Commit Graph

784 Commits

Author SHA1 Message Date
Bruce Ashfield
5b1e03f314 podman-tui: fix build with btrfs-tools 6.1
We'd really prefer to bump the vendor SRCREV and allow the fetcher
to bring in the pending change without needing a patch, but there
are other API changes that trickle through the code.

So we extract just the patch we need, and leave the SRCREV info
in the recipe, to document the source. When the upstream updates
its vendor/ directory, we can drop this (as the patch will no
longer apply)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-01-10 13:58:07 -05:00
Bruce Ashfield
0b9260ade5 buildah: fix build with btrfs-tools 6.1
We'd really prefer to bump the vendor SRCREV and allow the fetcher
to bring in the pending change without needing a patch, but there
are other API changes that trickle through the code.

So we extract just the patch we need, and leave the SRCREV info
in the recipe, to document the source. When the upstream updates
its vendor/ directory, we can drop this (as the patch will no
longer apply)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-01-10 13:58:07 -05:00
Jose Quaresma
67e8b34d99 skopeo: fix build with btrfs-progs 6.1
| # github.com/containers/storage/drivers/btrfs
| vendor/github.com/containers/storage/drivers/btrfs/btrfs.go:387:11: args.lim.max_referenced undefined (type _Ctype_struct_btrfs_qgroup_limit has no field or method max_referenced)
| recipe skopeo-v1.8.0+gitAUTOINC+b95e081162-r0: task do_compile: Failed

Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-01-10 13:58:07 -05:00
Bruce Ashfield
a49eaf45a4 buildah: update to 1.28.x
Bumping buildah to version v1.25.0-547-gcfefbb64, which comprises the following commits:

    ea9b705a [release-1.28] Bump to c/storage v1.43.1 for s390x sigsegv fix
    6eb52c6b [release-1.28] Bump c/image to v5.23.1
    5fb010fe version: bump to 1.28.2
    69d3fcd8 Stop using ubi8
    9fa3c167 Define and use a safe, reliable test image
    9136e86e version: bump to v1.28.1
    ff08605b copier.Put(): clear up os/syscall mode bit confusion
    6bc044dc retrofit, test: ubi8 changed architecture string
    79f41e32 Bump to v1.28.0
    1deec7ce No longer modify buildah.spec
    a53f342f Update for https://github.com/klauspost/pgzip/pull/50
    3c5f9886 Update vendor containers/(common,image)
    88615e98 [CI:DOCS] Add quay-description update reminder
    95bb0250 vendor: bump c/common to v0.49.2-0.20220929111928-2d1b45ae2423
    aaba84ff build(deps): bump github.com/opencontainers/selinux
    675a7332 Vendor in latest containers/storage
    28195ac9 Changing shell list operators from `;` to `&&`
    fc458032 Fix buildahimage container.conf permissions regression
    9ae09bf7 Set sysctls from containers.conf
    e67bb090 refactor: stop using Normalize directly from containerd package
    3cd0fa2b config,builder: process variant while populating image spec
    899ecaaf Proof of concept: nightly dependency treadmill
    31dc089c Run codespell on code
    07ab5a5c Check for unset build args after TARGET args
    ea81614a pkg/cli: improve completion test
    bb285e53 vendor in latest containers/(common,storage,image)
    f3a73b70 copier: work around freebsd bug for "mkdir /"
    16a4eee2 vendor: update c/image
    02d4a6b5 test: run in the host cgroup namespace
    5cde04cd vendor: update c/storage
    e3d48600 vendor: update c/common
    94ab98d6 cmd: check for user UID instead of privileges
    4c9fc47f run,build: conflict --isolation=chroot and --network
    de9c3841 Fix broken dns test (from merge collision)
    8d5d7632 Fix stutters
    b4135818 Fix broken command completion
    fc3ae53b buildah bud --network=none should have no network
    3c092e5e build: support --skip-unused-stages for multi-stage builds
    87d4ae88 Prevent use of --dns* options with --net=none
    fd14bfe5 buildah: make --cache-ttl=0s equivalent to --no-cache
    ac30ed23 parse: make processing flags in --mount order agnostic
    deb2d903 Minor test fix for podman-remote
    a30b71db build: honor <Containerfile>.containerignore as ignore file
    46db0211 Update install.md: Debian 11 (Bullseye) is stable
    4e5be719 build(deps): bump github.com/docker/docker
    4407875a Use constants from containers/common for finding seccomp.json
    4808f3b7 Don't call os.Exit(1) from manifest exist
    9f435de8 manifest: add support for buildah manifest exists
    0bdbd1a8 Buildah should ignore /etc/crio/seccomp.json
    9c147ab8 chroot: Fix cross build break
    309f714b chroot: Move isDevNull to run_common.go
    363bf9c5 chroot: Fix setRlimit build on FreeBSD
    dc49c3cb chroot: Move parseRLimits and setRlimits to run_common.go
    b64d8143 chroot: Fix runUsingChrootExecMain on FreeBSD
    4d963eb5 chroot: Move runUsingChrootExecMain to run_common.go
    0a61e4b2 chroot: Factor out Linux-specific unshare options from runUsingChroot
    3b42b515 chroot: Move runUsingChroot to run_common.go
    350c509e chroot: Move RunUsingChroot and runUsingChrootMain to run_common.go
    188dcc36 chroot: Factor out /dev/ptmx pty implementation
    f9814601 chroot: Add FreeBSD support for run with chroot isolation
    b9db9574 build(deps): bump github.com/docker/go-units from 0.4.0 to 0.5.0
    64534a88 Replace k8s.gcr.io/pause in tests with registry.k8s.io/pause
    168a39dd build(deps): bump github.com/onsi/gomega from 1.20.0 to 1.20.1
    514ff3dc Cirrus: use image with fewer downloaded dependencies
    a96eb0b0 build(deps): bump github.com/opencontainers/runc from 1.1.3 to 1.1.4
    9934b173 run: add container gid to additional groups
    f46ef3b2 buildah: support for --retry and --retry-delay for push/pull failures
    811741fe Makefile: always call $(GO) instead of `go`
    010ac5e0 build(deps): bump github.com/fsouza/go-dockerclient from 1.8.2 to 1.8.3
    0c4b19ba test: use `T.TempDir` to create temporary test directory
    90cf4fc0 mount,cache: enable SElinux shared content label option by default
    354f96f6 commit: use race-free RemoveNames instead of SetNames
    491ad027 Drop util/util.Cause()
    9637a244 cmd/buildah: add "manifest create --amend"
    7533aa56 build(deps): bump github.com/fsouza/go-dockerclient from 1.8.1 to 1.8.2
    17e6fe01 docs: specify git protocol is not supported for github hosted repo
    da4647bd Scrub user and group names from layer diffs
    2eb519fb build(deps): bump github.com/containerd/containerd from 1.6.6 to 1.6.8
    3a6919b5 version: bump to 1.28.0-dev

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-01-10 13:58:07 -05:00
Bruce Ashfield
0510eb580c skopeo: update to v1.10.0
Bumping skopeo to version v1.10.0-77-g4517ea0b, which comprises the following commits:

