Commit Graph

945 Commits

Author SHA1 Message Date
Bruce Ashfield
4e602f8949 skopeo: mark incompatible with mips
When building skopeo for mips(64), we get the following errors:

| go.go:(.text+0xdd07fc): relocation R_MIPS_26 against `a local symbol' cannot be used when making a shared object; recompile with -fPIC
| go.go:(.text+0xdd0830): relocation R_MIPS_26 against `a local symbol' cannot be used when making a shared object; recompile with -fPIC
| go.go:(.text+0xdd0864): relocation R_MIPS_26 against `a local symbol' cannot be used when making a shared object; recompile with -fPIC
| collect2: error: ld returned 1 exit status

Tag the recipe as incompatible with mips to avoid having it built
at all.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-09-28 01:23:12 +00:00
Chen Qi
b65fe24b8c nerdctl: fix textrel QA issue
Fix the following QA issue:

  ERROR: QA Issue: nerdctl: ELF binary /usr/bin/nerdctl has relocations in .text [textrel]

We want to use -buildmode=pie, in order to avoid duplicating codes with
go.bbclass, make use of GOBUILDFLAGS.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-09-25 01:23:34 +00:00
Chen Qi
96598a7d71 nerdctl: upgrade to v1.5.0
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-09-15 17:30:40 +00:00
Chen Qi
0e2058840e docker-compose: upgrade to v2.20.3
Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-09-15 17:30:40 +00:00
Chen Qi
03085cfb54 docker-compose: fix installation location for multilib
In case of multilib, the location is /usr/lib64/docker/cli-plugins,
which cannot be recognized by docker. We should use nonarch_libdir
instead.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-09-15 17:30:40 +00:00
Bruce Ashfield
86ec0fea15 k3s: update to v1.27.5
We refresh one patch, but otherwise, the build is unchanged.

Generated via:

 scripts/oe-go-mod-autogen.py --repo https://github.com/rancher/k3s.git --rev v1.27.5+k3s1

Bumping k3s to version v1.27.5+k3s1, which comprises the following commits:

    8d074ecb5a Add RWMutex to address controller
    f365a9cb98 Add new CLI flag to enable TLS SAN CN filtering
    8d6483a59e Update to v1.27.5 (#8236)
    e31f00f863 Move flannel to 0.22.2
    f8727f56d7 E2E test for token coverage (#8184)
    84ded911e9 Bump helm-controller/klipper-helm versions
    66bae3e326 Bump dynamiclistener for init deadlock fix
    e83b1ba4aa Fixed the etcd retention to delete orphaned snapshots based on the date (#8177)
    561db17a31 chore: Bump Trivy version (#8178)
    38a0b91c1a chore: Bump Trivy version (#8150)
    7f58a1cb23 Run integration test CI in parallel (#8156)
    c97211866a Fix for cluster-reset backup from s3 when etcd snapshots are disabled (#8155)
    9702f92345 Fix for Kubeflag Integration test (#8154)
    b2e71553ce Use VERSION_K8S in tests instead of grep go.mod
    bc332ac667 Use 'go list -m' instead of grep to look up versions
    53fc3eef0a add --disable-cloud-controller and --disable-kube-proxy test (#8018)
    e551308db8 fix for etcd-snapshot delete with --etcd-s3 flag (#8110)
    45bc26309f Remove terraform test package (#8136)
    fd531140e5 Bump kine to v0.10.2
    ca7aeed090 Etcd snapshots retention when node name changes (#8099)
    23d6842f9a Bump versions for etcd, containerd, runc, kine
    a0da8eded3 Bump docker/docker to master commit
    aa76942d0f Add FilterCN function to prevent SAN Stuffing
    3515d712a7 Fix typo in terraform/README.md (#8090)
    a87b183f9c E2E: Support GOCOVER for more tests + fixes (#8080)
    46cbbab263 Consolidate CopyFile functions (#8079)
    59eec78c62 Fix tailscale bug with ip modes
    468bddb59c update stable channel to v1.27.4+k3s1 (#8067)
    767b64ba58 Fix coreos multiple installs (#8083)
    cc9dce5764 Security bump to docker/distribution (#8047)
    f21ae1d949 Make apiserver egress args conditional on egress-selector-mode
    546dc247a0 Add support for `{{ template "base" . }}` in etc/containerd/config.toml.tmpl (#7991)
    6d360e6473 Unit test for MustFindString (#8013)
    946c8ea842 ADR on secrets encryption v3 (#7938)
    780e638099 Update flannel to v0.22.1
    e56839b329 Update cni plugins version to v1.3.0
    36645e7311 fix update go version doc (#8028)
    d8ae6ef59b Update to v1.27.4 (#8014)
    be44243353 Adjust default kubeconfig file permissions (#7978)
    0b18a65d4f Revert "Warn that v1.28 will deprecate reencrypt/prepare (#7848)"
    58a8deb25d fix image_scan.sh script and download trivy version (#7950)
    3eb4e12c3b Don't use zgrep in `check-config` if apparmor porfile is enforced (#7939)
    34617390d0 Generation of certificates and keys for etcd gated if etcd is disabled. (#6998)
    2eddfe6cf4 Add retry for clone step (#7862)
    782a3a1cb4 Bump google.golang.org/grpc from 1.51.0 to 1.53.0 in /tests/terraform (#7879)
    8405813c12 Fix rootless node password (#7887)
    607320d670 Improve for K3s release Docs (#7864)
    b9a2bf11ee Support setting control server URL for Tailscale.
    4ab01f3941 Warn that v1.28 will deprecate reencrypt/prepare (#7848)
    9e334153cf add e2e s3 test (#7833)
    bca0adbca8 Fix code spell check
    7f50b40cfe Fall back to basic/bearer auth when node identity auth is rejected
    ce3443ddf6 Allow k3s to customize apiServerPort on helm-controller
    324f9ad4da fix e2e startup flaky test (#7839)
    72d50b1f7c Add `--data-dir` to the `k3s certificate rotate-ca` cli (#7791)
    d593c83603 Remove file_windows.go
    f21a01474d Check if we are on ipv4, ipv6 or dualStack when doing tailscale
    0809187cff Adding cli to custom klipper helm image (#7682)
    c7dec8ed24 Update stable channel to v1.27.3+k3s1 (#7827)
    70691a95ee Faster K3s Binary Build Option (#7805)
    2215870d5d chore: pkg imported more than once
    fe9604cac1 Update Kubernetes to v1.27.3 (#7790)
    d968e64de0 Add commands to logout from tailscale
    43611bb5ad Fix the error report
    b66a118362 Bump helm-controller to v0.15.0 for create-namespace support
    a5874f855f Remove unused libvirt config
    c6a6e8ef57 Fix spelling check
    cc22c80e49 Add issue template for OS validation (#7695)
    efa86a63e8 Remove unnecessary daemonset addition/deletion (#7696)
    7c151d468f add private registry e2e test (#7653)
    869e030bdd VPN PoC
    1e73bb8967 Run integration tests on E2E changes, ensures correct coverage values
    8f9502233a E2E: Inject gocover ENV for k3s commands
    4a68fbd8e9 E2E: Use sudo for all RunCmdOnNode
    00f3e2413f chore: Bump Trivy version (#7672)
    dc6c569b98 Shortcircuit commands with version or help flags (#7683)
    3a8e98a3b8 Bump docker go.mod (#7681)
    e5e1a674ce Enable containerd aufs/devmapper/zfs snapshotter plugins
    5170bc5a04 Improve error response logging
    45d8c1a1a2 Soft-fail on node password verification if the secret cannot be created
    b0188f5a13 Test Coverage Reports for E2E tests (#7526)
    afc88cec88 check variant before version to decide rpm target and packager
    fa0dc5900a Use el8 rpm for fedora 38 and 39 (#7664)
    7c0a7687c6 add format command on Makefile and remove vendor
    9227e0bde2 Bump vagrant libvirt with fix for plugin installs (#7605)
    b64a226ebd Make LB image configurable when compiling k3s
    a5928ee137 chore: Bump golang:alpine version
    612473755d Add ADR
    7b61aacb56 Fix test file list
    64a5f58f1e Create new kubeconfig for supervisor use
    8748813a61 Use distinct clients for supervisor, deploy, and helm controllers
    e9958cf070 Bump metrics-server to v0.6.3 and update tls-cipher-suites
    93279d2f59 Bump klipper-lb to v0.4.4
    0485a56f33 allow coredns override extensions
    85e10cf9d2 update channels (#7634)
    9543470eb7 Add el9 selinux rpm (#7635)
    d1b0254b91 Update flannel version
    213d7ad499 Revert "Add el9 selinux rpm (#7443)" (#7608)
    d55ec08675 Add el9 selinux rpm (#7443)
    fe554fe703 Pin emicklei/go-restful to v3.9.0
    91c5e0d75a Fix iptables rules clean during upgrade
    d069a85fcc Update to v1.27.2-k3s1 (#7575)
    290f67c939 Add '-all' flag to apply to inactive units
    2b24c9917c Bump alpine from 3.17 to 3.18 in /conformance (#7551)
    266926693a Bump alpine from 3.17 to 3.18 in /package (#7550)
    9bcfac8b88 Add Rotation certification Check (#7097)
    4aafff0219 Wrap error stating that it is coming from netpol
    cbe8d33c93 Bump containerd/runc to v1.7.1-k3s1/v1.1.7
    8f450bafe1 Bump helm-controller version for repo auth/ca support
    06296815e6 Adding PITS and Getdeck Beiboot as adopters thanks to Schille and Miworfi for the additions (#7524)
    607cbf0ad6 Bump containerd to v1.7.0 and move back into multicall binary
    239021e759 Consistently use constant-time comparison of password hashes
    9ec1789c21 Bump kube-router version to fix a bug when a port name is used
    c6dc789e25 Add support for `-cover` + integration test code coverage (#7415)
    3982213f06 add kube-* server flags integration tests (#7416)
    b32bf49541 Bump kine to v0.10.1
    c98137ddca Fix token startup test
    cf9ebb3259 Fail to validate server tokens that use bootstrap id/secret format
    7175ebe2be E2E: Startup test cleanup + RunCommand Enhancement (#7388)
    bbb8ee0b2d Add dependabot label and reviewer (#7423)
    cedefeff24 Bump cni plugins to v1.2.0-k3s1
    a736b4b1b9 local-storage: Fix permission (#7217)
    437ad128c7 Migrate netutil methods into /utils/net.go
    e1d4cff14c Enable FindString to search dotD config files (#7323)
    132b41c3bf Add v1.27 channel (#7387)
    d5f560360e Handle multiple arguments with StringSlice flags (#7380)
    a3ddff2f29 chore: Bump Trivy version
    e61fde93c1 Fix MemberList error handling and incorrect etcd-arg passthrough
    91afb38799 Retry cluster join on "too many learners" error
    f1b6a3549c Fix stack log on panic
    c44d33d29b Fix race condition in tunnel server startup
    1ca035accc Add e2e test for --disable-agent
    31a6386994 Improve egress selector handling on agentless servers
    5348b5e696 Improve error message when CLI wrapper Exec fails
    bbda54b332 Add longhorn storage test (#6445)
    0247794aa9 go generate
    0bbc6ad3f0 Bump traefik to v2.9.10
    1ac03aad43 Add integration tests for etc-snapshot server flags and refactor /tests/integration/integration.go/K3sStartServer (#7300)
    ef648b7a5d Bump Runc and Containerd (#7339)
    9539147ee1 Bump k3s-root for aarch64 page size fix
    ad41fb8c96 Create CRDs with schema
    bc5b42c279 Cleanup help messages (#7369)
    f076080b2b Bump cri-dockerd (#7347)
    87f0dc5dd3 update channel server for april 2023 (#7327)
    66fcca66cb ensure that klog verbosity is set to the same level as logrus by repeatedly settting it every second during k3s startup
    36699bbd60 Changed command -v redirection for iptables bin check
    944f811dc5 v1.27.1 CLI Deprecation (#7311)
    f2bde63eea Kubernetes v1.27.1 (#7271)
    8d0255af07 Bump Trivy version (#7257)
    779d5f3aa2 chore: Updated the content of the file "/tmp/updatecli/github/k3s-io/... (#7256)
    554ad87c8d chore: Bump golang:alpine version (#7292)
    257fa2c54c Update to v1.26.4-k3s1 (#7282)
    d9f40d4f5b Update install script to clean iptables rules before start
    0c683720ad Update kube-router to insert iptables rules right after kubernetes ones
    6b51ed478d Fix call for k3s-selinux versions in airgapped environments (#7264)
    027cc187ce Add coreos and sle micro to selinux support (#6945)
    30638072c9 Update klipper lb to v0.4.2 (#7210)
    6c394abb32 Add make commands to terraform automation and fix external dbs related issue (#7159)
    3e3512bdae Updated kube-route version to move the iptables ACCEPT default rule at the end of the chain
    d95980bba3 Lock bootstrap data with empty key to prevent conflicts
    12091fc724 Bump actions/setup-go from 3 to 4
    2992477c4b Debounce kubernetes service endpoint updates
    ece4d8e45c Fix tests to not hide failure location in dummp assert functions
    e54ceaa497 Fix issue with stale connections to removed LB server
    5dece799df Update remotedialer to silence errors when disconnecting
    4182dcaac8 [UpdateCLI] Improve Klipper Helm and Helm controller bumps (#7146)
    127cea1f3f Upgrade helm-controller to v0.13.3 (#7209)
    d2e04b826a Don't apply hardened args to agent (#7089)
    d388b82d25 go generate
    de80c07053 Ensure that loopback is used for the advertised address when resetting
    b010db0cff Ensure that loopback is used for the advertised address when resetting
    877247a691 Bump runc to v1.1.5
    eb982bbbde Bump etcd to v3.5.7
    cee3ddbc4a Bump Local Path Provisioner version (#7167)
    ddd9665fed Improve Trivy configuration (#7154)
    fdf994dc35 [UpdateCLI] Improve workflow (#7142)
    37b3f4d25c Run go generate in local-path-provisioner Updatecli pipeline (#7181)
    8ec7d5e6b0 fix_get_sha_url (#7187)
    a99376663b Drone Pipelines enhancement (#7169)
    fb491f5ebf Update stable channel to v1.26.3+k3s1 (#7161)
    d13ee64403 Enhance `k3s check-config` (#7091)
    01ea3ff27b Update flannel to fix NAT issue with old iptables version
    c97370be6f Clean E2E VMs before testing (#7109)
    7c32f88fec Pin golangci-lint version to v1.51.2 (#7113)
    dc4a148725 Update to v1.26.3-k3s1 (#7108)
    561ec056c1 Drone: Cleanup E2E VMs on test panic (#7104)
    9980504196 Fix to Rotate CA e2e test (#7101)
    85b261096c Add automation for Restart command for K3s  (#7002)
    19ac384929 Remove Nikolai from MAINTAINERS list (#7088)
    7d2f997b3e Added multiClusterCIDR E2E test
    262cd7de0a Added IPv6 check and agent restart on e2e test utils
    15ee88964b Added multiClusterCidr feature
    822ee79eb8 Remove deprecated nodeSelector label beta.kubernetes.io/os (#6970)
    a912902aa7 Add missing kernel config checks (#6946)
    8503d0143c skip all pipelines based on what is in the PR (#6996)
    977a85559e Add support for cross-signing new certs during ca rotation
    68fcb48a35 Update/rename certs.sh; add default cert rotation script
    b7f90f389c Wait for kubelet port to be ready before setting (#7041)
    a45d081027 update stable version in channel server (#7066)
    d218068f34 Adds a warning about editing to the containerd config.toml file (#7057)
    c259403af1 Bump various dependencies for CVEs (#7044)
    e098b99bfa Update flannel and kube-router (#7039)
    c78dc4db71 Add flannel adr (#6973)
    522ad1e697 Add E2E to Drone (#6890)
    ea094d1d49 Update to v1.26.2-k3s1 (#7011)
    ee28c20b62 Bump kine to v0.9.9
    cbe4bcfeee Add test for filterByIPFamily
    cc333d8d0c Fix ServiceLB dual-stack ingress IP listing
    2156015521 Improve default umask for certs.sh
    23d98cec22 Fix CACertPath stripping trailing path components
    0c302f4341 Fix etcd member deletion
    9efa0797b7 Don't default to local K3s for startup test (#6950)
    7739c8b97e Update flannel to v0.21.1
    b8e69712a3 Updated flannel version to v0.21.0
    3d146d2f1b Allow for multiple sets of leader-elected controllers
    0d416d797d Wait for server to become ready before creating token
    290d7e8fd1 Fix access to hostNetwork port on NodeIP when egress-selector-mode=agent
    ddcc4d4034 go generate
    c6d0afd0cb Check for existing resources before creating them
    32d62c5786 Use default address family when adding kubernetes service address to SAN list
    a92f163c9d Add NATS to the list of supported data stores (#6876)
    b43dd7746d Add CI test
    c900089e88 Add ADR
    87f9c4ab11 Ensure that node exists when using node auth
    992e64993d Add support for kubeadm token and client certificate auth
    373df1c8b0 Add support for `k3s token` command
    7d49202721 Ignore value conflicts when reencrypting secrets (#6850)
    be7f751863 Add e2e tests for CA cert rotation
    8a6404f97c Add basic test for custom CA certs
    9b6b72941f Clarify ADR based on design review feedback
    f13768c247 Add ADR
    215fb157ff Add `certificate rotate-ca` to write updated CA certs to datastore
    3c324335b2 Add utility functions for getting kubernetes client
    58d40327b4 Fix CA cert hash for root certs
    0919ec6755 Ensure cluster-signing CA files contain only a single CA cert
    1ec242d816 Add example certificate generation script
    7e59376bb9 Fix check for (open)SUSE version (#6791)
    ee007bc7cf Bump deps: trivy, sonobuoy, dapper (#6807)
    bb353f5d2b Fix reference to documentation (#6860)
    7cad3db251 E2E: Consoldiate docker and prefer bundled tests into new startup test (#6851)
    32086717fc Ensure flag type consistency (#6852)
    750cff561d Bump vagrant boxes to fedora37 (#6832)
    9fcc7c0db8 Fix cronjob example (#6707)
    0d4caf4e24 Wait for cri-dockerd socket (#6812)
    1c6fde9a52 go generate
    369b81b45e Honor Service ExternalTrafficPolicy
    94d1a87509 Bump wrangler version for EndpointSlice support
    86e36225f5 Consolidate E2E tests and GH Actions (#6772)
    808c71a63e Add Ayedo (#6801)
    75f77ab951 E2E Rancher and Hardened script improvements (#6778)
    f0655f153e update stable channel to v1.25.6+k3s1 (#6828)
    3cb6fa5cc7 Set cri-dockerd version at build time
    f72649d1bd Bump cri-dockerd
    89f7062431 Add build tag to disable cri-dockerd
    f10af367c3 Update to v1.26.1-k3s1 (#6774)
    f19892c2d2 drone correct plugins/docker tag supporting linux/arm (#6769)
    291f8bfe00 Slow dependency CI to weekly (#6764)
    2007cdd54f generate report and upload test results (#6737)
    7bbcac92fd Bump download action to v3 (#6746)
    d71ab6317e Update stable to 1.25.5+k3s2 (#6753)
    f54b5e4fa0 Fix CI tests
    23c1040adb Bugfix: do not break cert-manager when pprof is enabled (#6635)
    a4549cf989 chore: Bump golang:alpine version (#6683)
    8340b54309 Pass through default tls-cipher-suites
    cc3583399a Add explicit permissions to workflows (#6700)
    d85952d6a0 Bump ubuntu from 20.04 to 22.04 in /tests/e2e/scripts (#6686)
    674a05478f Containerd restart testlet (#6696)
    d78e490716 Bump containerd to v1.6.15-k3s1
    e53500f37f Bump alpine from 3.16 to 3.17 in /conformance (#6687)
    c7151e8b61 Bump alpine from 3.16 to 3.17 in /package (#6688)
    3cafc8e6dd RIP Codespell (#6701)
    fd8481a29d Adjust e2e test run script and fixes (#6718)
    a298bfdb18 Add jitter to scheduled snapshots and retry harder on conflicts
    f0ec6a4c12 Exclude December r1 releases from channel server
    bc6bebc998 Bump containerd to v1.6.14-k3s1
    454440f9a3 Add Dependabot config for security ADR (#6560)
    870d9c32b0 Fix OpenRC init script error 'openrc-run.sh: source: not found' (#6614)
    97f162291a Change Updatecli GH action reference branch (#6682)
    beafd9eaff Update stable to v1.25.5 (#6618)
    8f28de259c Add initial Updatecli ADR automation (#6583)
    9e97a3b4aa Current status badges (#6653)
    fae8817655 Bump k3s-root version to v0.12.1
    0c9b43746b Preload iptable_filter/ip6table_filter
    f8b661d590 Update to v1.26.0-k3s1 (#6370)
    b5d39df929 Deprecation of `etcd-snapshot` command in v1.26 (#6575)
    d723775792 Remove deprecated flags in v1.26 (#6574)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-09-15 17:30:40 +00:00
Bruce Ashfield
7ed351dbdc docker: drop docker-ce recipe
docker-ce is now the same as moby. We've had a warning for
quite some time now, so it is time to remove the recipe.

