1140 Commits

Author	SHA1	Message	Date
Bruce Ashfield	120a507fd2	nerdctl: update to v2.0.2 ... Bumping nerdctl to version v2.0.2-90-g1259a55e, which comprises the following commits: bcc9fa74 update containerd-fuse-overlayfs (2.1.0) 6dac2cf1 update BuildKit (0.18.1) f9347742 build(deps): bump tonistiigi/xx from 1.5.0 to 1.6.0 e8bca251 build(deps): bump the docker group with 2 updates e3e6c3de [doc] rootlesskit port driver configuration c2d8b4c6 build(deps): bump github.com/cyphar/filepath-securejoin b4ba0cbd build(deps): bump the golang-x group with 6 updates d4130581 fix: Fix --env-file flag behavior in nerdctl compose b8f4d9c2 Cleanup namespace validation 3d944cb5 validatePathComponent tests 9bbf24db Remove dependency on misplaced helper CreateBuildContext for next-gen tests e536ed59 Increase timeouts on CI f914ea38 gocontext -> context 775a0053 gocni -> cni 32ab7472 Create directory for bypass4netns pid file e2708fb5 Fix hosts.toml resolution for docker domain e28491fa Enhance CNI config load error condition UX 531e2036 Marking TestCreate/logs as flaky 69de5dd4 feat: add force-recreate and no-recreate for compose up command 5fa9f123 Relax compose concurrency lock 00763909 update CNI plugins (1.6.1) 09039a18 update stargz-snapshotter (0.16.2) 70679d49 update BuildKit (0.18.0) 4a21ba7d docs: the next release will be v2.0.1, not v2.1.0 442b01d2 Fix permissions for resolv.conf and hosts dcaee106 build(deps): bump the stargz group with 3 updates eac99f87 build(deps): bump github.com/containerd/nydus-snapshotter 159e0391 build(deps): bump docker/build-push-action from 6.9.0 to 6.10.0 2ad3f57c fix redundant error checks and comment format b060ead7 fix: add fields such as CONTAINER_NAME to journald log entries sent to by containers 232b6adc build(deps): bump github.com/compose-spec/compose-go/v2 788fc0c2 fix nerdctl ps slow on heavy IO system by using goroutine 0e8abacc Update containerd (1.7.24) in CI ba72ac7b build(deps): bump github.com/containerd/cgroups/v3 from 3.0.3 to 3.0.4 f128aac0 fix: refactor pkg/infoutil in order to resolve import cycle 1cbc1203 update stargz-snapshotter (0.16.1) f572d40f build(deps): bump github.com/Masterminds/semver/v3 from 3.3.0 to 3.3.1 3b3c68c1 build(deps): bump docker/metadata-action from 5.5.1 to 5.6.1 c41cc9d9 Pass appropriate --device arguments from compose to run 2463f8b6 update BuildKit (0.17.1) 37df93d3 update runc (1.2.2) 1fdb4b0a fix: default json-file log size to 100MB ae50153a build(deps): bump the stargz group across 1 directory with 3 updates 32de57ba build(deps): bump github.com/containerd/continuity from 0.4.4 to 0.4.5 7dce7c78 refactor: Fix golanglint action error 9c351383 Use a more direct and less error-prone return value 130397dd build(deps): bump the golang-x group with 2 updates d1ea2d7b build(deps): bump github.com/containerd/typeurl/v2 from 2.2.2 to 2.2.3 a82ae7bb build(deps): bump github.com/compose-spec/compose-go/v2 b5a11731 build(deps): bump the golang-x group with 4 updates 7d116bf1 feat: configure custom IP for default bridge network d30f66e1 build(deps): bump github.com/vishvananda/netns from 0.0.4 to 0.0.5 6f2e0326 Mark `nerdctl builder debug` as incompatible with Docker 417b6170 typo: remove extra spaces at the lead #3650 #3651 7e89bd3d typo: remove extra colons and whitespaces #3650 84cea659 [fix] avoid escaping '<', '>', '&' 7103b54b update SOCI snapshotter (0.8.0) 29f3ff63 update containerd-fuse-overlayfs (2.0.0) 2380710b update BuildKit (0.17.0) 4f64af98 update runc (1.2.1) 75be32df update containerd (2.0.0) ccbaf82a build(deps): bump github.com/containerd/containerd/v2 b006beb5 build(deps): bump github.com/containerd/typeurl/v2 from 2.2.1 to 2.2.2 8ea1d0ac build(deps): bump github.com/containerd/containerd/api 68bd32d7 build(deps): bump actions/checkout from 4.2.1 to 4.2.2 83088ef8 build(deps): bump github.com/containerd/errdefs from 0.3.0 to 1.0.0 c607537e add 'none' logger 718e7cd2 fix: not to be deleted a container created with --rm when detaching b776706a fix: Allow to untag images associated with running or paused containers by nerdctl rmi -f dc2c7b93 Enable network_inspect tests to run on windows 93189e13 Annotate non-windows compatible image tests 46239308 Enable issues tests to run on Windows 465b52ca Enable image_remove tests to run on windows 4254a1fe build(deps): bump github.com/compose-spec/compose-go/v2 58318d51 build(deps): bump github.com/containerd/typeurl/v2 from 2.2.0 to 2.2.1 de193b39 Enable GHA cache for image build dependencies b1e82268 Fix prior test-porting not aligned with description f6d36c40 Move from AlpineImage to CommonImage to enable windows tests bfc8e0b9 Add Infinity constant to enable windows testing compat 7b8edba6 Remove leftover workaround for fixed bug bdc00760 Reduce calls to data.Identifier() 04ec4a3c Rewrite container_stats tests 5862baf7 build(deps): bump github.com/fsnotify/fsnotify from 1.7.0 to 1.8.0 75fdc499 Fix convert unable to find image 4760ee93 Rewrite container_top tests 54196647 Remove fixed-bug workaround 20987449 build(deps): bump github.com/compose-spec/compose-go/v2 8f9eccd9 build(deps): bump github.com/Microsoft/hcsshim from 0.12.8 to 0.12.9 6b3d6615 Container create tests cleanup 40ddd34e Update busybox image (support sleep inf) 708f1725 Fix test leaking tagged Alpine image b7227211 Rewrite container prune test 38f74400 Rewrite container remove test 2336d3d1 Rewrite container diff test a5f487d4 Align gitignore and dockerignore 4d06e730 Rewrite container_wait tests eddb0eb8 go.mod: github.com/containerd/imgcrypt/v2 v2.0.0-rc.1 fcdd7262 build(deps): bump github.com/compose-spec/compose-go/v2 443d504b build(deps): bump github.com/containerd/continuity from 0.4.3 to 0.4.4 bb240f12 build(deps): bump github.com/compose-spec/compose-go/v2 af25fd40 add white image 50946054 update Kubo (0.31.0) 90fbd09b update Nydus (2.3.0) 98442f50 update CNI plugins (1.6.0) 5551d6d3 update containerd (2.0.0-rc.6) 247fcca2 build(deps): bump github.com/containerd/containerd/v2 0ee1a592 build(deps): bump actions/checkout from 4.2.1 to 4.2.2 bbb5b305 Add new requirements (HyperV, CgroupsAccessible) 5db8a48d build(deps): bump github.com/fatih/color from 1.17.0 to 1.18.0 3b203a35 update runc (1.2.0) a4b2959b Add container run from oci-archive 62ad4046 Ensure rm uses -f when cleaning 05918629 Remove no-op description from top-level tests cc78fb3b Remove old build tag syntax d8ab512e Refactor load from archive functionality ec12b584 Move image load func to imgutil package 4f20a14d CI: enable no-retry/retry testing separation and workflows cleanup c3627e11 fix: Allow to delete images when names of images are short digest ids of another images. e1622152 Add legacy tests into the 'retry' bucket d963545a Fix ensurecontainerstarted logic and better debug 564ff06e Separate lint + enable on other platforms 0cc9d291 Enhance debugability for kubernetes rig 5609de3d Workaround and document weird docker issue 9603bf40 Registry testing tooling cleanup 914238eb Kuberneters testing tooling cleanup 36f7eb91 Rewrite commit tests ca76611c Fix and enable CI unit testing for windows 54966d87 Rewrite build tests 83bf7e03 build(deps): bump go.uber.org/mock from 0.4.0 to 0.5.0 ce8e077d Chores: spurious comments and syntax simplification d48be62f Fix semantic of Fail to not care about exit code 1ab6df3c (Un-)marking flaky tests 468b0df2 Fix duplicated test title 84b4d942 Change compose lock to use DataStore() 27a18162 [fix] fix image filter with nonexist image d2b2637e Enable image completion on all platforms 97919c25 Remove unbuffer from test 7a0eaecb Add pseudo tty support for tests 76b265af Skip TestAttach until we fix it 95fe8c0a build(deps): bump github.com/containerd/accelerated-container-image 645988e8 Add delay to tentatively fix flakyness with Docker fc1848b5 "ns:" network mode to use existing network namespace 24cbe252 Fix over-eager windows path restrictions 90b96354 Add image load quiet mode e7101674 Quiet ancillary image pulls 320d5c38 Minor debugging / cleanup chores d7adf399 RootFul/RootLess > Rootful/Rootless 7fab74c3 Lint fixes fa39963a Global compose lock 496b2f05 Consistently enforce rmi -f in tests cleanup efb9a876 Cleanup code to use simplified referenceutil package afba9710 Cleanup referenceutil bf395429 Skip TestRunWithTtyAndDetached on Windows ad64f421 fix: nerdctl stats on a container without a memory limit returns host memory limit 516ed82e Update containerd (1.7.23) in CI ddeae201 removing ipfs binary from nerdctl-full c3c3f91f Add container run --security-opt systempaths=unconfined 2c6fb772 Alleviate image --filter missing digest issue 50ac0b6f Fix CNI concurrency issue 379e8ce6 build(deps): bump github.com/klauspost/compress from 1.17.10 to 1.17.11 33beb322 Migration aftermath 4451d75d Migrate image tests 157d1838 Migrate IPFS tests 7190bc66 ./cmd/nerdctl/. + issues + completion touchups 91f4eb4a ./cmd/nerdctl/network touchups 0fafd1af ./cmd/nerdctl/system touchups 2d2afe08 ./cmd/nerdctl/volume touchups 0e35a535 Test tooling iteration 93fb53b0 Enforce global lock in oci hooks 65363a66 build(deps): bump github.com/cyphar/filepath-securejoin 93152fa8 build(deps): bump github.com/compose-spec/compose-go/v2 456337f9 Update runc (1.1.15) 7ff3c68a build(deps): bump actions/checkout from 4.2.0 to 4.2.1 3e3517c2 Remove images from Docker Hub from tests, fix #3498 1fe34f86 Tests for net inspect 2e3b6365 Fix netwalker issues c075a576 switch cosign registry from GCR to GHCR 92c3297f build(deps): bump the golang-x group with 5 updates 9755f22f Update BuildKit (0.16.0) 1ff8d48b Update to containerd 1.7.22, 1.6.36 in CI e6c47ef3 build(deps): bump golangci/golangci-lint-action from 6.1.0 to 6.1.1 2c1a5b87 Fix tests broken by tooling update 5ce1e4b6 Fix parallelism for docker 19fa3d93 Increase delay of delayOnceReader to reduce flakyness of TestAttach 346b492b Test tooling fixes bd1eefa6 Make CreateNetwork safer wrt concurrency 703bd581 Fix IPFS missing layer issue bfeeabe5 3452: Filter Volumes by name if any of the names match 03c9de57 Update to containerd 2 rc.5 544991a0 Fix Docker Hub push regression 5cdb3e0b Fix login persistence regression against Hub 9d0f54a5 build(deps): bump github.com/Microsoft/hcsshim from 0.12.6 to 0.12.7 c661d16e Fix broken TestImageInspectDifferentValidReferencesForTheSameImage 7b64f827 build(deps): bump github.com/containerd/containerd/v2 f3215269 build(deps): bump github.com/cyphar/filepath-securejoin befd089a build(deps): bump docker/build-push-action from 6.8.0 to 6.9.0 2c2745e8 fix: Cleaning up orphaned directories and files when containers creation fails 12e63b5d [fix] filter images panic 2a8d4ae0 build(deps): bump docker/build-push-action from 6.7.0 to 6.8.0 f231be8e build(deps): bump actions/checkout from 4.1.7 to 4.2.0 0aef2f2e Migrate completion tests to new tooling 36ab5832 Migrate network tests to new tooling f363e6f0 Migrate system tests to new tooling 764a2aa5 Fix tests and add regression tests for #3425 1e52bf52 EnsureAllContent on tag 8e10d879 EnsureAllContent on save ef09d191 EnsureAllContent on convert 8ba7ce78 EnsureAllContent on commit 9539f6b0 Add fetch and EnsureAllContent methods 93b5999a Fix regression from #3446 845902d6 build(deps): bump github.com/klauspost/compress from 1.17.9 to 1.17.10 79067831 build(deps): bump github.com/go-viper/mapstructure/v2 b4f002ca remove is shareable test a74f0f30 Testtool initial documentation cc56a093 Move root and volume tests to new test tooling 2c95d090 Adding NG test tooling bfc2da40 increase golangci-lint timeout to 10min 2d297924 Prevent concurrency on commit and remove 062f4ff8 build(deps): bump github.com/go-viper/mapstructure/v2 de9a0045 build(deps): bump the docker group with 2 updates 06a257ef Fix panic 'provided file is not a console' bc2a0070 build(deps): bump the docker group with 2 updates b2174cbb Fix test to workaround docker credstore symlink fault 5864ea38 build(deps): bump github.com/cyphar/filepath-securejoin 646f8409 build(deps): bump github.com/containerd/accelerated-container-image e22055bc build(deps): bump github.com/compose-spec/compose-go/v2 6f685c37 build(deps): bump the docker group with 2 updates aeef5bed Fix Windows path check in 'LogURIGenerator' 4bb3fc02 build(deps): bump the golang-x group with 2 updates 1ecbd87a build(deps): bump the golang-x group with 3 updates 1a4a5a95 Hostsstore resolution cleanup 7bcfc505 Dockerfile: runc: set CC and STRIP explicitly ea86ae9a Adding document about pkg/store 4c0c5a60 Move testing.md to docs/dev 935ee8a0 Fix TestRunApparmor: relax stdout matching to not fail when testing rootless dbc05409 Fix TestLoadStdinFromPipe: do not leak test images breaking tests using prune ca0f6453 Enforce linting for freebsd and windows e0de7b1c Fix freebsd lint efeb191a Fix windows linter complaints 23aca88a Refactor: cleanup prompting bf89c084 Refactor filestores using store.Store c9756a94 Remove mock for mountutil tests 92188e11 Add generic filestore 04cc74bd Auth code refactor: credstore and registry URL 9657f2c2 chore: update runc to v1.1.14 4e89ddf7 Minor cleanup, post-refactoring of cmd b02b8f28 Move cmd/system to subpackage 05074f83 Moving cmd compose and inspect to subpackages ca637fd6 Move cmd/container to subpackage d5a00f46 Move cmd/internal to subpackage c115c49c cmd/AppArmor moved to subpackage 4b8061d9 Move cmd/image & cmd/builder to subpackages 3ea64eb9 Move ipfs to subpackage c8df501e Move a bunch of helpers 3b8a098d Move login/logout to subpackage 9c75f29d Move namespace code to subpackage d1bc54d9 Move network to cmd/nerdctl/network f7e033d9 Move IsExactArgs and FindIPv6 to helpers d2741baf Rename completion.ShellCompleteX methods to completion.X a07d9066 Move volume actions under subpackage 061d0cb1 Move UnknownSubcommandAction to helpers ec530147 Move constants Categroy/Management to helpers 38bca1f3 Move completion to sub package b8b5d707 Move away flagutil under helpers 51af3690 Add Confirm helper d3a39fd2 Fix TestDiff failure with docker c5d3309d Add a locking mechanism to prevent concurrent subpackage testing 76a828dd Adapt testing so that subpackages are not parallelized 5b9cf17d Do not load build output if dest is specified 7f0dec8e Fix nsenter working dir for child 95a3d697 Move testing to container v2 rc4 abb17d72 build(deps): bump github.com/containerd/containerd/v2 68be0cef Disable flaky #827 test 19fb8b60 build(deps): bump github.com/Masterminds/semver/v3 from 3.2.1 to 3.3.0 7192451f build(deps): bump github.com/coreos/go-iptables from 0.7.0 to 0.8.0 fee2b017 build(deps): bump the docker group with 2 updates b954c7a3 Prevent presumably bogus reentrancy onPostStop when onCreateRuntime errored 6296bb35 Namestore hardening, workaround #3351 f85bba8f Hardening lifecycle state store 7eb1523e Changing bufio.Scanner to bufio.Reader to support large message bc247660 Add lint-imports to the default lint task fe677961 Allow Canary to fail the build 31989a2d Add reg. test for 'stop created' 971040e7 Release any existing ip lease onCreateRuntime (workaround #3355) f353afb6 Allow containers to re-acquire their own name (fix #3354) f9b56614 build(deps): bump github.com/containerd/accelerated-container-image 42adca9f build(deps): bump github.com/vishvananda/netlink from 1.2.1 to 1.3.0 93586e60 build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.2 to 2.2.3 31debef4 build(deps): bump github.com/containerd/containerd/api 571799fb stop: do not error on created containers (fix #3353) 5f30141f Rollback rename in case of error fc31dcd2 Ignore 2327cc85 Fix docker hub lag on golang versions breaking canary 0cd936b5 build(deps): bump github.com/vishvananda/netlink 6362afc1 Remove Docker incompat from image prune and build tests 439086fb Fix image prune filter until test rmi cleanup not running. 67449bca chore: fix some function names f7b71e9c Add regression tests for network host 132276c4 Fix --add-host not working with network host c57dc6ff Rename variable for readability a4abf1e2 Use host hostname with network host f5e247f8 Fix rename failure with network host/none 71c1558b Fix panic on malformed add-host argument 031aa1d4 K8s minor cleanup (rename and -f on delete) 0e8b3d45 Implement windows filename restrictions 572d368d fix: filter container state without option "-a" a1bd4760 ParentMain/nsenter: do not fail if getwd errors 1201665e Add builder OCI layout build context 034f2e73 build(deps): bump github.com/Microsoft/hcsshim from 0.12.5 to 0.12.6 8352492b build(deps): bump tonistiigi/xx from 1.4.0 to 1.5.0 d2dace20 Fix import order bd27d52e Workaround goimports-reviser bug 613f7c6e update RootlessKit (2.3.1) f5a2962c build(deps): bump github.com/rootless-containers/rootlesskit/v2 3cb2cd1f update soci-snapshotter (0.7.0) 17a0749e update BuildKit (0.15.2) 6f7a56f2 update kind (0.24.0) 9efda227 update Go (1.23) ddcf41c2 update Debian (12) 553ee688 update golangci-lint (1.60.1) 787b4ac6 Fix govet: printf: non-constant format string 068866ee Fix S1009 (see https://staticcheck.dev/docs/checks#S1009) 183b4395 Fix SA4032 (see https://staticcheck.dev/docs/checks#SA4032) fd0f9547 Add lint job for canary and minor shell script cleanup 7c9751e2 Add image prune --filter support ec7c3958 Refactor imgutil filtering adf40354 Include init NetworkSettings within inspect response 97c5492b Kube on the CI fc4b2700 support ci arm64 1fbd7766 fix: relax identifier limits f5d1d6d5 Add builder prune --all and --force flag support 4fce7aaa Ensure binfmt does install emulation for arm7 on the CI 3d2db6e7 build(deps): bump docker/build-push-action from 6.6.1 to 6.7.0 4de7e5f4 build(deps): bump the docker group with 2 updates f23fcd72 fix set go env in windows 81684636 build(deps): bump github.com/go-viper/mapstructure/v2 7f05aad9 Fix panics involving -ti when not on a tty 77b0a291 Go imports tooling 0b729e9e Import ordering consistency 6277d8f6 Move projectloader to testutil 02cb8a92 use slice.Contains dc204e92 Get rid of naked returns 5d6d02b9 archived mitchellh/mapstructure -> go-viper/mapstructure 41448de9 Use http.ErrSchemeMismatch d4152ca3 feat(compose): add mac-address parsing 9cc9a5bd gofumpt lint af50cb59 enforce registry default host for login cbe7cfe7 Uniformize import style 83914c5b Fix docker/errdefs -> containerd/errdefs bd59961b Fix godoc to align with style bc7e059f build(deps): bump github.com/containerd/accelerated-container-image 6f84540c migrate to github.com/moby/sys/userns 732656ad Make windows filelocking exclusive 98cc3689 Containerd v2 8cef1ce7 build(deps): bump golang.org/x/sys in the golang-x group 0721f443 feat: adding filter infrastructure + status and event filter 4cc911df build(deps): bump docker/build-push-action from 6.5.0 to 6.6.1 7df0fbd6 build(deps): bump github.com/compose-spec/compose-go/v2 93dfdaab build(deps): bump the golang-x group with 4 updates 56791faa build(deps): bump the golang-x group with 2 updates 99fdb17f build(deps): bump github.com/containerd/nydus-snapshotter c6c7e132 add unpack commit images. 4d3f6988 Add SOCI handler wrapper 4b50583d feat: tail JSON log 3b61610c fix: output log after log rotation 915106fc gracefully terminate containers on nerdctl compose down b60185e8 test: increase max-size && decrease log output c5e06081 Remove gjson dependency 140c5fcc build(deps): bump golangci/golangci-lint-action from 6.0.1 to 6.1.0 e8a993b2 fix: sort images&containers by created_at cc0f6437 build(deps): bump github.com/cyphar/filepath-securejoin 68e7ad34 build(deps): bump github.com/compose-spec/compose-go/v2 fa77fb49 build(deps): bump the docker group with 2 updates fea8219d feat: add Status and ID as event attributes 4d70ed0b build(deps): bump github.com/awslabs/soci-snapshotter e86fa4c5 build(deps): bump github.com/containerd/containerd d941b4f8 containerd/containerd/errdefs -> containerd/errdefs 73f22413 build(deps): bump github.com/containernetworking/cni from 1.2.2 to 1.2.3 06f942c1 build(deps): bump the docker group with 2 updates 83cf033f build(deps): bump docker/login-action from 3.2.0 to 3.3.0 579f75e7 build(deps): bump docker/build-push-action from 6.4.1 to 6.5.0 e81fe541 build(deps): bump github.com/moby/sys/mount in the moby-sys group 9229c007 Reuse Makefile for CI commands b76605b6 build(deps): bump github.com/compose-spec/compose-go/v2 b7025537 build(deps): bump github.com/rootless-containers/rootlesskit/v2 3e569488 build(deps): bump docker/build-push-action from 6.4.0 to 6.4.1 760f3560 Add `shellcheck` lint to CI eddbb4e3 build(deps): bump github.com/moby/sys/signal in the moby-sys group cf0e6e6e feat: support for -a and --attach in run 57951753 Account for availability delay of golang docker image bbf2293d Fix shellscript issues 6eccd9af build(deps): bump github.com/Microsoft/hcsshim from 0.12.4 to 0.12.5 5affa4fb build(deps): bump docker/build-push-action from 6.3.0 to 6.4.0 67ade6db Move image pull args into ImagePullTypes cfd89822 Enhance Makefile e2ede62e Remove no longer useful DOCKER_BUILDKIT=1 f6308150 fix: add login component username validation e7b567ca pkg/portutil: add ipv6 host ip test 99b05e63 pkg/portutil: use net.SplitHostPort to parse ip address with port 79b80d68 Update go.mod 164b9f65 Normalize curl invocations db47b319 Adding a canary CI target to test against upcoming / unreleased versions f759e035 Silence apt-get and uniformize calls format b0288121 Update FUSE and buildkit in dockerfile fdd88383 build(deps): bump github.com/cyphar/filepath-securejoin 41870985 build(deps): bump github.com/containerd/typeurl/v2 from 2.1.1 to 2.2.0 496c78e8 Test fixes 3a0df165 CI: shrink test matrix c628ef1e Workaround delayed log file creation af2f1402 Fix test: wait for systemd to come up 11a0d9ac Move to 24.04 for docker integration testing c3ea8ff4 Fix nerdctl info missing on Windows fee1ab36 fix the created tasks cannot be deleted 81aac851 rootless: add `Requires=dbus.socket` c4ea3d0e Fix IPFS test flakyness fceea23b Ensure we dont fail if containers disappear (#3167) 156b5fd0 Do not hard error if containers are gone f83f2380 build(deps): bump golang.org/x/net from 0.26.0 to 0.27.0 fbf9a538 build(deps): bump golang.org/x/crypto from 0.24.0 to 0.25.0 09739c12 Improve tests debugging output 15191775 Volume QA: inspect, prune, create and other volume fixes 019cd003 test-integration-rootless: enable BuildKit for RootlessKit v2 e0248a4d Dependabot: add groups 19ae34b0 nerdctl run -v: dismiss warning "expected an absolute path, got a relative path" faa28f89 Workaround flaky save 35424992 Re-enable project checks for .md only changes 5267e4ef Separate and expand information for newcomers on testing 1b96d8de Make systemctl happy by not passing an explicit signal for kill 4455d73a build(deps): bump golang.org/x/term from 0.21.0 to 0.22.0 e32d75c4 Add logo 60dc9421 Cleanup login command (remove global var and normalize to other commands 294caa66 build(deps): bump docker/build-push-action from 6.2.0 to 6.3.0 150f9cbd Fix wrong assumption about container availability d627713b update containerd (1.7.19) 356b88dc Rewrite container remove db152b91 build(deps): bump github.com/docker/docker 91c0b7f6 build(deps): bump github.com/docker/cli 3cece1b1 fix missing name container stats 2ed85e4f build(deps): bump docker/build-push-action from 6.1.0 to 6.2.0 d56f7a71 build(deps): bump github.com/docker/docker 6d97c6e9 build(deps): bump github.com/containerd/go-cni from 1.1.9 to 1.1.10 dd52560f CI: update Ubuntu (24.04) ae277688 feat: support for --sig-proxy in run 6c1e9618 build(deps): bump github.com/containernetworking/cni from 1.2.1 to 1.2.2 c493afcd pkg/defaults: add defaults_darwin.go b997648a Fix check for empty $HOME and $XDG_RUNTIME_DIR 8a5137b0 build(deps): bump docker/build-push-action from 6.0.2 to 6.1.0 02d5329a build(deps): bump docker/build-push-action from 6.0.1 to 6.0.2 c2fa1ed9 update soci-snapshotter (0.6.1) 820f7404 update Nydus (2.2.5) 480fc999 update gotestsum (1.12.0) 6cc63162 update Kubo (0.29.0) f16b79c2 CI: cross: do not use Go 1.21 for nerdctl-full deps f35e4251 update golangci-lint (1.59.1) 85a8bf86 update BuildKit (0.14.1) 465365a0 update CNI plugins (1.5.1) bccfdc82 update containerd (2.0.0-rc.3) ead5ce6c Volume QA: remove (fixes and tests) a28dbf29 Dockerfile: use Go 1.22 for runc 97552985 Bump compose-go to v2 e13ff68b Remove duplicate function 515c3ade Add HOSTNAME environment variable 0c300dca fix: close the hosts file 15a8a8dc Aftermath docker migration: fix racyness in tests 5dd36b60 Implement network namespacing 58f7720e build(deps): bump docker/build-push-action from 6.0.0 to 6.0.1 6d0c8f87 Replace SetEnv invocation by base.Env to unlock parallelization c0e4e92c Add mechanism to prevent Cmd from executing multiple times ac4830df MAINTAINERS: move Ye Sijun (junnplus) from a COMMITTER to a EMERITUS 2606265d build(deps): bump github.com/containernetworking/cni from 1.2.0 to 1.2.1 34d7c310 build(deps): bump docker/build-push-action from 5.4.0 to 6.0.0 0b201417 build(deps): bump github.com/containernetworking/plugins 9a76ba10 Disable build and publish on PR for purely md changes eace9da1 Add doc note about --ip and bridge e789f2cd Docker v26 compatibility & test fixes b63f4d6b Add --pull option to build command 091de746 update containerd (1.7.18), runc (1.1.13) a3195b27 MAINTAINERS: promote Kay Yan (yankay) from a REVIEWER to a COMMITTER f4a7e0c8 Restore logger output 37098ac6 build(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 14d8b42a build(deps): bump github.com/klauspost/compress from 1.17.8 to 1.17.9 4f8a70b6 build(deps): bump actions/checkout from 4.1.6 to 4.1.7 f942d2c5 test-integration-docker-compatibility: install Docker v24 972a9b10 build(deps): bump github.com/containerd/platforms from 0.2.0 to 0.2.1 37c0cb67 Safer / faster convert zstd b20070d2 Revamped testregistry and login tests edb8c19d build(deps): bump docker/build-push-action from 5.3.0 to 5.4.0 dc237a35 build(deps): bump github.com/Microsoft/hcsshim from 0.12.3 to 0.12.4 80731ff3 Caching and list optimizations b0c23492 MAINTAINERS: move Hanchin Hsieh (yuchanns) from a REVIEWER to a EMERITUS e021a92a MAINTAINERS: promote Jin Dong (djdongjin) from a REVIEWER to a COMMITTER 4907e59c fix container list with json format b94caffe build(deps): bump github.com/docker/cli 47b45261 build(deps): bump github.com/containerd/containerd from 1.7.17 to 1.7.18 530b0913 build(deps): bump github.com/docker/docker 2240323d build(deps): bump golang.org/x/net from 0.25.0 to 0.26.0 5b8d5a30 build(deps): bump golang.org/x/crypto from 0.23.0 to 0.24.0 7675d267 update imgcrypt (1.1.11) 875a962e Remove spurious debugging leftover 11802cf3 Fix wrong package import 6917840b CI: .md files changes should not trigger tests f491e83f Disabling test on unsupported platforms eb001fad Image inspect rework 4d4fd5fb State how to run a single integration test 099ef7bd Image history enhancements 3d875395 build(deps): bump docker/login-action from 3.1.0 to 3.2.0 838d5a11 build(deps): bump github.com/containerd/imgcrypt from 1.1.10 to 1.1.11 eb5d4426 update slirp4netns (1.3.1) 1ec6764f update containerd (1.7.17) 03bee846 update CNI plugins (1.5.0) 4b0b69d3 go.mod: github.com/containernetworking/plugins v1.5.0 949dc8aa build(deps): bump github.com/awslabs/soci-snapshotter 11fcb6b0 Do not obtain task info when it is not necessary in commit command 713851de add retry on test cf5073b4 support image label 0988c9b8 chore: remove impossible error check 8b34abdf Implement container inspect --size, SizeRootFs and SizeRw 0d470e7e Implementing StartedAt for containers 93b13817 build(deps): bump github.com/containerd/nydus-snapshotter 5f8c0c9d build(deps): bump github.com/docker/cli 80bc6835 build(deps): bump actions/checkout from 4.1.5 to 4.1.6 35a90ef6 build(deps): bump github.com/docker/docker 64af5a6d build(deps): bump github.com/containerd/containerd from 1.7.16 to 1.7.17 480eb6ee Support DHCP IPAM opts and set the hostname 274b8a6e Fix cni plugins sha after spurious 1.4.1 re-release cc60f5d5 build(deps): bump actions/checkout from 4.1.4 to 4.1.5 b24582bc build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0 6b10870c Re-acquire name in onStartContainer (see #2992) c60adf29 Add missing alias for container rm/remove fac3d35e build(deps): bump