    58bccf38 fix(deps): update module golang.org/x/term to v0.4.0
    f0c08985 [skip-ci] Update actions/stale action to v7
    92e3146a proxy: Fix leak of blobs from containers-storage
    960713da vendor: Bump golang.org/x/net to 4.0
    b51f8ea2 proxy: Ensure images are closed when proxy is shutting down
    9c6cbc94 Add an example for creating a docker-archive file
    3eb9d71d proxy: Add GetLayerInfo API
    46d48295 fix(deps): update module golang.org/x/term to v0.3.0
    3212bbed [skip-ci] GHA/Cirrus-cron: Fix execution order
    40ba7a27 Update skopeo-inspect man page example
    278be5a5 README: Update example to show newly exposed LayerData
    b5ac5349 [CI:BUILD] Cirrus: Migrate OSX task to M1
    35532b24 Adds sync with tag suffix example
    1af1d9c2 GHA: Add cirrus-cron auto-rerun job
    bdf19302 Adds `--append-suffix` flag to sync
    563c91a2 fix(deps): update module github.com/containers/storage to v1.44.0
    e1fdb4da Cirrus: Add reverse-deps. test to verify proxy ext
    d06bf27e [skip-ci] Update actions/stale action to v6
    8410bfdd fix(deps): update module golang.org/x/term to v0.2.0
    16d4a81b Renovate: Override global no-rebase option
    2b55a723 chore(deps): update actions/stale to v3
    f968b2a8 fix(deps): update module github.com/spf13/cobra to v1.6.1
    fe5c4091 Close a HTTP response body
    d5327bce fix(deps): update module golang.org/x/term to v0.1.0
    6d3d9a3b fix(deps): update module github.com/stretchr/testify to v1.8.1
    5c69302d Update to c/image main branch
    6d564d4d bump to v1.11.0-dev
    4c0e5650 chore(deps): add renovate.json
    757ec5db proxy: Bump semver for OpenImageOptional
    08b27fc5 proxy: Add `OpenImageOptional`
    9b6f5b6e Add a workaround for public.ecr.aws not implementing tag list at all
    632cebd7 Update AWS workaround to use Golang types
    ea9aa68b Reorganize the "list tags failed" logic in inspect.go a bit
    c476d626 Remove a (skopeo inspect) workaround for IBM Bluemix
    fce2cf9c Fix an error message to refer to repo, not a single image
    9724da1f Remove a special case for failing to list tags in (skopeo sync)
    955a59c8 Update tests for changed error texts
    ae50898b Include c/image after https://github.com/containers/image/pull/1299
    f3aee25c Fold a long line.
    1983173b Remove single-use "wanted" variables
    4ccfb033 Bump github.com/spf13/cobra from 1.5.0 to 1.6.0
    a4951550 Bump github.com/containers/ocicrypt from 1.1.5 to 1.1.6
    e021b675 Bump github.com/opencontainers/image-spec from 1.1.0-rc1 to 1.1.0-rc2
    5eace407 Bump to v1.10.1-dev
    ee60474d Release v1.10.0
    7ebff0f5 Update for https://github.com/klauspost/pgzip/pull/50
    787e1087 Revert addition of -compat=1.17 to (go mod tidy)
    ee84302b Update vendor containers/(common,image)
    89ae387d [CI:DOCS] Add quay-description update reminder
    feabfac2 Bump github.com/containers/storage from 1.42.0 to 1.43.0
    18a95f94 Fix documentation in the default registries.d content.
    9b40f0be default.yaml should have all options commented
    166b587a warn about ineffective destination opts in sync cmd
    0a42c33a document imageDestOptions.warnAboutIneffectiveOptions()
    90c50338 warn users about --dest-compress and --dest-decompress misuse
    d3ff6e26 warn users about --dest-compress and --dest-decompress misuse
    3a05dca9 Don't abort sync if the registry returns invalid tags
    d9dfc448 add inspect layersData
    ba23a916 Stop using docker/docker/pkg/homedir in tests
    4b9ffac0 Update for c/image's update of github.com/gobuffalo/pop
    f36752a2 Don't include git commit from a parent directory in the --version output
    4e2dee43 Remove unused GIT_BRANCH definition
    3450c11a Point at --all in the --preserve-digests option documentation
    3a808c2e Talk about "registry repositories" in (skopeo sync) documentation
    04169cac Fix looking for commands with GNU make 4.2.1
    a99bd0c9 Fix a comment
    fa2b15ff Reformat with Go 1.19's gofmt
    9e79da5e Fix running tests on macOS
    a863a0dc Optimize upstream skopeo container image build
    67a4e044 GHA: Re-use identical workflow from buildah repo
    e95123a2 Bump to v1.9.3-dev
    ca1b0f34 Release v1.9.2
    73a668e9 Bump github.com/containers/common from 0.49.0 to 0.49.1
    eafd7e55 Cirrus: Update CI VM images to match podman CI
    b9cf626e [CI:DOCS] Cirrus: Use the latest imgts container
    63dabfcf Bump to v1.9.2-dev
    2eac0f46 Release v1.9.1
    b7e7374e Stop using deprecated names from c/common/pkg/retry
    08846d18 Update to github.com/containers/common v0.49.0
    049163fc Update to github.com/containers/image/v5 v5.22.0
    b42e6648 Bump github.com/containers/storage from 1.41.0 to 1.42.0
    ee477d88 Bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0
    f1485781 Bump to v1.9.1-dev
    a03cba7c Release v1.9.0
    b000ada3 Update for the renames of sigstore to lookaside
    f2b4071b Add --sign-by-sigstore-private-key to (skopeo copy) and (skopeo sync)
    06be7a15 Vendor in c/image with sigstore support
    61593fcc Revert "Change a repo used for sync tests"
    62158a58 Vendor unreleased c/image with OCI artifact support

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-01-10 13:58:07 -05:00
Bruce Ashfield
6cb3aa39c4 podman-tui: update to v0.7.0
Bumping podman-tui to version v0.7.0-54-gab303cb, which comprises the following commits:

    d048d49 Bump actions/stale from 6 to 7
    6941d4b Bump github.com/navidys/tvxwidgets from 0.2.0 to 0.3.0
    4dc84ff displaying progressbar before container logs command
    2d6301a adding published port feature to pod create dialog
    2542fc6 removing empty first row in container and network UI create dialogs
    efab06c removing command dialog  button to imporve usability
    2bf1d94 Bump github.com/docker/docker
    5c2e001 Bump github.com/onsi/ginkgo/v2 from 2.5.1 to 2.6.0
    38971ec UI style update
    48a69ec Bump golang.org/x/crypto from 0.3.0 to 0.4.0
    a625ea1 Bump actions/checkout from 2 to 3
    a86fec2 Bump github.com/containers/buildah from 1.28.1 to 1.28.2
    9ca60c7 podman-tui container image build/push to quay.io
    d761fbb Bump github.com/containers/buildah from 1.28.0 to 1.28.1
    ae29593 Bump github.com/onsi/ginkgo/v2 from 2.5.0 to 2.5.1
    2e38146 Bump actions/setup-python from 3 to 4
    e9f743f workflow update - fix unit test failure
    a0559a6 github workflow update
    06aa9f7 fix build issue (vendor)
    d8f9836 Vagrant box update to fc37
    f25d471 Bump golang.org/x/crypto from 0.1.0 to 0.3.0
    32c3fdc Bump github.com/containers/podman/v4 from 4.3.0 to 4.3.1
    310413d Bump github.com/onsi/gomega from 1.24.0 to 1.24.1
    cbeb46a Bump github.com/containers/storage from 1.43.0 to 1.44.0
    34908fa Bump github.com/onsi/ginkgo/v2 from 2.4.0 to 2.5.0
    bad66a1 Bump github.com/navidys/tvxwidgets from 0.1.1 to 0.2.0
    5604863 Bump to v0.8.0-dev
    864efdb Bump to v0.7.0
    8cb0529 cirrus + golangci update
    b7b6461 fix vendoring failure
    770524b cirrus config update
    d7aecf7 config and pdcs update for podman v4.3.0
    e03f327 Bump actions/checkout from 2 to 3
    825e7ad Bump actions/stale from 1 to 6
    4a01ff4 Bump tim-actions/get-pr-commits from 1.1.0 to 1.2.0
    edd09ae Check for gha updates daily with dependabot
    1a78fbf Bump github.com/docker/docker
    7cae6c1 Bump github.com/onsi/gomega from 1.22.1 to 1.24.0
    a29f3d6 Bump github.com/containers/podman/v4 from 4.2.1 to 4.3.0
    95a0b04 static build support
    7ef4a18 new feature - container restore
    5726afc fix test failure for utils and network disconnect dialog
    01a47e6 Bump github.com/spf13/cobra from 1.6.0 to 1.6.1
    1a5d851 Bump github.com/BurntSushi/toml from 1.2.0 to 1.2.1
    524425e Bump github.com/onsi/ginkgo/v2 from 2.3.1 to 2.4.0
    eefa975 Bump github.com/docker/docker
    fe94ca4 new feature - container checkpoint
    7f48cad Bump github.com/docker/docker
    323170f Bump github.com/onsi/ginkgo/v2 from 2.3.0 to 2.3.1
    7132fa3 Bump github.com/onsi/gomega from 1.22.0 to 1.22.1
    8d62658 Bump github.com/onsi/ginkgo/v2 from 2.2.0 to 2.3.0
    804d67c Bump github.com/onsi/gomega from 1.21.1 to 1.22.0
    f716b4e Bump github.com/spf13/cobra from 1.5.0 to 1.6.0
    999474b Bump github.com/onsi/gomega from 1.20.2 to 1.21.1
    7d9e702 Bump github.com/containers/buildah from 1.27.2 to 1.28.0
    a2101f5 Bump github.com/containers/common from 0.49.1 to 0.50.1
    a763ca1 Bump github.com/containers/buildah from 1.27.1 to 1.27.2
    afb6a84 Bump github.com/onsi/ginkgo/v2 from 2.1.6 to 2.2.0
    134fb0d Bump github.com/docker/docker
    b304117 Bump github.com/containers/buildah from 1.27.0 to 1.27.1
    8bf10e8 Bump to v0.7.0-dev
    a823c9e Bump to v0.6.0
    0e5f649 Bump github.com/containers/podman/v4 from 4.2.0 to 4.2.1
    58c41ff Bump github.com/docker/go-units from 0.4.0 to 0.5.0
    05165bf Bump github.com/onsi/gomega from 1.20.1 to 1.20.2
    129c846 Bump github.com/onsi/ginkgo/v2 from 2.1.4 to 2.1.6
    da069d1 Bump github.com/rs/zerolog from 1.27.0 to 1.28.0
    fffd28a new feature - network disconnect
    50e88b2 adding approvers to OWNERS file + running codespell
    0db8f99 new feature - network connect
    95abf3a Bump github.com/containers/podman/v4 from 4.1.1 to 4.2.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-01-10 13:58:07 -05:00
Xiangyu Chen
e48b934c83 criu: avoid textrel QA Issue warning
Fix some of arch such as arm/aarch64 would report QA warning as below:
WARNING: criu-3.17.1+gitAUTOINC+d46f40f4ff-r0 do_package_qa: QA Issue: criu: ELF binary /usr/sbin/criu has relocations in .text [textrel]

Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-12-22 10:32:04 -05:00
Bruce Ashfield
d3acb1a378 docker/moby: use generic DOCKER_COMMIT in do_compile
do_compile() is shared and shouldn't have been using SRCREV_moby
as that is obviously only set in the moby recipe.