We don't RPROVIDE docker-ce in the docker-moby recipe as
part of this removal, as all docker packages have been
RPROVIDING "docker" regardless of the variant. images and
packagelists should be using that provider, not docker-moby
and docker-ce

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-09-15 17:30:40 +00:00
Bruce Ashfield
103695c7b9 docker-moby: update to 24.0.6
Bumping moby to version v24.0.6, which comprises the following commits:

    c35376c455 volume/local: Don't unmount, restore mounted status
    5d4cc0b5b5 integration/liveRestore: Check volume content
    1d983e2e8a update golangci-lint to v1.54.2
    d2e9a19358 CONTRIBUTING.md: update links to golang docs and blog
    73f6053bb3 api: swagger: update link to Go documentation
    de13951b9d docs/api: update links to Go documentation
    377af4c9b4 Dockerfile: Windows: update Golang download domains to cut down redirects
    088cec8f0f hack: update link to GOPATH documentation
    ed2f5d1d85 c8d/builder: Don't drop fields from created image
    1d10e8633d daemon: Handle NotFound when deleting container lease
    63422515ba c8d/run: Allow running container without image
    49671250f6 c8d/commit: Don't produce an empty layer
    b83f5a89f4 Don't return an error if the lease is not found
    4ac2355d62 hack: use long SHA for DOCKER_GITCOMMIT
    ac2a80fcc3 ci(bin-image): clean up metadata
    5eef5a7f59 ci(bin-image): clean up env var handling
    aaf84dd4cf remove Dockerfile.e2e
    a99e62fa3d distribution: show image schema deprecation on all registries
    e239799583 distribution: update warning for deprecated image formats
    bb22b8a418 ci(bin-image): check repo origin
    fb6784bdf0 gha: set 10-minute timeout on "report" actions
    74bf46aea6 c8d/diff: Reuse mount, mount parent as read-only
    b76a0c7d00 c8d/export: Use ref counted mounter
    54953f2f5a integration: Add test for not breaking overlayfs
    3897724f4a volume/local: Fix debug log typo
    0c131f58ba ci(bin-image): populate DOCKER_GITCOMMIT, take 2
    448ae33f87 ci(bin-image): populate DOCKER_GITCOMMIT
    3ce0dc7e35 bakefile: Remove default value of DOCKER_GITCOMMIT
    600aa7b7a5 c8d/inspect: Ignore manifest with missing config
    5d2c383d72 remove s390x and ppc64ls pipelines
    15bd07b4fd update runc binary to v1.1.9
    cc39fb9f6b Integration test for capabilities
    bf2b8a05a0 Do not drop effective&permitted set
    e67f9dadc6 hack/make/.binary: use with-go-mod.sh
    314b84b023 hack: enable Go modules when building dockerd and docker-proxy
    72947f5022 hack: use Git-free ROOTDIR convention
    7e7bc0f1bc vendor: github.com/containerd/containerd v1.6.22
    5f0df8c534 vendor github.com/containerd/ttrpc v1.1.2
    25b709df48 windows: fix --register-service when executed from within binary directory
    b7d1e98ae7 libnet/d/bridge: Allow IPv6 ICC from any IP address
    749e687e1b integration/windows: Unskip some kill tests
    128838227e hack/test: Don't fail-fast before integration-cli
    b7c5385b81 update to go1.20.7
    4cd50eb1ed TestDaemonProxy: use new scanners to check logs
    a49bca97df Fix daemon proxy test for "reload sanitized"
    d6536d44e9 TestDaemonProxy: check proxy settings early
    a6f8e97342 Improve test daemon logging

Bumping docker-cli to version v24.0.6, which comprises the following commits:

    fab55e13c cli/command/system: fix "docker events" not supporting --format=json
    d3485b9e9 cli/registry: client.iterateEndpoints: remove check for APIVersion1
    613380299 cli/registry: fix client.pullManifestList not de-referencing manifest
    b83959e00 force TestNewHistoryCommandSuccess to use UTC timezone
    28a08a22b un-skip history test and fix golden mismatches
    8e0393932 update cli-docs-tool to v0.6.0
    efd052eb8 docs/reference: run.md: remove stray whitespace
    d9770a962 adding -c option for docker run/build in manpages
    6efe73abe cli/command/manifest: update link to Go documentation
    d97753101 man: update links to Go documentation
    e9f843bf0 docs/reference: update links to Go documentation
    cfbaee468 CONTRIBUTING.md: update links
    daeee4697 update flag-description for --cgroup-parent
    08ad72160 Update docs/command output for volume pruning
    3c4fe7b3e docs: add missing docs for "DOCKER_TLS" env-var
    dc45bcc99 Stop slowing bash init by caching plugins path slowly
    710dd00e9 replace dockerfile/dockerignore with patternmatcher/ignorefile
    bf632329d vendor: github.com/moby/patternmatcher v0.6.0
    3c6c0bce1 cli/registry/client: set actions when authn with token
    65655cc26 cmd/docker: areFlagsSupported: don't Ping if not needed
    11606268f login: Add message about using PATs
    a8987063b docs: document special host-gateway value for add-host
    c0e376854 update to go1.20.7

We refresh one patch to adapt to the new build script structure.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-09-15 17:30:40 +00:00
Bruce Ashfield
81fb357125 crun: update to v1.8.7
Bumping crun to version 1.8.7-32-gf8fa497, which comprises the following commits:

    76b80ae fix random errors
    d602fc0 build(deps): bump actions/checkout from 3 to 4
    d348000 linux: fix check for oom_score_adj
    382edc9 wasmer: inherit_stdout instead of capture
    5057f98 wasmer: use latest wasix API
    f60a903 linux: do not join already joined namespaces
    46ef792 lua: fixed luarocks package directory structure
    0e506e5 linux: add support for ridmap mount option
    44e51fa linux: honor rbind
    f6f92b8 utils: tighten check in check_fd_under_path()
    58fa192 fix typos in comments
    9e66109 linux + cgroup-systemd: fix error return values
    668f5d5 features: Support mountExtensions
    1836bed lua: rename variable to fix spelling
    2779f02 linux: support arbitrary idmapped mounts
    08def0a linux: move function definition forward
    53a9996 NEWS: tag 1.8.7
    a867e35 lua: fix missing dereference of pointer
    c90c3ca cgroup-systemd: fix error return value
    b6c8708 tests: Update expected features output
    7c524e7 features: Fix annotations formatting
    f0054ea src/libcrun: Mark we implement up to OCI 1.1.0
    59e2b84 build(deps): bump uraimo/run-on-arch-action from 2.5.0 to 2.5.1
    3a50988 use just enough arg_unused to silence -Wunused-parameter
    9864f09 Packit: enable eln builds, enable wasmedge on all non-eln builds
    cf72f8b container: fix error return value
    88441d9 linux: simplify setns with pidfd
    261a4fa mount_flags.c: regenerate
    f9f4e06 mount_flags.perf: add get_mount_flags_from_wordlist
    387d3ac packit: Build PRs into default packit COPRs
    907d032 libcrun: handle SIGWINCH by resizing terminal_fd
    57a252b nix: rename `default-nix` to `default-amd64.nix`
    5224aa2 build-aux: simplify `release.sh`
    a7102e8 github: simplify `release.yml`
    8908248 Add support for riscv64 arch
    31eeb19 cgroup: fix error return value
    fec9b0f RPM: include criu dependencies
    02ee7c4 linux: do not create error twice
    c786d4c linux: simplify error handling
    c972772 linux: do not write twice errors
    74a3874 linux: use helper functions instead of custom read/write
    35a0166 linux: define helper to ack on the sync socket
    c3e518e libcrun: drop symbol for crun_make_error

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-09-15 17:30:40 +00:00
Bruce Ashfield
d79b200eda cri-tools: update to v1.28.0
Bumping cri-tools to version v1.26.0-318-gd5f3f2df, which comprises the following commits:

    71beb1da Fix containerd tests
    7d7fd9bb add --pinned flag for `crictl images`
    f74240d3 Bump github.com/google/uuid from 1.3.0 to 1.3.1
    25ae10aa `crictl images -v` prints Pinned when image is pinned
    163da8b9 Move events streaming test to own suite with BeforeEach and AfterEach
    5461a963 Validate template
    aa7bd9a9 Fix tests
    88b0bedc Update cmd/crictl/events.go
    3a881ad2 Address review comments
    459ff574 Remove the Kubernetes incubator reference from README.md
    9d084877 Vendor Kubernetes v1.28.0
    b703e6a9 Add crictl events command
    7f5104d9 Bump latest version in README.md
    552f7387 Use previous and latest tag from git in release script
    db0bc1a3 Vendor Kubernetes v1.28.0-rc.1
    2b86addd Bump github.com/opencontainers/runc from 1.1.8 to 1.1.9
    26d35da6 Fix seccomp value in test
    a8a71d9f statsp: enhance description
    e373e4a8 crictl: add metricsp command
    5b337756 Dedup test code and activate linter
    ba784045 Bump golang.org/x/net from 0.12.0 to 0.14.0
    86ca3498 Bump golang.org/x/sys from 0.10.0 to 0.11.0
    306ebdfa crictl: deduplicate display boilerplate
    16975aba Make `haircommander` an approver

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-09-15 17:30:40 +00:00
Bruce Ashfield
5569d65881 cri-o: update to release 1.28.0
Bumping cri-o to version v1.28.0, which comprises the following commits:

    23dec8c7d version: bump to v1.28.0
    c104a0608 build(deps): bump github.com/containers/storage from 1.48.0 to 1.49.0
    5524b65d3 add info about pulling image before doing the tutorial
    922573ffe build(deps): bump crate-ci/typos from 1.16.6 to 1.16.8
    67724cb6f build(deps): bump github.com/containers/podman/v4 from 4.6.0 to 4.6.1
    a2d46ae01 build(deps): bump github.com/containers/ocicrypt from 1.1.7 to 1.1.8
    7e3522a9c Added a flag internal-repair
    39ea33e29 feat: Added a feature to check at reboot time shutdown was clean or not, If it was not clean then apply repair logic
    c5def7f72 build(deps): bump crate-ci/typos from 1.16.5 to 1.16.6
    b873985b8 Add `conmon` to ppc64le static bundle
    3e3f70c22 Update install.md
    9c3d622a6 Vendor Kubernetes v1.28.0
    a7f160b49 build(deps): bump crate-ci/typos from 1.16.3 to 1.16.5
    d2fa125a4 Update nixpkgs and use overlay
    80fdf486e Add containers_events_dropped_total metric
    e19002329 Fix indentation in installation instructions
    94f5e75c8 Update cri-tools to v1.28.0
    a8d7c29e1 Vendor Kubernetes v1.28.0-rc.1
    23f51c3e1 Update OWNERS_ALIASES
    f1bb83127 Update runc to v1.1.9
    581a388ac build(deps): bump crate-ci/typos from 1.16.2 to 1.16.3
    5022d956a test/image.bats: add test for checking crun-wasm workflow
    05ef7a189 *: add platform_runtime_paths to RuntimeHandler
    6a0c4b9ec build(deps): bump github.com/containers/image/v5 from 5.26.1 to 5.27.0
    f18d122e8 Revert "devices: fill the FileMode field in spec"
    8937245b0 build-static: misc fixes needed for 1.25.4 generation
    abfc2d616 build(deps): bump crate-ci/typos from 1.16.1 to 1.16.2
    3f06640cf contrib/test/ci: add crun-wasm
    3a9232c62 build(deps): bump google.golang.org/grpc from 1.56.2 to 1.57.0
    bb98e2b2a Set mount type HostToContainer for mounts that include container storage root
    309d045ec add script bumping
    927843ea4 test/metrics: simplify oom test, add debug
    64fdfbcaa build(deps): bump github.com/opencontainers/image-spec
    15a586215 build(deps): bump github.com/opencontainers/runtime-spec
    f30ef84ad build(deps): bump github.com/onsi/gomega from 1.27.8 to 1.27.10
    ecd7f9a3e cri: implement RuntimeConfig rpc
    2463fdf78 vendor: update Kubernetes to v1.28.0-beta.0
    edc5ece7b build(deps): bump github.com/containers/podman/v4
    ef1653c8e internal/config/seccomp: Sync call signature of (*Config).Setup
    67b43c4b5 internal/config/cgmgr: add non-linux stubs
    1dffd7e71 internal/config/node: add non-linux stubs
    ecb372986 internal/config/device: add non-linux stubs
    10168b534 internal/config/nsmgr: add non-linux stubs
    8edfbfd45 internal/config/capabilities: add non-linux stubs
    2bd7fcbd8 internal/config/apparmor: add non-linux stubs
    da69490d0 oci: update unit tests for new stop code
    be5bac87b oci: simplify stopping code
    7371b1e77 oci: don't return ErrContainerStopped from StopContainer
    c0e34644c build(deps): bump github.com/containers/buildah from 1.31.0 to 1.31.1
    41b13e28d Fix ImageRef field for containers to default to an image ID
    930f49889 runc: 1.1.7 -> 1.1.8
    b563cd728 Add Adobe to ADOPTERS.md
    3bc609eb1 build(deps): bump sigs.k8s.io/release-sdk from 0.10.2 to 0.10.3
    4e0f88970 build(deps): bump github.com/opencontainers/runc from 1.1.7 to 1.1.8
    e6af91f6a oci: change IsAlive to Living
    320671ed2 devices: fill the FileMode field in spec
    126bd4ca9 build(deps): bump crate-ci/typos from 1.16.0 to 1.16.1
    b79391fe1 Update bats to v1.10.0
    5e86a5261 build(deps): bump github.com/go-chi/chi/v5 from 5.0.8 to 5.0.10
    92e1d1910 Bump vendored Podman to v4.6-rc2
    a3d229acf internal/factory/container: get CDI devices from CRI field.
    21181672b Add Debian 12 as a supported OS to the install doc
    b7c826d38 build(deps): bump github.com/containers/common from 0.55.1 to 0.55.2
    151572a56 build(deps): bump github.com/container-orchestrated-devices/container-device-interface
    c0c7ce5ae Add OpenSSF best practices badge in favor of CII
    0d92db47e build(deps): bump golang.org/x/net from 0.11.0 to 0.12.0
    70e5b76ca build(deps): bump google.golang.org/grpc from 1.56.1 to 1.56.2
    79859a9d9 build(deps): bump crate-ci/typos from 1.15.10 to 1.16.0
    7ebe2f614 Update vendored Kubernetes to v1.28.0-alpha.4
    c28303fad container_test: fix "AddCapabilities ALL" test case
    e176397c8 vendor: drop podman replace and update runc
    eff07b834 Run irqbalance tests in serial within the actual suite
    059dce220 build(deps): bump crate-ci/typos from 1.15.9 to 1.15.10
    d43833d61 Bump bats in ci jobs to latest release
    66ac754c7 build(deps): bump github.com/containers/buildah from 1.30.0 to 1.31.0
    59952bf00 build(deps): bump github.com/containers/common from 0.54.0 to 0.55.1
    ff3bb58db build(deps): bump crate-ci/typos from 1.15.7 to 1.15.9
    4fe0b8164 build(deps): bump github.com/containers/image/v5 from 5.26.0 to 5.26.1
    cb51739b1 server: use platform struct to set OS details
    bac73aa42 Pre-check request values on container creation
    5a85cfc95 Remove non existent Debian builds from install instructions
    73cf5597a test: fix make mockgen test failure
    dfdd2acde vendor: update release-sdk to v0.10.2
    abcf50239 build(deps): bump google.golang.org/grpc from 1.55.0 to 1.56.1
    9c78a1e23 vendor: update containers/storage to v1.48.0
    87b126342 build(deps): bump github.com/intel/goresctrl from 0.3.0 to 0.4.0
    8a9d4ef17 vendor: update containers/common to v0.54.0
    cb247caf5 build(deps): bump github.com/containers/image/v5 from 5.25.0 to 5.26.0
    ad3dd698b build(deps): bump google.golang.org/protobuf from 1.30.0 to 1.31.0
    b8bb276a0 build(deps): bump github.com/uptrace/opentelemetry-go-extra/otellogrus
    0882a1dcb build(deps): bump crate-ci/typos from 1.15.6 to 1.15.7
    6b9e49d3b Try to find `CONTAINER_CNI_PLUGIN_DIR` by binary lookup
    40bbe8218 vendor: fix vendoring issue
    f6317807c typos: add WRONLY to the list of extend-ignore-re
    6a10113c7 build(deps): bump crate-ci/typos from 1.14.12 to 1.15.6
    1062a4cd3 build(deps): bump ossf/scorecard-action from 2.1.3 to 2.2.0
    91d6bd38b vendor: bump github.com/onsi/ginkgo/v2 to 2.11.0
    7f66c1428 build(deps): bump cachix/install-nix-action from 21 to 22
    d0526337e vendor: bump github.com/urfave/cli/v2 to 2.25.7
    7a2b9a220 vendor: bump golang.org/x/sync to 0.3.0
    ba0751938 vendor: bump golang.org/x/net to 0.11.0
    9f0680cde vendor: bump github.com/prometheus/client_golang to 1.16.0
    67a132dc6 runtime handler hooks: run default hook when container stops gracefully
    49d9efe8b vendor: bump github.com/stretchr/testify to 1.8.4
    001733570 vendor: bump github.com/sigstore/rekor to 1.2.1
    d274dd121 Use a variable to manage the version of kata used for testing.
    4a7d0857b Update supported version and variable guide for adding repository
    0534d7eff governance: tweak voting behavior
    bfc7cf55a Use kata 3.0 for testing
    db4b8eaab kata tests: Enabling more than one test file for kata tests.
    0f08aeb6f kata tests: Update list of skipped tests for the ctr.bats file
    4310e3342 Modify ansible files to re-enable kata tests
    8224bd8a5 build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
    f84eb7874 Move reload watcher into `Server`
    e3b7406b9 Update golangci-lint and config
    159aaf6c6 utils: make this package build on non-linux platforms
    c088d69aa fix function name in comment
    c702bb78a build(deps): bump DavidAnson/markdownlint-cli2-action from 10 to 11
    098fbebf7 Add a test for log linking
    5620764ae linklogs: add support for symlinking container directory
    5d7ecfe4b Add support for linking pods logs
    a7d314bea build(deps): bump ossf/scorecard-action from 2.1.2 to 2.1.3
    e614bc756 server: ensure pod labels are present
    d84cc85c5 build(deps): bump github.com/BurntSushi/toml from 1.3.1 to 1.3.2
    72b735603 OCPBUGS-14750: Pod termination must succeed when a hook fails
    98c43d537 Add OSFF scorecard action
    85c7e712e main: Added a call to GarbageCollect
    ccb91bc8a docs: fix eol test
    08f7c0776 build(deps): bump github.com/onsi/gomega from 1.27.7 to 1.27.8
    f2feb7c6f Use staging k8s.io/kubelet/cri/streaming package
    72011b3c4 Add support for namespaced signature policies
    3939fba97 Apply markdown linting, cleanup docs and fix broken links #6890
    96e6aed74 Apply markdown linting on the tutorials folder #6890
    2ead2413a Apply markdown linting on the contrib folder #6890
    5d7b64018 Add markdown linter action #6890
    d58f408f5 test: fix timeout metric test
    5f74e7994 build(deps): bump github.com/BurntSushi/toml from 1.3.0 to 1.3.1
    c87b11115 server: do not take lock to populate pid in container status and inspect
    28b34889a build(deps): bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3
    b373909cf build(deps): bump github.com/containerd/containerd from 1.7.1 to 1.7.2
    d456a11ef crio: deprecate config migration
    259e7980c metrics: add metric for resource stalled at stage
    85a4ba091 build(deps): bump crate-ci/typos from 1.14.11 to 1.14.12
    75aacdb04 Drop support for path based seccomp profiles
    e18e2e90a test/helpers: rm useless code
    b7d1c2e61 test/helpers: use cli to set container dirs
    459372c24 test: adapt for sched_load_balance disable after stop
    6da8e46b1 runtime handler hooks: add DefaultCPULoadBalanceHooks
    23b9179f9 server: call hooks and NRI in stopContainer
    e1c68ea2a Update `README.md` version table
    56ac8ac79 crio: remove DefaultsPath config feature
    b2a20a418 server: call hooks on infra container creation
    2efd04aa4 high perf hooks: workaround libcontainer quirk when disabling cpu quota
    9ec701691 cgmgr: export CrioPrefix and use containerCgroupPath more
    775690b1e build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.5 to 2.9.7
    cf7e0946e tests/timeout: skip for conmon-rs
    c1c431836 ci/gha: add space-at-eol check, fix existing ones
    0a35354c4 build(deps): bump github.com/BurntSushi/toml from 1.2.1 to 1.3.0
    65792546b ci: bump shellcheck to 0.9.0
    6b2f35e2c test: fix a few cases of SC2086
    d6b793c46 contrib/kube-local/kube-local: rm unreachable code
    b6014826c test/copyimg: use log.Fatalf
    587e3d595 test/*.bats: rm useless echo "$output"
    bdb765635 test: rm explicit $status checks
    933e33c1c test: simplify assigning IDs
    22978429a test/status.bats: simplify exit code checks
    ff7bc1b52 test: simplify non-zero exit status checks
    0bf509d35 test/cdi.bats: rm run_cmd, use run
    21e5dcebe test/nri.bats: fix checking exit code
    2fab13028 test/README.md: fix wrong bats example
    9c2fcb3bd test/*bats: drop fail()
    84ee0c931 Fix using ! in bats tests
    045c026da test/timeout: fix "dup ctr" test
    1da9bf5f7 ci: require bats 1.9.0
    c5a1c1b1e test: separate var setting and img preload
    7b9e5201b ci: bump bats to 1.9.0
    9ad33da53 build(deps): bump github.com/containers/podman/v4 from 4.5.0 to 4.5.1
    2604665cc Update nix and nixpkgs
    792a5d0ad test: limit number of parallel jobs
    1cc1958de test/cgroup: fix for cgroupfs
    aa86e94f0 ci/gha: fix double caching
    47c13e037 [FEAT] Add new parameter disable_hostport_mapping in CRI-O
    df7df847d build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
    f7f085f6f Makefile: Remove GOPATH references
    1eeaad851 build(deps): bump cachix/install-nix-action from 20 to 21
    7cc3e206c build(deps): bump github.com/onsi/gomega from 1.27.6 to 1.27.7
    3b5c9f115 build(deps): bump crate-ci/typos from 1.14.10 to 1.14.11
    7003312b0 OCPNODE-1286: Add a CI job to run cri-o e2e tests by enabling the evented pleg feature
    47958dc0b Update crun to v1.8.5
    9b6a4cff7 Wrap CRI errors on image pull
    defdf1c9e build(deps): bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2
    6a3ee4e6b docs: update cri-o podman doc and remove stale information
    7ed2cfc7f deps: bump runc to 1.1.7
    f59c1f72a sandbox: Handle PodLinuxOverhead and PodLinuxResources CRI fields
    f5e58c0ea build(deps): bump crate-ci/typos from 1.14.9 to 1.14.10
    1009668bb build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3
    42e0f7fac go.{mod,sum}, vendor: update NRI.
    d97ac8a10 contrib/test: reenable Statefulset Basic tests
    3761965f8 contrib/test: re-enable block volmod tests
    003edc26c high perf hooks: disable CPU quota with libcontainer as a pre start hook
    a875ef486 test: add test for cpu-quota.crio.io
    e1c3cf960 Check and fix typos in CI
    fa57ffd3e *: switch to go-chi/chi mux
    6330b1d5f build(deps): bump github.com/cloudflare/circl from 1.1.0 to 1.3.3
    786109a6e build(deps): bump github.com/containerd/containerd from 1.7.0 to 1.7.1
    ecc712850 Support image policy verification error
    ccaef6a7d build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.4 to 2.9.5
    484870532 build(deps): bump sigs.k8s.io/release-utils from 0.7.3 to 0.7.4
    3480e9efa Fix GitHub action `bundles` test
    937ed8cf6 - Convert status cli as a subcommand of crio - Moved commands to the internal criocli package and used them in the crio and crio-status binaries - Adding the status subcommands directly to the  binary
    a247c52d9 pkg/config: update the description for templateStringCrioImagePinnedImages
    4fadec5f1 internal/storge: fix CompileRegexpsForPinnedImages test case
    5e751fda3 vendor: fix vendoring
    5ecc82e6f contrib/metrics-explorer: fix nested modules
    640624ec9 Update CNI plugins to v1.3.0
    9fc177ed4 build(deps): bump golang.org/x/net in /contrib/metrics-exporter
    8b230dec7 clients connected to container event stream now receive the same data
    3fd71bdc9 vendor: fix CI due to incosistent vendoring
    20fd7770e fix kubectl version in bug report template
    21b47b11c *: update sandbox/pause image to 3.9
    edbd4890f internal/storage: add sandbox/pause image to the list of pinned_images
    b0531365f build(deps): bump github.com/containernetworking/plugins
    22ad8957b Changes to build binaries for ppc64le architecture.
    32ec246ba Update README.md and associated files
    f10ea341d build(deps): bump golang.org/x/net from 0.9.0 to 0.10.0
    c9bb988d1 *: fix warnings related to gosec
    0e65290c4 .github/worflows: add go vulnerability management check for cri-o
    f9abf50c9 pkg/config: reload pinned_images when the new config is provided
    bbe9a7a2c *: add support for pinned_images in crio configuration
    dfcf222c3 refactoring vars
    386509caf Use native crierrors package for registry unavailable
    a90d00103 build(deps): bump golang.org/x/sys from 0.7.0 to 0.8.0
    16ab25339 Vendor latest Kubernetes master
    6a095aef7 build(deps): bump google.golang.org/grpc from 1.54.0 to 1.55.0
    5c064914f build(deps): bump golang.org/x/sync from 0.1.0 to 0.2.0
    639b6dddf OWNERS: add sohankunkerkar to cri-o-reviewers
    4477a804b tests: add a fake pinns call to delay things and cause the timeout
    6fa761497 tests: use crictl binary directly when checking its capabilities
    1ff3303df cni: configure cgroupPath capability arg
    e52e63a41 vendor: bump ocicni to tip
    914763fb1 Remove vendor specific changes
    08cd56fc9 Migrate image registry to registry.k8s.io
    3311658af build(deps): bump github.com/uptrace/opentelemetry-go-extra/otellogrus
    02fe074f2 build(deps): bump github.com/onsi/ginkgo/v2 from 2.9.2 to 2.9.4
    0b8a2c068 build(deps): bump github.com/sigstore/rekor from 1.1.0 to 1.1.1
    660b63bd7 cgmgr: set sched_load_balance to disabled on sandbox cgroup
    5a1707e4c test/pod.bats: update to current setup
    f83a4faba cgmgr: create cgroups for systemd cgroup driver for dropped infra pods
    f21e178f8 build(deps): bump github.com/prometheus/client_golang
    bf23f5c01 Support `RegistryUnavailable` type
    e80464e07 Update generated docs
    ed9c419e7 OWNERS: allow cri-o reviewers to approve dependabot PRs
    58c101634 build(deps): bump github.com/urfave/cli/v2 from 2.25.1 to 2.25.3
    a4fc119af .github/workflows: remove auto-approve workflow
    a0009cb25 build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
    541b6563d Extend cpu-c-states.crio.io annotation to add max latency
    2417374a6 build(deps): bump k8s.io/klog/v2 from 2.90.1 to 2.100.1
    249c340d3 contrib/test/ci: fix the bin folder location for cri-tools
    cf30845e7 #6833 user ns: Fix segfault while constructing id mappings
    38774e14a Use ImageRef instead of ImageName for restore
    1f224d1e0 build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
    7c6676f02 contrib/test/ci/build: use `force:yes` while linking crictl/critest
    c9cc1529f .github/workflows: fix the github_token field
    a1c09ad99 .github/workflows: fix the token field
    30ddd6d89 Fix events generated by Evented PLEG
    b8d8ff14b Update c/common to v0.53.0
    b34038f8f build(deps): bump actions/setup-go from 3 to 4
    4c828dc48 build(deps): bump github.com/opencontainers/runtime-spec
    928d5d49c build(deps): bump github.com/prometheus/client_golang
    e806005d6 test/network: skip flaky test running on a node with cgroupv2
    e914f0e15 test: combined oom test to avoid CI flake
    d5048e7ff test/seccomp: fix the syscall
    473ee6b73 contrib/test/ci: remove duplicate code
    a1c6ae7e4 test/*: consolidate images used for integration tests
    25fb4fa76 build(deps): bump github.com/Microsoft/go-winio from 0.6.0 to 0.6.1
    a950c837d Download more dependencies instead of vendoring
    839bd1203 build(deps): bump github.com/containers/conmon-rs from 0.5.0 to 0.5.1
    edbe9c27e build(deps): bump github.com/go-logr/logr from 1.2.3 to 1.2.4
    e53dcc003 Stop vendoring release notes tool
    1c26776cb .github/workflows: auto approve dependabot PRs
    e967a178c user ns: fix segfault when host id mapping is empty
    19c0b4d7b server: fix failing tests
    edf6a88a9 build(deps): bump k8s.io/release from 0.15.0 to 0.15.1
    7a612bc4b Allow restoring of containers with different names
    86b36ee6e build(deps): bump lumaxis/shellcheck-problem-matchers from 1 to 2
    6da5b1272 build(deps): bump actions/stale from 7 to 8
    1c1cfb92a Fix Flannel PodCIDR in kubeadm tutorial
    bac3a79b6 adding support for configmap namespace
    603f176a0 Add debug to identify when a relabel was not requested
    f9fa10915 Update tutorials/debugging.md
    75c8b181b Added documentation to force the Go garbage collector for CRI-O
    11f5c4326 Remove remnants of CONTAINER_MANAGE_NS_LIFECYCLE

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-09-15 17:30:39 +00:00
Bruce Ashfield
13fe43d1e1 containerd: update to 1.7.5
Bumping containerd to version v1.7.5-8-g86dc86e62, which comprises the following commits:

    ed4bac11e Blockfile: Enlighten blockfile copy on Darwin
    4d1cfbbdd Revert "log: define G() as a function instead of a variable"
    a34e93241 make repositories of install dependencies configurable
    b449440a4 CRI: Support Linux usernames for !linux platforms
    503ab21bf go.mod: github.com/containerd/continuity v0.4.2
    93b23eb10 Prepare release notes for v1.7.5
    fb1292c8d Bump version to v1.7.4
    7a0cae3ca [release/1.7] Prepare release notes for v1.7.4
    537d7526e integration: issue7496 case should work for runc.v2 only
    0f4885c16 Add configurable mount options to overlay
    8804a27d7 feat: make overlay sync removal configurable
    5add172be Vagrantfile: add strace tool
    207e28f36 integration: add ShouldRetryShutdown case based on #7496
    b4f480fb3 pkg/cri/sbserver: fix leaked shim issue for podsandbox mode
    88ff575c5 pkg/cri/server: fix leaked shim issue
    9f61dfb7c integration: add case to reproduce #7496
    2a9ae3c51 log: swap logrus functions with their equivalent on default logger
    01445bb73 log: add package documentation and summary of package's purpose
    932795f45 log: make Fields type a generic map[string]any
    707ca94d8 log: add log.Entry type
    0a79e67e4 log: define OutputFormat type
    dbbe28b7d log: define G() as a function instead of a variable
    93b6cb784 log: add all log-levels that are accepted
    e8e086e02 log: group "enum" consts and touch-up docs
    7aa4f8fdc log: WithLogger: remove redundant intermediate var
    bfdce4ce4 log: SetFormat: include returns in switch
    6621e0888 log: remove testify dependency
    df76aaede removes/docker: remove unnecessary conversion (unconvert)
    1c2dd5198 Remove temporary replace
    2bf6bd143 vendor: update github.com/containerd/continuity
    30a163086 snapshots|pkg: umount without DETACH and nosync after umount
    c9eebe3d1 mount: support direct-io for loopback device
    1c2977db0 Modify loopback size
    cf9c78d2d snapshots/blockfile: fix lint issue
    b823b4f54 snapshots/blockfile: deflaky the testsuite
    6daeceb11 snapshots/blockfile: use passed in dst in scratchGenerator
    99b61aee3 snapshots/blockfile: use loop if options is empty
    fd39769ac Add mount options to blockfile snapshotter
    8d732c6c2 Add sync before unmount on snapshotter layer test
    8472a407e Add blockfile snapshotter to snapshotters doc
    6740d77ca Add blockfile as a builtin
    07cc24b32 Add blockfile snapshotter
    32e3b76ee Add diffservice to contrib
    661e505c8 Add proxy differ
    af79c07fd update runc binary to v1.1.9
    c0b1c8f74 fix ci Linux Integration test fail
    4e97a115f cri: Don't use rel path for image volumes
    34a5d0330 fix: allow attaching to any combination of stdin/stdout/stderr
    c5e7b84c0 update to go1.20.7, go1.19.12
    2eaeb3205 Fix ro mount option being passed

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-09-15 17:30:39 +00:00
Bruce Ashfield
dae8061c08 conmon: update to 2.1.8
Bumping conmon to version v2.1.3-87-g6d88cb3, which comprises the following commits:

    6d88cb3 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.12.0
    00e08f4 bump to v2.1.8
    57d5e7f fix(deps): update module github.com/containers/storage to v1.48.0
    adc748c cli: log parsing errors to stderr
    b0bdc23 Update nix and use an overlay
    04cf7ba chore(deps): update dependency containers/automation_images to v20230809
    ccdae54 gh actions: bump to go 1.21
    4e61870 gh actions: drop perma-failing jobs
    730d92c fix(deps): update module github.com/onsi/ginkgo/v2 to v2.11.0
    73ab92e Changes to build conmon for `riscv64`
    53b3691 stdio: ignore EIO for terminals
    77ce312 refactor: handle a broken pipe with write_sync_fd
    fa67ce6 ensure console socket buffers are properly sized

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-09-15 17:30:39 +00:00
Bruce Ashfield
48b63ed575 buildah: update to 1.31.3
Bumping buildah to version v1.31.1-23-g0926e05c3, which comprises the following commits:

    f449589dd [release-1.31] Bump to v1.31.4-dev
    3ae75d4a4 [release-1.31] Bump to v1.31.3
    68fa52ca5 [release-1.31] Bump c/common 0.55.4, c/image 5.26.2, c/storage 1.48.1
    140f028d6 rpm: spdx compatible license field
    20b479ec4 RPM: fix buildtags
    d1e3a7bf3 [release-1.31] Bump to v1.31.3-dev
    d4d1d7513 [release-1.31] Bump to v1.31.2
    4d9260cc3 [release-1.31] Bump to v1.31.2-dev
    800b1549b [release-1.31] Bump to v1.31.1
    0a63bc63d [release-1.31] Remove zstd:chunked from man, bump c/common to v0.55.3
    98f684ff3 [CI:BUILD] Packit: add fedora-eln targets
    708c07761 [CI:BUILD] RPM: build docs with vendored go-md2man
    68fa9389a packit: Build PRs into default packit COPRs
    95e1dfb3d [CI:BUILD] Packit: remove pre-sync action
    806fcccee CI:BUILD] RPM: define gobuild macro for rhel/centos stream

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-09-15 17:30:39 +00:00
Bruce Ashfield
22989818f3 runc-docker: update to 1.9.0
Bumping runc to version v1.1.9-2-g26a98ea2, which comprises the following commits:

    11737f55 VERSION: back to development
    ccaecfcb VERSION: release 1.1.9
    f44190e0 libct/intelrdt: check if available iff configured
    6cf9ac15 libct/intelrdt: skip remove unless configured
    4796f49c libct/intelrdt: elide parsing mountinfo
    6a7a6a57 libct/intelrdt: skip reading /proc/cpuinfo
    7c83dbe6 libct/intelrdt: delete IsMBAScEnabled()
    5ebcfa62 [1.1] libct: rm intelrtd.Manager interface, NewIntelRdtManager
    69473d0a libct: rm TestGetContainerStats, mockIntelRdtManager
    dfdc7d07 libct/intelrdt: explain why mountinfo is required
    5ba1b8ec libct/intelrdt: faster init if rdt is unsupported
    a5407b9a libct/intelrdt: remove findMountpointDir test
    dc8d0cc1 libct/intelrdt: wrap Root in sync.Once
    929d04fc libct/cg/fs2: use `file` + `anon` + `swap` for usage
    bdbfe042 ci: bump golangci-lint, remove fixed exception
    d398ad2a gha: disable setup-go cache for golangci job
    5888c55d ci/gha: rm actions/cache from validate/deps job
    a47c15b4 build(deps): bump actions/setup-go from 3 to 4
    44a53f08 ci: fix TestOpenat2 when no systemd is used
    cff41a89 ci: fix TestNilResources when systemd not available
    37405ca0 Fix running tests under Docker/Podman and cgroup v2
    1c524242 [1.1] ci/gha: rm unsup Go 1.19.x, add 1.21.x
    ac310917 ci/cirrus: improve host_info
    ecccc432 [1.1] ci/cirrus: use Go 1.19.x not 1.19
    bb2401ee [1.1] ci/cirrus: use Go 1.20
    aaed58c8 add a test case about missing stricky bit
    3d3a2b38 fix some file mode bits missing when doing mount syscall

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-09-15 17:30:39 +00:00
Bruce Ashfield
606fe98a98 runc-opencontainers: update to 1.9.0
Bumping runc to version v1.1.9-2-g26a98ea2, which comprises the following commits:

    11737f55 VERSION: back to development
    ccaecfcb VERSION: release 1.1.9
    f44190e0 libct/intelrdt: check if available iff configured
    6cf9ac15 libct/intelrdt: skip remove unless configured
    4796f49c libct/intelrdt: elide parsing mountinfo
    6a7a6a57 libct/intelrdt: skip reading /proc/cpuinfo
    7c83dbe6 libct/intelrdt: delete IsMBAScEnabled()
    5ebcfa62 [1.1] libct: rm intelrtd.Manager interface, NewIntelRdtManager
    69473d0a libct: rm TestGetContainerStats, mockIntelRdtManager
    dfdc7d07 libct/intelrdt: explain why mountinfo is required
    5ba1b8ec libct/intelrdt: faster init if rdt is unsupported
    a5407b9a libct/intelrdt: remove findMountpointDir test
    dc8d0cc1 libct/intelrdt: wrap Root in sync.Once
    929d04fc libct/cg/fs2: use `file` + `anon` + `swap` for usage
    bdbfe042 ci: bump golangci-lint, remove fixed exception
    d398ad2a gha: disable setup-go cache for golangci job
    5888c55d ci/gha: rm actions/cache from validate/deps job
    a47c15b4 build(deps): bump actions/setup-go from 3 to 4
    44a53f08 ci: fix TestOpenat2 when no systemd is used
    cff41a89 ci: fix TestNilResources when systemd not available
    37405ca0 Fix running tests under Docker/Podman and cgroup v2
    1c524242 [1.1] ci/gha: rm unsup Go 1.19.x, add 1.21.x
    ac310917 ci/cirrus: improve host_info
    ecccc432 [1.1] ci/cirrus: use Go 1.19.x not 1.19
    bb2401ee [1.1] ci/cirrus: use Go 1.20
    aaed58c8 add a test case about missing stricky bit
    3d3a2b38 fix some file mode bits missing when doing mount syscall

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-09-15 17:30:39 +00:00
Kai Kang
64c7c56236 k3s: not compatible with mips
k3s depends on 'virtual-containerd' provided by containerd-opencontainers
which is not compatible with mips. So set COMPATIBLE_HOST for k3s that
not compatible with mips to align with containerd-opencontainers.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-09-15 17:30:14 +00:00
Kai Kang
33a437dc42 docker-compose: not compatible with mips
docker-compose rdepends on docker which is not compatible with mips.
So set COMPATIBLE_HOST for docker-compose accordingly.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-09-15 17:30:14 +00:00
Bruce Ashfield
113af45b75 lxcfs: add systemd to REQUIRED_DISTRO_FEATURES
lxcfs requires systemd, so we add it to the feature check.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-09-07 21:00:53 +00:00
Changqing Li
8f25bfcbae oci-image-tools: don't build for riscv64
Currently oci-image-tools has a do_compile error for riscv64. The
problem could be reproduced by:
    MACHINE=qemuriscv64 bitbake oci-image-tools

So explicitly set COMPATIBLE_HOST here to avoid it building for riscv64.
When someone interested in using this recipe for riscv64 fixes the
compile issue, this setting could be removed.