github.com/docker/cli c5d1b532 Allow directories for --device and in-container path 762fe91c Fix some /etc/ file permissions (see #2684) 926b88f3 build(deps): bump github.com/containerd/platforms from 0.1.1 to 0.2.0 41bf4414 build(deps): bump github.com/docker/docker 516503a0 Fix markdown link c17badbc build(deps): bump golangci/golangci-lint-action from 5.1.0 to 6.0.1 83382d5b build(deps): bump golang.org/x/net from 0.24.0 to 0.25.0 4b9de97d inspect: show mounts info from CRI/ctr containers d197e5b7 build(deps): bump github.com/docker/cli 227505ce build(deps): bump github.com/docker/docker c6c4a7bd build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.1 to 2.2.2 618639b3 build(deps): bump github.com/cyphar/filepath-securejoin 4e615922 CI: use Go 1.22 49993c5b build(deps): bump golangci/golangci-lint-action from 5.0.0 to 5.1.0 ad607362 build(deps): bump github.com/containerd/nydus-snapshotter 2c1d745b build(deps): bump github.com/rootless-containers/rootlesskit/v2 54b29564 fix: set mountpoint RW and Propagation in internal mount label ff6c1c49 skip Kubo 0.28.0 bb6f9e66 update RootlessKit (2.1.0) f34b02ad update slirp4netns (1.3.0) e9535e52 update BuildKit (0.13.2) 47053926 update containerd (1.7.16) a4f2ed07 build(deps): bump golangci/golangci-lint-action from 4.0.0 to 5.0.0 bd7fdb37 build(deps): bump github.com/containerd/containerd from 1.7.15 to 1.7.16 93f404c7 fix: error check in the ensureFile func a279dfab build(deps): bump actions/checkout from 4.1.3 to 4.1.4 4f46cf94 build(deps): bump github.com/docker/cli 8765df23 build(deps): bump github.com/docker/docker 6b047d24 build(deps): bump github.com/Microsoft/hcsshim from 0.12.2 to 0.12.3 0439917f build(deps): bump actions/checkout from 4.1.2 to 4.1.3 199edf1a build(deps): bump github.com/Microsoft/go-winio from 0.6.1 to 0.6.2 79897c8b build(deps): bump github.com/docker/cli a40d98d2 build(deps): bump github.com/containernetworking/cni from 1.1.2 to 1.2.0 03fd3c76 build(deps): bump github.com/awslabs/soci-snapshotter 47f272d2 build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.0 to 2.2.1 c1c0fc93 build(deps): bump github.com/fahedouch/go-logrotate from 0.2.0 to 0.2.1 6ffb5466 build(deps): bump github.com/docker/cli dc42456f build(deps): bump github.com/docker/docker d4257170 build(deps): bump github.com/containerd/accelerated-container-image 9b8e1dd3 fix follow tail of rotate log a3fdaafa fix: cleanup volume dir if create volume failed 27b8dd84 build(deps): bump github.com/klauspost/compress from 1.17.7 to 1.17.8 46acf060 build(deps): bump github.com/rootless-containers/bypass4netns b5117a23 Rationalise build constraints for Go 1.19 onwards 5fac99b3 Implement autodetection of Windows buildkitd socket 6e6aa4a9 Enable building on Windows hosts 0d75e34f Remove unused defaults.BuildKitHost 62e031c6 bypass4netns: allow ignoring bind f802ba87 update bypass4netns (0.4.1) 2c446522 build(deps): bump github.com/containerd/accelerated-container-image 2cfff270 update containerd (1.7.15) a1fd53b7 build(deps): bump github.com/containerd/containerd from 1.7.14 to 1.7.15 858fa60e build(deps): bump golang.org/x/sync from 0.6.0 to 0.7.0 6b8a1c63 build(deps): bump golang.org/x/net from 0.23.0 to 0.24.0 af4c470d build(deps): bump golang.org/x/crypto from 0.21.0 to 0.22.0 cc495f2a build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0 fc4c8e78 annotations: add `nerdctl/bypass4netns-ignore-subnets` (`[]string`) f42ab2ff Implement `nerdctl run --annotation` (introduced in Docker v24) 9ba9ddca update BuildKit (0.13.1) 6f83a71d build(deps): bump github.com/Microsoft/hcsshim from 0.12.1 to 0.12.2 da2f576f build(deps): bump github.com/docker/docker 3809ec53 CI: FreeBSD: use Go 1.22 c0d7b734 build(deps): bump github.com/containerd/nydus-snapshotter ea7769fc build(deps): bump github.com/Microsoft/hcsshim from 0.12.0 to 0.12.1 e7608c8b deflake TestImageConvertEStargz c1c7e251 not check return of rmi in pushImageToIPFS 70ee810a pkg/api/types: remove dependencies on nerdctl 8ae661e9 build(deps): bump github.com/pelletier/go-toml/v2 from 2.1.1 to 2.2.0 2122a714 update cosign image to latest release 3b12a202 build(deps): bump docker/build-push-action from 5.2.0 to 5.3.0 1c371393 update imgcrypt (1.1.10) 9d60dbb0 build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0 0f9c8de4 feat(compose_up): add --abort-on-container-exit flag d83f9f13 build(deps): bump github.com/containerd/imgcrypt from 1.1.9 to 1.1.10 5e785705 build(deps): bump github.com/containerd/accelerated-container-image 8c75ca70 build(deps): bump docker/login-action from 3.0.0 to 3.1.0 ee2f8d64 update Kubo (0.27.0) 4917c16a update RootlessKit (2.0.2) 4dbac7f8 update CNI plugins (1.4.1) 046bfc06 build(deps): bump github.com/containernetworking/plugins 6958d07c build(deps): bump actions/checkout from 4.1.1 to 4.1.2 0ec5c7e9 refactor: replace os.MkdirTemp with t.TempDir with cleanup 4d9abe27 update containerd (1.7.14),(1.6.30) 533f16b9 CI: update FreeBSD to 14 258362b8 build(deps): bump github.com/containerd/containerd from 1.7.13 to 1.7.14 bc8450e8 feat: add extra contexts to buildctl call #2835 341c60d4 update BuildKit (0.13.0) ca56bc42 build(deps): bump docker/build-push-action from 5.1.0 to 5.2.0 41b669d7 feat: create network cleanup function for kill and stop cmd da007062 build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 62d013c1 build(deps): bump github.com/rootless-containers/rootlesskit/v2 74e27374 build(deps): bump github.com/Microsoft/hcsshim from 0.11.4 to 0.12.0 26c02362 chore: remove useless error check f853ab85 Enhance default platform comparision for image shareablity #2810 45b86c21 build(deps): bump golang.org/x/net from 0.21.0 to 0.22.0 be006100 build(deps): bump golang.org/x/crypto from 0.20.0 to 0.21.0 f1595262 Use json marshal/unmarshal to copy 3d28dbf6 fix: typos 772d4791 build(deps): bump github.com/containerd/accelerated-container-image d94c8f59 build(deps): bump golang.org/x/crypto from 0.19.0 to 0.20.0 18f29fb0 fix: add onstartcontainer hook d8412eed build(deps): bump github.com/containerd/nydus-snapshotter 261bd97c build(deps): bump github.com/klauspost/compress from 1.17.6 to 1.17.7 41b83493 Rootlesskit Network Design 8d840dae doc: should use master tag for binfmt Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2025-01-17 19:17:09 +00:00
Bruce Ashfield	0b47478ebc	crun: update to 1.19.1 ... Bumping crun to version 1.19.1-13-g6f010b5f, which comprises the following commits: 25efd10a Remove surplus ENOENT error check 99f2824f utils: return error from set_home_env() if the user was not found 3158e491 criu: improve error handling for CRIU function calls 3cd9c2c9 criu: do not set network_lock if not specified a542ecc7 github: enable unprivileged userns 38122ac9 test: fix compiler warnings ec5947ce TMT: Add sanity tests from c9s downstream d08e304a Packit: Remove RHEL jobs 3e32a70c NEWS: tag 1.19.1 8b972be9 linux: fix a hang if there are no reads from the tty e50e47ca libcrun: add ring buffer implementation 20ec0982 utils: extend epoll_helper to monitor writeable fds 77a72bdf utils: use bool for set_blocking_fd() 5f9ca9eb utils: skip copy_file_range if not usable e2380490 tests: adjust test to upstream code d7933486 build-aux: use an init process for the nix container 0ec1522b nix: update packages list 9b014718 Generated crun.1 d700d9db Add missing periods at the end of sentence 1832c170 linux: remove tmpmount workaround 9e3615a4 ci: build tests_libcrun_fuzzer before fuzzing 6b2e6193 build: use libtool to create libcrun_testing 3c5292b2 build: don't compile tests during normal build db31c42a NEWS: tag 1.19 c4f8c87a checkpoint/restore: allow passing network lock method to libcriu 1942efc9 Handle case where cgroup v1 freezer is disabled b366a785 wamr: revitalize wamr handler 21219504 cgroup, systemd: do not override devices on update d1531073 error: 'CHAR_BIT' undeclared. fix compile failure with musl libc 5d66b309 build: Don't build cloned_binary as part of crun fd69065d test: add new test for exec-cpu-affinity b941d6c5 linux: move reset cpu affinity to scheduler ef33259c linux: honor exec cpu affinity mask 047b7485 src: move cpuset_string_to_bitmask to utils 2c8088c4 libocispec: sync 42b959b5 container: initialize max caps before accessing process block 46bd62b1 cgroup: do not stop process on exec 19bbd8da utils: silence compiler warning Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2025-01-17 19:17:09 +00:00
Bruce Ashfield	3dcd679bb1	cri-o: update to v1.31.4-tip ... Bumping cri-o to version v1.31.4, which comprises the following commits: 8aa8c7e42 server: fix panic when default annotations are specified 88939baf2 version: bump to 1.31.4 284eb9327 config: add default_annotations 26bb3c96a Allow to remove pod sandbox on netns removal cf112c696 Disable actuated runners 0b449cebc version: bump to 1.31.3 ee2d73252 Fix container restore lint report 6aa6cbcb4 Only restore container if all bind mounts are defined 165504928 Add `--pull-progress-timeout` / `pull_progress_timeout` option d3f39eaa9 RuntimeHandler inheritance bug-fix c65eb63b1 RuntimeHandler inheritance c918a52d1 nix: don't build gpgme with `--enable-fixed-path` 677d91db3 version: bump to 1.31.2 f334f80c3 config: fix validation of allowed annotations e0fe09609 Cherry-pick changes from containers/storage/pull#2134 cae8a3ab5 Cherry-pick changes from containers/common/pull#2185 e9deb6cde version: bump to 1.31.1 b6226b8a3 config: pass down PullOptions from the storage configuration a673a7ca4 test: fix empty pinned_images test 7d4f035b5 tests: improve wait_for_log to allow multiple calls for the same message 2d27da0f3 image: serialize RegistryImageReferences when checking signatures 4b55a1107 Pin govulncheck to specific version to match Go version requirements abb6a439d Use nanosecond timestamp for evented pleg pod status fbd73b339 test: fix CR test by unsetting SIGNATURE_POLICY a379923f5 server/restore: mark signature validation incompatible with restore 1a9d36494 server: document difference between userRequestedImage/userSpecifiedImage 50075247a server: use imageID instead of a random digest 0dd7eaffe server: only check signatures if namespaced policy is defined ec8545d2d server: use cached restore value instead of recomputing 7a67eb72b store canonical ref differently 1444e69d9 test: fix crun-wasm test to handle requirement of user_specified_image 6edecf30e Image verificaiton for namespaced policies 9d3da707d Revert "contrib: temporarily move to crun 1.15 to fix CI" e54ea3407 Fix invalid syntax in test workflow fc262592f ci: run setup commands for e2e because they weren't done for some reason d24529f7d build(deps): bump the actions group with 2 updates efa1690c0 test: setup runtimes correctly so drop-ins work bfc509cd7 test: comment out ARM image digest as it's unused 45ee51d01 test: update memory limit tests to not be in image.bats 29803ef24 test: fix config test fe5bdeb3b gh actions: set crun instead of runc f174d5a3d oci: allow double delete 624b15b9c gh actions: spoof crun for unit tests on arm64 afe78eb68 config: refactor min memory handling a bit d2cb4e4ae config: update min memory to account for crun 5e21d495c config: default to crun c32f7b02a build(deps): bump crate-ci/typos in the actions group 2b8dfdf48 build(deps): bump github.com/opencontainers/runc in the gomod group 3fe3b4e81 build(deps): bump peter-evans/create-pull-request in the actions group d23951276 refactor seccomp f81fea25f Modify test case to verify blocking of clone 7d0d6ad49 Filter namespace creation args to clone in default seccomp policy cc8b071b1 build(deps): bump the gomod group across 1 directory with 3 updates f7fee64a7 build(deps): bump the actions group with 2 updates dd0cb08d8 Update golangci-lint to v1.60.3 for better go 1.23 compatibility 1f212dc7b Add Makefile help 9ad5c5aed Add additional bind mount to image volumes ff73a7a0b Fix Makefile `$PWD` when running using `sudo` 2c37d262f Make `prettier` target run in a privileged container 33fb00528 Fix lint b1bf40749 build(deps): bump google-github-actions/upload-cloud-storage 1beb59cb8 build(deps): bump the gomod group across 1 directory with 8 updates ba846966f config: add /dev/net/tun to default allowed devices 3ef7f9de4 build(deps): bump crate-ci/typos in the actions group f7e8682ef Add `{verify-}prettier` makefile targets 53d958fa3 Change default tracing endpoint to 127.0.0.1 9d1a5f437 build(deps): bump crate-ci/typos in the actions group 13e701563 build(deps): bump github.com/onsi/ginkgo/v2 in the gomod group e83973d7d Run prettier on supported files 8269859fd Make static build a GitHub action matrix 09bb40438 Change profile endpoint to 127.0.0.1 5f95cb5ce build(deps): bump the gomod group across 1 directory with 3 updates aa1ca0d47 build(deps): bump google-github-actions/auth in the actions group f83861120 build(deps): bump google-github-actions/upload-cloud-storage a8950ce30 Pass around more contexts in hooks and metrics 7472e56e9 Trigger `test` workflow after release branch fast forward 6fb6e8d16 Run the runtime RuntimeType validation first dff5305bb Avoid potential reallocs by pre-sizing some slices Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2025-01-17 19:17:09 +00:00
Bruce Ashfield	f8b943afd4	containerd: update to v2.0.1 ... Bumping containerd to version v2.0.1-6-gce560bb24, which comprises the following commits: f34147772 downgrade go-difflib and go-spew to tagged releases dca769485 chore: add a build tag to disable containerd plugin import 5942b3fcb Update golangci to 1.60.3 b0ece5dc5 Prepare release notes for v2.0.1 fe6957084 build(deps): bump actions/attest-build-provenance from 1.4.4 to 2.1.0 eb2ce6882 update xx to v1.6.1 for compatibility with alpine 3.21 and file 5.46+ 018d83650 internal/cri: should not apply IoOwner options 5eb7995a9 feat: update go-cni version for CNI STATUS a53eff53d update runc binary to v1.2.3 a2302ea89 Add integration test for custom configuration be5eda069 complete cri grpc config migration 44cdca68b ctr pull unpack for default platform using transfer service 62b790bfa CI: update Fedora to 41 290e8bc70 update to go1.23.4 / go1.22.10 3ba2df924 fix panic due to nil dereference cgroups v2 73f57acb0 Update differ to handle zstd media types 34a45cab2 Publish attestation as release artifact Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2025-01-17 19:17:09 +00:00
Bruce Ashfield	5f8055f484	conmon: update to 2.1.12-tip ... Bumping conmon to version v2.1.3-168-gaee638f, which comprises the following commits: 02c6ea6 Avoid bogus journal filling errors Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2025-01-17 19:17:09 +00:00
Bruce Ashfield	343da075d5	buildah: update to v1.37.5 ... Bumping buildah to version v1.37.5-4-gc0602013a, which comprises the following commits: e4deb56f6 [release-1.37][CI:DOCS] touchup changelog f31d99d24 Update CHANGELOG.md 5fd40b989 [release-1.37] Bump Buildah to v1.37.5 b949f6572 Bump the containers/storage library to v1.55.1 cffa820dc Properly validate cache IDs and sources 93986b888 Packit: constrain koji job to fedora package to avoid dupes 9dfacbb47 Tag v1.37.4 b55cbb8eb vendor: update c/common to v0.60.4 e289e285d CVE-2024-9407: validate "bind-propagation" flag settings 956095ee1 [release-1.37] Bump to Buildah v1.37.3 8165aae9e Do not error on trying to write IMA xattr as rootless a47261ec1 imagebuildah.StageExecutor: clean up volumes/volumeCache 7b28b9e4e `manifest add --artifact`: handle multiple values 8fb01fbc9 Packit: split out ELN jobs and reuse fedora downstream targets a8f37392f Packit: Enable sidetags for bodhi updates 1c0e94ec6 Use Epoch: 2 and respect the epoch in dependencies. eadda3bc0 [release-1.37] Bump Buildah to v1.37.2 a18969dea [release-1.37] Bump c/common to v0.60.2, c/image to v5.32.2 67cc51e90 [release-1.37] Bump to Buildah v1.37.1 02313cf69 [release-1.37] Bump c/common v0.60.1, c/image v5.32.1 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2025-01-17 19:17:09 +00:00
Bruce Ashfield	fb973818ad	docker: update to v27.5.0-rc.2 ... Bumping moby to version v27.5.0-rc.2, which comprises the following commits: a167bc5c9a libnetwork/drivers/windows: fix error-matching for hcsshim "not found" bdd3a95a13 pkg/fileutils: deprecate GetTotalUsedFds 5f81af6eaa libnetwork/drivers/bridge: format errors with '%v' for consistency 0f45f60e9e libnetwork/drivers/windows: fix non-constant format string 17e8cb2b06 distribution: fix non-constant format string 60f9e333b6 daemon: adjust tests for changes in go1.24 JSON errors 95b2f2ed49 Restore labels when re-creating Windows networks 623af65208 Use the roundtripper during build 771d1dc44e docs/api: allow for an empty string for Isolation (api v1.25-v1.47) 68b39f825d docs: Update example section for SwarmJoinRequest 4767dbd713 api: Allow for an empty string for Isolation in Swagger specs This adds an empty string as a valid option for the Isolation field when inspecting a container. On non windows systems, this is always empty, so no error should be returned. Fixes #47452 4359c8b08e vendor: update buildkit to v0.18.2 bbd14fc508 vendor: update buildkit to v0.18.1 fd86c39cc3 vendor: update buildkit to v0.18.0 1fd14d845f vendor: update buildkit to v0.18.0-rc2 68b0c87e05 vendor: github.com/moby/buildkit 94d0f6ed85e5 (master / v0.18.0-rc.2) 74600d8425 vendor: update buildkit to v0.18.0-rc1 4830f6db66 builder: fall back to defaultKeepStorage if keepStorage is unset for GC policy 0e43d1f642 vendor: github.com/containerd/containerd v1.7.23, hcsshim v0.12.8 800d735171 vendor: github.com/Microsoft/hcsshim v0.12.7 a57c1848b6 vendor: sigs.k8s.io/yaml v1.4.0 26eeb6e414 vendor: github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 f6f7c9f231 vendor.mod: github.com/microsoft/hcsshim v0.12.5 bdecc9d58e pkg/reexec: deprecate and migrate to github.com/moby/sys/reexec 46a8e5f8c5 pkg/reexec: Command: separate public API from implementation d175e4f1f1 pkg/reexec: make platform-agnostic (again) ed5c0a79e7 pkg/reexec: use const for name of test binary 4bf113f9bd all: Remove redundant `units` alias for `go-units` 7a512a9531 vendor: go.opentelemetry.io/contrib/instrumentation/xxx v0.53.0 cf4e196e77 vendor: go.opentelemetry.io/otel v1.28.0 2a3cc83f36 vendor: google.golang.org/genproto/googleapis/api f6361c86f094 4141379d07 Discard ErrDumpInterrupted and return data after maxRetries 4c50153e2e Fix comments c5e72db8e8 vendor: github.com/vishvananda/netlink v1.3.1-0.20240922070040-084abd93d350 14b30aeb61 Add linting rules to spot use of un-wrapped netlink functions. 87fc62a648 Fix merge problem 3ca9a3be70 Add nlutil functions to retry on netlink EINTR 4729e446ce vendor: github.com/vishvananda/netlink v1.3.0 cbe4488a6b vendor: github.com/vishvananda/netlink v1.2.1 eda0a20deb libnetwork/iptables: deprecate Passthrough b51622dd0d libnet/iptables: deprecate type IPV 08de719cf2 libnetwork/drivers/bridge: setupIPChains: fix defer checking wrong err 6855ca1e62 integration-cli: don't skip AppArmor tests on SLES 224b30556d docs/api: document correct case for Api-Version header 5b92b3e7e0 Accurately reflect the canonical casing of `API-Version` and `OS-Type` headers 1df9e896f2 pkg/system: deprecate types and functions that are only used internally 3a1e495a0f daemon: info: remove bridge-nf-call-iptables / ip6tables warnings 4082abad8b Dockerfile: update runc binary to v1.2.3 a379aae924 man: vendor: github.com/cpuguy83/go-md2man v2.0.5 c3968c6ab7 update xx to v1.6.1 for compatibility with alpine 3.21 2e6ca227cf otel: Use non-noop tracer provider for grpc a5f86f9279 integration/build_traces: Create own tracer provider 3a05c5dcad otel: Avoid excessive memory allocations if not configured adb8773adb Jenkins: don't modprobe kernel module ff176d42d5 Don't try to modprobe ip6_tables in the moby dev container 86126b9af1 Try to load kernel module ip6_tables, when necessary. 58318d26fc Use ioctl to try to trigger kernel module loads 4775621ab6 Dockerd rootless: make {/etc,/var/run}/cdi available 0e34b3956b update to go1.22.10 7919b806e7 [27.x] vendor: github.com/moby/buildkit v0.17.3 525b929947 registry: deprecate RepositoryInfo.Class d6d43b2912 c8d/tag: Don't log a warning if the source image is not dangling e3564b52af Jenkinsfile: modprobe br_netfilter 46f6b9a259 integration: add wait 18aa104041 daemon/graphdriver/zfs: ignore non-existent dataset on removal 052f7d6461 Fix br_netfilter module loading logic 151c7565a9 Remove buildkit init timeout 465eb6aee2 vendor: github.com/cenkalti/backoff/v4 v4.3.0 e4d5bae9c5 vendor: github.com/go-logr/logr v1.4.2 339572db5d vendor: github.com/prometheus/client_golang v1.20.5 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2025-01-17 19:17:09 +00:00
Bruce Ashfield	f9ba743dad	docker: check for seccomp and ipv6 ... Without these (and their associated packageconfig options) docker may build, but it won't run correctly. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2025-01-17 19:17:09 +00:00
Leonard Anderweit	74087fc372	podman-compose: Add runtime dependencies ... Add missing runtime dependencies on python modules asyncio, json and getpass provided by unixadmin. Sort the dependencies alphabetically while at it. Signed-off-by: Leonard Anderweit <l.anderweit@phytec.de> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2025-01-07 22:05:27 +00:00
Bruce Ashfield	755520c5fd	crun: update to 1.18.2 ... Bumping crun to version 1.18.2-17-g52ed5880, which comprises the following commits: fd69065d test: add new test for exec-cpu-affinity b941d6c5 linux: move reset cpu affinity to scheduler ef33259c linux: honor exec cpu affinity mask 047b7485 src: move cpuset_string_to_bitmask to utils 2c8088c4 libocispec: sync 42b959b5 container: initialize max caps before accessing process block 46bd62b1 cgroup: do not stop process on exec 19bbd8da utils: silence compiler warning 8a0ee4b5 src: use mount API to self-clone 85d4db3d crun: check for integer overflow 10b2146e linux: add check before deref 2525752d cgroup: drop unuseful check 1ae190b0 src: run make clang-format 00ab38af NEWS: tag 1.18.2 5bc6b50e cgroup, systemd: fix first rule selection for systemd c41f034f NEWS: tag 1.18.1 6628d7a3 utils: check for snprintf truncation 7c4a3f9c cgroup: skip DevicePolicy if all devices are allowed ef60ec90 libcrun: deprecate cgroup v1 77e4233a cgroup, systemd: ignore rules before a default deny one 8a30a57a cgroup: ignore redundant deny dev cgroup rules 369dd95b CONTRIBUTING.md: new file 3647ecab linux: copy map_file before tokenizing in uidgidmap_helper 8656b254 NEWS: tag 1.18 bf0a3516 rpm: use embedded yajl in RHEL builds 41461290 crun.1.md: add lsm-profile and lsm-mount-context ed642593 criu: load lsm functions ce89aa66 restore: add lsm-mount-context option 9efd6a87 restore: add lsm-profile option aee13711 github: update run-on-arch-action c4a65aad cgroup: split lines when writing raw unified files dd7adb22 cgroup: write_cgroup_file_or_alias uses write_cgroup_file 22b018d0 cgroup: convert block_io devices to IODeviceWeight c7745e9a cgroup, systemd: add support for IODeviceWeight 8e3e693e cgroup: refactor handling of io.weight 7d0e2cdb cgroup: report errors if value contains not parsed data efae52ab cgroup: add support for the misc controller d55194b2 cgroup systemd: ignore unsupported properties 500cf802 cgroup, systemd: honor cpu.idle 5f64da6a linux: pass down state_root to the cgroup handler 80d9677b cgroup, systemd: honor memory.zswap.max 01fa4993 cgroup: specify devices rules to systemd 667442e4 cgroup: move standard devs definition in a common place 335d8cfb cgroup: specify TasksMax to systemd f6d8373f cgroup: specify MemorySwapMax to systemd 1a04566d cgroup: specify MemoryLow|MemoryHigh|MemoryMin to systemd 8d90eb3a cgroup: use macro to refactor common pattern 34061ab5 add duplicate namespace detection b29ccd7e cgroup: rename function af034b91 cgroup: special handle value "max" 2825a579 cgroup: set io weight on systemd owned cgroup 6cf5324b Packit: constrain koji and bodhi jobs to the fedora package 7140aea1 nix: replace gitMinimal with git 27b5a2f6 Fix running on kernel without user namespaces b5ff44f2 nix: update list of packages 3b40d773 build: specify --extra-experimental-features to nix da616875 release.sh: update nix image dee824e6 Fix segfault in `crun features` 4ea62f25 Disable criu support on riscv64 Bumping libocispec to latest, which comprises the following commits: ed23e6a runtime-spec: sync from upstream 412ce10 image-spec: sync from upstream 4b8feed common: make sizeof the last argument for calloc Bumping image-spec to version v1.1.0-44-gc66e811, which comprises the following commits: 40d3096 add example using .wh. and move opaque example to its section cee95e9 Ignore uname/gname where uid/gid are supported d44515e Changes requested from review 5db69d9 Feat: Pin external references on a release 76b8bae README: update runtime-spec links to use main branch 716f83b Implementations should support zstd Bumping runtime-spec to version v1.2.0-23-g9505701, which comprises the following commits: 9ceba9f update http links to https faf82be doc: fix the invalid hyperlink naming-a-volume adaa517 config: simplify final CPU affinity rule 119ae42 Add CPU affinity to executed processes 2149fb5 config-linux: describe the format of cpus and mems c6af124 ci: remove redundunt actions d4aa6d8 chore: format JSON file `make -C schema fmt` b983fbf CODEOWNERS: remove vbatts bf698d0 MAINTAINERS: move vbatts to EMERITUS Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-12-10 03:47:54 +00:00