Switch to using a generic DOCKER_COMMIT variable and set it in
both docker_moby and docker-ce.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-12-07 16:40:04 -05:00
Bruce Ashfield
3f45dc8e69 docker: add seccomp to default packageconfig settings
Much of meta-virt requires seccomp to function properly, so we
update docker to match that common default.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-12-07 16:12:33 -05:00
Bruce Ashfield
9d84fcdc6d docker: add mobyproject:moby to CVE_PRODUCT
Add mobyproject:moby to CVE_PRODUCT to reflect where the source
is coming from for both docker recipes.

We keep the old 'docker' designation for compatibility.

It is unclear whether or not we should also be adding the cli
and libnetwork to the CVE_PRODUCT. But since they are on
different SRCREVs and not vendored, we keep them out for now.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-12-07 16:12:33 -05:00
Bruce Ashfield
d48db9ba95 crun: update to v1.7
Bumping crun to version 1.7-6-gbebd67f, which comprises the following commits:

    cb6ae27 handlers: set selinux/apparmor profile
    0efbe56 utils: change AppArmor profile for the current proc
    f1f286a utils: change SELinux label for the current proc
    a1cd1a6 handlers: use only the handler name if needed
    40d996e NEWS: tag 1.7
    3239c52 container: do not leak container status
    ab73033 utils: do not leak error
    fe21bee cgroup: fix memory leak
    10c1fcc handlers: add an alias field
    92e67d7 wasm: check pointers before dereferencing
    cc2ab3b copr: enable wasmedge support for f36 and higher
    9c5ad48 container: rewrite argv when using a handler
    a81b115 libcrun: propagate argc and argv
    0a94c5b linux: create parent dir with 0755
    5308c49 copr: crun-wasm subpackage
    8743809 crun: automatically pick handler from argv0
    ddb614b crio,test: skip unrelated seccomp notifier with *
    6feeff4 wasmtime: add support for compiling .wat format
    7b49b79 NEWS: fill data for old releases
    baa98f4 container: use clone3 to join directly the target cgroup
    37a438d cgroupfs: implement precreate cgroup
    c4af47e cgroup: new interface to preload a cgroup

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-12-07 16:12:33 -05:00
Bruce Ashfield
6499f37793 containerd: update to v1.6.9
Bumping containerd to version v1.6.9-12-g6c41694da, which comprises the following commits:

    5af8d89ce overlayutils: Add fastpath for userxattr check
    303f608dd [release/1.6] update to Go 1.18.8 to address CVE-2022-41716
    3f9f9508d ctr export strictly match default platform
    df73acad5 [release/1.6] go.mod: Bump hcsshim to v0.9.5
    658490b78 ctr import: strictly match platform
    4907b4d72 Migrate away from GitHub actions set-output
    f1493f665 Prepare release notes for v1.6.9
    346412f5a adding support of CAP_BPF and CAP_PERFMON
    99578d1fc Update mailmap
    a956d8415 Add logging volume metrics to Containerd CRI plugin
    29e2dea50 fix pusher concurrent close channel
    8a9d69385 [release/1.6] Stats() shouldn't assume s.container is non-nil
    a9adc7938 cri: PodSandboxStatus should tolerate missing task
    b66eb726a migrate from k8s.gcr.io to registry.k8s.io
    5b40993a5 [release/1.6] upgrade containerd/continuity from v0.2.2 to v0.3.0
    f2376e659 Update container with sandbox metadata after NetNS is created
    06f82efef archive: validate digests before use
    28324c529 [release/1.6] Update go 1.18.7, addresses CVE-2022-2879, CVE-2022-2880, CVE-2022-41715
    0aeeb62cb [release/1.6] update golangci-lint to v1.19.0
    7db9d1f76 Fix linter warnings
    4dc932e62 [release/1.6] gofmt with go1.19
    7b8d679ad [release/1.6] integration: remove use of deprecated io/ioutil
    926b9c72f retry request on writer reset
    b9a35c6af Add integration tests with failpoint
    1f29fac48 Persist container and sandbox if resource cleanup fails, like teardownPodNetwork
    a85709c6c integration: simplify CNI-fp and add README.md
    d89a8d223 pkg/failpoint: add FreeBSD link and update pkg doc
    b0ce2965a integration: Add injected failpoint testing for RunPodSandbox
    a7f956d86 integration: CNI bridge wrapper with failpoint
    07c479471 pkg/failpoint: add DelegatedEval API
    4a5bc05aa runtime/v2/shim: return if error in load plugin
    71ee7de24 bin/ctr,integration: new runc-shim with failpoint
    3e2e77849 runtime/v2: manager supports server interceptor
    cb935bf49 pkg/failpoint: init failpoint package
    2fdfd564c make xattr EPERM non-fatal in createTarFile
    89e49609d remotes/docker/config: Skipping TLS verification for localhost
    b720be2ce remove stray .zuul.yaml
    6b30bc4b4 .zuul: remove the zuul because it is offline
    0f7e258ee Set grpc code for unimplemented cri-api methods
    fb753e5cd update intergration
    6ee5bb7ea bump cri-api
    ae8598615 ContainerStatus to return container resources
    d3c7e31c8 Update CRI-API
    5b44c5271 vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd
    3507d600b update runc binary to v1.1.4
    1efd8b947 ci: remove GOPROXY environment variable due to https://github.com/go-yaml/yaml/issues/887

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-12-07 16:12:33 -05:00
Bruce Ashfield
11caf690da moby: update to v20.10.21
Bumping moby to version v20.10.21-4-g4ed81ac0e2, which comprises the following commits:

    f292bf0f4f distribution: Error when pulling OCI artifacts
    0211f9e44d [20.10] update to Go 1.18.8 to address CVE-2022-41716
    f99cb8297b integration: download busybox-w32 from GitHub Release
    3f9dc25f5c update containerd binary to v1.6.9
    87ccd38cea vendor: moby/term, Azure/go-ansiterm for golang.org/x/sys/windows compatibility
    e83e465ae2 [20.10] vendor: github.com/moby/buildkit eeb7b65ab7d651770a5ec52a06ea7c96eb97a249 (v0.8 branch)
    9c84417c1b skip TestImagePullStoredfDigestForOtherRepo() on Windows and rootless
    5b5b5c6f13 builder: add missing doc comment
    05e25f7892 builder: fix running git commands on Windows
    2f3bf18014 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372
    6699afa549 registry: allow "allow-nondistributable-artifacts" for Docker Hub
    4b9902bad4 Validate digest in repo for pull by digest
    c0d1188c14 builder: make git config isolation opt-in
    9f5f3abcee builder: isolate git from local system
    10db4c2db7 builder: explicitly set CWD for all git commands
    8816c3c2aa builder: modernize TestCheckoutGit
    11bdbf40b9 [20.10] Update to go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715
    66ddb7f91c Fix live-restore w/ restart policies + volume refs
    c003392582 contrib: make dockerd-rootless-setuptool.sh more robust
    53313be0f3 docker-rootless-setuptools.sh: use context after install
    9c486bd267 swagger: update links to logo
    fa17fab895 vendor: github.com/containerd/console v1.0.2
    481bee51b5 vendor: github.com/armon/go-metrics v0.4.1
    39ba2873e8 vendor: github.com/google/btree v1.1.2
    c2755f40cd vendor: github.com/hasicorp/memberlist v0.4.0
    5ba3208ec7 Dockerfile: Update Dockerfile syntax, switch to bullseye, add missing libseccomp-dev, remove build pack
    6d6a236286 [20.10] Update uses of Image platform fields in OCI image-spec
    2570784169 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch)
    fcd4df906b Update some tests for supplementary group permissions
    6a0186b357 Wrap local calls to the content and lease service
    3d4616f943 Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190
    23c7d84b84 docs: api: adjust ContainerWaitResponse error as optional
    3e9e79d134 docs: api: document ImageSummary fields (api v1.39-v1.41)
    fdd438ae03 api: docs: improve documentation of ContainerConfig type (API v1.30-v1.41)
    97014a8db5 namesgenerator: remove Valentina Tereshkova
    e44d7f735e AdditionalGids must include effective group ID
    9e7662e4a7 [20.10] vendor: update containerd to latest of docker-20.10 branch
    7dac25a3a9 vendor: update tar-split to v0.11.2
    8bd86a0699 update containerd binary to v1.6.8
    6c8dd6a6f2 update runc to v1.1.4
    418c141e64 [20.10 backport] daemon: kill exec process on ctx cancel
    d127287d92 Allow different syscalls from kernels 5.12 -> 5.16
    57db169641 seccomp: add support for Landlock syscalls in default policy
    7ba8ca042c Update golang to 1.18.5
    f2a3c3bcef update golang to 1.18.4
    a99c9cd852 update golang to 1.18.3
    82939f536b update golang to 1.18.2
    ecd1aa081f update golang to 1.18.1
    7ba67d05a8 [20.10] vendor: update archive/tar for go 1.18
    0bc432241e update golang to 1.18.0
    bb95d09f9a staticcheck: ignore "SA1019: strings.Title is deprecated"
    a7299ae72c Dockerfile: update golangci-lint v1.44.0
    d97fd533cf integration-cli: SA5011: possible nil pointer dereference (staticcheck)
    e6aee04a88 client.NewClientWithOpts(): remove redundant type assertion (gosimple)
    0523323c28 daemon/logger/awslogs: suppress false positive on hardcoded creds (gosec)
    adeb29c64c client/request.go:157:8: SA1019: err.Temporary is deprecated (staticcheck)
    50361d91a6 registry: trimV1Address(): simplify trimming trailing slash
    ae3a9337dd golangci.yml: do not limit max reported issues
    9820255a1c golangci.yml: skip some tests
    d223f37300 golangci.yml: update regex for ignoring SA1019
    ec3bfba89d graphdriver: temporarily ignore unsafeptr: possible misuse of reflect.SliceHeader
    f2f387b131 daemon: var-declaration: should omit type bool (revive)
    2fb7c9fea7 daemon/config: error strings should not be capitalized
    fa6954cb98 reformat "nolint" comments
    45fa675a35 if-return: redundant if ...; err != nil check (revive)
    9e88f8435a daemon/splunk: ignore G402: TLS MinVersion too low for now
    2de90ebbe4 pkg/archive: RebaseArchiveEntries(): ignore G110
    14b475d091 daemon/stats: fix notRunningErr / notFoundErr detected as unused (false positive)
    db7b3f4737 unused: ignore false positives
    b6de0ca7c5 G601: Implicit memory aliasing in for loop
    e8b838e99f gosec: G601: Implicit memory aliasing in for loop
    2ddf6e598a gosimple: S1039: unnecessary use of fmt.Sprintf
    fadf8bbdff staticcheck: SA4001: &*x will be simplified to x. It will not copy x
    7573e32577 client: S1031: unnecessary nil check around range (gosimple)
    e738a57a6d daemon/logger/journald: fix linting errors
    34f6b94255 gosec: G404: Use of weak random number generator
    a6d7b61c8b update containerd binary to v1.6.7
    b4ba1ee22f update runc binary to v1.1.3
    da8828c4b3 api: swagger: fix invalid example value (API v1.39-v1.41)
    9501d91e19 api: swagger: document BuildCache fields (API v1.39-v1.41)
    61fdea902b api: swagger: document BuildCache fields.
    c77432c889 [20.10] Update golang to 1.17.13
    2833aa1e4b docs: api: add missing "platform" query-arg on create (v1.41)
    a8c28260ad api: swagger: add missing "platform" query-arg on create
    cfdc075b1c Fix file capabilities droping in Dockerfile
    2daa6bb6b3 Windows: Re-create custom NAT networks after restart if missing from HNS
    903cd53ce4 vendor: libnetwork 0dde5c895075df6e3630e76f750a447cf63f4789
    eccaf6d368 [20.10] update golang to 1.17.12
    ff7feeac37 vendor: github.com/containerd/continuity v0.3.0