Also don't build packagegroup-container/packagegroup-kubernetes since
they depends on oci-image-tools

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-09-04 03:05:49 +00:00
Patrick Wicki
dbffe9f4c2 netavark: skip plugins in ptest
Skip the plugin tests that were introduced in 1.6.0 and lead to ptest
failure.

Signed-off-by: Patrick Wicki <patrick.wicki@siemens.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-27 13:25:09 +00:00
Patrick Wicki
898d0e9c3b netavark: require iputils for ptest
Fixes ptest not working on systems using busybox ping.

Signed-off-by: Patrick Wicki <patrick.wicki@siemens.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-27 13:25:09 +00:00
Bruce Ashfield
08435d20b1 recipes/classes/scripts: Drop SRCPV usage
bitbake has been enhanced such that SRCPV is no longer needed in
PV to handle updating git hashes and task signatures.

We can simplify our PV by dropping SRCPV

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-24 01:38:21 +00:00
Bruce Ashfield
a03c4f5845 podman: introduce README for testing/configuration
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-24 01:38:21 +00:00
Bruce Ashfield
7bd56074fe docker-compose: drop python variant
The python variant of docker-compose is no longer updated. We have the
golang version, so we drop this recipe to avoid use of an obselete and
potentially non-secure application.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-24 01:38:21 +00:00
Bruce Ashfield
78f1c22f61 skopeo: update to 1.13.1
Bumping skopeo to version v1.13.1-4-g416218f5, which comprises the following commits:

    882b087b Packit: remove pre-sync action
    3162e17e [release-1.13] Bump to v1.13.2-dev
    8ace37a4 [release-1.13] Bump to v1.13.1
    cac20311 [release-1.13] Bump c/common to v0.55.2
    d5b1f34e [release-1.13 backport] [CI:BUILD] Packit: install golist before updating downstream spec
    85d99af2 [release-1.13] Bump to v1.13.1-dev
    8b9999e1 Bump to v1.13.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-24 01:38:21 +00:00
Bruce Ashfield
dddc423fa3 runc-docker: update to 1.1.8
Bumping runc to version v1.1.8-7-gaa68c400, which comprises the following commits:

    aaed58c8 add a test case about missing stricky bit
    3d3a2b38 fix some file mode bits missing when doing mount syscall
    7c36375a Update github actions packages in validate workflow
    1fa89476 VERSION: back to development
    82f18fe0 VERSION: release 1.1.8
    ef6491ec tests/int/delete: make sure runc delete removes failed unit
    ebdd4fa6 [1.1] tests/int: add "requires systemd_vNNN"
    1188c5a1 runc delete: call systemd's reset-failed
    71e76007 libct/cg/sd: remove logging from resetFailedUnit
    3a4b3af6 tests/int/cgroups: remove useless/wrong setting
    6bc3f22a libct/cg/sd/v1: do not update non-frozen cgroup after frozen failed.
    d375351b ci/cirrus: enable rootless tests on cs9
    e1a8b52f tests/int/cgroups: filter out rdma

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-24 01:38:21 +00:00
Bruce Ashfield
ea3b6a8398 runc-opencontainers: update to 1.1.8
Bumping runc to version v1.1.8-7-gaa68c400, which comprises the following commits:

    aaed58c8 add a test case about missing stricky bit
    3d3a2b38 fix some file mode bits missing when doing mount syscall
    7c36375a Update github actions packages in validate workflow
    1fa89476 VERSION: back to development
    82f18fe0 VERSION: release 1.1.8
    ef6491ec tests/int/delete: make sure runc delete removes failed unit
    ebdd4fa6 [1.1] tests/int: add "requires systemd_vNNN"
    1188c5a1 runc delete: call systemd's reset-failed
    71e76007 libct/cg/sd: remove logging from resetFailedUnit
    3a4b3af6 tests/int/cgroups: remove useless/wrong setting
    6bc3f22a libct/cg/sd/v1: do not update non-frozen cgroup after frozen failed.
    d375351b ci/cirrus: enable rootless tests on cs9
    e1a8b52f tests/int/cgroups: filter out rdma

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-24 01:38:21 +00:00
Bruce Ashfield
5d01102077 podman-tui: update to v0.9.1
Bumping podman-tui to version v0.9.1, which comprises the following commits:

    d77db5fd bump to 0.9.1
    ad29f4fa Container create error fix when selecting a volume

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-24 01:38:21 +00:00
Bruce Ashfield
ba6e5e9db1 podman: update to 4.6.0
Bumping libpod to version v4.6.0-14-g2215847e6, which comprises the following commits:

    f05f00717 do not redefine gobuild for eln
    45fd917fa [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
    8ee1f1197 [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora >= 38
    5831bd68b System tests: add test tags
    954177e7e API: kill: return 409 on invalid state
    e4e983e7a Mention TimeoutStartSec in quadlet man page
    d68ee576e If quadlets have same name, only use first
    94431182b Bump to v4.6.1-dev
    38e6fab96 Bump to v4.6.0
    8aec5997e Update release notes for v4.6.0
    09b1da382 Ensure that we appropriately warn that TCP is insecure
    0115a4800 CI: remove build without cgo task
    598ebe8a1 libpod: use io.Writer vs io.WriteCloser for attach streams
    574b78291 top: do not depend on ps(1) in container
    255111269 api: fix doc for default ps_args
    34274ce15 Add more tests for liveness probes with default hostname & named ports
    48deafc64 Fix TCP probes when the optional host field is not given
    6817e0ae3 Add support for using port names in Kubernetes health probes
    5445bd6f0 [CI:DOCS] fix command incorrect in windows
    50195c244 [CI:DOCS] Reformat and reorder table with --userns options
    924bc7055 [CI:DOCS] Better document the default value of --userns
    e4c38e719 Add missing return after utils.InternalServerError()
    7a4bd4c95 Fix markdown in docs for podman-network-create
    7cbe41212 Fix multiple filter options logic for `podman volume ls `
    5ea019419 Should be checking tmpfs versus type not source
    b4859d283 Use constants for mount types
    39b7ac99d Fix `podman container prune` docs for `--filter`
    7ba306ec6 docs: podman-build --network add slirp and pasta
    c810420c8 docs: podman run --network mention comma separted names
    2c970dd01 network create: document --internal better
    5106b7a38 pkg/specgen: fix support for --rootfs on FreeBSD
    41f809e3e systests: quadlet: fixes for RHEL8
    061841c0c Fix windows installer
    8f05405db Podmansh: Better error, increase timeout to 30s
    2b683a400 Emergency gating-test fixes for RHEL8
    d0dee61e7 Packit: remove pre-sync action
    70e30a2be [CI:DOCS] Update RELEASE_NOTES.md with Makefile change
    b8ef289e3 Bump to v4.6.0-dev
    bfe2e0fca Bump to v4.6.0-rc2
    145748d1f Makefile: `package` -> `rpm`
    be21bc082 Update release notes
    8fffcf4d6 system tests: refactor registry code
    624bb8350 machine start: qemu: wait for SSH readiness
    732a02c57 machine start: qemu: adjust backoffs
    afe48ba36 auto update: fix usage of --authfile
    24439cdd2 [CI:BUILD] Packit: downstream task action fix
    7b3d47c3b Fix container errors not being sent via pod removal API
    9d0470f12 netavark: macvlan networks keep custom nameservers
    5583358f6 add hostname to network alias
    2aea98cab libpod: set cid network alias in setupContainer()
    d0b0c6285 Fix: cgroup is not set: internal libpod error after os reboot
    258135221 test/e2e: wait for socket
    a3a62854f api: fix slow version endpoint
    28e92b9de manifest inspect: support authentication
    e354514dc libpod: don't make a broken symlink for /etc/mtab on FreeBSD
    c81a00101 make --syslog errors non fatal
    edc51d9ff Fixes typo in the path where quadlet looks for files
    a673bb23e [CI:DOCS] uidmap man pages: fix corrupt italics
    dd7dbb826 [CI:DOCS] podman-system-service.1.md: document systemd usage
    a312553fc Use bytes size consistently instead of human size
    2ef2a671e bugfix: do not try to parse empty ranges
    662cca7cc pkg/specgen: properly identify image OS on FreeBSD
    cf5c4c9ee [CI:DOCS] Document support of pod security context IDs
    c8cfcc253 pkg/specgen: add support for 'podman run --init' on FreeBSD
    fc8f229bd Remove 'inspecting object' from inspect errors
    ee6329374 Fix readonly=false failure
    a3598ff61 pkg/specgen: Add support for Linux emulation on FreeBSD
    e30197e6f Fix up podmansh man page
    47e6ce19c Pass in correct cwd value for hooks exe
    f654f7cc7 specgen: honor --device-cgroup-rule with a new user namespace
    fcf673d5d specgen, rootless: raise error with --device-cgroup-rule
    f70189991 make image listing more resilient
    62fc35c07 Trim whitespace from unit files while parsing
    ed5618759 play.go: remove volumes on down -f
    04897ee64 Vendor c/common v0.55.2
    ff71df0e8 system service: unset listen fds on tcp
    6960a8183 [CI:DOCS] [Release Notes]: add static routes
    e4cf2afbc [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md
    c422072b6 [CI:DOCS] uidmap man pages: fix corrupt tables

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-24 01:38:21 +00:00
Bruce Ashfield
5bc9a9fc2f netavark: update to 1.7.0
Bumping netavark to version v1.7.0-49-gab03eec, which comprises the following commits:

    067bbde fix(deps): update rust crate serde to 1.0.180
    0ae529b fix(deps): update rust crate serde_json to 1.0.104
    e155cbf fix(deps): update rust crate serde to 1.0.179
    e64a5a9 fix(deps): update rust crate serde to 1.0.176
    6f5dc41 fix(deps): update rust crate clap to 4.3.19
    074de60 fix(deps): update rust crate serde to 1.0.175
    2a2d066 fix(deps): update rust crate clap to 4.3.17
    cb49b4f fix(deps): update rust crate clap to 4.3.15
    69c802a fix(deps): update rust crate clap to 4.3.12
    c627b76 fix(deps): update rust crate serde_json to 1.0.103
    747384d [CI:BUILD] Packit: remove pre-sync action
    64d55ee fix(deps): update rust crate serde_json to 1.0.102
    cc1d2aa fix(deps): update rust crate nispor to 1.2.12
    c227eed macvlan: use netlink type for bclim
    f92a065 bump netlink deps
    ba31874 fix(deps): update rust crate serde to 1.0.171
    355ad29 fix(deps): update rust crate serde to 1.0.167
    91665d4 fix(deps): update rust crate clap to 4.3.11
    dd3a221 fix(deps): update rust crate serde to 1.0.166
    0eb2033 fix(deps): update rust crate serde_json to 1.0.100
    1340988 iptables: improve error when ip6?tables commands are missing
    6f56308 fix(deps): update rust crate clap to 4.3.10
    e7518b2 fix(deps): update rust crate zbus to 3.14.1
    3455012 [CI:BUILD] RPM: Fix ELN build and cleanup spec
    1691f8c bump to v1.8.0-dev
    158e11b release v1.7.0
    6ba1f8a Update release notes for v1.7.0
    15af075 fix(deps): update rust crate tokio to 1.29
    6e06b7d netavark: make --config required for dns
    816d73d fix(deps): update rust crate serde_json to 1.0.99
    14d4c54 fix(deps): update rust crate clap to 4.3.8
    c5784bc [CI:BUILD] Packit: add Fedora downstream tasks
    d2d3092 run cargo update
    da6ee1f fix(deps): update rust crate serde_json to 1.0.97
    0d62a35 fix(deps): update rust crate sha2 to 0.10.7
    77b09a7 fix(deps): update rust crate clap to 4.3.4
    68080c7 chore(deps): update dependency containers/automation_images to v20230614
    0e976f1 fix(deps): update rust crate clap to 4.3.3
    175c095 fix(deps): update rust crate log to 0.4.19
    23c48d8 aardvark: fix missleading dns disabled log
    d31c157 firewall: add NETAVARK_ISOLATION_3 chain for strict isolation
    bb690f9 docs: fix link to getting started
    ca147fb fix(deps): update rust crate serde to 1.0.164
    871096c netlink: fix incorrect info log for del_route
    72aa0dd dhcp-proxy: apply new ip address/gateway
    2a17957 test-dhcp: fix broekn has_ip() check
    44b5a28 dhcp-proxy: actually implement renewing leases
    1a5f674 dhcp-proxy: simplify code
    f7e950b dhcp-proxy: drop macaddr dependency
    827bdd9 dhcp-proxy: remove some unused traits
    5b2662e fix(deps): update rust crate zbus to 3.13.1
    8fd57c7 fix(deps): update rust crate clap to 4.3.2
    7000903 chore(deps): update rust crate once_cell to 1.18.0
    e495d0b fix(deps): update rust crate url to 2.4.0
    3a2c8e5 fix(deps): update rust crate clap to 4.3.1
    3fcbfab chore(deps): update dependency containers/automation_images to v20230601
    be0e01e chore(deps): update rust crate chrono to 0.4.26
    3bdb499 chore(deps): update rust crate chrono to 0.4.25
    f9dce04 fix(deps): update rust crate log to 0.4.18
    8db90d8 chore(deps): update rust crate once_cell to 1.17.2
    e4e78f0 macvlan: add bclim option
    3d3563b parse_option(): return option instead of default
    e0ae9bc add no_default_gateway option
    d39db0b fix(deps): update rust crate clap to 4.3.0
    ba0cb46 chore(deps): update dependency containers/automation_images to v20230517
    62b35fd fix(deps): update rust crate serde to 1.0.163
    416853b Add ability to add static route
    d2ef6cc fix(deps): update rust crate serde to 1.0.162
    9e0e186 Cirrus: Update fedora name to match image
    11626fc fix(deps): update rust crate clap to 4.2.7
    e6ee988 chore(deps): update dependency containers/automation_images to v20230426
    85dde17 correct typo in Makefile
    8418f9b simplify path printing
    65ff4f1 fix(deps): update rust crate tokio to 1.28
    690fa8d aardvark-dns pid: return better errors
    394789f fix comment in Subnet definition
    2362e82 aardvark: no error when aardvark config is not there
    5d41c71 fix(deps): update rust crate zbus to 3.12.0
    bdf84b8 fix(deps): update rust crate clap to 4.2.4
    fced2f1 fix(deps): update rust crate clap to 4.2.2
    6aeabc0 fix(deps): update rust crate serde_json to 1.0.96
    f0d5cc8 update clap to v4
    be0e133 fix(deps): update rust crate serde to 1.0.160
    173d7ac bump to v1.7.0-dev
    2f01092 v1.6.0 release
    1d2d150 Update release notes for v1.6.0
    e1b0aa9 dhcp-proxy: fix typo for --activity-timeout
    f125bf0 chore(deps): update dependency containers/automation_images to v20230405
    8b4c678 dhcp-proxy: use better error when connection fails
    c4a216d add documentation for netavark plugins
    3ad293d add stderr example plugin to test stderr passthrough
    cee4d9f add netavark plugin driver
    b2ffb90 add example error plugin
    bc35cdd add host-device example plugin
    ab8156d plugin: add simple plugin interface
    092b9a3 netlink: add dump_addresses
    cc1730e netlink: add set_link_ns
    14a5205 dhcp-proxy: correctly exit > 0 on errors
    24698f1 fix(deps): update rust crate tonic to 0.9
    50b0fbb fix(deps): update rust crate mozim to 0.2.2
    a5eba62 fix(deps): update rust crate serde to 1.0.159
    dd0034c fix(deps): update rust crate netlink-sys to 0.8.5
    40695e6 dhcp-proxy: create socket directory only when used
    fe9ca67 dhcp-proxy: do not remove socket when running under systemd
    dca3d53 Makefile: netavark-dhcp-proxy.service use correct path
    71d128a fix(deps): update rust crate http to 0.2.9
    5d85d4e chore(deps): update rust crate once_cell to 1.17.1
    08d163e fix(deps): update rust-futures monorepo to 0.3.28
    0370986 fix(deps): update rust crate serde_json to 1.0.95
    2d7cb2a chore(deps): update dependency containers/automation_images to v20230330
    9fd64cf Disable Dependabot in favor of Renovate
    5ed1430 chore(deps): update rust crate chrono to 0.4.24
    3f3a73e build(deps): bump ipnet from 2.7.1 to 2.7.2
    1b8d361 build(deps): bump serde from 1.0.158 to 1.0.159
    a3d7d79 build(deps): bump serde_json from 1.0.94 to 1.0.95
    4f0dcc0 update,main: dont write empty space when no network_dns_servers is given
    9532644 fix(deps): update rust crate tokio to 1.27
    5ea45b7 Quit Leasing when Client disconnects
    b2aeb6c build(deps): bump mozim from 0.2.1 to 0.2.2
    f36ff11 iptables: fix incorrect debug statement
    cdf27dc build(deps): bump serde from 1.0.156 to 1.0.158
    8a1975a iptables: port fw handle wildcard address correctly
    ab6c621 chore(deps): update dependency containers/automation_images to v20230320
    2f38b17 build(deps): bump zbus from 3.11.0 to 3.11.1
    99142bf build(deps): bump anyhow from 1.0.69 to 1.0.70
    e42393c [CI:BUILD] Packit: trigger builds on commit to main branch
    c30f461 Cirrus: Invalidate v2 bin cache
    28c63f2 Include Systemd Files in RPM Package
    8ec9d4b Cirrus: Fix success failing on artifact extraction
    95c6fc4 fix lint issue with new rust version 1.68
    d84e415 Cirrus: Update to newer CI VM images
    c637b1a build(deps): bump serde from 1.0.152 to 1.0.156
    ca27aa6 combine dhcp-proxy and netavark into one binary
    cecef1e update: should allow empty network_dns_servers
    07dfcae build(deps): bump libc from 0.2.139 to 0.2.140
    bf22c29 fix aarch64 ncat flake
    98f18b8 update to mozim 0.2.1
    64bb7f0 build(deps): bump zbus from 3.10.0 to 3.11.0
    4199dc0 packit: Update build release tag correctly
    de88f04 test: move proto option into run_nc_test()
    91f3bfb test: add netns pid param to port checks
    eea98ee test: import podman code to check for ports
    9d070c8 cirrus.yaml: add new binaries in art_prep_script
    bca5370 fix netavark-dhcp-proxy binary in system unit
    31b4bb4 import netavark-proxy-dhcp tests
    c599b2e add build_proxy_client target
    c76e257 add netavark-dhcp-proxy to rpm
    a8cff4d Fix dhcp-proxy build
    8dc8c96 Merge nv-dhcp-proxy into nv
    3a365ed fix default route metric test name
    ad222b7 build(deps): bump tokio from 1.25.0 to 1.26.0
    c505c58 Support none parameter on NETAVARK_FW
    2272042 build(deps): bump anyhow from 1.0.68 to 1.0.69
    2798f06 Fix typos
    88a2a7a update netlink-packet-{route,core} to 0.15 and 0.5
    216f6f6 build(deps): bump serde_json from 1.0.92 to 1.0.93
    bbbec75 build(deps): bump zbus from 3.8.0 to 3.10.0
    70d6f33 [CI:BUILD] Packit: initial enablement
    065243d Allow custom cargo binary path
    5ce550d build(deps): bump serde_json from 1.0.91 to 1.0.92
    781b84e Cirrus: Reduce requested CPUs for compile-tasks
    9deb91b bump to version 1.0.6-dev
    dbdeb9a v1.0.5 release
    43c9bf2 release notes updates for v1.0.5
    97f91f0 build(deps): bump netlink-sys from 0.8.3 to 0.8.4
    b8fae87 build(deps): bump tokio from 1.24.1 to 1.25.0
    3919e0f build(deps): bump zbus from 3.7.0 to 3.8.0
    f688710 Switch to explicit platform list for `cargo vendor-filterer`
    67b7da4 Add renovate.json5
    c02fb16 Convert a few words to more inclusive
    102b81c build(deps): bump nix from 0.26.1 to 0.26.2
    60c08e9 Minor: Add script remote re-use comment.
    dae850f Cirrus: Fix two minor typos.
    c361afa Cirrus: Improve caching effectiveness
    f11a8fc Fix UDS path
    823e69b build(deps): bump ipnet from 2.7.0 to 2.7.1
    c55b1b3 build(deps): bump tokio from 1.23.0 to 1.24.1
    e7c41c8 build(deps): bump zbus from 3.6.2 to 3.7.0
    d690d35 build(deps): bump serde from 1.0.151 to 1.0.152
    5a19903 build(deps): bump libc from 0.2.138 to 0.2.139
    040f3d6 add ipvlan support
    058be67 fix lint issues for rust 1.66
    2524e56 update CI images
    8055fb4 build(deps): bump serde_json from 1.0.89 to 1.0.91
    f80f417 Add ability for MacVLAN dhcp
    a810489 build(deps): bump serde from 1.0.150 to 1.0.151
    53c6774 build(deps): bump anyhow from 1.0.66 to 1.0.68
    bcb52af CI: install mandown for validate
    97e90a3 fix make docs
    3eee824 build(deps): bump serde from 1.0.149 to 1.0.150
    820d538 build(deps): bump sysctl from 0.5.2 to 0.5.4
    753c3de build(deps): bump ipnet from 2.6.0 to 2.7.0
    bd1bf8b build(deps): bump zbus from 3.6.1 to 3.6.2
    a3f90ec build(deps): bump ipnet from 2.5.1 to 2.6.0
    3a1ff24 lock: stop using yanked 0.8.13 crossbeam-utils
    75b440c Cirrus: Add backup to aardvark-binary artifact DL
    a03b7b1 Bump to v1.4.1-dev
    c2a4b9a Release v1.4.0
    0e3268b Update release notes for v1.4.0
    011f899 release,make: add rule crate-publish for publishing crates.io
    302828f main: Pass config_dir as `&str`
    bb4c73d [skip-ci] GHA/Cirrus-cron: Fix execution order
    d957601 build(deps): bump serde from 1.0.148 to 1.0.149
    cece3d6 build(deps): bump nix from 0.25.0 to 0.26.1
    354450f build(deps): bump libc from 0.2.137 to 0.2.138
    8c1a071 build(deps): bump zbus from 3.5.0 to 3.6.1
    7563db2 remove verify_vendor CI task
    15894f3 chrono: use from_timestamp_opt
    0c61f05 update: add support for netavark update command
    2f0b025 Add nspath to commands
    64d762f build(deps): bump serde from 1.0.147 to 1.0.148
    d27588c build(deps): bump env_logger from 0.9.3 to 0.10.0
    46f9f59 aardvark, netavark: support network scoped dns via network_dns_servers
    c9cbc6a build(deps): bump serde_json from 1.0.88 to 1.0.89
    84b9078 Drop now unneeded futures dep
    c858e2f Make use of zbus::blocking wrappers
    84a0ddd Port to zbus 3.5
    a3c8156 Drop direct zvariant dep
    03cb6a5 remove number of .clone() calls
    581352c build(deps): bump serde_json from 1.0.87 to 1.0.88
    9dad47a fix iptables teardown
    d7d88da fix rust doc comments
    effd448 GHA: Add cirrus-cron rerun job
    ada06b4 fix new lint issues reported with rust 1.65
    2af0d9f update CI images
    f5d114d Correct dev version
    34f1488 Bump to v1.3.0-dev
    6df8139 Release v1.3.0
    53a7b00 v1.3.0 Release notes
    832098f run cargo update
    d36af04 build(deps): bump ipnet from 2.5.0 to 2.5.1
    e383f8d build(deps): bump env_logger from 0.9.1 to 0.9.3
    0cc2556 macvlan modes: use upstream consts
    e6d09ff macvlan: remove tmp interface when name already used in netns
    0789f44 Add support for route metrics
    52b1b08 Drop indirect dependency on time 0.1
    72c42b6 netlink: return better error if ipv6 is disabled
    980d68a macvlan: fix name collision on hostns
    3c03dce build(deps): bump libc from 0.2.136 to 0.2.137
    99459c1 build(deps): bump clap from 3.2.22 to 3.2.23
    8247f46 Ignore dns-enabled for macvlan
    bd18cb1 build(deps): bump libc from 0.2.135 to 0.2.136
    3f7e75e build(deps): bump serde_json from 1.0.86 to 1.0.87
    b65a35b build(deps): bump serde from 1.0.145 to 1.0.147
    885f657 netlink: check sequence_number
    795fa47 build(deps): bump anyhow from 1.0.65 to 1.0.66
    61181e5 tests: add test for verifying multiple custom dns severs
    95c982b tests: unskip exisiting test for custom dns server
    698627b build(deps): bump futures from 0.3.24 to 0.3.25
    6e04f79 netlink: improve error message on invalid netlink result
    3aac0a0 NetworkOptions::load(): do not open /dev/stdin
    f07cc04 use cargo-vendor-filterer to create vendor tarball
    d89f4bd teardown: handle errors better
    c9de5d0 error: remove unused equal code
    c11c5f8 fix broken build
    f6e0258 netavark ,aardvark: accept and populate custom dns_servers for containers
    59be422 netlink: add del_{addr,route} calls
    6646be4 error: NetavarkError use Into<String> Trait
    0417eb8 netlink: add basic unit tests
    454ebb3 bridge: do not set gateway for internal network
    c017bfe README.md: remove latest release section
    652d233 build(deps): bump libc from 0.2.134 to 0.2.135
    3166b7b build(deps): bump serde from 1.0.144 to 1.0.145
    ca5f4f6 build(deps): bump serde_json from 1.0.85 to 1.0.86
    7c93f79 Do not use ipv6 autoconf #2
    36a20bf fix test issues in podman
    0fb6ddc improve error messages
    96993f4 netlink: use low level sync api
    4881651 add simple script to measure the netavark perfomance
    4294bf6 Do not use ipv6 autoconf
    0805420 build(deps): bump tokio from 1.21.1 to 1.21.2
    060c6a6 Make build date reproducible
    08c3152 Cirrus: Use images w/ fixed-in-time rust + clippy
    3d4fe6b build(deps): bump libc from 0.2.133 to 0.2.134
    7ab86f6 build(deps): bump clap from 3.2.8 to 3.2.22
    cbc0a31 Bumping to v1.2.0-dev
    90cccc1 Release v1.2.0

We also refresh one patch, and add protobuf-c as a build depenency

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-24 01:38:21 +00:00
Bruce Ashfield
4ecc9488d1 lxcfs: update to 5.0.4 and convert to meson
This is a large update to lxcfs, that includes a move to meson as the
build backend.

We drop a couple of uneeded patches, and add a new meson specific one
as the detection of pid_* functions is failing.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-24 01:38:21 +00:00
Bruce Ashfield
6b10588476 lxc: update to 5.0.3
Bumping lxc to version lxc-5.0.3, which comprises the following commits:

    cb8e38aca Release LXC 5.0.3
    85d3f4b1d github: Update for main branch
    d195603e3 CONTRIBUTING: add a note on AI generated code
    54227bdb1 get_hierarchy: dont WARN about no usable controller
    be7efff35 github: Add DCO/target tests
    8751cd208 explicitly convert *mainloop_handler to __u64
    c16bb5b71 tests: fix parse_config_file seccomp test
    95ef57c73 src/tests: Fix container creation errors
    30c79f8a7 rename functions which clash with libsystemd's
    3801a6a3d mainloop: io_uring: disable IORING_POLL_ADD_MULTI
    fba0ae071 terminal: make a terminal FDs non-blocking
    1af412d2f file_utils: add fd_make_nonblocking helper
    eaaf041f6 file_utils: rename fd_make_nonblocking to fd_make_blocking
    d05fb8a45 setproctitle(): Handle potential NULL return from strrchr()
    709d42691 make setproctitle()'s /proc/pid/stat parsing safe
    b183d437b console-log test: make sure container is stopped before restarting
    d638d5951 tree-wide: convert fcntl(FD_CLOEXEC) to SOCK_CLOEXEC
    c12c0acb0 Allow fuse mounts in apparmor start-container.
    c93418d98 Add support for squashfs images in oci via atomfs
    3754e803f apparmor: don't try to mmap empty files
    706ee25cd initutils: use PRIu64 for uint64_t in setproctitle
    3cdd5078c lxc-net.in: fix nftables syntax for IPv6 NAT
    97bf62247 Fix strlcat's return value checks
    7c81572af Fix typo: bev_type -> bdev_type
    727adc052 drop broken lxc-test-fuzzers

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-24 01:38:21 +00:00
Bruce Ashfield
06e6947fc9 docker-distribution: update to 2.8.2
Bumping docker-distribution to version v2.8.2-2-g8728c52e, which comprises the following commits:

    ab7178cc Pass BUILDTAGS argument to go build
    a173a9c6 Add v2.8.2 release notes
    483ad69d registry/errors: Parse http forbidden as denied
    2b0f84df Revert "registry/client: set Accept: identity header when getting layers"
    5f3ca1b2 Add release notes for 2.8.2-beta.2 release
    e884644f Dockerfile: fix filenames of artifacts
    ac6c72b2 Add 2.8.2-beta.1 release notes
    ae58bde9 Fix gofmt warnings
    3f2a4e24 update to go1.19.9
    9c04409f [release/2.8] ignore deprecation of io/ioutil
    3d8f3cc4 Dockerfile: update xx to v1.2.1
    70db3a46 bump up golang version
    db1389e0 dockerfiles: formatting
    018472de dockerfiles: set ALPINE_VERSION
    19b3feb5 Update to xx 1.1.1
    14bd72bc Dockerfile: switch to xx
    2392893b bump up golang v1.17
    092a2197 [release/2.8] fix package name in Dockerfile
    22a80503 fix(ci): use go install instead of go get
    1d52366d Merge pull request #2815 from bainsy88/issue_2814
    521ea3d9 Fix runaway allocation on /v2/_catalog
    ad5991de Fix panic in inmemory driver
    38018aeb Fix CVE-2022-28391 by bumping alpine from 3.15 to 3.16

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-24 01:38:21 +00:00
Bruce Ashfield
3fe898899f crun: update to v1.8.6
Bumping crun to version 1.8.6-11-gd7ee549, which comprises the following commits:

    c786d4c linux: simplify error handling
    c972772 linux: do not write twice errors
    74a3874 linux: use helper functions instead of custom read/write
    35a0166 linux: define helper to ack on the sync socket
    c3e518e libcrun: drop symbol for crun_make_error
    080e560 features: use exported function libcrun_make_error
    5c2dedc Make the spec file parseable without copr_username defined
    73f759f NEWS: tag 1.8.6
    26ef1e0 linux: add sync before sending mounts
    71c53b0 RPM: Set Epoch only for Copr builds
    ee0e405 tests: install procps-ng for podman tests
    6a3d7a7 Packit: initial enablement
    58bb52c tests: fix cpu-weight-systemd test under a user manager
    ee111ae tests: skip test_uid_tty if no tty is attached
    74dd5f9 tests: use get_crun_path() in oci_features
    b160e2c cgroup-resources: allow setting swap to 0
    19cd8aa ps: fix segfault with pids=NULL

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-24 01:38:21 +00:00
Bruce Ashfield
08f58c3181 cri-tools: update to v1.27.1
Bumping cri-tools to version v1.26.0-279-gdd51f3b7, which comprises the following commits:

    16975aba Make `haircommander` an approver
    e3cc516b override path defaults for FreeBSD
    f8f05611 Use `UserSpecifiedImage` for seccomp tests
    a4110ef6 Bump github.com/onsi/gomega from 1.27.9 to 1.27.10
    2cffae40 Bump github.com/docker/docker
    2d4e6c27 Bump github.com/onsi/gomega from 1.27.8 to 1.27.9
    4a84e5a3 Bump github.com/opencontainers/runc from 1.1.7 to 1.1.8
    28bbd92a Switch to logrus in favor of glog
    edf8fd39 Update version in README
    dafc2b62 Add `crictl runtime-config` command
    01952e78 Use google/uuid
    183c8fa3 Fix release notes job
    cf42ba9f Drop support for docker log format
    c1e6f2eb Bump Kubernetes to v1.28.0-alpha.4
    fc7c11ed Bump github.com/docker/docker
    fcb21b99 Revert "fix listCoontainerStats not filter"
    ffb1ef1e Bump github.com/docker/docker
    505d5ce7 Bump Kubernetes to v1.27.3
    49cf12cb Bump golang.org/x/net from 0.11.0 to 0.12.0
    0aa3049e Bump golang.org/x/sys from 0.9.0 to 0.10.0
    e6438103 fix listCoontainerStats not filter
    2ee62a09 Typo fix in critest
    5b6b7180 Format print output in imagefsinfo cmd
    b432bc8d Bump github.com/onsi/ginkgo/v2 from 2.10.0 to 2.11.0
    d901bb43 Bump github.com/urfave/cli/v2 from 2.25.6 to 2.25.7
    acc3f298 Bump golang.org/x/net from 0.10.0 to 0.11.0
    5feab035 Bump github.com/urfave/cli/v2 from 2.25.5 to 2.25.6
    90b22c75 Bump golang.org/x/term from 0.8.0 to 0.9.0
    0b7c24b5 Bump google-github-actions/setup-gcloud from 0 to 1
    5c28a488 Bump actions/upload-artifact from 1 to 3
    c3a28fe2  add dependabot config to update github actions
    806c66f9 update actions using node12
    5e9d1f5d Add image build test to GitHub actions
    b80b9bde Bump github.com/onsi/gomega from 1.27.7 to 1.27.8
    8e03fbd3 Bump github.com/onsi/ginkgo/v2 from 2.9.7 to 2.10.0
    a8ca78a0 Pin `FROM` images to tags
    bde07883 Bump github.com/sirupsen/logrus from 1.9.2 to 1.9.3
    5fd98895 Migrate to field based seccomp tests
    5d362aa6 Bump github.com/onsi/ginkgo/v2 from 2.9.6 to 2.9.7
    32ba4251 added testing on 1.7
    b7e85c71 Bump github.com/onsi/ginkgo/v2 from 2.9.5 to 2.9.6
    4714253b Update critest from 1.17 to 1.27
    88a2b60b Bump github.com/urfave/cli/v2 from 2.25.3 to 2.25.5
    63e39e26 Bump github.com/docker/docker
    2c0f354e Bump github.com/docker/docker
    aeea5099 Update the incorrect link to release page in crictl.md
    ea559418 Bump github.com/onsi/gomega from 1.27.6 to 1.27.7
    7ed308a3 Bump github.com/sirupsen/logrus from 1.9.1 to 1.9.2
    f0bf767c Bump github.com/sirupsen/logrus from 1.9.0 to 1.9.1

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-24 01:38:21 +00:00
Bruce Ashfield
791ffcd5df cri-o: update to 1.27.1
Bumping cri-o to version v1.27.1-7-gab7845e07, which comprises the following commits:

    fbfca3a52 oci: update unit tests for new stop code
    6dec88e7c oci: simplify stopping code
    5b7b82f56 oci: don't return ErrContainerStopped from StopContainer
    0e4df2e9c oci: change IsAlive to Living
    92b455156 devices: fill the FileMode field in spec
    e54504a00 version: bump to 1.27.1
    a61082768 vendor: drop podman replace and actually update runc
    9c86a1269 vendor: bump runc to 1.1.6

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-24 01:38:21 +00:00
Bruce Ashfield
c82deadd3b containerd: update to 1.7.2
Bumping containerd to version v1.7.3-2-g98e8e05b6, which comprises the following commits:

    2eaeb3205 Fix ro mount option being passed
    4cb2f1515 [release/1.7] Add release notes for v1.7.3
    b461ecacf cri: memory.memsw.limit_in_bytes: no such file or directory
    14328ae03 migrate to community owned bucket
    b985f7ef1 update runc binary to v1.1.8
    f7a20e17c Move logrus setup code to log package
    7353c0286 ctr: update WritePidFile to use atomicfile
    ae7021300 shim: WritePidFile & WriteAddress use atomicfile
    186eb64b7 cri: write generated CNI config atomically on Unix
    64c3dcd8e atomicfile: new package for atomic file writes
    083f57160 capture desc variable in range variable just in case that it run in parallel mode
    a9440ce6b Use t.TempDir instead of os.MkdirTemp
    eea3440d8 use strings.Cut instead of strings.Split for parsing imageConfig.User
    eace67180 fix userstr for dditionalGids on Linux
    973778193 Update Go to 1.20.6,1.19.11
    60a6db9c2 Cirrus CI: configure apt-get to wait for locks
    6b6b0c828 bugfix(port-forward): Correctly handle known errors
    898eca21e Change http.Header copy to builtin Clone
    fa2efc406 Resolve docker.NewResolver race condition
    241514815 pkg/cri/server: Test net.ipv4.ping_group_range works with userns
    801e8c806 pkg/cri/server: Fix net.ipv4.ping_group_range with userns
    d5639a5a8 vendor: github.com/containerd/zfs v1.1.0
    403033e52 update go to go1.20.5, go1.19.10
    15d65709e ci: remove libseccomp-dev installation for nightly
    a08ae718c [release/1.7] go.mod: Update cgroups to 3.0.2
    c2c54af9d Update ginkgo to match cri-tools' version
    6281d46df seccomp: always allow name_to_handle_at
    3bf3996d9 integration/client: add timeout to `TestShimOOMScore`
    699d6701a Pinned image support
    18c6503d9 runtime/v2/runc: handle early exits w/o big locks
    dafbeb5b1 No more nondistributable layers in MS registry