Bruce Ashfield	1adf3b6a83	docker: update to v27.4.0-rc.2 ... Bumping moby to version v27.4.0-rc.2-25-g33b6b826c2, which comprises the following commits: 151c7565a9 Remove buildkit init timeout 1abc35f098 Add label on PrepareSnapshot to warn about non-expiring leases 1d1da55382 Update containerd image builder to use lease prune label a3afccd409 Fix lease management during image operations 33e5f87d0f [27.x] vendor: github.com/moby/buildkit 80e01a9dc7c1 (v0.17.3-dev) 752c0453d6 vendor: github.com/moby/buildkit v0.17.2 6cab48bd9b vendor: github.com/containerd/typeurl v2.2.3 a64812939f Update containerd to v1.7.24 179c7c7596 vendor: github.com/tonistiigi/go-actions-cache 394979b8119e 7f9c5b278a vendor: resenje.org/singleflight v0.4.3 b90c6e922c vendor: github.com/containerd/continuity v0.4.5 e956d4a370 Dockerfile: update to runc v1.2.2 b888333fe1 Dockerfile: update containerd to v1.7.24 6b04fcf560 vendor: github.com/golang-jwt/jwt/v4@v4.5.1 0f0b83a00b vendor: google.golang.org/grpc v1.66.3 b859373da2 vendor: tags.cncf.io/container-device-interface v0.8.0 2f816b2596 [27.x] daemon/containerd: add missing go:build tag 3e03c979da update go:build tags to use go1.22 346ac21032 daemon/logger/loggerutils: add //go:build directives to prevent downgrading to go1.16 f54e5b0b19 libnetwork/networkdb: add //go:build directives to prevent downgrading to go1.16 6ec5197103 [27.x] vendor: github.com/containerd/containerd v1.7.23 31c8d23e7e Dockerfile: update compose to v2.30.3 2ee3796e3f Dockerfile: update buildx to v0.18.0 2acf9893c6 Increase test handler sleep, replace deprecated assert edfb2048ac deprecate pkg/platform and move internal 5ab7960b46 logger/journald: plumb contexts into reader 857fc4730c logfile: Close reader when caller cancels a7badb2bb5 Logfile: Add tracing spans d48c403efa Logfile: skip files that are corrupted c9a7391911 Refactor logfile reads 49f5431807 Fix time comparison in sharedtemp implementation 173a9f2091 libnet: don't put external DNS answers in OTel spans 15b69c4200 vendor: update buildkit to v0.17.1 3280e50f65 vendor: update buildkit to v0.17.0 00774deb96 vendor: update buildkit to v0.17.0-rc2 0a67347003 vendor: google.golang.org/protobuf v1.34.2 033bd73bba [27.x] pin github.com/Microsoft/hcsshim to v0.11.x 0e4ab47f23 update to go1.22.9 d3b9ec90ba api/swagger: Improve description for platform in images/push c902e1a187 c8d/inspect: Fix duplicate RepoDigests b089f36796 volume: VolumesService.Create: fix log-level for debug logs afd7c9913f client: prevent idle connections leaking FDs de0135965e c8d/httpfallback: Handle connection errors ddb56edd00 volume/mounts: fix anonymous volume not being labeled b7bc29af50 daemon: use OwnCgroupPath in withCgroups 1e11f2a1c0 daemon: deprecate Daemon.IsPaused 0183f5dd13 daemon: deprecate Daemon.Exists 749f9ccee4 Fix: setup user chains even if there are running containers 8deb557451 api: GET /images/json: preserve original manifest order e4c067af91 gha: shorter time limits for smoke, validate 525b19ff04 gha: use "ubuntu-24.04" instead of "ubuntu-latest" ceb41b83f3 gha: dco: small tweaks to running the container 2690b70a09 gha: dco: update ALPINE_VERSION to 3.20 f53efc688f gha: build (binary), build (dynbinary): limit to 20 minutes 166565e3ac gha: dco: limit to 10 minutes 57a72c3c9d container: deprecate ErrNameReserved, ErrNameNotReserved 8804551902 container: viewDB.ReserveName, view.GetID: return errdefs errors 202aac0eb4 container: viewDB.withTxn: don't wrap errors be8be11708 container: TestNames: don't string-match error assertions bedbe333bf dockerd-rootless-setuptool.sh: let --force ignore smoke test errors ffb5bd905a cmd/dockerd: Add workaround for OTEL meter leak 12cc7f7696 daemon/containerd: getPushDescriptor: fix formatting of platform in errors 01412dacf7 daemon/containerd: touch-up platform not found error 3c93981344 images: GetImage: touch-up error message for missing platform 03225b1a41 PushImage: remove misleading error about --platform without containerd 5376990d4d build: create distinct history db for each store 34d2e5e7e6 vendor: github.com/moby/swarmkit/v2 v2.0.0-20241017191044-e8ecf83ee08e 0f8fc3105e Enable bridge netfiltering if userland-proxy=false 505c4c32be Set NODAD on bridge IPv6 addresses c00b3108e5 docs: api: document w (width) and h (height) query params as required e39ced5c00 api: document w (width) and h (height) query params as required 3c258e6011 pkg/authorization: update link to API documentation 29f0dcd902 client: update link to API documentation 21c974b281 docs/api: version-history: update documentation links 0bc91d5dc8 gha: restrict cross and bin-image to 20 minutes d755573aba vendor: github.com/moby/buildkit v0.17.0-rc1 32afa26719 gha: add guardrails timeouts on all jobs 8dc3ce5606 integration/build: remove TestBuildWithSession, and fsutil direct dependency 136fdfcdfc vendor: google.golang.org/grpc v1.66.2 6eed19d656 vendor: google.golang.org/protobuf v1.34.1 f29cc7c2cf vendor: github.com/cespare/xxhash/v2 v2.3.0 5f92ab397b vendor: golang.org/x/tools v0.25.0 9af7d06698 vendor: golang.org/x/mod v0.21.0 8fef24d9d4 vendor: golang.org/x/net v0.29.0 efc5252041 vendor: golang.org/x/crypto v0.27.0 a8e92fa662 vendor: golang.org/x/text v0.18.0 80cd75d7d5 vendor: golang.org/x/sys v0.25.0 a2a544202b vendor: go.etcd.io/bbolt v1.3.11 418a79d51b gha: buildkit: make sure expected Go version is installed 43580ccbc1 update to go1.22.8 af8b897560 Dockerfile: update compose to v2.29.7 d91a922ef3 Dockerfile: update docker CLI to v27.3.1 0138291345 gha: add CodeQL Analysis workflow a6b772b24c gha: govulncheck: make sure read permissions are set cd21af7e41 Do not DNAT packets from WSL2's loopback0 5c499fc4b2 Only enable bridge netfiltering when needed 8adc8e405d Dockerfile: update compose to v2.29.4 576fc88b1a Dockerfile: update buildx to v0.17.1 e928a0d22d man: dockerd: add description for --log-format option 82cf138590 internal/opts: SetOpts: invalidate empty option-names 487a2f5314 internal/opts: SetOpts.Set: remove redundant var assignment 6d4a507acc internal/opts: SetOpts,NamedSetOpts: test for optional value bae46f6463 man: dockerd: value is optional for --feature flag 176e04d73b man: fix duplicate word in --feature flag description 06c9c72269 Update dlv in the dev-env 15fbba2169 man: update dockerd man-page to include --feature flag b262a95d67 c8d/prune: Keep deletion order stable 39c17094b0 c8d/prune: Add OTEL spans 343800d7be adjust TestPruneDontDeleteUsedImage for 27.x branch 95ffe8493e c8d/prune: Keep the last tagged image instead of creating dangling image c40cd54593 Add feature to daemon flags dbee7b16df TestIPRangeAt64BitLimit: remove colon after XFAIL to help grepping bd71b5d319 Explicitly disable nvidia device injection for --gpus=0 a5478dde0e Dockerfile: update RootlessKit to v2.3.1 80d0013217 Fix typos ce86fade0d Dockerfile: update compose to v2.29.2 682b96c479 Dockerfile: update buildx to 0.17.0 c3aaaf2be0 Dockerfile: update docker CLI to v27.2.1 ce07360a1c vendor: update buildkit to v0.16.0 ab99508c07 docs/api: update deprecation version for erroneous fields (v1.46, v1.47) c7a8942d6d api/swagger: update deprecation version for erroneous fields 57ba0b05e6 vendor: update buildkit to v0.16.0-rc2 16bf28ec2d test: update since session signature has changed a0650bf67c vendor: update buildkit to v0.16.0-rc1 f7ea6bb4d9 vendor.mod: golang.org/x/net v0.28.0, etc. da2b59d3a2 vendor.mod: golang.org/x/time v0.6.0 3e60519c9c vendor.mod: golang.org/x/sys v0.24.0 e6a4c5f840 vendor.mod: golang.org/x/sync v0.8.0 2514b02677 vendor.mod: golang.org/x/mod v0.20.0 69f9ab2958 vendor.mod: drop direct dependency on golang.org/x/exp 70c8d41445 vendor: github.com/containerd/nydus-snapshotter v0.14.0 54e4cdc044 vendor: github.com/containerd/nydus-snapshotter v0.13.14 dca7a36092 vendor: google.golang.org/grpc v1.62.0 458110ccd0 vendor: golang.org/x/time v0.5.0 27b5c33847 vendor: github.com/moby/sys/sequential v0.6.0 6e77ead91e vendor: github.com/moby/sys/symlink v0.3.0 0890631ac7 vendor: github.com/moby/sys/signal v0.7.1 508173c39d vendor: github.com/moby/sys/mount v0.3.4 9b26c10e8b vendor: github.com/moby/sys/mountinfo v0.7.2 d3884731cd Dockerfile: update containerd binary to v1.7.22 cdbc2b6869 vendor: github.com/containerd/containerd v1.7.22 d0462c0e80 seccomp: add riscv64 mapping to seccomp_linux.go fc774f6dc0 docs: api: fix documentation for image push endpoint (API v1.25-v1.47) 84d78a8ad5 api: swagger: fix documentation for image push endpoint e16197e51d gha/bin-image: Also run on branches like `27.x` 37bf6e81f9 update to go1.22.7 3a4c589290 vendor: github.com/opencontainers/runc v1.1.14 10cf2d64b6 update runc binary to 1.1.14 84cfcb0893 docs/api: add documentation for API v1.47 edeb6ba9fb golangci-lint: temporarily disable G115: integer overflow conversion adb0b8536d update golangci-lint to v1.60.2 01f7ec0f21 update to go1.22.6 442462ad4e hack/make/.binary: set CGO_LDFLAGS=-latomic for arm/v5 a3eca63b5b hack/make/.binary: set CCGO_CFLAGS=-Wno-atomic-alignment for arm/v5 d036255b69 c8d/pull: Same error message for non-matching platform b9f56706c5 man: create parent directories in install recipe 12d4379ad1 c8d/list: Don't exclude non-container images 0fbb78c187 daemon: fix non-constant format string in call (govet) 2bc17a1e5c api/types: fix non-constant format string in call (govet) fe01a5fc30 api/server/router: fix non-constant format string in call (govet) bf7ca4dc4b container/stream: fix non-constant format string in call (govet) 405a163620 libnetwork/drivers/bridge: fix non-constant format string in call (govet) 812b97d559 volume/testutils: fix non-constant format string in call (govet) c4eef2a58c builder/dockerfile: parseChownFlag: fix non-constant format string in call (govet) 8dec1f216f layer: ignore G602: slice index out of range (gosec) 068e82bdd2 internal/cleanups: fix non-constant format string in call (govet) 8ae439ddaa libnetwork/cnmallocator: fix non-constant format string in call (govet) c27f7de662 cmd/dockerd: fix non-constant format string in call (govet) ec8ff9cbbd libnetwork: fix non-constant format string in call (govet) e5bc931f17 integration-cli: fix non-constant format string in call (govet) 6c3b1992d4 integration-cli: DockerSwarmSuite: rm redundant Fprintf, handle errors 83171f6b5a integration-cli: DockerNetworkSuite: rm redundant Fprintf, handle errors 4cfa21bb92 integration-cli: use erors.New() instead of fmt.Errorf 28bdd819d0 libnetwork: TestDNSOptions: remove redundant skip check cb2e98cfbf integration-cli: remove redundant platform checks 875e8aeef2 vendor: github.com/containerd/containerd v1.7.21 1900e4d8eb Dockerfile: update containerd binary to v1.7.21 (static binaries and CI only) ecd2b6ff09 c8d/image: Add `hostPlatformMatcher` d5b03423d1 man: support bringing your own go-md2man 56c5c23114 man: build dockerd man pages using make 77b2eb5734 Removed all mentions of "please" from docs and messages 805becdc7e docs: add default-network-opt daemon option a5828ac742 docs: remove devicemapper f7246a0e2c man/dockerd.8: assorted formatting fixes f110e779f6 man/dockerd.8: escape asterisks and underscores edbcbf8da7 docs: update dockerd usage output for new proxy-options b7cc16b0b0 Fix styling of arguments ecbc4f05bb Fix the max-concurrent-downloads and max-concurrent-uploads configs documentation 43298ad298 docs: remove documentation about deprecated cluster-store 8cc7f26f56 Document `--validate` daemon option 255eaa6647 Update man-page source MarkDown to work with go-md2man v2 ee27f4cd7f docs: update for cgroup v2 and rootless c1d3c952e7 docker run: specify cgroup namespace mode with --cgroupns fc9029a2e2 daemon: document --max-download-attempts option 115b10a467 Update document links and title. 488872bcb4 Allow user to specify default address pools for docker networks This is separate commit for CLI files to address PR 36054 f623030fac Update docs and completion-scripts for deprecated features ac7032bff9 Added docs for dockerd 161006302f fix a number of minor typos a6de17d230 Introduce/document new IPC modes 6513e80c84 docs: add documentation for dm.libdm_log_level 3d917f3fd6 Restore dockerd man page e854a5c201 c8d/pull: Replace pointer to interface with interface ea58dab95e c8d/pull: Keep the replaced image as dangling 0a38589add c8d/load: Only unpack host platform images 7c069d3021 c8d/load: Don't fail whole operation if unpack failed 5002faebe8 integration/TestAPIImagesListManifests: Check `Containers` a15a309832 c8d/list: Update benchmark to also have containers fd5cede287 c8d/list: Fix race condition when traversing containers 65c4e49aff govulncheck to report known vulnerabilities 7ebb277873 Dockerfile: update xx to v1.5.0 ad5eb875d4 c8d/list: Don't require `opts.ContainerCount` for manifest containers 3d845e0e8c c8d/list: Add test for total and content size 3563a707d0 c8d/list: Fix `Total` size calculation 89757f83ff api/list: Expose manifests bb2fec6425 api: Bump default version to 1.47 0f8fcec1d9 swagger: Disable ImageSummary model generation 1ec5e86154 api/types/registry: fix godoc, and add some doc-links 62f32e9a97 plugin: fix deprecation comments 830c76c6f2 vendor: update buildkit to v0.15.2 354bf75675 libcontainerd: gofumpt 4ab7d90669 pkg/plugins: gofumpt c11b2d9c7d pkg/archive: gofumpt ccdc79d55a libnetwork: gofumpt 35b1a30028 layer: gofumpt 9f63aa7435 internal: gofumpt 4d16ac993e integration: gofumpt 6d5266a650 integration-cli: gofumpt 4084dac566 daemon: gofumpt c36ab4c2ca daemon/containerd: gofumpt 904867593b daemon/config: gofumpt 72876770d0 builder: gofumpt e8109ee4da api/types: gofumpt ed65e1224e api/server: gofumpt d54aff9312 API 1.46: end per-interface sysctl migration in major release 8f12906274 Migrate per-endpoint sysctls until 28.0.0 c53be2f3d5 Allow --ip-range ending on a 64-bit boundary fc0150b962 daemon/containerd: rm use of regexp 73c01d0b6a image/v1: rm regexp use c93fe4a27d layer: rm regexp use 31459c8268 docs/api: swagger: fix x-nullable for SystemInfo.Containerd (api v1.46) 35d430c62e api/swagger: fix x-nullable for SystemInfo.Containerd 80a59c2f1a migrate to github.com/moby/sys/userns e7fe276c00 update to go1.21.13 e8cd19e810 gha: set permissions to read-only by default e0c52e0ba6 vendor: update buildkit to v0.15.1 efb67b16b0 api/server/router/grpc: NewRouter: set correct MaxRecvMsgSize, MaxSendMsgSize f96e26f68d migrate to github.com/moby/sys/user/userns 78b59867f2 vendor: github.com/moby/sys/user v0.2.0 018137b01a vendor: github.com/gofrs/flock v0.12.1 650e06ac75 vendor: golang.org/x/sys v0.22.0 bfe5339c7e dockerd-rootless-setuptool.sh: move RootlessKit smoke test 99471ac2fe hack: explicitly control enabling the journald logging driver b9b43b3bdf README: replace obsolete Docker EE mention 1bc907c97c vendor: github.com/containerd/containerd v1.7.20 1c0885d60d gha: check-pr-branch: fix branch check regression ed83a9e3a1 update containerd binary to v1.7.20 422ef48c2f gha: check-pr-branch: verify major version only c9d37a9198 [27.1] pkg/rootless/specconv: deprecate, and add temporary aliases 1f16a44b3d pkg/rootless/specconv: move to internal c8f1317585 pkg/directory: deprecate, and move to internal 68587c38fe pkg/directory: fix comment, and remove import comments d1ea2b1fec [27.1] pkg/containerfs: deprecate, and add temporary aliases 31c1b7dc17 pkg/containerfs: move to internal 6231ea4a34 pkg/containerfs: cleanup GoDoc, and make Windows a proper wrapper dc33eb81d8 pkg/containerfs: remove CleanScopedPath and make it internal bc6ae42031 Dockerfile: update compose to v2.29.0 af8866f324 Dockerfile: update buildx to v0.16.1 5e4ddd81a2 api/types/system: remove Info.ExecutionDriver c7e4d181a1 vendor: cloud.google.com/go/logging v1.9.0 3d7e824bc2 vendor: golang.org/x/oauth2 v0.21.0 d66b76d2e6 vendor: cloud.google.com/go/compute/metadata v0.3.0 03dc388f63 c8d/build: Log `image tag` event when image was built with Buildkit 5ee23b6050 builder-next: Add ImageNamedByBuildkit callback 53c521a6b2 builder-next: Don't return error from exported callback eccccd7577 Fix API version in TestSetInterfaceSysctl d9e3d1b815 update containerd binary to v1.7.19 b91e20cc2e vendor: update buildkit to v0.15.0 505be6557b vendor: update buildkit to v0.15.0-rc2 b1613dc2a1 vendor: update buildkit to v0.15.0-rc1 52f6163746 vendor: golang.org/x/net v0.25.0 c70e404e9e vendor: golang.org/x/crypto v0.23.0 d7a3f01421 vendor: golang.org/x/text v0.15.0 0f2f9e0049 vendor: golang.org/x/sys v0.21.0 45a1c34202 vendor: github.com/klauspost/compress v1.17.9 7b31435cf8 Migrate to github.com/containerd/platforms module 99df4fee0b vendor: github.com/containerd/containerd v1.7.19 9f08d1e357 vendor: github.com/microsoft/hcsshim v0.11.7 d1bbb61844 If url includes scheme, urlPath will drop hostname, which would not match the auth check 0835eaa5a1 Authz plugin security fixes for 0-length content and path validation Signed-off-by: Jameson Hyde <jameson.hyde@docker.com> b039de78d7 docs/api: Add missing ` 7d99ebe418 rootless: add `Requires=dbus.socket` Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-12-10 03:47:54 +00:00
Bruce Ashfield	f220803306	podman: update to v5.3.1 ... Bumping libpod to version v5.3.1-5-gc2f09d78d5, which comprises the following commits: 0d22d7b74e Quadlet - Use = sign when setting the pull arg for build 62c096bbce win-installer test: revert to v5.3.0 7bf22277ca Bump to v5.3.2-dev 4cbdfde5d8 Bump to v5.3.1 50960afe33 Update release notes for v5.3.1 d26990702c Update windows installer tests 2739822424 Windows: don't install WSL/HyperV on update a8d61c034b Switch to non-installing WSL by default 98353f27ed docs: add 5.3 as Reference version 4886a0ba64 only read ssh_config for non machine connections 93562b4955 ssh_config: allow IdentityFile file with tilde 28e7b239ba ssh_config: do not overwrite values from config file c49944ea02 connection: ignore errors when parsing ssh_config f7877bf9db spec: clamp rlimits in a userns dcedf5f211 cirrus: set proper DEST_BRANCH for 5.3 a39a749ce3 libpod: addHosts() prevent nil deref 9a9f07aa4b Bump bundled krunkit to 0.1.4 5546dc6c20 fix podman machine init --ignition-path 8efa1c1075 Bump to v5.3.1-dev 874bf2c301 Bump to v5.3.0 2e3836d226 Update release notes for v5.3.0 31df1bb97c [v5.3] Bump to Buildah v1.38.0 9556882bbf [v5.3] Skip FIPS mode secrets run test c6dd2c77ab [v5.3] Buildah treadmill tweaks 0710e83c41 test/buildah-bud: build new inet helper d852c58d6c test/system: add regression test for TZDIR local issue ac59fb9231 vendor latest c/{buildah,common,image,storage} 1f0e2db2a9 Reapply "CI: test nftables driver on fedora" 16acfd7edb Revert "cirrus: test only on f40/rawhide" dc97a7e0de test f41 VMs 9e38b455e4 volume ls: fix race that caused it to fail 44df7344fe AdditionalSupport for SubPath volume mounts 17224fcb05 Bump to v5.3.0-dev 8469dcc4f0 Bump to v5.3.0-rc3 a18365c665 Update release notes for v5.3-rc3 10309bfb45 podman: update roadmap b237b4dc2a libpod: journald do not lock thread 2597eeae70 Add key to control if a container can get started by its pod c6be5a6684 Honor users requests in quadlet files 2c01264568 CI: systests: workaround for parallel podman-stop flake 528b085438 Fix inconsistent line ending in win-installer project 5ae5ab8c26 fix(deps): update module github.com/opencontainers/runc to v1.2.1 dbfc8cccda Quadlet - support image file based mount in container file e6d987882e API: container logs flush status code 768ad8653a rework event code to improve API errors e3abf5c9e8 events: remove memory eventer 6348778348 libpod: log file use Wait() over event API 0acd192b59 Makefile: vendor target should always remove toolchain ef20e75a77 cirrus: check consitent vendoring in test/tools f4ad93d5f6 test/tools/go.mod: remove toolchain 3f15f710ce fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.10 d8311353b9 fix(deps): update module github.com/onsi/gomega to v1.35.1 37c8e10031 doc: explain --interactive in more detail cd1b6b7121 fix(deps): update golang.org/x/exp digest to f66d83c 2dff79bd2c fix(deps): update github.com/opencontainers/runtime-tools digest to 6c9570a 5722304613 fix(deps): update github.com/linuxkit/virtsock digest to cb6a20c 1e7593d17f Bump to v5.3.0-dev ffad01fbc8 Bump to v5.3.0-rc2 b6919a5712 Update release notes for v5.3.0-rc2 314dece926 add default polling interval to Container.Wait d633824a95 Instrument cleanup tracer to log weird volume removal flake 6b8e8cbbf7 make podman-clean-transient.service work as user b455f94ca8 Add default remote socket path if empty 48a8a9c22c Use current user if no user specified e523734ab6 Add support for ssh_config for connection c98538db7d libpod: use pasta Setup() over Setup2() c7ff3b75cb fix(deps): update module github.com/onsi/ginkgo/v2 to v2.21.0 5a1bc6126e fix(deps): update module github.com/onsi/gomega to v1.35.0 bd75a4e0e0 logformatter: add cleanup tracer log link 2a0a52469c docs: fix broken example f4be5e34c2 docs: add missing swagger links for the stable branches b9fed4fcf2 readthedocs: build extra formats ce24ab0683 pkg/machine/e2e: remove debug 4a54fd8756 fix(docs): Integrate pasta in rootless tutorial 5f66277138 chore(deps): update dependency setuptools to ~=75.3.0 1f44d0f8b2 libpod: report cgroups deleted during Stat() call 9abc17f1e1 chore: fix some function names in comment 41a82c9a95 CI: parallelize 450-interactive system tests 10d056cc5e CI: parallelize 520-checkpoint tests e6b7e4ff84 CI: make 070-build.bats use safe image names 64516e1b8f test/system: add podman network reload test to distro gating 743a0d49eb System tests: clean up unit file leaks c0f4e2ce67 healthcheck: do not leak service on failed stop 6069cdda00 healthcheck: do not leak statup service 45e1ffb799 fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.8.0 afedb83917 Add Startup HealthCheck configuration to the podman inspect d2ba730f33 buildah version display: use progress() 825eed4bde new showrun() for displaying and running shell commands 9db04e87b6 Buildah treadmill: redo the .cirrus.yml tweaks a925c9f831 Buildah treadmill: more allow-empty options ba8375c9e4 Buildah treadmill: improve test-failure instructions ee9c681f31 Buildah treadmill: improve wording in test-fail instructions eb90154975 doc: Remove whitespace before comma da783f3f70 fix(deps): update module github.com/checkpoint-restore/checkpointctl to v1.3.0 0cdb9b3b22 ps: fix display of exposed ports 73fb6623cd ps: do not loop over port protocol 390aec18b2 readme: Add reference to pasta in the readme 5b131b8273 test/system: Fix spurious "duplicate tests" failures in pasta tests 6fd0e227b4 Improve "podman load - from URL" 77ef28c14f Try to repair c/storage after removing an additional image store 1d7ec1ef5f Use the config digest to compare images loaded/pulled using different methods bf8f2b5551 Simplify the additional store test 3bc6072142 Fix the store choice in "podman pull image with additional store" 6a11e75c48 Bump to v5.3.0-dev d306e80127 Bump to v5.3.0-rc1 23ab7b858a Set quota on volume root directory, not _data 1a5ff0765e fix(deps): update module github.com/opencontainers/runc to v1.2.0 94878af151 test: set soft ulimit ef26488fd7 Vagrantfile: Delete 642b61a091 Enable pod restore with crun 2e94ca5816 vendor: update c/{buildah,common,image,storage} fdc9feea0e Fix 330-corrupt-images.bats in composefs test runs 67e0fa8b89 quadlet: add default network dependencies to all units 57b022782b quadlet: ensure user units wait for the network 203ab6573b add new podman-user-wait-network-online.service a6c4e00e9a contrib/systemd: switch user symlink for file symlinks 1462b52090 Makefile: remove some duplication from install.systemd 21d0711a02 contrib/systemd: move podman-auto-update units 9c6b1e20a3 quadlet: do not reject RemapUsers=keep-id as root ada75c0bb8 test/e2e: test quadlet with and without --user fa920f54c7 CI: e2e: fix checkpoint flake fe96c843bf APIv2 test fix: image history 67e39c1ec5 pasta udp tests: new bytecheck helper a92958eb0c Document packaging process cf124ee1bb [skip-ci] RPM: remove dup Provides 927cb7624c Update dependency setuptools to ~=75.2.0 1ddb15c81f System tests: safer pause-image creation 40d4f7240b Update module github.com/opencontainers/selinux to v1.11.1 1227f19393 Added escaping to invoked powershell command for hyperv stubber. b7b2ef48e8 use slices.Clone instead of assignment 768aaadca1 libpod API: only return exit code without conditions b3302e8e18 Housekeeping: remove duplicates from success_task 1bf37eecf3 Thorough overhaul of CONTRIBUTING doc. b0f2ebbe9d test/e2e: fix default signal exit code test dc55b59987 Test new VM build 1b57dcab61 CI: fix changing-rootFsSize flake feb46513f0 scp: add option types 06b470d79b Unlock mutex before returning from function 7ea6120794 Note in the README that we are moving to timed releases 5d10e6e16b cirrus: let tar extract figure out the compression 94dcf76eb2 Make error messages more descriptive 3a4c4468f2 Mention containers.conf settings for podman machine commands 7dc58c105b [skip-ci] Packit: re-enable CentOS Stream 10/Fedora ELN teasks" 3d57560a21 cmd: use logrus to print error 71d5ee0e04 podman: do not set rlimits to the default value 5ebba75dbd spec: always specify default rlimits 8896ace2a4 vendor: update containers/common 92a188ea38 Note in the README that we are moving to timed releases 7f836df303 Revert "CI: test nftables driver on fedora" 9e35fead03 cirrus: use zstd over bzip2 for repo archive 6e69978d2e cirrus: use shared repo_prep/repo_artifacts scripts 7eb4a6fe2b cirrus: speed up postbuild 04dffbc2c7 cirrus: change alt arch task to only compile binaries 9082a14d76 cirrus: run make with parallel jobs where useful bc3db7c95b Makefile: allow man-page-check to be run in parallel 39963cc984 cirrus: use fastvm for builds 4e3a03795d test/e2e: skip some Containerized checkpoint tests fe404959ed test: update timezone checks a79fec5e98 cirrus: update CI images f517e52167 test/e2e: try debug potential pasta issue 38803713d6 CI: quadlet system tests: use airgapped testimage bac655a6b1 Allow removing implicit quadlet systemd dependencies 05a449c61e fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.4 b3829a2932 libpod API: make wait endpoint better against rm races 3215d5124f podman-remote run: improve how we get the exit code 3d1a4301af [skip-ci] Packit: constrain koji and bodhi jobs to fedora package to avoid dupes e7833d52cf 055-rm test: clean up a test, and document 3cedd0c2b5 CI: remove skips for libkrun 858472aa83 Bump bundled krunkit to 0.1.3 43a4bddd10 fix(deps): update module google.golang.org/protobuf to v1.35.0 385e2ea650 fix(deps): update module golang.org/x/net to v0.30.0 45df394072 server: fix url parsing in info b8dbe09f98 fix(deps): update module golang.org/x/tools to v0.26.0 e2e1996c6a Makefile: fix ginkgo FOCUS option fbd9fe45cb fix(deps): update module golang.org/x/crypto to v0.28.0 d0cb62aacc podman-systemd.unit.5: adjust example options 374844817d docs: prefer --network to --net 1470961e6c fix(deps): update module golang.org/x/term to v0.25.0 567906ed5b fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.24 53785ed055 fix(deps): update module golang.org/x/sys to v0.26.0 505c585b49 OWNERS file audit and update 8061553c0f Exposed ports are only included when not --net=host e46ae46f18 libpod: hasCurrentUserMapped checks for gid too e948c4ed90 [CI:DOCS] Document TESTFLAGS in test README file 985b57d9f7 Validate the bind-propagation option to `--mount` d8b26ac1b4 Fix typo in secret inspect examples 6f9cc3755a Mention `no_hosts` and `base_hosts_file` configs in CLI option docs 043b82ef59 Fixes for vendoring Buildah 83a0299309 vendor: update buildah to latest 23f256349b Makefile - silence skipped tests when focusing on a file dde1c3d98c vendor: update to latest c/common fc25a3a5fc Quadlet - prefer "param val" over "param=val" to allow env expansion 410537808e System tests: sdnotify: wait for socket file creation 28e01cc8cc Switch to moby/sys/capability 6a91149b53 platformInspectContainerHostConfig: rm dead code b791dfb558 CI: require and test CI_DESIRED_NETWORK on RHEL edc3dc5e11 Add ExposedPorts to Inspect's ContainerConfig 28d3775c4d fix(deps): update golang.org/x/exp digest to 701f63a abc4cfb049 quadlet: allow variables in PublishPort 7cde3abd17 fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.9 8ef495594c fix(deps): update github.com/godbus/dbus/v5 digest to a817f3c bb35ad1da4 Document that zstd:chunked is downgraded to zstd when encrypting ce9716ee41 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.3 ece76a2537 chore(deps): update dependency ubuntu to v24 b5e1863d1c rpm: do not load iptables modules on f41+ e07c31068f adding docs for network-cmd-path a619c03eff Include exposed ports in inspect output when net=host 1dd90dbe20 feat(libpod): support kube play tar content-type (#24015) 1950555b26 podman mount: some better error wrapping 5c3019e028 podman mount: ignore ErrLayerUnknown ebbec00b0d Quadlet - make sure the order of the UnitsDir is deterministic f47abd8e1e packit: disable Centos Stream/fedora ELN teasks 5de7b7c3f3 libpod: remove shutdown.Unregister() 0bbef4b830 libpod: rework shutdown handler flow 2de82d523b libpod: ensure we are not killed during netns creation 27838b26d6 Update module github.com/moby/sys/capability to v0.3.0 6e4ef2c54d Update documentation of `--no-hosts`, `--hostname`, and `--name` CLI options c67d8baeb6 Update documentation of `--add-host` CLI option 70c131ed68 System tests: set a default XDG_RUNTIME_DIR e9b8564690 Modify machine "Remove machine" test 73cbc13190 CORS system test: clean up de856dab99 Add --health-max-log-count, --health-max-log-size, --health-log-destination flags 7fbc6d9370 troubleshooting: adjust home path in tip 44 1f2658e0ef test/system: For pasta port forwarding tests don't bind socat server 24deec835c Update connection on removal c709be3a29 Simplify `RemoveConnections` 9febd2c27a Move `DefaultMachineName` to `pkg/machine/define` 7f29233a3f vendor: update containers/image c81c77109b vendor: update containers/storage fd4c63838b CI: skip the flaking quadlet test faf4604883 CI: make systemd tests parallel-safe (*) 09ba5db035 CI: run and collect cleanup tracer logs 0b59f67c3a add epbf program to trace podman cleanup errors 4be6bf2270 CI: parallelize logs test as much as possible 600634c62c CI: format test: use local registry if available d92f2d39ee CI: make 700-play parallel-safe 62e5eb4734 docs: Fix missing negation 6ef0288ca6 bin/docker support warning message suppression from user config dir 6d4006b123 Update module github.com/docker/docker to v27.3.1+incompatible 133ea31ffb Quadlet - add full support for Symlinks 792796183f libpod: setupNetNS() correctly mount netns f6bda786ed vendor latest c/common 7dccf8faee docs: remove usage of deprecated `--storage` 597773464c Update module github.com/docker/docker to v27.3.0+incompatible a08ae98161 CI: Quadlet rootfs test: use container image as rootfs 9c51eead06 CI: system test registry: use --net=host e3af5a38d3 CI: rm system