Bumping libnetwork to version v0.7.0-dev.3-1841-gdcdf8f17, which comprises the following commits:

    5e08bdb1 Revert: Added API to set ephemeral port allocator range
    563fe8e2 README.md: repo was moved to https://github.com/moby/moby/tree/master/libnetwork
    bea0bcf5 libnetwork: skip firewalld management for rootless
    af0c46d8 Apply peformance tuning to new sandboxes also

Bumping docker-cli to version v20.10.21, which comprises the following commits:

    3e3677e47d docs: fix links to BuildKit backend
    20e3951aeb Remove "experimental" gates around "--platform" in bash completion
    75d7ce92a2 fixed the plugin command docker-runc
    a12c535f6e [20.10] vendor docker 03df974ae9e6c219862907efdd76ec2e77ec930b (v20.10.20)
    d18a3e9004 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372
    932ca73874 [20.10] vendor: github.com/docker/docker v20.10.19
    7d51e65e72 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch)
    1ea8d69d6f feat(docker): add context argument completion
    e82aa85741 [20.10] vendor: github.com/docker/docker v20.10.18
    e9176b36cc [20.10] vendor: github.com/containerd/continuity v0.3.0
    bc6ff39e42 docs/reference: run.md update confusing example name
    3fa7a8654f docs: update deprecation status for "overlay2.override_kernel_check"
    3e06ce8bfa [20.10] Update go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715
    93eead45ee Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190
    45075ea08c [20.10] vendor: github.com/docker/docker v20.10.17
    c2dcaecf19 make compose plugin detection in bash completion work on Mac OS
    613b9362d0 Detect compose plugin
    b30d250320 Add completion for docker-compose plugin
    6b25bc3003 fix race condition in TestRemoveForce
    bdac0b38d9 Update golang to 1.18.5
    c70b01ec1f update golang to 1.18.4
    0389090aeb update golang to 1.18.3
    c904936d69 update golang to 1.18.2
    386d50c2e9 update golang to 1.18.1
    990186f2f6 update go to 1.18.0
    86bf1966e2 staticcheck: ignore SA1019: strings.Title is deprecated
    b3022b91d1 [20.10] Dockerfile.lint: use go install
    f14ba9f5d7 [20.10] Dockerfile: use syntax=docker/dockerfile:1
    c189c4dbea [20.10] vendor: github.com/json-iterator/go v1.1.12 for Go 1.18 compatibility
    0c46ffc1f9 [20.10] vendor: github.com/modern-go/reflect2 v1.0.2 for Go 1.18 compatibility
    6be9ce798e [20.10] vendor: github.com/google/gofuzz v1.0.0
    779ed309a8 lint: update golangci-lint to v1.45.2
    2f7e84be65 linting: fix incorrectly formatted errors (revive)
    e628209d9b linting: ignore some "G101: Potential hardcoded credentials" warnings
    80a3add604 cli/command/container: unnecessary use of fmt.Sprintf (gosimple)
    80fb0d575e [20.10] Update golang to 1.17.13
    d72bef2088 [20.10] update golang to 1.17.12
    7502d7e560 Fix dead external link
    308624c3b1 fix: remove asterisk from docker command suggestions
    de7d866b6a [20.10] update golang to 1.17.11
    240e4b5501 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad
    5d4776bd90 [20.10] update golang to 1.17.10
    49e9c2ae3d vendor: golang.org/x/sys  63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17)
    87a3ce2699 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456
    1d8abed17d vendor: update x/sys to 134d130e
    31dad66f9a [20.10] update golang to 1.17.9
    80f673bf9e gofmt with go1.17
    3d4cc8e699 [20.10] update remaining files to go1.17.8
    30277a8f80 update go to 1.17.8
    cfef3a7dc1 docs: deprecated: add entry for "fluent-async-connect" log-opt
    53426025c3 [20.10] docs: reformat table for compatibility
    573a664639 Describe privileged mode in terms of capabilities
    cf0ab7ac4c [20.10] vendor: github.com/docker/distribution v2.8.1
    d05fd4ffc8 [20.10] vendor: github.com/opencontainers/image-spec v1.0.2
    870f138250 [20.10] vendor: github.com/docker/docker v20.10.14
    198d6b8724 [20.10] circleci: update buildx to v0.8.2
    55a14ec851 [20.10] update remaining Dockerfiles to go 1.16.15
    1f9a0df05a e2e: update docker-compose to 1.29.2
    4ae338b33a docs: reference: remove trailing space to fix yaml formatting
    6380142dd4 docs: fix (table) formatting, fix some broken links
    82f422fcf3 docs: build: fix minor markdown and syntax issues
    80fd77903b Update the list of log drivers
    c3d4d623c8 Fix CMD --ignored-param1 example
    2e82d11def docs: dockerd: fix broken link in blockquote area
    738a6ee1cc improve cp documentation with some illustration examples
    246d96bb6c docs: unify "docker create" and "docker run" reference
    2fd0f17057 docs: add missing documentation for --pull flag
    5fa500000a Fix incorrect pointer inputs to `json.Unmarshal`
    1e6a8ce2b7 Dockerfile: update xx to 1.1
    6f7a931a2d [20.10] use GO_LDFLAGS instead of LDFLAGS to prevent inheriting unrelated options
    91bab605f7 [20.10] vendor.conf: don't use git:// protocol
    a282e0c5d2 [20.10] update to go 1.16.15 to address CVE-2022-24921
    700364e304 Fix mistake with env var example in docker run docs
    62d27c32ff Update WORKDIR command information
    c0e952cf04 Fix the (dead) link for docs for Dockerfile syntax reference
    04104a04d3 Update dockerd.md
    b721998b7b Fixing typo (his --> its)
    4065e1246e format create.md table
    f1002eb9fb Fix typo
    e97c7b240e added missing closing parenthese
    aa78937634 Update stats.md add example json output
    40fe0573aa Update Ubuntu version number references in push.md
    c9737e1c37 docs/daemon: replace deprecated '-g' option for '--data-root'
    5c6723d080 Correct device syntax to --gpus
    fd5fc61ecd [20.10] Update Go to 1.16.14
    3624019d83 [20.10] update Go to 1.16.13
    f3ff8e6ad6 [20.10] vendor: compose-on-kubernetes v0.5.0 to remove github.com/golang/glog
    ee1ac1b319 fix innocuous data-race when config.Load called in parallel
    38dd744a11 [20.10] Update Go to 1.16.12
    4de40a825e Update Go to 1.16.11
    03fa8f92c8 Update Go to 1.16.10
    9989fdbc40 Update most links in docs to use https by default
    0e20c1fd21 Update Go to 1.16.9
    1c0927a041 Dockerfile: update tonistiigi/xx to 1.0.0-rc.2, add XX_VERSION arg
    82f9d5921b info: skip client-side warning about seccomp profile on API >= 1.42
    adb01ca79d docs: some minor touch-ups in checkpoint reference
    8260476a06 docs: remove trailing space to fix generated YAML format
    bce2e1f953 docs: create.md: typo fix
    44064f51c8 Fix typo in documentation - build.md
    292779add5 Add doc for BUILDKIT_PROGRESS env var
    f2e79b826c docs: use "console" code-hint for shell examples
    fa46b92361 docs: rewrite reference docs for --stop-signal and --stop-timeout
    400f81089a experimental: fix broken link to "checkpoint and restore" page
    c72057c8db docs: move checkpoint/restore doc from experimental into reference
    77db97d595 Use private network address for default-address-pools setting in daemon.json example
    cbf0d2b7b7 docs: fix some broken anchors
    d0014a86bc docs: fix description of restart-delay to mention max (1 minute)
    6c1c8b55aa docs: fix search results by filterd is-official
    44fdac11f5 Update Go to 1.16.8
    061051c24d docs: add missing redirect, and remove /go/experimental redirect
    2012fbf111 Update Go to 1.16.7
    42d1c02750 registry: ensure default auth config has address
    0b924e51fc Update to go1.16.6
    6288e8b1ac change TestNewAPIClientFromFlagsWithHttpProxyEnv to an e2e test
    1e9575e81a cli/config/configfile: various test cleanups
    c98e9c47ca Use designated test domains (RFC2606) in tests
    8437cfefae context: deprecate support for encrypted TLS private keys
    68a5ca859f cli/context: ignore linting warnings about RFC 1423 encryption
    8a64739631 Update Dockerfiles to latest syntax, remove "experimental"
    1d37fb3027 Deprecate Kubernetes context support
    0793f96394 Deprecate Kubernetes stack support
    b639ea8b89 Deprecate Kubernetes stack support