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-24 01:38:21 +00:00
Bruce Ashfield
7867b58ca2 conmon: update to 2.1.7
Bumping conmon to version v2.1.3-74-g75f8ceb, which comprises the following commits:

    fa67ce6 ensure console socket buffers are properly sized
    2902909 Remove lgtm badge
    2832e4f chore(deps): update dependency containers/automation_images to v20230614
    7a7c893 log fds more permissive
    c26648e Fix close_other_fds on FreeBSD
    ebc6717 chore(deps): update dependency containers/automation_images to v20230601
    8225789 chore(deps): update dependency containers/automation_images to v20230517
    dcee6fb Update nixos image and dependencies' version.
    e907fdc Changes to build conmon for ppc64le
    5510eb0 fix compile regression on FreeBSD
    be144a1 chore(deps): update dependency containers/automation_images to v20230426
    3fcc1d2 Packit: update config
    676e86d ctrl: fix a debug statement
    b7aa7b1 [skip-ci] Update actions/setup-go action to v4
    d8bf969 [skip-ci] Update actions/checkout action to v3
    53debe6 [skip-ci] Update actions/cache action to v3
    758ff5a vendor: bump to latest packages
    44448e7 fix(deps): update module github.com/containers/libpod to v4
    95ecbf5 chore(deps): update dependency containers/automation_images to v20230405
    3b447bc conmon: drop return after pexit()
    d637b73 ctrl: make accept4 failures fatal
    cbc7c40 cmsg: recvfd returns an error on failures
    0251765 cmsg: fix program name
    5fcb8da ctrl: on EINTR retry accept4
    08c34bd Add renovate configuration
    9a3af8f logging: avoid opening /dev/null for each write

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-24 01:38:21 +00:00
Bruce Ashfield
63dd08bf86 buildah: update to 1.31.1
Bumping buildah to version v1.31.1-3-g0cc7680cc, which comprises the following commits:

    806fcccee CI:BUILD] RPM: define gobuild macro for rhel/centos stream
    a3056cacd [release-1.31] Bump c/common
    d0de60bbf Bump 1.31.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-24 01:38:21 +00:00
Bruce Ashfield
c08591fd7d aardvark-dns: update to v1.7.0
Bumping aardvark-dns to version v1.7.0, which comprises the following commits:

    d27d3b3 release v1.7.0
    b6a270b Update release notes for v1.7.0
    099f5d4 fix(deps): update rust crate tokio to 1.29.0
    47219ee fix(deps): update rust crate clap to 4.3.8
    1648525 fix(deps): update rust crate clap to 4.3.5
    5d9add2 run cargo update
    03fc574 [CI:BUILD] Packit: add Fedora downstream tasks
    ed141a4 fix(deps): update rust crate clap to 4.3.4
    4facdac chore(deps): update dependency containers/automation_images to v20230614
    ffdfd7b fix(deps): update rust crate clap to 4.3.3
    7d9827a fix(deps): update rust crate log to 0.4.19
    ebd84ca fix(deps): update rust crate clap to 4.3.2
    bdf07b1 fix(deps): update rust crate clap to 4.3.1
    93a0f4f cirrus: remove verify_vendor task
    90038b0 chore(deps): update dependency containers/automation_images to v20230601
    8709a43 fix(deps): update rust crate trust-dns-server to 0.22.1
    f22fc51 chore(deps): update rust crate chrono to 0.4.26
    2163d08 fix(deps): update rust crate tokio to 1.28.2
    d7b61ec fix(deps): update rust crate log to 0.4.18
    fde8e1a chore(deps): update rust crate chrono to 0.4.25
    a0ac881 fix(deps): update rust crate clap to 4.3.0
    d298585 chore(deps): update dependency containers/automation_images to v20230517
    4c29222 fix(deps): update rust crate tokio to 1.28.1
    3358de3 chore(deps): update dependency containers/automation_images to v20230426
    c4deaf8 fix(deps): update rust crate clap to 4.2.7
    4dd6a17 fix(deps): update rust crate anyhow to 1.0.71
    140846f fix typo in makefile
    8cd804a fix(deps): update rust crate tokio to 1.28.0
    15db510 fix(deps): update rust crate clap to 4.2.5
    e322d2c fix(deps): update rust crate syslog to ^6.1.0
    f591500 fix(deps): update rust crate clap to 4.2.4
    7961a9b fix(deps): update rust crate clap to 4.2.3
    e6ce1a5 fix(deps): update rust crate clap to v4
    40bcf9e chore(deps): update dependency containers/automation_images to v20230405
    c09d67b bump to v1.7.0-dev
    fb411dd v1.6.0 release
    619c232 Update release notes for v1.6.0
    63bdcac fix(deps): update rust crate tokio to 1.27.0
    f587536 use lower TTL for contianer entries
    234e75b fix(deps): update rust crate syslog to ^6.0.1
    21d7555 fix(deps): update rust crate futures-util to 0.3.28
    3067fd0 chore(deps): update dependency containers/automation_images to v20230330
    4fb8f35 Disable Dependabot in favor of Renovate
    bf19047 chore(deps): update dependency containers/automation_images to v20230320
    302b099 build(deps): bump futures-util from 0.3.26 to 0.3.27
    35c5bab [CI:BUILD] Packit: trigger builds on commit to main branch
    075e095 build(deps): bump anyhow from 1.0.68 to 1.0.70
    cc81866 fix lint issue with new rust version 1.68
    3555692 Cirrus: Update to newer CI VM images
    65d68c8 build(deps): bump chrono from 0.4.23 to 0.4.24
    abb9cf7 build(deps): bump libc from 0.2.139 to 0.2.140
    dec9b98 build(deps): bump async-broadcast from 0.5.0 to 0.5.1
    de81a25 build(deps): bump signal-hook from 0.3.14 to 0.3.15
    d41f573 build(deps): bump futures-util from 0.3.25 to 0.3.26
    5438208 build(deps): bump tokio from 1.25.0 to 1.26.0
    dfea9a8 [CI:DOCS] Clarify packit related comments
    62737ec [CI:BUILD] Packit: initial enablement
    ff56126 Allow custom cargo binary path
    0049b88 Switch to explicit platform list for `cargo vendor-filterer`
    c30a24d bump to v1.6.0-dev
    65480f4 v1.5.0 release
    24350c4 update release notes for v1.0.5
    997ab9a build(deps): bump nix from 0.26.1 to 0.26.2
    8ff094a build(deps): bump tokio from 1.24.2 to 1.25.0
    4769592 Add renovate.json5
    938e1bb build(deps): bump tokio from 1.24.1 to 1.24.2
    8f72cb9 Cirrus: Groom rust cache before updating
    0763020 add code of conduct
    36224d6 cargo: bump trust-dns-client and trust-dns-proto to 0.22
    81def17 Cirrus: Add backup to netavark-binary artifact DL
    ce45624 build(deps): bump tokio from 1.23.0 to 1.24.1
    ef56659 build(deps): bump async-broadcast from 0.4.1 to 0.5.0
    7425f56 build(deps): bump libc from 0.2.138 to 0.2.139
    6f294d7 fix lint issues with rust 1.66
    af49056 update CI images
    860bd4c build(deps): bump tokio from 1.21.2 to 1.23.0
    0431acc build(deps): bump anyhow from 1.0.66 to 1.0.68
    6d22d42 Bump to v1.4.1-dev
    65b9804 Release v1.4.0
    bc265b0 Update release notes for v1.4.0
    e632528 release,make: add rule crate-publish for publishing crates.io
    563c2d7 silly pr to fix ci
    33ceb7e [skip-ci] GHA/Cirrus-cron: Fix execution order
    89b85bf build(deps): bump libc from 0.2.137 to 0.2.138
    614d9df build(deps): bump nix from 0.25.0 to 0.26.1
    01a9f18 config,coredns: add support for network scoped dns servers
    26a3ae8 fix new lint issues with rust 1.65
    3eace77 update CI images
    bb0b151 GHA: Add cirrus-cron auto-rerun job
    1c3798f build: stop using deprecated from_timestamp
    34b2e76 cargo: bump chrono to 0.4.23
    142af2c Fix dev version
    87e26bd Bump to v1.3.0-dev
    9254bb9 v1.3.0 Release
    046f3cb v1.3 Release notes
    36208f3  use cargo-vendor-filterer to create vendor tarball
    612da2f build(deps): bump anyhow from 1.0.65 to 1.0.66
    a5e4104 build(deps): bump libc from 0.2.136 to 0.2.137
    e6dc1b4 build(deps): bump clap from 3.2.22 to 3.2.23
    619a398 build(deps): bump libc from 0.2.135 to 0.2.136
    d3cc7e0 test,helpers: refactor create_config to accept named args
    c541311 cirrus,setup: show netavark binary being used by commit
    044f425 aardvark-dns: add support for container's custom dns_servers
    836d0bd build(deps): bump futures-util from 0.3.24 to 0.3.25
    7c2774c Reduce tokio and futures-util features
    d3b49a1 build(deps): bump libc from 0.2.134 to 0.2.135
    496825e Cirrus: Update CI VM Images
    096b1b7 build(deps): bump libc from 0.2.133 to 0.2.134
    54bbab7 build(deps): bump tokio from 1.21.1 to 1.21.2
    b417fee Bump to v1.2.0-dev
    cb1a462 Release v1.2.0
    b6d0679 backend,clippy: remove needless borrow from lookup logic
    ad541ca Make build date reproducible

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-24 01:38:21 +00:00
Martin Jansa
81bd76bd18 nerdctl: fix installed-vs-shipped with usrmerge
* fixes:
ERROR: nerdctl-v1.3.0-r0 do_package: QA Issue: nerdctl: Files/directories were installed but not shipped in any package:
  /bin
  /bin/nerdctl
Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install.
nerdctl: 2 installed and not shipped files. [installed-vs-shipped]

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-15 18:48:28 +00:00
Martin Jansa
884c0bbbc0 kubernetes: fix installed-vs-shipped with usrmerge
* fixes:
ERROR: kubernetes-1_v1.27.1+git2555e0f90e80a13628f47eca5cde34decc89babb-r0 do_package: QA Issue: kubernetes: Files/directories were installed but not shipped in any package:
  /bin
  /bin/k8s-init
Please set FILES such that these items are packaged. Alternatively if they are unneeded, avoid installing them or delete them within do_install.
kubernetes: 2 installed and not shipped files. [installed-vs-shipped]

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-15 18:47:55 +00:00
Bruce Ashfield
23373571e7 moby: update to v24.0.5
Bumping moby to version v24.0.5-20-g00e46f85f6, which comprises the following commits:

    b7c5385b81 update to go1.20.7
    6be708aa7d vendor: gotest.tools/v3 v3.5.0
    b6568d2dd5 api/types/filters: fix errors not being matched by errors.Is()
    02241b05fc update containerd binary to v1.7.3
    3a6899c6fd update containerd binary to v1.7.2
    7927cae910 c8d/container: Follow snapshot parents for size calculation
    45ba926c6d daemon/list: Drop unused arg from containerReducer
    6c4121a943 daemon/list: Refactor refreshImage
    fcb68e55fa daemon/list: Replace ErrImageDoesNotExist check
    3029f554cc c8d/readConfig: Translate c8d NotFound to errdefs
    35a8b00b18 hack/integration: Add TEST_INTEGRATION_FAIL_FAST
    fed26d5b3c vendor: github.com/moby/buildkit v0.11.7-dev
    eede7f09c7 Remove Upstart scripts
    907f838603 Remove Upstart and cgroups bits from Debian sysvinit script
    f022632503 Dockerfile: update runc binary to v1.1.8
    98a6422cbc c8d/inspect: Include platform Variant
    aab94fb340 Dockerfile: update buildx to v0.11.2
    1be48ec553 c8d: Make sure the content isn't removed while we export
    ff0144de3b ci(buildkit): remove early-return from buildkit-ref
    a936ae7e98 ci(buildkit): remove misleading code from buildkit-ref
    4c29864b02 hack/with-go-mod.sh: warn on stderr
    3c5c192baf c8d/resolveImage: Fix Digested and Named reference
    572de8764e c8d/inspect: Don't duplicate digested ref
    5dded3340c ci: extract buildkit version correctly with replace-d modules
    bd1ae65aab quota: remove gotest.tools from testhelpers
    544032f7a4 hack/d/cli.sh: properly handle errors in curl
    0df2e1bdd8 Dockerfile: improve CLI/rootlesskit caching
    05f82fdd00 Dockerfile(.simple): align APT_MIRROR support
    151686a5c8 Makefile: pass through APT_MIRROR
    31567e0973 Dockerfile: use default apt mirrors
    d94f2dcab2 client: Client.postHijacked: use Client.buildRequest
    bff68bf2cc client: Client.setupHijackConn: explicitly ignore errors
    8bdf6d1baf ci(bin-image): add SHA-based tags
    26a457e7a3 ci(bin-image): fix meta step
    b9904ba319 ci(bin-image): fix typo
    e7c333cb6e ci(bin-image): don't set tags when pushing by digest
    fcb87e8ae1 ci: push bin image to Docker Hub
    68c0cec772 Disable tls when launching dockerd through hack/make.sh
    738d8417e0 libnet: Return a 403 when overlay network isn't allowed
    a5c0fda157 libnet: Return proper error when overlay network can't be created
    deea880581 pkg/jsonmessage: use string-literals for easier grep'ing
    962a4f434f pkg/ioutils: use string-literals for easier grep'ing
    cea5829402 pkg/idtools: use string-literals for easier grep'ing
    69d77bc150 opts: use string-literals for easier grep'ing
    ff667ed932 integration: use string-literals for easier grep'ing
    efe9e90ef5 libnetwork: use string-literals for easier grep'ing
    2d2df4376b daemon/cluster: use string-literals for easier grep'ing
    ae8e3294dd client: use string-literals for easier grep'ing
    892857179a cli/debug: use string-literals for easier grep'ing
    147b87a03e daemon: use string-literals for easier grep'ing
    a3f1f4eeb0 integration-cli: use string-literals for easier grep'ing
    5bba60b1bb builder/builder-next: use string-literals for easier grep'ing
    632fc235d6 builder/dockerfile: use string-literals for easier grep'ing
    75a90f85ad gha: add note about buildkit using older go version
    fa909dfaf4 update go to go1.20.6
    bdaadec788 testutil: use dummyhost for non-tcp connections
    547ea18fbb pkg/plugins: use a dummy hostname for local connections
    597a5f9794 client: define a "dummy" hostname to use for local connections
    fee4db80a0 client: TestSetHostHeader: don't use un-keyed literals
    959889efd9 integration: Don't env cleanup before parallel subtests
    6c5144d3e5 Add t.Helper() to the cli test helper functions
    9ff2c3918c ci(buildkit): match moby go version for buildkit tests
    a4b1a5aef4 vendor: github.com/moby/buildkit@v0.11 0a0807e
    6c7f6c2d47 daemon/containerd: fix assignment to entry in nil map during commit
    0e88c57c47 integration: disable iptables in parallel tests
    a3049653c1 pkg/plugins: make unit test less time sensitive
    d3893b58ff daemon: daemon.prepareMountPoints(): fix panic if mount is not a volume
    5892aae60f docs: api  v1.28 - v1.40: add missing "force" query arg on plugin disable
    7adb590e16 docs: api v1.41: add missing "force" query arg on plugin disable
    b5aacf8161 docs: api v1.42: add missing "force" query arg on plugin disable
    b732cfd392 docs: api v1.43: add missing "force" query arg on plugin disable
    50fb65f0f5 docs: api: amend changelog for API 1.28 for "force" option
    32bcbdfe65 api: swagger: add missing "force" query arg on plugin disable
    f66ef31605 docs: api v1.41: remove outdated information from ServerVersion
    acb95e4544 docs: api v1.42: remove outdated information from ServerVersion
    335ed29345 docs: api v1.43: remove outdated information from ServerVersion
    0ef846ce2e api: remove outdated information from ServerVersion
    af25852baa docs: api v1.42: remove "ClusterStore" and "ClusterAdvertise" fields
    7a9c831e6a docs: api v1.43: remove "ClusterStore" and "ClusterAdvertise" fields
    649bb2b9b8 api: remove "ClusterStore" and "ClusterAdvertise" fields
    457399013b vendor: github.com/containerd/cgroups/v3 v3.0.2
    016ad9b3e8 c8d/prune: Handle containers started from image id
    87778af711 c8d/prune: Exclude dangling tag of the images used by containers
    8bf037b246 c8d/softDelete: Deep copy Labels
    8afe75ffa9 c8d/softDelete: Extract ensureDanglingImage
    e2bade43e7 testutil/environment: Add GetTestDanglingImageId
    e0091d6616 c8d: ImageService.softImageDelete: rename var that collided with import
    42f3f7ed86 c8d: ImageService.softImageDelete: use OCI and containerd constants
    aace62f6d3 pkg/fileutils: GetTotalUsedFds(): use fast-path for Kernel 6.2 and up
    bb50485dfd pkg/fileutils: GetTotalUsedFds: reduce allocations
    5dcea89ce1 pkg/fileutils: add BenchmarkGetTotalUsedFds
    01eb4835c9 pkg/fileutils: GetTotalUsedFds(): don't pretend to support FreeBSD
    cd44aba8db [24.0] pkg/fileutils: switch to use containerd log pkg
    ee29fd944b gha: don't fail if no daemon.json is present
    b8ee9a7829 c8d/images: handle images without manifests for default platform
    d9e097e328 vendor: github.com/opencontainers/image-spec v1.1.0-rc3
    806849eb62 seccomp: add name_to_handle_at to allowlist
    c24c37bd8a Restore active mount counts on live-restore
    c306276ab1 remove name_to_handle_at(2) from filtered syscalls
    d5e31e03b6 gha: Setup Runner: add missing sudo
    85ad299668 Dockerfile: make cli stages more resilient against unclean termination
    e84365f967 Skip cache lookup for "FROM scratch" in containerd
    96534f015d integration-cli: don't use pkg/homedir in test
    6424ae830b Dockerfile: update buildx to v0.11.0
    6055b07292 Fix missing Topology in NodeCSIInfo
    2f379ecfd6 daemon: fix restoring container with missing task
    136893e33b daemon: fix double-unlock in health check probe
    290fc0440c daemon: fix panic on failed exec start
    0556ba23a4 daemon: handleContainerExit(): use logrus.WithFields
    35a29c7328 builder: pass host-gateway IP as worker label
    210c4d6f4b daemon: ensure OCI options play nicely together
    f50cb0c7bd daemon: stop setting container resources to zero
    0a6a5a9140 daemon: modernize oci_linux_test.go
    c92fd5220a c8d: mark stargz as requiring reference-counted mounts
    5e48bbd14c contrib/busybox: Update to FRP-5007-g82accfc19
    6776279896 daemon: registerName(): don't reserve name twice
    7db3243e34 don't cancel container stop when cancelling context
    aec7a80c6f c8d: Use reference counting while mounting a snapshot
    5652c59647 testing: temporarily pin docker-py tests to use "bullseye"
    aa47b29dbc vendor: github.com/moby/swarmkit/v2 v2.0.0-20230531205928-01bb7a41396b

Bumping libnetwork to version v0.7.0-dev.3-1874-g67e0588f, which comprises the following commits:

    11eaf1f0 sync MAINTAINERS file with new moby maintainers
    dbbf124d Clean up inDelete network atomically

Bumping docker-cli to version v24.0.5-6-gb74562d91, which comprises the following commits:

    c0e376854 update to go1.20.7
    1481c8ce9 vendor: gotest.tools/v3 v3.5.0
    e97c76557 vendor: github.com/docker/docker v24.0.5
    1ee40e2c7 configfile: Initialize nil AuthConfigs
    3bd6d6902 Dockerfile: update buildx to v0.11.2
    05bf7fbcc vendor: github.com/docker/docker v24.0.5-0.20230718221249-d4a26c153000
    8b5023dd2 vendor: github.com/docker/docker v24.0.5-0.20230717072055-8443a06149b5
    2a6348d1b Dockerfile: update buildx to v0.11.1
    f4782b325 update go to go1.20.6
    7d06f6b2f vendor: github.com/docker/docker v24.0.5-0.20230714235725-36e9e796c6fc
    1447974b8 docs: rephrase section on credential stores for docker login
    46293e97f Dockerfile: update to xx 1.2.1
    bfe2ff820 cli/container: Don't ignore error when parsing volume spec
    b40742962 vendor: github.com/docker/docker v24.0.4
    79c42c0b9 vendor: golang.org/x/net v0.10.0
    a96d0a526 vendor: golang.org/x/text v0.9.0
    5c5c50d71 vendor: golang.org/x/term v0.8.0
    4bf11b756 vendor: golang.org/x/sys v0.8.0
    224c7dbec vendor: github.com/sirupsen/logrus v1.9.3
    e25d5c64c vendor: github.com/opencontainers/image-spec v1.1.0-rc3
    419e94df4 vendor: github.com/moby/swarmkit/v2 v2.0.0-20230531205928-01bb7a41396b
    2d5f041bd commandconn: return original error while closing
    520e3600e commandconn: don't return error if command closed successfully
    cd68c8f00 docker info: fix condition for printing debug information
    a78fd6ca6 docs: update link location for the overlay driver
    9cd335d44 docs: fix static ip example, network needs a subnet
    d61e4fe87 docs: fix broken link
    8e3a2942a cli/command/context: don't use pkg/homedir in test
    c3ef1cead docs: update the runtime configuration section
    44eebb8bc Dockerfile: update buildx to v0.11.0
    7ecfa2e7f Dockerfile: update gotestsum to v1.10.0
    f11f30909 update go to go1.20.5
    3a6c11773 Dockerfile: update ALPINE_VERSION to 3.17
    11af1189d docs: add "--detach-keys" example to docker run reference
    f118c05e8 docs: move "--detach-keys" example to examples section

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-15 18:41:49 +00:00
Bruce Ashfield
ade1182494 docker-compose: switch branch to main
The upstream repoistory transitioned from master to main, and also
deleted the v2 branch this recipe was using.