test: bump grace period 3396dabdf3 CI: system tests: minor documentation on parallel 31cdf1197b fix typo in error message Fixes: containers/podman#24001 1d5c8ac18e CI: system tests: always create pause image 5e5c68ffbe CI: quadlet system test: be more forgiving 6dcda2196a vendor latest c/common 6fe832d5d6 CI: make 200-pod parallel-safe d7335855d7 allow exposed sctp ports 755a06aa44 test/e2e: add netns leak check 2d469e517d test/system: netns leak check for rootless as well 2505381551 test/system: Improve TODO comments on IPv6 pasta custom DNS forward test 4919440428 test/system: Clarify "Local forwarder" pasta tests 63e286ac55 test/system: Simplify testing for nameserver connectivity 6c79fe292b test/system: Consolidate "External resolver" pasta tests 85045406b5 test/system: Move test for default forwarder into its own case 5468718f22 CI: make 090-events parallel-safe 8402b6535f Misc minor test fixes 7fcf94d7b5 Add network namespace leak check b3da5be2b1 Add workaround for buildah parallel bug 5fc3de5583 registry: lock start attempts bf6131780a Update system test template and README 6502e30cfd bats log: differentiate parallel tests from sequential 6b621d9571 ci: bump system tests to fastvm bcffa9ce30 clean_setup: create pause image 812c7e9436 CI: make 012-manifest parallel-safe 00c13afcb9 podman-manifest-remove: update docs and help output aa108924ea test/system: remove wait workaround fbed3a01d2 wait: fix handling of multiple conditions with exited e04668c8ca Match output of Compat Top API to Docker d571ca6536 system test parallelization: enable two-pass approach 8d119f0c2d New VMs: test crun 1.17 a5e9b4d126 libpod: hides env secrets from container inspect 111a4bbe71 CI: e2e: workaround for events out-of-sequence flake 49a07fce49 update golangci-lint to 1.61.0 432325236b libpod: convert owner IDs only with :idmap f4d0e124d6 Podman CLI --add-host with multiple host for a single IP a664708f35 Quadlet - Split getUnitDirs to small functions 1a1001d824 fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.5 c436a9b658 chore(deps): update dependency setuptools to ~=75.1.0 fdb2edf46a Fxi typo in cache-ttl.md b2e6d53265 Get WSL disk as an OCI artifact c6616004f1 CI: make 260-sdnotify parallel-safe 42a1f5e87c quadlet: do not log ENOENT errors 91dbd6dc33 pkg/specgen: allow pasta when running inside userns 9a8e17816a troubleshooting: add tip about the user containers 95833a6207 chore(deps): update dependency setuptools to v75 1857d7e50f Convert windows paths in volume arg of the build command d124d90e18 Improve error when starting multiple machines fe08440ec3 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.2 01a1761fd9 Minor typo noticed when reading podman man page e041f2a7b7 Remove `RemoveFilesAndConnections` 54b71b637c Add `GetAllMachinesAndRootfulness` ac4a31cc4a rewrite typo osascript 089d2513d8 typo 31a1fd8f33 fix(deps): update module github.com/docker/docker to v27.2.1+incompatible cb03ca31b2 Add radio buttons to select WSL or Hyper-V in windows setup.exe 297ec1c083 [skip-ci] Packit: split out ELN jobs and reuse fedora downstream targets 5f6a22dc1b [skip-ci] Packit: Enable sidetags for bodhi updates b9fe4097dd vendor: update c/common e61682f50e CI: make 710-kube parallel-safe 0ff89a00af CI: mark 320-system-df *NOT* parallel safe db12343e27 Add kube play support for image volume source 837755e643 refactor: add sshClient function a83fef34a9 fix(deps): update module golang.org/x/tools to v0.25.0 22ec8ea06d CI: make 505-pasta parallel safe 18932e0339 CI: make 020-tag parallel-safe a165289574 CI: make 410-selinux parallel-safe 359092e463 Bump VMs. ShellCheck is now built-in 005d9b543b troubleshooting: add tip about auto, keep-id, nomap a1e6603133 libpod: make use of new pasta option from c/common 2f858675b3 vendor latest c/common 0abbcfa50a podman images: sort repository with tags eb396705c6 Remove containers/common/pkg/config from pkg/util 2840b21862 fix(deps): update module golang.org/x/net to v0.29.0 38555305c2 fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.23 1c23bd5acf fix(deps): update module golang.org/x/crypto to v0.27.0 133bbd3769 Fix CI c203c48c70 Detect and fix typos using codespell 12b3d01438 Fix typo: replace buildin with built-in 4700b5a58a Add codespell config, pre-commit definition, and move options from Makefile 901f621daa prune: support clearing build cache using CleanCacheMount 1543c5f0ad test/e2e: fix network prune flake bdf96e7df2 Add support for Job to kube generate & play c317da8deb Add podman-rootless.7 man page 15bde1abdb Add DNS, DNSOption and DNSSearch to quadlet pod 0f77363ff5 podman.1.md: improve policy.json section 579e8b2d7a e2e: flake fix: SIGPIPE in hook test 01296038dc libpod: fix rootless cgroup path with --cgroup-parent 5a15e70345 vendor: update c/storage 7b019e9905 CI: make 055-rm parallel-safe e5624510ce CI: make 130-kill parallel-safe f38953c156 CI: make 125-import parallel-safe 0e1ac9cee1 CI: make 110-history parallel-safe bca7c20530 CI: system tests: parallelize low-hanging fruit 8eb7eff899 Add disclaimer to `podman machine info` manpage. d803bb3407 man pages: refactor two more options beffd05d5a update github.com/opencontainers/runc to v1.2.0-rc.3 77702d73ef update go.etcd.io/bbolt to v1.3.11 a269f098cd update github.com/onsi/{ginkgo,gomega} e9a4534cb1 Update module github.com/shirou/gopsutil to v4 54b8c4fb64 packit: update fedora and epel targets f93fcf7dee bump go to 1.22 d03e8ffc56 cirrus: test only on f40/rawhide 2ca4efb9f4 cirrus: remove CI_DESIRED_NETWORK reference e598bcafb8 cirrus: prebuild use f40 for extra tests c68c2974a3 chore(deps): update dependency setuptools to ~=74.1.0 60af13ca0f libpod: fix HostConfig.Devices output from 'podman inspect' on FreeBSD 70358ecf18 fix(deps): update golang.org/x/exp digest to 9b4947d 1732338630 Implement publishing API UNIX socket on Windows platforms c6fe5e5395 Vendor c/common:8483ef6022b4 71fd15726d quadlet: support container network reusing f40eb5f06a docs: update read the docs changes abea5ad4ac CI: parallel-safe network system test 2b14db2af3 Quadlet - Support multiple image tags in .build files 3bdddea8fa fix(deps): update module github.com/vbauerster/mpb/v8 to v8.8.3 6a0ab6f7bc cirrus: remove _bail_if_test_can_be_skipped d5c5261e6f cirrus: move renovate check into validate ac18b1a0af cirrus: remove 3rd party connectivity check 34a7d8dd10 cirrus: remove cross jobs for aarch64 and x86_64 186f50ad7d cirrus: do not upload alt arch cross artifacts 94431c29b4 cirrus: remove ginkgo-e2e.json artifact 78be80f2cd cirrus: fix default timeouts 775d27fcd8 github: remove fcos-podman-next-build-prepush 63545126c2 Clarify podman machine volume mounting behavior under WSL 41f945fc24 machine: Add -all-providers flag to machine list 5389eee737 Create a podman-troubleshooting man page 33b96e78c8 chore(deps): update dependency setuptools to v74 565ad236a5 fix(deps): update module github.com/docker/docker to v27.2.0+incompatible 6e027c0e37 Fix an improperly ignored error in SQLite 678323efd8 CI: flake workaround: ignore socat waitpid warnings 00027bc251 fix(deps): update module github.com/rootless-containers/rootlesskit/v2 to v2.3.1 4f4ebdce5b Stop skipping machine volume test on Hyper-V a89fef6e2a cleanup: add new --stopped-only option bf74797c69 fix races in the HTTP attach API dbd2adc798 cirrus: skip windows/macos machine task on RHEL branches a508d7631f Update module github.com/containers/gvisor-tap-vsock to v0.7.5 dc724e5e80 run: fix detach passthrough and --rmi 8e78028e2c podman run: ignore image rm error 7c5d8bec0d Add support for AddHost in quadlet .pod and .container 07c9fe82a8 [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.3 df3c9efb03 update github.com/vishvananda/netlink to v1.3.0 5f57f4ea22 build: Update gvisor-tap-vsock to 0.7.5 3e58e04d3e Quote systemd DefaultEnvironment Proxy values, as documented in systemd.conf man page: 16007e4370 fix typo in podman-network-create.1.md 6c68f4ad97 Use HTTP path prefix of TCP connections to match Docker context behavior cae427e2f8 Makefile: remotesystem: use real podman server, no --url 215af114ab Update module github.com/openshift/imagebuilder to v1.2.15 11547942b1 CI: parallel-safe userns test 7164177c68 Update module github.com/onsi/ginkgo/v2 to v2.20.1 d55b12f70b Add support for IP in quadlet .pod files b2fb944e19 Specify format to use for referencing fixed bugs. 68efa7e3a1 CI: parallel-safe run system test 4dc5708f14 Revert "test/e2e: work around for pasta issue" 17193af962 CI: On vX.Y-rhel branches, ensure that some downstream Jira issue is linked 4fbfa7de6e quadlet: support user mapping in pod unit 5ccaa699f1 Update Release Process 154d832696 Test new VM build 29071ac498 command is not optional to podman exec 9c3921ca58 CI: parallel-safe namespaces system test 13b31845c8 [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.2 1ccccde183 quadlet: add key CgroupsMode 458ba5a8af Fix `podman stop` and `podman run --rmi` e5c91ff03a quadlet: set infra name to %s-infra 990fc335fa chore(deps): update dependency setuptools to v73 76e1bbb57d [skip-ci] Packit: update targets for propose-downstream fc30620cdb Do not segfault on hard stop d5cd388729 Fix description of :Z to talk about pods 145c7511aa CI: disable ginkgo flake retries b755a1c60b vendor: update go-criu to latest 84a85319e1 golangci-lint: make darwin linting happy 666d839157 golangci-lint: make windows linting happy cd2a4c7cac test/e2e: remove kernel version check 6c0d94328f golangci-lint: remove most skip dirs 942f789a88 set !remote build tags where needed c17daf2b09 update golangci-lint to 1.60.1 57016f5cc3 test/e2e: rm systemd start test e2e2763b0e fix(deps): update module github.com/vbauerster/mpb/v8 to v8.8.1 80639df27a podman wait: allow waiting for removal of containers ddece758a4 libpod: remove UpdateContainerStatus() 7a7aec355b podman mount: fix storage/libpod ctr race 480d43748a CI: quadlet tests: make parallel-safe 420bd16a21 CI: system tests: make random_free_port() parallel-safe 478b262f9b remove trailing comma in example 1a1d2646df CI: format test: make parallel-safe 004c040ca2 Fix podman-docker.sh under -eu shells (fixes #23628) 6fb10421fb docs: update podman-wait man page 94fd5fe6f7 libpod: remove duplicated HasVolume() check a65aecd260 podman volume rm --force: fix ABBA deadlock b6beed9f76 test/system: fix network cleanup restart test 30eb6b6aae libpod: do not stop pod on init ctr exit 8a943311db libpod: simplify WaitForExit() 5b6de98ee8 CI: remove build-time quay check 6b1c7de3d5 Fix known_hosts file clogging and remote host id c4cdb6defa Update docker.io/library/golang Docker tag to v1.23 0d1c19248a Update dependency setuptools to ~=72.2.0 9945736a3e Update module github.com/docker/docker to v27.1.2+incompatible 0d7e14fb83 healthcheck system check: reduce raciness 30ee9c0114 CI: healthcheck system test: make parallel-safe 8f191618e4 Validate renovate config in every PR 0177f74dc6 pkg/machine: Read stderr from ssh-keygen correctly e30b0978b8 Fix renovate config syntax error 36f9a04499 CI: 080-pause.bats: make parallel-safe 6656a18c3f CI: 050-stop.bats: make parallel-safe 25d66d97d2 Additional potential race condition on os.Readdir 5ec413fac7 pkg/bindings/containers: handle ignore for stop 6fce734f42 remote: fix invalid --cidfile + --ignore e111b6c0be Update/simplify renovate config header comment 6c0b8b64d4 Migrate renovate config to latest schema d33abcdf10 Fix race condition when listing /dev d26341332c docs/podman-systemd: Try to clarify `Exec=` more ecf88f17b6 libpod: reset state error on init 20f3e8909e test/system: pasta_test_do add explicit port check 20a32d33cd test/e2e: work around new push warning be41ee4131 vendor: update c/common to latest 4aaa5cb6f0 stopIfOnlyInfraRemains: log all errors 78cb1e28cb libpod: do not save expected stop errors in ctr state f276d53532 libpod: fix broken saveContainerError() b0948a5cd0 Quadlet: fix filters failure when the search paths are symlinks 2043d1647c readme: replace GPG with PGP a48cd241ad Drop APIv2 CNI configuration dcdb5408de De-duplicate docker-py testing ec59508d4c chore(podmansnoop): explain why crun comm is 3 f2a03e5753 libpod: cleanupNetwork() return error 61a889de4c fix(deps): update module golang.org/x/sys to v0.24.0 7936809f75 Reduce python APIv2 test net dependency bf091abdc5 Fix not testing registry.conf updates be2212804b test/e2e: improve command timeout handling 52ff2a41fa Update module github.com/onsi/ginkgo/v2 to v2.20.0 09639a07fb Update module github.com/moby/sys/user to v0.3.0 f041d059b5 Add passwd validate and generate steps 4620e91f86 podman container cleanup: ignore common errors 795851edd3 Quadlet - Allow the user to override the default service name 1a2e1eb46e CI: e2e: serialize root containerPort tests a06a7d7ba8 Should not force conversion of manifest type to DockerV2ListMediaType 2038d88680 fix(deps): update module golang.org/x/tools to v0.24.0 6714b6302d fix(deps): update github.com/containers/common digest to 05b2e1f f99c7ead92 CI: mount system test: parallelize 53ae4ea927 Update module golang.org/x/net to v0.28.0 81003f2d08 Ignore ERROR_SHARING_VIOLATION error on windows f9b67cea57 CI: manifest system tests: make parallel-safe eb7ce80cf9 Create volume path before state initialization 84a5119d17 vendor: update c/storage 029f9b38cc CI: fix broken libkrun test 1912dd4bf6 test/e2e: work around for pasta issue 71bcd25ab6 test/e2e: fix missing exit code checks 082650b68f Test new CI images abd586cb1c Remove another race condition when mounting containers or images 91b3fdbba3 fix(deps): update github.com/containers/common digest to c0cc6b7 01d739a65e Change Windows installer MajorUpgrade Schedule d628e14355 Ignore missing containers when calling GetExternalContainerLists 37226e2e93 Remove runc edit to lock to specific version 67ce828152 fix(deps): update module golang.org/x/sys to v0.23.0 87dad1caef CI: podman-machine: do not use cache registry bfb42b3b15 CI: completion system test: use safename e429160e5b Temporarly disable failing Windows Installer CI test 3ae1568933 libpod: fix volume copyup with idmap 61def05cd9 libpod: avoid hang on errors 457c64564a Temp. disable PM basic Volume ops test 029a9aa34e Add libkrun Mac task 014b7af4f3 Never skip checkout step in release workflow 83e90a2f5b System tests: leak_test: readable output f446f59d71 fix(deps): update github.com/docker/go-plugins-helpers digest to 45e2431 75a316aae4 vendor: bump c/common fcf7cd7d5c Version: bump to v5.3.0-dev 7610cedc80 libpod: inhibit SIGTERM during cleanup() 2550a7290a Tweak versions in register_images.go 4c3531a1a4 fix network cleanup flake in play kube 84f57e4ba0 WIP: Fixes for vendoring Buildah b8a9b184af Add --compat-volumes option to build and farm build 286fbf98d1 Bump to Buildah v1.37.0 7d9c1a2c53 Quadlet test - Split between success, warning and error cases 77081df8cd libpod: bind ports before network setup cfac059d14 Disable compose-warning-logs if PODMAN_COMPOSE_WARNING_LOGS=false 1c46686a41 Use new syntax for selinux options in quadlet 616005e0ad fix(deps): update module github.com/onsi/gomega to v1.34.1 396961069c CI: kube test: fix broken external-storage test 8b5b9d0bb5 Update dependency setuptools to v72 bf3f207a49 Convert additional build context paths on Windows 1b91df012d pkg/api: do not leak config pointers into specgen f3a86266e6 Quadlet - Allow the user to set the service name for .pod files 1c4fbe7965 Quadlet tests - allow overriding the expected service name 41cc3ae6f9 fix(deps): update module github.com/moby/sys/user to v0.2.0 884c43d416 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.5 7bb3b83c17 CI: enable root user namespaces b59918e536 libpod: force rootfs for OCI path with idmap 1d23f3ff11 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.1 a18bd3e9c0 Add test steps for automount with multi images 25fffdb74f CI: cp tests: use safename 1ecb68d92b [skip-ci] RPM: podman-iptables.conf only on Fedora fd0ff9060f CI: 700-play: fix a leaked non-safename d9c2806461 test: check that kube generate/play restores the userns fef125c7b1 test: disable artifacts cache with composefs 8403f4c33f test: fix podman pull tests 90411b2290 vendor: bump c/storage eadfbbc809 Update module github.com/cyphar/filepath-securejoin to v0.3.1 ce7dded38b Add /run/containers/systemd, ${XDG_RUNTIME_DIR}/containers/systemd quadlet dirs 599c0d167c build: Update gvisor-tap-vsock to 0.7.4 2e20681f05 test/system: fix borken pasta interface name checks da3edce4e6 test/system: fix bridge host.containers.internal test f70976a7e2 api: honor the userns for the infra container fa2590a97a play: handle 'private' as 'auto' 61f0230c31 kube: record infra user namespace bf8c3065f2 infra: user ns annotation higher precedence bbe0e4a5db specgenutil: record the pod userns in the annotations e97bb79b7a kube: invert branches 64f2d85e4f CI: system log test: use safe names 84eb640160 Update encryption tests to avoid a warning if zstd:chunked is the default 059c298389 Fix "podman pull and decrypt"/"from local registry" 6c55ef505d Use unique image names for the encrypted test images b61667470c CI: system tests: instrument to allow failure analysis 96771eec53 Fix outdated comment for the build step win-gvproxy 71d6e2fbaf Add utility to convert VMFile to URL for UNIX sockets 7768cf235e Run codespell on source 83160b1d02 fix(deps): update module github.com/docker/docker to v27.1.0+incompatible a493a584c0 chore(deps): update dependency setuptools to ~=71.1.0 a05a9cae07 logformatter: tweaks to pass html tidy 174190132c More information for podman --remote build and running out of space. 2e4b640ad2 Fix windows installer deleting machine provider config file 7202e6172d Use uploaded .zip for Windows action 5e9ab00063 pr-should-include-tests: no more CI:DOCS override Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-12-10 03:47:54 +00:00
Bruce Ashfield	7bdfb7806e	runc-docker: update to v1.2.0 ... Bumping runc to version v1.2.0-69-gb7da1673, which comprises the following commits: b7da1673 build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2 119111a0 libct/cg: add test for remove a non-existent dir in a ro mount point 068d7da7 Revert "Temporary set vagrant to 2.4.1-1" ac435895 memfd-bind: elaborate kernel requirements for overlayfs protection ba3d026e libct/cg: RemovePath: improve comments 12e06a7c libct/cg: RemovePath: simplify logic db59489b runc delete: fix for rootless cgroup + ro cgroupfs ca4a7a86 build(deps): bump golang.org/x/net from 0.30.0 to 0.31.0 43af111e MAINTAINERS: move dqminh and hqhq to EMERITUS ec5e7eb7 build(deps): bump golang.org/x/sys from 0.26.0 to 0.27.0 9cb59b46 ci: rm "skip on CentOS 7" kludges 5000f169 Temporary set vagrant to 2.4.1-1 b9dfb22d readme: drop unused memfd-bind reference aa505bfa memfd-bind: mention that overlayfs obviates the need for it 9bc42d61 dmz: overlay: set xino=off to disable dmesg spam 9ce7392b Vagrantfile.fedora: bump Fedora to 41 609e9a51 Vagrantfile.fedora: stop using dnf shell 80c46d31 build(deps): bump golang.org/x/net from 0.24.0 to 0.30.0 5586d7ca libct: rm obsoleted comment f9fd70b7 CHANGELOG: add (forward-port) v1.1.15 changes 8cc73754 libct: fix a comment ee1bced1 script/check-config.sh: add OVERLAY_FS check c8f5d033 docs: remove prompt symbols from shell snippets 871057d8 drop runc-dmz solution according to overlay solution 34a92855 test join other container userns with selinux enabled c78f3f2e libct/nsenter: become root after joining userns 1e674098 libct/int: add exec benchmark cb201487 libct/int: use testing.TB for utils 4df7b1b1 build(deps): bump golang.org/x/sys from 0.22.0 to 0.26.0 cbb9b309 ci: use Go 1.23 732806e2 runc update: fix updating swap for cgroup v2 cb9f3d6d libct/cg: improve ConvertMemorySwapToCgroupV2Value 69b3be76 build(deps): bump github.com/vishvananda/netlink from 1.1.0 to 1.3.0 eb2ff52a libct: rm x/sys/execabs usage f20f273a build(deps): bump github.com/opencontainers/selinux 139789f1 build(deps): bump google.golang.org/protobuf from 1.33.0 to 1.35.1 93db63ab build(deps): bump github.com/urfave/cli from 1.22.14 to 1.22.16 af024b6c build(deps): bump github.com/moby/sys/mountinfo from 0.7.1 to 0.7.2 42f96305 VERSION: back to development 0b9fa21b VERSION: release v1.2.0 568231cc Revert "increase memory.max in cgroups.bats" e6699266 fix an error caused by fd reuse race when starting runc init 515f09f7 dmz: use overlayfs to write-protect /proc/self/exe if possible 8cfbccb6 tests: integration: add helper to check if we're in a userns 54ef07d8 tests/int: skip "update memory vs CheckBeforeUpdate" on EL9 ff775363 tests/int: rm centos-7 exclusion 76a821fa tests/int: update info about EL9 kernel b5bdf592 libct: rm initWaiter 9fa324c4 dmz: cloned binary: set +x permissions when creating regular tmpfile 324fcea4 Terminate execution for criu that does not meet version requirements eff6f049 libct/cap: no need to load capabilities 9b60a93c libcontainer/userns: migrate to github.com/moby/sys/userns 1623cde1 go: update github.com/cyphar/filepath-securejoin to v0.3.4 4fdd5616 memfd-bind: more specific doc URL 9e554587 memfd-bind: fixup systemd unit file and README 13a6f560 runc run: fix mount leak b096459a vendor: update github.com/cyphar/filepath-securejoin to v0.3.3 f55957de build(deps): bump bats-core/bats-action from 2.1.1 to 3.0.0 bb2bd38d change go minimum version in README faffe1b9 replace strings.SplitN with strings.Cut 1be06760 libcontainer/cgroups/fs: remove todo since strings.Fields performs well 7a449109 libct/README: simplify example, rm inheritable caps 0de19533 runc spec, libct/int: do not add ambient capabilities 3e3f9603 runc exec --cap: do not add capabilities to ambient 5b161e04 update bats-action to 2.1.1 35f999dd remove installation of unused bats support libs 10c951e3 add ErrCgroupNotExist 319e133c go.mod: Use toolchain 1.22.4 8671a7db ci: update to setup bats action from bats-core 30f8f51e runc create/run: warn on rootless + shared pidns + no cgroup 21c61165 tests/int: log when teardown starts b1449fd5 libct: use Namespaces.IsPrivate more d8844e29 tests: integration: add setgid mkdirall test 066b109e vendor: update to github.com/cyphar/filepath-securejoin@v0.3.2 646efe70 utils: mkdirall: mask silently ignored mode bits to match os.MkdirAll 457e1ffa tests: add regression test for CVE-2019-19921 / CVE-2023-27561 216175a9 Upgrade Cilium's eBPF library version to 0.16 a31efe70 libct/seccomp/patchbpf: use binary.NativeEndian 429e06a5 libct: Signal: honor RootlessCgroups dd827f7b utils: switch to securejoin.MkdirAllHandle 1d308c7d vendor: update to github.com/cyphar/filepath-securejoin@v0.3.1 5ab5ef3d deps: update to golang.org/x/sys@v0.22 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-12-10 03:47:54 +00:00
Bruce Ashfield	c253e8bf85	runc-opencontainers: update to v1.2.0 ... Bumping runc to version v1.2.0-69-gb7da1673, which comprises the following commits: b7da1673 build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2 119111a0 libct/cg: add test for remove a non-existent dir in a ro mount point 068d7da7 Revert "Temporary set vagrant to 2.4.1-1" ac435895 memfd-bind: elaborate kernel requirements for overlayfs protection ba3d026e libct/cg: RemovePath: improve comments 12e06a7c libct/cg: RemovePath: simplify logic db59489b runc delete: fix for rootless cgroup + ro cgroupfs ca4a7a86 build(deps): bump golang.org/x/net from 0.30.0 to 0.31.0 43af111e MAINTAINERS: move dqminh and hqhq to EMERITUS ec5e7eb7 build(deps): bump golang.org/x/sys from 0.26.0 to 0.27.0 9cb59b46 ci: rm "skip on CentOS 7" kludges 5000f169 Temporary set vagrant to 2.4.1-1 b9dfb22d readme: drop unused memfd-bind reference aa505bfa memfd-bind: mention that overlayfs obviates the need for it 9bc42d61 dmz: overlay: set xino=off to disable dmesg spam 9ce7392b Vagrantfile.fedora: bump Fedora to 41 609e9a51 Vagrantfile.fedora: stop using dnf shell 80c46d31 build(deps): bump golang.org/x/net from 0.24.0 to 0.30.0 5586d7ca libct: rm obsoleted comment f9fd70b7 CHANGELOG: add (forward-port) v1.1.15 changes 8cc73754 libct: fix a comment ee1bced1 script/check-config.sh: add OVERLAY_FS check c8f5d033 docs: remove prompt symbols from shell snippets 871057d8 drop runc-dmz solution according to overlay solution 34a92855 test join other container userns with selinux enabled c78f3f2e libct/nsenter: become root after joining userns 1e674098 libct/int: add exec benchmark cb201487 libct/int: use testing.TB for utils 4df7b1b1 build(deps): bump golang.org/x/sys from 0.22.0 to 0.26.0 cbb9b309 ci: use Go 1.23 732806e2 runc update: fix updating swap for cgroup v2 cb9f3d6d libct/cg: improve ConvertMemorySwapToCgroupV2Value 69b3be76 build(deps): bump github.com/vishvananda/netlink from 1.1.0 to 1.3.0 eb2ff52a libct: rm x/sys/execabs usage f20f273a build(deps): bump github.com/opencontainers/selinux 139789f1 build(deps): bump google.golang.org/protobuf from 1.33.0 to 1.35.1 93db63ab build(deps): bump github.com/urfave/cli from 1.22.14 to 1.22.16 af024b6c build(deps): bump github.com/moby/sys/mountinfo from 0.7.1 to 0.7.2 42f96305 VERSION: back to development 0b9fa21b VERSION: release v1.2.0 568231cc Revert "increase memory.max in cgroups.bats" e6699266 fix an error caused by fd reuse race when starting runc init 515f09f7 dmz: use overlayfs to write-protect /proc/self/exe if possible 8cfbccb6 tests: integration: add helper to check if we're in a userns 54ef07d8 tests/int: skip "update memory vs CheckBeforeUpdate" on EL9 ff775363 tests/int: rm centos-7 exclusion 76a821fa tests/int: update info about EL9 kernel b5bdf592 libct: rm initWaiter 9fa324c4 dmz: cloned binary: set +x permissions when creating regular tmpfile 324fcea4 Terminate execution for criu that does not meet version requirements eff6f049 libct/cap: no need to load capabilities 9b60a93c libcontainer/userns: migrate to github.com/moby/sys/userns 1623cde1 go: update github.com/cyphar/filepath-securejoin to v0.3.4 4fdd5616 memfd-bind: more specific doc URL 9e554587 memfd-bind: fixup systemd unit file and README 13a6f560 runc run: fix mount leak b096459a vendor: update github.com/cyphar/filepath-securejoin to v0.3.3 f55957de build(deps): bump bats-core/bats-action from 2.1.1 to 3.0.0 bb2bd38d change go minimum version in README faffe1b9 replace strings.SplitN with strings.Cut 1be06760 libcontainer/cgroups/fs: remove todo since strings.Fields performs well 7a449109 libct/README: simplify example, rm inheritable caps 0de19533 runc spec, libct/int: do not add ambient capabilities 3e3f9603 runc exec --cap: do not add capabilities to ambient 5b161e04 update bats-action to 2.1.1 35f999dd remove installation of unused bats support libs 10c951e3 add ErrCgroupNotExist 319e133c go.mod: Use toolchain 1.22.4 8671a7db ci: update to setup bats action from bats-core 30f8f51e runc create/run: warn on rootless + shared pidns + no cgroup 21c61165 tests/int: log when teardown starts b1449fd5 libct: use Namespaces.IsPrivate more d8844e29 tests: integration: add setgid mkdirall test 066b109e vendor: update to github.com/cyphar/filepath-securejoin@v0.3.2 646efe70 utils: mkdirall: mask silently ignored mode bits to match os.MkdirAll 457e1ffa tests: add regression test for CVE-2019-19921 / CVE-2023-27561 216175a9 Upgrade Cilium's eBPF library version to 0.16 a31efe70 libct/seccomp/patchbpf: use binary.NativeEndian 429e06a5 libct: Signal: honor RootlessCgroups dd827f7b utils: switch to securejoin.MkdirAllHandle 1d308c7d vendor: update to github.com/cyphar/filepath-securejoin@v0.3.1 5ab5ef3d deps: update to golang.org/x/sys@v0.22 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-12-10 03:47:54 +00:00
