup without a netns
    39ba5ff24 Automatically remove anonymous volumes when removing a container
    24d3347ed Use ActiveServiceDestination in ssh remoteConnectionUsername
    b6ea49f5a fix(deps): update github.com/containers/gvisor-tap-vsock digest to 9298405
    c69873d67 e2e: ExitCleanly(): generate_kube_test.go
    841cfa802 e2e: generate kube -> kube generate
    d1f86d524 e2e: ExitCleanly(): generate_kube_test.go
    f3e9a6369 windows cannot "do" extra files
    62e13bec7 e2e: ExitCleanly(): Fixes for breaking tests
    09c3ac48f play kube -> kube play
    e83ced8a0 e2e: ExitCleanly(): play_kube_test.go
    eb9283c6f introduce pkg/strongunits
    6d8b3047d Makefile equiv Powershell script
    4652a2623 pass --syslog to the cleanup process
    73dc72f80 vendor of containers/common
    1cbe692de fix --authfile auto-update test
    8e5adde0b compat API: speed up network list
    8c95aa402 Change priority for cli-flags for remotely operating Podman
    befdb4199 libpod: remove unused ContainerState() fucntion
    0ec63abca [CI:BUILD] Packit: Enable failure notifications for cockpit tests
    0ac98176b e2e: ExitCleanly(): more low-hanging fruit
    a50fb7e06 e2e: ExitCleanly(): more low-hanging fruit
    1908663f1 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.1
    38f5ead33 Enable machine e2e tests for WSL
    ff07abea4 systests: tighter checks for unwanted warnings
    618f846ed GHA Workflow: Faster discussion-locking
    289be0c01 [CI:BUILD] FCOS + podman-next image: pull in wasm
    649539519 [CI:BUILD] rpm: remove gvproxy subpackage
    b0f7072ac [CI:DOCS] Tweak podman to Podman in a few farm man pages
    8afffa1aa Docs on sig-proxy are wrong, we support TTY
    4fca726f7 e2e: ExitCleanly(): low-hanging fruit, part 2
    64c46c429 e2e: ExitCleanly(): low-hanging fruit, part 1
    113b41b6f Buildtag out unix commands for common OS files
    aec58f515 systests: clean up after tests; fix missing path in logs
    fa7150451 [CI:BUILD] followup PR for fcos with podman-next
    289e59ee1 Implement gvproxy networking using cmdline wrapper
    e68e37136 fix, test: rmi should work with images w/o layers
    e9b98510d vendor: bump c/common to v0.56.1-0.20230919073449-d1d9d38d8282
    50a685bd1 Quadlet Image test - rearrange test function
    e6cf09b68 e2e: continuing ExitCleanly() work: manual tweaks
    d78221545 e2e: continuing ExitCleanly() work
    47160da7a [CI:DOCS] Improve podman-tag man page
    ef553fb0d [CI:DOCS] Improve podman-build man page
    93dc30e1e [CI:DOCS] Include precheck to release process
    a80a908df [CI:DOCS] consistentize filter options in man pages
    55ca571e5 Quadlet - add support for .image units
    41beb5374 --env-host: use default from containers.conf
    0b7142f4a error when --module is specified on the command level
    deba3b80a man page crossrefs: add --filter autocompletes
    03dd5f256 Fix specification of unix:///run
    98e6dda69 Add label! filter and tests to containers and pods
    6f4f94137 Add test for legacy address without two slashes
    336055fe3 Use url with scheme and path for the unix address

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-01-04 02:52:53 +00:00
Bruce Ashfield
5587dd1535 podman: fix documentation build issues
podman commit dfec510b41b5 [go-md2man: use vendored-in version, not
system] removes the shell test for go-md2man, which means our native
executable is not found.

While we could export GOMD2MAN and point it to our sysroot version
(${RECIPE_SYSROOT_NATIVE}/usr/bin/go-md2man), we could run into the
issues with formatting that the podman commit is trying to avoid.

If we pass our build host architecture to the build, it will be
used and the executable created as part of the compilation.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-11-09 05:35:44 +00:00
Bruce Ashfield
d9af8d1514 podman: update to 4.7.1
Bumping libpod to version v4.7.1-6-g85b5f5723, which comprises the following commits:

    d1cb93d79 rtd: implement v2 build file
    8d045d4c9 Adjust to path name change for resolved unit
    eb5b5dbc8 Switch version to 4.7.2-dev
    ef83eeb9c New version: v4.7.1
    cc5acabf0 Update RELEASE_NOTES.md for v4.7.1
    456450438 compat API: speed up network list
    a2efda96d inspect: ignore ENOENT during device lookup
    f931f08a7 test/system: --env-file test fixes
    297a66c30 Revert "feat(env): support multiline in env-file"
    46a85e054 Revert "docs(env-file): improve document description"
    6afddf430 Revert "fix(env): parsing --env incorrect in cli"
    c5ca7e5fc [CI:DOCS] update swagger version on docs.podman.io
    51ee25d3f Fix locale issues with WSL version detection
    4d15c88a9 switch version to 4.7.1-dev
    073183fe1 Bump to v4.7.0
    44f727fb0 [CI:DOCS] v4.7.0 RELEASE_NOTES update
    2d32314d2 rpm: remove gvproxy subpackage
    a2697c028 packit: tag @containers/packit-build team on copr build failures
    54ce0ca7c specgen, rootless: fix mount of cgroup without a netns
    d2f9af717 pass --syslog to the cleanup process
    133e3a4f2 fix --authfile auto-update test
    2c62815e1 version: switch back from -rc1 to -dev
    7845dd175 New pre-release: v4.7.0-rc1
    49f76e95e [CI:DOCS] Update release notes for v4.7.0-rc1
    fa6f94001 Cirrus: Update operating branch
    0728a10c6 Move podman build opts to common file
    8a9f778e2 Add ability for machine rm -f for WSL
    919dce131 Plumbing to run machine tests with hyperv
    ade0c4932 CI: trace setup and runner scripts
    c37443e8b Bump to Buildah v1.32.0
    9b36f334d [CI:DOCS] bump release notes on main with the latest release
    cae110f8b fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc5
    4a2a423df Add --filter pod= autocompletion
    075cf2254 e2e: ExitCleanly(): manual test fixes
    db5adca73 e2e: continuing ExitCleanly(): just the replacements
    c689fb4a5 Fix some spelling and formatting
    522e0f43f Add support for Ulimit in quadlet
    b1e3e8d97 Run codespell on code
    6b7f718b4 wire in new buildah build options
    f9aba28ca make golangci-lint happy
    c1b6effac add !remote tag to pkg/specgen/generate
    3acee29cf pkg/specgen: do not depend on libimage for remote
    2c2299ad8 bump buildah to latest
    bf86ed72c [CI:DOCS] restart.md: migrate to container unit
    304b22729 fix(deps): update module k8s.io/kubernetes to v1.28.2
    4ed3273f6 Add support for PidsLimit in quadlet
    70560f916 Add DNS fields to Container and Network unit groups
    777b5efa4 [CI:DOCS] update API docs version list
    7b9114023 Try to fix broken CI (gvisor-something)
    df011f437 e2e: more ExitCleanly(): manual test fixes
    cb1cb338c e2e: more ExitCleanly(): dumb string replacements
    62ac96e12 e2e: create_test: use ExitCleanly()
    b0f77acd1 e2e: diff_test: use ExitCleanly()
    5920bfa2e The `podman init` command cannot modify containers.
    639a1a029 bump c/common to latest main
    806c5de12 Podmansh: use podmansh_timeout
    eefaa512a e2e: more ExitCleanly(): low-hanging fruit
    9b17d6cb0 vendor: update checkpointctl to v1.1.0
    cdcf18b86 kube: add DaemonSet support for generate
    75b4679a7 vendor of containers/(common, storage, image)
    19bd9b33d libpod: move oom_score_adj clamp to init
    4f017236e e2e: commit_test: use ExitCleanly()
    3a4be5e90 e2e: container_clone_test.go: use ExitCleanly()
    8cb14e54a e2e: use ExitCleanly() in cleanup_test.go
    925794c6a Ensure HC events fire after logs are written
    65a64da27 [CI:DOCS] podman-systemd.unit: fix equivalents
    d9a85466a Add support for kube TerminationGracePeriodSeconds
    5eb0a53a0 Update podman-kube-play.1.md.in
    c2cd93cdc Split up alt binaries to speed up build
    7bf9f302a Switch installer task to EC2
    fbbad0439 pod: fix duplicate volumes from containers.conf
    0c75eac63 tests: add test for pod cgroups
    b8f6a12d0 libpod: create the cgroup pod before containers
    331b3c216 cmd, specgen: allow cgroup resources without --infra
    83334fb4e specgen: allow --share-parent with --infra=false
    5de8f4aba libpod: allow cgroup path without infra container
    5121c9eb0 libpod: check if cgroup exists before creating it
    38209ef49 libpod: refactor platformMakePod signature
    627ac1c96 libpod: destroy pod cgroup on pod stop
    9a347619d utils: export MoveUnderCgroup
    556db46a6 libpod: refactor code to new function
    65bddfcd2 e2e: use ExitCleanly() in checkpoint tests
    479680232 [CI:DOCS]Remove use of --latest|-l from tutorial
    afeab39d1 CI test runner: upgrade tests rely on system tests
    59bd6a74a run --rmi: "cannot remove" is a warning, not an error
    70cf9740f StopContainer: display signal num when name unknown
    6f913f5f3 URGENT: fix broken CI
    b83485022 Add support for kube  securityContext\.procMount
    589867d71 podman: don't restart after kill
    2d7d8d1d1 Tmpfs should not be mounted noexec
    c2575f726 sys tests: run_podman: check for unwanted warnings/errors
    1211518e8 chore(deps): update dependency setuptools to ~=68.2.0
    465150f10 e2e: use ExitCleanly() in attach & build tests
    27495981c Some distros do not default to docker.io for shortname searches
    30abd7f1a security: accept empty capabilities list
    c32cfb1d0 systests: random_free_port: fix EADDRINUSE flake
    a5798e9f5 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.2.4
    dbfc3e7e0 Restrict fcos_test to amd64, arm64
    7b2fc5f8d fix(deps): update github.com/containers/libhvee digest to 56fb235
    0a913d578 fix(deps): update module github.com/docker/docker to v24.0.6+incompatible
    f9fd40221 fix(deps): update module golang.org/x/tools to v0.13.0
    71549c642 Ignore spurious container-removal errors
    e5bf0f96d fix(deps): update module golang.org/x/net to v0.15.0
    fdf694fcf systests: manifest zstd test: lots of tiny cleanups
    9730c0373 vendor: update github.com/opencontainers/runc to main
    e825bd5d5 [skip-ci] Update actions/checkout action to v4
    8b4a79a74 linux, rootless: clamp oom_score_adj if it is too low
    681b6db3f machine: increase max number of inotify instances
    302d15334 fix(deps): update module golang.org/x/term to v0.12.0
    f094884c1 Remove redundant nil checks in system connection remove
    17037af48 fix(deps): update module golang.org/x/text to v0.13.0
    1d51cd14a fix(deps): update module golang.org/x/sys to v0.12.0
    f542d21a7 fix(deps): update github.com/containers/libhvee digest to 2bf7930
    d4fedb288 docs(readme): fix a broken link
    50cd072bf [CI:BUILD] Podman FCOS image from main
    58a0b7ac8 Update golang.org/x/exp digest to d852ddb
    fe7bafb83 Add port forwarding and gvproxy machine test
    702709a91 libpod: do not parse --hostuser in base 8
    13342e503 fix: default typo
    3a6fc8d2b Add Japanese locale and translation of index
    39c5b7fac remove rh.container.bot@gmail.com
    a62abfe3d Tweaks and cleanups to prepare hyperv for CI
    a0738e7e6 system tests: housekeeping: various small fixes
    4082b67f6 CI: e2e: first use of new ExitCleanly() matcher
    6cbd17c0f CI: e2e: new ginkgo matcher, ExitCleanly()
    da1246d58 CI: e2e: fetch the standard system-test image
    d20b5869f kube play: fix pull policy
    18d35b612 Fix gidmap command in example
    e66c04c1f vendor containers/common@12405381ff
    b95ae3b4a manifest,push: support add_compression from containers.conf
    1085177fe hyperv ignition: use gvforwarder instead of vm
    2a8e6acec Set remote username earlier for hyperv
    26cefcbf9 Added an additional troubleshooting problem and solution
    a3c2d6ad2 Remove a dependency on libimage from pkg/bindings
    f1c24df4f Rename parameter in pkg/bindings
    259ab8594 Remove a dependency on libimage from pkg/api/handlers
    4cac1d3bc Don't re-inspect an image
    99834947d Cirrus: Remove multi-arch podman image builds
    91b8bc7f1 uid/gid mapping flags
    18c2a2be8 [DOC] Clarify default behaviour on uidmap
    60e3b5ef1 Update containers/common to latest
    fe3c4562f update libhvee
    1b45fd723 /_ping handler: return OSType http header
    2dbb0b096 e2e: fix race condition (kube play + logs)
    fe11db1e8 Update module github.com/vbauerster/mpb/v8 to v8.6.0
    7ef97fa49 Kube - support List documents
    346e5e52e kube down/play --replace: handle absent objects
    0938ee189 push, manifest-push: --force-compression must be true with --compression-format
    4b347609d oci: print stderr only after checking state
    461230c49 Updated docs to reflect pod spec sysctls support added in v4.6
    b8146a8a2 [CI:BUILD] Packit: Disable unexpected journal message check for cockpit-podman
    a6f2f5854 [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
    b6b300c79 Update machine init/set tests
    da81bc13a Add rootful status to machine inspect
    d3618719b Dedup and refactor image acquisition
    adf34cbd7 Share podman sock bindings with other WSL distros
    db95e678a Fix user-mode validation check
    d898ae7f9 system tests: try to fix sdnotify flakes
    ecf9f9fd8 Cirrus: Disable only hello multiarch build
    f32e954b8 Set StopTimeout for service-container started under podman kube play
    d2ec127c1 Set StopTimeout for compat API if not set by client
    6f284dbd4 podman exec should set umask to match container
    2c5c2d213 [CI:BUILD] Packit: run cockpit-podman tests in PRs
    52ed7fce2 Add infra-name annotations to kube gen/play
    a5f6a4a3b kube: notifyproxy: close once
    7a94f8c12 system service: unset NOTIFY_SOCKET
    638f994c2 Update module k8s.io/kubernetes to v1.28.1
    7c9c96981 API attach: return vnd.docker.multiplexed-stream header
    60e58f059 test/apiv2/60-auth.at: use `doesnotexists.podman.io`
    61dd7f80c e2e tests: use registry:2.8.2 (was 2.8)
    243f365aa create apiutils package
    c5b4eb943 api docs: document stream format
    70f77efef Revert "Remove `hello` multi-arch image build"
    82bd56be7 manifest-push: add support for --force-compression
    469ace091 push: add support for --force-compression
    202cc433a Update module github.com/onsi/ginkgo/v2 to v2.12.0
    7e0130f75 Remove `hello` multi-arch image build
    1b0e64a10 hack/perf/system-df.sh: add `df` benchmarks
    148d95d8d Expand env variables for cmds/entrypoint with format $(ENV)
    e092f887f vendor c/storage@6902c2d
    c416e4576 Ignore the resource limits on cgroups V1 rootless systems
    9e680cbc6 Fixups for stopping gvproxy
    21c9517b5 Revert "GHA: Closed issue/PR comment-lock test"
    f0e8e79c9 GHA: Closed issue/PR comment-lock test
    5477fd38a GHA: Add workflow to lock closed issues/PRs
    75ce47347 [CI:DOCS] update auto-update docs
    85d0df330 chore(deps): update dependency containers/automation_images to v20230816
    bc35e28c0 fix(deps): update module github.com/google/uuid to v1.3.1
    3d00744d2 libpod: sum per-interface network stats for FreeBSD
    5eee8825e Set default Umask for `podman kube play`
    ef8f4db81 [CI:BUILD] rpm: spdx compatible license field
    e9539768c chore(deps): update dependency golangci/golangci-lint to v1.54.2
    63a8926e9 Implement automatic port reassignment on Windows
    45ce4834a Add support for ramfs as well as tmpfs in volume mounts
    bdc304058 Validate current generation of WSL2 with user-mode-networking
    67756ac60 use container restart policy if user specifies one
    0772d8ddb Stop gvproxy on hyperv machine stop
    50136ea86 [CI:BUILD] rpm: depend on man-db
    36e09f18b Update machine list test
    8b2990131 Update machine start tests
    c3dbfa9a1 Update machine rm tests
    c726cf810 libpod: improve conmon error handling
    ed1f514d5 cirrus setup: install en_US.UTF-8 locale
    8f85aaf07 fixup "podman logs with non ASCII log tag" tests
    27b41f087 libpod: use /var/run instead of /run on FreeBSD
    9b4f1cdb9 cirrus/lib.sh: extend env to passthrough at start for locale work
    ff66f31dd libpod: correctly pass env so alternative locales work
    29c298856 cgroups_linux: use SessionBusPrivateNoAutoStartup
    362747cfa podmansh man page UID=$(id -u lockedu) is not allowed
    e38cf33a6 CI: systests: remove pasta ICMP tests
    7103fdb3f podman.1.md: Fix formatting of exit code 127, clarify wording of `exit code` example.
    896cab612 document available secret drivers
    53dd37cc4 pkg/specgen: add support for read-only root on FreeBSD
    d5841ed52 add --module flag
    6a3f09e8a Update dependency setuptools to ~=68.1.0
    1d5890bcd Add riscv64 architecture to the cross build target
    252f51de8 GetFcosArch add `riscv64` arch
    98e7d7af0 Update WSL backend to be compat with FCOS defaults
    9e14e3ebe enabled hyperv image downloads
    3e2e360b9 fix(deps): update module github.com/containers/ocicrypt to v1.1.8
    abd35d4d3 [CI:DOCS] Fix git build example in build page
    0c52d1004 CI: e2e manifest_test: use image from quay
    31dc42224 Cirrus: Remove EC2 experimental flag
    4c7546cb3 sphinx: skip options include dir
    345b9b029 Update rootfs.md: Fix formatting and wording of idmap option
    f33b01b73 fix: Docker API compatible bool deserialization
    4cb2d48ca Revert "compat,build: pull must accept string"
    68bd81470 Add missing verb in machinectl example
    78d6cd4c9 [CI:DOCS] Update Release Notes and Release Process
    b6349017a chore(deps): update dependency golangci/golangci-lint to v1.54.1
    4b80492bd fix podman top missing output flake
    5908999e6 New partial-line test is flaking
    555b4f930 [CI:BUILD] Packit: add back fedora-eln targets
    f0dac3677 Cirrus: Prune defunct job + fix noop alias
    1947f035c Bump bundled gvproxy to 0.7.0
    df28df1ae systests: tests for --env and --env-file
    bcebcad1f Update system connection add & remove
    310f971fc Add tests for podman farm
    dce3ef3c4 Add podman farm update command
    44a704dfc Add podman farm remove command
    59a8140f1 Add podman farm list command
    6fcdf1a19 Add podman farm create command
    1d5ef29f0 Add podman farm subcommand
    23d5b5008 CI: e2e: add delay before podman logs or journalctl
    2951316b2 Add completion for Farms
    b672ddc79 Vendor c/common changes
    3963c5639 chore(deps): update dependency golangci/golangci-lint to v1.54.0
    a55c2636d file logger: fix podman logs --tail with partial lines
    7ce654fea fix(env): parsing --env incorrect in cli
    4c4bc0922 Update docker.io/library/golang Docker tag to v1.21
    f55c48ad3 podman stop --cidfile missing --ignore
    7ef03517f Skip podman exec cannot be invoked on Debian
    95ceacefb Re-enable checkpoint test on Debian SID
    c193dbd94 Require a non-generic reason for non-Fedora skip
    d79e3a23d CI FIXME removal/update.
    5ec856652 Update dependency containers/automation_images to v20230807
    7988dd82c [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
    8a410784b [CI:DOCS] fixed couple typos in build docs
    282594e58 Stop timer in function waitPidStop
    7c0bccaf7 packit: Build PRs into default packit COPRs
    afaeedef7 Add support for host-gateway
    2de22ebf0 Ensure volumes-from mounts override image volumes
    03d7a5120 Minor: Include shasums in GHA workflow artifacts
    d63ac0652 Minor: Add important comment to windows GHA workflow
    9d7fe4e90 Minor: Update/fix dry-run input descriptions
    518daef72 [CI:DOCS] Quadlet - provide more information about network files
    819129b0d man-page xref: check for duplicate entries
    39641482c cp: close temporary file on error path
    018fdb48e Makefile: work around the lack of 'man -l' on FreeBSD
    0b7769fda Update module golang.org/x/net to v0.14.0
    ec5a9b9cc libpod: fix a crash in 'kube generate' on FreeBSD
    23c5890f2 remove temporary files when copy [NO NEW TESTS NEEDED]
    fab62f816 Update module golang.org/x/sys to v0.11.0
    b46d72fec [ci] Remove the podman socket in remove_packaged_podman_files()
    706c51b52 [ci] Correct the podman systemd file names
    dd4f47dd9 Always show RemoteSocket.Exists in json
    fc7c6efd3 Fail if ssh key exists
    69e883493 Fix regression for hyperv
    803a49da4 [CI:BUILD] Makefile: rpm target generates correct version
    1a63c1b23 Fix nits in #19480
    1e5453943 Add support for passing container stop timeout as -1 (infinite)
    d50054f1e pkg/specgen: Add device support for FreeBSD
    f5058f148 [CI:DOCS] man: remove duplicate entry .LastUp
    a8974d4a3 CI: e2e: remove useless test
    53d44a65e Check tty flag to set default terminal in Env
    62a22c5d6 Run codespell on code
    44f159ed3 Deprecate podman generate systemd
    346f9cb4e manifest/push: add support for --add-compression
    8ccda1ee8 [CI:DOCS]Update Release Notes
    b91599742 CI: sys: quadlet %T test: do not rely on journal
    4d69f0146 GHA: Support testing build/sign workflows
    15f35d354 Remove unnecessary backslashes
    18e75daa5 [docs] Use code blocks for commands in podman-completion
    f3ebd798c Make podman run --rmi automatically set --rm
    8b7701f52 machine: QEMU: recover from failed start
    49b8b971a vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
    bfd2a8cad secret: add support for `--ignore` with rm
    21ebe0e90 Move `writeConfig` logic to shared function
    597ccff0b Move some logic of `setRootful` to a common file
    98cf8462a move `removeFilesAndConnections` to a common file
    75a8f13c4 Move `waitAPIAndPrintInfo` to common file
    55c7b5cec Move `addSSHConnectionsToPodmanSocket` code to shared file
    0489d3aa6 Update module golang.org/x/net to v0.13.0
    d74c225f4 chore(deps): update dependency containers/automation_images to v20230726
    27d79e1fc Skip pasta local forwarder test on debian SID
    b69cd8d84 Skip broken/flaky blkio-weight test
    822f2f495 Skip tarball re-inport test in rawhide for CI
    851cd9cca Cleanup CIDFile on podman-remote run --rm command
    a237c3f46 CI: e2e: remove workaround for missing login file
    42ad0c6e7 vendor: bump c/image and c/common
    5b7dce8a3 Add support for confined users
    78b850c48 Cirrus: Temp. disable rawhide validation task
    def70012b Limit git-validation to 'short-subject'
    33b8c451e Fix up man page and add test on globs
    850482b31 Move alternate image acquisition to separate function
    906af5bbc Move `getDevNullFiles` into a common file
    89f1fdc7f Update github.com/digitalocean/go-qemu digest to 2e3d018
    d6847b19c Convert QEMU functions to methods with documentation
    6930f39a6 Update docs/source/markdown/podman-build.1.md.in
    e1114f03c do not redefine gobuild for eln
    39341f283 Set default userns from containers.conf file
    4f1f88d7c Mention TimeoutStartSec in quadlet man page
    ada71889c inspect with network=none show SandboxKey netns path
    93f4cc1b5 [CI:DOCS] GHA: Use stable go for Mac/Win builds
    ff7d287fc Breakup AppleHV machine funcs
    64873e322 Codespell fixups
    acbe7703f Update docs/source/markdown/podman-stats.1.md.in
    0b7157e3b CI: e2e: reenable containerized checkpoint tests
    c67ef7c1a docs(env-file): improve document description
    4ee31dc37 Don't log EOF error when using podman --remote build with an empty context directory.
    f2794f9a8 API: kill: return 409 on invalid state
    170a78631 feat(env): support multiline in env-file
    19deb6a34 Adds documentation to new functions that were added
    481143e58 `startHostNetworking`: get DevNull files
    13da82466 `Remove`: remove network and ready sockets from registry
    d896431b2 `Remove`: remove files and connections
    32265e1f6 `Remove`: collect files to destroy
    381b103dd `Init`: read and split ign file
    aa6827a67 `Init`: write ign config
    cc30639d7 `Init`: add network and registry socks to registry
    78d3b549c `Init`: add SSH conns to podman sock
    630e7ba39 Improve the description of fields in podman-stats man page
    22a8b6886 make /dev & /dev/shm read/only when --read-only --read-only-tmpfs=false
    663fe9446 Mention no comment lines in Containerfile.in podman-build man page
    e973d15c3 [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
    837bc2568 Fix HyperV loadMachineFromJSON function name
    416a471ee machine: QEMU: lock VM on stop/rm/set
    bb57c1631 libpod: add 'pod top' support on FreeBSD
    f592c33fb [CI:DOCS] Build and Sign Mac Pkginstaller
    f540bbffa Make sure users changes --authfile before checking
    8757fe88a github: add issue type as link to podman github discussions
    3523b9b05 Break QEMU `config.go` code into its own functions
    c341a0ffe machine: QEMU: lock VM on start
    afe8d5d84 libpod: fix 'podman kube generate' on FreeBSD
    0fefcf8a4 Add glob support to podman run/create --mount
    d6815da8c kube: add DaemonSet support
    239a5b64a Fix artifacts script after removal of msitools msi build
    e335a66a9 System tests: quadlet: fix race in %T test
    d6a32a3da If quadlets have same name, only use first
    db0ba9b25 Add support for mounts listed in containers.conf
    6dda21984 Update vendor of containers/common
    33891e8e9 System tests: add test tags
    5ba055937 [CI:DOCS] socket_activation.md: increase socat timeout
    dfec510b4 go-md2man: use vendored-in version, not system
    a92bb3219 CI: use different TMPDIR on prior-fedora
    6894e2031 system tests: authfile-exists: minor cleanup
    d70f15cc0 start(): don't defer event
    de122bb44 Fix: use --all in podman stats to get all containers stats
    349d775de Verify authfile exists if user specifies it
    e0ef23955 libpod: don't generate errors for createTimer etc.
    0cfd12786 add "healthy" sdnotify policy
    cbc96a7b4 Remove LICENSE and general doc files that are installed by the main package
    37f0e9620 Add missing `
    2f21df7b3 Remove legacy msitools based msi installer
    ac212605c Remove any quotes around distribution id
    e596b17fb add a podman-compose command
    eee2817de pkg/specgen: Don't crash for device spec with...
    d2796c6c1 fix(deps): update module github.com/docker/docker to v24.0.5+incompatible
    f4fbd6fd0 Update vendor of containers/(storage,image)
    d4fc66af9 Clean up /var/tmp/ when using oci-archives when creating  containers
    49257a3c5 [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
    b57091ac9 Reduce qemu machine function sizes
    baf30e612 [CI:DOCS] migrate socket_activation.md to quadlet
    7314569cb [CI:DOCS] Update kube play volume support
    b5ce0ab2d Fix language, typos and markdown layout
    cb5450af7 [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet debug
    0bb73bf55 Add note on debugging quadlet unit files
    d4cfc498d Remove unnecessary use of the word "please".
    a6a207673 libpod: fix FreeBSD 'podman-remote top' default behaviour
    709beb6c0 fix(deps): update module github.com/onsi/gomega to v1.27.9
    3e534eff9 Add support for ShmSize to quadlet
    4b9f670ca Quadlet system test - force journald log driver for short lived containers
    731bd7d94 fix(deps): update module github.com/containers/libhvee to v0.4.0
    413552e10 quadlet recursively scan for unit files
    ce736413b Ensure that we appropriately warn that TCP is insecure
    558a70262 systests: quadlet: fixes for RHEL8
    8d190704a Quadlet - Allow setting Service WorkingDirectory for Kube units
    24bf6fc24 Quadlet system test - do not rely on journalctl in kube file tests
    3d6bc2f86 Fix markdown in docs for podman-network-create
    11ffea313 Man pages: check for corrupt tables
    1d14bb7a8 quadlet systest: fix broken tmpdir references
    e55e128fc Add `since` as valid filter option for `volume` subcommands
    6df17332b Podmansh: Better error, increase timeout to 30s
    96241159a Fix multiple filter options logic for `podman volume ls `
    00a5b0709 Add bash-completion for podman inspect
    3b6343202 Fix windows installer
    d7e25e14a Add missing reserved annotation support to `play`
    d2862c7dd Avoid progress hang with empty files
    5c0912b07 Revert the usage of `home.GetConfigHome()`
    5aa52659b Fix bug report issue template README link
    47997857f Replace error check for non-existent file
    8febb6aa1 Emergency gating-test fixes for RHEL8
    d8d600b1d Add progress bar for decompress image
    46058cfed refactor: move progressbar to a function
    ca9874ab7 Use pkg/homedir to get the home config directory
    7fb17ae78 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
    a224ff731 Should be checking tmpfs versus type not source
    9e60f3ec5 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
    b4ffbcdfd Enabled arm64 arch for podman applehv provider
    4e4078dbb [CI:BUILD] Packit: remove pre-sync action
    d0602e8f7 Add `--podman-only` flag to `podman generate kube`
    13a950016 Update vendor containers/(common, buildah, image, storage)
    f256f4f95 Use constants for mount types
    310a8f103 libpod: use define.TypeBind when resolving container paths
    1e9410094 Tests: remove/update obsolete skips
    a3bbc3a2c Fix trust not using local policy file
    0997cf012 Fix `podman container prune` docs for `--filter`
    a8d8c9497 Add more tests for liveness probes with default hostname & named ports
    383d683f8 docs: podman-build --network add slirp and pasta
    5e64cbf35 docs: podman run --network mention comma separted names
    1443e2918 Podman machine AppleHV pass number 3
    315a7887a Makefile: `package` -> `rpm`
    85d936133 network create: document --internal better
    e43127e0b pkg/specgen: fix support for --rootfs on FreeBSD
    8c16322a8 machine start: qemu: wait for SSH readiness
    12dc546fc [CI:BUILD] Packit: downstream task action fix
    2b2c4453f Fix container errors not being sent via pod removal API
    6ec261e7a Add missing return after utils.InternalServerError()
    d1950869a Update cmd/podman/login.go
    cce8501a5 [CI:DOCS] Reformat and reorder table with --userns options
    d497eb369 Add secret support to podman login
    2a9b9bb53 netavark: macvlan networks keep custom nameservers
    c6b5b9a02 remote: fix podman-remote play kube --userns
    441af003a fix(deps): update container-device-interface to v0.6.0
    656ad760f go mod: no longer use 1.18
    aeef403cd fix(deps): update module github.com/containers/libhvee to v0.3.0
    6fd4ae6d2 chore(deps): update module github.com/gin-gonic/gin to v1.9.1 [security]
    0dcfe6e06 Run codespell on code
    3ad55f48b system service: unset listen fds on tcp
    f1c68b79e add hostname to network alias
    b6ec2127b libpod: set cid network alias in setupContainer()
    4e96686e9 AppleHV enablement pass #2
    72a1857e4 e2e: Fetch the correct user name
    7b54fd84e Add `--no-trunc` flag to maintain original annotation length
    600de05e3 Fix TCP probes when the optional host field is not given
    ac3a115c3 Add support for using port names in Kubernetes health probes
    4494cefbc Fix: cgroup is not set: internal libpod error after os reboot
    932fae402 Allow setting volume and network names in Quadlet
    427b959a1 pasta tests: automatically determine test parameters
    97fd03ccd test/e2e: wait for socket
    a69194b02 manifest inspect: support authentication
    70428baef api: fix slow version endpoint
    f8213a6d5 libpod: don't make a broken symlink for /etc/mtab on FreeBSD
    499b8d13c CI: remove build without cgo task
    42ea0bf9c libpod: use io.Writer vs io.WriteCloser for attach streams
    597ebeb60 top: do not depend on ps(1) in container
    3f8ee70d0 make --syslog errors non fatal
    dbec2b5aa api: fix doc for default ps_args
    1b7eb44d3 Fixes typo in the path where quadlet looks for files
    efefd8cf5 Add --replace flag to podman secret create
    eec438222 [CI:DOCS] uidmap man pages: fix corrupt italics
    8d24e2838 [skip-ci] Update github/issue-labeler action to v3.2
    f9077689e [CI:DOCS] podman-system-service.1.md: document systemd usage
    dd16661b1 fix(deps): update module github.com/docker/docker to v24.0.4+incompatible
    65136521e fix(deps): update module github.com/docker/docker to v24.0.3+incompatible
    fa654e985 Use bytes size consistently instead of human size
    dee94ea69 bugfix: do not try to parse empty ranges
    9e4045768 [CI:BUILD] Packit: fix pre-sync action for downstream tasks
    531fb21d0 fix(deps): update module golang.org/x/tools to v0.11.0
    ab2fa45ad fix(deps): update module golang.org/x/net to v0.12.0
    459b1578c fix(deps): update module golang.org/x/term to v0.10.0
    99f93d55c e2e: fix two toolbox flakes
    fc5aa9c9c test/e2e: use GinkgoT().TempDir() over MkdirTemp()
    ea8992cb4 test/e2e: use random ImageCacheDir
    17a06d343 test/e2e: remove RHEL7 workaround
    bc22aefce test/e2e: remove unnecessary code in SynchronizedAfterSuite
    ff7790038 test/e2e: do not use /tmp for podman commands
    db7cb1dbf test/tools: vendor ginkgo v2.11
    c20612bab test/e2e: write timings directly to file
    a0b765552 machine start: qemu: adjust backoffs
    d874790bc auto update: fix usage of --authfile
    ba1355b23 system tests: refactor registry code
    94b321337 fix(deps): update module golang.org/x/text to v0.11.0
    644f7cd9b pkg/specgen: properly identify image OS on FreeBSD
    a3a62275c libpod: use new libcontainer BlockIO constructors
    2d68c3add [CI:BUILD] Minor: Don't confuse osx-debugging
    5aabc5088 [CI:DOCS] Better document the default value of --userns
    e4644c3cb Cirrus: build FreeBSD binaries in a VM
    92fc0f481 Makefile: add support for building freebsd release tarballs
    4a5396b46 [CI:DOCS] uidmap man pages: fix corrupt tables
    5a8e092a2 fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
    d0359fcca fix(deps): update module github.com/containers/buildah to v1.31.0
    300eb36b4 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc4
    94e59bd2f Use /proc/self/gid_map as intended, not uid_map
    a16488f89 fix(command): ignore `--format` in `podman search --list-tags`
    9fb2f8e10 podman machine start: fix ready service
    8408ad498 Makefile: don't rely on the non-standard -r flag for ln
    39624473b pasta: Create /etc/hosts entries for pods using pasta networking
    fe0de8b9f fix(deps): update module github.com/containers/libhvee to v0.2.0
    2393fe453 pasta tests: add sanity check for test name vs function
    4da3e47b6 pasta tests: cleanup + 1 new test
    43b9426fc cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
    e3f2a97d1 cmd/podman/system: add API server support on FreeBSD
    0d7da5c0b [CI:DOCS] Document support of pod security context IDs
    f64a1a1cc rootless: use default_rootless_network_cmd config
    e4efd709d Revert^3 "pasta: Use two connections instead of three in TCP range forward tests"
    17cd5aecb pasta: Workaround occasional socat failures in CI
    13c7d05cc pasta: Remove some leftover code from pasta bats tests
    bc58dae36 Bump c/image to v5.26.0, c/common 0.54.0
    2cb549339 fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.3
    bf60bb073 Display secret to user in inpspect
    448e01566 [CI:BUILD] RPM: Fix koji and ELN issues
    8fb719a9e e2e: systemd test: major fixes
    865d77e94 pkg/specgen: add support for 'podman run --init' on FreeBSD
    74b4615aa Bump version after v4.6 branch cut
    b6e636cbe Remove 'inspecting object' from inspect errors
    fe8355be7 pasta: Fix pasta tests to work on hosts with multiple interfaces
    d15cca024 [CI:DOCS] fix command incorrect in windows
    bcb89fc8b Fix readonly=false failure
    609c47ae6 pkg/specgen: Add support for Linux emulation on FreeBSD
    cf9ebcddf Fix up podmansh man page
    05eb3e6f1 Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
    f5cc0487e Fixes for vendoring Buildah
    0f4c86e26 vendor in latest buildah
    6eaf8a271 tests: fix "Storing signatures" check
    b80fd54a5 update c/image and c/storage to latest
    eeb7aeb49 Kube quadlets can support autoupdate as well as containers
    2160a114c debug tail 800 lines flake
    dd81f7ac6 Pass in correct cwd value for hooks exe
    227c07aeb specgen: honor --device-cgroup-rule with a new user namespace
    0220f3338 specgen, rootless: raise error with --device-cgroup-rule
    db37d66cd make image listing more resilient
    17a18b16c Update module google.golang.org/protobuf to v1.31.0
    bc5269f18 Trim whitespace from unit files while parsing
    516034215 Re-organize hypervisor implementations
    ba3da15e0 play.go: remove volumes on down -f