Switch everything to main until (if?) new versioned branches appear.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-15 18:24:05 +00:00
Leonard Anderweit
23ce17f66c podman-compose: Add missing runtime dependency python-dotenv
Signed-off-by: Leonard Anderweit <l.anderweit@phytec.de>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-12 03:15:55 +00:00
Bruce Ashfield
58ef402d44 skopeo: update to 1.13.0
Bumping skopeo to version v1.13.0, which comprises the following commits:

    8b9999e1 Bump to v1.13.0
    4de3a90f proxy: Policy verification of OCI Image before pulling
    e9303879 Update module github.com/opencontainers/image-spec to v1.1.0-rc4
    3d8d2128 Update module github.com/containers/common to v0.55.1
    bfa04ea2 Update module github.com/containers/common to v0.54.0
    1d5458fa Update module github.com/containers/image/v5 to v5.26.0
    290a7630 [CI:BUILD] RPM: fix ELN builds
    d72d53cc Update module github.com/containers/storage to v1.47.0
    0297033e Packit: easier to read distro conditionals
    03a19132 Update dependency golangci/golangci-lint to v1.53.3
    c04ee48b Help Renovate manage the golangci-lint version
    37a81ea7 Minor: Cleanup renovate configuration
    e2174f17 Update dependency containers/automation_images to v20230614
    ceeeb67e Update module golang.org/x/term to v0.9.0
    411e9838 [CI:BUILD] Packit: add jobs for downstream Fedora package builds
    deee28a9 Update module github.com/sirupsen/logrus to v1.9.3
    574b2cc4 Update dependency containers/automation_images to v20230601
    73e7618d Update golang.org/x/exp digest to 2e198f4
    1c738806 Update github.com/containers/image/v5 digest to e14c1c5
    2e07073c Update module github.com/stretchr/testify to v1.8.4
    c06aa5c6 Update module github.com/stretchr/testify to v1.8.3

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-01 14:42:25 -04:00
Bruce Ashfield
feb1d78952 crun: update to v1.8.5-tip
Bumping crun to version 1.8.5-40-g56d9d9a, which comprises the following commits:

    19cd8aa ps: fix segfault with pids=NULL
    d006733 features: add wasm annotation
    935f4fe tests: add test for oci_features
    366af73 src/*: implement features
    21b1733 Makefile.am: update clang-format command
    9e5a749 libcrun: report when status file not found
    84a6599 libcrun: crun_path_exists distinguish ENOENT
    ef224f9 docs: remove module.wasm.image/variant=compat annotation

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-01 14:42:25 -04:00
Bruce Ashfield
1fc1b1935f podman-compse: update to v1.0.6
Bumping podman-compose to version v1.0.6, which comprises the following commits:

    f6dbce3 version 1.0.6
    dfb64d8 fix pylint
    990f774 fix pylint
    5e518c7 #648: check if sed exists to color logs
    9046f7e #634: follow up
    ef55067 add support for network priorities
    ed2a6c0 Support network_mode: none
    b4c0792 Add --remove-orphans on down command
    e84451f Allow environment parameters without value
    456370b Support build secrets
    efe3714 Add support for the `group_add` property of a service.
    c55a2f4 Fixes #657: Support act and developer-friendly environment
    b8a7593 #154: timeout
    bd29ddb #154: no -t for start
    38219eb FIXES #154: handle stop_grace_period
    08ffcf6 updating test_podman_compose_extends_w_file_subdir to use the correct image name
    801faea Bump actions/setup-python from 2 to 4
    06da966 Bump actions/checkout from 2 to 3
    de3f607 Check for github actions updates weekly
    db1861d pull: accept service names as positional arguments
    9d5b255 Use top-level name property as project name if user doesn't set one explicitly
    2d05c5c FIXES #534: add systemd unit label
    3c46016 FIXES #534: add systemd unit label
    5b9cfe5 implement services.*.build.tags
    8d1a4d7 Implemented basic Bash shell completion
    859f03c Add healthcheck.disable support
    ae6be27 reformat
    ccdb98c implement podman kill command
    909d05e reformat
    0cf98c7 reimplement the of pause and unpause commands
    843b876 fix typo
    1188463 fix Typo podman-composer in version command
    10580db  Add pause,unpause commands support
    f7d335d #516: allow empty network
    4a73ae8 FIXES #511: ipv6
    f674ab8 #512: only use --net when bridge
    265e0ca #512: only use --net when bridge
    92662f3 FIXES #511: ipv6
    42c0078 mac_address with dash
    da5ee72 reformat
    06fc071 reformat
    9eda56c FIXES #507: respecte mac_address
    13c8981 Fix help message for systemd subcommand
    ee7029f reformat
    75033a4 add python demo example
    c175fd1 reformat
    d479001 reference awesome-compose
    a2defdd example wordpress
    c55cd67 #307: default to /etc/
    eed38ce Fixed accidental deletion of project functionality.
    86ffad8 Added port subcommand.
    118d39b Fix linter errors
    814bd2a Support driver_opts for networks
    606b9d9 Simplify var assignment
    0057a4b Fix default external name in dict case
    8ecb749 Update external volume name management
    d983056 Update external volume name management
    ed302ca Fix external volume name when no name provided
    0b5c844 Add runtime error if no external volume exists
    9c29c89 FIXES #486: replace realpath with abspath
    89d2062 Fixed some spelling and grammar issues
    f42b568 Correct the help text for --pod-args
    a1d3ba4 Lint fixes for --services flag handling in config
    6be661f Support platform property
    fc3598f Allow --services in config
    fbff315 FIXES #464: accept -v in run
    fc34703 format
    c7ada82 format
    5e286f6 format
    3dd8b05 format
    3ecb4b5 FIXES #462: fix extends merge
    d05cad4 FIXES #462: fix extends merge
    ebb3dfe #452: better missing network message
    7b99b38 nethost test
    4ef8afc hit counter with redis cluster example
    a1aed09 GCR hello app
    2cacf9c add echo example
    4064c84 add azure vote example
    0dde95a update gitignore
    1be41b4 do not merge command array
    105c27c example nodejs project
    f820594 use exec for wait
    8a72321 FIXES #409: detect changes and recreate
    5293919 FIXES #409: detect changes and recreate
    48a19f1 print more help with systemd
    a9faabb print more help with systemd
    3fb2b98 print more help with systemd
    b35b7e4 add systemd -a list
    1a72e1e add systemd -a list
    b620311 FIXES #449: accept int port
    bf8004b systemd unit file
    cadf046 fix pylint
    8d8149c fix pylint
    3dd9817 fix pylint
    0b469e0 format
    9e3020a FIXES #307: systemd command
    fc9ed19 wait command
    2d6bb52 FIXES #442: allow --no-pod or custom --pod-args
    7942a09 FIXES #442: allow --no-pod or custom --pod-args
    701311a FIXES #447: support --env-file
    d704915 FIXES #447: support --env-file
    3b7bf81 remove unused test
    a735aa5 Fix inverted condition in merging arguments
    b785095 Fix linter issues
    7623180 Force black formatting
    af10345 FIXES #440: absolute secret
    2d1bcdd update readme
    4f02567 add unit tests
    0645212 add badge
    b7c5609 pylint
    4450835 pylint
    5c33e4e pylint
    cbd6f6b pylint cleanups
    de1e59d fix some pylint
    2f0ca9e add pytest ci
    59c9a69 add pylint
    b7eac1e pylint
    0d47e47 activate test
    c2d7b26 #434: handle unknown service
    1e895c0 calc proper hash
    132a22b #130: handle nested extend and normalize build context
    0bde01d remove unused imports
    91a579b Adding Test that the changes can build Image from build context of extended compose-file
    56b8863 Fixing subdirectory from extends where extended service will build a Service from Dockerfile in an own subdirectory
    5c3ec5f FIXES #431: support dns
    779198b #379: no infra container
    40cb6a7 log version
    4fd9d86 #379: nothing shared in the pod to allow hostname
    2a2c3a0 Fix timeout value data type
    80e8527 #379: create a pod
    d6e21dc FIXES #425: pass --requires
    b9b2f83 FIXES #415: allow network_mode=slirp4netns
    9af65ea adjust comment
    3e6e268 test for logs
    af6a306 fix syntax error without a new line
    68f745f referenced unmerged pr #192 to bring colors into container logging
    90dcfdb FIXES #420: document -t
    ed8635a FIXES #422: Remove debug print
    1d972ef Propagate all bind-type mount options
    536925c FIXES #413: parse network_mode: container:container_name correctly
    09c6cbe FIXES #408: preserve exit code
    154a512 FIXES #386: make sure volumes are present in top level
    523d215 #407: allow network_mode=service:mysrv
    25494b5 Update README.md
    19662c0 Fix healthcheck test type on replicas
    4943e52 #395: make podman respect PODMAN_* in .env
    4aa08cd FIXES #399: pass specific ip
    15e0ab9 FIXES #397: support host network mode
    f66861f #249: read COMPOSE_PROJECT_NAME env
    af53b65 Simplify volume identification
    890c584 Update README.md
    0bd493f Allow empty default/error value in substitution
    481c6d0 #394: config: multiple yaml
    31df70b updated per maintainer review
    df40051 removes version from CONTRIBUTING
    21a716c added log back in
    f00ac92 added config command
    0433410 added args for version
    0f9fe2b FiXES #393: missing arg when build as part of run
    a1be5ce add fallback to get
    56a4988 Add support for volume driver and options
    377b552 Fix substitution for empty variables
    c50599c FIXES #388: do not force build in run
    4557279 #88: multiple aliases
    7ad3775 FIXES #380: output to stderr
    30051c2 Update README.md. Add link to podman dns plugin source
    9e8e25c #378: down -v
    2c60516 fix hostname in test

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-01 14:42:25 -04:00
Bruce Ashfield
2a4b72b3a2 podman: update to 4.6
Bumping libpod to version v4.6.0-rc1-6-g932b8a997, which comprises the following commits:

    c422072b6 [CI:DOCS] uidmap man pages: fix corrupt tables
    7680e5013 libpod: use new libcontainer BlockIO constructors
    829b3e9b3 Bump to v4.6.0-dev
    4d59a0f5c Bump to v4.6.0-rc1
    e4a7923ca Bump to v4.6.1-dev
    c756b24f4 Bump to v4.6.0
    2e53a5083 Release notes for v4.6.0
    727362bde Update Release Notes for v4.5.1
    8f2b73b03 rootless: use default_rootless_network_cmd config
    3bd4c6a10 tests: fix "Storing signatures" check
    d5e8cc1d1 Fixes for vendoring Buildah
    2203f2aa9 Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
    a306eb5f6 Do not use deprecated hook functions from c/common
    bf36f1139 Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0
    a64016e17 pasta: Remove some leftover code from pasta bats tests
    6feb179f4 pasta: Fix pasta tests to work on hosts with multiple interfaces
    9cc19b055 fix(command): ignore `--format` in `podman search --list-tags`
    714c3fe72 Use /proc/self/gid_map as intended, not uid_map
    d29e33650 podman machine start: fix ready service
    1a1602b72 Makefile: don't rely on the non-standard -r flag for ln
    db91ce788 cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
    82a4b0816 cmd/podman/system: add API server support on FreeBSD
    2f25372de pasta: Create /etc/hosts entries for pods using pasta networking
    9555446d3 RPM: Fix koji and ELN issues
    0749d685a Cirrus: Update operating branch
    dde6bcbca system tests: add and use _prefetch
    0ee19f08c pkg/api: BufferedResponseWriter flush correctly
    d0505d6ba pkg/api: top return error to client
    1398cbce8 container wait: support health states
    b680daa2d [CI:DOCS] Fix example on PublishPort
    811867249 container wait API: use string slice instead of state slice
    64153ace0 podman wait: update man page
    a699ed0eb StopContainer(): ignore one more conmon warning
    bd69b151f run,create: modify `--env-merge` behavior for non-existent vars
    614c962c2 use libnetwork/slirp4netns from c/common
    180cf0cf1 update c/common to latest
    d0af5df89 e2e: use parallel-safe /dev subdirectories
    aeff58e0b [CI:BUILD] Help Renovate manage the golangci-lint version
    00292ae1c systests: test instrumentation
    63dfe842b compat API create/pull: fix error handling
    d54541894 compat API push: fix error handling
    26721b0a0 GetSafeIPAddress(): discourage its use
    810c97bd8 libpod: write /etc/{hosts,resolv.conf} once
    13db83a00 e2e: fix one of the many log flakes
    bb932cc84 cmd, push: expose --compression-level
    459248337 vendor: bump containers/common
    f4c514bff compat API container create: handle platform parameter
    04a1cdfa9 refactor(machine): remove hard code
    ae6e39076 vendor in latests containers/common
    81e63227e fix(machine): throw `connect: connection refused` after set proxy
    ec0924c6d [CI:BUILD] Packit: cleanups
    65e5d2773 Add console mode to podman machine
    ddcefc9b9 e2e: kube test: specify expected exit code
    574e00d32 e2e --authfile test: fix test condition
    f8f337501 chore(deps): update dependency setuptools to v68
    84e42877a make lint: re-enable revive
    aa453c4f1 make lint: re-enable ginkgolinter
    2efa7c3fa make lint: enable rowserrcheck
    f07aa1bfd make lint: enable wastedassign
    60a5a5947 make lint: enable mirror
    a35da3ad8 bump golangci-lint to v1.53.3
    47e0557d5 auto update: restart instead of stop+start
    acb5f97f9 cmd/podman/root.go: fix help document issue of the image store
    e5399aaf3 vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c
    3829fbd35 podman: add support for splitting imagestore
    e29274853 network create --ip-range allow for custom range
    c2360800e fix(ssh): start machine failed to start with exit status 255
    ed24f0b2c remote wait: fix "removed" condition
    8d036906a [CI:DOCS] Fix service_destinations description in podman man page
    bfe61af6d quadlet should exit non zero on failures
    91fc435cb fix(deps): update module golang.org/x/tools to v0.10.0
    ef42f54ac e2e: GetSafeIPAddress() replaces GetRandomIPAddress
    5ffbfd937 pasta: use code from c/common
    479677cb6 Add support for setting autoupdate in quadlet
    3efaffae4 New command: podmansh
    67674b3a6 vendor: update c/common to latest
    bdc2e8165 Add quadlet container support for Mask,Umask options
    13c2aca21 libpod: make conmon always log to syslog
    0ecc0d9e1 Document how to get secret mounts working on RHEL8
    c28a43efd Verify podman pull dup image only prints id once
    d464e1d4f Vendor in latests containers/common
    741ad0b4f Apply suggestions from code review
    f31466e74 Revert "rootlessport: exclude storage drivers via build tags"
    8a90765b9 filters: use new FilterID function from c/common
    de494eb05 logformatter: ignore 'TOP-LEVEL' headings
    63f5116ad test/e2e: fix network ID test
    8c48f97c9 update c/{common,image,storage} to latest
    354b8e20b [CI:DOCS] clarify supported transports in manifest push
    aa7a4219e [CI:DOCS] podman-push: rm confusion on supported transports
    c0ab29313 container wait: indicate timeout in error
    af7555e0d network-create: document new bclim option
    7d2f722ef fix(deps): update module golang.org/x/text to v0.10.0
    6f821634a libpod: Podman info output more network information
    d0e2428fb fix(deps): update module golang.org/x/term to v0.9.0
    ac0ba2c2c quadlet: adjust container unit documentation
    837b47244 e2e: GetRandomIPAddress(): parallelize
    676c4d4e8 Makefile: add support for 'make help' on FreeBSD
    ab502fc5c criu: return error when checking for min version
    16092930c Update docs/source/markdown/podman-systemd.unit.5.md
    faa2689dc 250-systemd.bats: remove outdated comment
    0714321de github: add issue type as link to podman-desktop
    a66bab340 Add WorkingDir support to quadlet
    ebf747474 rootlessport: exclude storage drivers via build tags
    8bf168cc1 Add ability to set static routes
    68183b07d test/upgrade: correctly share mounts between host and container
    444f19cb2 Update common, image, and storage deps
    ec6b7dbd9 Fix system service manpage name in API Documentation
    d734fcbff style(specgen): omit nil check
    53834ef0d fix(specgen): index out of range when unmask=[]
    71cae3159 Makefile to force a shell when running command
    02432fc69 cirrus,ci: default to overlay for debian env
    b37f74b73 Quadlet: Add support for --sysctl flag
    44ec044c4 chore(deps): update dependency requests-mock to ~=1.11.0
    2ebc9004f Ignore spurious warnings when killing containers
    7832879bf Makefile: don't hard-code the path for bash
    de4b383ef fix(deps): update module github.com/burntsushi/toml to v1.3.2
    a7271f9dd GHA: Fix bad job-names & links in monitoring emails
    6a696cb8f podman-registry: simpler, safer invocations
    f1ecdca4b Ensure our mutexes handle recursive locking properly
    310082444 Fix an expected error message from pod removal
    a750cd987 Fix a race removing multiple containers in the same pod
    0e47465e4 Discard errors when a pod is already removed
    398e48a24 Change Inherit to use a pointer to a container
    b65ba90df e2e: add ginkgo decorators to address flakes
    992093ae9 filters: better handling of id=
    7bdbbd0ce fix(deps): update module github.com/onsi/gomega to v1.27.8
    c7a8d29f1 refactor: improve get ssh path duplicate code
    137c8ef4d logformatter: better recognition of ginkgo test names
    944673c88 Address review feedback and add manpage notes
    3b79f241b Add support for SecurityLabelNested flag in quadlet
    a1c1d8d0a fix(deps): update module github.com/burntsushi/toml to v1.3.1
    4fda7936c `system locks` now reports held locks
    92309d917 fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17
    0948c078c Add a new hidden command, podman system locks
    1013696ad Add number of free locks to `podman info`
    3b39eb133 Include lock number in pod/container/volume inspect
    1ce53677a fix ignition config creation
    4584350f6 Makefile binaries target adopted for Mac and Win
    e93b1f997 fix(deps): update github.com/crc-org/vfkit digest to 3d57f09
    c51c6675e logformatter: proper status color for failed tests
    cf9bc25bb pasta: Test handling of unknown protocols
    b2c000670 pasta: Correct handling of unknown protocols
    6611735ae Quadlet - add support for Pull key in .container
    5b629e9c4 fix(deps): update module github.com/sirupsen/logrus to v1.9.3
    d68121a60 Add default ulimit test for gen kube
    81d64547f feat: add insecure registry troubleshooting solution
    1768bf150 fix(deps): update module golang.org/x/tools to v0.9.3
    7e550f78e fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2
    28934897e e2e: GetPort(): safer allocation of random ports
    2c9f18182 The removeContainer function now accepts a struct
    4e6efbbbb Revert "test/e2e: fix "podman run ipcns ipcmk container test""
    b75ff3a8f Add a test for removing dependencies with rm -fa
    bafb3d6cc Revert "ginkgo-v2 cleanup workaround for #18180"
    ef1a22cde Fix a deadlock when removing pods
    8cb5d39d4 Pods now return what containers were removed with them
    bc1a31ce6 Make RemoveContainer return containers and pods removed
    e8d745627 Add an API for removing a container and dependencies
    543b80949 systests: fixes for coping with extra systemd image
    34c258b41 libpod: fix timezone handling
    22424eb5d fix(deps): update github.com/godbus/dbus/v5 digest to 7623695
    7987d2ee0 fix(deps): update module golang.org/x/tools to v0.9.2
    4173f942f test/system: quadlet use correct systemd restart policy
    0372bf4bd systests: minimize race-condition window
    1a34e1f85 systests: fix improper backgrounding of run_podman
    f09772889 set max ulimits for rootless on each start
    5c7d50f08 Fix: display online_cpus in compat REST API
    bd62119f3 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6
    72d4cede2 systests: fix race in quadlet tests
    f48fa1113 fix(deps): update module github.com/burntsushi/toml to v1.3.0
    88e78456d e2e: make BuildImage parallel-safe
    370e1132c completion: fix panic in simplePathJoinUnix()
    46456f5f1 Update module github.com/stretchr/testify to v1.8.4
    585d715bb authfile.md: add default path of file for Windows/macOS.
    01012a080 Update module github.com/rootless-containers/rootlesskit to v1.1.1
    e3240c2fb hack: fix typo in hack/podman-registry
    de92db0c8 man pages and command help: clean up descriptions
    e6bfc81a8 RPM: bump gvisor-tap-vsock subpackage and fix packit scripts
    dfba6ddd4 Man pages: fix broken tables
    5b2d963c4 test/e2e: add regression testing for comma-containing labels
    047a4bc83 fix: volume create filters
    0be9887af fix: move filter flags from StringSliceVar to StringArrayVar
    6bc52c9c5 pkg/rootless: correctly handle proxy signals on reexec
    85b4c896b [CI:BUILD] Packit: set propose-downstream action type to pre-sync
    8f94a4775 [CI:DOCS] fix Quadlet man page rendering
    29f7c494e Quadlet: kube: use ExecStopPost
    6487d9c11 Quadlet: kube: add ExitCodePropagation field
    08b0d93ea kube play: exit-code propagation
    6dbc13833 prune exit codes only when container doesn't exist
    977b3cdbf podman: Add pasta to podman info
    373919ca0 Revert "test/system/255-auto-update.bats: add debug logs"
    901900530 Quadlet - add support for PodmanArgs to all groups
    6003dca9c [CI:BUILD] Packit: add jobs for downstream Fedora package builds
    fb8a12490 In a concurrent removal test, don't remove concurrently with builds
    032d4a95f Consolidate error handling in Runtime.removeContainer
    f556e58bb Consolidate error handling in Container.cleanupStorage
    4969c552e Fix reporting errors on container unmount
    94c65a659 TEMPORARY(?) instrumentation for unlinkat-ebusy
    d623670e1 pkginstaller: bump Qemu to version 8.0.0
    4108b3711 Support podman --remote when Containerfile is not in context directory
    9969374b6 chore(deps): update dependency requests to ~=2.31.0
    5f29c7bf9 fix: podman event --filter volume=vol-name should compare the event name with volume name
    6b48e9962 fix(deps): update module github.com/docker/docker to v24
    1b9272a06 wait: look for exit code in stopped state
    7d831d555 network create/update: allow dns servers comma separated
    685c73618 source code comments and docs: fix typos, language, Markdown layout
    fe41077d4 Increase download progress to 80ch
    8fbcf8bce chore(deps): update dependency setuptools to ~=67.8.0
    29749362a podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED]
    2253f709b fix(deps): update module github.com/sirupsen/logrus to v1.9.2
    7c53a463b stats: get mem limit from the cgroup
    8e2e7a440 quadlet tests: enable device.volume test
    bb3f611ff quadlet tests: remove unused socketactivated.container
    18c3de596 fix(deps): update module github.com/stretchr/testify to v1.8.3
    5d522431c Correct markdown in docs
    76595c7b9 fix(deps): update module github.com/onsi/gomega to v1.27.7
    a99ad3b36 [CI:DOCS] Improve security in mysql examples
    99cedae31 Cirrus: Record the buildah version for reference
    a54d4d7e1 test/e2e: do not call setenforce
    458f2e8ed Fix discombobulated kubernetes support table
    192ad70e9 run: ignore PODMAN_USERNS with --pod
    5ff6fc559 Add --configmap to podman-remote kube play
    ad8d0e57d compat: accept tag in /images/create?fromSrc
    bf0cea76c fix HTMLSpan warnings
    a576fa3f1 generate systemd: error on init containers
    32c2cea0f Remove future tense from man pages
    5b148a0a6 compat,build: pull must accept string
    d1dcb0846 Cirrus: Add support for `[CI:NEXT]`
    eb4f0bc17 Cirrus: Remove support for `[CI:COPR]` magic
    3360214a0 system tests: add precision timestamps
    8b4987266 Makefile: add ginkgo FOCUS/FOCUS_FILE options
    4bed2c285 e2e: refactor and document serialization
    ce07860a1 machine: fix default connection URL to use 127.0.0.1
    a485ba505 e2e: serialize gpg tests
    b9aaafbe1 Document podman-machine-default behavior
    7580b8ae4 e2e: fix more test races (missing "wait")
    6d58f5bb0 fix(deps): update module github.com/openshift/imagebuilder to v1.2.5
    520979ba2 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5
    ae5cbf37c Fix documentation of `--network-cmd-path` CLI option
    71853319f Skip rhel-release branch unnecessary CI tasks
    ab29ff2f6 test/e2e: dedup Before/AfterEach nodes
    d01ae436e remote-save: fix permissions and dir formats
    5a176f09c Set machine docker.sock according to rootful flag
    13f787842 Fix handling of .containenv on tmpfs
    2c0f40482 Do not include image annotations when building spec
    dd5d22cb3 build(deps): bump github.com/docker/distribution
    26f1e95ab Kube Play - Support multi-doc YAML files for configmap argument
    c33ba70f9 system tests: instrument, to try to catch unlinkat-ebusy
    74a5b92b3 test: check restart policy of init containers
    3aa6a792e Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469
    04707f62d issue template: mention `su`
    14001ad48 e2e: logs test: fix flakes
    6b329d8c9 fix(deps): update module github.com/containernetworking/plugins to v1.3.0
    ff37615bf e2e: stop podman.service test: wait for server
    cb8e19677 logformatter: handle podman-machine test logs
    58fd87959 fix(deps): update module golang.org/x/tools to v0.9.1
    2d8929d95 [CI:DOCS] Disable Dependabot in favor of Renovate
    01e20818c Ensure the consistent setting of the HOME env variable on container start
    8aaa13acc Quadlet system tests - fix socket notification
    1fb3cdf8a sqlite: disable WAL mode
    d24bec0d0 system tests: timeoutize quadlet, systemd
    3d6894426 test: update README for integration tests
    c400cc7ea libpod/Container.rootFsSize(): use recorded image sizes
    b97be3406 quadlet: support `HostName`
    9dc107e74 e2e: fix race in a play-kube test
    bdb3ed795 Fix preference of user quadlets directories
    40b21fa7d fix(deps): update module golang.org/x/tools to v0.9.0
    661a238a9 fix(deps): update module golang.org/x/net to v0.10.0
    332b47fef Check on client side for Containerfile, if none specified
    18cd174c9 build(deps): bump github.com/docker/docker
    9ec630f30 Buildah treadmill: several fixes
    11d92ea37 fix(deps): update github.com/containers/common digest to 3e93a76
    1bf057e8c chore(deps): update dependency docker to ~=6.1.0
    27891a664 Update docs/source/markdown/podman-systemd.unit.5.md
    505e02e04 fix(deps): update github.com/containers/common digest to bc15b04
    53220717e fix: initContainer restart policy overridden by pod
    c27cda7c9 fix(deps): update module golang.org/x/sync to v0.2.0
    773b45704 chore(deps): update dependency requests to ~=2.30.0
    0c070ebfb ginkgo json output: only in CI, not on laptop runs
    73d3487cc Allow user quadlets to be stored under /etc
    334adac74 fix(deps): update github.com/containers/common digest to ea87b34
    95557a532 libpod: do not Cleanup() more than once
    df9344ac4 compat container create: match duplicate mounts correctly
    42c822720 Update podman-completion.1.md
    3d56e4f3a fix(deps): update github.com/containers/buildah digest to e925b58
    75d92f41d Run generate.CompleteSpec() for initContainers as well
    d25356c30 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4
    df8cc7af3 remote: return better connect error
    61985a610 Add missing man page links for Docker man pages
    f877d7dcd Replace egrep/fgrep with grep -E/-F
    19aabf440 remote: exec inspect update exec session status
    305bad184 fix(deps): update github.com/digitalocean/go-qemu digest to f035778
    999c620d5 fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d
    38f993543 fix(deps): update github.com/containers/buildah digest to f353690
    1b2b0d031 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3
    dc7515dc3 MVP for Podman Machine with AppleHV
    54fd0d752 e2e tests: try writing & preserving ginkgo json artifacts
    1c5ab9e7b vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310
    e1e03a0e3 bindings, build: don't pass invalid platform in case of none
    ae5305134 Revert "logformatter: anchors: link to test summary, not name"
    fbe62f329 More cleanup: volumes: do not export to stdout
    3050a6437 e2e test cleanup
    fa1ba17bc Update kube gen & play to use pod restart policy
    db4ad54f9 Add {{.Restarts}} to podman pod ps
    0fef113a4 Add {{.Restarts}} to podman ps
    edbeee523 Add --restart flag to pod create
    9e9bcec9e history: correctly set tags
    073cd4bb4 fix(deps): update module github.com/moby/term to v0.5.0
    3858a833b Makefile: do not run machine test in parallel
    5af433923 pkg/machine/e2e: switch to GinkgoWriter
    1720042d0 api: fix parsing filters
    c4b9f4b34 ginkgo-v2 cleanup workaround for #18180
    5eb99a0ac test/e2e: fix custom timing reporting
    1bff0108f logformatter: anchors: link to test summary, not name
    914ff01f9 WIP: logformatter: handle ginkgo v2 logs
    b3424f370 test/e2e: unshare --rootless-netns cleanup slirp4netns
    054154c77 test/e2e: run system reset test serial
    c5922cc6f test/e2e: fix CleanupVolume/Secrets()
    bc1ed07b5 ginkgo v2: fix new Skip() behavior
    cd46e7279 test/e2e: fix pause tests to unpause before cleanup()
    2ce4e935b ginkgo v2: drop localbenchmarks
    fb7a96638 test/e2e: switch to GinkgoWriter
    cc19091e9 test/e2e: unset CONTAINERS_CONF before Cleanup()
    8cc7a3618 ginkgo: run on all cores
    9c1f713c7 test/e2e: fix Cleanup()
    9bd833bcf test/e2e: fix "podman run ipcns ipcmk container test"
    629a6a6e4 test/e2e: actually check for cleanup errors
    b9ba85044 Lower e2e timeout to not waste time when it hangs
    fbb7c980a test/e2e: containers.conf tests add missing Wait()
    c564d9d7a ginkgo v2: remove CurrentGinkgoTestDescription()
    666e31447 ginkgo v2: remove deprecated flags
    445815036 update to ginkgo v2
    502654580 test/e2e: do not remove CNI directory
    7b25f362e e2e: login_logout: use unique authfile for each test
    d06480d99 Fix clashing subuid
    24be46a51 [CI:DOCS] troubleshooting: fix subuid example
    bab4217cd manifest, push: use source as destination if not specified
    202701e65 Update github.com/moby/term digest to 0564e01
    e8f34e457 Add name-generation test
    b5ef9555a Implement machine provider selection
    70870895b libpod: improve errors management in cleanupStorage
    5592dc12f libpod: report unmount idmapped rootfs errors
    2932208c2 test: do not wait 10 seconds before killing myyaml
    891bc117e podman: simplify code with a switch
    bac57409f test: fix typo
    5fefb54d2 build(deps): bump github.com/docker/docker
    0a92b399d swagger: fix Info name conflict
    20c42489e Nightly dependency treadmill: remove
    33fa54580 Update short description for disconnect cmd
    aca993632 windows: podman save allow the use of stdout
    512b39475 Update c/common and avoid setting umask
    7ff2eaf96 Cirrus: Update CI VM Image to F38/37
    0e1ddd3df Cirrus: Run code validation on rawhide
    221e3023f Fix rand.Seed() deprecation in golang 1.20
    edaf3b4d5 Add sha256: to images history id for docker compatibility
    d51911f7b Support systemd optional prefix '-' for devices.
    a0c7bb26a Fix a copy/paste error in an error message
    ba4586375 chore(deps): update dependency requests to ~=2.29.0
    d905e412e Fix simple typo in podman-network-create.md
    a027bf102 e2e cleanup: push with auth: add error checks
    eeb210bc5 e2e: remove "-it" from podman run & exec
    64959b744 pkg/machine: rework RemoveConnection()
    2296e71e3 machine: qemu only remove connection after confirmation
    c8e423b55 Add file swith for pre-exec
    6aaf6a284 system reset: show graphRoot/runRoot before removal
    e95e9be76 fix manifest annotate help
    bdf367958 Netavark userns test: give aardvark time to come up
    bbe9d61c4 sqlite: move first read into a transaction
    f3c3ef72d Recover from failed podman machine start
    d222a392c rootless: support joining contianers that use host ns
    0e955bec7 auto-update: return errors when checking for updates
    fc8bd4521 [skip-ci] Update dawidd6/action-send-mail action to v3.7.2
    ed6b19fef fix(deps): update github.com/containers/common digest to 46c4463
    230ddbe0c Add user mode networking feature to Windows
    3216110de system/reset.go: help: fix typo
    ae5ed6d85 e2e create same-IP: try to fix flake
    faeed14f6 system tests: safer container-stop signaling
    6014f26c4 Revert "Resolve symlink path for qemu directory if possible"
    c5a928c5b ps: --format {{.State}} match docker output
    b4eecd908 test/system/260-sdnotify.bats: fix test flake
    1361c6a33 [CI:DOCS] Quadlet: clarify overriding user/system services
    fb3b92b96 Eliminate transient container deps from wslkerninst
    dd217d8e0 Wording
    d16c880fb fix(deps): update github.com/containers/common digest to 5547996
    70bd096e4 cmd/podman/pods: omit superfluous runtime.NumCPU call
    1f1525f2e support `--digestfile` for remote push
    d640461ce e2e: skip journald test if journald is unavailable
    5156ab996 Cirrus: Enable testing on Fedora rawhide
    8a3265f65 [CI:BUILD] Cirrus: remove copr rpm build task
    77f86f48e chore(deps): update dependency setuptools to ~=67.7.0
    03a7c6a91 Cirrus: Drop benchmarks artifacts
    15664b4b0 test/e2e: correctly reap service process
    c9d861023 test/e2e: add missing options to remote service
    1f45c715d test/e2e: fix incorrect usage of CreateTempDirInTempDir()
    601d228ca test/e2e: "podman-remote send correct path to copier" do not leak file
    08c651016 test/e2e: fix network create flake due same subnet
    525c27fe1 test/e2e: fix SkipIfNotActive()
    01d518a97 test/e2e: do not try to use docker as rootless
    6e97976ad test/e2e: do not leak "hello" file
    750442d09 podman-remote logs: handle server error correctly
    3aaa2793d test/e2e: use custom network config v2
    00fdfa063 rename ImagePushReport to ImagePushStream
    81621ce8a Specify format to buildah before commit
    7382494ca Add eBPF snooper that traces the entire fork/exec graph of podman
    edb64f8a7 libpod: stop containers with --restart=always
    0364aef1e test: fix race when listing cgroups
    b65ab52d8 compat: Translate `noprune` into ImageRemoveOptions.NoPrune
    346483717 [CI:DOCS] Update RELEASE_PROCESS.md
    8019dc9e6 hyperv: add podman socket mapping
    a089f1b5c e2e networking test: better way to get host IP
    bce38c1af Updated system test to be easier to read
    5f5bea0d1 bindings tests: bail out early on image errors
    f2cec7348 libpod: fix TestPostDeleteHooks do not depend on version
    8125bab9b chore(deps): update dependency setuptools to v67
    a00ed20e0 fix(deps): update module github.com/containers/libhvee to v0.0.5
    da83364eb e2e: quadlet uses PODMAN env for podman binary path
    6e0cf9344 Fixes format inconsistencies with docker for certain history fields
    acb24f164 Makefile: do not prefix /etc
    7e4cd22ac libpod: configureNetNS() tear down on errors
    4f93a6eee libpod: rootlessNetNs.Cleanup() fix error message
    4b8230119 HyperV: wait on stop
    3cdaf85d6 build(deps): bump github.com/docker/docker
    459f751ae Makefile: include `release-artifacts` target
    3222545ad Enabled network over vsock
    aec7ce4a1 fix(deps): update module github.com/microsoft/go-winio to v0.6.1
    64b26df60 fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2
    41d516412 fix remote start --filter
    1cac53506 Update API reference to include v4.5
    a0204f1dd Add missing security options to /info response
    de5fa9ce9 Add mention of redir to doc `rootless.md`
    08f137aec fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0
    8e7f98ae6 docs(readme): add status badges and remove hardcoded release info
    e9356ba20 Don't use bytes.NewBuffer to read data
    f488d9890 Add support for HVSOCK on hyperv
    e7a323635 docs: update network tutorial with netavark DHCP support
    32344952a bump main to v4.6.0-dev
    54ba17f69 Remove disused test/install
    1fa4e45a9 Return title fields as a list
    be148665c [CI:BUILD] Packit: Initial Enablement
    4aced7e3e Quadlet - do not set log-driver by default
    51b582d0e system tests: address COPY-hardlink flake
    25d4ecf47 chore(deps): update registry.centos.org/centos/centos docker tag to v8
    31420112c system tests: fix race in kube-play read-only
    f544971b7 chore(deps): update dependency docker to v6
    f95276bfa CI: enable sqlite system tests
    d28656403 test: enable test_wait_next_exit
    f312c8533 Update dependency PyYAML to v6
    f67d640b8 test/e2e/systemd_activate_test.go: simplify test
    5315c0cc7 Update docker.io/library/golang Docker tag to v1.20
    b4cfc727b api: auth: fix nil deref
    176c329f9 Update dependency requests-mock to ~=1.10.0
    b75ee05d3 Update dependency requests to ~=2.28.2
    d38b22d50 fix: Document removing anonymous volumes at create
    fe22299f9 Use a sane polling interval in WaitContainerDocker
    bb2deef8e podman: added the --out option for capturing formatted output emitted by various commands
    785c63c0f Renovate: Ensure release-note-none label is added
    4bc4609d8 Renovate: Update ignore paths
    64ea5971a *: migrate image registry to registry.k8s.io
    4f5f89cf8 Do not display the resource limits warning message

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-08-01 14:42:25 -04:00