Bruce Ashfield	99b730a7cc	containerd: update to v2.0.0 ... Bumping containerd to version v2.0.0-25-g961cac9aa, which comprises the following commits: 34a45cab2 Publish attestation as release artifact 7dec6b460 move rocky 9.4 to almalinux/9 in CI cf07f28ee *: should align pipe's owner with init process 986088866 fix: set the credentials even if not provided 9081e979f update runc binary to 1.2.2 6399c936f Revert "Disable vagrant strict dependency checking" a7f2b562f fsverity_linux.go: Fix fsverity.IsEnabled() for big endian systems 389e781ea build(deps): bump github.com/containerd/typeurl/v2 from 2.2.2 to 2.2.3 30b929ece fsverity_test.go: fix major/minor device number resolving 10996a334 fsverity_test.go: fix nil pointer dereference, fix test fail 5b879f30c update to go1.23.3 / go1.22.9 e99c2b55c Avoid arch info in the sed/replace when building cri-cni-containerd.tar.gz 458215f6c ci: enable marking 2.0 releases as latest 03ba4ce1f Update release notes for v2.0.0 f2da3fd68 Update release docs for v2.0.0 ff09b428e Update typeurl to v2.2.2 a43e7c1e2 build(deps): bump softprops/action-gh-release from 2.0.8 to 2.0.9 edf367cab build(deps): bump github.com/containerd/nri from 0.7.0 to 0.8.0 21f636751 build(deps): bump github.com/containerd/typeurl/v2 from 2.2.0 to 2.2.1 1edc2147f build(deps): bump google-github-actions/auth from 2.1.6 to 2.1.7 2d8fec45a go.mod: k8s.io/* v0.31.2 bef201fe6 build(deps): bump google-github-actions/upload-cloud-storage bd10a6096 Update platforms to v1.0.0-rc.0 ae73e3013 Disable vagrant strict dependency checking 33677d56d Update containerd API to v1.8.0 release d38911808 Prepare release notes for api/v1.8.0 93f9db2ad Update errdefs tag to v1.0.0 bddeba825 Make TestContainerPids more resilient edb980ac0 update runc binary to 1.2.1 bf47b6ebc docs/containerd-2.0.md: add more highlights f5ce859ee docs/containerd-2.0.md: fix the deprecation release of AUFS bedd85a36 RELEASES.md: k8s: fix CRI v1alpha2 removal release, remove old releases 4594f5cac services/snapshots: include name of snapshotter in debug logs 77d783e2c Update hcsshim to v0.12.9 79089232b build(deps): bump actions/checkout from 4.2.1 to 4.2.2 2789ba30e build(deps): bump actions/cache from 4.1.1 to 4.1.2 6b655d093 build(deps): bump github/codeql-action from 3.26.13 to 3.27.0 9ed6e05b2 config: v1Migrate: support DisabledPlugins and RequiredPlugins 4b2bca00b config: migrate version before merging 700b90618 resolver/docker: fix confusing "trying next host" log 3cc2343de local: avoid writing to content root on readonly store Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-12-10 03:47:54 +00:00
Zhang Peng	88949aa04f	cri-o: enable ptest ... The ptest build for cri-o was previously disabled due to issues introduced with Go 1.11, which borken the build process. With the current Go version, these issues no longer occur, and the ptest build is now functional. This commit enables ptest support and resolves the "TMPDIR [buildpaths]" issue encountered during the ptest build process. A total of 382 test cases were executed, with the following results: PASS: 317 FAIL: 33 SKIP: 32 Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-12-10 03:41:43 +00:00
Bruce Ashfield	87b0a869c6	containerd: update to v2.0.0-rc.6 ... Bumping containerd to version v2.0.0-rc.6-23-g1e6fdb531, which comprises the following commits: 0208cb58c go.mod: github.com/containerd/imgcrypt v2.0.0-rc-1 588b7a100 testutil: avoid conflict with continuity/testutil 181491032 build(deps): bump github.com/containerd/continuity from 0.4.3 to 0.4.4 497dc7bf3 build(deps): bump github.com/checkpoint-restore/checkpointctl fddeb6f3c pkg/protobuf: fix typo in godoc 96a1e498f Update containerd plugin to v1.0.0 3b45a44cc Update to ttrpc v1.2.6 tag 3cc2343de local: avoid writing to content root on readonly store 778defa31 Add back ZFS snapshotter d3ff3e2ff CI: move crun from Ubuntu to Fedora 5c65a3d7b Update version to v2.0.0-rc.6 9aa637b22 Update api vendor to latest 4b9d6c014 deps: bump github.com/containerd/nri 2535b187a Scope writer locks to each writer. bc819bc97 docs: add command for finding schema 1 images c86b2772c docs: update min version for deprecation warnings a1ce18816 CI: bump up crun to 1.17 021895985 Update hcsshim version to v0.12.8 373311a84 build(deps): bump github.com/opencontainers/selinux cf9cf8b5a build(deps): bump github.com/prometheus/client_golang 03860c208 build(deps): bump azure/CLI from 1.0.9 to 2.1.0 cf7218fb0 build(deps): bump actions/checkout from 4.1.1 to 4.2.1 78ec6ef02 build(deps): bump actions/upload-artifact from 4.1.0 to 4.4.3 bfe8fa330 build(deps): bump github/codeql-action from 3.24.0 to 3.26.13 38ba7f2f7 dedup BuildLabels a5cd0d0a5 dedup GetPassthroughAnnotations 269997ac5 dedup GetRepoDigestAndTag f61dbc2d0 dedup ParseImageReferences 530db2e8d Introduce two additional unit tests for two runtimes and pod annotations. a21e379b6 Allow sections of Plugins to be merged, and not overwritten as entire sections. 2f24aa00a Update errdefs to 0.3.0 92d327af1 Update tracing docs for containerd 2.0 943b196ad Update NRI documentation for containerd 2.0 a6ceb4be0 containerd 2.0 guide: add image verifier plugins 347423a11 Request 'allow' setgroups when spawning new userns 249dd7474 Format link text in containerd 2.0 doc for readability 18e4ea9a6 Add After=dbus.service to containerd.service 3eea3536f docs/containerd-2.0.md: mention the removal of `cri-containerd-*.tar.gz` f8d50f6e8 README.md: put a link to docs/containerd-2.0.md b724b9f23 Add containerd 2.0 doc fc5086a74 cri: remove sandbox controller from client e4df672ab sandbox: add sandbox controller v2 4f2bc1580 build(deps): bump lycheeverse/lychee-action from 1.10.0 to 2.0.2 4bd3a71dd go.{mod,sum}: update NRI deps and re-vendor. bff82e196 [StepSecurity] ci: Harden GitHub Actions 5eb0be994 build(deps): bump github.com/urfave/cli/v2 from 2.27.4 to 2.27.5 0742238cd Handle teardown failure to avoid blocking cleanup c3d84a87f build(deps): bump the otel group with 8 updates bfe59daae build(deps): bump github.com/klauspost/compress from 1.17.10 to 1.17.11 b7c333ce2 Revert "update runc binary to 1.1.15" c6d089090 metrics: Use UnmarshalTo instead of UnmarshalAny 1db0064c6 CI: install OVMF for Vagrant 4d02217b5 CI: fix "Unable to find a source package for vagrant" error 38beeb359 Revert "use vagrant from jammy in noble" e2daa20ed Revert "use older version of OVMF package" ee921689f Switch from actuated.dev to GH Action runners for arm64 f89ed3c62 build(deps): bump golang.org/x/sys in the golang-x group 428df99db build(deps): bump google.golang.org/grpc from 1.67.0 to 1.67.1 72126a984 update sample go test commands 9c42dd959 build(deps): bump google.golang.org/protobuf from 1.34.2 to 1.35.1 f0f1bfca0 update runc binary to 1.1.15 46f5a0d93 update to go1.23.2,go1.22.8 7b1809851 Update runner images to macOS13 e479431e0 core/runtime: Fix a typo in error message b85909cd4 shim: Move pprof server to plugin b2681dfbd shim: Move ttrpc interceptors to plugins d7f83034c Fix the race condition during GC of snapshots when client retries 24fe444eb script/setup/install-runc: Add trap statement to clean up tmp files 6ffdabf72 Makefile: fix shim tags overwritten 095131abf add use systemd cgroup e2e 2123855ee Add build tag to omit grpc 64d29ebe5 snapshots: core: Remove dependency on api types 11ffba3dc shim: Do not depend on pkg/oci 0d4e606bb Update hcsshim to v0.12.7 78e39f7c5 build(deps): bump github.com/intel/goresctrl from 0.7.0 to 0.8.0 17d4a1357 Propagate trace contexts to shims bc4646067 Prepare release notes for v2.0.0-rc.5 ccb2a8d74 [cri] use 'UserSpecifiedImage' to set the image-name annotation b7b6b324b Add check for CNI plugins before tearing down pod network b5290726d Add timestamp to PodSandboxStatusResponse for kubernetes Evented PLEG 146a977f9 Move features section to a separate file 30f289335 core/mount: Only remove dirs if unmount succeeded f8d84ecf9 core/mount: Prevent accidental removal of rootfs files 004f3951d core/mount: Use MNT_DETACH for umount of tmp layers f7ca91fa3 build(deps): bump github.com/prometheus/client_golang c75178d93 build(deps): bump google.golang.org/grpc from 1.66.2 to 1.67.0 519cbda1d build(deps): bump github.com/klauspost/compress from 1.17.9 to 1.17.10 d72051036 Enable the selinux on cri test b03a3c5a2 build(deps): bump the k8s group with 4 updates 017efe05a build(deps): bump the otel group with 8 updates 7c89148a1 build(deps): bump google.golang.org/grpc from 1.65.0 to 1.66.2 6e2c4d00d build(deps): bump golang.org/x/mod ee0ed75d6 internal/cri: simplify netns setup with pinned userns fd3f3d5a1 pkg/sys: add GetUsernsForNamespace interface 490e45a08 pkg/sys: Add UnshareAfterEnterUserns function 83aaa89b6 update ctr run to support multiple uid/gid mappings 1dedcb784 build(deps): bump github.com/checkpoint-restore/go-criu/v7 7599d4df2 build(deps): bump github.com/prometheus/client_golang 9037069da update to go1.23.1, go1.22.7 6f43197c2 Remove cri SandboxInfo RuntimeHandler Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-11-15 19:50:00 +00:00
Bruce Ashfield	c7834dbd3c	podman: update to v5.2.3 ... Bumping libpod to version v5.2.3-4-g18e0d84c6c, which comprises the following commits: daae27b7b0 vendor: update c/common to v0.60.4 f6a31e013d Bump to v5.2.4-dev c5366a308e Bump to v5.2.3 b5ededbce5 Update release notes for v5.2.3 35d2fc8de6 [v5.2] Bump Buildah to v1.37.3 f0ddea707a pkg/specgen: allow pasta when running inside userns aaf15f81c4 libpod: convert owner IDs only with :idmap ec4ac087b4 docs: update read the docs changes c60961839a allow exposed sctp ports a995b6db5d libpod: setupNetNS() correctly mount netns d2c2539ee0 vendor: update c/common to v0.60.3 a17fd8c0aa [skip-ci] Packit: split out ELN jobs and reuse fedora downstream targets b9691547ca [skip-ci] Packit: Enable sidetags for bodhi updates 02d400e7b7 build: Update gvisor-tap-vsock to 0.7.5 5c856c81b0 CI: podman-machine: do not use cache registry 2f7011ab43 [CI:DOCS] Add v5.2.2 lib updates to RELEASE_NOTES.md 602f71991c Bump to v5.2.3-dev fcee48106a Bump to v5.2.2 37af07836a Update RELEASE_NOTES for v5.2.2 570fbc49aa [v5.2] Bump Buildah to v1.37.2, c/common v0.60.2, c/image v5.32.2 458d15cf5d [v5.2] golangci-lint: make darwin linting happy faf3edb5f4 [v5.2] golangci-lint: make windows linting happy b96312af0f [v5.2] test/e2e: remove kernel version check 462c1c6d8e [v5.2] golangci-lint: remove most skip dirs 35290c9b32 [v5.2] set !remote build tags where needed 3ca3c1d456 [v5.2] update golangci-lint to 1.60.1 d61b5d9409 Packit: update targets for propose-downstream dbdff97042 Create volume path before state initialization Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-11-15 19:50:00 +00:00
Bruce Ashfield	718da5ae40	containerd: make network configuration a conflist ... parsing errors occur if this fragment ends with .conf, so we renamed it to make sure it is processed as a conflist. Tested with containerd + nerdctl Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-11-15 19:50:00 +00:00
Bruce Ashfield	7afd21085b	packagegroups: add iproute, iptables and tini ... As it turns out CNI needs iptables to configure some plugins, and without it we get a silent fail. It will also be added to the recipe as a RRECOMMENDS, but we also put it in the packagegroup for more visibility. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-11-15 19:50:00 +00:00
Bruce Ashfield	5dfe66298a	crun: conditionally offer runc binary via symlink ... When integrating into some container stacks (such as containerd), the detailed configuration toml changes to change the container runtime from runc to crun is not always trivial. To avoid (for now) carrying configuration snippets as part of the recipes, we can symlink runc to crun as crun is fully compatible with runc. Note: this means you can't have runc and crun installed on the same image if the symlinking is done. Hence why this symlinking is conditional. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-11-15 19:50:00 +00:00
Bruce Ashfield	e2c3d012f9	containerd: add cni-networking configuration ... When running a containerd-only stack, we need a CNI configuration to be available. When running containerd as part of something like K3S, we expect the orchestration package will provide that configuration. This commit makes a containerd-cni package available that contains a starting point configuration. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-11-15 19:50:00 +00:00
Bruce Ashfield	e8f51968a2	netavark: disable nmap for aarch64 ptests ... nmap is not currently buidling for aarch64, so we disable it as a ptest rdepends when that is our target arch. Some tests may not work, but having a buildable stack is more important than all tests working. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-11-15 19:50:00 +00:00
Bruce Ashfield	5141d3f3f9	podman: add VIRTUAL-RUNTIME_container_dns to RDEPENDS ... Allow aardvark-dns to be specified as a rdepends for podman Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-11-15 19:50:00 +00:00
Bruce Ashfield	b5b94c2f51	docker-moby: tweak check-config script for 6.1+ kernels ... We are showing one warning on check-config that isn't valid, as the option has been changed in kernels 6.1+. We tweak the check-config script to make that conditional Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-11-15 19:50:00 +00:00
Chen Qi	e340d5b548	criu: fix buildpaths QA issue for arm ... The settings of CFLAGS:arm overrides the previous CFLAGS settings, causing buildpaths QA error for arm. Use CFLAGS:append:arm instead to fix this issue. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-11-12 23:13:45 +00:00
Lukasz Czechowski	b4fe1f4933	container-host-config: Remove centos registry ... Update registry list by removing 'registry.centos.org' entry. This registry is no longer available. Decommissioning of the registry was announced in the thread: https://lists.centos.org/hyperkitty/list/devel@lists.centos.org/thread/EHGCQUHLDQ6LI474ZAB7MPRZFJD77P3S/ Signed-off-by: Lukasz Czechowski <lukasz.czechowski@thaumatec.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-11-02 00:02:34 -04:00
Bruce Ashfield	a748f51ec4	runc: package configuration test script ... Like docker, there is runc / OCI check-config.sh script that is useful when determining if your kernel is properly configured. We can package it in a -check package, and install it to a similar location as the docker variant. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-10-03 01:28:52 +00:00
Bruce Ashfield	7ea990b79d	crun: update to 1.17 ... Bumping crun to version 1.17-5-g4b75c7c, which comprises the following commits: 4ea62f2 Disable criu support on riscv64 969fd2e Packit: Create missing path components in files_to_sync 000fa0d NEWS: tag 1.17 e3b5a26 Packit: Reuse Fedora targets wherever possible 556b808 Packit: separate out ELN build jobs a5320ae Add debug logs for container creation 228ad7c container: remove manual dup operation 13ea475 libocispec: sync from upstream 3dbf152 error: do not write error twice to stderr 5e35dfe libcrun: vanity, color debug messages 2c4db99 linux: ignore EPIPE for hooks 7fcede6 RPM/Packit: Fix wasm conditionals, cleanup rpm spec, update packit config 0f556b7 build: force install symlinks 23d5e49 Fix warning around unused result on chdir("/") 6bf9e7c Report executable not found errors after tty has been setup a295e70 Only log to stderr if `--log` is not provided fb593fc fix getpwuid_r error handling d29fdae tests: bump containerd version f36c216 tests: bump ubuntu version d065a5a Revert "Add `--log-stderr` option" dc31069 src/libcrun: fix handling of device paths with trailing slashes ab64a5c linux: fix recvfrom error handling a32d433 Fix `additional_gids_size` on `process_user_dup` b98e0dd Add `--log-stderr` option 544fe3f Allow passing an ID to journald log driver 6d92b28 Log only after crun context has been setup 29259e4 Add log options documentation f72483a Fix double-free in crun exec e4b4a21 src/libcrun: fix error handling in libcrun_kill_linux 83c1355 src/libcrun: improve error handling for the mnt namespace restoration 6fb1f08 src/libcrun: added custom error message for ESRCH case 9f06d3c Add autoPatchelfHook to static build 19b9893 Add `--log-level` option fd7f50a tests: fix wasmedge build 0380369 Remove libcrun_setup_terminal_ptmx 1edf6d0 src/libcrun: ensure DefaultDependencies respects CRI-O annotation 42b0b99 configure.ac: fix condition for wasm detection afa829c NEWS: tag 1.16.1 c6ecb3b linux: attempt to make rootfs private too 109f1e9 container: fix comment f23aaa1 linux: fix error message 72b4eea Inherit user from original process on exec cf1ec33 cgroup-utils: check for open error a958fcd cgroup-systemd: fix comment 7112df4 cgroup: remove redundant check 3bcd26a Use write_file_at_with_flags in write_file_with_flags 2dc1598 NEWS: tag 1.16 bfa0640 Add more O_PATH flags 0613ec5 cgroup-systemd: check for sd_bus_message_append error fcfac99 Fix sd-bus error handling for cpu quota and period props update. 6682432 linux: make_parent_mount_private uses fds 5943335 container: use relative path for rootfs if possible 27d7dd3 README: update podman demo f916acf Enable systemd in s390x builds e6eab76 wasmedge: access container environment variables for WasmEdge configuration Bumping libocispec to latest, which comprises the following commits: 4b8feed common: make sizeof the last argument for calloc 2ba727a sources: silence compiler warning 3ec73ba generate: generate clone operations for deep-copy d371222 ocispec: fix style 2236d50 github: test with the embedded yajl library bed19ad configure.ac: --enable-embedded-yajl skips check for yajl b633f89 Makefile.am: distribute the src/yajl symlink Bumping image-spec to version v1.1.0-35-gda92727, which comprises the following commits: 716f83b Implementations should support zstd 7327da4 Add deprecation notices to nondistributable layers 1d3daab Update linter and Go releases 16101e2 Remove misleading "must" in `ref.name` requirements 65dea7a Remove IRC link a977bd3 Remove validation warnings to stdout 4bbdd7f Switch jsonschema validation libraries 89fee07 MAINTAINERS: move jonboulle to EMERITUS Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-10-03 01:28:52 +00:00
Bruce Ashfield	2ef1ee0412	k3s: update to v1.31.1+k3s1 ... Bumping k3s to version v1.31.1+k3s1, which comprises the following commits: 452dbbc14c update kubernetes to v1.31.1-k3s3 (#10910) 9ae2c39004 Update Kubernetes to v1.31.1 (#10895) d926e69073 Fix hosts.toml header var 2caa785e17 Only clean up containerd hosts dirs managed by k3s 4c8ef7f477 Fix rotateca validation failures when not touching default self-signed CAs 0c8d3c0d58 Bump helm-controller for skip-verify/plain-http and updated tolerations db3cf9370e Bump containerd to v1.7.21, runc to v1.1.14 28a1fd0302 Update coredns to 1.11.3 and metrics-server to 0.7.2 944b3b2830 Bump traefik to v2.11.8 703e7697b0 Tag PR image build as latest before scanning 88d5576be6 Fix /trivy action running against target branch instead of PR branch 9c537cb705 Bump aquasecurity/trivy-action from 0.20.0 to 0.24.0 (#10795) be60661f18 Add trivy scanning trigger for PRs (#10758) e0c4e60171 Update CNI plugins version 3923e0c699 Cover edge case when on new minor release for E2E upgrade test (#10781) 8bfcfd70cc Fix deploy latest commit on E2E tests (#10725) e8de533e90 Remove secrets encryption controller (#10612) 34be6d96d1 Update kubernetes to v1.31.0-k3s3 (#10780) c7468edbe7 Bump go dependencies to match upstream 1.31 ebbb109840 Update VERSION_K8S to handle any k3s revision f5c6472b16 Bump Kine to v0.12.0 d358a89171 Fix secrets-encrypt metrics 178aadbe20 Add k3s-io/kubernetes tags 5087240e32 Downgrade Microsoft/hcsshim to v0.8.26 8cbcbcd044 go generate 20b50426ab Update to v1.31.0 876d54cf49 chore: Bump Trivy version (#10670) 518276fb77 adding MariaDB to README.md (#10717) 649678bd89 Fix k3s-killall.sh support for custom data dir 38df76708d Fix caching name for e2e vagrant box (#10695) ae0d79c7ea Update to v1.30.3-k3s1 and Go 1.22.5 (#10536) 019b0afdd8 Fix: Add $SUDO prefix to transactional-update commands in install script (#10531) 22fb7049bd Add tolerations support for DaemonSet pods daf0094cc7 Bump helm-controller to v0.16.3 to drop Helm v2 support ac247d29cf Update to newer OS images for install testing (#10681) 0ee714d62b Bump containerd to v1.7.20 (#10659) acb71ee379 Allow Amazon Linux 2 rpm installs 79ec016b6d Allow kylin V10 rpm installs 8ff7d162cc Allow fedora iot rpm installs 45c04f3502 Allow Amazon Linux 2023 rpm installs 3aceb85c22 Add a change for killall to not unmount server and agent directory 82ba778a86 bump docker/docker to v25.0.6 38e8b01b8f update stable channel to v1.30.3+k3s1 (#10647) bffdf463e1 Fix cloudprovider controller name e168438d44 Wire lasso metrics up to common gatherer e2179aa957 Update pkg/cluster/managed.go 3ec086f6f7 Update pkg/secretsencrypt/config.go e4f3cc7b54 remove deprecated use of wait functions e514940020 Fix inconsistent loading of config dropins when config file does not exist 9111b1f77e Add K3S_DATA_DIR as env var for --data-dir flag a26a5ab1d7 Don't set K3S_DATA_DIR env var 59e0761043 Use higher QPS for secrets reencryption (#10571) a70157c12e Allow Pprof and Superisor metrics in standalone mode (#10576) ecff337e00 Enhance E2E Hardened option (#10558) d4c3422a85 Fix ipv6 sysctl required by non-ipv6 LoadBalancer service 21611c5665 Cap length of generated name used for servicelb daemonset 891e72f90f Update secretsencrypt pagination c2216a62ad Use pagination when retrieving etcd snapshot list 37830fe170 Don't use server and token values from config file for etcd-snapshot commands cb6bf74bc4 Add dial duration to debug error message 118acabec2 Fix IPv6 primary node-ip handling 9841517457 Fix agents removing configured supervisor address 9d0c2e0000 Fix reentrant rlock in loadbalancer.dialContext b999a5b23d Bump kine to v0.11.11 58ab25927f For E2E upgrade test, automatically determine the channel to use (#10461) c36db53e54 Add etcd s3 config secret implementation 5508589fae chore: Bump Trivy version eb8bd15889 Ensure remotedialer kubelet connections use kubelet bind address a0b374508e Bump Local Path Provisioner version (#10394) 0b417385a4 chore: Bump golang:alpine version f6942f3de4 Bump github.com/hashicorp/go-retryablehttp from 0.7.4 to 0.7.7 b045465178 Add data-dir to uninstall and killall scripts d1709d60ce Fix INSTALL_K3S_PR support 047664b610 Bump k3s-root to v0.14.0 4204248bc3 Check for bad token permissions when install via PR (#10387) 8f9ad1f992 Move test-compat to GHA (#10414) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-10-03 01:28:52 +00:00
Michal Sieron	75b6a5cf61	crun: Add PACKAGECONFIG options ... Neither systemd nor seccomp is hard required by crun. They can actually be disabled during configuration with --disable-systemd or --disable-seccomp. Introduce PACKAGECONFIG options for them and default them to presence of corresponding entries in DISTRO_FEATURES. Now REQUIRED_DISTRO_FEATURES and features_check can also be removed. Similarly dependency on libcap can be made optional. crun actually contains pregenerated manpages in the repository so dependency on go-md2man-native can be made optional as well. As there is a configuration option for embedding yajl I added an option for that as well. However, as PACKAGECONFIG can only specify dependencies when config is enabled I had to invert the options so the config is for external-yajl. I set default PACKAGECONFIG value to match previous state (except detecting if systemd and seccomp are in DISTRO_FEATURES). Signed-off-by: Michal Sieron <michalwsieron@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-10-03 01:28:52 +00:00
Bruce Ashfield	4c996d1b17	runc: update to v1.2.0-rc.3 ... Bumping runc to version v1.2.0-rc.3-3-gf9f57641, which comprises the following commits: 429e06a5 libct: Signal: honor RootlessCgroups 961b8031 VERSION: back to development 45471bc9 VERSION: release v1.2.0-rc.3 6c24b2e8 changelog: update to include 1.1.14 notes 63c29081 rootfs: try to scope MkdirAll to stay inside the rootfs 767bc008 Makefile: Don't read COMMIT, BUILDTAG, EXTRA_BUILDTAGS from env vars 2cd24a4d ci/gha: add all-done jobs cc2078cc Makefile: Add EXTRA_VERSION f76489f0 mv contrib/cmd tests/cmd (except memfd-bind) f4cc3d83 Revert "allow overriding VERSION value in Makefile" Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-10-03 01:28:52 +00:00
Bruce Ashfield	abbe4686b0	containerd: update to v2.0.0-rc.4 ... Bumping containerd to version v2.0.0-rc.4-40-g19430264c, which comprises the following commits: 9037069da update to go1.23.1, go1.22.7 18725f010 integration: regression test for issue 10589 5f37a2c20 fifosync: cross-process synchronization 421a4b568 runc-shim: handle pending execs as running 299a9717f update runc binary to 1.1.14 f4529ace1 build(deps): bump the otel group with 8 updates e7357916b runc-shim: refuse to start execs after init exits def477b07 Bump crun to 1.16 3d7955bf7 remove duplicated descriptor from/to proto 93d6f0f92 remove duplicated sandbox to proto func bfc1465a2 Reorganize mount/unmount code so it is easier to add Darwin-specific implementation 9c3400572 reduce ptypes.Empty creation by defining it in as a var 7f3bf993d runc-shim: remove misleading comment f6677a4ec Cumulative stats can't decrease 94c163209 TestNewBinaryIOCleanup: fix a comment, minor rewrite d83184ced avoid repeated calls in Tricolor gc 6b97a08ee add benchmark 1b03ca57c build(deps): bump github.com/prometheus/client_golang 9906fac59 build(deps): bump github.com/vishvananda/netlink cdbfcc257 Prepare release notes for v2.0.0-rc.4 4ba502a03 Update api vendor to latest tag a36d38fb4 Add mailmap entry for Michael Zappa bf5fc240b build(deps): bump google-github-actions/upload-cloud-storage faaafd6de build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.2 to 2.2.3 47350982b build(deps): bump go.etcd.io/bbolt from 1.3.10 to 1.3.11 3cd8f9734 core/mount: use ptrace instead of go:linkname 35b029257 remove sha256-simd 1195b68eb build(deps): bump github.com/prometheus/client_golang 50b06182f Register local content plugin from separate package 021063c4a build(deps): bump the k8s group with 5 updates 1bff3bfed build(deps): bump dario.cat/mergo from 1.0.0 to 1.0.1 429085c84 build(deps): bump google-github-actions/upload-cloud-storage 93abc2fdd Update hcsshim to v0.12.6 bcdf50736 core/mount: add benchmark test for GetUsernsFD 6f3833f25 CRI: remove `disable_cgroup` fc1637d16 Attest artifacts in release workflow 337d8c52c Update release job to generate artifacts attestation Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-10-03 01:28:52 +00:00