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-11-06 16:21:12 +00:00
Bruce Ashfield
77fc0a2613 podman: mark incompatible with mips
Some of the (current) rdepends for skopeo are not compatible with
mips.

To make this restriction more obvious, we also mark skopeo itself
incompatible with mips.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-09-28 01:25:29 +00:00
Bruce Ashfield
08435d20b1 recipes/classes/scripts: Drop SRCPV usage
bitbake has been enhanced such that SRCPV is no longer needed in
PV to handle updating git hashes and task signatures.

We can simplify our PV by dropping SRCPV

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-24 01:38:21 +00:00
Bruce Ashfield
a03c4f5845 podman: introduce README for testing/configuration
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-24 01:38:21 +00:00
Bruce Ashfield
ba6e5e9db1 podman: update to 4.6.0
Bumping libpod to version v4.6.0-14-g2215847e6, which comprises the following commits:

    f05f00717 do not redefine gobuild for eln
    45fd917fa [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
    8ee1f1197 [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora >= 38
    5831bd68b System tests: add test tags
    954177e7e API: kill: return 409 on invalid state
    e4e983e7a Mention TimeoutStartSec in quadlet man page
    d68ee576e If quadlets have same name, only use first
    94431182b Bump to v4.6.1-dev
    38e6fab96 Bump to v4.6.0
    8aec5997e Update release notes for v4.6.0
    09b1da382 Ensure that we appropriately warn that TCP is insecure
    0115a4800 CI: remove build without cgo task
    598ebe8a1 libpod: use io.Writer vs io.WriteCloser for attach streams
    574b78291 top: do not depend on ps(1) in container
    255111269 api: fix doc for default ps_args
    34274ce15 Add more tests for liveness probes with default hostname & named ports
    48deafc64 Fix TCP probes when the optional host field is not given
    6817e0ae3 Add support for using port names in Kubernetes health probes
    5445bd6f0 [CI:DOCS] fix command incorrect in windows
    50195c244 [CI:DOCS] Reformat and reorder table with --userns options
    924bc7055 [CI:DOCS] Better document the default value of --userns
    e4c38e719 Add missing return after utils.InternalServerError()
    7a4bd4c95 Fix markdown in docs for podman-network-create
    7cbe41212 Fix multiple filter options logic for `podman volume ls `
    5ea019419 Should be checking tmpfs versus type not source
    b4859d283 Use constants for mount types
    39b7ac99d Fix `podman container prune` docs for `--filter`
    7ba306ec6 docs: podman-build --network add slirp and pasta
    c810420c8 docs: podman run --network mention comma separted names
    2c970dd01 network create: document --internal better
    5106b7a38 pkg/specgen: fix support for --rootfs on FreeBSD
    41f809e3e systests: quadlet: fixes for RHEL8
    061841c0c Fix windows installer
    8f05405db Podmansh: Better error, increase timeout to 30s
    2b683a400 Emergency gating-test fixes for RHEL8
    d0dee61e7 Packit: remove pre-sync action
    70e30a2be [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
    b8ef289e3 Bump to v4.6.0-dev
    bfe2e0fca Bump to v4.6.0-rc2
    145748d1f Makefile: `package` -> `rpm`
    be21bc082 Update release notes
    8fffcf4d6 system tests: refactor registry code
    624bb8350 machine start: qemu: wait for SSH readiness
    732a02c57 machine start: qemu: adjust backoffs
    afe48ba36 auto update: fix usage of --authfile
    24439cdd2 [CI:BUILD] Packit: downstream task action fix
    7b3d47c3b Fix container errors not being sent via pod removal API
    9d0470f12 netavark: macvlan networks keep custom nameservers
    5583358f6 add hostname to network alias
    2aea98cab libpod: set cid network alias in setupContainer()
    d0b0c6285 Fix: cgroup is not set: internal libpod error after os reboot
    258135221 test/e2e: wait for socket
    a3a62854f api: fix slow version endpoint
    28e92b9de manifest inspect: support authentication
    e354514dc libpod: don't make a broken symlink for /etc/mtab on FreeBSD
    c81a00101 make --syslog errors non fatal
    edc51d9ff Fixes typo in the path where quadlet looks for files
    a673bb23e [CI:DOCS] uidmap man pages: fix corrupt italics
    dd7dbb826 [CI:DOCS] podman-system-service.1.md: document systemd usage
    a312553fc Use bytes size consistently instead of human size
    2ef2a671e bugfix: do not try to parse empty ranges
    662cca7cc pkg/specgen: properly identify image OS on FreeBSD
    cf5c4c9ee [CI:DOCS] Document support of pod security context IDs
    c8cfcc253 pkg/specgen: add support for 'podman run --init' on FreeBSD
    fc8f229bd Remove 'inspecting object' from inspect errors
    ee6329374 Fix readonly=false failure
    a3598ff61 pkg/specgen: Add support for Linux emulation on FreeBSD
    e30197e6f Fix up podmansh man page
    47e6ce19c Pass in correct cwd value for hooks exe
    f654f7cc7 specgen: honor --device-cgroup-rule with a new user namespace
    fcf673d5d specgen, rootless: raise error with --device-cgroup-rule
    f70189991 make image listing more resilient
    62fc35c07 Trim whitespace from unit files while parsing
    ed5618759 play.go: remove volumes on down -f
    04897ee64 Vendor c/common v0.55.2
    ff71df0e8 system service: unset listen fds on tcp
    6960a8183 [CI:DOCS] [Release Notes]: add static routes
    e4cf2afbc [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
    c422072b6 [CI:DOCS] uidmap man pages: fix corrupt tables

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-24 01:38:21 +00:00
Bruce Ashfield
2a4b72b3a2 podman: update to 4.6
Bumping libpod to version v4.6.0-rc1-6-g932b8a997, which comprises the following commits:

    c422072b6 [CI:DOCS] uidmap man pages: fix corrupt tables
    7680e5013 libpod: use new libcontainer BlockIO constructors
    829b3e9b3 Bump to v4.6.0-dev
    4d59a0f5c Bump to v4.6.0-rc1
    e4a7923ca Bump to v4.6.1-dev
    c756b24f4 Bump to v4.6.0
    2e53a5083 Release notes for v4.6.0
    727362bde Update Release Notes for v4.5.1
    8f2b73b03 rootless: use default_rootless_network_cmd config
    3bd4c6a10 tests: fix "Storing signatures" check
    d5e8cc1d1 Fixes for vendoring Buildah
    2203f2aa9 Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
    a306eb5f6 Do not use deprecated hook functions from c/common
    bf36f1139 Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
    a64016e17 pasta: Remove some leftover code from pasta bats tests
    6feb179f4 pasta: Fix pasta tests to work on hosts with multiple interfaces
    9cc19b055 fix(command): ignore `--format` in `podman search --list-tags`
    714c3fe72 Use /proc/self/gid_map as intended, not uid_map
    d29e33650 podman machine start: fix ready service
    1a1602b72 Makefile: don't rely on the non-standard -r flag for ln
    db91ce788 cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
    82a4b0816 cmd/podman/system: add API server support on FreeBSD
    2f25372de pasta: Create /etc/hosts entries for pods using pasta networking
    9555446d3 RPM: Fix koji and ELN issues
    0749d685a Cirrus: Update operating branch
    dde6bcbca system tests: add and use _prefetch
    0ee19f08c pkg/api: BufferedResponseWriter flush correctly
    d0505d6ba pkg/api: top return error to client
    1398cbce8 container wait: support health states
    b680daa2d [CI:DOCS] Fix example on PublishPort
    811867249 container wait API: use string slice instead of state slice
    64153ace0 podman wait: update man page
    a699ed0eb StopContainer(): ignore one more conmon warning
    bd69b151f run,create: modify `--env-merge` behavior for non-existent vars
    614c962c2 use libnetwork/slirp4netns from c/common
    180cf0cf1 update c/common to latest
    d0af5df89 e2e: use parallel-safe /dev subdirectories
    aeff58e0b [CI:BUILD] Help Renovate manage the golangci-lint version
    00292ae1c systests: test instrumentation
    63dfe842b compat API create/pull: fix error handling
    d54541894 compat API push: fix error handling
    26721b0a0 GetSafeIPAddress(): discourage its use
    810c97bd8 libpod: write /etc/{hosts,resolv.conf} once
    13db83a00 e2e: fix one of the many log flakes
    bb932cc84 cmd, push: expose --compression-level
    459248337 vendor: bump containers/common
    f4c514bff compat API container create: handle platform parameter
    04a1cdfa9 refactor(machine): remove hard code
    ae6e39076 vendor in latests containers/common
    81e63227e fix(machine): throw `connect: connection refused` after set proxy
    ec0924c6d [CI:BUILD] Packit: cleanups
    65e5d2773 Add console mode to podman machine
    ddcefc9b9 e2e: kube test: specify expected exit code
    574e00d32 e2e --authfile test: fix test condition
    f8f337501 chore(deps): update dependency setuptools to v68
    84e42877a make lint: re-enable revive
    aa453c4f1 make lint: re-enable ginkgolinter
    2efa7c3fa make lint: enable rowserrcheck
    f07aa1bfd make lint: enable wastedassign
    60a5a5947 make lint: enable mirror
    a35da3ad8 bump golangci-lint to v1.53.3
    47e0557d5 auto update: restart instead of stop+start
    acb5f97f9 cmd/podman/root.go: fix help document issue of the image store
    e5399aaf3 vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
    3829fbd35 podman: add support for splitting imagestore
    e29274853 network create --ip-range allow for custom range
    c2360800e fix(ssh): start machine failed to start with exit status 255
    ed24f0b2c remote wait: fix "removed" condition
    8d036906a [CI:DOCS] Fix service_destinations description in podman man page
    bfe61af6d quadlet should exit non zero on failures
    91fc435cb fix(deps): update module golang.org/x/tools to v0.10.0
    ef42f54ac e2e: GetSafeIPAddress() replaces GetRandomIPAddress
    5ffbfd937 pasta: use code from c/common
    479677cb6 Add support for setting autoupdate in quadlet
    3efaffae4 New command: podmansh
    67674b3a6 vendor: update c/common to latest
    bdc2e8165 Add quadlet container support for Mask,Umask options
    13c2aca21 libpod: make conmon always log to syslog
    0ecc0d9e1 Document how to get secret mounts working on RHEL8
    c28a43efd Verify podman pull dup image only prints id once
    d464e1d4f Vendor in latests containers/common
    741ad0b4f Apply suggestions from code review
    f31466e74 Revert "rootlessport: exclude storage drivers via build tags"
    8a90765b9 filters: use new FilterID function from c/common
    de494eb05 logformatter: ignore 'TOP-LEVEL' headings
    63f5116ad test/e2e: fix network ID test
    8c48f97c9 update c/{common,image,storage} to latest
    354b8e20b [CI:DOCS] clarify supported transports in manifest push
    aa7a4219e [CI:DOCS] podman-push: rm confusion on supported transports
    c0ab29313 container wait: indicate timeout in error
    af7555e0d network-create: document new bclim option
    7d2f722ef fix(deps): update module golang.org/x/text to v0.10.0
    6f821634a libpod: Podman info output more network information
    d0e2428fb fix(deps): update module golang.org/x/term to v0.9.0
    ac0ba2c2c quadlet: adjust container unit documentation
    837b47244 e2e: GetRandomIPAddress(): parallelize
    676c4d4e8 Makefile: add support for 'make help' on FreeBSD
    ab502fc5c criu: return error when checking for min version
    16092930c Update docs/source/markdown/podman-systemd.unit.5.md
    faa2689dc 250-systemd.bats: remove outdated comment
    0714321de github: add issue type as link to podman-desktop
    a66bab340 Add WorkingDir support to quadlet
    ebf747474 rootlessport: exclude storage drivers via build tags
    8bf168cc1 Add ability to set static routes
    68183b07d test/upgrade: correctly share mounts between host and container
    444f19cb2 Update common, image, and storage deps
    ec6b7dbd9 Fix system service manpage name in API Documentation
    d734fcbff style(specgen): omit nil check
    53834ef0d fix(specgen): index out of range when unmask=[]
    71cae3159 Makefile to force a shell when running command
    02432fc69 cirrus,ci: default to overlay for debian env
    b37f74b73 Quadlet: Add support for --sysctl flag
    44ec044c4 chore(deps): update dependency requests-mock to ~=1.11.0
    2ebc9004f Ignore spurious warnings when killing containers
    7832879bf Makefile: don't hard-code the path for bash
    de4b383ef fix(deps): update module github.com/burntsushi/toml to v1.3.2
    a7271f9dd GHA: Fix bad job-names & links in monitoring emails
    6a696cb8f podman-registry: simpler, safer invocations
    f1ecdca4b Ensure our mutexes handle recursive locking properly
    310082444 Fix an expected error message from pod removal
    a750cd987 Fix a race removing multiple containers in the same pod
    0e47465e4 Discard errors when a pod is already removed
    398e48a24 Change Inherit to use a pointer to a container
    b65ba90df e2e: add ginkgo decorators to address flakes
    992093ae9 filters: better handling of id=
    7bdbbd0ce fix(deps): update module github.com/onsi/gomega to v1.27.8
    c7a8d29f1 refactor: improve get ssh path duplicate code
    137c8ef4d logformatter: better recognition of ginkgo test names
    944673c88 Address review feedback and add manpage notes
    3b79f241b Add support for SecurityLabelNested flag in quadlet
    a1c1d8d0a fix(deps): update module github.com/burntsushi/toml to v1.3.1
    4fda7936c `system locks` now reports held locks
    92309d917 fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
    0948c078c Add a new hidden command, podman system locks
    1013696ad Add number of free locks to `podman info`
    3b39eb133 Include lock number in pod/container/volume inspect
    1ce53677a fix ignition config creation
    4584350f6 Makefile binaries target adopted for Mac and Win
    e93b1f997 fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
    c51c6675e logformatter: proper status color for failed tests
    cf9bc25bb pasta: Test handling of unknown protocols
    b2c000670 pasta: Correct handling of unknown protocols
    6611735ae Quadlet - add support for Pull key in .container
    5b629e9c4 fix(deps): update module github.com/sirupsen/logrus to v1.9.3
    d68121a60 Add default ulimit test for gen kube
    81d64547f feat: add insecure registry troubleshooting solution
    1768bf150 fix(deps): update module golang.org/x/tools to v0.9.3
    7e550f78e fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
    28934897e e2e: GetPort(): safer allocation of random ports
    2c9f18182 The removeContainer function now accepts a struct
    4e6efbbbb Revert "test/e2e: fix "podman run ipcns ipcmk container test""
    b75ff3a8f Add a test for removing dependencies with rm -fa
    bafb3d6cc Revert "ginkgo-v2 cleanup workaround for #18180"
    ef1a22cde Fix a deadlock when removing pods
    8cb5d39d4 Pods now return what containers were removed with them
    bc1a31ce6 Make RemoveContainer return containers and pods removed
    e8d745627 Add an API for removing a container and dependencies
    543b80949 systests: fixes for coping with extra systemd image
    34c258b41 libpod: fix timezone handling
    22424eb5d fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
    7987d2ee0 fix(deps): update module golang.org/x/tools to v0.9.2
    4173f942f test/system: quadlet use correct systemd restart policy
    0372bf4bd systests: minimize race-condition window
    1a34e1f85 systests: fix improper backgrounding of run_podman
    f09772889 set max ulimits for rootless on each start
    5c7d50f08 Fix: display online_cpus in compat REST API
    bd62119f3 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
    72d4cede2 systests: fix race in quadlet tests
    f48fa1113 fix(deps): update module github.com/burntsushi/toml to v1.3.0
    88e78456d e2e: make BuildImage parallel-safe
    370e1132c completion: fix panic in simplePathJoinUnix()
    46456f5f1 Update module github.com/stretchr/testify to v1.8.4
    585d715bb authfile.md: add default path of file for Windows/macOS.
    01012a080 Update module github.com/rootless-containers/rootlesskit to v1.1.1
    e3240c2fb hack: fix typo in hack/podman-registry
    de92db0c8 man pages and command help: clean up descriptions
    e6bfc81a8 RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
    dfba6ddd4 Man pages: fix broken tables
    5b2d963c4 test/e2e: add regression testing for comma-containing labels
    047a4bc83 fix: volume create filters
    0be9887af fix: move filter flags from StringSliceVar to StringArrayVar
    6bc52c9c5 pkg/rootless: correctly handle proxy signals on reexec
    85b4c896b [CI:BUILD] Packit: set propose-downstream action type to pre-sync
    8f94a4775 [CI:DOCS] fix Quadlet man page rendering
    29f7c494e Quadlet: kube: use ExecStopPost
    6487d9c11 Quadlet: kube: add ExitCodePropagation field
    08b0d93ea kube play: exit-code propagation
    6dbc13833 prune exit codes only when container doesn't exist
    977b3cdbf podman: Add pasta to podman info
    373919ca0 Revert "test/system/255-auto-update.bats: add debug logs"
    901900530 Quadlet - add support for PodmanArgs to all groups
    6003dca9c [CI:BUILD] Packit: add jobs for downstream Fedora package builds
    fb8a12490 In a concurrent removal test, don't remove concurrently with builds
    032d4a95f Consolidate error handling in Runtime.removeContainer
    f556e58bb Consolidate error handling in Container.cleanupStorage
    4969c552e Fix reporting errors on container unmount
    94c65a659 TEMPORARY(?) instrumentation for unlinkat-ebusy
    d623670e1 pkginstaller: bump Qemu to version 8.0.0
    4108b3711 Support podman --remote when Containerfile is not in context directory
    9969374b6 chore(deps): update dependency requests to ~=2.31.0
    5f29c7bf9 fix: podman event --filter volume=vol-name should compare the event name with volume name
    6b48e9962 fix(deps): update module github.com/docker/docker to v24
    1b9272a06 wait: look for exit code in stopped state
    7d831d555 network create/update: allow dns servers comma separated
    685c73618 source code comments and docs: fix typos, language, Markdown layout
    fe41077d4 Increase download progress to 80ch
    8fbcf8bce chore(deps): update dependency setuptools to ~=67.8.0
    29749362a podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
    2253f709b fix(deps): update module github.com/sirupsen/logrus to v1.9.2
    7c53a463b stats: get mem limit from the cgroup
    8e2e7a440 quadlet tests: enable device.volume test
    bb3f611ff quadlet tests: remove unused socketactivated.container
    18c3de596 fix(deps): update module github.com/stretchr/testify to v1.8.3
    5d522431c Correct markdown in docs
    76595c7b9 fix(deps): update module github.com/onsi/gomega to v1.27.7
    a99ad3b36 [CI:DOCS] Improve security in mysql examples
    99cedae31 Cirrus: Record the buildah version for reference
    a54d4d7e1 test/e2e: do not call setenforce
    458f2e8ed Fix discombobulated kubernetes support table
    192ad70e9 run: ignore PODMAN_USERNS with --pod
    5ff6fc559 Add --configmap to podman-remote kube play
    ad8d0e57d compat: accept tag in /images/create?fromSrc
    bf0cea76c fix HTMLSpan warnings
    a576fa3f1 generate systemd: error on init containers
    32c2cea0f Remove future tense from man pages
    5b148a0a6 compat,build: pull must accept string
    d1dcb0846 Cirrus: Add support for `[CI:NEXT]`
    eb4f0bc17 Cirrus: Remove support for `[CI:COPR]` magic
    3360214a0 system tests: add precision timestamps
    8b4987266 Makefile: add ginkgo FOCUS/FOCUS_FILE options
    4bed2c285 e2e: refactor and document serialization
    ce07860a1 machine: fix default connection URL to use 127.0.0.1
    a485ba505 e2e: serialize gpg tests
    b9aaafbe1 Document podman-machine-default behavior
    7580b8ae4 e2e: fix more test races (missing "wait")
    6d58f5bb0 fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
    520979ba2 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
    ae5cbf37c Fix documentation of `--network-cmd-path` CLI option
    71853319f Skip rhel-release branch unnecessary CI tasks
    ab29ff2f6 test/e2e: dedup Before/AfterEach nodes
    d01ae436e remote-save: fix permissions and dir formats
    5a176f09c Set machine docker.sock according to rootful flag
    13f787842 Fix handling of .containenv on tmpfs
    2c0f40482 Do not include image annotations when building spec
    dd5d22cb3 build(deps): bump github.com/docker/distribution
    26f1e95ab Kube Play - Support multi-doc YAML files for configmap argument
    c33ba70f9 system tests: instrument, to try to catch unlinkat-ebusy
    74a5b92b3 test: check restart policy of init containers
    3aa6a792e Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
    04707f62d issue template: mention `su`
    14001ad48 e2e: logs test: fix flakes
    6b329d8c9 fix(deps): update module github.com/containernetworking/plugins to v1.3.0
    ff37615bf e2e: stop podman.service test: wait for server
    cb8e19677 logformatter: handle podman-machine test logs
    58fd87959 fix(deps): update module golang.org/x/tools to v0.9.1
    2d8929d95 [CI:DOCS] Disable Dependabot in favor of Renovate
    01e20818c Ensure the consistent setting of the HOME env variable on container start
    8aaa13acc Quadlet system tests - fix socket notification
    1fb3cdf8a sqlite: disable WAL mode
    d24bec0d0 system tests: timeoutize quadlet, systemd
    3d6894426 test: update README for integration tests
    c400cc7ea libpod/Container.rootFsSize(): use recorded image sizes
    b97be3406 quadlet: support `HostName`
    9dc107e74 e2e: fix race in a play-kube test
    bdb3ed795 Fix preference of user quadlets directories
    40b21fa7d fix(deps): update module golang.org/x/tools to v0.9.0
    661a238a9 fix(deps): update module golang.org/x/net to v0.10.0
    332b47fef Check on client side for Containerfile, if none specified
    18cd174c9 build(deps): bump github.com/docker/docker
    9ec630f30 Buildah treadmill: several fixes
    11d92ea37 fix(deps): update github.com/containers/common digest to 3e93a76
    1bf057e8c chore(deps): update dependency docker to ~=6.1.0
    27891a664 Update docs/source/markdown/podman-systemd.unit.5.md
    505e02e04 fix(deps): update github.com/containers/common digest to bc15b04
    53220717e fix: initContainer restart policy overridden by pod
    c27cda7c9 fix(deps): update module golang.org/x/sync to v0.2.0
    773b45704 chore(deps): update dependency requests to ~=2.30.0
    0c070ebfb ginkgo json output: only in CI, not on laptop runs
    73d3487cc Allow user quadlets to be stored under /etc
    334adac74 fix(deps): update github.com/containers/common digest to ea87b34
    95557a532 libpod: do not Cleanup() more than once
    df9344ac4 compat container create: match duplicate mounts correctly
    42c822720 Update podman-completion.1.md
    3d56e4f3a fix(deps): update github.com/containers/buildah digest to e925b58
    75d92f41d Run generate.CompleteSpec() for initContainers as well
    d25356c30 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
    df8cc7af3 remote: return better connect error
    61985a610 Add missing man page links for Docker man pages
    f877d7dcd Replace egrep/fgrep with grep -E/-F
    19aabf440 remote: exec inspect update exec session status
    305bad184 fix(deps): update github.com/digitalocean/go-qemu digest to f035778
    999c620d5 fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
    38f993543 fix(deps): update github.com/containers/buildah digest to f353690
    1b2b0d031 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
    dc7515dc3 MVP for Podman Machine with AppleHV
    54fd0d752 e2e tests: try writing & preserving ginkgo json artifacts
    1c5ab9e7b vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
    e1e03a0e3 bindings, build: don't pass invalid platform in case of none
    ae5305134 Revert "logformatter: anchors: link to test summary, not name"
    fbe62f329 More cleanup: volumes: do not export to stdout
    3050a6437 e2e test cleanup
    fa1ba17bc Update kube gen & play to use pod restart policy
    db4ad54f9 Add {{.Restarts}} to podman pod ps
    0fef113a4 Add {{.Restarts}} to podman ps
    edbeee523 Add --restart flag to pod create
    9e9bcec9e history: correctly set tags
    073cd4bb4 fix(deps): update module github.com/moby/term to v0.5.0
    3858a833b Makefile: do not run machine test in parallel
    5af433923 pkg/machine/e2e: switch to GinkgoWriter
    1720042d0 api: fix parsing filters
    c4b9f4b34 ginkgo-v2 cleanup workaround for #18180
    5eb99a0ac test/e2e: fix custom timing reporting
    1bff0108f logformatter: anchors: link to test summary, not name
    914ff01f9 WIP: logformatter: handle ginkgo v2 logs
    b3424f370 test/e2e: unshare --rootless-netns cleanup slirp4netns
    054154c77 test/e2e: run system reset test serial
    c5922cc6f test/e2e: fix CleanupVolume/Secrets()
    bc1ed07b5 ginkgo v2: fix new Skip() behavior
    cd46e7279 test/e2e: fix pause tests to unpause before cleanup()
    2ce4e935b ginkgo v2: drop localbenchmarks
    fb7a96638 test/e2e: switch to GinkgoWriter
    cc19091e9 test/e2e: unset CONTAINERS_CONF before Cleanup()
    8cc7a3618 ginkgo: run on all cores
    9c1f713c7 test/e2e: fix Cleanup()
    9bd833bcf test/e2e: fix "podman run ipcns ipcmk container test"
    629a6a6e4 test/e2e: actually check for cleanup errors
    b9ba85044 Lower e2e timeout to not waste time when it hangs
    fbb7c980a test/e2e: containers.conf tests add missing Wait()
    c564d9d7a ginkgo v2: remove CurrentGinkgoTestDescription()
    666e31447 ginkgo v2: remove deprecated flags
    445815036 update to ginkgo v2
    502654580 test/e2e: do not remove CNI directory
    7b25f362e e2e: login_logout: use unique authfile for each test
    d06480d99 Fix clashing subuid
    24be46a51 [CI:DOCS] troubleshooting: fix subuid example
    bab4217cd manifest, push: use source as destination if not specified
    202701e65 Update github.com/moby/term digest to 0564e01
    e8f34e457 Add name-generation test
    b5ef9555a Implement machine provider selection
    70870895b libpod: improve errors management in cleanupStorage
    5592dc12f libpod: report unmount idmapped rootfs errors
    2932208c2 test: do not wait 10 seconds before killing myyaml
    891bc117e podman: simplify code with a switch
    bac57409f test: fix typo
    5fefb54d2 build(deps): bump github.com/docker/docker
    0a92b399d swagger: fix Info name conflict
    20c42489e Nightly dependency treadmill: remove
    33fa54580 Update short description for disconnect cmd
    aca993632 windows: podman save allow the use of stdout
    512b39475 Update c/common and avoid setting umask
    7ff2eaf96 Cirrus: Update CI VM Image to F38/37
    0e1ddd3df Cirrus: Run code validation on rawhide
    221e3023f Fix rand.Seed() deprecation in golang 1.20
    edaf3b4d5 Add sha256: to images history id for docker compatibility
    d51911f7b Support systemd optional prefix '-' for devices.
    a0c7bb26a Fix a copy/paste error in an error message
    ba4586375 chore(deps): update dependency requests to ~=2.29.0
    d905e412e Fix simple typo in podman-network-create.md
    a027bf102 e2e cleanup: push with auth: add error checks
    eeb210bc5 e2e: remove "-it" from podman run & exec
    64959b744 pkg/machine: rework RemoveConnection()
    2296e71e3 machine: qemu only remove connection after confirmation
    c8e423b55 Add file swith for pre-exec
    6aaf6a284 system reset: show graphRoot/runRoot before removal
    e95e9be76 fix manifest annotate help
    bdf367958 Netavark userns test: give aardvark time to come up
    bbe9d61c4 sqlite: move first read into a transaction
    f3c3ef72d Recover from failed podman machine start
    d222a392c rootless: support joining contianers that use host ns
    0e955bec7 auto-update: return errors when checking for updates
    fc8bd4521 [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
    ed6b19fef fix(deps): update github.com/containers/common digest to 46c4463
    230ddbe0c Add user mode networking feature to Windows
    3216110de system/reset.go: help: fix typo
    ae5ed6d85 e2e create same-IP: try to fix flake
    faeed14f6 system tests: safer container-stop signaling
    6014f26c4 Revert "Resolve symlink path for qemu directory if possible"
    c5a928c5b ps: --format {{.State}} match docker output
    b4eecd908 test/system/260-sdnotify.bats: fix test flake
    1361c6a33 [CI:DOCS] Quadlet: clarify overriding user/system services
    fb3b92b96 Eliminate transient container deps from wslkerninst
    dd217d8e0 Wording
    d16c880fb fix(deps): update github.com/containers/common digest to 5547996
    70bd096e4 cmd/podman/pods: omit superfluous runtime.NumCPU call
    1f1525f2e support `--digestfile` for remote push
    d640461ce e2e: skip journald test if journald is unavailable
    5156ab996 Cirrus: Enable testing on Fedora rawhide
    8a3265f65 [CI:BUILD] Cirrus: remove copr rpm build task
    77f86f48e chore(deps): update dependency setuptools to ~=67.7.0
    03a7c6a91 Cirrus: Drop benchmarks artifacts
    15664b4b0 test/e2e: correctly reap service process
    c9d861023 test/e2e: add missing options to remote service
    1f45c715d test/e2e: fix incorrect usage of CreateTempDirInTempDir()
    601d228ca test/e2e: "podman-remote send correct path to copier" do not leak file
    08c651016 test/e2e: fix network create flake due same subnet
    525c27fe1 test/e2e: fix SkipIfNotActive()
    01d518a97 test/e2e: do not try to use docker as rootless
    6e97976ad test/e2e: do not leak "hello" file
    750442d09 podman-remote logs: handle server error correctly
    3aaa2793d test/e2e: use custom network config v2
    00fdfa063 rename ImagePushReport to ImagePushStream
    81621ce8a Specify format to buildah before commit
    7382494ca Add eBPF snooper that traces the entire fork/exec graph of podman
    edb64f8a7 libpod: stop containers with --restart=always
    0364aef1e test: fix race when listing cgroups
    b65ab52d8 compat: Translate `noprune` into ImageRemoveOptions.NoPrune
    346483717 [CI:DOCS] Update RELEASE_PROCESS.md
    8019dc9e6 hyperv: add podman socket mapping
    a089f1b5c e2e networking test: better way to get host IP
    bce38c1af Updated system test to be easier to read
    5f5bea0d1 bindings tests: bail out early on image errors
    f2cec7348 libpod: fix TestPostDeleteHooks do not depend on version
    8125bab9b chore(deps): update dependency setuptools to v67
    a00ed20e0 fix(deps): update module github.com/containers/libhvee to v0.0.5
    da83364eb e2e: quadlet uses PODMAN env for podman binary path
    6e0cf9344 Fixes format inconsistencies with docker for certain history fields
    acb24f164 Makefile: do not prefix /etc
    7e4cd22ac libpod: configureNetNS() tear down on errors
    4f93a6eee libpod: rootlessNetNs.Cleanup() fix error message
    4b8230119 HyperV: wait on stop
    3cdaf85d6 build(deps): bump github.com/docker/docker
    459f751ae Makefile: include `release-artifacts` target
    3222545ad Enabled network over vsock
    aec7ce4a1 fix(deps): update module github.com/microsoft/go-winio to v0.6.1
    64b26df60 fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
    41d516412 fix remote start --filter
    1cac53506 Update API reference to include v4.5
    a0204f1dd Add missing security options to /info response
    de5fa9ce9 Add mention of redir to doc `rootless.md`
    08f137aec fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
    8e7f98ae6 docs(readme): add status badges and remove hardcoded release info
    e9356ba20 Don't use bytes.NewBuffer to read data
    f488d9890 Add support for HVSOCK on hyperv
    e7a323635 docs: update network tutorial with netavark DHCP support
    32344952a bump main to v4.6.0-dev
    54ba17f69 Remove disused test/install
    1fa4e45a9 Return title fields as a list
    be148665c [CI:BUILD] Packit: Initial Enablement
    4aced7e3e Quadlet - do not set log-driver by default
    51b582d0e system tests: address COPY-hardlink flake
    25d4ecf47 chore(deps): update registry.centos.org/centos/centos docker tag to v8
    31420112c system tests: fix race in kube-play read-only
    f544971b7 chore(deps): update dependency docker to v6
    f95276bfa CI: enable sqlite system tests
    d28656403 test: enable test_wait_next_exit
    f312c8533 Update dependency PyYAML to v6
    f67d640b8 test/e2e/systemd_activate_test.go: simplify test
    5315c0cc7 Update docker.io/library/golang Docker tag to v1.20
    b4cfc727b api: auth: fix nil deref
    176c329f9 Update dependency requests-mock to ~=1.10.0
    b75ee05d3 Update dependency requests to ~=2.28.2
    d38b22d50 fix: Document removing anonymous volumes at create
    fe22299f9 Use a sane polling interval in WaitContainerDocker
    bb2deef8e podman: added the --out option for capturing formatted output emitted by various commands
    785c63c0f Renovate: Ensure release-note-none label is added
    4bc4609d8 Renovate: Update ignore paths
    64ea5971a *: migrate image registry to registry.k8s.io
    4f5f89cf8 Do not display the resource limits warning message

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-01 14:42:25 -04:00
Peter Marko
07a578d49c podman: ignore CVE-2022-2989 and CVE-2023-0778
NVD shows only redhat links and does not mention fixed-in release
se these CVEs will show-up in reports indefinitely.
They are already fixed in current version, so ignore them.

CVE-2022-2989
* https://github.com/advisories/GHSA-4wjj-jwc9-2x96
* https://github.com/containers/podman/pull/15618
* commit d82a41687e614d9ac8b2d169dee47fe226835e4c Add container GID to additional groups

CVE-2023-0778
* https://github.com/advisories/GHSA-qwqv-rqgf-8qh8
* https://github.com/containers/podman/pull/17528
* commit 6ca857feb07a5fdc96fd947afef03916291673d8 volume,container: chroot to source before exporting content

Signed-off-by: Peter Marko <peter.marko@siemens.com>
2023-08-01 14:41:46 -04:00
Bruce Ashfield
f634a540c4 podman: update to 4.5.1
Bumping libpod to version v4.5.1-6-gdae7df5a1, which comprises the following commits:

    3d7aba056 completion: fix panic in simplePathJoinUnix()
    9de891616 RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
    5933be9ba Bump to v4.5.2-dev
    9eef30051 Release v4.5.1
    777ddfc42 [CI:DOCS] Final release notes for v4.5.1
    2b045de48 [CI:BUILD] Packit: set propose-downstream action type to pre-sync
    b1281ae46 Revert "Resolve symlink path for qemu directory if possible"
    8b35bbab9 no need for podman-next rpm test on maint branch
    6652633ce [CI:BUILD] Packit: add jobs for downstream Fedora package builds
    97ec57da5 libpod: configureNetNS() tear down on errors
    d812087d1 libpod: rootlessNetNs.Cleanup() fix error message
    083894a22 network create/update: allow dns servers comma separated
    1575b3a7f machine: fix default connection URL to use 127.0.0.1
    1e86d0a75 compat: accept tag in /images/create?fromSrc
    7d0e4a644 compat container create: match duplicate mounts correctly
    dc21698d6 machine: qemu only remove connection after confirmation
    02b9f4f5d windows: podman save allow the use of stdout
    66fb7c9bb remote: exec inspect update exec session status
    5b21c38c8 podman-remote logs: handle server error correctly
    9558af2c4 libpod: stop containers with --restart=always
    0f18a0144 Do not include image annotations when building spec
    bc2f0115d [v4.5] system tests: fix race in kube-play read-only

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-07-25 14:54:20 -04:00
Bruce Ashfield
86d7836cd4 podman: update to 4.5.0
This version introduces envsubt in the install stage, so we add
gettext-native to our build dependencies.

Bumping libpod to version v4.5.0-14-gc926b12c5, which comprises the following commits:

    bc2f0115d [v4.5] system tests: fix race in kube-play read-only
    696c2d40d api: fix parsing filters
    1fa2eb53b Support systemd optional prefix '-' for devices.
    74634a46c *: migrate image registry to registry.k8s.io
    0fb11cccd Makefile: include `release-artifacts` target
    4d2cf293e [CI:BUILD] Packit: Initial Enablement
    da927a75c Bump to v4.5.1-dev
    75e3c1257 Release v4.5.0
    32a6892b6 [CI:DOCS] Final release notes for v4.5.0
    5de2a13e0 Quadlet - do not set log-driver by default
    c5e704c82 Return title fields as a list
    bf6f58b02 Bump to v4.5.0-dev
    f3c365887 Bump to v4.5.0-RC2
    15c302533 Final release notes for v4.5.0-RC2
    af7c25811 test/e2e: remove unnecessary SkipIfNetavark() calls
    80652cacf test/e2e: deduplicated network test
    b526839a4 docs: update podman-network-create.1
    ed99a979c network create: add --interface-name
    676486a85 test/system/252-quadlet.bats: fix flake
    1bf5bdc68 Read kube_generate_type from containers.conf
    11ac0d03e Debian setup: workaround for runc /dev/char/10:200 bug
    38c217a0b pkg/rootless: use catatonit from /usr/libexec/podman
    bab95de9a rootless: make sure we only use a single pause process
    3b2b1441e Use atomic config writing strategy for podman machine config files
    67307603b Add remaining release notes for v4.5.0-RC2
    d53871cf1 GHA: Use version instead of SHA for actions
    25bc7d161 chore(deps): update dependency containers/automation_images to v20230405
    944accffa build: pass env by reference
    7edf73dfd test: retrofit error message
    b624ad757 test/system: expect 12 char for short id
    260bc3ec4 vendor: bump containers/(storage, common, buildah, image)
    c5a0d8646 [skip-ci] Update actions/upload-artifact action to v3
    d3cf8ccf8 [skip-ci] Update actions/stale action to v8
    21fbd5c1a [skip-ci] Update actions/setup-go action to v4
    f3971e412 [skip-ci] Update github/issue-labeler action to v2.6
    c4e79fc16 Fix up codespell errors
    a5dd5c20e Capitalize all uid,gid and id words that are not options in docs
    352a41e3a build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools
    13135f924 Properly remove the service container during kube down
    f6a50311c quadlet: add `UserNS` option key
    29aac4dfe [CI:DOCS] Release notes for 4.5.0 Part 1
    358b46225 "podman pull by digest and list --all" test: untag instead of rmi
    f417861e0 build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0
    43e6bc9d9 Add renovate.json configuration
    cf6f13704 CI: postbuild step: skip under nightly treadmill
    db9785ba5 The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case
    dc9a65e34 test/e2e: use custom network config dir where needed
    35165df37 chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
    b858c7e7f update completion scripts for cobra v1.7.0
    e4aad8f0f libpod.storageService.CreateContainerStorage(): retrieve ID maps
    d0ffb8792 Fix invalid pod name and hostname during kube generate
    761eca9e7 e2e tests: fix racy flakes
    56e7b511e Cirrus: Enable labeling of EC2 VMs
    74f9fd8e6 Cirrus: Fix aarch64 clone_script 404 errors
    ce8a3a0c1 e2e: GinkgoParallelNode() -> ...Process()
    45b1099ef build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
    34a5c7f15 build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
    10d2e9fde [CI:DOCS] --creds and registries
    9b7fd3936 Copr: fix build deps for /usr/bin/envsubst
    80f9f8077 Don't error when removing non-existant env vars
    ecce01e61 e2e: healthcheck on stopped container: fix flake
    cb7b8fb31 test/apiv2/80-kube.at
    e1be7d141 test/apiv2/80-kube.at
    1f3ae8a4f system service: do not close Body
    bb70d60f1 rm `hack/release.sh`
    704901d11 build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6
    243ca7c28 add `quadlet -version` flag
    7eb78f8a7 add version/rawversion package
    53b16ccd2 quadlet: use `Flag` suffix for variables
    443f8d89c quadlet: implement `Tmpfs` option
    91ca15e96 Bump to v4.5.0-dev
    3e48017d8 Bump to 4.5.0-rc1
    b7175a366 Update release notes from 4.4 branch
    2051e54e0 rootless netns: recover from invalid netns
    99ace1908 System tests: unverbosify a flake log
    68dbddd97 Add support for secret exists
    78e7ade0d Fix Win install task failures with large PR bodies
    21febcb5c docs: add `starting` to `HealthCheckResults.Status`
    d7051d745 Add support for cgroup_config from containers.conf
    4d56292e7 libpod: mount safely subpaths
    4f9019406 Support Deployment generation with kube generate
    8b6a7c182 Use secret.items to create volume mounts if present
    359f40869 [CI:DOCS] fix typo in --systemd option
    266cc7882 rootless: drop preexec hook error message
    3c9ce3e52 Edit the docker wrapper to use the install prefix
    5643058c8 Update podman-for-windows.md
    d79519e70 Quadlet: RemapUsers documentation fixes
    7f8d5e565 speed up image listing
    f0cfbbe2c vendor containers/common@e27c30ee9b
    70abb4ae5 fix volume-plugin-test flake
    b3e8791f6 Document building Podman remote on Windows hosts
    c40eaa242 test/e2e: gpg keep stdout/err attached
    f131eaa74 auto-update: stop+start instead of restart sytemd units
    b7a8e1285 [CI:DOCS] Improve basic tutorial
    be7827c7e Update docs/source/markdown/podman-network.1.md
    c335ff241 Add debug to --wait test
    81e5bffc3 fix slirp4netns resolv.conf ip with a userns
    11e5c2d0f Quadlet: add support for keep-id with mapping values
    b5df38c23 Quadlet E2E test - run quadlet as user generator
    cdb5b3e99 sqlite: do not `Ping()` after connecting
    da96ff6cc Quadlet - treat paths starting with systemd specifiers as absolute
    dd8ee49f6 Update docs/source/markdown/podman-kube-play.1.md.in
    d85c8d7e8 system tests: use CONTAINERS_CONF_OVERRIDE
    51d068ecc implement podman machine set for hyperv
    46b826a90 [CI:DOCS] Add network subnets info to network man page
    dd8574022 CI: retry the golangci install
    92e0efc5d system tests: fix racey sdnotify test
    518eafaa3 hyperv: lookup machine on local filesystem first
    4c72fc26b fix os.IsNotExist() CI check
    7daab31f1 Ensure that SQLite state handles name-ID collisions
    64ba82601 macos pkginstaller: do not fail when podman-mac-helper fails
    4f3cbf15c podman-mac-helper: install: do not error if already installed
    ade46ae6a build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5
    e061cb968 Fix a race around SQLite DB config validation
    c5fc44582 add CONTAINERS_CONF_OVERRIDE
    5f86fae71 vendor containers/common@main
    6825740fc docs: minor grammar fix in `--volume` description
    b31d9e15f sqlite: do not use shared cache
    9be4a525f test: podman checkpoint/restore the latest container
    5185e7e39 stats compat API: return "id" lowercase
    5f274e45f Run make codespell
    3925cd653 Drop SQLite max connections
    0fbc32515 sqlite: set connection attributes on open
    9f0e0e833 Fix database locked errors with SQLite
    cf5df5b80 quadlet tests: skip on RHEL8 rootless
    cb24d6c3d Kube Play Doc: Document the support for K8S Secret
    6b2101bc7 New ulimit test: bump up minimum nfiles
    5447e88b4 logformatter: hide --db-backend, and friendlyize quadlet
    5382997e0 Quadlet - add support for relative path in Volume key in .container file
    3e405a2fd Add service ctr cleanup to PlayKubeDown
    956341543 fix --health-on-failure=restart in transient unit
    26d5df77d Quadlet Doc: Suggest the kill operation for HealthOnFailure
    5d1342fc5 Quadlet - Add support for health checks configuration in .container files
    3ef707def Makefile: allow specifying /lib dir location
    a5abbdf1f Fix option --opts -> --opt
    0dac214f5 basic hypverv machine implementation
    94f905a50 Fix SQLite DB schema migration code
    46d165040 Add support for oom_score_adj value from containers.conf
    6046832f3 Use default_ulimits field in containers.conf
    e2d49fb65 CI: test and confirm DESIRED_DATABASE
    1ea62f32f build(deps): bump github.com/openshift/imagebuilder
    526dfb893 logformatter: futureproof output filename
    e21cf2d8d Vendor in latest containers/(storage, common, image)
    686bdcc29 build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.30.0
    ba141adce test/system/255-auto-update.bats: add debug logs
    c2a24abc0 Revert "Revert "pasta: Use two connections instead of three in TCP range forward tests""
    3a59af219 Add information for secret inspect
    87e93a7b6 Add format to podman volume ls
    b424f8fb0 Add format to podman volume inspect
    2555c8034 Add format to podman secret ls
    1c4bd4a73 Add format to podman system df
    71bcd9891 Add format to podman machine info
    581611844 Add format table to podman image inspect man page
    e92955245 Cirrus: Store podman machine benchmark data
    b3035b9d6 Update Cirrus display names, and fix get-ci-vm script
    6142c16a9 Ensure SQLite places uses the runroot in transient mode
    2ec11b16a Fix various integration test issues with SQLite state
    0f8530b1e Remove test for pod/container name global uniqueness
    6e0f11da5 Improve handling of existing container names in SQLite
    39fd9aa08 Add SQLite job to CI
    7ed1c7fd9 buildah treadmill: also run rootless tests
    2b4a27719 build(deps): bump github.com/vbatts/git-validation in /test/tools
    3c51b61d7 auto update: return restart error
    ea2a0767a fix: Document removing anonymous volumes
    408e764b9 events: no duplicates when streaming during a log rotation
    82f2f8258 Add search --cert-dir, --creds
    bae07b6ea podman-mac-helper: exit 1 on error
    7d8d3e810 system service --log-level=trace: support hijack
    eed389508 test/system: fix wait_for_port() to wait for bind
    2d1f4a8bf cgroupns: private cgroupns on cgroupv1 breaks --systemd
    01fd5bcc3 libpod: remove error stutter
    4562e61d2 podman events: unhide --stream
    7a7af735a test/system/255-auto-update.bats: multiple services
    40d0d233e 255-auto-update.bats: turn off rollback where needed
    a9d70e9fe Use append() to add elements to a slice
    1c08f2eda Revert "pasta: Use two connections instead of three in TCP range forward tests"
    ad8a96ab9 Support running nested SELinux container separation
    159936a11 bud tests: rootless remote: use correct socket path
    6f9f395b3 build(deps): bump github.com/vbauerster/mpb/v8 from 8.2.1 to 8.3.0
    bad41f67e compat: /auth: parse server address correctly
    6363fb08f docs: fix cmd `set DOCKER_HOST` suggestion
    fb4f6f95c test: reenable idmap test
    b5a99e081 Must use mountlabel when creating builtin volumes
    8d952c01d podman.spec.rpkg: distro conditionals for modulesloaddir
    9294b7350 build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0
    21651706e podman inspect list network when using --net=host or none
    f928cf54a pasta: Re-enable "Local forwarder, IPv4" test, accept NXDOMAIN as response
    829e910cd build(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 in /test/tools
    cc7a1e614 CI: Switch to c20230307t192532z-f37f36d12 images
    799c20177 Cirrus: Run system & integration tests in parallel
    c03cb5718 Update checkpointctl v0.1.0
    cb3cda55f Quadlet: add support for setting --ip and --ip6
    af7a759e9 build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
    5d039ce22 build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0
    34ff27b81 libpod: avoid nil pointer dereference in (*Container).Cleanup
    25dd4d653 [CI:DOCS] Add image not found info to troubleshooting
    0498ce3a5 cmd: do not require userns for "version"
    2860d55c9 cmd: drop special handling for "scp"
    da04469f0 cmd: clarify meaning of ParentNSRequired
    0ab4b2614 Fix package restore
    0d219486f [CI:DOCS] Fix docs/version-check always requesting updates
    e77f370f8 sqlite: add a hidden --db-backend flag
    cca65db01 fix: update the default machine value when the previously set default machine is deleted
    9ac0d4f1a podman machine: Adjust Chrony makestep config
    2c67ff5d4 sqlite: add container short ID to network aliases
    38acab832 sqlite: remove dead code
    2342d1a31 sqlite: addContainer: add named volume only once
    86d12520e sqlite: implement RewriteVolumeConfig
    df88f546b sqlite: LookupVolume: fix partial name match
    01359457c sqlite: LookupVolume: wrap error
    69ff04f73 sqlite: fix type rewriting container config
    e87014e44 sqlite: return correct error on pod-name conflict
    84b5c6c71 sqlite: RewritePodConfig: update error message
    51cf2dd36 test/system/255-auto-update.bats: wait 10 for update to finish
    b727f30ac auto-update test: wait for service to be ready
    76056c670 Vendor in latest containers/(common, storage, image)
    20a42d0e4 play kube: Add --wait option
    6babef598 Cirrus: Fix git config permission denied
    ccc5aa59a Quadlet: Add support for the Mount key in .container files
    6f09dbc2d build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2
    77861d6af fix "podman logs --since --follow" flake
    6d352dc0b Clarify that replicas are ignored in kubernetes deployment
    42540a667 Revert "Skip all pasta tests"
    e804ddc5a CI: Switch to c20230223t153813z-f37f36d12 images
    070572245 Fix user socket path
    1e516e657 pkginstaller: bump Qemu to version 7.2.0
    0f92e19e8 Cirrus: Fix bud tests failing to apply patches
    1ef8a860c build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
    b00874c16 build(deps): bump github.com/coreos/stream-metadata-go
    9d93486d2 Vendor in latest containers/storage
    d838c08b3 buildah-bud tests: don't sudo when rootless is desired
    1f6f81f5d Temporarily disable version-check
    5a08ddaec CI: new rootless buildah-bud tests (cron only)
    5d2d609be sqlite: fix volume lookups with partial names
    495314a16 sqlite: fix container lookups with partial IDs
    efe7aeb1d sqlite: fix LookupPod
    19c2f37ba sqlite: fix pod create/rm
    e32bea937 sqlite: LookupContainer: update error message
    565bb5645 sqlite: AddContainerExitCode: allow to replace
    4b3b94473 system: add warning when running rootless on cgroupv1
    1b1cdfa35 sqlite: fix AllContainers with state
    21fcc9070 sqlite: fix "UPDATE TABLE" typos
    3f96b0ef2 sqlite: SaveVolume: fix syntax error updating the volumes table
    7c11f7e17 sqlite: exit code: allow -1
    e74f7bcaf sqlite: fix typo when removing exec sessions
    560805ac4 sqlite: AllContainers: fix inner join
    8c64c4370 sqlite: move migration after table creation
    eeabe975e sqlite: implement pod methods
    0d75854c5 Quadlet - use the default runtime
    49d560e1b docs: context is not optional for build
    03aaa8d35 Fix an incorrect comment on NewSqliteState
    eb228f264 Add support for containers.conf database setting
    59a54f32d Add support for volume operations to SQLite state
    c0b92bdbc Implement exec session handling in SQL database
    627a5b73b Various fixes from code review
    c4fe0af2a Remove `--namespace` flag from Podman root
    89d0ccd19 Get E2E tests to pass
    97499a70a Implement network disconnect for SQLite state
    939a4ccef Implement Network Connect/Modify for SQLite state
    8ab18d848 Fix various lint issues
    b4c4f9c93 Some further work on SQLite state
    5c2a0670f Remove concept of Namespaces from BoltDB
    1b968c607 Add initial SQLite-backed state implementation
    93e7cc119 Cirrus: Support runc testing on debian VMs
    81f116c59 Skip all pasta tests
    642e9ddb8 Skip buildah-bud test
    10382d0bc Skip buildx test with VFS podman storage driver
    dd51b62b7 Skip 'podman kube --network' test for rootless CGv1
    197529f08 Skip tests which fail with CGv1 & runc
    5b4f248a8 Skip rootless CGv1 quadlet tests due to issue
    e19922d09 Makefile: Define SHELL
    43eb35a77 Machine refactor for QEMU/AppleHV
    e838ad86b machine refactoring preparations for hyperv
    b4471c6ed [CI:BUILD] spec.rpkg: trim dependency list
    12153da83 Logs follow-until tests: loosen checks
    7d17ec07f [CI:DOCS] Windows/Mac docs link update
    7f5fc04b4 Doc update for docker network options via CLI
    4b4b423b6 compat API: network create return 409 for duplicate
    40f21da0c Apply suggestions to man page
    adacd3b12 vendor c/common@852ca05a1f
    6a3757b73 Quadlet: Add support for LogDriver key in container and kube units
    ebb45b5bd machine refactoring preparations for hyperv
    af8d649da libpod: always use direct mapping
    9dc730d9f netavark: only use aardvark ip as nameserver
    e9942c61d build(deps): bump github.com/container-orchestrated-devices/container-device-interface
    79a05ca2b podman logs passthrough driver support --cgroups=split
    d7e96536e journald logs: simplify entry parsing
    1590c7bf4 podman logs: read journald with passthrough
    5754df806 make docs: sanity check for broken man pages
    5056bd45f build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.6 to 8.2.0
    5fcd2c3fa build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1
    2659a3228 kube: rm secret on down, print secret on play
    9ce589a4a Fix spacing typo that triggered OCD & indent units in podman-systemd.unit(5)
    ad866fecb Update remote_client.md
    e74f60dee [CI:DOCS] Add restriction to option README
    975b096bc Revert "CI: Temporarily disable all AWS EC2-based tasks"
    22a207d45 build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0
    c95978f60 kube play: only enforce passthrough in Quadlet
    21cddd723 journald: remove initializeJournal()
    6dd797844 auto-update: support pods
    9622d25be Emergency fix for man pages: check for broken includes
    c81fbd5d0 System tests: assert(): friendlier failure messages
    761da776a Cirrus: Fix version-check to only run on `main` job
    7f8bc6f51 CI: Temporarily disable all AWS EC2-based tasks
    6f5ca7318 build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18
    6ca857feb volume,container: chroot to source before exporting content
    94d4b5278 Support sysctl configs via podman kube play
    510e44359 [CI:BUILD] copr: podman.spec.rpkg cleanups
    a4677405c quadlet system tests: add useful defaults, logging
    96af9e4e0 libpod: support relative positions for idmaps
    c7ee65596 Experimental workaround for cdn03.quay.io flake
    86e55d0ec system tests: prevent leading tabs
    9abe8c785 Introduce podman machine os apply
    828708bac create: add support for --group-entry
    33a918711 fix != filter in volume prune
    4c5b79120 Allow specification of podman --remote build -f -
    3d8936642 Quadlet use crun specified in containers.conf
    9f84b9b52 build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
    86a4c6b65 Vendor c/image after https://github.com/containers/image/pull/1847
    c0f983db8 Don't set hostPort when generating a service
    3a9d14d4e man page --format xref: tighten the autocompletion check
    0999991b2 add support for limiting tmpfs size for systemd-specific mnts
    9a1f47887 build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0
    35d16ea02 Add ulimit annotation to kube gen & play
    34d412e13 man page xref: validate displayed man page names
    7c54d1423 quadlet: add ExecStop
    d2ac85f7a install sigproxy before start/attach
    191e4ce40 build(deps): bump golang.org/x/tools from 0.5.0 to 0.6.0 in /test/tools
    a5ca73225 Fix typos
    45fb353f4 Cirrus: Make benchmarks .env file easier to load
    a7db3e8d2 Cirrus: Omit functions in env. file
    1541ce56c kube play: set service container as main PID when possible
    08e13867a Fix typos. Improve language.
    9cba0474b events + container inspect test: RHEL fixes
    5a9074dab Add ctrName to network alias during kube play
    586515976 Run codespell on codebase
    c7619c8ae podman image scp: added identity for ssh.Exec
    fb54be2e1 [CI:DOCS] Clarify nomap constrains
    433413549 [CI:DOCS] man-page checker: include --format (Go templates)
    e308ba021 Vendor c/image after https://github.com/containers/image/pull/1816
    ec4ab08c8 [CI:DOCS] Cleanup some man pages to display options with line breaks
    5ed217409 [CI:DOCS] Add tables to podman-systemd.unit man page
    3de409ad6 github: remove prefix from bugs/features
    d6dd17fdf Quadlet: Add support for the Secret key in Container group
    08d28bfc2 [CI:DOCS] OWNERS: add @ygalblum and @alexlarsson
    47df0ca25 build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0
    ded44be16 build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.1.6
    42c7c59dd Sort quadlet keys to make it easier to read
    43b357068 e2e: fix some tests on remote
    83367a6b3 kube play: do not teardown unconditionally on error
    ac71fa01c Fix typos in comments
    6b6458916 Resolve symlink path for qemu directory if possible
    90eb834e7 #17363 Fix contradicting documentation podman-commit
    1916da596 Fix a potential UID/GID collision in unit tests
    93c35a703 golangci-lint: show all errors at once
    77e4b1939 update golangci-lint to version 1.51.1
    1fd0ce71d [CI:DOCS] events: document journald identifiers
    f1352521f Quadlet: exit 0 when there are no files to process
    ced934284 network ls: handle removed container
    315215020 e2e: adapt play kube test on remote rootless
    4e8906c5e docs/podman-systemd.unit: Explicitely mention network & kube units
    c4f338eec docs/podman-systemd.unit: Update example to work out of the box
    50f72fe7b [CI:BUILD] Cirrus: Fix GraphQL ownerRepository:null error
    83a0e97ab Add missing return after errors
    84c674fee Revert "Cirrus: Emergency fix to un-stuck PRs"
    af0f10a22 pasta: Fix ICMPv6 Echo test, skip it for the moment
    859579b6b pasta: Fix ICMP Echo Request (IPv4) test
    e33f4e0bc pasta: Use two connections instead of three in TCP range forward tests
    acaab3fa7 Add SELinux label types support to quadlet
    928d589b7 Add quadlet support for rootfs= containers
    6b3073f53 Cirrus: Emergency fix to un-stuck PRs
    8441f01be Move clean-binaries before podman-remote in podman-remote-docs target
    aa0d4b266 oci: bind mount /sys with --userns=(auto|pod:)
    e6904f6f8 Cleanup podman-systemd.unit file
    3c3526e53 Install podman-systemd.unit  man page, make quadlet discoverable
    de63ad704 libpod: allow userns=keep-id for root
    9e7f1bea4 system-reset: use CleanCacheMount to clear build cache
    5ca35d6de vendor: bump buildah to v1.29.1-0.20230201192322-e56eb25575c7
    3ce07b556 system tests: fix noexistent labels test in the remote
    a909e2f2d Expose Podman named pipe in Inspect output
    2bb4c7cdd libpod: support idmap for --rootfs
    ed1f76917 test: adapt test to work on cgroupv1
    ed18cdd6e Bump to v4.5.0-dev
    b6d91ebfb Update main to reflect v4.4.0 release
    be47eeb85 Update from /github.com/vbauerster/mpb/v7 to /v8
    8aa377698 hack/perf: cleanup after benchmarks
    cb5a9e9f4 hack/perf/bz-2162111.sh: use custom network
    a1436d8fb Update bug_report.yaml
    02bcf0bac Handle filetype field in kubernetes.yaml files
    1a786ea53 hack/perf/bz-2162111.sh: measure stop
    bd8937c50 make hack/markdown-preprocess parallel-safe
    68371ff55 system tests: fix volume exec/noexec test
    f69efb6ee system tests: minor fix for RHEL8 incompatibility
    cf7afed05 Cirrus: Use versionable IMAGE_SUFFIX
    cbb45a6d4 utils: new conversion method
    0e949bfd3 libpod: use GraphRoot for overlay upper dir
    427d69cc3 vendor: update containers/storage
    d10860a32 Do not mount /dev/tty into rootless containers
    5c059e3ed build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
    9272cabd3 e2e: fix run_staticip_test about no_proxy
    2e397120d docs: specify order preference for FROM
    15594e92e Fixes port collision issue on use of --publish-all
    952049fe5 Support for Windows paths in the source position of the volume mounts
    0e3524b8b e2e tests: fix incorrect os.User.Name
    7c60a784c Log data that we failed to unmarshal
    61db1d5aa [CI:DOCS] hack/perf: add script for BZ 216111
    29b346dea container rm: save once for exec removal and state change
    8f2a40d81 [DOCS:CI] podman-events: document verbose create events
    7e80edd3a e2e: Avoid hard-coding included in quadlet test
    2682d3ad9 e2e: Avoid hard-coding ImageCacheDir
    387f0ea2f Making gvproxy.exe optional for building Windows installer
    74c090973 Add gvproxy to Windows packages
    ab8e49d74 Add comment to clarify error handling intention
    12d70446f fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
    063e273e9 Fix usage of absolute windows paths with --image-path
    b0b166b5b Match VT device paths to be blocked from mounting exactly
    553e53d44 Fix default handling of pids-limit
    069edc3ad Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
    e51991030 journald: podman logs only show logs for current user
    2ab90f2ed journald: podman events only show events for current user
    21b82bb68 e2e: Remove the cache with "podman unshare rm" when a rootless user
    9db657f40 Clean up more language for inclusiveness
    814f7c569 e2e: Remove some directories at SynchronizedAfterSuite
    497be102a fix: don't output "ago" when container is currently up and running
    b28519fd9 fix: running check error when podman is default in wsl
    a745d99a8 fix CI: test fail due to merge
    f3d8f6c49 Bump Bulidah to v1.29.0
    38d5319f1 e2e: reduce dependency on /tmp for e2e tests
    0ffce8181 Bump cirrus image with easier dependency management
    e62e42bfa quadlet: Add device support for .volume files
    70e8f6243 remote,build: error if containerignore is symlink
    c74bdae35 DB: make loading container states optional
    6132c4d54 ps: do not sync container
    958c94094 Set runAsNonRoot=true in gen kube
    7aef3301d WSL refactoring
    08186d7dd kube-play: add support for HostIPC in pod.Spec
    8850db961 Allow --device-cgroup-rule to be passed in by docker API

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-06-07 16:40:21 -04:00
Bruce Ashfield
c5f7a698bc podman: update to 4.4.3
Bumping libpod to version v4.4.3-2-g6172f29f9, which comprises the following commits:

    2c01aa7e3 Bump to v4.4.4-dev
    d2f93d621 Bump to v4.4.3
    2ae3c4fe9 Release notes for v4.4.3
    d6ea3983d compat: /auth: parse server address correctly
    0a897f03f vendor github.com/containers/common@v0.51.1
    f7fccc87c pkginstaller: bump Qemu to version 7.2.0
    53212ea0e podman machine: Adjust Chrony makestep config
    06925d554 [v4.4] fix --health-on-failure=restart in transient unit
    9c0d2dc2f podman logs passthrough driver support --cgroups=split
    a0fad9f8c journald logs: simplify entry parsing
    54b070ee6 podman logs: read journald with passthrough
    c5fa9c50f journald: remove initializeJournal()
    6b19e1437 netavark: only use aardvark ip as nameserver
    d737a815a compat API: network create return 409 for duplicate
    1a3a5594a fix "podman logs --since --follow" flake
    bd65bf2ed system service --log-level=trace: support hijack
    8ab00424b podman-mac-helper: exit 1 on error
    badbd8a34 bump golang.org/x/net to v0.8.0
    36ab43f77 Fix package restore
    df0fe4fcc Quadlet - use the default runtime
    594d488b8 Bump to v4.4.3-dev
    74afe2688 Bump to v4.4.2
    87a1c2701 Release notes for v4.4.2
    3abff420a Revert "CI: Temporarily disable all AWS EC2-based tasks"
    8322cab91 kube play: only enforce passthrough in Quadlet
    d69512b98 Emergency fix for man pages: check for broken includes
    9606d7f99 CI: Temporarily disable all AWS EC2-based tasks
    ab7a47840 quadlet system tests: add useful defaults, logging
    805e94b03 volume,container: chroot to source before exporting content
    321d05aa9 install sigproxy before start/attach
    84521f52d Update to c/image 5.24.1

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-03-24 15:29:21 -04:00
Bruce Ashfield
b3346bfb26 podman: use VIRTUAL-RUNTIME variable for flexible RDEPENDS
To make it simpler to vary the container runtime and the
networking infrastructure to be used with podman, we use
the recently introduced VIRTUAL-RUNTIME variables that
control these values.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-03-08 17:08:02 -05:00
Bruce Ashfield
ca33915151 podman: update to 4.4
We adjust FILES to pickup new systemd utilities, but otherwise the
recipe is unchanged.

Bumping libpod to version v4.4.1-6-g73f52c051, which comprises the following commits:

    84521f52d Update to c/image 5.24.1
    8e5eb9a79 events + container inspect test: RHEL fixes
    65c412383 Bump to v4.4.2-dev
    34e8f3933 Bump to v4.4.1
    7431f3d00 Update release notes for Podman 4.4.1
    68a58c9a1 kube play: do not teardown unconditionally on error
    a1cc3733b Resolve symlink path for qemu directory if possible
    c3d781de0 events: document journald identifiers
    52ae4a2c4 Quadlet: exit 0 when there are no files to process
    1ee04fcc7 Cleanup podman-systemd.unit file
    f3ea36100 Install podman-systemd.unit  man page, make quadlet discoverable
    2b7ea6442 Add missing return after errors
    1d76a166c oci: bind mount /sys with --userns=(auto|pod:)
    20d31a0a6 docs: specify order preference for FROM
    590186e0d Cirrus: Fix & remove GraphQL API tests
    7407ccdc3 test: adapt test to work on cgroupv1
    c2971a66a make hack/markdown-preprocess parallel-safe
    322802e40 Fix default handling of pids-limit
    6ce1a11b7 system tests: fix volume exec/noexec test
    e2a40dfa2 Bump to v4.4.1-dev
    3443f453e Bump to v4.4.0
    f42972714 Final release notes for v4.4.0
    c927ad03b Emergency fix for RHEL8 gating tests
    ef4e7b8c7 Do not mount /dev/tty into rootless containers
    bbaa54258 Fixes port collision issue on use of --publish-all
    c3566cda4 Fix usage of absolute windows paths with --image-path
    9eb960707 fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
    5c94568e9 podman-events: document verbose create events
    45b00b648 Making gvproxy.exe optional for building Windows installer
    63f964c08 Add gvproxy to Windows packages
    579c5dc80 Match VT device paths to be blocked from mounting exactly
    605079dc8 Clean up more language for inclusiveness
    f4bf448d8 Set runAsNonRoot=true in gen kube
    45b9e17d7 quadlet: Add device support for .volume files
    92bae973c fix: running check error when podman is default in wsl
    edb7779cd fix: don't output "ago" when container is currently up and running
    6870dae23 journald: podman logs only show logs for current user
    cd4590908 journald: podman events only show events for current user
    097ca6056 Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
    916ea3e5d DB: make loading container states optional
    de84be54e ps: do not sync container
    3a65466ba Allow --device-cgroup-rule to be passed in by docker API
    36875c265 [v4.4] Bump to Buildah v1.29.0
    8ff381f45 Bump to v4.4.0-dev
    dc3dfce94 Bump to v4.4.0-RC3
    425da01d4 Create release notes for v4.4.0
    300904a84 Cirrus: Update operating branch
    9904fbed3 fix APIv2 python attach test flake
    9d1c153cf ps: query health check in batch mode
    fda62b2d8 make example volume import, not import volume
    623ad2a63 Correct output when inspecting containers created with --ipc
    2db468204 Vendor containers/(storage, image, common, buildah)
    c4aae9b47 Get correct username in pod when using --userns=keep-id
    6f519c9bd ps: get network data in batch mode
    795708f8b build(deps): bump github.com/onsi/gomega from 1.25.0 to 1.26.0
    4ed46c984 add hack/perf for comparing two container engines
    b7ab889a7 systems: retrofit dns options test to honor other search domains
    5925fe1a5 ps: do not create copy of container config
    e2c44c3d4 libpod: set search domain independently of nameservers
    06241077c libpod,netavark: correctly populate /etc/resolv.conf with custom dns server
    366e1686a podman: relay custom DNS servers to network stack
    2b650e37c (fix) mount_program is in storage.options.overlay
    b29313811 Change example target to default in doc
    86699954b network create: do not allow `default` as name
    3ae84fe0a kube-play: add support for HostPID in podSpec
    d0794ab9e build(deps): bump github.com/docker/docker
    ca91cf416 Let's see if #14653 is fixed or not
    8f7886515 Add support for podman build --group-add
    f65d79f4c vendor in latests containers/(storage, common, build, image)
    7be8ff564 unskip network update test
    b5bfc2654 do not install swagger by default
    2ad938ec6 pasta: skip "Local forwarder, IPv4" test
    3db8ef37d add testbindings Makefile target
    5ad72a234 update CI images to include pasta
    f07aa2add [CI:DOCS] Add CNI deprecation notices to documentation
    07d297ca3 Cirrus: preserve podman-server logs
    4faa139b7 waitPidStop: reduce sleep time to 10ms
    fd42c1dcb StopContainer: return if cleanup process changed state
    e0f671007 StopSignal: add a comment
    ac47d0719 StopContainer: small refactor
    e8b35a8c2 waitPidStop: simplify code
    51836aa47 e2e tests: reenable long-skipped build test
    36510f60d Add openssh-clients to podmanimage
    0bd51f6c8 Reworks Windows smoke test to tunnel through interactive session.
    b5a6f3f91 fix bud-multiple-platform-with-base-as-default-arg flake
    ef3f09879 Remove ReservedAnnotations from kube generate specification
    6d3858b21 e2e: update test/README.md
    17b5bd758 e2e: use isRootless() instead of rootless.IsRootless()
    bfc5f07d9 Cleanup documentation on --userns=auto
    120d16b61 Bump to v4.4.0-dev
    24cc02a64 Bump to v4.4.0-rc2
    ddf8e4989 Vendor in latest c/common
    dc2bd0857 sig-proxy system test: bump timeout
    193b2a836 build(deps): bump github.com/containernetworking/plugins
    a581d2a04 rootless: rename auth-scripts to preexec-hooks
    bdf100179 Docs: version-check updates
    79865c290 commit: use libimage code to parse changes
    bdc323cbf [CI:DOCS] Remove experimental mac tutorial
    8db2b4b73 man: Document the interaction between --systemd and --privileged
    70057c8b4 Make rootless privileged containers share the same tty devices as rootfull ones
    067442b57 container kill: handle stopped/exited container
    a218960bc Vendor in latest containers/(image,ocicrypt)
    6f919af78 add a comment to container removal
    5ac5aaa72 Vendor in latest containers/storage
    daf747f16 Cirrus: Run machine tests on PR merge
    4bb69abd5 fix flake in kube system test
    9a206fdc9 kube play: complete container spec
    a02a10f3f E2E Tests: Use inspect instead of actual data to avoid UDP flake
    c2b36beb4 Use containers/storage/pkg/regexp in place of regexp
    c433982d1 Vendor in latest containers/storage
    11835d5d0 Cirrus: Support using updated/latest NV/AV in PRs
    d9bf3f129 Limit replica count to 1 when deploying from kubernetes YAML
    1ab833fb7 Set StoppedByUser earlier in the process of stopping
    6ab883448 podman-play system test: refactor
    470b68077 Bump to v4.4.0-dev
    d8774a93c Bump to v4.4.0-RC1
    882cd17f8 network: add support for podman network update and --network-dns-server
    d2fb6cf05 service container: less verbose error logs
    b10a906b5 Quadlet Kube - add support for PublishPort key
    ad12d61c6 e2e: fix systemd_activate_test
    758f20e20 Compile regex on demand not in init
    3e2b9a28d [docker compat] Don't overwrite the NetworkMode if containers.conf overrides netns.
    5b1bdf949 E2E Test: Play Kube set deadline to connection to avoid hangs
    f4c81b0aa Only prevent VTs to be mounted inside privileged systemd containers
    a5ce3b3cd e2e: fix play_kube_test
    81a3f7cb8 Updated error message for supported VolumeSource types
    2bf94b764 Introduce pkg retry logic in win installer task
    db0323639 logformatter: include base SHA, with history link
    37ade6be1 Network tests: ping redhat.com, not podman.io
    2d8225cd4 cobra: move engine shutdown to Execute
    35d2f61ec Updated options for QEMU on Windows hosts
    28f13a74b Update Mac installer to use gvproxy v0.5.0
    4cf06fe7e podman: podman rm -f doesn't leave processes
    494db3e16 oci: check for valid PID before kill(pid, 0)
    cf364703f linux: add /sys/fs/cgroup if /sys is a bind mount
    1bd3d32c5 Quadlet: Add support for ConfigMap key in Kube section
    4a7a45f97 remove service container _after_ pods
    07cc49efd Kube Play - allow setting and overriding published host ports
    9fe86ec7f oci: terminate all container processes on cleanup
    6dd1d48fd Update win-sshproxy to 0.5.0 gvisor tag
    e332b6246 Vendor in latest containers/common
    92cdad031 Fix a potential defer logic error around locking
    a7f53932a logformatter: nicer formatting for bats failures
    ee3380e6b logformatter: refactor verbose line-print
    e82045f73 e2e tests: stop using UBI images
    6038200fe k8s-file: podman logs --until --follow exit after time
    767947ab8 journald: podman logs --until --follow exit after time
    c674b3dd8 journald: seek to time when --since is used
    5f032256d podman logs: journald fix --since and --follow
    7826e1ced Preprocess files in UTF-8 mode
    4587e7fdb Bump golang.org/x/tools from 0.4.0 to 0.5.0 in /test/tools
    eea78ec7b Vendor in latest containers/(common, image, storage)
    54afda22b Switch to C based msi hooks for win installer
    710eeb340 hack/bats: improve usage message
    d7ac11005 hack/bats: add --remote option
    1a2e54ce6 hack/bats: fix root/rootless logic
    d0c89e90b Describe copy volume options
    bfdffb5b6 Support sig-proxy for podman-remote attach and start
    6886e80b4 libpod: fix race condition rm'ing stopping containers
    fb73121c4 e2e: fix run_volume_test
    86965f758 Add support for Windows ARM64
    f9e8e8cfd Add shared --compress to man pages
    df02cb51e Add container error message to ContainerState
    d92bfd244 Man page checker: require canonical name in SEE ALSO
    2a16e0484 system df: improve json output code
    03c7f47aa kube play: fix the error logic with --quiet
    9f0a37cd4 System tests: quadlet network test
    e47964417 Fix: List container with volume filter
    cd3492304 adding -dryrun flag
    347d5372e Quadlet Container: Add support for EnvironmentFile and EnvironmentHost
    68fbebfac Kube Play: use passthrough as the default log-driver if service-container is set
    635c00840 System tests: add missing cleanup
    8e77f4c99 System tests: fix unquoted question marks
    16b595c32 Build and use a newer systemd image
    a061d793d Quadlet Network - Fix the name of the required network service
    3ebb822e2 System Test Quadlet - Volume dependency test did not test the dependency
    a741299ef fix `podman system connection - tcp` flake
    1d3fd5383 vendor: bump c/storage to a747b27
    598b93722 Fix instructions about setting storage driver on command-line
    18b21b89c Test README - point users to hack/bats
    2000c4c80 System test: quadlet kube basic test
    479052afa Fixed `podman update --pids-limit`
    553df8748 podman-remote,bindings: trim context path correctly when its emptydir
    9f5f092f1 Quadlet Doc: Add section for .kube files
    200f86ede e2e: fix containers_conf_test
    0c94f6185 Allow '/' to prefix container names to match Docker
    0c6805880 Remove references to qcow2
    1635db474 Fix typos in man page regarding transient storage mode.
    85ceb7fb5 make: Use PYTHON var for .install.pre-commit
    338b28393 Add containers.conf read-only flag support
    d27ebf2ee Explain that relabeling/chowning of volumes can take along time
    45b180c1f events: support "die" filter
    1e84e1a8d infra/abi: refactor ContainerRm
    3808067ff When in transient store mode, use rundir for bundlepath
    0179aa245 quadlet: Support Type=oneshot container files
    236f0cc50 hacks/bats: keep QUADLET env var in test env
    97f9d625a New system tests for conflicting options
    bfec23c36 Vendor in latest containers/(buildah, image, common)
    24b1e81c5 Output Size and Reclaimable in human form for json output
    4724fa307 podman service: close duplicated /dev/null fd
    8e05caef6 ginkgo tests: apply ginkgolinter fixes
    3e48d74c8 Add support for hostPath and configMap subpath usage
    3ac5d1009 export: use io.Writer instead of file
    1bac16096 rootless: always create userns with euid != 0
    90719d38f rootless: inhibit copy mapping for euid != 0
    02555d166 pkg/domain/infra/abi: introduce `type containerWrapper`
    987c8e3a7 vendor: bump to buildah ca578b290144 and use new cache API
    0cf36684c quadlet: Handle booleans that have defaults better
    dd428af89 quadlet: Rename parser.LookupBoolean to LookupBooleanWithDefault
    ddeb9592c Add podman-clean-transient.service service
    80de85081 Stop recording annotations set to false
    9187df5b2 Unify --noheading and -n to be consistent on all commands
    2bbeba70b pkg/domain/infra/abi: add `getContainers`
    ae706e61b Update vendor of containters/(common, image)
    24ab178fb specfile: Drop user-add depedency from quadlet subpackage.
    e9243f904 quadlet: Default BINDIR to /usr/bin if tag not specified
    d974a79e2 Quadlet: add network support
    070b69205 Add comment for jsonMarshal command
    d1496afb5 Always allow pushing from containers-storage
    0bc3d3579 libpod: move NetNS into state db instead of extra bucket
    80878f20b Add initial system tests for quadlets
    20b10574d quadlet: Add --user option
    4fa65ad0d libpod: remove CNI word were no longer applicable
    1424f0958 libpod: fix header length in http attach with logs
    12d058400 podman-kube@ template: use `podman kube`
    3868d2d82 build(deps): bump github.com/docker/docker
    f4d0496b5 wait: add --ignore option
    461726a3f qudlet: Respect $PODMAN env var for podman binary
    a4a647c0b e2e: Add assert-key-is-regex check to quadlet e2e testsuite
    84f3ad356 e2e: Add some assert to quadlet test to make sure testcases are sane
    97f63da67 remove unmapped ports from inspect port bindings
    fa4b34618 update podman-network-create for clarity
    3718ac8e9 Vendor in latest containers/common with default capabilities
    f0a8c0bd9 pkg/rootless: Change error text ...
    290019c48 rootless: add cli validator
    71f96c2e6 rootless: define LIBEXECPODMAN
    14ee8faff doc: fix documentation for idmapped mounts
    dcbf7b448 bump golangci-lint to v1.50.1
    b1bb84637 build(deps): bump github.com/onsi/gomega from 1.24.1 to 1.24.2
    89939dea9 [CI:DOCS] podman-mount: s/umount/unmount/
    46b7d8d1e create/pull --help: list pull policies
    bddd3f5b5 Network Create: Add --ignore flag to support idempotent script
    866426a93 Make qemu security model none
    fdcc2257d libpod: use OCI idmappings for mounts
    4a5581ce0 stop reporting errors removing containers that don't exist
    80405a2a5 test: added test from wait endpoint with to long label
    fd92a6807 quadlet: Default VolatileTmp to off
    b4d90b2eb build(deps): bump github.com/ulikunitz/xz from 0.5.10 to 0.5.11
    f155a4e78 docs/options/ipc: fix list syntax
    b3c7c1872 Docs: Add dedicated DOWNLOAD doc w/ links to bins
    f825481a4 Make a consistently-named windows installer
    45a40bf58 checkpoint restore: fix --ignore-static-ip/mac
    95cc7e052 add support for subpath in play kube for named volumes
    364ed81b4 build(deps): bump golang.org/x/net from 0.2.0 to 0.4.0
    59118b42b golangci-lint: remove three deprecated linters
    08741496d parse-localbenchmarks: separate standard deviation
    bf66b6ac7 build(deps): bump golang.org/x/term from 0.2.0 to 0.3.0
    7bd1dbb75 podman play kube support container startup probe
    43e307b84 Add podman buildx version support
    7c6873b23 Cirrus: Collect benchmarks on machine instances
    b361a42e6 Cirrus: Remove escape codes from log files
    59ce7cf1c [CI:DOCS] Clarify secret target behavior
    fe3d3256e Fix typo on network docs
    9f6cf50d5 podman-remote build add --volume support
    2dde30b93 remote: allow --http-proxy for remote clients
    2f29639bd Cleanup kube play workloads if error happens
    1ed982753 health check: ignore dependencies of transient systemd units/timers
    04ea8eade fix: event read from syslog
    db4d01871 Fixes secret (un)marshaling for kube play.
    7665bbc12 Remove 'you' from man pages
    1bfaf5194 build(deps): bump golang.org/x/tools from 0.3.0 to 0.4.0 in /test/tools
    97c56eef6 [CI:DOCS] test/README.md: run tests with podman-remote
    8b87665f2 e2e: keeps the http_proxy value
    9b702460e Makefile: Add podman-mac-helper to darwin client zip
    c7b936a41 test/e2e: enable "podman run with ipam none driver" for nv
    45f8b1ca9 [skip-ci] GHA/Cirrus-cron: Fix execution order
    4fa307f14 kube sdnotify: run proxies for the lifespan of the service
    7d16c2b69 Update containers common package
    75f421571 podman manpage: Use man-page links instead of file names
    86f4bd4f5 e2e: fix e2e tests in proxy environment
    4134a3723 Fix test
    28774f18c disable healthchecks automatically on non systemd systems
    1ea00ebda Quadlet Kube: Add support for userns flag
    07a386835 [CI:DOCS] Add warning about --opts,o with mount's -o
    93d2ec148 Add podman system prune --external
    f1dbfda80 Add some tests for transient store
    e74b3f24e runtime: In transient_store mode, move bolt_state.db to rundir
    25d9af8f4 runtime: Handle the transient store options
    56115d5e5 libpod: Move the creation of TmpDir to an earlier time
    c9961e18c network create: support "-o parent=XXX" for ipvlan
    2f5025a2d compat API: allow MacAddress on container config
    a55413c80 Quadlet Kube: Add support for relative path for YAML file
    8c3af7186 notify k8s system test: move sending message into exec
    a651cdfbc runtime: do not chown idmapped volumes
    f3c5b0f9d quadlet: Drop ExecStartPre=rm %t/%N.cid
    d61618ad4 Quadlet Kube: Set SyslogIdentifier if was not set
    eaab4b99a Add a FreeBSD cross build to the cirrus alt build task
    39b6ccb38 Add completion for --init-ctr
    af86b4f62 Fix handling of readonly containers when defined in kube.yaml
    98a1b551f Build cross-compilation fixes
    6ed8dc17c libpod: Track healthcheck API changes in healthcheck_unsupported.go
    16cf34dc3 quadlet: Use same default capability set as podman run
    b34ab8b5f quadlet: Drop --pull=never
    098ad52ec quadlet: Change default of ReadOnly to no
    1c3fddfaf quadlet: Change RunInit default to no
    d19ea6a60 quadlet: Change NoNewPrivileges default to false
    a93a390b8 test: podman run with checkpoint image
    f4401567c Enable 'podman run' for checkpoint images
    3a362462c test: Add tests for checkpoint images
    bdd5f8245 CI setup: simplify environment passthrough code
    10e020c65 Init containers should not be restarted
    c83efd0f0 Update c/storage after https://github.com/containers/storage/pull/1436
    486790f61 Set the latest release explicitly
    d19e1526d add friendly comment
    1d84f0adb fix an overriding logic and load config problem
    2b6cf1d07 Update the issue templates
    2862ecf28 Update vendor of containers/(image, buildah)
    1c1a8d33f [CI:DOCS] Skip windows-smoke when not useful
    190bab553 [CI:DOCS] Remove broken gate-container docs
    bb10095ec OWNERS: add Jason T. Greene
    68d41c68d hack/podmansnoop: print arguments
    009f5ec67 Improve atomicity of VM state persistence on Windows
    052174891 [CI:BUILD] copr: enable podman-restart.service on rpm installation
    54ef7f98d macos: pkg: Use -arm64 suffix instead of -aarch64
    fe548dd0b linux: Add -linux suffix to podman-remote-static binaries
    d22395007 linux: Build amd64 and arm64 podman-remote-static binaries
    71f92d263 container create: add inspect data to event
    d2ac99d65 Allow manual override of install location
    f17479c71 Run codespell on code
    cb96eac45 Add missing parameters for checkpoint/restore endpoint
    d16129330 Add support for startup healthchecks
    2df0d9da9 Add information on metrics to the `network create` docs
    96c208efb Introduce podman machine os commands
    32d80378e Document that ignoreRootFS depends on export/import
    1d031bf3b Document ignoreVolumes in checkpoint/restore endpoint
    279a4ac77 Remove leaveRunning from swagger restore endpoint
    07940764c libpod: Add checks to avoid nil pointer dereference if network setup fails
    dce7b3a5b Address golangci-lint issues
    3eeb50d48 Bump golang version to 1.18
    fbbef79c8 Documenting Hyper-V QEMU acceleration settings
    9a6b70155 Kube Play: fix the handling of the optional field of SecretVolumeSource
    35b46a420 Update Vendor of containers/(common, image, buildah)
    75f6a1d59 Fix swapped NetInput/-Output stats
    f06869168 libpod: Use O_CLOEXEC for descriptors returned by (*Container).openDirectory
    fad50a9f2 chore: Fix MD for Troubleshooting Guide link in GitHub Issue Template
    64a450c51 test/tools: rebuild when files are changed
    2ddf1c5cb ginkgo tests: apply ginkgolinter fixes
    c7827957a ginkgo: restructure install work flow
    ce7d4bbc7 Fix manpage emphasis
    5d26628df specgen: support CDI devices from containers.conf
    7eb11e7bb vendor: update containers/common
    6502b1faa pkg/trust: Take the default policy path from c/common/pkg/config
    ba522e8f3 Add validate-in-container target
    3bb9ed4f0 Adding encryption decryption feature
    e2fa94e8a container restart: clean up healthcheck state
    a4ba5f449 Add support for podman-remote manifest annotate
    3084ed468 Quadlet: Add support for .kube files
    fb429dbe3 Update vendor of containers/(buildah, common, storage, image)
    a891199b9 specgen: honor user namespace value
    a575111ad [CI:DOCS] Migrate OSX Cross to M1
    285d6c9ba quadlet: Rework uid/gid remapping
    f5a43eea2 GHA: Fix cirrus re-run workflow for other repos.
    50d72bc63 ssh system test: skip until it becomes a test
    e7eed5aa9 shell completion: fix hard coded network drivers
    504fcbbf9 libpod: Report network setup errors properly on FreeBSD
    dd4d212b0 E2E Tests: change the registry for the search test to avoid authentication
    1498f924b pkginstaller: install podman-mac-helper by default
    a1b32866c Fix language. Mostly spelling a -> an
    caa2dfe01 podman machine: Propagate SSL_CERT_FILE and SSL_CERT_DIR to systemd environment.
    72966a32c [CI:DOCS] Fix spelling and typos
    ae8a5a892 Modify man page of "--pids-limit" option to correct a default value.
    f950b1511 Update docs/source/markdown/podman-remote.1.md
    a9094a78a Update pkg/bindings/connection.go
    b6850e772 Add more documentation on UID/GID Mappings with --userns=keep-id
    0d270ae38 support podman-remote to connect tcpURL with proxy
    607cd39e1 Removing the RawInput from the API output
    14ef6a91b fix port issues for CONTAINER_HOST
    34020b353 CI: Package versions: run in the 'main' step
    db34c913b build(deps): bump github.com/rootless-containers/rootlesskit
    4c1294ccb pkg/domain: Make checkExecPreserveFDs platform-specific
    58869dcc3 e2e tests: fix restart race
    7c1ad8a58 Fix podman --noout to suppress all output
    9610d4c7b remove pod if creation has failed
    f36b3bc81 pkg/rootless: Implement rootless.IsFdInherited on FreeBSD
    21f6902ec Fix more podman-logs flakes
    1a839a96d healthcheck system tests: try to fix flake
    36f8dfaa0 libpod: treat ESRCH from /proc/PID/cgroup as ENOENT
    021a23b34 GHA: Configure workflows for reuse
    c7073b5fc compat,build: handle docker's preconfigured cacheTo,cacheFrom
    dceaa7603 docs: deprecate pasta network name
    a9852aa8f utils: Enable cgroup utils for FreeBSD
    e5f7fbcbe pkg/specgen: Disable kube play tests on FreeBSD
    978c52850 libpod/lock: Fix build and tests for SHM locks on FreeBSD
    3371c9d25 podman cp: fix copying with "." suffix
    f0dba82bb pkginstaller: bump Qemu to version 7.1.0
    f6da2b060 specgen,wasm: switch to crun-wasm wherever applicable
    2b4068a03 vendor: bump c/common to v0.50.2-0.20221111184705-791b83e1cdf1
    1c79b01f6 libpod: Make unit test for statToPercent Linux only
    95bb6efff Update vendor of containers/storage
    69d737ef1 fix connection usage with containers.conf
    dd98e3cc6 Add --quiet and --no-info flags to podman machine start
    00b2bc9b6 Add hidden podman manifest inspect -v option
    05c48402b Bump github.com/onsi/gomega from 1.24.0 to 1.24.1
    836ca6c00 Add podman volume create -d short option for driver
    5df00c6f7 Vendor in latest containers/(common,image,storage)
    bc77c034f Add podman system events alias to podman events
    ae9a2d26d Fix search_test to return correct version of alpine
    75fdbea63 Bump golang.org/x/tools from 0.1.12 to 0.3.0 in /test/tools
    329b053cf GHA: Fix undefined secret env. var.
    d60c27c9d Release notes for 4.3.1
    a13a59a70 GHA: Fix make_email-body script reference
    f049fef85 Add release keys to README
    dca407d46 GHA: Fix typo setting output parameter
    fcfb7d292 GHA: Fix typo.
    db439dd23 New tool, docs/version-check
    c0a9c6ebc Formalize our compare-against-docker mechanism
    a2c43d434 Add restart-sec for container service files
    4513fde80 test/tools: bump module to go 1.17
    440807210 contrib/cirrus/check_go_changes.sh: ignore test/tools/vendor
    9f9bf6fb4 Bump github.com/coreos/go-systemd/v22 from 22.4.0 to 22.5.0
    a1323d31d Bump golang.org/x/term from 0.1.0 to 0.2.0
    8b8ce8d53 Bump golang.org/x/sys from 0.1.0 to 0.2.0
    fa2b4aeef Bump github.com/container-orchestrated-devices/container-device-interface
    69ed903b2 build(deps): bump golang.org/x/tools from 0.1.12 to 0.2.0 in /test/tools
    d95684676 libpod: Add FreeBSD support in packageVersion
    d9aceadea Allow podman manigest push --purge|-p as alias for --rm
    b5ee4de8c [CI:DOCS] Add performance tutorial
    cfa651f80 [CI:DOCS] Fix build targets in build_osx.md.
    3e08f8535 fix --format {{json .}} output to match docker
    f807b6784 remote: fix manifest add --annotation
    314cba259 Skip test if `--events-backend` is necessary with podman-remote
    1c8196a9a kube play: update the handling of PersistentVolumeClaim
    616fca9ff system tests: fix a system test in proxy environment
    85ae935af Use single unqualified search registry on Windows
    cb8c9af5d test/system: Add, use tcp_port_probe() to check for listeners rather than binds
    348c3f283 test/system: Add tests for pasta(1) connectivity
    b3cf83684 test/system: Move network-related helpers to helpers.network.bash
    ea4f168b3 test/system: Use procfs to find bound ports, with optional address and protocol
    7e3d04fbc test/system: Use port_is_free() from wait_for_port()
    aa47e05ae libpod: Add pasta networking mode
    6dd508b8e More log-flake work
    3ebcfdbbc Fix test flakes caused by improper podman-logs
    919678d2f fix incorrect systemd booted check
    0334d8d61 Cirrus: Add tests for GHA scripts
    66d857cdd GHA: Update scripts to pass shellcheck
    d17b7d852 Cirrus: Shellcheck github-action scripts
    2ee40287e Cirrus: shellcheck support for github-action scripts
    462ce32e6 GHA: Fix cirrus-cron scripts
    d5031946a Makefile: don't install to tmpfiles.d on FreeBSD
    85f4d3717 Make sure we can build and read each line of docker py's api client
    cdb00332d Docker compat build api - make sure only one line appears per flush
    efbad590d Run codespell on code
    571833d56 Update vendor of containers/(image, storage, common)
    049a5d82f Allow namespace path network option for pods.
    f3195c930 Cirrus: Never skip running Windows Cross task
    35523d560 GHA: Auto. re-run failed cirrus-cron builds once
    3a85d537b GHA: Migrate inline script to file
    980d5b362 GHA: Simplify script reference
    417490128 test/e2e: do not use apk in builds
    3fee351c3 remove container/pod id file along with container/pod
    442df2967 Cirrus: Synchronize windows image
    274d0f495 Add --insecure,--tls-verify,--verbose flags to podman manifest inspect
    cac4919bf runtime: add check for valid pod systemd cgroup
    d7e70c748 CI: set and verify DESIRED_NETWORK (netavark, cni)
    6ec2bcb68 [CI:DOCS] troubleshooting: document keep-id options
    f95ff4f46 Man pages: refactor common options: --security-opt
    853072455 Cirrus: Guarantee CNI testing w/o nv/av present
    fd9de876f Cirrus: temp. disable all Ubuntu testing
    ecd1927b4 Cirrus: Update to F37beta
    56fae7dd0 buildah bud tests: better handling of remote
    7ec743fe7 quadlet: Warn in generator if using short names
    884350d99 Add Windows Smoke Testing
    f6c74324b Add podman kube apply command
    d1f3dd9e5 docs: offer advice on installing test dependencies
    8e55abafd Fix documentation on read-only-tmpfs
    b8acdb34c version bump to 4.4.0-dev
    b8e03ab44 deps: bump go-criu to v6
    fc65d72c3 Makefile: Add cross build targets for freebsd
    e23444fbc pkg/machine: Make this build on FreeBSD/arm64
    3279342ff pkg/rctl: Remove unused cgo dependency
    d76bf4cb5 man pages: assorted underscore fixes
    bb78ba19e Upgrade GitHub actions packages from v2 to v3
    0d505f20f vendor github.com/godbus/dbus/v5@4b691ce
    b20ef9c34 [CI:DOCS] fix --tmpdir typos
    9003cdbf6 Do not report that /usr/share/containers/storage.conf has been edited.
    71f0c9f33 Eval symlinks on XDG_RUNTIME_DIR
    3ad5827b2 hack/podmansnoop
    83313c547 rootless: support keep-id with one mapping
    5dad34212 rootless: add argument to GetConfiguredMappings
    6fe64591d Update vendor containers/(common,storage,buildah,image)
    f355900d3 Fix deadlock between 'podman ps' and 'container inspect' commands
    59299b519 Add information about where the libpod/boltdb database lives
    320ce8c9f Consolidate the dependencies for the IsTerminal() API
    871172e6f Ensure that StartAndAttach locks while sending signals
    d50a55233 ginkgo testing: fix podman usernamespace join
    f0f12658d Test runners: nuke podman from $PATH before tests
    3e6637a3b volumes: Fix idmap not working for volumes
    237d41f3f FIXME: Temporary workaround for ubi8 CI breakage
    11e4c0403 System tests: teardown: clean up volumes
    a141c9ac2 update api versions on docs.podman.io
    fdc9ca076 system tests: runlabel: use podman-under-test
    05bdc7294 system tests: podman network create: use random port
    f0ba2d89e sig-proxy test: bump timeout
    0ce234425 play kube: Allow the user to import the contents of a tar file into a volume
    bac907abf Clarify the docs on DropCapability
    33eb45c47 quadlet tests: Disable kmsg logging while testing
    b07ba2441 quadlet: Support multiple Network=
    8716de2ac quadlet: Add support for Network=...
    721922fa7 Fix manpage for podman run --network option
    6042ca7fd quadlet: Add support for AddDevice=
    f6f65f49d quadlet: Add support for setting seccomp profile
    a9f0957c2 quadlet: Allow multiple elements on each Add/DropCaps line
    af67f15bc quadlet: Embed the correct binary name in the generated comment
    2b0d9cd94 quadlet: Drop the SocketActivated key
    d7e248dcf quadlet: Switch log-driver to passthrough
    998f834b0 quadlet: Change ReadOnly to default to enabled
    0de98b1b6 quadlet tests: Run the tests even for (exected) failed tests
    8d41c7d2e quadlet tests: Fix handling of stderr checks
    5c3a22e8c Remove unused script file
    c4ebe9e2a notifyproxy: fix container watcher
    221cfc687 container/pod id file: truncate instead of throwing an error
    b7f05cef0 quadlet: Use the new podman create volume --ignore
    734c435e0 Add podman volume create --ignore
    4966f509b logcollector: include aardvark-dns
    6a9c7a580 build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1
    e081d22b0 build(deps): bump github.com/BurntSushi/toml from 1.2.0 to 1.2.1
    622638b72 docs: generate systemd: point to kube template
    c1de4d3ce docs: kube play: mention restart policy
    0572e5972 Fixes: 15858 (podman system reset --force destroy machine)
    7a9c14d62 fix search flake
    4e29ce2ba use cached containers.conf
    6c7ae378c adding regex support to the ancestor ps filter function
    e5032a8de Fix `system df` issues with `-f` and `-v`
    c9c2f644d markdown-preprocess: cross-reference where opts are used
    77f8eaa73 Default qemu flags for Windows amd64
    e16800e8b build(deps): bump golang.org/x/text from 0.3.8 to 0.4.0
    d70ffdaeb Update main to reflect v4.3.0 release
    b8c24bbb4 build(deps): bump github.com/docker/docker
    b4374f2bd move quadlet packages into pkg/systemd
    34235b272 system df: fix image-size calculations
    34ee37b91 Add man page for quadlet
    84ed9bd5e Fix small typo
    120a77e39 testimage: add iproute2 & socat, for pasta networking
    30e66d600 Set up minikube for k8s testing
    0a6d8b94c Makefile: don't install systemd generator binaries on FreeBSD
    cadb64d32 [CI:BUILD] copr: podman rpm should depend on containers-common-extra
    02bb7c2cf Podman image: Set default_sysctls to empty for rootless containers
    234b2230e Don't use  github.com/docker/distribution
    9e6b37ec1 libpod: Add support for 'podman top' on FreeBSD
    21081355a libpod: Factor out jail name construction from stats_freebsd.go
    b82b27cc4 pkg/util: Add pid information descriptors for FreeBSD
    62bb59d3b Initial quadlet version integrated in golang
    44bac51fc bump golangci-lint to v1.49.0
    01a3245d7 Update vendor containers/(common,image,storage)
    75222add5 Allow volume mount dups, iff source and dest dirs
    cb2631bf3 rootless: fix return value handling
    783b4e914 Change to correct break statements
    04c126a3b vendor containers/psgo@v1.8.0
    c39b71776 Clarify that MacOSX docs are client specific
    51c376c8a libpod: Factor out the call to PidFdOpen from (*Container).WaitForExit
    bb2b47dc7 Add swagger install + allow version updates in CI
    2a622c8af Cirrus: Fix windows clone race
    973710c8b build(deps): bump github.com/docker/docker
    b35fab6f1 kill: wait for the container
    ba276e117 generate systemd: set --stop-timeout for stopping containers
    5113343a5 hack/tree_status.sh: print diff at the end
    bab816953 Fix markdown header typo
    bd4ee2d57 markdown-preprocess: add generic include mechanism
    9cdea7fb3 markdown-preprocess: almost complete OO rewrite
    33858c1cf Update tests for changed error messages
    05119a917 Update c/image after https://github.com/containers/image/pull/1299
    8c7673857 Man pages: refactor common options (misc)
    617a2de3a Man pages: Refactor common options: --detach-keys
    69815a7f1 vendor containers/storage@main
    a584bb4e7 Man pages: refactor common options: --attach
    0510dd2f1 build(deps): bump github.com/fsnotify/fsnotify from 1.5.4 to 1.6.0
    1d18dc267 KillContainer: improve error message
    5da54e183 docs: add missing options
    57ddeffd0 Man pages: refactor common options: --annotation (manifest)
    b256f5f58 build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0
    f16e9acc6 system tests: health-on-failure: fix broken logic
    7ff8c8f79 build(deps): bump golang.org/x/text from 0.3.7 to 0.3.8
    00adeda80 build(deps): bump github.com/onsi/gomega from 1.20.2 to 1.22.1
    d08b4c133 ContainerEngine.SetupRootless(): Avoid calling container.Config()
    03c5f9d02 Container filters: Avoid use of ctr.Config()
    af38c79e3 Avoid unnecessary calls to Container.Spec()
    55191ecc2 Add and use Container.LinuxResource() helper
    7b84a3a43 play kube: notifyproxy: listen before starting the pod
    2bee2216c play kube: add support for configmap binaryData
    1038f063e Add and use libpod/Container.Terminal() helper
    b47b48fd0 Revert "Add checkpoint image tests"
    f437078d2 Revert "cmd/podman: add support for checkpoint images"
    4dd67272e healthcheck: fix --on-failure=stop
    d4052c1aa Man pages: Add mention of behavior due to XDG_CONFIG_HOME
    b5950a918 build(deps): bump github.com/containers/ocicrypt from 1.1.5 to 1.1.6
    c34b5be99 Avoid unnecessary timeout of 250msec when waiting on container shutdown
    02040089a health checks: make on-failure action retry aware
    5b71070e4 libpod: Remove 100msec delay during shutdown
    b4b701139 libpod: Add support for 'podman pod' on FreeBSD
    7f8964a78 libpod: Factor out cgroup validation from (*Runtime).NewPod
    d71160539 libpod: Move runtime_pod_linux.go to runtime_pod_common.go
    c35a70d21 specgen/generate: Avoid a nil dereference in MakePod
    e187b9711 libpod: Factor out cgroups handling from (*Pod).refresh
    713428df0 Adds a link to OSX docs in CONTRIBUTING.md
    f8b659d09 Man pages: refactor common options: --os-version
    8b189c0a0 Create full path to a directory when DirectoryOrCreate is used with play kube
    d4f622da7 Return error in podman system service if URI scheme is not unix/tcp
    51c357841 Man pages: refactor common options: --time
    0e4eeb52e man pages: document some --format options: images
    e136376d1 Clean up when stopping pods
    11e83a095 Update vendor of containers/buildah v1.28.0
    1e71d124e Proof of concept: nightly dependency treadmill

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-02-17 15:21:29 -05:00
Bruce Ashfield
43396cb671 podman: update to 4.3
We add ${datadir}/user-tmpfiles.d/* to package some newly added systemd
files, but otherwise, the recipe is unchanged.

Bumping libpod to version v4.3.0-7-g9ce592fcb, which comprises the following commits:

    83b02f8fd Update c/image from release-5.23 branch
    14563ef13 system tests: fix broken bashisms
    34ebb9af2 Release notes fixes
    d5a0dfc1e Bump to v4.3.1-dev
    ad42af949 Bump to v4.3.0
    9496a3836 Final release notes for v4.3.0
    ac7fa8437 libpod: Add support for 'podman top' on FreeBSD
    f8a79409c libpod: Factor out jail name construction from stats_freebsd.go
    e33306683 pkg/util: Add pid information descriptors for FreeBSD
    3810a9dac [CI:BUILD] copr: podman rpm should depend on containers-common-extra
    94499aa47 Podman image: Set default_sysctls to empty for rootless containers
    8a28b896b Allow volume mount dups, iff source and dest dirs
    295d0d1d9 libpod: Factor out the call to PidFdOpen from (*Container).WaitForExit
    c9c683a58 markdown-preprocess: add generic include mechanism
    42a221874 markdown-preprocess: almost complete OO rewrite
    ca9eaec5e bump golangci-lint to v1.49.0
    6972d47ff rootless: fix return value handling
    5a214f6e5 generate systemd: set --stop-timeout for stopping containers
    c6ad786ca Change to correct break statements
    1a5506459 Add swagger install + allow version updates in CI
    78d4af894 Cirrus: Fix windows clone race
    fc43751e7 kill: wait for the container
    9c01425ad hack/tree_status.sh: print diff at the end
    682dd8e45 Man pages: refactor common options (misc)
    b98f6b52f Man pages: Refactor common options: --detach-keys
    c7e946482 Man pages: refactor common options: --attach
    83b5fcf38 build(deps): bump github.com/fsnotify/fsnotify from 1.5.4 to 1.6.0
    6d5d84a05 Man pages: refactor common options: --annotation (manifest)
    7f88deff1 KillContainer: improve error message
    b805a068c build(deps): bump github.com/containers/ocicrypt from 1.1.5 to 1.1.6
    42b642509 docs: add missing options
    f2a2ab557 build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0
    095aa5c3a play kube: notifyproxy: listen before starting the pod
    b7514ee40 build(deps): bump golang.org/x/text from 0.3.7 to 0.3.8
    f7732ae52 Man pages: refactor common options: --os-version
    298a2432e play kube: add support for configmap binaryData
    2efdff528 build(deps): bump github.com/onsi/gomega from 1.20.2 to 1.22.1
    802118ad1 Revert "Add checkpoint image tests"
    dfa55ff6a Revert "cmd/podman: add support for checkpoint images"
    eb43d175c system tests: health-on-failure: fix broken logic
    ee5bd1e0c Man pages: Add mention of behavior due to XDG_CONFIG_HOME
    c88dfbb98 Add and use libpod/Container.Terminal() helper
    cbde35e32 Avoid unnecessary timeout of 250msec when waiting on container shutdown
    d15b4af92 healthcheck: fix --on-failure=stop
    81c645f2f libpod: Add support for 'podman pod' on FreeBSD
    546e9445e libpod: Factor out cgroup validation from (*Runtime).NewPod
    26df7d97c libpod: Move runtime_pod_linux.go to runtime_pod_common.go
    70e0cb509 specgen/generate: Avoid a nil dereference in MakePod
    f92360283 libpod: Factor out cgroups handling from (*Pod).refresh
    b9d479b72 health checks: make on-failure action retry aware
    ead78d8ba libpod: Remove 100msec delay during shutdown
    640eac465 Clean up when stopping pods
    d31a06ce8 Create full path to a directory when DirectoryOrCreate is used with play kube
    9ce61988d Return error in podman system service if URI scheme is not unix/tcp
    8041df3b6 Update vendor of containers/buildah v1.28.0
    d13509f27 Man pages: refactor common options: --time
    c16078f2d Release notes for all content before cherry-picks
    3451aac35 Man pages: refactor common options: --pod
    aaa9f4ea9 Prevent nil pointer deref in GetImage
    f250560a8 Add pods created by kube play to a default network
    26468c227 Man pages: refactor common options: --features
    2f6c911d6 build(deps): bump github.com/opencontainers/image-spec
    62bc8e3a1 Cirrus: Fix tag & branch go checks failing
    eaa389262 Man pages: refactor common options: --variant
    9bafd9c46 Man pages: refactor common options: --compression-format
    eb7f54ef6 cleanup: always delete netns mount
    a2581abbf Adds brew info podman to issue template.
    73c8416c3 Update for https://github.com/klauspost/pgzip/pull/50
    02b0f9fc3 container inspect: include image digest
    fe3c91d58 Update vendor containers/(common,image)
    f304a1757 Fix typo about e2e tests name
    66747351f [CI:DOCS] Add quay-description update reminder
    0660f5b7a Cirrus: Combine build and code consistency tasks
    6c8a11b74 Cirrus: Combine pre-test checks into build task
    0e7d166ee Cirrus: Minor YAML comment/whitespace fix
    e7328cb97 Man pages: refactor common options: --network
    fe2b4df38 podman kube play allow --network host
    e4c0c8994 Man pages: Refactor common options: --sign-passphrase-file
    309f4fb54 Man pages: refactor common options: --log-opt
    6f821f03d `podman pod logs -l` no longer panics
    f00ceaabd vendor: bump c/common to v0.49.2-0.20220929111928-2d1b45ae2423
    3b5171d0e fix "podman system prune networks" flake
    ebff193f8 Add test for podman run with checkpoint image
    9c3d8bb49 cmd/podman: add support for checkpoint images
    b17d8ff46 restore: make IsCheckpointImage reusable
    e2fe9eaba Revert "remote: fix manifest add --annotation"
    32f54a81e remote: fix manifest add --annotation
    496d4c753 System tests: stop deep-checking log-level
    ba70dd5ec build(deps): bump github.com/container-orchestrated-devices/container-device-interface
    66517d86a fix: kube play liveness probe http path
    f5fc0960e Default missing hostPort to containerPort is defined in kube.yaml
    359e39744 libpod: Add volume support for FreeBSD
    abe8dad34 libpod: Factor out usage of unix.MNT_DETACH from (*Volume).unmount
    9de2a5ff7 libpod: Move volume_internal_linux.go to volume_internal_common.go
    065474755 libpod: Move runtime_volume_linux.go to runtime_volume_common.go
    95cb14aff fix: liveness check with http probe
    3e8093152 System tests: light cleanup
    0fb95f95d CI: only make install.tools when needed
    2e4e1bb97 podman machine ssh handling
    53d604182 Cirrus: Build pkginstaller in CI
    c1ae7f193 Add SELinux information about boolean for using random devices
    f32b02c7b Bump to v4.3.0-dev
    f818eb4a5 Bump to v4.3.0-RC1
    527fc409e Cirrus: Add golang code consistency check script
    f6724116a Man pages: refactor common options: --env-file
    7bc36602f auto-update: validate container image
    fa18d35e8 Man pages: refactor common options: --env
    911ceb823 Man pages: Refactor common options: --sig-proxy
    fde4d21be man page xref: verify page title
    8c627dfb5 Contrib: Add containerfile to create podman-remote binary image
    9261a5469 Remove redundant log message
    52656887e compat API: network inspect do not show isolate option
    337f1f586 [CI:DOCS] man pages: fix incorrect title
    f5e83f684 Fixup Buildah merge
    54653ceeb Update vendor or containers/buildah
    3a5b5d04b Fix machine starting state
    69ac1e36c Cirrus: Catch use of deprecated io/ioutil package
    8ff54cbe8 Fix libsubid detection
    326d386ee [CI:BUILD] Copr: also define _user_tmpfilesdir for f35
    2478e32ca fix restore API endpoint
    6ee582315 Events for containers in pods now include the pod's ID
    dc05d1212 Add --pretty to podman secret inspect
    fc6dcd12b Add support for 'image' volume driver
    5a2405ae1 Don't mount /dev/tty* inside privileged containers running systemd
    d5f044ee7 System tests: reenable some skipped aarch64 tests
    33c31112f cli: Add signature-policy flag to podman save
    ba6f84666 Fix a few missed io/ioutil -> os updates
    fb3d55006 Improve generate systemd format
    9bb51e8e9 Add labels to secrets
    7cfe0328f Add support to sig-proxy for podman-remote
    377773ab5 Fix podman-remote run --attach stdin to show container ID
    d968f3fe0 Replace deprecated ioutil
    bb160be12 libpod: Implement 'podman cp' for FreeBSD
    88f82ceab libpod: Move jointMountAndExec to container_copy_linux.go
    75d6e7bae libpod: Move part of (*Container).stat to container_stat_linux.go
    0b02d4cee libpod: Move container_copy_linux.go to container_copy_common.go
    24d129071 libpod: Move container_stat_linux.go to container_stat_common.go
    6790deb1b man pages: document some --format options
    23195646d pkginstaller: use path_helper to add podman and helpers to path
    dc8fdb46c label.Relabel third option is shared not recurse
    049b10884 podman container clone env patch
    903f551ae build(deps): bump github.com/coreos/go-systemd/v22 from 22.3.2 to 22.4.0
    4a053a821 notifyproxy: don't set a read deadline
    1071098ee kube play: sdnotify proxy: use a wait group
    21841dc38 Default to --dns-option to match Docker and Buildah
    d63e49a26 remote: checkpoint --export prints a rawInput or an error on remote
    cfbc4aaeb Cleanup: fix problems reported by shell lint
    e2573b734 Fix broken titles on readthedocs
    62d1c487d Man pages: Refactor common options: --dns
    7d1f688ff [CI:DOCS] man pages: document some --format options
    884fd4575 Revert "generate systemd: drop ExecStop"
    3508bd22f Add support for podman context as alias to podman system connection
    9ba034293 Man pages: refactor common options: 2 stats opts
    c20abf12c generate systemd: drop ExecStop
    45d09e65b libpod: Make getContainerInspectData work on FreeBSD
    2e4db139a libpod: Factor out platform-specfic code from generateInspectContainerHostConfig
    60ef4ad1c stats: cap memory limit to the available memory
    cf2118eab stats: map MaxUsage to the correct value
    3f8591c2f Man pages: refactor common options: --shm-size
    f76390d5e Man pages: refactor common options: --user
    e19e0de5f Introduce graph-based pod container removal
    51a8635c7 Cirrus: Fix win_installer task clone failure
    cb6ad7631 Cirrus: Only run unit-testing on Fedora.
    815655b9d Cirrus: Move gitlab test to cirrus-cron "main"
    88879d588 System tests: cleanup in --format test
    d4a62ff93 System tests: fix three races
    14e5d1c15 libpod: fix lookup for subpath in volumes
    92dc61d5e libpod: rename function
    42937cd9a Ensure that a broken OCI spec does not break inspect
    b6c75a3cc Man pages: refactor common options: --preserve-fds, -it
    dd53ee599 fix ci: update systemd generate unit test
    4df460836 Man pages: refactor common options: --ip6
    47fff4b00 improve slirp4netns allow_host_loopback docs
    0aedddd3b [systemd] Ensure that podCreateArgs appear last in ExecStartPre=
    b47ce9a6e libpod: Add support for 'podman stats' on FreeBSD
    b3e978e43 libpod: Split out the common code from GetContainerStats
    47bd9e811 libpod: Move stats.go to stats_linux.go for consistency
    1e6da1115 pkg/rctl: Add a simple FreeBSD RCTL library
    75740be39 all: stop using deprecated GenerateNonCryptoID
    76eb06330 Man pages: refactor common options: --tls-verify
    fe04c86a2 generate systemd: fix pod dependencies
    d4a000312 Man pages: Refactor common options: --publish
    9d41b95d7 rework --format system test
    dacd59424 Man pages: refactor common options: --publish-all
    885bc4742 Enable github labeler, use for api-change
    74e0511c9 Man pages: refactor common options: --os (pull)
    f30d4852e Man pages: refactor common options: --ip
    0ea5080c9 generate systemd: warn on --restart without --new
    c8c2aab50 health checks: restart timers
    908458d06 enable podman pod inspect --format test
    7f8e99ded podman version: use report.Formatter over Template
    0c21dcf70 podman machine info: use report.Formatter over Template
    e5389e98f podman info: use report.Formatter over Template
    1acebdda3 tests for 15673
    43f7bdf82 podman inspect return exit code > 0 on print error
    00240a0e2 podman inspect: use report.Formatter over Template
    377599f1f podman secret inspect: use report.Formatter over Template
    f5e13ded9 podman secret ls: use report.Formatter over Template
    1463898b0 podman network ls: use report.Formatter over Template
    90634d5ee podman volume ls: use report.Formatter over Template
    20eccfc9d podman machine inspect: use report.Formatter over Template
    a687949db podman machine ls: use report.Formatter over Template
    65e78d92c podman auto-update: use report.Formatter over Template
    70e6b19d4 events: Fix spelling of newNullEventer
    9457549ff build(deps): bump github.com/vbauerster/mpb/v7 from 7.5.2 to 7.5.3
    09ba2e0b9 Man pages: refactor common options: --rootfs
    07a8eb829 Ensure that the DF endpoint updated volume refcount
    e24c2f009 system tests: periodic cleanup and fixes
    a63a40c3e podman events --format: fix duplicated newline
    2ae4ce799 fix race where podman events exits to early
    b3212a680 set default EventsLogFilePath on first run
    12a1483e7 Improve --tmpdir and --events-backend docs
    72e715a11 Use new secret store API
    cd32b929e libpod: runtime newEventer() cleanup
    76980a222 event backend journald: fix problem with empty journal
    138b09c7e event backend none: return an error when reading events
    c5bdb6afe fix hang with podman events file logger
    56c880a7e libpod: Move ocicniPortsToNetTypesPorts and compareOCICNIPorts to networking_common.go
    221c4d5f0 libpod: Move NetworkDisconnect and NetworkConnect to networking_common.go
    f939f3fdf libpod: Move resultToBasicNetworkConfig to networking_common.go
    c9de84080 libpod: Add support for getContainerNetworkInfo on FreeBSD
    51c70e588 libpod: Move getContainerNetworkInfo to networking_common.go
    d014dca81 libpod: Move isBridgeNetMode and reloadContainerNetwork to networking_common.go
    1dd0eb467 libpod: Move teardownNetwork and teardownCNI to networking_common.go
    2bf050f1d libpod: Move setUpNetwork and getCNIPodName to networking_common.go
    3d7f9f67a libpod: Move convertPortMappings and getNetworkOptions to networking_common.go
    d1414adbb libpod: Add FreeBSD implementation of container networking
    c5f64d9f5 libpod: Re-work the container's network state to help code sharing
    36cfd05a7 libpod: Move platform-specific bind mounts to a per-platform method
    369d86040 libpod: Avoid a nil dereference when generating resolv.conf on FreeBSD
    a1fa9faa4 Buildah treadmill script: various fixes
    43da39d31 Man pages: refactor common options: --volumes-from
    050ae6181 [CI:DOCS] --volume: consistent wording
    d935e9799 update c/storage to latest
    6091ff42d Include more environment variables in conmon env.
    118546c6a refactor: use `os.ReadDir` for lightweight directory reading
    2c63b8439 Fix stutters
    b8108d06b Fix CPU usage limitation in play kube for non integer values
    8466c4a19 Cirrus: Don't run win_installer in multiarch cron
    6210c6723 TEMPORARY: instrumenting for 15488
    3a9a7dcdc Man pages: refactor common options: --volume
    a82672047 build(deps): bump github.com/docker/docker
    6bf8670b6 stop: fix error handling
    aad29e759 health check: add on-failure actions
    8e1aa7af3 Fixes for vendoring Buildah
    eb28a1c08 update buildah and c/common to latest
    c7411af9e Ignore cpu realtime options on cgroups V2 systems
    27be5eaaf Fix swagger documentation
    9a286f712 generate, kube: plug HostUsers
    1994f3823 Add --config for Docker compatibility
    ad63aa20d kube: plug HostUsers in the pod spec
    626ee118c e2e: fix run_staticip_test in proxy environment
    d10e77e1b fix podman pod inspect to support multiple pods
    911e4a138 specgen/generate: Factor out setting resource limits from CompleteSpec
    db33f06a9 fixes data race in system.Events and nil error logging
    f75c3181b podman: skip /sys/fs/cgroup/systemd if not present
    3f0b5cd40 Man pages: refactor common options: --userns (pod)
    8d40bf3f1 proper --debug/-D flag support
    4fbc4b8f7 Man pages: refactor common options: --privileged
    f85fa9806 libpod: Filter out ENOTCONN errors when trying to close unix domain sockets
    6668ac93b libpod: Factor out capabilites code from prepareProcessExec
    f6e3cfa53 system tests: fix systemd tests in proxy environment
    744878a71 Add win-installer build/verify workflows to CI
    ecb9f99b8 Add new windows installer and build
    d759576ab emit container labels also for container exited and exec died events
    9585147e1 fix Pod removal after OS hard shutdown
    e0d5b4e3f Change pipe wait to 20 seconds
    63c779a85 Fix manpage headers
    4675103c2 Man pages: refactor common options: --sysctl
    eb39d56df Bump github.com/docker/go-units from 0.4.0 to 0.5.0
    f4c39df25 Add win-sshproxy.exe to windows client zips
    40cd1c0ff Man pages: refactor common options: --device
    4462305fe Update the displayed warning in documentation regarding the system reset
    092690297 build(deps): bump github.com/container-orchestrated-devices/container-device-interface
    77ab6125f remove SkipIfNotFedora() from events test
    d22aeeec2 fix podman events with custom format
    a9a411f8a Add generate systemd -e/--env option
    274d34a25 kube play: support auto updates and rollbacks
    04f0ac2aa system tests: fix some tests in proxy environment
    6a3c28968 Drop stale config value resulting in asymmetric config
    c2c910736 CI: Cirrus setup: retry failed curls
    fb38838fe Man pages: refactor common options: --memory*
    0df291d3b Update system reset warning message to warn against deletion of all volumes
    bdfc4df1f pkg/autoupdate: allow updating multiple tasks per unit
    cbaa78cd8 Fix list of default capabilities
    a3aecf0f2 libpod: Factor out setting volume atime to container_internal_linux.go
    7a1abd03c libpod: Move miscellaneous file handlling to container_internal_common.go
    d162285f3 libpod: Don't mount /dev/shm in containers on FreeBSD
    212b11c34 libpod: Factor out handling of slirp4netns and net=none
    eab4291d9 libpod: Move functions related to /etc bind mounts to container_internal_common.go
    b3989be76 libpod: Move getRootNetNsDepCtr to container_internal_common.go
    a148c1622 libpod: Use (*Container).addNetworkNamespace to restore checkpoint network
    7518a9136 libpod: Move functions related to checkpoints to container_internal_common.go
    be5d1261b libpod: Move mountNotifySocket to container_internal_common.go
    71e2074e8 libpod: Move getUserOverrides, lookupHostUser to container_internal_common.go
    232eea5a0 libpod: Move isWorkDirSymlink, resolveWorkDir to container_internal_common.go
    a5ee3cb79 pkg/util: Add no-op implementation of AddPrivilegedDevices on FreeBSD
    0889215d8 libpod: Use platform-specific mount type for volume mounts
    c1a86a8c4 libpod: Factor out platform-specific sections from generateSpec
    e101f4350 libpod: Move getOverlayUpperAndWorkDir and generateSpec to container_internal_common.go
    6e4b5b007 libpod: Add FreeBSD implementation of container internals
    8ade76e79 libpod: Move networkDisable to container_linux.go
    71978b0a0 Fix #15243 Set AutomountServiceAccountToken to false
    b9df3a6a9 Man pages: refactor common options: --label
    d82a41687 Add container GID to additional groups
    3e1dde10b [CI:BUILD] Copr: Define _user_tmpfilesdir for rhel
    875fd4858 Fix swagger documentation
    070dfa3b3 Man pages: refactor common options: --digestfile
    3e744e52b System tests for podman-update
    c05b6e5d3 Update test per comment in #15555
    3d09d47a2 Man pages: refactor common options: --device-X-Y
    050f3291b implement podman update
    c63830166 Man pages: refactor common options: --name
    4a1acccf9 Fix bind-mount-option annotation in gen/play kube
    64eb07941 CI: disable flaking test on ubuntu
    b667d7340 libpod: Ensure that generated container names are random
    5faf4eff1 Cirrus: pick UIDs/GIDs starting at 1500, not 1000
    b25d62a4d [CI:BUILD] Packit: Disable until proved in other repos
    84352a81c Set enableServiceLinks to false in generated yaml
    fed4ce0ea Inhibit SIGTERM during Conmon startup
    70a599b57 Man pages: refactor common options: --signal
    da57065ab specgen: Use platform-specific mount type for volume mounts
    0300271bf libpod/define: Make TypeBind a platform-specific constant
    1ed9a4740 Man pages: refactor common options: --restart
    98169c20d Add emptyDir volume support to kube play
    8637548a3 docs: move userns options to separate file
    e015c9e3f podman: add uid and gid options to keep-id
    cd6260604 infra: remove dead code
    62d87aa9b Man pages: refactor common options: --subXidname
    08a2851ba Allow to override default username via command line
    4781bc7fe specgen/generate: Add support for FreeBSD
    68f4dcf00 specgen/generate: Move specConfigNamespaces to namespace_linux.go and add stubs
    39880670c specgen/generate: Move SpecGenToOCI, WeightDevices to oci_linux.go and add stubs.
    a240146a2 e2e tests: try to deflake 5000
    08af95f63 updated apiv2 tests to reflect hash compat fix
    c1480b39a Improved Windows compatibility for machine command
    4e18c8100 Man pages: refactor common options: --http-proxy