Bruce Ashfield	e8b6a87d5b	cri-o: update to v1.30.0-tip ... Bumping cri-o to version v1.30.0-387-g20c06a19c, which comprises the following commits: 2562cea42 build(deps): bump the actions group with 2 updates 7472e56e9 Trigger `test` workflow after release branch fast forward 5aa911d5a Update shfmt to v3.9.0 d1e6111e5 Fix space at EOL in actions a15d14d23 fixed token-permission and pinned-dependencies issue 99b02b97b Switch to go 1.23 c36f2b5bd build(deps): bump the gomod group across 1 directory with 8 updates 8e48b06da Add `crun` integration tests 9f47c4738 Fix tab in Info to string, add tests 8e313e986 Vendor Kubernetes v1.31.0 0262d1980 Squash MetaHostPortManager into HostPortManager 6cdc457b6 Drop port-opening code from hostport manager aa6d034d6 Skip storage directory corruption recovery tests on Kata Containers ba0bd3e8b Add crio check sub-command used to check storage for errors 269137ede contrib: temporarily move to crun 1.15 to fix CI 0c7f36a16 Remove custom golang version for runc 211de0d70 build(deps): bump sigstore/cosign-installer in the actions group a79fa8ba4 Make internal repair the new default and disable internal wipe fc7a26bea Allow for storage directory removal to be forced 1a20443b2 Wipe storage only after giving storage.Repair() a chance 1348885f8 Remove orphaned mounts before removing storage directory 5cf0fc68a internal/oci: improve container termination process in killContainer 04143e0e0 build(deps): bump actions/upload-artifact in the actions group 9ee915794 Move config warning for NoSyncLog 6d76b7841 build(deps): bump the actions group with 2 updates 895c2cab8 Make the storage shutdown force unmount images on error 7b058f26b Move log message from HandleUncleanShutdown() function 8f5557429 Replace open-coded repair options with the RepairEverything() helper 46b167de3 Use custom set of checks over the CheckEverything() for storage checks ffcf8ecb3 Log how configuration gets loaded 46ef7a1c5 Update conmon-rs to v0.6.5 af0d3e79d build(deps): bump google-github-actions/upload-cloud-storage f03eef4d8 Run critest in parallel 07addee6b Update nixpkgs c8ff7aec7 Add pause image to dependencies.yaml 3a7bfdfa0 build(deps): bump actions/upload-artifact in the actions group 136b3ed5e build(deps): bump crate-ci/typos in the actions group 32ad0fde5 build(deps): bump golangci/golangci-lint-action in the actions group d1c4129b1 Enable and fix `gomoddirectives`, `gomodguard`, `noctx` and `wastedassign` linters b98f56996 Make container and image removal/stop idempotent 0c0c7f6d2 Fix unshare index c60000697 build(deps): bump ossf/scorecard-action in the actions group a46e1d98a build(deps): bump the gomod group with 5 updates c20d16cfb Trim `crio version Version: …` prefix from `crio -v` a048e1530 Fix trailing whitespace in docs 3d778ed26 Rework no_sync_log to be a runtimes.runtime setting 988444bdd build(deps): bump crate-ci/typos in the actions group 877a4b0fa Fix lint timeout option de0d48a57 build(deps): bump the gomod group across 1 directory with 4 updates b9b7f089e Remove error log message if mountpoint cannot be found 8b4759730 build(deps): bump crate-ci/typos in the actions group 3a256325a Make ImageVolume garbage collection work cfa3f2979 Add documentation for setting up CRI-O with Flatcar b6ad92802 ci: Add timeout value on WaitEvent for TestContainerEvents 6ed96dcaf oci_volumes: require crictl that can request OCI volumes cca74fe23 Use cri-tools master for CI tests 2cd9ad326 Log version only for main CRI-O command 8bc0487a4 Disable network ping tests for actuated runners 6e98e4210 test: config tests should ignore default runtime environment variable c39e8014f Add OCI Volume Source support 04c768a26 test: re-enable hooks.bats in integration tests for kata 3f08208eb test: use kata 3.6.0 for testing 50046c72b test: kata test - set skip_mount_home in storage options 14e5af098 ci: kata-specific testing in integration tests e30e13907 ci: cleanup kata processes during teardown 7f9efe304 ci: enable debug log level for the kata container runtime 2e9d44dbf Use `.gitignore` in nix build excludes c2c0bae26 KEP-3619: implement RuntimeStatus.features.supplemental_groups_policy field f05dac5d5 KEP-3619: update cri-api version 5f66ac000 oci: separate out timer logic from the backoff manager 08180027b oci: move oci-specific code into their respective runtime 8693692a7 test: add test coverage for multiple stop calls c119e524e oci: remove redundant ShouldBeStopped check for stopping containers bf9b5a309 Remove duplicate `exclude_graphdriver_devicemapper` from static builds 0bc0e6c6f Dedup installation docs ff047539d updates pause image to 3.10 b8d9714fe Fix "data loss" description of no_sync_log setting d1a7ee15f build(deps): bump the gomod group across 1 directory with 6 updates 031c6af6b build(deps): bump crate-ci/typos in the actions group e14676520 Remove go-setup from jobs not using golang 0f4ab88eb Remove config migration b3c7ebc43 build(deps): bump actions/setup-go in the actions group 481b25a72 Add table of contents to README.md b4c6af21a Cleanup install docs 8eed3d8e1 Update crio.conf manpage for no_sync_log 6e3685c81 Update manpage for --no-sync-log beae8bd53 server: propagate the pinned status of an image when queried via crictl 5a2e10ea2 Allow disabling fsync on log rotate and pod shutdown 33ceea55e Add automatic markdown table of contents generation 52707b8be Move hostport tests to use ginkgo 6d6149a0b build(deps): bump the actions group with 2 updates bc86390e0 Sanitize CRI-O version set in the User-Agent header fc1bd923a nri: pass around context and log failed pid for not spoofed containers Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-08-20 20:58:43 +00:00
Bruce Ashfield	dbe850feaa	buildah: update to v1.37.1 ... Bumping buildah to version v1.37.1-1-g0117c423e, which comprises the following commits: 67cc51e90 [release-1.37] Bump to Buildah v1.37.1 02313cf69 [release-1.37] Bump c/common v0.60.1, c/image v5.32.1 f9de1bbd1 Buildah v1.37.0 7de5d5d6e Bump c/storage, c/image, c/common for v1.37.0 6373be5a1 "build with basename resolving user arg" tests: correct ARG use dcf3ea5fd bud-multiple-platform-no-run test: correct ARG use 3e38e5e13 imagebuildah: always have default values for $TARGET... args ready 7f1fe46fc bump github.com/openshift/imagebuilder to v1.2.14 f6f2da76d fix(deps): update module github.com/docker/docker to v27.1.1+incompatible 5e20b928c fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.1 54d84483a fix(deps): update module github.com/docker/docker to v27.1.0+incompatible 3ad0fd1ed CI: use local registry, part 2 of 2 52df6e0e0 CI: use local registry, part 1 of 2 2a99f9bcd fix(deps): update module github.com/fsouza/go-dockerclient to v1.11.1 b756a3d00 Revert "fix(deps): update github.com/containers/image/v5 to v5.31.1" b1dff416b Replace libimage.LookupReferenceFunc with the manifests version 9bb25a6da conformance tests: enable testing CompatVolumes 1861c1320 conformance tests: add a test that tries to chown a volume a7098c776 imagebuildah: make traditional volume handling not the default b5eafdf55 StageExecutor.prepare(): mark base image volumes for preservation 5940e721c fix(deps): update module github.com/containers/image/v5 to v5.31.1 e2f080554 Vendor in latest containers/(common, storage, image) 5d8b53910 fix(deps): update module golang.org/x/term to v0.22.0 b08c9cf1c fix(deps): update module golang.org/x/sys to v0.22.0 2d172d50e fix(deps): update golang.org/x/exp digest to 7f521ea aa6f75225 fix(deps): update github.com/containers/luksy digest to a8846e2 d6771f81a imagebuildah.StageExecutor.Copy(): reject new flags for now a63fbba3f bump github.com/openshift/imagebuilder to v1.2.11 21fb5ea4f Rework parsing of --pull flags feb17a95c fix(deps): update module github.com/containers/image/v5 to v5.31.1 d79a36fae imagebuildah.StageExecutor.prepare(): log the --platform flag 3a35d2fd6 CI VMs: bump 14f19e980 buildah copy: preserve owner info with --from= a container or image bfa84dfcb conformance tests: enable testing CompatSetParent bfaee577d containerImageRef.NewImageSource(): move the FROM comment to first 66957cc05 commit: set "parent" for docker format only when requested a7224d167 Update godoc for Builder.EnsureContainerPathAs 75ae17c0f fix(deps): update module github.com/spf13/cobra to v1.8.1 a4cdb7879 fix(deps): update module github.com/containernetworking/cni to v1.2.0 6bef4b71c fix(deps): update module github.com/opencontainers/runc to v1.1.13 fe2fd8620 Change default for podman build to --pull missing b9c43961a fix(deps): update module github.com/containers/common to v0.59.1 5afd52fd9 Clarify definition of --pull options 1480f147f buildah: fix a nil pointer reference on FreeBSD 8b0ecd787 Use /var/tmp for $TMPDIR for vfs conformance jobs 0569f3728 Cirrus: run `df` during job setup 5891afffe conformance: use quay.io/libpod/centos:7 instead of centos:8 56fb08092 Stop setting "parent" in docker format ba0947a3d conformance: check if workdir trims path separator suffixes 9565585a6 push integration test: pass password to docker login via stdin afe1a5dd5 Re-enable the "copy with chown" conformance test f552bd57f healthcheck: Add support for `--start-interval` 420beb248 fix(deps): update module github.com/docker/docker to v26.1.4+incompatible a4f32a142 fix(deps): update module github.com/containerd/containerd to v1.7.18 04e5423ae tests: set _CONTAINERS_USERNS_CONFIGURED=done for libnetwork a9e5a1496 Cross-build on Fedora a42019d61 Drop copyStringSlice() and copyStringStringMap() b8c3530cb fix(deps): update module golang.org/x/crypto to v0.24.0 cb302075b fix(deps): update module github.com/openshift/imagebuilder to v1.2.10 e591844e9 Provide an uptime_netbsd.go 30c2e31d8 Spell unix as "!windows" e47ffc831 Add netbsd to lists-of-OSes 159425c45 fix(deps): update golang.org/x/exp digest to fd00a4e bf33b9291 [skip-ci] Packit: enable c10s downstream sync 7602e9e1d CI VMs: bump, to debian with cgroups v2 9521672fd Document when BlobDirectory is overridden 939a58b96 fix secret mounts for env vars when using chroot isolation 7ff83d505 Change to take a types.ImageReference arg e6c7949aa imagebuildah: Support custom image reference lookup for cache push/pull a33fda67a fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.0 f39d5fba2 Bump to v1.37.0-dev 671f29870 CI: Clarify Debian use for conformance tests Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-08-20 20:31:31 +00:00
Bruce Ashfield	7a4ae86e89	skopeo: update to v1.16.0 ... Bumping skopeo to version v1.16.0, which comprises the following commits: 88aad2e5 Bump Skopeo to v1.16.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-08-20 16:49:37 +00:00
Bruce Ashfield	3f7eda960f	runc-opencontainers: update to v1.2.0-rc.2-tip ... Bumping runc to version v1.2.0-rc.2-44-g376e875f, which comprises the following commits: cc2078cc Makefile: Add EXTRA_VERSION f4cc3d83 Revert "allow overriding VERSION value in Makefile" 606257c6 Bump golangci-lint to v1.60, fix new warnings adedeb99 ci/gha: add Go 1.23, drop 1.21 be539412 ensure we can download the specific version's go a7c8d86f tests/int: fix "cpu burst" failure on new kernels b437ed30 tests/int: check_{systemd,cgroup}_value: better log 2c398bb4 libct/int/seccomp_test: simplify exit code checks 171304c8 docs/systemd: fix a broken link 1410a698 rootfs: consolidate mountpoint creation logic 6fc2733a document build prerequsites for different platforms 15ec295b ci/gha: bump golangci-lint to v1.59 bb2db7b4 libct: drop error from (*Container).currentState return c8395b6e Enable govet nilness, fix an issue a5e660ca seccomp-notify.bats: add fcntl to the important syscall list e7848482 Revert "libcontainer: seccomp: pass around *os.File for notifyfd" Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-08-20 13:37:05 +00:00
Bruce Ashfield	16c9845d70	containerd: update to v2.0.0-rc.3 ... Bumping containerd to version v2.0.0-rc.3-209-ge8104a485, which comprises the following commits: 93abc2fdd Update hcsshim to v0.12.6 66817fccc script/setup/install-dev-tools: include patch version in versions cd4e24ef7 script/setup/install-dev-tools: update protoc-gen-go-ttrpc to v1.2.5 9e2357f33 docs: add k8s 1.31 to support matrix to RELEASES a3d84a172 docs: update for containerd v2 43568373f docs: Update BUILDING.md ebc47359e use format string when using printf like commands 1027b314a ignore the static check when using anonymous struct in testing f8e075336 remove windows check in linux_test file 20ee6de0b update golangci-lint to v1.60.1 fb8cd045b add go1.23.0 3f53e7a6e build(deps): bump github.com/urfave/cli/v2 from 2.27.3 to 2.27.4 1127908ae build(deps): bump k8s.io/cri-api in the k8s group 6ed54e966 build(deps): bump golang.org/x/sys in the golang-x group 1de84c29f build(deps): bump google-github-actions/upload-cloud-storage a100b055c update to go1.22.6 977604724 migrate to github.com/moby/sys/userns 8ef73c5dd Fix TestNewBinaryIOCleanup on Go 1.23 and Linux 5.4 7d4da0cb2 ctr: shim state query for old shims d59e8a840 ctr: shim state for secondary tasks 32c2d1493 use ctx object from cliContext instead of a creating a new one 349d2b5c1 script/setup/install-runc: fix runc using incorrect version 267fac568 build(deps): bump the golang-x group with 3 updates 6814cc354 build(deps): bump google-github-actions/upload-cloud-storage d036988ee docs/content-flow: fix code fence delimiter 83c26962c Remove extra span created in the instrumented service layer c0cdcb34f Add spans to CRI runtime service and related client methods 0e4f2108b support to syncfs after pull by using diff plugin 551ac0600 Ensure /run/containerd is created with correct perms 4cfeb7b19 core/metadata: migrate sandboxes bucket into v1 a97b11898 Make `StopContainer` RPC idempotent c6cea95d9 Make `StopPodSandbox` RPC idempotent ad24ca960 build(deps): bump github.com/urfave/cli/v2 from 2.27.2 to 2.27.3 71b5b34de build(deps): bump ossf/scorecard-action from 2.3.3 to 2.4.0 eddd90d7c remove deprecated pkg/userns 8437c567d pkg/userns: deprecate and migrate to github.com/moby/sys/user/userns 40a315b95 vendor: github.com/moby/sys/user v0.2.0 f9146c051 deprecation: update warnings for CRI config fields 0dcc51aed introspection: regenerate UUID if state is empty abdb4fd77 build(deps): bump the k8s group across 1 directory with 4 updates bc51d4b20 build(deps): bump the otel group across 1 directory with 8 updates 025d1161e build(deps): bump github.com/containernetworking/cni from 1.2.2 to 1.2.3 81ef46584 KEP-3619: update cri-api version ee2c0d9e7 KEP-3619: implement features.supplemental_groups_policy in RuntimeStatus 2d97134e5 build(deps): bump github.com/containerd/imgcrypt f0aecaa2e Fix TestNewBinaryIOCleanup failing with gotip b41bb6df7 Avoid potential reallocs by pre-sizing some slices a779449c4 vendor: github.com/moby/sys/sequential v0.6.0 1bfa7c8fe vendor: github.com/moby/sys/symlink v0.3.0 95b429c01 vendor: github.com/moby/sys/signal v0.7.1 08d6c9323 vendor: github.com/moby/sys/mountinfo v0.7.2 fb674f8b4 Add resolver workaround for error: name resolver error: produced zero addresses 63b468817 Use grpc.NewClient instead of deprecated ones a5be62993 Vendor GRPC 1.64 1a5c711c3 update documentation for content-flow c8254dfae Include filename in error 9eda0b73a build(deps): bump github.com/Microsoft/hcsshim from 0.12.4 to 0.12.5 9315d59bf build(deps): bump tags.cncf.io/container-device-interface 7480de28a Remove static link to images outside of the repository edd84f4a6 Add read permission limit on link workflow 274de35fe updated the domain in the link 807f32573 cri: optimize ListPodSandboxStats with parallelism 7c4de2821 Update cri-tools to v1.30.1 0772d0a37 Fix for `[cri] ttrpc: closed` during ListPodSandboxStats 300fd770a use typeurl funcs for marshalling anypb.Any e1adfaeb9 script/setup/config-containerd: Use slow_chown 89a2cac37 scripts/critest.sh: Prepare for userns tests in runc 63b55e6df build(deps): bump the golang-x group with 2 updates 203cb303e script: bump up imgcrypt version to v1.2.0-rc1 efd441506 client: fix tasks with PID 0 cannot be forced to delete eaa1afe63 Set stderr to empty string when using terminal on Windows. fe5f85c7d Fix incorrect comment about ordering of parent layers 0f76e35fd added the openssf scorecard badge 98544a358 Add file name to device type check failure message Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-08-20 13:36:12 +00:00
Bruce Ashfield	82fe694454	podman: update to v5.2.1 ... Bumping libpod to version v5.2.1-5-g679276e136, which comprises the following commits: dbdff97042 Create volume path before state initialization 628446c88c Update Cirrus DEST_BRANCH 30f104cf36 Bump to v5.2.2-dev d0582c9e1e Bump to v5.2.1 1cec5dc24e Update release notes for v5.2.1 8227722c3c [v5.2] Add zstd:chunked test fix 854e0c2eb4 [v5.2] Bump Buildah to v1.37.1, c/common v0.60.1, c/image v5.32.1 8f198092d7 libpod: reset state error on init 669767c3a9 libpod: do not save expected stop errors in ctr state 851ec1f81c libpod: fix broken saveContainerError() 6b45888959 Bump to v5.2.1-dev b22d5c61ee Bump to v5.2.0 3f13c38048 Never skip checkout step in release workflow c83c891fb2 Bump to v5.2.0-dev 028bee289e Bump to v5.2.0-rc3 23c6e0fb9f Update release notes for v5.2.0-rc3 784856b6ae Tweak versions in register_images.go d6ae7427f7 fix network cleanup flake in play kube c0f3ce462c WIP: Fixes for vendoring Buildah a8f4c12003 Add --compat-volumes option to build and farm build 8bc493324a Bump Buildah, c/storage, c/image, c/common 4fbcece05f libpod: bind ports before network setup 3f14fcf7c3 pkg/api: do not leak config pointers into specgen 02a932372b build: Update gvisor-tap-vsock to 0.7.4 929c64ecf3 test/system: fix borken pasta interface name checks c231ba8b23 test/system: fix bridge host.containers.internal test b1ad869560 CI: system tests: instrument to allow failure analysis 5da126dc49 Use uploaded .zip for Windows action 5f4acdf227 RPM: podman-iptables.conf only on Fedora 11f56fa42c Bump to v5.2.0-dev 716874f44e Bump to v5.2.0-rc2 d72fefc418 Update release notes for v5.2.0-rc2 5209495865 test/e2e: fix ncat tests b6b61a6a49 libpod: add hidden env to set sqlite timeout 0ecd6fa59f Add support for StopSignal in quadlet .container files 55b6e4c3e8 podman pod stats: fix race when ctr process exits 742d29e9d8 Update module github.com/vbauerster/mpb/v8 to v8.7.4 5e8884ab0d libpod: correctly capture healthcheck output 5a7199015a Bump bundled krunkit to 0.1.2 55749af0c7 podman stats: fix race when ctr process exists 7995e3de53 nc -p considered harmful 182224defb podman pod stats: fix pod rm race e1caf80e81 podman ps: fix racy pod name query 85f4f89810 system connection remove: use Args function to validate f630eebcfa pkg/machine/compression: skip decompress bar for empty file 7100ead475 nc -p considered harmful 46f4044893 podman system df: fix fix ErrNoSuchCtr/Volume race 1413a28409 podman auto-update: fix ErrNoSuchCtr race 02c094425f Fix name for builder in farm connection 2f7fd64e98 700-play.bats: use unique pod/container/image/volume names 380ed3a40d safename: consistent within same test, and, dashes 6d01ce417d 700-kube.bats: refactor $PODMAN_TMPDIR/test.yaml 987d15a378 700-play.bats: eliminate $testYaml 48aea083c0 700-play.bats: refactor clumsy yamlfile creation 517c6e6f10 700-play.bats: move _write_test_yaml up near top ed71000e6d chore(deps): update dependency setuptools to v71 3c52ef43f5 Expand drop-in search paths * top-level (pod.d) * truncated (unit-.container.d) 5666100c2e Remove references and checks for --gpus 1ec3edd3f6 Do not crash on invalid filters 692d2a5b08 fix(deps): update module github.com/rootless-containers/rootlesskit/v2 to v2.2.0 59696341b5 Bump to v5.2.0-dev 973e865422 Bump to v5.2.0-rc1 f3e945c86e Keep the volume-driver flag deprecated b28027148b System tests: safe container/image/volume/etc names d26f0ca90f Implement disable default mounts via command line fa75599569 Remove the unused machine volume-driver Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-08-20 13:24:32 +00:00
Bruce Ashfield	2534e6a07c	docker: use nobranch ... The upstream repository has both removed tags and renamed branches. To prevent some of these failures in the future, let's run with nobranch=1 for a bit. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-08-03 02:50:57 +00:00
Mingli Yu	e434aaac29	docker-distribution: Enable support for riscv64 ... Revert [1] to enable support for riscv64. [1] https://git.yoctoproject.org/meta-virtualization/commit/?id=3626f2c9ccd56c6a3ee51304a7da7aafb395a588 Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-22 22:23:35 +00:00
Pawan Badganchi	dc96aa7a14	lxc: Fix meson build issue ... Build is failing during do_configure stage for lxc as meson does not support --with-systemdsystemunitdir config parameter. Error: meson: error: unrecognized arguments: --with-systemdsystemunitdir=/etc/systemd/system/ Hence, use -Dsystemd-unitdir config parameter instead. Signed-off-by: Pawan Badganchi <badganchipv@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-22 22:18:47 +00:00
Bruce Ashfield	3569724c16	umoci: update to v0.4.7 -tip ... Bumping umoci to version v0.4.7-224-gff684ba, which comprises the following commits: 3078d6b build(deps): bump github.com/vbatts/go-mtree from 0.5.3 to 0.5.4 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-16 16:49:34 +00:00
Bruce Ashfield	13a0ab610f	skopeo: update to v1.15.2 ... Bumping skopeo to version v1.15.1-8-g80626759, which comprises the following commits: 0002d9ca [release-1.15] Bump to v1.15.2 260f444b [release-1.15] Fixes an interoperability issue while listing tags cda43af4 [skip-ci] Packit: enable c10s downstream sync 7e81106f Refer to registry.k8s.io instead of k8s.gcr.io e2ea4269 [release-1.15] Bump to v1.15.1 5267baab [release-1.15] Freeze the fedora-minimal image reference cd5f7090 [release-1.15] CVE-2024-3727 99e3c448 Bump to v1.15.0 6d6d5b7b chore(deps): update module google.golang.org/protobuf to v1.33.0 [security] 78ddfd9d fix(deps): update module github.com/containers/ocicrypt to v1.1.10 e46c71c3 chore(deps): update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [security] 549fc862 chore(deps): update module github.com/go-jose/go-jose/v3 to v3.0.3 [security] cca855ac [CI:DOCS] Migrate skopeo container image 2ffc4ec3 fix(deps): update module github.com/containers/common to v0.58.0 086701bd fix(deps): update module github.com/containers/image/v5 to v5.30.0 96443048 fix(deps): update module github.com/containers/storage to v1.53.0 a80f634f fix(deps): update module golang.org/x/term to v0.18.0 4d80bf8c fix(deps): update github.com/containers/image/v5 digest to faa4f4f 2db09313 Move a go.mod dependency entry to the right section 95f6eac4 Avoid a warning by gopls / VSCode dbf465d6 fix typo 55abe69d update docs based on review 439dd5f4 docs: make sure that CGO_ENABLED='1' f0b07848 [CI:DOCS] Update dependency golangci/golangci-lint to v1.56.2 8b6774b4 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0 e294a380 [CI:DOCS] Update dependency golangci/golangci-lint to v1.56.1 c3e2b202 Update c/image after https://github.com/containers/image/pull/2273 8f2a7c65 Also change the MIME type in manifest when decompressing a layer 812a02af Replace decompress-dirs.sh with Go code 09f282e4 Split decompressDir from runDecompressDirs 9fd98112 [CI:DOCS] Update dependency golangci/golangci-lint to v1.56.0 122bf968 fix(deps): update module github.com/containers/common to v0.57.4 149fec0a fix(deps): update golang.org/x/exp digest to 1b97071 d77f7153 fix(deps): update module github.com/containers/common to v0.57.3 c941d813 Update github.com/containers/image/v5 to post-v5.29.2 main b412ed6e Run codespell on code 58ff9fdb fix(deps): update module github.com/containers/storage to v1.52.0 177d4adb add kubasobon:semver changes 4baf4fe9 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc6 e32dfefb Bump to v1.15.0-dev Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-16 16:45:42 +00:00
Bruce Ashfield	fda631c22f	runc-opencontainers: update to 1.2.0-rc2 ... Bumping runc to version v1.2.0-rc.2-21-g3778ae60, which comprises the following commits: 309a6d91 ci/gha: add go-fix job a5e660ca seccomp-notify.bats: add fcntl to the important syscall list e7848482 Revert "libcontainer: seccomp: pass around *os.File for notifyfd" b18d052b ci/cirrus: switch from CentOS to Almalinux 8b1c0f7e CHANGELOG.md: dedup v1.2.0-rc.2 notes 6980adb6 libct/userns: implement RunningInUserNS with sync.OnceValue b3b31ff2 libct/userns: make fuzzer Linux-only, and remove stub for uidMapInUserNS 5b09a712 libct/userns: change RunningInUserNS to a wrapper instead of an alias 30b530ca libct/userns: split userns detection from internal userns code c1421339 remove pre-go1.17 build-tags 5ea76254 VERSION: back to development f2d2ee5e VERSION: release 1.2.0-rc.2 ee601b87 MAINTAINERS_GUIDE: rm chief maintainer role d6563f6b MAINTAINERS: move crosbymichael to EMERITUS ad976aa1 put the changelog of v1.1.13 after v1.2.0-rc.1 4e2d7c0a update changelog after v1.1.13 released 2cb46c6e script/keyring_validate.sh: fix a typo d6e427e1 runc exec: avoid stuttering in error messages a6d46ed1 runc exec: improve options parsing 42cea2ec libct: don't allow to start second init process e3e10725 libct: fix locking in Start/Run/Exec 304a4c0f libct: createExecFifo: rm unneeded os.Stat e7294527 try to delete exec fifo file when failure in creation 1c505fff Revert "Set temporary single CPU affinity..." f8f1bc9a Vagrantfile.fedora: bump to F40 77190360 libct/cg: write unified resources line by line 40dd884a MAINTAINERS: add Rodrigo Campos 3019e842 libct/cg: use clear built-in b7fdd524 libct: use slices package a1e87f8d libct: rm eaccess 6b2eb52f go.mod,README: require Go 1.21 17380da2 Dockerfile: switch to Go 1.22 and Debian 12 a3302f20 ci: switch to go 1.22 as main version e660ef61 libct/nsenter: stop blacklisting go 1.22+ 24c2d28d fix a debug msg for user ns in nsexec 3083bd44 tests/cgroups: separate cgroup v2 swap test 4209439b libct/cg/fs/v2: ignore setting swap in some cases dbb011ec tests/int/helpers: fix cgroups_swap check for v2 8626c717 tests/int: fixup find statements e530b2a6 tests/int/update: fix v2 swap check 024c2711 make trimpath optional 760105ab script/*: fix gpg usage wrt keyboxd 67f6c37b ci/gha: switch to ubuntu 24.04 40bb9c46 ci/cirrus: rm centos stream 8 48c4e733 ci: workaround for centos stream 8 being EOLed 5c5ebe77 tests/int/scheduler: require smp b24fc9d2 ci: pin codespell 584afc67 libct/system: ClearRlimitNofileCache for go 1.23 b74b33c4 Dockerfile: bump Debian to 12, Go to 1.21 d697725a libct/cg/dev: fix TestSetV1Allow panic 177c7d4f Fix codespell warnings a35f7d80 fix comments for ClearRlimitNofileCache 6ab3d8ad vendor: golang.org/x/net@v0.24.0 f8052066 libct/cg/fs: fix setting rt_period vs rt_runtime e5e8f336 .cirrus.yml: rm FIXME from rootless fs on CentOS 7 36be6d05 libct/int: checkpoint test: skip pre-dump if not avail e42d981d libct/int: rm double logging in checkpoint_test 62a31465 libct/int/cpt: simplify test pre-check e676dac5 libct/criu: simplify checkCriuFeatures f6a8c9b8 libct: checkCriuFeatures: return underlying error 4ea0bf88 update/add some tests for rlimit da68c8e3 libct: clean cached rlimit nofile in go runtime a853a826 runc exec: setupRlimits after syscall.rlimit.init() completed f452f667 ci/gha: bump golangci-lint-action from 5 to 6 bac50646 libct: fix a comment dbd0c334 libct/system: rm Execv 9d9273c9 allow overriding VERSION value in Makefile 75e02193 use go mod instead of go get in spec.bats b032fead libct/cg/fs: don't write cpu_burst twice on ENOENT 6bf1d3ad tests/int/tty: increase the timeout 8732eada Vagrantfile.fedora: bump Fedora to 39 d63018c2 ci/gha: bump golangci-lint to v1.57 0eb8bb5f Format sources with gofumpt v0.6 6bcc7361 ci/gha: bump golangci/golangci-lint-action to v5 baba55e2 ci/actuated: re-enable CRIU tests f6b7167b tests/int/checkpoint: add requires criu_feature_xxx e5c82f00 tests/int/checkpoint: rm double logging 00238f5d CI: add actuated-arm64 758b2e2b helpers.bats: cgroups_cpu_burst: check kernel version d618c6fe cgroups.bats: check cgroups_io_weight 053f6a0d seccomp_syscall_test1: use ftruncate instead of kcmp 30dc98f5 CI: run apt with -y 4f3319b5 libct: decouple libct/cg/devices afc23e33 Set temporary single CPU affinity before cgroup cpuset transition. cde1d090 libcontainer: force apps to think fips is enabled/disabled for testing 6b1f7308 tests/integration: Fix remount on debian testing 5052c075 tests/integration/mounts_sshfs.bats: Fix test on debian testing e4bf49ff runc update: distinguish nil from zero afcb9c2e add a test case for runc update cpu burst 5194bd8d VERSION: back to development 275e6d85 VERSION: release v1.2.0-rc.1 fc3e04dc changelog: update to include all new changes since 1.1.0 b47fb3fd changelog: sync changelog entries up to runc 1.1.12 d4b670fc changelog: mention key breaking changes for mount options 851e3882 ci/test: exclude some runc_nodmz jobs e377e168 [hotfix] nsenter: refuse to build with Go 1.22 on glibc ac31da6b ci/cross-i386: pin Go to 1.21.x bfbd0305 Add I/O priority ccc500c4 seccomp: patchbpf: always include native architecture in stub b288abea seccomp: patchbpf: rename nativeArch -> linuxAuditArch ab6788d3 Remove dependabot ignore cdccf6d6 build: update libseccomp to v2.5.5 da79b616 fix runc-dmz bin path error in Makefile 37581ad3 dmz: remove SELinux special-casing eefc6ae2 features: implement returning potentiallyUnsafeConfigAnnotations list 606251ab build(deps): bump github.com/opencontainers/runtime-spec bb5673f2 build(deps): bump golang.org/x/net from 0.21.0 to 0.22.0 7ab66b18 build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0 6056ed2d build(deps): bump golang.org/x/sys from 0.17.0 to 0.18.0 fc76b136 Makefile: Fix runc-dmz removal 46b72107 contrib/cmd/memfd-bind: Mention runc-dmz needs RUNC_DMZ=true 1dae66f7 libct/dmz: Require RUNC_DMZ=true to opt-in 935d586b build(deps): bump tim-actions/get-pr-commits from 1.3.0 to 1.3.1 86360598 tests/int: fix flaky kill tests 82499d42 Fixed spelling mistake in the Makefile at .PHONY vendor 93e37723 ci/golangci-lint: add checks permission 302b2e89 tests/int: use gawk where needed 3a9859bd libct/nsenter: rm unused include ea140db7 libct/nsenter: rm unused code 27cbabd0 build(deps): bump