    0166feef2 specgen/generate: Move security.go to security_linux.go and add stubs
    a7d791202 libpod: Make sure writeConmonPipeData is called on FreeBSD
    d19438fa6 Man pages: refactor common options: --dns-*
    dcb4d4357 [makefile] disable security labeling instead of using --privileged
    78aec2130 Fix #15499 already connected network
    b4f5a246a remove github.com/docker/libnetwork dependency
    0ee9a3129 podman rmi: emit untag events
    0b3184a5a pkg/domain: Add terminal support for FreeBSD
    11de12097 Fix example sections to follow the same format
    e4f816fdb [CI:DOCS] Cirrus: Update meta-task for EC2 image
    e448122fe service: make move to sub-cgroup non fatal
    167b026e7 [CI:BUILD] Packit: Re-introduce packit with fix-spec-file action
    61d842a18 Fix template name inconsistency
    39d809d3c Bump github.com/vbauerster/mpb/v7 from 7.4.2 to 7.5.2
    e00272cd9 remote: fix implementation of build with --userns=auto for API
    15aeccb83 libpod: UpdateContainerStatus: do not wait for container
    61fc1870a cmd/podman: Enable --syslog on FreeBSD
    cfdca8293 Mark some of the option fields as ignored in pkg/bindings
    c7fda06f6 Compat API image remove events now have 'delete' status
    9553f3baf Run codespell
    b27bfbc71 [CI:DOCS] Automatically set podman version in pkginstaller
    e634470fa APIv2 test cleanup, part 2 of 2
    42fdc72aa Man pages: refactor common options: --systemd
    a5a5c6b3f Temporarily Revert "Packit: Enable scratch build testing for Fedora 36, 37 and Rawhide"
    10b460512 Remove duplicate annotations in generated service yaml
    61fe95bb4 Preserve all unknown PolicyRequirement fields on (podman image trust set)
    ad0c785f8 Reorganize the types in policy.go a bit
    a7e88c8da Add support for showing keyPaths in (podman image trust show)
    752eceaec Support (image trust show) for sigstoreSigned entries
    b36a1d1b7 BREAKING CHANGE: Change how (podman image trust show) represents multiple requirements
    bba306788 Reorganize descriptionsOfPolicyRequirements a bit
    2f6c145e8 Use the full descriptionsOfPolicyRequirements for the default scope
    b15afce55 Rename haveMatchRegistry to registriesDConfigurationForScope
    1a97c4d9f Rename tempTrustShowOutput to entry
    51064acc4 Split descriptionsOfPolicyRequirements out of getPolicyShowOutput
    d4c521728 Recognize the new lookaside names for simple signing sigstore
    4df1e2524 Add a unit test for trust.PolicyDescription
    4b2bd1036 Make the output of (podman image trust show) deterministic
    35fa8c16a Make most of pkg/trust package-private
    7723a1ea6 Move most of ImageEngine.ShowTrust into pkg/trust.PolicyDescription
    ff3f574fc Add support for sigstoreSigned in (podman image trust set)
    9828bc445 Create new policy entries together with validating input
    e2d1bdd1d Improve validation of data in ImageEngine.SetTrust
    cbdbb025a Move most of imageEngine.SetTrust to pkg/trust.AddPolicyEntries
    0ff0fde49 Man pages: refactor common options: log-related options
    4f6807530 Add a variable for scope
    4c5366ee0 Make trust.CreateTempFile private
    5be00f227 Reorganize pkg/trust
    1d2def8d0 Remove an unused trust.ShowOutput type
    df1d8d0e9 Remove commented out code
    010d495a3 APIv2 test cleanup
    a933269ba System test cleanup
    35b4f26c7 test: use private instead of slave for the mount
    2fed2a282 Man pages: refactor common options: --pid
    ea67d84f5 test: fix comment
    19a617eaa Allow colons in windows file paths
    1788b26c4 Fixes isRootfull check using qemu machine on Windows
    88e4e4c82 vendor containers/psgo@v1.7.3
    33ab7e846 Man pages: refactor common options: --ipc
    ef6285a6f Man pages: refactor common options: --gidmap
    c64a6ba07 Man pages: Refactor common options: --workdir
    b0700aa48 libpod: Enable 'podman info' for FreeBSD
    ff20c74e9 libpod: Move getCPUUtilization to info_linux.go
    694cbaca3 libpod: Read kernel version and uptime using buildah/pkg/util
    877e67399 libpod: Split out platform-specific code from hostInfo
    e1c206d98 e2e: Add run --memory-swap test
    c3dc92a50 Fix rpm packaging error
    b4584ea85 run,create: add support for --env-merge for preprocessing vars
    b47c54ab6 Install podman-docker.conf on user-tmpfiles.d too
    0e6a421ca Use tmpfiles.d specifiers instead of fixed path
    9dca68bdd Man pages: refactor common options: --ignore
    d45a5d4aa Packit: Enable scratch build testing for Fedora 36, 37 and Rawhide
    8b1e88bf8 Fix documentation of use of tcp connections
    0f7393556 Add support for containers.conf volume timeouts
    7d7aead51 Man pages: refactor common options: --device-cgroup-rule
    65efcdf70 Allow podman to run in an environment with keys containing spaces
    2c03681b2 Man pages: refactor common options: --disable-content-trust
    8f797ab66 libpod: Add definition of containerPlatformState for FreeBSD
    5c9bac141 Man pages: refactor common options: --cpus
    5f719b533 podman kube play/down --read from URL
    5b06b2e77 Document restrictions on transport in FROM
    70e103c04 inspect, image: alias .Config.HealthCheck to .HealthCheck for compatibility
    f87f6d2fc Improved Windows compatibility
    64339d47c Warning messages are printed and ignored if we use an unsupported option
    716ac1c86 Refactor: About the RawInput process
    74388fe75 Man pages: refactor common options: --pod-id-file
    0f768cef3 [CI:DOCS] Update Troubleshooting.md
    c6488fe4a Man pages: fix sloppiness
    53369aaa1 pass environment variables to container clone
    46f31361f Man pages: refactor common options: --cidfile
    bd90818b0 Man pages: refactor common options: --creds
    fbe2bd87b [CI:DOCS] elaborate on image lookups of foreign platforms
    eee0ec97e Add quiet/q flag to podman secret ls
    d5f83135b version bump to 4.3.0-dev
    be1455ead Update "CONTRIBUTING" file with Debian/Ubuntu dependencies"
    f8e73eadd [CI:DOCS] Update how to enable resource limit delegation
    a0560eefa Man pages: refactor common options: cert-dir
    8ffeb626c events: Add freebsd support for libpod/event
    8aa29fd54 cmd/podman: Enable ABI and Tunnel mode for freebsd
    1f76ad40a fix CI: remove hardcodeded alpine version
    3bf52aa33 Add ProgressWriter to PullOptions
    ec9508ea1 Pass io.Writer when pushing images/manifests from command line
    e48681e60 Use request Context() in API handlers
    b9fb60c68 Simplify ImagesPull for when Quiet flag is on
    09ef6fc66 podman generate kube - add actual tests
    976ce76eb podman save: update --compress validation
    054d64710 libpod: Build oci_conmon_common.go and oci_conmon_attach_common on FreeBSD
    cb4158889 libpod: Move openUnixSocket to oci_conmon_attach_linux.go
    d43fac20f libpod: Move moveConmonToCgroupAndSignal and GetLimits to oci_conmon_linux.go
    93bad9048 libpod: Move socket label handling from oci_conmon_common.go to oci_conmon_linux.go
    6791cdbdf libpod: Move rootless handling from oci_conmon_common.go to oci_conmon_linux.go
    68b2450d3 libpod: Move oci_conmon_exec_linux.go to oci_conmon_exec_common.go
    8d229c6cd libpod: Move oci_conmon_attach_linux.go to oci_conmon_attach_common.go
    bebf55c0f libpod: Move oci_conmon_linux.go to oci_conmon_common.go
    20ad12274 runtime: use FindCommon from c/common
    86f665a1d vendor: update containers/common
    0dd2fcf71 Add podman manifest create -a. Alias for --amend:Docker compatibility
    aa197a65f sort hc.Binds returned from compat api
    546bb3548 Add podman stats --no-trunc option
    f6e7b0b59 Add podman secret inspect -f alias for --format: Docker compatibility
    d50ff4f51 Add podman secret create -d as alias for --driver for Docker compatibility
    6411f57e7 api: return imageID instead of imageName, for "Image" when Podman API is queried
    2a6daa1e3 Cirrus: add podman_machine_aarch64
    1572420c3 libpod: Move uses of unix.O_PATH to container_internal_linux.go
    5d7778411 libpod: Move rootless network setup details to container_internal_linux.go
    1b88927c2 libpod: Add stubs for non-linux builds
    7e7a79b07 podman manifest create: accept --amend and --insecure flags
    5f09d9b60 Fix podman kube generate --help to show correct help message
    06b3a4c1c system tests: fix broken runc test
    f0e864075 Man pages: refactor common options: authfile
    a78b67a47 Man pages: refactor common options: --annotation
    a68e6ddbb utils: Add missing symbols for FreeBSD
    a6af67ca9 Cirrus: Update podman-machine comment
    22f3dd4c2 Man pages: refactor common options: arch
    f14bf91c4 podman images and friends can take one image as argument
    7e490e195 [CI:DOCS] Add .DS_Store to gitignore
    ab72a371b Don't warn on '/' not being shared while in a container
    2d30b4dee Add compatibility support for --debug -D flag from docker
    bfae6bca9 build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16
    b9c094a5d Add Docker compatibility for --dns-option to --dns-opt
    1393038c8 pkg/domain: Add stubs for non-linux builds
    65641ba8d pkg/specgen: Add stubs for non-linux builds
    056917c22 Reword --exit-policy option
    d7f6d355b podman-kube@.service.in: Remove Restart=never option with typo
    bd0a8c146 added docs for installing certficate authority
    5ee3522f5 pkg: Build pkg/machine on FreeBSD
    b806e9f36 pkg: Build pkg/util on FreeBSD
    6df0ceb9a Add default value for $RM
    bc56ee158 Update cmd/podman/containers/restart.go
    f26a5246e Fix updated link to install instructions
    0dbbb1cb3 Add restart --cidfile, --filter
    d856fb43e Add "podman kube generate" command
    e2a3f9592 docs: specify git protocol is not supported for github hosted repo
    2935c38fd Update release notes for v4.2.0
    a4efd401c remote manifest push: show copy progress
    79e21b5b1 kube play: sd-notify integration
    3fc126e15 libpod: allow the notify socket to be passed programatically
    67a2e7351 add `pkg/systemd/notifyproxy`
    245be9b39 Document behavior of --timestamp when only FROM is used
    e3f029cb8 build(deps): bump github.com/container-orchestrated-devices/container-device-interface
    658960c97 build(deps) bump CDI dependency from 0.4.0 to 0.5.0
    2bcee9f62 Man pages: refactor common options
    25f6fc9c6 I believe that these tests will now run with crun.
    a561b7dac check memory test based on range
    280f5d8cb podman ssh work, using new c/common interface
    d2d7898b8 Cirrus: Improve CI VM image updates for EC2
    d7f134d68 Refactor common man page options, phase 2
    3738221c5 test: update apply-podman-deltas for new tests
    59cb410fe build: implement --cache-to,--cache-from and --cache-ttl
    7bd886480 Bump to Buildah v1.27.0
    1045647a4 Add interface for apple hypervisor
    62e889e2b fix LogConfig type for libpod API
    2e3a192bb cmd: refuse --userns if a mapping is specified
    696ea7905 specgen: use sandbox id instead of name for annotation
    771a35e4b pkginstaller: use correct GOARCH value in case of arm build
    b1d1248a1 pkg/bindings: Support writing image push progress to specified io.Writer
    f4c53a41c docs: update the podman logo
    7ebaabb93 [CI:COPR] podman.spec.rpkg: add python3 dependency for el8
    d4c6e056d Fixes #15154 Change order when config and connections are written
    83bd7a5c2 e2e: Add rootless mount cleanup test
    cc8e4d5fe remove image podman no prune
    842c6c7c6 podman generate spec
    4cea8adb9 Cirrus: Run Cross builds in [CI:DOCS] mode
    3102194f0 podman rmi: improve error message for build containers
    5ea4ebb16 markdown-preprocess: force extra newline on comments
    9964366f6 start filter flag changes
    e67e60226 podman info: hide `--debug`
    623b0c57f pkginstaller: use correct GOARCH while building podman binaries
    bcfbee986 ISSUE TEMPLATE: remove `--debug` from `podman info`
    81a1ea18c pkg/autoupdate: "image" policy: add deprecation comment
    43cca5d97 pkg/autoupdate: decompose the update logic
    0df51bb6b pkg/autoupdate: move status into `task`
    af3ce7084 pkg/autoupdate: document fields of `updater`
    3fdd3b1ae pkg/autoupdate: remove image map from updater
    82d18a86f pkg/autoupdate: use policy consts were possible
    1cc933c6b pkg/autoupdate: introduce status constants
    42c4c17c0 pkg/autoupdate: move authfile into `tasks`
    3f1928d76 pkg/autoupdate: move more logic under `task`
    cfa089c36 pkg/autoupdate: s/updateImage/pullImage/
    13a8ebd09 pkg/autoupdate: repull image if other containers failed
    2c999f1ec pkg/autoupdate: update unit-by-unit
    f8b6a81ae test/system/255-auto-update.bats: add an SELinux comment
    87c0c760e pkg/autoupdate: introduce the notion of a `task`
    033cc059f pkg/autoupdate: remove redundant branch
    328c8ba7b pkg/autoupdate: move policy map into updater
    d47609773 pkg/autoupdate: introduce `updater` for shared state
    79b10a7c6 readthedocs(sphinx): run the markdown preprocessor
    65fb90165 hack/markdown-preprocess: allow to be executed from any dir
    031b7dec7 fix hack/markdown-preprocess to support older python versions
    7df8d8050 add omitempty to Secret in k8s VolumeSource
    328eb2b4c Cirrus: Remove disused env. var.
    1e4a141d8 Cirrus: Support EC2 instances in hack/get_ci_vm.sh
    44212b90b pkginstaller: makefile improvements to avoid redownloading
    e6670cd29 pkginstaller: add makefile target to notarize the built pkg
    c5029d2ee pkginstaller: sign qemu-system-* binary for the pkg
    56039cffd Refactor common options in man pages
    50981cb84 skip pod resource limits test on aarch64
    1dbd61653 Cirrus: Fix e2e tests for "mount_rootless_test"
    3a7a275c3 Cirrus: use dnf instead of rpm to install packages
    1249cbb75 add "podman kube down" command
    c5150a571 Add support, and default to rootless w/WSL prompt
    bce16a58d Disable F36 service that is incompat with WSL kern
    69d7407af switch from "kube/play" endpoint to "play/kube" endpoint.
    2685c8dc4 Output messages display rawInput
    4dfef202c podman generate systemd --new: allow -h hostname
    5ab98f2c0 test: verify manifest inspect must contain OCI annotations
    3a05ddfb7 fix e2e sign tests
    6c69a2ea1 podman-volume-import: Reword "precendence"
    c21306f06 man podman-volume-import: Clarify that merge happens
    d462da676 Add support for creating sigstore signatures, and providing passphrases
    7075e2e1d Hide podman manifest push --sign-by on remote
    68cf11611 Use signByFlagName instead of copy&pasting the string
    02f570e4b Remove libpod/common
    63d77da5b Update c/common to an unreleased version
    5a5624f81 Update the registry server we test against from 2.6 to 2.8
    7599fde73 Use existing REGISTRY_IMAGE variables in more places
    24a599fe1 Add flag "--compression-format" to "podman manifest push" both in local/remote mode.
    53ec47968 Add rm --filter option
    68463278e Use httpasswd from the surrouding OS instead of the registry image
    49bcb7eaa Bump google.golang.org/protobuf from 1.28.0 to 1.28.1
    7a909a3e2 Use 8k buffer to help clients w/ broken parsing
    a53a0fca9 Cirrus: Minor YAML cleanup
    a24cc463a Remove bats installation script and make target
    6764fe03d CI: new check for leftover skips/fixmes
    17e3680fb Bump golang.org/x/tools from 0.1.11 to 0.1.12 in /test/tools
    379bf1080 Bump github.com/containernetworking/cni from 1.1.1 to 1.1.2
    de04d9d75 docs: resolve typo in create,run manpages
    de13dea86 With --rm option remove container if podman run fails
    da98c8877 Cirrus: enable Fedora 36 aarch64 tasks on EC2
    389a4a6cc syncContainer: transition from `stopping` to `exited`
    7fab449e3 [CI:DOCS] socket_activation.md: Add start/stop sections
    8628c01f5 Fix: manifest push --rm removes a correct manifest list
    e4992fb81 Fix: Restore a container which name is equal to a image name
    75419c5d8 When removing objects specifying --force,podman should exit with 0
    56578c413 Cirrus: Use the latest imgts container
    c35ae7640 Add support for building macOS pkg installer
    8e56a5605 machine: Fix check which is always true
    1b099eec8 [CI:DOCS] podman-generate-systemd.1.md: document --sdnotify
    52a4642ed Set TLSVerify=true by default for API endpoints
    94e0a364a Semiperiodoc cleanup of obsolete FIXMEs
    27679d80b pod create --share none should not create infra
    4d18a98ec benchmarks: fix create test
    4724a0000 prune filter handling
    6a9338ad6 podman generate systemd: handle --sdnotify correctly
    ad8940cec fix container create/run throttle devices
    290116bf8 integration test: fix network backend option with remote
    5a80770e8 API: libpod/create use correct default umask
    35035d281 container wait: improve error message
    cbdda4e56 docs: remove CNI word where it is not applicable
    0a160fed7 Bump VMs, to Ubuntu 2204 with cgroups v1
    c00ea686f resource limits for pods
    bc6a48eeb [CI:DOCS] Cirrus: Add prominent gitlab warning
    88b57dd9f fix broken machine test
    19f4a463e pkg/machine/e2e: do not import from cmd/podman
    604920dd1 fix some pkg/machine/e2e test to read stderr
    ee35ce86d enable linter for pkg/machine/e2e
    dd2b79406 libpod: create /etc/passwd if missing
    b79ac0aca remote push: show copy progress
    afbfbe18a compose test: remove cni config copy
    56093a3b4 compat api: always turn on network isolation for networks
    80ad0cfd0 compat api: allow default bridge name for networks
    3a016c6e4 e2e: show command and output when a timeout happens
    138d185cc Bump github.com/BurntSushi/toml from 1.1.0 to 1.2.0
    ab4c58bd3 Compat API: unify pull/push and add missing progress info
    c1f04a024 podman-remote pull: fix duplicate progress outputs
    af118f7c6 libpod: do not lock all containers on pod rm
    139d65be8 Fix machine test
    438fef1ca kube secret handling for podman play kube
    8d190fc48 vendor: remove unused deps
    013300a7c Makefile: remove building pages for man5
    19495b9fc makefile: remove processing of pkg/docs
    f64985135 rpkg: remove usage of pkg/hooks
    ffe5da20a pkg,libpod: remove pkg/hooks and use hooks from c/common
    da33f1005 Update init ctr default for play kube
    4e72aa586 fix goroutine leaks in events and logs backend
    9b152ef20 Add pause/unpause --latest, --cidfile, --filter
    a65265942 Fix potential leak on mid-stream read error
    10d6586cb Makefile: use order-only prereq for podman-remote
    0a2ddc9bd [CI:DOCS] Fix typo in manifest manpage
    26ae055a2 Remove return error from "containers.pause"
    eef39b69e "pod pause/unpause/stop" append "report.Errs" to "reports"
    aa1711e3d Cirrus: comment out f35 for podman4
    1f0116817 system tests: new system-service bats file
    fdba0d790 Vendor in latests containers/storage and opencontainers/runtime-tools
    82b1d85eb Print rootfs download as a specific version on Win
    576321729 document isolate option for network create
    1aafb01a9 buildah vendor treadmill
    f67ab1eb2 Vendor in containers/(storage,image, common, buildah)
    5f848d89e Run codespell
    18c0c19aa Add --host and -H as equivalent options to --url
    c9722c0b1 [CI:DOCS] socket_activation.md: fix typo and layout
    5f04f9961 Machine init: create .ssh dir if not exist
    56cfdffe4 [CI:DOCS] Tutorials.rst: add socket activation
    b513dc4c1 Clean up cached machine images
    d95e79ebe GHA: Fix dumb error check
    d385914cd Cirrus: Trigger podman-machine task by label
    a2f6cc74e Podman stop --filter flag
    90607a6d0 Podman pull --all-tags shorthand option
    3b5034e91 fix tests for "podman kube play"
    8e2add770 [CI:DOCS] Update docs/tutorials/socket_activation.md
    2270bc5f9 [CI:DOCS] Add socket activation tutorial
    ad7c54e13 man page checker: enforce stricter options format
    66cb856f9 Switch to `github.com/blang/semver/v4`
    0f53abd09 Fixes #14698 Use prepared image for WSL2 machine init
    cc2cfe060 Add podman events -f to be alias for --filter
    e08a77ce6 Add "podman kube play" cmd
    1392922d4 [CI:DOCS] man pages: replace -c with --cpu-shares
    e3419c032 abi: create new cgroup when running in a container
    7b4afbf62 podman: always call into SetupRootless
    16b8d77f9 utils: call MaybeMoveToSubCgroup once
    4b547a72a podman: move MaybeMoveToSubCgroup to utils/
    445089421 Fix last machine test
    bb8ff86bf Use SafeChown rather then chown for volumes on NFS
    c9a82d72a Docker uses "-c" to mean "--cpu-shares" in create and run
    e83ff8e5e [CI:DOCS] podman-create.md: replace -c with --cpu-shares
    da8c6a8ea CI: sanity check for desired runtime
    b8a7e275d [CI:DOCS] rootless_tutorial: Remove incorrect advice regarding volumes and mount points
    f6ed7a8c9 [CI:DOCS] man pages: remove non-existent option builtin-volume
    27e12aa07 test,manifest-run: declare TARGETPLATFORM before using it
    ffbc2adf7 fix wrong log message on Trace level
    377057b40 [CI:DOCS] Improve language. Fix spelling and typos.
    3ed323e1b logformatter: link by *task ID*, not build ID
    3ce0709f3 podman machine: do not commit proxies into config file