golangci/golangci-lint-action from 3 to 4 afd90f44 build(deps): bump golang.org/x/net from 0.20.0 to 0.21.0 97632a6d build(deps): bump github.com/containerd/console from 1.0.3 to 1.0.4 174940a7 build(deps): bump golang.org/x/sys from 0.16.0 to 0.17.0 a596a055 update go version to 1.21 in cirrus ci bc4a869d test: no execve error msg synced to parent process d0750587 close the sync pipe explicitly in exec 0bc4732c test for execve error without runc-dmz 35aa63ea never send procError after the socket closed d8edada9 init: don't special-case logrus fds ee73091a libcontainer: mark all non-stdio fds O_CLOEXEC before spawning init 89c93ddf cgroup: plug leaks of /sys/fs/cgroup handle f2f16213 init: close internal fds before execve 8e1cd2f5 init: verify after chdir that cwd is inside the container 7094efb1 init: use *os.File for passed file descriptors 093c83e1 keyring: update AkihiroSuda key expiry 34eceb21 keyring: update cyphar@cyphar.com key expiry fe95a2a0 tests/integration: Test exec failures 8afeccc8 libct/dmz: Print execve() errors b1e3c3c7 build(deps): bump golang.org/x/net from 0.19.0 to 0.20.0 2a473a76 Add CONFIG_NETFILTER_XT_MATCH_COMMENT to check e1e3ca02 build(deps): bump golang.org/x/sys from 0.15.0 to 0.16.0 68438ba2 fix scheduler validate 55c9d6bf we have implemented idmapped-mounts with no limitations e90d8cb8 we have supported rsvd hugetlb cgroup a7c3e07c libct: Improve error msg when idmap is not supported 43306be3 build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.32.0 5a4f5217 script/check-config.sh: check CONFIG_BLK_CGROUP_IOCOST d87366f0 scripts/check-config: fix kernel version checks 7f65cc75 script/check-config.sh: check CONFIG_CHECKPOINT_RESTORE 6aa4c1a1 script/check-config: disable colors b94b5590 scripts/check-config: don't check MEMCG_SWAP on newer kernels 3f4a73d6 TestCheckpoint: skip on ErrCriuMissingFeatures c8113085 remove remap-rootfs bin when running make clean 0bbb7e9f move the target 'clean' next to 'all' d08ba9ca fix a (u|g)IDMappings type value convertion error 7b655782 build(deps): bump actions/upload-artifact from 3 to 4 482e5637 configs: make id mappings int64 to better handle 32-bit fa93c8b0 tests: mounts: add some tests to check mount ordering 3b57e45c mount: add support for ridmap and idmap 7795ca46 specconv: handle recursive attribute clearing more consistently cdff09ab rootfs: fix 'can we mount on top of /proc' check 8e8b136c tree-wide: use /proc/thread-self for thread-local state a04d88ec vendor: update to github.com/moby/sys/mountinfo@v0.7.1 5ae88daf idmap: allow arbitrary idmap mounts regardless of userns configuration ba0b5e26 libcontainer: remove all mount logic from nsexec ebcef3e6 specconv: temporarily allow userns path and mapping if they match e66ba70f build(deps): bump actions/setup-go from 4 to 5 c045886f tests: remap rootfs for userns tests 6fa8d068 integration: add mega-test for joining namespaces e6fb7fe5 nsexec: allow timens to work with non-rootless userns 09822c3d configs: disallow ambiguous userns and timens configurations 3bab7e92 configs: clean up error messages for Host[UG]ID 9387eac3 init: don't pre-flight-check the set[ug]id arguments 1912d598 *: actually support joining a userns with a new container 88411747 tests: integration: fix spurious SC203[01] shellcheck errors c25493fc build(deps): bump golang.org/x/net from 0.17.0 to 0.19.0 b2782965 build(deps): bump golang.org/x/sys a6f40817 libct: Destroy: don't proceed in case of errors ab3cd8d7 runc delete, container.Destroy: kill all processes 7396ca90 runc delete: do not ignore error from destroy d3d7f7d8 libct/cg: improve cgroup removal logic 29283bb7 runc delete -f: fix for no pidns + no init case dcf1b731 runc kill: fix sending KILL to non-pidns container 542cce01 libct: Signal: slight refactor d9f2a24a libct: replace runType with hasInit 94505a04 *: introduce pidfd-socket flag 3bde5111 fix some unit test error after bump ebpf to 0.12.3 b2f7614a bump github.com/cilium/ebpf from 0.12.2 to 0.12.3 823636c3 ci/cirrus: disable selinux-dmz kludge for centos-stream-8 9d8fa6d6 libcontainer: dmz: fix "go get" builds 669f4dbe configs: validate: add validation for bind-mount fsflags 4bf8b555 libct: Remove old comment 87bd7846 Add dmz-vs-selinux kludge and a way to disable it 393c7a81 README: fix reference to memfd-bind b39781b0 tests/int: add selinux test case b2539a7d libct/cg: skip TestWriteCgroupFileHandlesInterrupt on CentOS 7 a2f7c6ad internal/testutil: create, add SkipOnCentOS 2c9598c8 libct/cgroups.OpenFile: clean "file" argument 98511bb4 linux: Support setting execution domain via linux personality 6d279220 tests/int: fix flaky "runc run with tmpfs perm" 104b8dc9 libct/cg: add swapOnlyUsage in MemoryStats 7c71a227 rootfs: remove --no-mount-fallback and finally fix MS_REMOUNT 153865d0 tests/int: fix teardown in mounts_sshfs.bats 7f5daa88 libct/cg/fs.Set: fix error message 5ea7c60f tests/int: fix cgroup tests bbf8eff8 tests/int: fix "runc run (hugetlb limits)" d60d17a6 build(deps): bump github.com/cilium/ebpf from 0.12.1 to 0.12.2 9cd5d6cd libct/cg: remove retry on EINTR in 54d38c61 build(deps): bump github.com/cilium/ebpf from 0.12.0 to 0.12.1 f944d7b6 ci/gha: fix downloading Release.key b6a0c483 libct/dmz: Support compiling on all arches 4a7d3ae5 libct/cg: support hugetlb rsvd aec0dc7d build(deps): bump github.com/cilium/ebpf from 0.11.0 to 0.12.0 6f7266c3 libcontainer: drop system.Setxid 2860708d build(deps): bump golang.org/x/net from 0.16.0 to 0.17.0 b8f75f39 Makefile: move .PHONY to before each target bdf78b44 libct/cg/dev: add sync.Once to test case 46bfcac8 Makefile: avoid calling sub-make 961d0f12 Makefile: make verify-dmz-arch less talkative fa8f3817 ci: skip TestPodSkipDevicesUpdate on CentOS 7 927a5836 build(deps): bump golang.org/x/net from 0.15.0 to 0.16.0 0ab58aa2 build(deps): bump golang.org/x/sys from 0.12.0 to 0.13.0 730bc844 Fix directory perms vs umask for tmpcopyup 770728e1 Support `process.scheduler` efbebb39 libct: rename root to stateDir in struct Container c89faacc libc: rm _LIBCONTAINER_STATEDIR 6538e6d0 libct: fix a typo 109dcadd fix two typos f755c808 libct/cg/stats: support misc for cgroup v2 2e2ecf29 libct: use chmod instead of umask 4b3b7e99 docs/spec-conformance: update 531e29e1 script/lib.sh: set GOARM=5 for armel, GOARM=6 for armhf 90606665 docs: clarify the supported architectures (No MIPS) 9976be86 libct/dmz: Move comment out of the Makefile rule 90f5da65 libct/dmz: Reduce the binary size using nolibc 8da42aae sync: split init config (stream) and synchronisation (seqpacket) pipes ccc76713 sync: rename procResume -> procHooksDone 99469eba Handle kmem.limit_in_bytes removal 90c8d36a dmz: use sendfile(2) when cloning /proc/self/exe f8348f64 tests: integration: add runc-dmz smoke tests 6be763ee tests: integration: fix capability setting for CAP_DAC_OVERRIDE b9a4727f contrib: memfd-bind: add helper for memfd-sealed-bind trick dac41717 runc-dmz: reduce memfd binary cloning cost with small C binary e089db3b dmz: add fallbacks to handle noexec for O_TMPFILE and mktemp() 0e9a3358 nsexec: migrate memfd /proc/self/exe logic to Go code 321aa20c scripts: add proper 386 and amd64 target triples and builds d9ea71bf deprecate libcontainer/user ca32014a migrate libcontainer/user to github.com/moby/sys/user 65a1074c increase memory.max in cgroups.bats b17c6f23 validator: Relax warning for not abs mount dst path c378602b libct/specconv: remove redundant nil check c7ad2749 build(deps): bump github.com/cyphar/filepath-securejoin e1584831 libct/cg: add CFS bandwidth burst for CPU 1fe9447f build(deps): bump golang.org/x/net from 0.14.0 to 0.15.0 2d0cd0b3 build(deps): bump actions/checkout from 3 to 4 d8e9ed3e libcontainer/userns: simplify, and separate from "user" package. 5f05b96e build(deps): bump golang.org/x/sys from 0.11.0 to 0.12.0 937ca107 Fix File to Close e8525238 tests/int: add a test for host mntns vs hooks 41778ddc Fix for host mount ns containers fe6f33b2 build(deps): bump tim-actions/commit-message-checker-with-regex 0f3eeb9b tests/int: add failed hooks tests cadf0a14 tests/int: rename hooks.bats to hooks_so.bats 6a4870e4 libct: better errors for hooks f62f0bdf Remove nolint annotations for unix errno comparisons 17e7e230 ci/gha: bump golangci-lint to v1.54 b3e97214 Add issue reference to nolint annotation cc7e607a features: Expose idmap support 671e211e vendor: Update runtime-spec to expose mountExtensions b22073c5 ci/gha: add job timeouts 1f25724a configs: fix idmapped mounts json field names 8aa97ad3 nsexec: remove cgroupns special-casing 5c7839b5 rootfs: use empty src for MS_REMOUNT 20b95f23 libcontainer: seccomp: pass around *os.File for notifyfd f81ef149 libcontainer: sync: cleanup synchronisation code c6e7b1a8 libct: initProcess.start: fix sync logic b0c7ce51 makefile: quote TESTFLAGS when passing to containerised make aa5f4c11 tests: add several timens tests 9acfd7b1 timens: minor cleanups 46d6089f ci/gha: re-enable go caching 5741ea23 ci: add go 1.21, remove go 1.19 ec2ffae5 libct: Allow rel paths for idmap mounts 19d26a65 Revert "libct/validator: Error out on non-abs paths" 61a454cc build(deps): bump golang.org/x/net from 0.13.0 to 0.14.0 883aef78 libct/init: unify init, fix its error logic 789a73db init.go: move logger setup to StartInitialization 0d890ad6 nsenter: cloned_binary: use MFD_EXEC and F_SEAL_EXEC b999376f nsenter: cloned_binary: remove bindfd logic entirely 38676931 criu: do not add log file into error message c77aaa3f criu checkpoint/restore: print errors from criu log e4478e9f criuSwrk: simplify switch cb981e51 libct: move criu-related stuff to separate file f88a7654 ci: fix flaky test "update memory vs CheckBeforeUpdate" 5c6b334c ci: fix TestOpenat2 when no systemd is used 962019d6 ci: fix TestNilResources when systemd not available cfc801b7 Fix running tests under Docker/Podman and cgroup v2 ebc2e7c4 Support time namespace 83137c68 add a test case about missing stricky bit 6092a4b4 fix some file mode bits missing when doing mount syscall 06882888 contrib/fs-idmap: Move logic to a new function 855c5a0e contrib/fs-idmap: Don't hardcode sleep path 882e5fe3 contrib/fs-idmap: Check exactly 2 args are received 821d0018 contrib/fs-idmap: Remove not needed flags 7d2becdf libct/cg/fs2: use `file` + `anon` + `swap` for usage 99340bb0 contrib/fs-idmap: Reap childs c537cb3d build(deps): bump golang.org/x/net from 0.12.0 to 0.13.0 70f4e46e utils: use close_range(2) to close leftover file descriptors 57f31c68 libct/nsenter: Show better errors for idmap mounts 701dff79 libct/cg/sd: use systemd v240+ new MAJOR:* syntax da780e4d Fix bind mounts of filesystems with certain options set 237acdd8 add some important announcements in unreleased section c875ea85 use the length of UIDMappings/GIDMappings to check whether empty or not d9494fc6 CHANGELOG: forward-port 1.1.6-1.1.8 changes 11b6c9b6 build(deps): bump github.com/opencontainers/runtime-spec a3785c88 Remove idmapFD field for mountEntry 46ada59b Use an *int for srcFD c47f58c4 Capitalize [UG]idMappings as [UG]IDMappings f92057aa tests/int: update set_cgroups_path doc 19f76b66 tests/int/ps: enable for rootless 867ee905 docs: Update spec conformance for idmap mounts b460dc39 tests/integration: Add tests for idmap mounts fda12ab1 Support idmap mounts on volumes 98317c16 ci: bump golangci-lint, remove fixed exception fe4528b1 libcontainer: Just print the mountFds slice len on errors 73b64970 libcontainer: Add mountFds struct 0172016a libcontainer: Add generic parseFdsFromEnv() f5814a10 libcontainer: Add generic sendFdsSources() 96bd4875 nsenter: Add idmap helpers 5166164d nsexec: Add generic receive_sources() 4b668a82 Switch setupUserNamespace() to use the toConfigIDMap() helper fbf183c6 Add uid and gid mappings to mounts 83418f88 build(deps): bump github.com/cilium/ebpf from 0.10.0 to 0.11.0 2c844977 build(deps): bump golang.org/x/net from 0.11.0 to 0.12.0 881e92a3 libct/validator: Error out on non-abs paths 45c75ac7 build(deps): bump golang.org/x/sys from 0.9.0 to 0.10.0 017d6996 libct/nsenter: namespace the bindfd shuffle 3b191ff7 libct/nsenter: set FD_CLOEXEC on received fd 8f671781 libct/nsenter: refactor ipc funcs for reusability 890dceee libct/nsenter: annotate write_log() prototype 35fddfd2 chore(libct/nsenter): extract utility code 37732d1e MAINTAINERS: add Li Fu Bang ad040b1c tests/int/delete: make sure runc delete removes failed unit 58a811f6 tests/int: add/use "requires systemd_vNNN" 43564a7b runc delete: call systemd's reset-failed 91b4cd25 libct/cg/sd: remove logging from resetFailedUnit dacb3aaa tests/int/cgroups: remove useless/wrong setting 5cdf7671 libct/cg: IsCgroup2UnifiedMode: don't panic 5e53e659 ci: bump shellcheck to 0.9.0, fix new SC2016 warnings a57d94d3 build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.31.0 9fa8b9de Fix tmpfs mode opts when dir already exists eb55472e Fix integration tests failure when calling "ip" a52efc1f build(deps): bump golang.org/x/net from 0.10.0 to 0.11.0 e3627658 .codespellrc: update for 2.2.5 c9209fd2 ci/gha: don't skip rootless+systemd on ubuntu 22.04 1aa7ca80 libct/cg/stats: support PSI for cgroup v2 bc390b2e build(deps): bump golang.org/x/sys from 0.8.0 to 0.9.0 73b5dc02 docs/systemd: fix a broken link 62963fef libct/cg/sd/v1: do not update non-frozen cgroup after frozen failed. 0ac3376c go.mod: runtime-spec v1.1.0-rc.3 78d31a49 ci/cirrus: enable rootless tests on cs9 41e04aa6 tests/int: rename a variable e83ca519 tests/int/cgroups: filter out rdma 31e3c229 build(deps): bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3 7d09ba10 libct: implement support for cgroup.kill f8ad20f5 runc kill: drop -a option 9583b3d1 libct: move killing logic to container.Signal 2a7dcbbb libct: fix shared pidns detection 5b8f8712 libct: signalAllProcesses: remove child reaping e0e8d9c8 tests/int/kill: add kill -a with host pidns test 67bc4bc2 tests/rootless.sh: drop set -x fed0b124 tests/int: increase num retries for oom tests 5929b019 ci/gha: add space-at-eol check, fix existing issues 511c7614 man/runc: fixes bb4dbbc4 ci/cirrus: limit numcpu 650efb2c Fix Vagrant caching b9d2d8d8 build(deps): bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2 7e481ee2 libct/int: remove logger from init eba31a7c libct/StartInitialization: rename returned error 4f0a7e78 libct/init: call Init from containerInit 72657eac libct: move StartInitialization 2a347045 build(deps): bump tim-actions/get-pr-commits from 1.2.0 to 1.3.0 62cc13ea gha: disable setup-go cache for golangci job 083e9789 ci/gha: rm actions/cache from validate/deps job da5cdfed ci/gha: fix cross-i386 b32655d2 ci/gha: rm kludges for cross-i386 job f6c393da features: graduate from experimental 6beb3c6a go.mod: runtime-spec v1.1.0-rc.2 882a2cc8 build(deps): bump golang.org/x/net from 0.9.0 to 0.10.0 02afa9f1 build(deps): bump golang.org/x/sys from 0.7.0 to 0.8.0 a60933bb libct/rootfs: introduce and use mountEntry 976748e8 libct: add mountViaFDs, simplify mount 5a177463 deps: bump urfave/cli 20e38fb2 init: do not print environment variable value 5f6aafb3 libct: document process.LogLevel field defb1cc7 libct/cg/dev: optimize and test findDeviceGroup 13091eee ci: bump bats 1.8.2 -> 1.9.0 a1920009 Vagrantfile.fedora: bump to 38 33b6ec29 ci/cirrus: use vagrant from hashicorp repo 14d6c7df runc.keyring: add Akihiro Suda d7208f59 libct/cg/sd: use systemd version when generating dev props cfc3c6da scripts: keyring validate: print some more information a7583103 runc.keyring: add Kolyshkin 42a10919 runc-kill(8): amend the --all description fe278b9c libct: fix a race with systemd removal 056ec0ca keyring: add Aleksa's <cyphar@cyphar.com> signing key 0c9c60aa keyring: add Aleksa's <asarai@suse.com> signing key 22538f89 keyring: verify runc.keyring has legitimate maintainer keys 957bccfe scripts: release: add verification checks for signing keys 87214947 release: add runc.keyring file and script d9230602 Implement to set a domainname 6053aea4 Fix undefined behavior. Do not accept setjmp return value as variable. 953e1cc4 ci/gha: switch to or add ubuntu 22.04 439673d5 build(deps): bump golang.org/x/net from 0.8.0 to 0.9.0 fd1a79ff ci/cirrus: improve host_info 873d7bb3 ci/cirrus: use Go 1.19.x not 1.19 611bbacb libct/cg: add misc controller to v1 drivers 9b71787b tests/int: fix some checks 9dbb9f90 ci: bump bats 1.3.0 -> 1.8.2 a6e95c53 build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0 fd5debf3 libct/cg: rm GetInitCgroup[Path] 1034cfa8 build(deps): bump lumaxis/shellcheck-problem-matchers from 1 to 2 ed9651bc libct/cg/sd: support setting cpu.idle via systemd b5ecad7b tests/int/update: test bad cpu.idle values 3ffbd4c8 tests/int: fix update cpu.idle failure on CS9 509b312c libct/cg/sd/v2: unifiedResToSystemdProps nit 82bc89cd runc run: refuse a non-empty cgroup 1d18743f libct/cg/sd: reset-failed and retry startUnit on UnitExists c2533420 libct/cg/sd: ignore UnitExists only for Apply(-1) c6e8cb79 libct/cg/sd: refactor startUnit 9f32ce6a CHANGELOG: forward-port 1.1.4 and 1.1.5 changes 73acc77b libct/cg: rm EnterPid 4ff49046 Makefile: add verify-changelog as release dependency b2fc0a58 verify-changelog: allow non-ASCII 370e3be2 tests/int/mounts: only check non-shadowed mounts a37109ce tests/int/mount: fix issues with ro cgroup test 8293ef2e tests/int: test for CAP_DAC_OVERRIDE 8491d334 Fix runc run "permission denied" when rootless 99a337f6 Dockefile: bump go go 1.20 da98076c mountToRootfs: minor refactor 54e20217 libctr/cgroups: don't take init's cgroup into account a7a836ef libct/cg/dev: skip flaky test of CentOS 7 65df6b91 fix wrong notes for `const MaxNameLen` 9d45ae8d tests: Fix fuzzer location in oss-fuzz config 0d72adf9 Prohibit /proc and /sys to be symlinks 8f0d0c4d build(deps): bump google.golang.org/protobuf from 1.29.1 to 1.30.0 cecb039d nsexec: retry unshare on EINVAL e3cf217c build(deps): bump actions/setup-go from 3 to 4 a7046b83 build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.29.1 df4eae45 rootless: fix /sys/fs/cgroup mounts afeffb7e .github/ISSUE_TEMPLATE/config.yml: fix contact links 7d940bdf Add `.github/ISSUE_TEMPLATE/config.yml` 6b41f8ed build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0 6faef164 build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0 7b4c3fc1 Add support for umask when exec container f2e71b08 libct/int: make TestFdLeaks more robust be7e0394 libct/int: wording nits 7c75e84e libc/int: add/use runContainerOk wrapper 97ea1255 Fix runc crushes when parsing invalid JSON b3b0bde6 build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0 2e44a202 Makefile: fix typo in LDFLAGS_STATIC 92a4ccb8 specconv: avoid mapping "acl" to MS_POSIXACL 2adeb6f9 nsexec: Remove bogus kill to stage_2_pid 4d0a60ca tests: Fix weird error on centos-9 2ca3d230 nsexec: Add debug logs to send mount sources e412b4e8 docs: add docs/spec-conformance.md 787fcf09 go.mod: github.com/opencontainers/runtime-spec v1.1.0-rc.1 fbfc6afe tests: add tests for capabilities bc8d6e3b build(deps): bump github.com/opencontainers/selinux 0e1346fe build(deps): bump golang.org/x/net from 0.5.0 to 0.6.0 42dffaaa Dockerfile: fix build wrt new git 14e3ce9e build(deps): bump golang.org/x/sys from 0.4.0 to 0.5.0 1bb6209a tests/int: test for /dev/null owner regression 7e5e017d libcontainer: skip chown of /dev/null caused by fd redirection 5ecd40b9 Add Go 1.20, require Go 1.19, drop Go 1.18 81ca678f Disable clang-format 81c379fa support SCHED_IDLE for runc cgroupfs 5ce511d6 nsexec: Check for errors in write_log() 3fbc5ba7 ci: add tests/int/get-images.sh check 6d28928c Explicitly pin busybox and debian downloads e29e57b5 libcontainer: configs: ensure can build on darwin cc63d074 build(deps): bump github.com/cilium/ebpf from 0.9.3 to 0.10.0 6676f980 tests/integration/get-images.sh: fix busybox.tar.xz URL eacada76 build(deps): bump golang.org/x/net from 0.4.0 to 0.5.0 0ac98807 libct/cg/sd: stop using regex, fix systemdVersionAtoi b44da4c0 libct: validateID: stop using regexp 15677e7b ci: fix delete.bats for GHA c4aa452b tests/int/checkpoint: fix lazy migration flakiness 68352878 man/runc-restore: describe restore into different cgroup d4582ae2 tests/int: add "--manage-cgroups-mode ignore" test e8cf8783 libct/criuApplyCgroups: add a TODO 3438ef30 restore: fix --manage-cgroups-mode ignore on cgroup v2 212d25e8 checkpoint/restore: add --manage-cgroups-mode ignore ff3b4f3b restore: fix ignoring --manage-cgroups-mode 4f2af605 build(deps): bump golang.org/x/net from 0.2.0 to 0.4.0 19a9d9fc tests/int: use runc features in seccomp flags test ac04154f seccomp: set SPEC_ALLOW by default 076745a4 runc features: add seccomp filter flags ab848089 types/features: fix docstrings 8e9128ff Vagrantfile.fedora: upgrade Fedora to 37 9fc707e7 Fixed init state error variable 067ca8f5 notify_socket.go: use sd_notify_barrier mechanism ee88b900 notify_socket.go: avoid use of bytes.Buffer 313723fd fix libcontainer example 9f383793 build(deps): bump golang.org/x/net from 0.1.0 to 0.2.0 467dd234 build(deps): bump golang.org/x/sys from 0.1.0 to 0.2.0 e0d3c3e0 build(deps): bump github.com/coreos/go-systemd/v22 from 22.4.0 to 22.5.0 783f9ffe runc checkpoint: destroy only on success 79aedac1 go.mod: golang.org/x/*: use tagged versions 6462e9de runc update: implement memory.checkBeforeUpdate 56edc41c ci: bump shfmt to 3.5.1, simplify CI setup 18f8f482 Fix comment of signalAllProcesses for process wait due to sigkill 2cd05e44 libct/seccomp/patchbpf: rm duplicated code fbce47a6 deps: bump github.com/checkpoint-restore/go-criu to 6.3.0 b265d128 libct/seccomp: enable binary tree optimization 65840f64 tests/int/seccomp: fix flags test on ARM 6bf2c3b6 ci/gha: use v3 tag for actions/cache a04363c1 build(deps): bump actions/cache from 3.0.10 to 3.0.11 4a8750d9 tests/int: add a "update cpuset cpus range via v2 unified map" test 77cae9ad cgroups: cpuset: fix byte order while parsing cpuset range to bits 462e719c Fixes inability to use /dev/null when inside a container 04389ae9 libcontainer/cgroups: return concrete types ae53cde3 cirrus-ci: install EPEL on CentOS 7 conditionally 8584900e build(deps): bump actions/cache from 3.0.9 to 3.0.10 1be5d45d build(deps): bump github.com/cilium/ebpf from 0.9.1 to 0.9.3 79a5c110 build(deps): bump actions/cache from 3.0.8 to 3.0.9 da9126f7 build(deps): bump github.com/opencontainers/selinux 7189ba8d build(deps): bump github.com/coreos/go-systemd/v22 from 22.3.2 to 22.4.0 491713e8 cirrus-ci: enable EPEL for CentOS 7 4e65118d tests/int/helpers: gawk -> awk 0ffb49db tests/int: suppress bogus error 6fce0a1c build(deps): bump github.com/checkpoint-restore/go-criu/v6 e965e10c tests/int: do not set inheritable capabilities 29a28848 Add check for CONFIG_CGROUP_BPF in check-config.sh 746f4580 deps: bump go-criu to v6 45041985 build(deps): bump github.com/docker/go-units from 0.4.0 to 0.5.0 26dc55ef seccomp: fix flag test to actually check the value c7dc8b1f libct/seccomp/patchbpf: support SPEC_ALLOW 8206f5b2 build(deps): bump actions/cache from 3.0.7 to 3.0.8 58b1374f Fix failed exec after systemctl daemon-reload df9e32bc ci: fix for codespell 2.2 b7dcdcec Add go 1.19, require go 1.18, drop go 1.17 0f4bf2c8 ci/gha: bump golangci-lint to 1.48 45cc290f libct: fixes for godoc 1.19 bf8d7c71 build(deps): bump actions/cache from 3.0.5 to 3.0.7 589a9d50 ci/gha: fix cross-386 job vs go 1.19 450dd3e2 build(deps): bump google.golang.org/protobuf from 1.28.0 to 1.28.1 6d00bf6c build(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 ea0bd782 libct/intelrdt: check if available iff configured 56daf36b libct/intelrdt: skip remove unless configured c156bde7 libct/intelrdt: elide parsing mountinfo 9f107489 libct/intelrdt: skip reading /proc/cpuinfo 13674f43 libct/intelrdt: delete IsMBAScEnabled() d9a3acb9 build(deps): bump github.com/cilium/ebpf from 0.9.0 to 0.9.1 58ea21da seccomp: add support for flags c152e831 go.mod: update runtime-spec 4fd4af5b CI: workaround CentOS Stream 9 criu issue 5fd3d09e build(deps): bump actions/cache from 3.0.4 to 3.0.5 66bf3718 tests: replace local hello world bundle with busybox bundle e119db7a tests: enable seccomp default action tests on arm d2a5acd2 CHANGELOG.md: forward-port 1.1.x changes 957d97bc Fix error from runc run on noexec fs 086ddb15 Vagrantfile.fedora: upgrade Fedora to 36 35e6c3bf libct/nsenter: switch to sane_kill() 7481c3c9 ci: bump golangci-lint to 1.46 66625701 libct: fix staticcheck warning d370e3c0 libct: fix mounting via wrong proc fd c0be1aa2 export blockIODevice 56fcc938 Switch to newer v0.10.0 release of libseccomp-golang cc0feb4b build(deps): bump actions/cache from 3.0.2 to 3.0.4 5ed3fdff build(deps): bump github.com/moby/sys/mountinfo from 0.6.1 to 0.6.2 343951a2 cgroups: systemd: skip adding device paths that don't exist 03a210d0 libcontainer: relax getenv_int sanity check 72ad2099 docs/cgroup-v2.md: update the distro list 65f41d57 vendor: bump urfave/cli, add urfave_cli_no_docs tag e0406b4b vendor: bump cilium/ebpf to v0.9.0 6b96cbdd ci: improve shellcheck job e1d04cdf script/seccomp.sh: check tarball sha256 fbafaf31 ci: drop docker layer caching from release job f7b07fd5 Dockerfile,scripts/release: bump libseccomp to v2.5.4 6a79271c seccomp: patchbpf: minor cleanups be6488a5 seccomp: enosys: always return -ENOSYS for setup(2) on s390(x) 0ca0bb9f libct/cg/sd: check dbus.ErrClosed instead of isDbusError 47e09976 libct/cg/dev: privatize some functions b6967fa8 Decouple cgroup devices handling 25f18562 libct/cg/sd: factor out devices.go d1601160 libct: use `unix.Getwd` instead of `os.Getwd` to avoid symlink cab38885 go.mod: golang.org/x/sys v0.0.0-20220310020820-b874c991c1a5 a14cc405 release: add riscv64 binary 1d7b2971 libct/seccomp: add riscv64 dafcacb5 Makefile: set CGO_ENABLED=1 when needed 21e32d47 Makefile: add support for static PIE ab5c60d0 Makefile: fix GO_BUILDMODE setting f2f6e599 Makefile: add LDFLAGS_COMMON and LDFLAGS_STATIC f0f1b5f9 Dockerfile: don't use crossbuild-essential-* 476aa18a Dockerfile: rm dpkg --add-architecture lines d542ad65 Dockerfile: nit 98fe566c runc: do not set inheritable capabilities 009e627c Vagrantfile.fedora: fix build wrt new git 4d3e52f2 tests/int: fix a bad typo 2ce40b6a Remove tun/tap from the default device rules 68427f33 libct/seccomp/config: add missing KillThread, KillProcess df2bc138 vendor: bump seccomp/libseccomp-golang to f33da4d 29a56b52 fix deprecated ActKill 9c710564 vendor: bump urfave/cli to v1.22.6 fa83a17c ci/gha: convert lint-extra from a job to a step de25777a build(deps): bump github.com/moby/sys/mountinfo from 0.6.0 to 0.6.1 d73579ca build(deps): bump actions/cache from 3.0.1 to 3.0.2 66be704d ci/gha: remove stable: when installing Go b6eb9476 build(deps): bump actions/upload-artifact from 2 to 3 9d2268b9 build(deps): bump actions/setup-go from 2 to 3 b76b6b93 Allow mounting of /proc/sys/kernel/ns_last_pid 67e06706 ci/gha: limit jobs permissions 7260bae6 build(deps): bump actions/cache from 2 to 3.0.1 ae6cb653 man/*sh: fix shellcheck warnings, add to shellcheck cacc8237 ci: add call to check-config.sh 5d1ef78c script/check-config.sh: enable set -u, fix issues d66498e7 script/check-config.sh: fix remaining shellcheck warnings baa06227 script/check-config.sh: fix SC2166 warnings dc73d236 script/check-config.sh: fix wrap_color usage 6b16d005 shfmt: add more files 01f30162 ci/gha: run on main branch d77f898f build(deps): bump github.com/opencontainers/selinux 52229286 libct/specconv: use a local variable in CreateCgroupConfig() d0c89dfa libct/cg: IsCgroup2HybridMode: don't panic 82bc042d build(deps): bump google.golang.org/protobuf from 1.27.1 to 1.28.0 d620a401 tests/int: remove $ROOTLESS, use $EUID d330f94b tests/int/update.bats: fix extra reqs a2123baf tests/int: replace CGROUP_UNIFIED with CGROUP_V{1,2} 25ef852a tests/int: use = in test for strings comparison 102b8abd libct: rm BaseContainer and Container interfaces 6a3fe161 libcontainer: remove LinuxFactory 6a29787b libct/factory: make some methods functions 8358a0ec libct: StartInitialization: decouple from factory a78c9a01 libct: remove Factory interface 71bc308b libct/New: remove options argument b6514469 libct: remove TmpfsRoot 87cf5d20 CI/cirrus: add centos-stream-9 a0f8847e Drop go 1.16 5211cc3f Add / switch to Go 1.18 7cec81e0 libct: suppress strings.Title deprecation warning fcab941e ci: switch to golangci-lint 1.45 3618079c README.md: add cirrus-ci badge f309a69a README,libct/README: fix pkg.go.dev badges 48006d00 libct/configs/validate: rootlessEUIDMount: speedup a99f82ad tests: Add comment to clarify intent of seccomp-notify tests 9f9acd1a tests: Improve name of seccomp notify test 728571c1 tests/int: runc delete: fix flake, enable for rootless f7637def ci: use golangci-lint-action v3, GO_VERSION f7d46134 ci: bump golangci-lint to v1.44 89733cd0 Format sources using gofumpt 0.2.1 a43485c9 build(deps): bump actions/checkout from 2 to 3 1a935208 libct/cg/sd: simplify DetectUserDbusSessionBusAddress 11895cd0 libct/cg/sd: escape dbus address value 38c21694 tests/integration/helpers: set -u c8c3e852 tests: fix checks for non-existent variables 99d5c023 tests/int/{root,list}.bats: ALT_ROOT fixups in teardown 7da77d80 tests/int: don't add --root if $ROOT is not set 9e2a0463 tests/int: fix runc_spec for set -u ab9609db build(deps): bump github.com/godbus/dbus/v5 from 5.0.6 to 5.1.0 8c04b981 libct/cg/sd/v2: fix ENOENT on cgroup delegation 01f00e1f ensure the path is a sub-cgroup path 40b00886 loadFactory: remove d1fca8e5 list: report error when non-existent --root is specified 2b07e751 reviseRootDir: skip default values, add validation 899342b5 main: improve XDG_RUNTIME_DIR handling eb2f08dc checkpoint,restore,list: don't call fatal 36786c36 list, utils: remove redundant code 1d5c3310 configs/validate: looser validation for RDT 0f0f1f61 build(deps): bump github.com/cilium/ebpf from 0.8.0 to 0.8.1 be00ae07 ci: shellcheck: update to 0.8.0, fix/suppress new warnings 0b74e49d runc run/exec: ignore SIGURG 24ab543f build(deps): bump github.com/moby/sys/mountinfo from 0.5.0 to 0.6.0 dbd990d5 libct: rm intelrtd.Manager interface, NewIntelRdtManager 85932850 libct: rm TestGetContainerStats, mockIntelRdtManager 9258eac0 libct/start: use execabs for newuidmap lookup 39bd7b72 libct: Container, Factory: rm newuidmap/newgidmap 0d215150 libct: remove Validator interface 630c0d7e libct: Container, Factory: rm InitPath, InitArgs 376c9886 libct/specconv: improve checkPropertyName d37a9726 libct/specconv: test nits 58c1ff39 signals: fix signal name debug print 0767b782 build(deps): bump tim-actions/get-pr-commits from 1.1.0 to 1.2.0 7346dda3 libcontainer: remove "pausing" state 18e28626 libct/nsenter: fix extra runc re-exec on tmpfs 6e1d476a runc: remove --criu option 485e6c84 Fix some revive warnings bb6a8388 libct: initContainer: rename Id -> ID 1b14d974 libct/configs: rm Windows TODO 76c398f8 libct/README: rm Cgroupfs 0fec1c2d libct: Mount: rm {Pre,Post}mountCmds dffb8db7 libct: handleCriuConfigurationFile: use utils.SearchLabels 3d86d31b libct/utils: SearchLabels: optimize 1a3ee496 list: use Info(), fix race with delete 095929b1 list: getContainers: less indentation cb364108 build(deps): bump github.com/cilium/ebpf from 0.7.0 to 0.8.0 146c8c0c libct: fixStdioPermissions: ignore EROFS 18c4760a libct: fixStdioPermissions: skip chown if not needed b7fdb688 libct: fixStdioPermissions: minor refactoring 2eb6ac53 CHANGELOG: add #3306 e4d23d50 CHANGELOG.md: nit 5e201e7c libct/intelrdt: explain why mountinfo is required c45eed9a libct/specconv: rm empty key from mountPropagationMapping b5cb4056 ci: add go 1.18beta1 907aefd4 libct: StartInitialization: fix %w related warning 024adbb1 libct: Create: rm unneeded chown edeb3b37 libct/intelrdt: faster init if rdt is unsupported 6c6b14e0 libct/intelrdt: remove findMountpointDir test 02e961bc libct/intelrdt: wrap Root in sync.Once Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-16 14:47:07 +00:00
Bruce Ashfield	2cf563716f	podman-compose: update to v1.2.0 -tip ... Bumping podman-compose to version v1.2.0-29-g0866492, which comprises the following commits: 8505009 Support python direct call _parse_args or run 9fe3038 tests/integration: Automate 'build_fail' manual test 0f8348b tests/integration: Automate 'build' manual test Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-16 14:26:41 +00:00
Bruce Ashfield	ac6a273778	podman: update to v5.2.0-rc1 ... Bumping libpod to version v5.2.0-rc1-2-g72fd507205, which comprises the following commits: 59696341b5 Bump to v5.2.0-dev 973e865422 Bump to v5.2.0-rc1 eb750f61f6 Vendor in latest containers(common, storage,image, buildah) b08b630c84 test: drop unmount for overlay e16e528f39 test: gracefully terminate server fbc4768a00 libpod: shutdown Stop waits for handlers completion 6832a35f65 libpod: cleanup store at shutdown 54fce37968 Add NetworkAlias= support to quadlet 317a88ee4e cmd: call shutdown handler stop function 3280da0500 fix race conditions in start/attach logic 04fb77efe2 swagger: exlude new docker network types f90bd48859 vendor: bump c/storage e24367aa14 update to docker 27 b1e535b911 contrib: use a distinct --pull-option= for each flag 02af4f8bd6 Update warning message when using external compose provider 7c775a3f4c Update module github.com/cyphar/filepath-securejoin to v0.3.0 830e550073 Ignore result of EvalSymlinks on ENOENT 926547f7d3 test/upgrade: fix tests when netavark uses nftables 5856adb9f8 test/system: fix network reload test with nftables c4b2015e3a test/e2e: rework some --expose tests 9945981afb test: remove publish tests from e2e 43f6173cc6 CI: test nftables driver on fedora 07b69943a4 CI: use local registry, part 3 of 3: for developers dd1bcabae9 CI: use local registry, part 2 of 3: fix tests 2e8c074234 CI: use local registry, part 1 of 3: setup d4c0e7ecbd CI: test composefs on rawhide 176630b5db chore(deps): update module google.golang.org/grpc to v1.64.1 [security] 4487f17a47 chore(deps): update dependency setuptools to ~=70.3.0 bd71b75de4 Improve container filenname ambiguity. 4336c5a4f5 containers/attach: Note bug around goroutine leak 1dd8a35b2f Drop minikube CI test 6f6e0e7126 add libkrun test docs 766955fc6d fix(deps): update module tags.cncf.io/container-device-interface to v0.8.0 4b7aaafb2d cirrus: check for header files in source code check 336c45f68e pkg/machine/e2e: run debug command only for macos c819c7a973 create runtime's worker queue before queuing any job 34ba26ec52 test/system: fix pasta host.containers.internal test 81250cc5a9 Visual Studio BuildTools as a MinGW alternative a2c83cb0fd SetupRootless(): only reexec when needed 3350cd3eed pkg/rootless: simplify reexec for container code 049942db04 cirrus: add missing test/tools to danger files 1d9ac9a203 fix(deps): update module golang.org/x/tools to v0.23.0 e2ff5d4e5d Windows Installer: switch to wix5 f90060bff3 fix(deps): update module golang.org/x/net to v0.27.0 5e3d821814 pkg/machine/e2e: print tests timings at the end 527c0f0bfa pkg/machine/e2e: run debug commands after init ada4e1a8c1 pkg/machine/e2e: improve timeout handling 62956ac192 libpod: first delete container then cidfile ea86582f6c fix(deps): update module golang.org/x/term to v0.22.0 a181b7bc61 System test fixes 55ad0d6e0e cirrus.yml: automatic skips based on source 2c2da039de fix(deps): update module github.com/containers/ocicrypt to v1.2.0 d00e68e550 podman events: fix error race b6f151ad1c chore(deps): update dependency setuptools to ~=70.2.0 1c704157c2 fix(deps): update module github.com/gorilla/schema to v1.4.1 [security] 5c41eb6df8 Update CI VM images 3c0176b2d0 pkg/machine/e2e: fix broken cleanup f84f4a9cce pkg/machine/e2e: use tmp file for connections fad1f757cc test/system: fix podman --image-volume to allow tmpfs storage e810b340ef CI: mount tmpfs for container storage 9814ed40c7 docs: --network remove missing leading sentence 83863a6863 specgen: parse devices even with privileged set 5e156c424f vendor: update c/storage 22b57d3230 feat(quadlet): log option handling 786ea01a64 Error when machine memory exceeds system memory 0d0418a5bf machine: Always use --log-file with gvproxy c9e3458c99 CI: Build-Each-Commit test: run only on PRs d2ca2058c6 Small fixes for testing libkrun 069eace84b Podman machine resets all providers e58e715583 Clearly indicate names w/ URLencoded duplicates 926e6dd0aa [skip-ci] Packit: split rhel and centos-stream jobs fdb736d282 apple virtiofs: fix racy mount setup 67df6d60c3 cirrus: fix broken macos artifacts URL 6db8ff7f7b libpod/container_top_linux.c: fix missing header 3703cbf1d7 refactor(build): improve err when file specified by -f does not exist 905e7ae070 Minor: Remove unhelpful comment 541cdaa441 Update module github.com/openshift/imagebuilder to v1.2.11 439fe90208 Minor: Rename the OSX Cross task 02b922ebfc [skip-ci] Remove conditionals from changelog 65ed96585d podman top: join the container userns 6c75a10875 Run linting in parallel with building 7ff4bbae26 Fix missing Makefile target dependency a3d5842746 build API: accept platform comma separated 180cc6f863 [skip-ci] RPM: create podman-machine subpackage de58c5f292 ExitWithError() - more upgrades from Exit() a7415c9316 test/e2e: remove podman system service tests a0b2b0d34c cirrus: reduce int tests timeout 8f2d403cd1 cirrus: remove redundant skip logic 7562f4ccdb pkg/machine/apple: machine stop timeout 1a6a200403 CI: logformatter: link to correct PR base d1bfc6d8d0 Update module github.com/crc-org/crc/v2 to v2.38.0 f50734636c ExitWithError(): continued 31888f23aa test/system: Add test steps for journald log check in quadlet def182d396 restore: fix missing network setup a158eae7ff podman run use pod userns even with --pod-id-file 5815195528 macos-installer: bundle krunkit e404976d1b remote API: fix pod top error reporting 29ecf5984c libpod API: return proper error status code for pod start 945226a844 fix #22233 5d009715f6 added check for `registry.IsRemote()`. and correct error message. e4f64f91fe fix #20686 4dc98e3a5a pkg/machine/e2e: Remove unnecessary copy of machine image. 49eb5af301 libpod: intermediate mount if UID not mapped into the userns 08a8429459 libpod: avoid chowning the rundir to root in the userns c81f075f43 libpod: do not chmod bind mounts 094bc673ef libpod: unlock the thread if possible d53fee511f CI Cleanup: Remove cgroups v1 support d810f4187e ExitWithError() - more upgrades from Exit() 4b3890ccac remote: fix incorrect CONTAINER_CONNECTION parsing 7d22f04f56 container: pass KillSignal and StopTimeout to the systemd scope e48f3137c0 libpod: fix comment 8be9ec7216 e2e: test container restore in pod by name c22ae53d31 docs: Adds all PushImage supported paramters to openapi docs. 3f785e8735 systests: kube: bump up a timeout f134ab77bc cirrus.yml: add CI:ALL mode to force all tests d9183f0587 cirrus.yml: implement skips based on source changes 2f680eb4b5 CI VMs: bump 7dc288dbed restore: fix container restore into pod 6dd9abf9ec sqlite_state: Fix RewriteVolumeConfig 83549ba11f chore(deps): update dependency setuptools to ~=70.1.0 91a5c0de2a Quadlet - use specifier for unescaped values for templated container name 0eaec1a2e9 cirrus: check for system test leaks in nightly 4e0cd49148 test/system: check for leaks in teardown suite 81c90f51c2 test/system: speed up basic_{setup,teardown}() a2352fa3ea test/system: fix up many tests that do not cleanup e9c6cd1559 test/system: fix podman --authfile=nonexistent-path f611ac9304 Update module github.com/containernetworking/plugins to v1.5.1 043ce618bc Update module github.com/checkpoint-restore/checkpointctl to v1.2.1 f4aa71e730 Update module github.com/spf13/cobra to v1.8.1 0627fce798 Update module github.com/gorilla/schema to v1.4.0 5c1e5cd026 pkg/machine/wsl: force terminate wsl instance bd906cb314 pkg/machine/wsl: wrap command errors dca94be028 [CI:DOCS] Quadlet - add note about relative path resolution c20767120f CI: do not install python packages at runtime 54edf3d8ee Release workflow: Include candidate descriptor 19989380b8 Minor: Fix indentation in GHA release workflow 82973c38e4 GHA: Send release notification mail ad56dc7e2b GHA: Validate release version number 64091777fe Remove references to --pull=true and --pull=false 267d838e38 ExitWithError, continued 730a215025 podman: add new hidden flag --pull-option 5a4416be08 [CI:DOCS] Fix typos in podman-build 8fececcdb9 infra: mark storageSet when imagestore is changed 18c7a55ccd [CI:DOCS] Add jnovy as reviewer and approver 5b24d1b48c fix(deps): update module google.golang.org/protobuf to v1.34.2 0c587f0246 refactor(machine,wsl): improve operations of Windows API ad8fc6a74b --squash --layers=false should be allowed 858b3b7def fix(deps): update module github.com/checkpoint-restore/checkpointctl to v1.2.0 fa4f11facc update golangci-lint to v1.59.1 3825e73120 Rename master to main in CONTRIBUTING.md cec6859369 podman 5, pasta and inter-container networking a9de888a15 libpod: do not resuse networking on start 4b29c9dd73 machine/linux: Switch to virtiofs by default bf541c6740 machine/linux: Support virtiofs mounts (retain 9p default) 406f130590 machine/linux: Use memory-backend-memfd by default f317eb29ab ExitWithError() - continued 550cb07fc0 Enable libkrun provider to open a debug console dcec81e694 Add new targets on Windows makefile (winmake.ps1) 5b23a2e1c7 fix(deps): update module github.com/docker/docker to v26.1.4+incompatible 2334a7ea6c fix(deps): update module github.com/crc-org/crc/v2 to v2.37.1 f4b14c11ef fix(deps): update module golang.org/x/tools to v0.22.0 8cc9bb1842 fix(deps): update module golang.org/x/net to v0.26.0 ffc8522646 libpod: fix 'podman kube generate' on FreeBSD df0c2e5d03 fix(deps): update module golang.org/x/sys to v0.21.0 e8ea1e7632 libpod: do not leak systemd hc startup unit timer 15a4e1dffd vendor latest c/common 7c5c60bc39 pkg/rootless: set _CONTAINERS_USERNS_CONFIGURED correctly 80ed85dc17 run bats -T, to profile timing hogs 350dfabf66 test/system: speed up podman ps --external 8fa1ffbbec test/system: speed up podman network connect/disconnect 8640ce998c test/system: speed up podman network reload 609146fb75 test/system: speed up quadlet - pod simple 7f3bb2d238 test/system: speed up podman parallel build should not race 8852614792 test/system: speed up podman cp dir from host to container 8d3f65b026 test/system: speed up podman build - workdir, cmd, env, label 471e001c7f test/system: speed up podman --log-level recognizes log levels 26bdb5d110 test/system: remove obsolete debug in net connect/disconnect test c466377013 test/system: speed up quadlet - basic 6b021dd4ba test/system: speed up user namespace preserved root ownership 2e70d4201f System tests: add `podman system check` tests fec58a4571 Add `podman system check` for checking storage consistency f18298181b fix(deps): update module github.com/crc-org/crc/v2 to v2.37.0 7243c7109c fix(libpod): add newline character to the end of container's hostname file 6e4d7c7159 fix(deps): update module github.com/openshift/imagebuilder to v1.2.10 e8514bde85 fix(deps): update github.com/containers/image/v5 digest to aa93504 af7bd67d4e Fix 5.1 release note re: runlabel 164573dc34 test/e2e: use local skopeo not image b9b60f14b4 fix(deps): update golang.org/x/exp digest to fd00a4e e4123026b5 [CI:DOCS] Add contrib/podmanimage/stable path back in repo b146f9126a chore(deps): update dependency requests to ~=2.32.3 dffac6ecb1 fix(deps): update github.com/containers/image/v5 digest to 2343e81 900e29549a libpod: do not move podman with --cgroups=disabled 12f634edf0 Update release notes on Main to v5.1.0 5dc1738c05 test: look at the file base name 6243f5cebe tests: simplify expected output 7552735fa9 Sigh, new VMs again 4adb5cbbff Fail earlier when no containers exist in stats fb4ddf86cc Add Hyper-V option in windows installer 4ece83bdf9 libpod: cleanup default cache on system reset aa08552bf6 vendor: update c/image ad661b5b31 test/system: speed up kube generate tmpfs on /tmp bff0697de8 test/system: speed up podman kube play tests 67356a71b3 test/system: speed up podman shell completion test 01642c64ea test/system: simplify test signal handling in containers 6fa064f991 test/system: speed up podman container rm ... 37120bbe80 test/system: speed up podman ps - basic tests 4f3c691087 test/system: speed up read-only from containers.conf edf6f1814e test/system: speed up podman logs - multi ... fe05e25edf test/system: speed up podman run --name 1ae05473c1 Debian: switch to crun 1093ebb72b test/system: speed up podman generate systemd - envar 15606148e5 test/system: speed up podman-kube@.service template 42f43fb3a3 test/system: speed up kube play healthcheck initialDelaySeconds 9e321aafda test/system: speed up exit-code propagation test 94ba2cf1a1 test/system: speed up "podman run --timeout" 82bffb9c50 test/system: fix slow kube play --wait with siginterrupt 7ce3c6bf1e undo auto-formatting 9a7ffaa077 test/system: speed up podman events tests 9f823ecb25 Quadlet: Add support for .build files 9de1d4f653 test/system: speed up "podman auto-update using systemd" a09152ab28 test/system: remove podman wait test 7f567a4e51 tests: disable tests affected by a race condition 2b43f62233 update golangci-lint to v1.59.0 6dcde80999 kubernetes_support.md: Mark volumeMounts.subPath as supported b45364254f working name of pod on start and stop c5597cb12c fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.0 f8cc1b4807 Bump Buildah to v1.36.0 661e9ee804 fix(deps): update module github.com/burntsushi/toml to v1.4.0 9c92bc64a7 fix typo in Tutorials.rst 74e8f98772 Mac PM test: Require pre-installed rosetta db3abd0d28 test/e2e: fix new error message 23c830704d Add configuration for podmansh 4fd425429b Update containers/common to latest main 046c0e5fc2 Only stop chowning volumes once they're not empty d094a9f18e podman: fix --sdnotify=healthy with --rm e166f6bfe0 libpod: wait another interval for healthcheck ad1d3f8fc7 quadlet: Add a network requirement on .image units d418391ce6 test, pasta: Ignore deprecated addresses in tests 18557659e4 [CI:DOCS] performance: update network docs 08507f3ffe fix(deps): update module github.com/onsi/ginkgo/v2 to v2.18.0 93ef340071 CI: disable minikube task 8f8dfb971f [CI:DOCS] Fix windows action trigger 1766a1a24b chore(deps): update dependency setuptools to v70 3ab9e864f6 Check AppleHypervisor before accessing it e590cced06 fix(deps): update module github.com/containernetworking/plugins to v1.5.0 d9d0840a4d [CI:DOCS] Update dependency golangci/golangci-lint to v1.58.2 63df724a40 add podman-clean-transient.service service to rootless 9a8c3433c1 [CI:DOCS] Update podman network docs fb2ab832a7 fix incorrect host.containers.internal entry for rootless bridge mode 54ce5c6af1 vendor latest c/common main fe7cc67ef4 Add Rosetta support for Apple Silicon mac ad297b1823 bump main to 5.2.0-dev 8afa06ee89 Use a defined constant instead of a hard-coded magic value 47f01e85c5 cirrus: use faster VM's for integration tests 943ddfb0fe fix(deps): update github.com/containers/gvisor-tap-vsock digest to 01a1a0c 4b0ae78e00 [CI:DOCS] Fix Mac pkg link 061bcc06ea test: remove test_podman* scripts cb905f59ea test/system: fix documentation 6408a05927 Return StatusNotFound when multiple volumes matching occurs 35375e0af8 container_api: do not wait for healtchecks if stopped b06c58b4a5 libpod: wait for healthy on main thread bcb7edfded remote API: restore v4 payload in container inspect 6c78a72995 Remove duplicate call 164aef814e fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.3 590fec7a78 Change tmpDir for macOS 120660e239 fix: close resource file Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-16 14:07:08 +00:00
Bruce Ashfield	5c7becd086	oci-runtime-spec: update to v1.2.0 ... Bumping runtime-spec to version v1.2.0-17-g7017384, which comprises the following commits: 119ae42 Add CPU affinity to executed processes 2149fb5 config-linux: describe the format of cpus and mems c6af124 ci: remove redundunt actions d4aa6d8 chore: format JSON file `make -C schema fmt` b983fbf CODEOWNERS: remove vbatts bf698d0 MAINTAINERS: move vbatts to EMERITUS 12b653d Update golangci-lint to v1.56.1 in CI 8547911 Add Go v1.21 and v1.22 to GitHub Actions CI matrix 1a729af Update GitHub Actions packages to resolve warnings in CI 65cd1f8 Back to +dev 36852b0 version: release v1.2.0 021ba94 config.md: allow empty mappings for [r]idmap 5e98fec features: add potentiallyUnsafeConfigAnnotations cabeea7 specs-go: mark LinuxMemory.Kernel as deprecated 4005c81 specs-go: add missing deprecation comment for Hooks.Prestart 2f6b090 config: improve bind mount and propagation doc 0ec4e6b fix link to hooks in features 6ffddf6 mount: Allow relative mount destinations on Linux f329913 features-linux: Expose idmap information 7b8eb69 config: add reference to mount_setattr(2) for idmapped mounts 2547bb0 config: add idmap and ridmap mount options 3f552ce version: release v1.1.0+dev 0625254 version: release v1.1.0 d56ba70 ChangeLog: squash v1.1.0-rc.1...v1.1.0 5430e36 ChangeLog: Document changes since v1.1.0-rc.3 2bd22fa features.md: add a note to avoid confusion about annotations 5612d21 Remove outdated meeting.ics 085728a README.md: update chat information 8b4cadd version: v1.1.0-rc.3+dev ae35e39 version: release v1.1.0-rc.3 d8be1e3 ChangeLog: Document changes since v1.1.0-rc.2 1beaf68 CODEOWNER: Add Toru Komatsu(@utam0) to sync with MAINTAINERS fccfb09 config: add support for org.opencontainers.image annotations Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-16 14:02:22 +00:00
Bruce Ashfield	9aa6ae98f2	oci-image-spec: update to v1.1.0 latest ... Bumping image-spec to version v1.1.0-25-g39ab2d5, which comprises the following commits: a977bd3 Remove validation warnings to stdout 4bbdd7f Switch jsonschema validation libraries 535d657 Fix a typo in the annotations spec 89fee07 MAINTAINERS: move jonboulle to EMERITUS f17d647 CODEOWNERS: remove vbatts 818209a MAINTAINERS: move vbatts to EMERITUS 652ec7c Add note about `ImageID` to the `config` section of `manifest.md` 2d95dde Reformat "Platform Variants", especially to add amd64, ppc64le, riscv64 e191267 Update Go versions in release scripts 4da0cfc Update GitHub Actions packages to resolve warnings in CI a32e6c3 Pin golangci-lint for Go v1.20 8baa69b media-types: Fix broken links 0a41c19 version: bump back to +dev e7f7c0c version: release v1.1.0 d0f90e6 Clarify that subject references a separate DAG 8b1e951 version: bump back to +dev 6c2b5fa version: release v1.1.0-rc6 53d9855 new section for projects no longer maintained b391bc0 fix: SPDX licenses URL dd66b54 Test older versions of Go with toolchain=local 93f6e65 Makefile: remove stray trailing space (#1126) d881fa8 deps: remove deprecated github.com/pkg/errors (#1125) 072574d add ORAS to implementations.md 9954739 specs-go: group MediaTypes 344b098 fix markdown table formatting c7a064f Update supported Go range to 1.19 - 1.21 f0ef80e version: bump back to +dev 1e54f01 version: release v1.1.0-rc5 061cba3 Fix golangci-lint install on older versions of Go a2a5750 Add step to update website after a release 0c1622e Add `riscv64` arch to `check{Architecture|Platform}` e6a75e6 Provide a decision tree for artifacts 9ac8f92 Quote lint-md wildcard expression a6af2b4 Add a markdown linter and fix linting issues af9c838 OCI has a distribution-spec 37bac87 Create artifacts guidance ddf2dfd chore(descriptor.md): correct canonicalization reference d36ccf1 MediaType is required in the descriptor f6c60b5 Clean up the markdown in considerations da8994a Cleanup broken links and markdown spacing 56877ad Remove deprecated golangci lint checks b29a06c Hacking markdown and Makefile cleanup 73aca56 Cleanup markdown in governance fd95ded Fix label schema link aed07a8 Test subject field in index 8620a49 version: bump HEAD back to +dev 82e8329 version: bump for release of v1.1.0-rc.4 988df0a specs-go: remove artifact prefixed annotations a845c7a image-index: add artifactType to specs and schema 73f386c Add constants for "index.json" and "blobs" 25fc553 Switch from scratch to empty 749ea9a Add artifactType to image index 32036d8 Apply version change from #1050 e13840d Add language from artifacttype field to forbid allowlists of media types 77efc6e spec: clarify descriptor, align with de facto artifact usage c6854a6 image-index: add the `subject` field Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-16 14:00:50 +00:00
Bruce Ashfield	4b7ae4b6e9	netavark: update to v1.11.0 ... Bumping netavark to version v1.11.0-34-ge182147, which comprises the following commits: ab4f101 Release v1.11.0 8d63716 Update release notes for 1.11.0 8c28d20 update netlink-packet-route to 0.20.0 46e4559 run cargo update 38d0ab1 fix: remove extra / in make install and uninstall 4fb2bd9 chore(deps): update dependency containers/automation_images to v20240529 3ec4fd7 fix(deps): update rust crate nix to 0.29.0 e87aae4 fix(deps): update rust crate nispor to 1.2.19 ecfae2c fix(deps): update rust crate anyhow to 1.0.86 6f445a5 fix(deps): update rust crate anyhow to 1.0.85 e5514d1 [skip-ci] Packit: do not create dup jobs on podman-next f27cd29 fix(deps): update rust crate anyhow to 1.0.84 abdd8ec [skip-ci] RPM: use default __cargo macro across all envs c29c09c [skip-ci] RPM: switch default firewall to nftables on EL10+ 79bdee1 chore(deps): update dependency containers/automation_images to v20240513 b161e75 Add conditional compilation of default firewall driver 7f69bae fix(deps): update rust crate serde_json to 1.0.117 87fe59f fix new clippy warnings ed7cfd8 Update CI image to fedora 40 e6c6d99 fix ncat sctp tests ad5adfc fix(deps): update rust crate anyhow to 1.0.83 b04b3de build(deps): bump h2 from 0.3.25 to 0.3.26 da57e62 [skip-ci] Packit: distinct `-rhel` packages value 5e1484c [skip-ci] Packit: enable c10s downstream sync 4233d47 fix(deps): update rust crate libc to 0.2.154 42c6735 fix(deps): update rust crate ipnet to 2.9.0 5869654 fix(deps): update rust crate tower to 0.4.13 7c575c5 fix(deps): update rust crate tokio-stream to 0.1.15 93b8c98 fix(deps): update rust crate prost to 0.12.4 8242916 fix(deps): update rust crate iptables to 0.5.1 41c3281 [skip-ci] Packit: remove el8 jobs 16de016 fix(deps): update rust crate anyhow to 1.0.82 8f5cbf3 fix(deps): update rust crate serde to 1.0.199 0e03c7c Add suffix to Aardvark internal network filenames 9a73a52 fix port forward with strict RPF and multi networks 6e19894 renovate: stop rebasing PRs automatically f2f137f chore(deps): update rust crate chrono to 0.4.38 ded8d36 fix(deps): update rust crate serde_json to 1.0.116 0ce4586 fix(deps): update rust crate netlink-sys to 0.8.6 055b37e nftables: only dump netavark table rules 42c634f update nftables to 0.4 b2bcf47 fix aardvark-dns netns check c309491 fix(deps): update rust crate tokio to 1.37 1df8633 fix(deps): update rust crate netlink-packet-route to 0.19.0 4846563 Update to nix-0.28.0 e506776 fix(deps): update rust crate mozim to 0.2.3 a76f3d9 fix(deps): update rust crate nispor to 1.2.18 829b2db Update chrono cae2d5e fix(deps): update rust crate serde_json to 1.0.115 92bd069 build(deps): bump mio from 0.8.9 to 0.8.11 1e10e01 [skip-ci] rpm: aardvark-dns is a hard dep across the board 131c28c Update Rust crate env_logger to 0.11.3 370722f Update Rust crate serde to 1.0.197 6288762 Update Rust crate tempfile to 3.10.1 6d67358 Update Rust crate log to 0.4.21 943cd88 Update Rust crate zbus to 3.15.2 1a5850a Update Rust crate serde_json to 1.0.114 fe40711 Update Rust crate env_logger to 0.11.2 1efb4e5 Update Rust crate chrono to 0.4.34 5601e0a Update Rust crate tonic-build to 0.11 09ccedc Update Rust crate tonic to 0.11 bba73d6 fix netavark update to not start a new aardvark-dns 37d6f55 Update Rust crate tempfile to 3.10.0 8c2c8c6 Update Rust crate zbus to 3.15.0 dd1a057 Update Rust crate tokio to 1.36 b6be4de Update Rust crate chrono to 0.4.33 45f1581 Do not perform network namespace detection on AV update 6c69f60 [CI:BUILD] Packit/rpm: fix aardvark-dns handling 733a785 Update Rust crate serde_json to 1.0.113 6786828 Update Rust crate serde_json to 1.0.112 c5a23fc Update Rust crate env_logger to 0.11.1 d8143a6 update README with nftables support c5acdec Bump to v1.11.0-dev 468f885 perf-netavark: accept fw driver as argument 61a990f perf-netavark: fix missing --config arg Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-16 13:59:25 +00:00