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-12-01 17:01:44 -05:00
Andrei Gherzan
758da82203 podman: Add ptest support for system tests
Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-16 11:13:31 -04:00
Pascal Bach
c16d3a58ee podman: replace GOBUILDFLAGS patch
The GOBUILDFLAGS patch is replaced by explicitly setting BUILDFLAGS="${GOBUILDFLAGS}"
in the recipe.

Signed-off-by: Pascal Bach <pascal.bach@siemens.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-25 22:55:48 -04:00
Bruce Ashfield
3292170646 podman: update to 4.2
We refresh one patch, and drop another that is already part of the
4.2.x release series.

Bumping libpod to version v4.2.0-8-g754ec89a8, which comprises the following commits:

    eb2496a77 Skip / update some tests under runc
    eba1f7749 Bump to v4.2.1-dev
    7fe5a419c Bump to v4.2.0
    754e32056 Final release notes for v4.2.0
    4900394c8 Document behavior of --timestamp when only FROM is used
    b619c7a72 check memory test based on range
    a3778b051 specgen: use sandbox id instead of name for annotation
    fa1085ed0 cmd: refuse --userns if a mapping is specified
    91a1f3022 e2e: Add rootless mount cleanup test
    297c72238 [CI:COPR] podman.spec.rpkg: add python3 dependency for el8
    a6ea3325a start filter flag changes
    a19c5a252 Cirrus: Run Cross builds in [CI:DOCS] mode
    e776425e5 podman info: hide `--debug`
    53a631ca2 ISSUE TEMPLATE: remove `--debug` from `podman info`
    a7d932422 Cirrus: use dnf instead of rpm to install packages
    8c36b8c52 Cirrus: Fix e2e tests for "mount_rootless_test"
    bd3e36040 podman generate systemd --new: allow -h hostname
    5c17d1b14 test: verify manifest inspect must contain OCI annotations
    6b2bbd2d1 podman-volume-import: Reword "precendence"
    54ee42331 man podman-volume-import: Clarify that merge happens
    c5c0efc95 podman generate systemd: handle --sdnotify correctly
    7e7951145 Bump google.golang.org/protobuf from 1.28.0 to 1.28.1
    8b9e5fb08 Use 8k buffer to help clients w/ broken parsing
    7efd81cb8 With --rm option remove container if podman run fails
    346b22f07 Bump golang.org/x/tools from 0.1.11 to 0.1.12 in /test/tools
    5b5e53d70 syncContainer: transition from `stopping` to `exited`
    b7feafcb0 Fix: manifest push --rm removes a correct manifest list
    24f219efb Fix: Restore a container which name is equal to a image name
    32848b95f When removing objects specifying --force,podman should exit with 0
    312bef288 test: update apply-podman-deltas for new tests
    9b0a1fa75 build: implement --cache-to,--cache-from and --cache-ttl
    a382bd329 vendor: bump buildah to v1.27.0
    916d51bd0 test: update apply-podman-deltas for new tests
    3a239947a build: implement --cache-to,--cache-from and --cache-ttl
    6b2512f67 vendor: bump buildah to v1.27.0
    6beb3f208 Fixes #15154 Change order when config and connections are written
    eab03100f Add support, and default to rootless w/WSL prompt
    f826ed584 Disable F36 service that is incompat with WSL kern
    d16b42f26 pkginstaller: use correct GOARCH value in case of arm build
    0593ceb01 Cirrus: Update DEST_BRANCH to v4.2
    fb8584332 Cirrus: Improve CI VM image updates for EC2
    d5793db28 Bump back to v4.2.0-dev
    7e1f3106f Bump to v4.2.0-rc3
    1b7e16654 v4.2.0-rc3 release notes
    bf2a53a2e pkginstaller: use correct GOARCH while building podman binaries
    d4481a317 pkginstaller: makefile improvements to avoid redownloading
    1b3844f65 pkginstaller: add makefile target to notarize the built pkg
    64db955e0 pkginstaller: sign qemu-system-* binary for the pkg
    9a820b480 Add support for building macOS pkg installer
    5c95c0920 Add support for creating sigstore signatures, and providing passphrases
    0aebdb687 Hide podman manifest push --sign-by on remote
    b2b3edaca Use signByFlagName instead of copy&pasting the string
    49d40293b Remove libpod/common
    eacee60c8 Update c/common to an unreleased version
    62cc871c6 Update the registry server we test against from 2.6 to 2.8
    52db76373 Use existing REGISTRY_IMAGE variables in more places
    230363225 Use httpasswd from the surrouding OS instead of the registry image
    74155705e fix e2e sign tests
    983cfb90e Final v4.2.0-RC2 release notes
    bf6f79630 Skip one failing test on Ubuntu
    25efc9b2e Fix incorrect release note about regexp
    4acc14b4e Bump to v4.2.0-dev
    81005b8d8 Bump to v4.2.0-RC2
    6fafe120c Final release notes for v4.2.0-RC2
    990ef3cf6 [CI:DOCS] podman-generate-systemd.1.md: document --sdnotify
    c85722eb9 pod create --share none should not create infra
    c3e0f8ebe machine: Fix check which is always true
    e6ebfbd1e Set TLSVerify=true by default for API endpoints
    64bc2ee97 Semiperiodoc cleanup of obsolete FIXMEs
    b339045db benchmarks: fix create test
    fd1f5f55a integration test: fix network backend option with remote
    c7fef7316 docs: remove CNI word where it is not applicable
    976f818f1 libpod: do not lock all containers on pod rm
    772e883f8 container wait: improve error message
    206f11d4f Makefile: use order-only prereq for podman-remote
    c4616510a API: libpod/create use correct default umask
    ce8b6cebd compose test: remove cni config copy
    553a70096 compat api: always turn on network isolation for networks
    aef8039d3 compat api: allow default bridge name for networks
    fa7e9f0f8 Compat API: unify pull/push and add missing progress info
    fde39edb9 remote push: show copy progress
    1f48980af fix broken machine test
    cbcbde587 pkg/machine/e2e: do not import from cmd/podman
    69fcf04c6 fix some pkg/machine/e2e test to read stderr
    ce790e61b enable linter for pkg/machine/e2e
    ff7259567 [CI:DOCS] Cirrus: Add prominent gitlab warning
    3edaa174e libpod: create /etc/passwd if missing
    e41113dca e2e: show command and output when a timeout happens
    f6d18ed41 fix goroutine leaks in events and logs backend
    dc1dc4600 podman-remote pull: fix duplicate progress outputs
    2350ef9dd Fix potential leak on mid-stream read error
    7b28a1b7c vendor: remove unused deps
    3aec669e9 Makefile: remove building pages for man5
    ed49f9411 makefile: remove processing of pkg/docs
    24bbd40ce rpkg: remove usage of pkg/hooks
    73ecc5a4b pkg,libpod: remove pkg/hooks and use hooks from c/common
    d151edeea Fix machine test
    86159e39b document isolate option for network create
    c3c07ed09 Update init ctr default for play kube
    6057db75d Remove return error from "containers.pause"
    de8d2cc94 "pod pause/unpause/stop" append "report.Errs" to "reports"
    409fbeaab system tests: new system-service bats file
    d2e2756a4 Print rootfs download as a specific version on Win
    244055030 [CI:DOCS] Fix typo in manifest manpage
    76fa80447 Vendor in latests containers/storage and opencontainers/runtime-tools
    e89550bcd buildah vendor treadmill
    9c1de040b Vendor in containers/(storage,image, common, buildah)
    03eaea8bb Run codespell
    e4b82c77f Add --host and -H as equivalent options to --url
    183fdea5f Use SafeChown rather then chown for volumes on NFS
    17dbce2fb Clean up cached machine images
    e473c5e4b Machine init: create .ssh dir if not exist
    53edd9b65 Podman pull --all-tags shorthand option
    f07d2bac4 Cirrus: Trigger podman-machine task by label
    3bd248ae7 GHA: Fix dumb error check
    6d84a9952 Podman stop --filter flag
    a78be890e Switch to `github.com/blang/semver/v4`
    52850ce70 man page checker: enforce stricter options format
    a5827e13c Fixes #14698 Use prepared image for WSL2 machine init
    a4bae330a Add podman events -f to be alias for --filter
    d560c7897 [CI:DOCS] man pages: replace -c with --cpu-shares
    5f5379deb [CI:DOCS] podman-create.md: replace -c with --cpu-shares
    f7707c81a Fix last machine test
    35dc17bfe abi: create new cgroup when running in a container
    7b4ebfa65 podman: always call into SetupRootless
    3b37095b2 utils: call MaybeMoveToSubCgroup once
    edfe80027 podman: move MaybeMoveToSubCgroup to utils/
    b29a52a48 Docker uses "-c" to mean "--cpu-shares" in create and run
    ffd2e6df9 test,manifest-run: declare TARGETPLATFORM before using it
    ca4630ede CI: sanity check for desired runtime
    bf269e634 podman machine: do not commit proxies into config file
    b2f3b28c6 logformatter: link by *task ID*, not build ID
    cfb768a36 fix wrong log message on Trace level
    557b65e09 [CI:DOCS] Improve language. Fix spelling and typos.
    a363b3a65 Initial release notes for v4.2.0-RC1
    f22af2bf8 Bump to v4.2.0-dev
    74aa681e5 Bump to v4.2.0-rc1
    aa29bd6de Update CI base branch
    87793b633 [CI:DOCS] Rewrite the --gidmap option docs
    3bb4cf8ee libpod: read exit code when cleaning up the runtime
    62cdc387d podman wait: return 0 if container never ran
    25d74db45 [CI:DOCS] podman-info.1.md: Update examples
    b41e42f42 test/system/130-kill.bats: use $IMAGE
    81a19a568 Add ports and hostname correctly in kube yaml
    6b9abe69d improve pull-policy documentation
    76d887c77 Fix machine tests
    1e7686df6 Manifest test cleanup: use defer()
    96dd57ca5 podman wait can take multiple conditions
    a46f79883 pkg: switch to golang native error wrapping
    d1754bdd4 Refactored networkPrune function
    1161e8bd5 manifest_test: safer registry setup and teardown
    61a67a07b pkg/machine/qemu: start VM check if qemu is alive
    a26cf638e machine: qemu fix chardev id starting with letter
    4374038cc pkg/machine/e2e: do not import from cmd/podman
    4cfa8ccb2 machine test: fix endless loop in test
    3adda62d2 [minor] fix duplicate test name
    e8d2d70ee port forward range test: fix many oopses
    0424084b3 fix namespace reporting
    03ee8204d podman machine: make 9p security model configurable; adjust docs
    44bd166b3 test-apiv2: streamed response testing based on response duration
    a5898129c Fix qemu machine startHostNetworking always failing
    cc6faddfa use c/common code for resize and CopyDetachable
    1267515e1 Update play kube docs
    791dbf823 golangci install: explicitly set BINDIR
    4fd5fb97a e2e tests: cleanup: capitalize CONSTANTS
    72aa00aca Fix streaming for libpod/pods/stats endpoint
    ee05bc031 Fix network inspect compat API discrepancy
    9d6efb344 Podman machine info
    65d511c6d Fix podman pod unpaue TODO
    251d91699 libpod: switch to golang native error wrapping
    8f2d9e7a7 podman pod create --uts support
    5633ef1d1 Docker-compose disable healthcheck properly handled
    488eb3b74 (rootful) docker-compose now updates network MTU
    4fe7b8baf Podman system df JSON format outputs `Size` and `Reclaimable`
    b9aa47555 Sync: handle exit file
    49cb288df hack/test/utils: switch to golang native error wrapping
    2da731a7e test: reduce sleep interval
    c02f793ba test: return immediately on connect
    efe1176dd specgen,run: support running container from valid manifest list
    8601ab6b0 Silence setlocale warnings from `podman machine ssh`
    33a474286 pkg/machine: add missing build tags to tests
    5b1867923 TestEnvVarValue: fix assertion
    3fbe93371 envVarValueResourceFieldRef: use int64 for value
    4c5b058e8 fix flake in aardvark tests
    597de7a08 libpod/runtime: switch to golang native error wrapping
    8106568ca test: drop pod-create --device-read-bps test
    5491123c2 [CI:DOCS] troubleshooting: document --tty and CR
    fe559287c docs: Remove -s from systemctl enable --now sshd
    24fcfb5d9 Fix spelling "read only" -> "read-only"
    2f1075dfb Implement proxy support for Windows
    b92149e2a podman pod create --memory
    8cff1c2bf Cirrus: Add podman-machine integration test
    f58d7dbda Cirrus: Fix elevator workaround multi-cloud support
    7131c8472 fix build
    d6678adc9 overlay,mount: convert lowerdir to absolute path for overlay mounts of path
    891dfd3a8 specgen: fix parsing of cgroup devices rule
    5262f7e01 Fix podman machine on Windows
    9c658f490 docs: mention the podman-kube template
    c6fb533ca podman-play-kube template: rename to podman-kube
    bd51410b8 service: do not run under the root cgroup
    5c3979762 utils: move the cgroup if root on cgroupv2
    e8adec5f4 cmd/podman: switch to golang native error wrapping
    7bbfb3eb0 api,images: add support for LookupManifest to Image remove API
    64ec894c5 [CI:DOCS] Update podmanimage comment.
    d9ff0fd15 Only allow Rootless runs of Podman Machine
    6904b1a61 build(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0
    5790caaef bindings: Add support for Delete in pkg/bingings/manifest
    1affceb29 runtime: unpause the container before killing it
    7f994a80d only create crgoup when not rootless if using cgroupfs
    59a7ac210 Make `podman machine stop` wait for qemu to exit
    2ee9fe4cb vendor containers/common
    79a38a2c6 Add test for restore runtime verification using non-default runtime
    8e3a46a87 Fix runtime check during restore
    6c4c050d3 fix volume reporting in system df
    cc4914633 Docker compat returning unknown "initialized" for `status.status`
    6d3520e8b podman image scp remote support & podman image scp tagging
    dc58a7306 Makefile: don't try to build rootlessport on FreeBSD
    c55feb7bf Makefile: don't use '-t' to specify the directory to install manpages
    af16edf49 Makefile: use GNU sed to convert manpages on FreeBSD
    94a634fcf Makefile: use bash to evaluate tool paths
    0e03a64f9 pod: ps does not race with rm
    0cabd8006 pods: move code to a new function
    3b10c1b78 Use Regexp in volume ls --filter name
    aada13f24 volume: new options [no]copy
    a4094530b volume: drop TODO comment
    443a2afdb volumes: switch order of checks
    28e2a604b vendor: update containers/common
    99f68898c reveal machine error, ignore false state
    9cb93c6f9 go.sum: run make vendor
    0c1a3b70f Show Health Status events
    386ea49cf Show starting state when machine is starting
    66c62eb96 Implement CatchAll and StopCatch in signal_common.go
    345778ece Fix "podman run port forward range" flake
    4c5788bac Fix spelling of GetCriuVersion
    590290597 Add missing criu symbols to criu_unsupported.go
    2792e598c podman cgroup enhancement
    09754d21d [CI:DOCS] Minor update to podmanimage upstream docs
    041947b11 Bump github.com/stretchr/testify from 1.7.4 to 1.7.5
    3619f0be9 Fix: Prevent OCI runtime directory remain
    a4ae22df8 Workaround for bug 14653 (checkpoint flake)
    491857a88 Use HaveLen instead of len in podman machine list e2e tests
    f0b9e56e9 Fix machine list: --format implies --noheading
    2fab7d169 add podman volume reload to sync volume plugins
    6e8953abf test/testvol: rework testvol binary
    fcc25afa5 test/testvol: update container image golang to 1.18
    472f79f08 test/testvol: move Containerfile into testvol dir
    0d3aa61be libpod: volume plugin sendRequest remove body bool
    ad78d239d fix system connection and scp testing
    3a810b8d2 Two fixes for DB exit code handling
    30e7cbccc libpod: fix wait and exit-code logic
    15188dce0 conmon: silence json-file error
    2eda547dc podman run/create -v relative filepath support
    ef563c5a1 logformatter: link to logs using Cirrus API
    aa4279ae1 Fix spelling "setup" -> "set up" and similar
    0320ce37d Fix system prune output message
    7ef282d64 Remove lorgus.Infof on bindings start and attach
    132393d15 Update basic_networking.md
    4a981c490 allow filter networks by dangling status
    050693b2e bump github.com/spf13/cobra from 1.4.0 to 1.5.0
    ecf225019 rootless: attempt to join all specified paths
    9afd5e31c rootless: improve error messages
    99258703a rootless: do not ignore reexec_in_user_namespace_wait errors
    cfba09f68 Bump github.com/stretchr/testify from 1.7.2 to 1.7.4
    1f539a264 api: show the memory limit specified for the container
    7f82c4323 Fix typos
    f451b68df podman pod create --shm-size
    46da7bc78 podman machine init --now: respect proxy envs
    bb5bd09ea API: containers/json always set application/json content type
    282714090 [CI:DOCS] "setup" -> "set up" in source code comments
    dda68201a [CI:DOCS] Rewrite --env docs
    948866e8a Update to use gopkg.in/yaml.v3
    075c9ac45 .cirrus.yml: fix matrix expansion by properly merging YAML mappings
    809044576 vendor in latests containers/image
    ce3d0954a Open Windows tutorial after MSI installation
    a3b3f1723 linter fix from #14299
    065302bd5 Cirrus: Fix build. dep. missed in #14521
    3af047b63 Vendor in latest containers/storage
    09c462d73 fix "podman -h" help output
    6c5e1420e Make it clear the REST API could be a security issue
    28a38617e [CI:DOCS] fix typos in prerequisites for Fedora and make binaries sections
    b3f094a61 test/system/410-selinux: fix for newer runc
    e69691c27 Fix interrupting machine start leaves the machine unstartable
    0a202a9f0 system test image: bump to 20220615
    21819254d golangci-lint: update to v1.46.2
    c6b9baa6c system tests: avoid rmi -a ... plus cleanup
    693d439ac Update release notes and README on Main for v4.1.1
    751ba07a7 libpod: improve check to create conmon cgroup
    90a669594 fix CI: golangci-lint is broken on main
    20b3fbe6d systemd socker activation: check listener to prevent panic
    43e12c135 Fix #14416: Use absolute path to WSL binary to create ssh keys for `machine init`
    bfc446eea buildah-bud tests: reenable skipped 'bud' tests
    455f4c782 CI: APIv2 tests: add rootless
    232b3e342 buildah-bud tests: add arg sanity check
    41528739c golangci-lint: enable nolintlint
    1b62e4543 golangci-lint: add systemd build tag
    fcfcd4cdb container: do not create .containerenv with -v SRC:/run
    4811cb110 podman system prune support prune unused networks
    5e9d20448 Update vendor of containers/buildah
    608ad7d11 Non-running containers now report statistics via the `podman stats` command
    958759a71 podman pod clone
    8d3e6577a Fix M1 QEMU flags
    b7c283759 Bump golang.org/x/tools from 0.1.10 to 0.1.11 in /test/tools
    48cf1d258 podman-remote push --remove-signatures support
    d4272bed5 podman cp: do not overwrite non-dirs with dirs and vice versa
    46c8da7d9 vendor buildah@main
    7b3e43c1f podman volume create --opt=o=timeout...
    80d5a00bb Fix Remote filtering embedded directory test
    2b97795c1 APIv2 tests: (try to) fix flaky registry panic
    81153ffa2 Introduce 'Starting' status for machines
    b13fc1bf9 patch for pod host networking & other host namespace handling
    5614c29ce compat api: fix regressions from "Swagger refactor/cleanup"
    eed0e6671 Pass '--file-locks' to OCI runtime at restoring
    c77691f06 Do not error on signalling a just-stopped container
    7e9767502 Bump github.com/opencontainers/runc from 1.1.2 to 1.1.3
    549bffe58 shell completion: fix problems with container path completion
    bce97a3b5 apiv2 tests: clean up
    700248bfe Update remote_client.md
    254048e17 Cirrus: Fix artifact passing when dep. skipped
    f0516a014 --userns=keep-id,nomap are not allowed in rootful mode
    126686f3d Podman images generated with empty /etc/containers/storage.conf
    20aaaa382 Minor: Fix podmanimage README links
    dc4a01ec6 Add docs of changing default netavark networks
    ed1e4f94f Infra Inheritance patch
    5fc3d871a Cirrus: Simplify only_if/skip + optimize multiarch
    a69a48b0d test/e2e: network dis-/connect test remove unhelpful assertions
    90d80cf81 use resolvconf package from c/common/libnetwork
    ddf1d2cb3 update c/common to latest
    811cce5a8 libpod: store network status when userns is used
    0f424e90d Bump github.com/docker/docker
    e41d4a247 Add missing tests for manifests API
    2a0d896b3 runtime: make error clearer
    2c12f7bd1 Add some Readme updates around machine
    8533ea000 Privileged containers can now restart if the host devices change
    335925f47 Minor: Remove useless addition of storage.conf
    aadae49ad overlay-volumes: add support for non-volatile upperdir,workdir for anonymous volumes
    5c508cb4e Bump github.com/stretchr/testify from 1.7.1 to 1.7.2
    67ea5fdad Cleanup the leftovers used with ginkgo focus option
    1fc5a107a [CI:DOCS] PodmanImage Readme touchup
    22e442ee2 tests: buildah-bud fix reason for skip
    9de092ec0 Fix secret-verify-leak flake: set build context to subdir
    259c79963 Improve robustness of `podman system reset`
    87b05b6a6 Prevent simultaneous machine starts
    3c9b75c21 Using logDriver instead of query.LogDriver for podman play kube
    241458666 podman logs k8s-file: do not reassemble partial log lines
    2b0cb3002 test/e2e/save_test.go: fix flake
    b8de285a4 Stop machine before force removing files
    1b6505d74 Update test output expectation
    9a34b88c9 changed megabyte to mebibyte
    831d6534f fix pod network handling with a host network
    5023ce585 Align docker load and podman load output
    f2bbbd20d shell completion for paths inside the image/container
    69e44bbcc bindings: add manifest should follow es_model while marshalling OSVersion and OSFeatures
    5b9729c47 Document protocol usage for --publish
    6dffa453a Bump github.com/containernetworking/cni from 1.1.0 to 1.1.1
    44f11ec2c podman-remote: enable support for additional build-context on macOS, remote
    3fa09e9db Makefile: Handle unexpected empty var. values
    fc95f832a Podman image: Mass cleanup + fix missing storage.conf
    f728b7b5a podman pod create --uidmap patch
    8291b51ce expose podman.sock in machine inspect
    dbdc26a4c Removed `imageStream` hardcoded value
    2805c7353 pkg/specgen: parse default network mode on server
    78d1f5d7d fix "tail 800 lines: journald" flake
    193397290 Add ExecStop and dependencies to fix shutdown
    f91c852fa Makefile: force podman-remote-static to linux
    cef044d85 Bump gopkg.in/yaml.v3 to v3.0.1
    205c8c071 fix podman container restore without CreateNetNS
    16e8b2f32 podman stats: work with network connect/disconnect
    ec576a549 podman volume export/import: give better error
    4a8346551 podman machine ssh: do not print warning everytime
    7e69e2b53 Podman no-new-privileges format
    0e58636c3 podman machine ssh: set correct exit code
    a6f8cad54 fix bad import path for cmd/podman/utils
    c0ad9a43e Mount propagation works with named volumes
    f23ae4d66 healthcheck: wait for systemd operations
    8efdbf5c4 Add API support for NoOverwriteDirNonDir
    e13c5f3a9 Refactor populating uptime
    3a32d60e5 [CI:DOCS] Quick typo for troubleshooting
    ea1a8e243 Move Attach under the OCI Runtime interface
    fb163976f Support setting image_volume_mode in containers.conf
    d730f2b25 Add Authorixation field to Plugins for Info
    ab0728421 docs: note regarding version compatablity between server and client for bug fixes
    87ad46060 Remove TODO comment
    66a56ce05 vendor: bump buildah to v1.26.1-0.20220524184833-5500333c2e06
    6124b5199 build: allow using cache explicitly with --squash-all using --layers
    8c1128db4 Cirrus: Fix several TODOs
    426a07e70 Combine the CheckAllLatest CID and PodID functions
    c9f6639ec Fix TODO in parse/net.go
    32aa12a28 Remove TODO from pods/ps.go
    8c781416b Fix swagger model of `InspectPodResponse`
    de54d33d2 Fix test block bypass instructions
    b730e7328 cmd, build: remove redundant squash processing logic
    66c846616 Support remote deadlock errors in rm
    badf76e17 Remove more FIXMEs
    9fcfea764 First batch of resolutions to FIXMEs
    02c437405 [CI:DOCS] Add play kube support docs
    338f01237 Remove unused archive flag from diff commands
    cb76d1523 fix f35 integration test network flake
    c3677f515 test/system/250-systemd.bats: clean up outdated TODO
    c9279d4d9 pkg/bindings/play/play.go: drop TODO message
    462cb3370 pkg/bindings/containers/archive.go: drop TODO
    60e31d87d pkg/auth: drop the TODO
    09ae060a7 pkg/api/handlers/compat/images.go: drop TODO message
    c04ec104d libpod/pod_top_linux.go: s/TODO/NOTE/
    b19e2d6f8 events: drop TODO comment
    429b1f768 Fix codespell errors
    4a447a213 work queue: simplify and use a wait group
    2ce475576 Allow podman pod create --share +pid
    df394b521 Allow podman pod create to accept name argument
    70f147d01 cmd/podman/common/completion.go: fix FIXMEs
    2be4589b5 Remove TODO re: storage-driver
    8de3e9102 help-message system test: catch more cases
    33628003c Put current product first and historical product second
    2400d1d52 go format previosly touched files
    b3e2324f5 test/e2e/search_test.go: re-enable registry.redhat.io test
    956e2e1b8 pkg/domain/infra/abi/images_test.go: remove commented code
    fbeef1d70 image list: remove unused ConfigDigest
    90a6f39d0 pkg/inspect: remove unused ImageResult type
    5268314e5 podman image mount: print pretty table
    d3d3a207d pkg/bindings/images/rm.go: remove redundant FIXME
    6c6e97018 pkg/bindings/images: remove TODOs re: system context
    d924c46da autocomplete `podman search --filter`
    f98a7d140 build(deps): bump github.com/vbauerster/mpb/v7 from 7.4.1 to 7.4.2
    8af98b342 contain_top_linux.go: s/TODO/NOTE/
    f5450b1e8 system tests: fix flake waiting for container to run
    2133edb2c compat, build: suppress step errors when quiet is set
    8fbb933f5 look for firmware based on the path of qemu binary
    5d37d80ff Use containers/common/pkg/util.StringToSlice
    d29dec967 Cirrus: Fix building multiarch images
    dde428642 Bump Compat API maximum version to v1.41
    b7dbc505b Instead of erroring, clean up after dangling IDs in DB
    e22611baf fix typo
    ac154425d Update _play kube_ doc following PR #14266 merged
    c984956f9 fix compat image resolution
    d66288315 auto update: create an event
    633d5f1f8 fix --init with /dev bind mount
    4960a17a5 fix tests by randomize the device folder name
    94e82121b Support running podman under a root v2 cgroup
    a0d0207a2 fix podman-for-windows.md
    5b79cf15a Swagger refactor/cleanup
    fb219a809 Update c/image
    9c9fc96d2 shell completion: use more constants instead of duplicating strings
    337f8b9d9 shell completion: podman save --format use all valid values
    74f70315b shell completion: update podman inspect --type options
    318e95fd2 shell completion: fix podman event --filter values
    b22143267 linter: enable unconvert linter
    3b0844f99 shell completion --format: add help to function with args
    3d8a1f917 shell completion --format: support maps and functions
    ecd6edb19 shell completion --format: fix embedded struct handling
    11ff5ffd3 shell completion --format: only show usable methods
    eeeb88a66 shell completion --format: only show exported fields
    f5c8c0911 add tests and fix bug when char device pass the test as block device
    653117087 ci: pr-should-include-tests: add more exceptions
    40a1cd4ef Remove GO111MODULES use
    d49efde27 Makefile: rm gofmt target
    9bf81814a Makefile: rm CHANGELOG_* and ISODATE vars
    d2070a39e Makefile: rm -mod=vendor
    2b54bf3e6 Move GOPROXY from Makefile to cirrus.yml
    11d3cf269 Makefile, podman.spec.rpkg: rm GOBIN and GOPATH
    c63bb6b9a Makefile,.gitignore: rm .install.goimports
    e2d2b537a Makefile: rm .gopathok
    d8c42de41 Makefile: rm .install.libseccomp.sudo target
    c632a2efc dependabot: add release-note-none label
    0c9b0e2aa expose block and char devices with play kube
    8684d41e3 k8systemd: run k8s workloads in systemd
    6f9155cbb api: make no-op remote functional in /libpod/build
    21a5ef859 Don't complain about XDG_RUNTIME_DIR, Closes  #1424
    dc435ecb2 Make errors on removing exec sessions nonfatal
    ee782fcb7 Deleting an n use image should return conflict not system error
    977cd9bd1 Update WSL machine OS to enable user lingering
    0961002d9 Update tutorial list to include Podman for Windows
    5b2d5c365 Robust whitespace split of cpu utilization line from /proc/stat
    de4f76e7e Fix strange buildtag edit
    c45d51899 [BZ #2083997] pod: build pause image in custom user NS
    c058b828c Changed permission to 755
    25f80941a build(deps): bump github.com/docker/docker
    2b03a1088 Vendor in latest containers/common
    b8103640a Make sure tests are cleaned up when they complete
    7804f4d29 Add support for machine events on Windows
    a4aa07a07 [CI:DOCS] Treadmill script: add --reset option
    b7ce98619 Fix broken pwd
    1094d7553 build(deps): bump github.com/opencontainers/runc from 1.1.1 to 1.1.2
    9df390655 shell completion --format: work with pointer functions
    03af8213c sdnotify: send MAINPID only once
    840c120c2 play kube: service container
    ecf0177a0 vendor c/common@main
    16e22dbbe vendor: update c/storage and c/image
    37e30bcb2 Fix hang in build-each-commit test
    e76a07087 [CI:DOCS] man pages: fix inconsistencies
    60258925a test: update fedora toolbox image
    1834afd3e [CI:DOCS] Benchmarks: new tool for parsing results
    813f6a68f [CI:DOCS] fix `make localbenchmarks`
    876b05cdb Add initial Windows guide
    c7c00ce55 Add more machine tests
    d0ca90b3e test: simplify cleanup code
    0774a4ce1 kube: add support for --userns=
    2b5778d41 Cirrus: Update images + new automation library
    9ffc2a6ac Cirrus: Fix Makefile including 'hack' in $PATH
    abf4f77bc Cirrus: Simplify use of cache in automation
    237f76126 Cirrus: Simplify rootless ssh setup
    c1656e2ee Cirrus: Guarantee $DEST_BRANCH is passed through
    82f2b3edb bloat check: make more robust
    9e1ee081f kube: honor pod security context IDs
    82a4b8f01 kube: refactor setupSecurityContext to accept directly the security ctx
    be5abf03a fix: Container.cGroupPath() skip empty line to avoid false error logging
    c48657671 test skipper: check for $DEST_BRANCH
    8ecd0b5bc fix broken CI test
    bb8f53a72 test: fix "podman search format json"
    b58e7e7f1 play kube log tag handling
    a1a299797 Update version to v4.2.0-dev
    bce014e19 Update release notes for Podman v4.1.0
    9cd74a13c update podman version in readme
    0dbfd376f Add 4.1 branch to API documentation
    2a401b3ff Bump github.com/docker/docker
    ed8c1dfb4 libpod: add c.ConfigWithNetworks()
    d7f43e677 test: fix failing TestPostDeleteHooks
    cf35168f0 test: use `T.TempDir` to create temporary test directory
    6ddccd94f e2e: pull_test: speed up --all-tags
    c38e7e5f6 build: disable --output for podman-remote clients
    140fb3ae1 e2e: pull_test: squash --quiet test
    669401c31 e2e: pull_test: move tests around
    2fa906cca e2e: pull_test: remove redundant tests
    6eaa9ca26 e2e: manifest_test: use cached registry
    ed159f864 Vendor in containers/buildah@v1.26.1
    ebde52583 update rootless_tutorial.md
    7c59f1d07 Fix usermod call in rootless_tutorial.md
    5fa6f686d Report correct RemoteURI
    386614367 exclude new tools vendor dir from validate
    f6b397bf1 add dependabot config for test/tools go.mod
    3b9177995 vendor test tools in submodule
    80744c644 podman system reset removed machines incorrectly
    9974c90cc libpod: treat ECONNRESET as EOF
    245151e62 Add more unit tests
    a5800c78f machine events: only open sockets when needed
    36c5e6e0c Bump github.com/containers/storage from 1.40.0 to 1.40.2
    ccd576504 play kube default log driver
    8781a3635 benchmarks: push/pull
    1585b175d pass networks to container clone
    88015cf0d Implement --format for machine inspect
    8da5f3f73 Add podman machine events
    9166894c6 vendor test dependencies instead of installing via network
    6e2e3a78e generate systemd: pods: set exit policy
    5fac879ea vendor treadmill script: run 'git add vendor'
    0bb484937 Additional stats for podman info
    e247f02a4 Vendor in containers/(common, storage, image)
    e74717f34 Treadmill script: revamp
    e17b56e0c CI: emergency fix for broken go get
    4e44e5b5d Bump github.com/rootless-containers/rootlesskit from 1.0.0 to 1.0.1
    4eff0c8cf pod: add exit policies
    cfca85356 libpod: unset networks before storing container conf
    77d872ea3 vendor c/common@main
    5b78f9576 Implement machine inspect for WSL
    772ead253 Use simulated dual-stack binds when using WSL
    23de3801d buildah-vendor-treadmill script: yet more checks
    01acc2565 libpod: host netns keep same /etc/resolv.conf
    519820926 fix incorrect permissions for /etc/resolv.conf in userns
    e6557bf0a pkg/api: do not register decoder in endpoint handler
    a48c37df3 fix broken hooks-dir test
    69c479b16 enable errcheck linter
    384c2359b libpod: unlock containers when removing pod
    2902d32c4 Refactor machine inspect
    64a368ba2 remove unused codepath for creating/running ctr in a pod
    6b7fd318b image search --format: add completion for go template
    0d9f19028 shell completion --format: use structs by reference
    cac2b7800 image --format: fix add completion for go template
    7f28fd938 Report properly whether pod shares host network
    cb9a45630 shell completion --format: use anonymous struct field once
    8be978158 network inspect --format: add completion for go template
    f93ba587c shell completion --format: work with nil structs
    589e42c99 Bump github.com/containernetworking/cni from 1.0.1 to 1.1.0
    a5aea8e50 Three manual fixes
    b3f38c31b Ginkgo: use HaveField() for better error checking
    91ead1528 volume: add new option -o o=noquota
    ea1fcd7bc podman search: truncate by default
    c721acf08 podman machine starting test
    3b8fa515f Emergency fix for new CI linter
    83a75d2a3 Produce better test error messages
    461b73f56 Github PR template: add release-note block
    22b421dd7 Add CreatedSince & CreatedAt format fields to podman image history
    e7390f30b Allow changing of CPUs, Memory, and Disk Size
    9c0c29f08 Cirrus: Fix ownership of repos. to keep git happy
    d4e30b33a Temporarily skip netavark/aardvark e2e test
    cf449e81a Cirrus: Temporarily update netavark/aardvark-dns
    cd7cff6bb Cirrus: Test w/ netavark/aardvark-dns in F36+
    3a07fc446 Cirrus: Update to F36 CI VM Images
    a73425a0b Revert "Cirrus: Disable F34 aka prior-fedora testing"

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-25 22:55:48 -04:00
Andrei Gherzan
d55da717eb podman: Rename podman-rootless.conf sysctl file to aid overrides
Files are sorted in lexicographic order. Moving podman-rootless.conf to
something greater then '00' would help with systems providing default
values in other configuration files that can be overridden by
podman-rootless.conf.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-23 21:44:32 -04:00
Andrei Gherzan
eb1f9b1e1f podman: Use gcc-based toolchain
clang-based builds are still broken due to:
https://github.com/llvm/llvm-project/issues/53999

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-03 23:18:32 -04:00
Andrei Gherzan
89abebb0fe podman: Backport patch to fix duplicate switch statements
This will fix clang-based builds.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-03 23:18:32 -04:00
Bruce Ashfield
7ec4b4746d podman; fix patch fuzz/failure
patch a33188f [podman: Fix host contamination] appears to have
introduced fuzz/failures. Which strangely wasn't picked up on
merge testing.

We refresh the patch to fix the issues.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-17 14:37:43 -04:00
Andrei Gherzan
cf8a763b28 podman: Add support for rootless mode
This support is disabled by default and exposed via PACKAGECONFIG.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-15 17:11:58 -04:00
Andrei Gherzan
2e05df2f43 podman: Silence docker emulation warnings
Podman can run in via a docker symlink emulating docker commands. By
default this generates a runtime warning. This change silences it via
the provided interface.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-15 17:11:58 -04:00
Andrei Gherzan
a33188fab8 podman: Fix host contamination
The project's internal Makefile uses BUILDFLAGS variable to pass
arguments to `go build` while Yocto/OE defines it as GOBUILDFLAGS. Add a
patch to align this and avoid using host headers in which case, a musl
build will fail similarly to:

| [...]ld: /tmp/go-link-3172010154/000015.o: in function `vfprintf':
| /usr/include/x86_64-linux-gnu/bits/stdio2.h:130: undefined reference to `__vfprintf_chk'
| [...]ld: /tmp/go-link-3172010154/000016.o: in function `fprintf':
| /usr/include/x86_64-linux-gnu/bits/stdio2.h💯 undefined reference to `__fprintf_chk'
| collect2: error: ld returned 1 exit status

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-07-05 16:25:25 -04:00