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>

docker-ce: update to v20.10.21

Bumping docker to version v20.10.21-4-g4ed81ac0e2, which comprises the following commits:

    f292bf0f4f distribution: Error when pulling OCI artifacts
    0211f9e44d [20.10] update to Go 1.18.8 to address CVE-2022-41716
    f99cb8297b integration: download busybox-w32 from GitHub Release
    3f9dc25f5c update containerd binary to v1.6.9
    87ccd38cea vendor: moby/term, Azure/go-ansiterm for golang.org/x/sys/windows compatibility
    e83e465ae2 [20.10] vendor: github.com/moby/buildkit eeb7b65ab7d651770a5ec52a06ea7c96eb97a249 (v0.8 branch)
    9c84417c1b skip TestImagePullStoredfDigestForOtherRepo() on Windows and rootless
    5b5b5c6f13 builder: add missing doc comment
    05e25f7892 builder: fix running git commands on Windows
    2f3bf18014 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372
    6699afa549 registry: allow "allow-nondistributable-artifacts" for Docker Hub
    4b9902bad4 Validate digest in repo for pull by digest
    c0d1188c14 builder: make git config isolation opt-in
    9f5f3abcee builder: isolate git from local system
    10db4c2db7 builder: explicitly set CWD for all git commands
    8816c3c2aa builder: modernize TestCheckoutGit
    11bdbf40b9 [20.10] Update to go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715
    66ddb7f91c Fix live-restore w/ restart policies + volume refs
    c003392582 contrib: make dockerd-rootless-setuptool.sh more robust
    53313be0f3 docker-rootless-setuptools.sh: use context after install
    9c486bd267 swagger: update links to logo
    fa17fab895 vendor: github.com/containerd/console v1.0.2
    481bee51b5 vendor: github.com/armon/go-metrics v0.4.1
    39ba2873e8 vendor: github.com/google/btree v1.1.2
    c2755f40cd vendor: github.com/hasicorp/memberlist v0.4.0
    5ba3208ec7 Dockerfile: Update Dockerfile syntax, switch to bullseye, add missing libseccomp-dev, remove build pack
    6d6a236286 [20.10] Update uses of Image platform fields in OCI image-spec
    2570784169 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch)
    fcd4df906b Update some tests for supplementary group permissions
    6a0186b357 Wrap local calls to the content and lease service
    3d4616f943 Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190
    23c7d84b84 docs: api: adjust ContainerWaitResponse error as optional
    3e9e79d134 docs: api: document ImageSummary fields (api v1.39-v1.41)
    fdd438ae03 api: docs: improve documentation of ContainerConfig type (API v1.30-v1.41)
    97014a8db5 namesgenerator: remove Valentina Tereshkova
    e44d7f735e AdditionalGids must include effective group ID
    9e7662e4a7 [20.10] vendor: update containerd to latest of docker-20.10 branch
    7dac25a3a9 vendor: update tar-split to v0.11.2
    8bd86a0699 update containerd binary to v1.6.8
    6c8dd6a6f2 update runc to v1.1.4
    418c141e64 [20.10 backport] daemon: kill exec process on ctx cancel
    d127287d92 Allow different syscalls from kernels 5.12 -> 5.16
    57db169641 seccomp: add support for Landlock syscalls in default policy
    7ba8ca042c Update golang to 1.18.5
    f2a3c3bcef update golang to 1.18.4
    a99c9cd852 update golang to 1.18.3
    82939f536b update golang to 1.18.2
    ecd1aa081f update golang to 1.18.1
    7ba67d05a8 [20.10] vendor: update archive/tar for go 1.18
    0bc432241e update golang to 1.18.0
    bb95d09f9a staticcheck: ignore "SA1019: strings.Title is deprecated"
    a7299ae72c Dockerfile: update golangci-lint v1.44.0
    d97fd533cf integration-cli: SA5011: possible nil pointer dereference (staticcheck)
    e6aee04a88 client.NewClientWithOpts(): remove redundant type assertion (gosimple)
    0523323c28 daemon/logger/awslogs: suppress false positive on hardcoded creds (gosec)
    adeb29c64c client/request.go:157:8: SA1019: err.Temporary is deprecated (staticcheck)
    50361d91a6 registry: trimV1Address(): simplify trimming trailing slash
    ae3a9337dd golangci.yml: do not limit max reported issues
    9820255a1c golangci.yml: skip some tests
    d223f37300 golangci.yml: update regex for ignoring SA1019
    ec3bfba89d graphdriver: temporarily ignore unsafeptr: possible misuse of reflect.SliceHeader
    f2f387b131 daemon: var-declaration: should omit type bool (revive)
    2fb7c9fea7 daemon/config: error strings should not be capitalized
    fa6954cb98 reformat "nolint" comments
    45fa675a35 if-return: redundant if ...; err != nil check (revive)
    9e88f8435a daemon/splunk: ignore G402: TLS MinVersion too low for now
    2de90ebbe4 pkg/archive: RebaseArchiveEntries(): ignore G110
    14b475d091 daemon/stats: fix notRunningErr / notFoundErr detected as unused (false positive)
    db7b3f4737 unused: ignore false positives
    b6de0ca7c5 G601: Implicit memory aliasing in for loop
    e8b838e99f gosec: G601: Implicit memory aliasing in for loop
    2ddf6e598a gosimple: S1039: unnecessary use of fmt.Sprintf
    fadf8bbdff staticcheck: SA4001: &*x will be simplified to x. It will not copy x
    7573e32577 client: S1031: unnecessary nil check around range (gosimple)
    e738a57a6d daemon/logger/journald: fix linting errors
    34f6b94255 gosec: G404: Use of weak random number generator
    a6d7b61c8b update containerd binary to v1.6.7
    b4ba1ee22f update runc binary to v1.1.3
    da8828c4b3 api: swagger: fix invalid example value (API v1.39-v1.41)
    9501d91e19 api: swagger: document BuildCache fields (API v1.39-v1.41)
    61fdea902b api: swagger: document BuildCache fields.
    c77432c889 [20.10] Update golang to 1.17.13
    2833aa1e4b docs: api: add missing "platform" query-arg on create (v1.41)
    a8c28260ad api: swagger: add missing "platform" query-arg on create
    cfdc075b1c Fix file capabilities droping in Dockerfile
    2daa6bb6b3 Windows: Re-create custom NAT networks after restart if missing from HNS
    903cd53ce4 vendor: libnetwork 0dde5c895075df6e3630e76f750a447cf63f4789
    eccaf6d368 [20.10] update golang to 1.17.12
    ff7feeac37 vendor: github.com/containerd/continuity v0.3.0

Bumping libnetwork to version v0.7.0-dev.3-1841-gdcdf8f17, which comprises the following commits:

    5e08bdb1 Revert: Added API to set ephemeral port allocator range
    563fe8e2 README.md: repo was moved to https://github.com/moby/moby/tree/master/libnetwork
    bea0bcf5 libnetwork: skip firewalld management for rootless
    af0c46d8 Apply peformance tuning to new sandboxes also

Bumping docker-cli to version v20.10.21, which comprises the following commits:

    3e3677e47d docs: fix links to BuildKit backend
    20e3951aeb Remove "experimental" gates around "--platform" in bash completion
    75d7ce92a2 fixed the plugin command docker-runc
    a12c535f6e [20.10] vendor docker 03df974ae9e6c219862907efdd76ec2e77ec930b (v20.10.20)
    d18a3e9004 [20.10] vendor moby/buildkit v0.8.3-31-gc0149372
    932ca73874 [20.10] vendor: github.com/docker/docker v20.10.19
    7d51e65e72 [20.10] vendor: github.com/moby/buildkit 3a1eeca59a9263613d996ead67d53a4b7d45723d (v0.8 branch)
    1ea8d69d6f feat(docker): add context argument completion
    e82aa85741 [20.10] vendor: github.com/docker/docker v20.10.18
    e9176b36cc [20.10] vendor: github.com/containerd/continuity v0.3.0
    bc6ff39e42 docs/reference: run.md update confusing example name
    3fa7a8654f docs: update deprecation status for "overlay2.override_kernel_check"
    3e06ce8bfa [20.10] Update go 1.18.7 to address CVE-2022-2879, CVE-2022-2880, CVE-2022-41715
    93eead45ee Update to go 1.18.6 to address CVE-2022-27664, CVE-2022-32190
    45075ea08c [20.10] vendor: github.com/docker/docker v20.10.17
    c2dcaecf19 make compose plugin detection in bash completion work on Mac OS
    613b9362d0 Detect compose plugin
    b30d250320 Add completion for docker-compose plugin
    6b25bc3003 fix race condition in TestRemoveForce
    bdac0b38d9 Update golang to 1.18.5
    c70b01ec1f update golang to 1.18.4
    0389090aeb update golang to 1.18.3
    c904936d69 update golang to 1.18.2
    386d50c2e9 update golang to 1.18.1
    990186f2f6 update go to 1.18.0
    86bf1966e2 staticcheck: ignore SA1019: strings.Title is deprecated
    b3022b91d1 [20.10] Dockerfile.lint: use go install
    f14ba9f5d7 [20.10] Dockerfile: use syntax=docker/dockerfile:1
    c189c4dbea [20.10] vendor: github.com/json-iterator/go v1.1.12 for Go 1.18 compatibility
    0c46ffc1f9 [20.10] vendor: github.com/modern-go/reflect2 v1.0.2 for Go 1.18 compatibility
    6be9ce798e [20.10] vendor: github.com/google/gofuzz v1.0.0
    779ed309a8 lint: update golangci-lint to v1.45.2
    2f7e84be65 linting: fix incorrectly formatted errors (revive)
    e628209d9b linting: ignore some "G101: Potential hardcoded credentials" warnings
    80a3add604 cli/command/container: unnecessary use of fmt.Sprintf (gosimple)
    80fb0d575e [20.10] Update golang to 1.17.13
    d72bef2088 [20.10] update golang to 1.17.12
    7502d7e560 Fix dead external link

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>

containerd: update to v1.6.9

Bumping containerd to version v1.6.9-12-g6c41694da, which comprises the following commits:

    5af8d89ce overlayutils: Add fastpath for userxattr check
    303f608dd [release/1.6] update to Go 1.18.8 to address CVE-2022-41716
    3f9f9508d ctr export strictly match default platform
    df73acad5 [release/1.6] go.mod: Bump hcsshim to v0.9.5
    658490b78 ctr import: strictly match platform
    4907b4d72 Migrate away from GitHub actions set-output
    f1493f665 Prepare release notes for v1.6.9
    346412f5a adding support of CAP_BPF and CAP_PERFMON
    99578d1fc Update mailmap
    a956d8415 Add logging volume metrics to Containerd CRI plugin
    29e2dea50 fix pusher concurrent close channel
    8a9d69385 [release/1.6] Stats() shouldn't assume s.container is non-nil
    a9adc7938 cri: PodSandboxStatus should tolerate missing task
    b66eb726a migrate from k8s.gcr.io to registry.k8s.io
    5b40993a5 [release/1.6] upgrade containerd/continuity from v0.2.2 to v0.3.0
    f2376e659 Update container with sandbox metadata after NetNS is created
    06f82efef archive: validate digests before use
    28324c529 [release/1.6] Update go 1.18.7, addresses CVE-2022-2879, CVE-2022-2880, CVE-2022-41715
    0aeeb62cb [release/1.6] update golangci-lint to v1.19.0
    7db9d1f76 Fix linter warnings
    4dc932e62 [release/1.6] gofmt with go1.19
    7b8d679ad [release/1.6] integration: remove use of deprecated io/ioutil
    926b9c72f retry request on writer reset
    b9a35c6af Add integration tests with failpoint
    1f29fac48 Persist container and sandbox if resource cleanup fails, like teardownPodNetwork
    a85709c6c integration: simplify CNI-fp and add README.md
    d89a8d223 pkg/failpoint: add FreeBSD link and update pkg doc
    b0ce2965a integration: Add injected failpoint testing for RunPodSandbox
    a7f956d86 integration: CNI bridge wrapper with failpoint
    07c479471 pkg/failpoint: add DelegatedEval API
    4a5bc05aa runtime/v2/shim: return if error in load plugin
    71ee7de24 bin/ctr,integration: new runc-shim with failpoint
    3e2e77849 runtime/v2: manager supports server interceptor
    cb935bf49 pkg/failpoint: init failpoint package
    2fdfd564c make xattr EPERM non-fatal in createTarFile
    89e49609d remotes/docker/config: Skipping TLS verification for localhost
    b720be2ce remove stray .zuul.yaml
    6b30bc4b4 .zuul: remove the zuul because it is offline
    0f7e258ee Set grpc code for unimplemented cri-api methods
    fb753e5cd update intergration
    6ee5bb7ea bump cri-api
    ae8598615 ContainerStatus to return container resources
    d3c7e31c8 Update CRI-API
    5b44c5271 vendor: golang.org/x/crypto v0.0.0-20220315160706-3147a52a75dd
    3507d600b update runc binary to v1.1.4
    1efd8b947 ci: remove GOPROXY environment variable due to https://github.com/go-yaml/yaml/issues/887

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-12-07 16:12:33 -05:00
Bruce Ashfield
99e93d3f88 runc: update to 1.1.4-tip
Bumping runc to version v1.1.4-8-g974efd2d, which comprises the following commits:

    3b958289 Fixes inability to use /dev/null when inside a container
    335ec376 cirrus-ci: install EPEL on CentOS 7 conditionally
    fb145a2f cirrus-ci: enable EPEL for CentOS 7
    276297b6 VERSION: back to development
    5fd4c4d1 Release 1.1.4
    204c673c [1.1] fix failed exec after systemctl daemon-reload
    ec2efc2c ci: fix for codespell 2.2
    c778598c [1.1] ci/gha: fix cross-386 job vs go 1.19
    d83a861d Fix error from runc run on noexec fs
    d614445d [1.1] libct/nsenter: switch to sane_kill()
    3ca5673f CI: workaround CentOS Stream 9 criu issue
    c3986e53 tests/int: don't use --criu
    f46c0dad [1.1] ci: fix delete.bats for GHA
    6b94849d tests/int: runc delete: fix flake, enable for rootless
    fa3354dc libct: fix mounting via wrong proc fd
    eb1552a0 VERSION: back to development
    6724737f VERSION: release 1.1.3
    91fa032d ci: add basic checks for CHANGELOG.md

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-12-07 16:12:27 -05:00
Bruce Ashfield
6dba10357c runc-docker: update to 1.1.4-tip
Bumping runc to version v1.1.4-8-g974efd2d, which comprises the following commits:

    3b958289 Fixes inability to use /dev/null when inside a container
    335ec376 cirrus-ci: install EPEL on CentOS 7 conditionally
    fb145a2f cirrus-ci: enable EPEL for CentOS 7
    276297b6 VERSION: back to development
    5fd4c4d1 Release 1.1.4
    204c673c [1.1] fix failed exec after systemctl daemon-reload
    ec2efc2c ci: fix for codespell 2.2
    c778598c [1.1] ci/gha: fix cross-386 job vs go 1.19
    d83a861d Fix error from runc run on noexec fs
    d614445d [1.1] libct/nsenter: switch to sane_kill()
    3ca5673f CI: workaround CentOS Stream 9 criu issue
    c3986e53 tests/int: don't use --criu
    f46c0dad [1.1] ci: fix delete.bats for GHA
    6b94849d tests/int: runc delete: fix flake, enable for rootless
    fa3354dc libct: fix mounting via wrong proc fd
    eb1552a0 VERSION: back to development
    6724737f VERSION: release 1.1.3
    91fa032d ci: add basic checks for CHANGELOG.md

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-12-01 17:01:44 -05:00
Bruce Ashfield
40c9a3afca crun: update to 1.6+
Bumping crun to version 1.6-75-g4907f10, which comprises the following commits:

    0e4cf20 container: pass the argv0 on errors with handlers
    6da989c wasmtime: honor error message length
    2f46f21 wasmtime: mark unused argument
    baa98f4 container: use clone3 to join directly the target cgroup
    2497b9b linux: add run.oci.pidfd_receiver=PATH annotation
    37a438d cgroupfs: implement precreate cgroup
    c4af47e cgroup: new interface to preload a cgroup
    352d8ac criu: use a temporary error
    3ebaba3 container: cache the bpf generated by seccomp
    18abbfc Typos: a/an
    e5d4c07 man: fix indentation for run.oci.handler=HANDLER
    74d097b seccomp: use relative paths to open bpf
    8cfcc8f seccomp: move copy bpf to seccomp
    7a66ccc container: move open_seccomp_output to seccomp
    a2de8fb seccomp: add functions to calculate checksum
    6861b2a container: compute seccomp options earlier
    dd310aa configure.ac: add check for libgcrypt
    81d3b16 exec: set context
    0cffffe crun: display rundir in --version output
    882a054 wasm: inherit environment variables in the WasmEdge handler
    1f71880 man: cleanup run.oci.handler and define krun and wasm
    d474211 Refer to libocispec header files under ocispec/
    5027629 build(deps): bump uraimo/run-on-arch-action from 2.2.1 to 2.3.0
    fef6ce2 build(deps): bump github/codeql-action from 1 to 2
    5837234 crun: open libcrun with dlopen
    5f2464f build(deps): bump actions/cache from 2 to 3
    ba0adeb build(deps): bump uraimo/run-on-arch-action from 2.2.0 to 2.2.1
    5d2a536 build(deps): bump actions/upload-artifact from 2 to 3
    a4ffe17 build(deps): bump actions/checkout from 2 to 3
    108d9ec Check for github actions updates on weekly basis
    9f2acfc cgroup: account for swap usage for checkBeforeUsage
    6666dec list: remove yajl usage
    6fdcb89 container: new API libcrun_write_json_containers_list
    e1b32c7 update: remove yajl usage
    270961f python: Fix argument type in container_delete
    17f4e55 container: new API libcrun_container_update_from_values
    1c681c1 python: Fix argument parsing in make_context
    e666af1 crun: chown std streams before joining the user namespace
    391df45 linux: reject sysctl kernel.domainname when OCI knob domainname is set
    f94655c test: ack (none) as output of getdomainname
    fdb26d0 cgroup: honor checkBeforeUpdate
    8758f31 add support for setting the domainname
    17ba516 libocispec update
    7ea7617 systemd: create sub-cgroup on v1 as well
    08bccc7 tests: update containerd to 1.6.8
    978e719 Copr: Fix i386 builds
    18cf2ef NEWS: tag 1.6
    396ac88 seccomp: honor SECCOMP_FILTER_FLAG_WAIT_KILLABLE_RECV
    074cd9a wasm: provide an integration test for crun with wasmedge support
    399e5ea wasm: use wasmedge library soname in dlopen
    3e34345 crun: reintroduce -V (uppercase) as an alias for --version
    17337c4 seccomp: use helper process to send listener fd
    f34ebf2 Copr: wasmtime support only for non-x86
    df20997 crun: now -v prints the version
    fdcf83a utils: wrap mmap and munmap
    95744c8 utils: unify read process exit status
    44c305f linux: move definition of syscall_clone to linux.h
    d254d3e utils: run process with timeout restores sigmask
    57df79b init mask
    430dea1 container: drop intermediate userns feature
    2e647e0 crio,CI: skip failing checkpoint and restore one container
    8d0dfc3 podman,CI: skip top on priviledged container
    ad9008b copr: depend on wasmtime-c-api for shared lib

Bumping runtime-spec to version v1.0.2-114-g494a5a6, which comprises the following commits:

    4bcd065 seccomp: Add flag SECCOMP_FILTER_FLAG_WAIT_KILLABLE_RECV
    6be797c CODEOWNERS: sync with MAINTAINERS
    9e658bc config-linux: add memory.checkBeforeUpdate
    1924f6b GOVERNANCE: correct the Charter URL
    744912b add domainname spec entity
    0da1600 fix rfc link
    b57ada5 maintainer updates as per #1101
    e78a3c3 Add available `LinuxSeccompFlag`s

Bumping libocispec to latest, which comprises the following commits:

    02f231b Move header files under ocispec/
    39e1872 Make libocispec installable
    6fd1d94 update runtime-spec to latest
    1e37c8a rust, runtime: add domainname to spec
    d59cc93 rust,runtime: add MountUidMapping and MountGidMapping
    ac69f5a rust,runtime: add idle type to CPU
    e9c21c1 rust,runtime: rename GidMapping,UidMapping to Linux{Uid/Gid}Mapping
    8258e1d image-spec: update from upstream
    b2e74e1 runtime-spec: update from upstream
    ce973fd parser: allocate empty arrays
    845aad5 runtime-spec: sync from upstream
    1380666 image-spec: sync from upstream
    9bb6aa9 src: fix regression
    27763d8 runtime-spec: sync from upstream
    8abb1b1 image-spec: update from upstream
    2ea0d22 runtime-spec: update from upstream
    cde73d8 yajl: update from upstream
    fc57095 src: fix generated code indentation
    e739a1c .github: set safe directory
    f09f411 build: fix bashism in configure.ac
    23ed5eb git: ignore newly added test binary to prevent untracked changes in crun
    d15ed35 fix bug when contain null value in json
    2a622ef image-spec: update from upstream
    3dd60db runtime-spec: update from upstream
    88241d7 sync: add CMT and MBM fields to Intel RDT

Bumping image-spec to version v1.1.0-rc2-12-g4df8887, which comprises the following commits:

    867ce74 ArtifactType is optional, omit when empty
    59780aa Add ArgsEscaped field to image config
    3625ee3 doc: fix example in artifact.md
    94f2431 version: bump main back to -dev
    19a74bc version: release v1.1.0-rc2
    0a97fe7 docs: Added artifact.md to docs and spec.md
    c91663b Update RELEASES.md
    0e7e0dd docs: Update release process docs with checklist
    5d055a4 version: switch back to -dev
    4728b6e version: bump for 1.1.0-rc1 release
    a7ac485 Rename refers field to subject (#950)
    4c15674 Use go install and full path to commands
    ce50f1f Bump from Go 1.16 to 1.17
    ca2e500 Embed Platform in Image
    a865bc0 Fix whitespace consistency in config.md
    da33ef0 Remove io/ioutil references
    ed7e07b Add artifact to spec.md
    bc9c4bd Update schema for mediaType validation (#933)
    b04b320 Working Group Proposal for Reference Types
    ba36edd Add regclient to implementations
    ba3f174 Add maintainer nomination template
    08825b8 Pinning version of golangci-lint to support 1.16
    9747134 Move inactive maintainers to emeritus
    0bd8a03 Add Brandon as maintainer
    c7ca3ac Update URLs to https
    874a191 Add Sajay as maintainer
    6ffdc78 Move inactive maintainers to emeritus
    d6ce48a Add mediaType fields into example manifest & image index JSON references
    bc44f5b Fixing charter link
    0895292 implementations: point to krustlet/oci-distribution
    02c5c05 implementations: adding the C and Rust libraries
    a36b0c8 Handle multiple matching index entries
    a3eee7d README.md: Remove link to OCI scope table The OCI scope table no-longer exists.
    4533d3e schema: use Go's embed package instead of esc
    d147780 .tool: remove lint tool, call linter directly
    0e094f3 schema, specs-go: fix lint errors
    d3cd202 *: switch to golangci-lint
    4d865bc go: have the go.mod at top-level
    0f6c001 Remove unneeded docker pull of pandoc image
    de28903 Makefile: stale installation of glide was failing
    3a46ac8 github: bring forward the versions of golang tested/built with
    6ced3bd media-types: `.mediaType` is available in both OCI and Docker
    3be64d9 version: bump main back to -dev
    beccafd version: release 1.0.2
    5b82148 specs-go: adding `mediaType` to the index and manifest structures
    2eb4046 *.md: bring mediaType out of reserved status
    e3885ce version: bump main back to -dev
    67d2d56 version: release 1.0.2
    dcdcb7f specs-go: adding `mediaType` to the index and manifest structures
    5f31485 *.md: bring mediaType out of reserved status
    3fee04b Adding ACR to implementations
    8087946 Reflect docker dontation of distribution to CNCF
    bd2fa25 Minor spelling correction
    fc4df0a Fix very minor oversight in config example
    0d98a6c Scope data verification to content consumers
    83479d4 Clean up portability considerations
    fccc435 Implementations MUST NOT populate data arbitrarily
    2596ec0 Expand godoc for Data
    58c082d Add note about portability concerns
    ce281ce Add Embedded Data section
    aaf8045 Define the data field
    4f080a7 Add go.mod and pin dependencies

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-12-01 17:01:44 -05:00
Bruce Ashfield
43396cb671 podman: update to 4.3
We add ${datadir}/user-tmpfiles.d/* to package some newly added systemd
files, but otherwise, the recipe is unchanged.

Bumping libpod to version v4.3.0-7-g9ce592fcb, which comprises the following commits:

    83b02f8fd Update c/image from release-5.23 branch
    14563ef13 system tests: fix broken bashisms
    34ebb9af2 Release notes fixes
    d5a0dfc1e Bump to v4.3.1-dev
    ad42af949 Bump to v4.3.0
    9496a3836 Final release notes for v4.3.0
    ac7fa8437 libpod: Add support for 'podman top' on FreeBSD
    f8a79409c libpod: Factor out jail name construction from stats_freebsd.go
    e33306683 pkg/util: Add pid information descriptors for FreeBSD
    3810a9dac [CI:BUILD] copr: podman rpm should depend on containers-common-extra
    94499aa47 Podman image: Set default_sysctls to empty for rootless containers
    8a28b896b Allow volume mount dups, iff source and dest dirs
    295d0d1d9 libpod: Factor out the call to PidFdOpen from (*Container).WaitForExit
    c9c683a58 markdown-preprocess: add generic include mechanism
    42a221874 markdown-preprocess: almost complete OO rewrite
    ca9eaec5e bump golangci-lint to v1.49.0
    6972d47ff rootless: fix return value handling
    5a214f6e5 generate systemd: set --stop-timeout for stopping containers
    c6ad786ca Change to correct break statements
    1a5506459 Add swagger install + allow version updates in CI
    78d4af894 Cirrus: Fix windows clone race
    fc43751e7 kill: wait for the container
    9c01425ad hack/tree_status.sh: print diff at the end
    682dd8e45 Man pages: refactor common options (misc)
    b98f6b52f Man pages: Refactor common options: --detach-keys
    c7e946482 Man pages: refactor common options: --attach
    83b5fcf38 build(deps): bump github.com/fsnotify/fsnotify from 1.5.4 to 1.6.0
    6d5d84a05 Man pages: refactor common options: --annotation (manifest)
    7f88deff1 KillContainer: improve error message
    b805a068c build(deps): bump github.com/containers/ocicrypt from 1.1.5 to 1.1.6
    42b642509 docs: add missing options
    f2a2ab557 build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0
    095aa5c3a play kube: notifyproxy: listen before starting the pod
    b7514ee40 build(deps): bump golang.org/x/text from 0.3.7 to 0.3.8
    f7732ae52 Man pages: refactor common options: --os-version
    298a2432e play kube: add support for configmap binaryData
    2efdff528 build(deps): bump github.com/onsi/gomega from 1.20.2 to 1.22.1
    802118ad1 Revert "Add checkpoint image tests"
    dfa55ff6a Revert "cmd/podman: add support for checkpoint images"
    eb43d175c system tests: health-on-failure: fix broken logic
    ee5bd1e0c Man pages: Add mention of behavior due to XDG_CONFIG_HOME
    c88dfbb98 Add and use libpod/Container.Terminal() helper
    cbde35e32 Avoid unnecessary timeout of 250msec when waiting on container shutdown
    d15b4af92 healthcheck: fix --on-failure=stop
    81c645f2f libpod: Add support for 'podman pod' on FreeBSD
    546e9445e libpod: Factor out cgroup validation from (*Runtime).NewPod
    26df7d97c libpod: Move runtime_pod_linux.go to runtime_pod_common.go
    70e0cb509 specgen/generate: Avoid a nil dereference in MakePod
    f92360283 libpod: Factor out cgroups handling from (*Pod).refresh
    b9d479b72 health checks: make on-failure action retry aware
    ead78d8ba libpod: Remove 100msec delay during shutdown
    640eac465 Clean up when stopping pods
    d31a06ce8 Create full path to a directory when DirectoryOrCreate is used with play kube
    9ce61988d Return error in podman system service if URI scheme is not unix/tcp
    8041df3b6 Update vendor of containers/buildah v1.28.0
    d13509f27 Man pages: refactor common options: --time
    c16078f2d Release notes for all content before cherry-picks
    3451aac35 Man pages: refactor common options: --pod
    aaa9f4ea9 Prevent nil pointer deref in GetImage
    f250560a8 Add pods created by kube play to a default network
    26468c227 Man pages: refactor common options: --features
    2f6c911d6 build(deps): bump github.com/opencontainers/image-spec
    62bc8e3a1 Cirrus: Fix tag & branch go checks failing
    eaa389262 Man pages: refactor common options: --variant
    9bafd9c46 Man pages: refactor common options: --compression-format
    eb7f54ef6 cleanup: always delete netns mount
    a2581abbf Adds brew info podman to issue template.
    73c8416c3 Update for https://github.com/klauspost/pgzip/pull/50
    02b0f9fc3 container inspect: include image digest
    fe3c91d58 Update vendor containers/(common,image)
    f304a1757 Fix typo about e2e tests name
    66747351f [CI:DOCS] Add quay-description update reminder
    0660f5b7a Cirrus: Combine build and code consistency tasks
    6c8a11b74 Cirrus: Combine pre-test checks into build task
    0e7d166ee Cirrus: Minor YAML comment/whitespace fix
    e7328cb97 Man pages: refactor common options: --network
    fe2b4df38 podman kube play allow --network host
    e4c0c8994 Man pages: Refactor common options: --sign-passphrase-file
    309f4fb54 Man pages: refactor common options: --log-opt
    6f821f03d `podman pod logs -l` no longer panics
    f00ceaabd vendor: bump c/common to v0.49.2-0.20220929111928-2d1b45ae2423
    3b5171d0e fix "podman system prune networks" flake
    ebff193f8 Add test for podman run with checkpoint image
    9c3d8bb49 cmd/podman: add support for checkpoint images
    b17d8ff46 restore: make IsCheckpointImage reusable
    e2fe9eaba Revert "remote: fix manifest add --annotation"
    32f54a81e remote: fix manifest add --annotation
    496d4c753 System tests: stop deep-checking log-level
    ba70dd5ec build(deps): bump github.com/container-orchestrated-devices/container-device-interface
    66517d86a fix: kube play liveness probe http path
    f5fc0960e Default missing hostPort to containerPort is defined in kube.yaml
    359e39744 libpod: Add volume support for FreeBSD
    abe8dad34 libpod: Factor out usage of unix.MNT_DETACH from (*Volume).unmount
    9de2a5ff7 libpod: Move volume_internal_linux.go to volume_internal_common.go
    065474755 libpod: Move runtime_volume_linux.go to runtime_volume_common.go
    95cb14aff fix: liveness check with http probe
    3e8093152 System tests: light cleanup
    0fb95f95d CI: only make install.tools when needed
    2e4e1bb97 podman machine ssh handling
    53d604182 Cirrus: Build pkginstaller in CI
    c1ae7f193 Add SELinux information about boolean for using random devices
    f32b02c7b Bump to v4.3.0-dev
    f818eb4a5 Bump to v4.3.0-RC1
    527fc409e Cirrus: Add golang code consistency check script
    f6724116a Man pages: refactor common options: --env-file
    7bc36602f auto-update: validate container image
    fa18d35e8 Man pages: refactor common options: --env
    911ceb823 Man pages: Refactor common options: --sig-proxy
    fde4d21be man page xref: verify page title
    8c627dfb5 Contrib: Add containerfile to create podman-remote binary image
    9261a5469 Remove redundant log message
    52656887e compat API: network inspect do not show isolate option
    337f1f586 [CI:DOCS] man pages: fix incorrect title
    f5e83f684 Fixup Buildah merge
    54653ceeb Update vendor or containers/buildah
    3a5b5d04b Fix machine starting state
    69ac1e36c Cirrus: Catch use of deprecated io/ioutil package
    8ff54cbe8 Fix libsubid detection
    326d386ee [CI:BUILD] Copr: also define _user_tmpfilesdir for f35
    2478e32ca fix restore API endpoint
    6ee582315 Events for containers in pods now include the pod's ID
    dc05d1212 Add --pretty to podman secret inspect
    fc6dcd12b Add support for 'image' volume driver
    5a2405ae1 Don't mount /dev/tty* inside privileged containers running systemd
    d5f044ee7 System tests: reenable some skipped aarch64 tests
    33c31112f cli: Add signature-policy flag to podman save
    ba6f84666 Fix a few missed io/ioutil -> os updates
    fb3d55006 Improve generate systemd format
    9bb51e8e9 Add labels to secrets
    7cfe0328f Add support to sig-proxy for podman-remote
    377773ab5 Fix podman-remote run --attach stdin to show container ID
    d968f3fe0 Replace deprecated ioutil
    bb160be12 libpod: Implement 'podman cp' for FreeBSD
    88f82ceab libpod: Move jointMountAndExec to container_copy_linux.go
    75d6e7bae libpod: Move part of (*Container).stat to container_stat_linux.go
    0b02d4cee libpod: Move container_copy_linux.go to container_copy_common.go
    24d129071 libpod: Move container_stat_linux.go to container_stat_common.go
    6790deb1b man pages: document some --format options
    23195646d pkginstaller: use path_helper to add podman and helpers to path
    dc8fdb46c label.Relabel third option is shared not recurse
    049b10884 podman container clone env patch
    903f551ae build(deps): bump github.com/coreos/go-systemd/v22 from 22.3.2 to 22.4.0
    4a053a821 notifyproxy: don't set a read deadline
    1071098ee kube play: sdnotify proxy: use a wait group
    21841dc38 Default to --dns-option to match Docker and Buildah
    d63e49a26 remote: checkpoint --export prints a rawInput or an error on remote
    cfbc4aaeb Cleanup: fix problems reported by shell lint
    e2573b734 Fix broken titles on readthedocs
    62d1c487d Man pages: Refactor common options: --dns
    7d1f688ff [CI:DOCS] man pages: document some --format options
    884fd4575 Revert "generate systemd: drop ExecStop"
    3508bd22f Add support for podman context as alias to podman system connection
    9ba034293 Man pages: refactor common options: 2 stats opts
    c20abf12c generate systemd: drop ExecStop
    45d09e65b libpod: Make getContainerInspectData work on FreeBSD
    2e4db139a libpod: Factor out platform-specfic code from generateInspectContainerHostConfig
    60ef4ad1c stats: cap memory limit to the available memory
    cf2118eab stats: map MaxUsage to the correct value
    3f8591c2f Man pages: refactor common options: --shm-size
    f76390d5e Man pages: refactor common options: --user
    e19e0de5f Introduce graph-based pod container removal
    51a8635c7 Cirrus: Fix win_installer task clone failure
    cb6ad7631 Cirrus: Only run unit-testing on Fedora.
    815655b9d Cirrus: Move gitlab test to cirrus-cron "main"
    88879d588 System tests: cleanup in --format test
    d4a62ff93 System tests: fix three races
    14e5d1c15 libpod: fix lookup for subpath in volumes
    92dc61d5e libpod: rename function
    42937cd9a Ensure that a broken OCI spec does not break inspect
    b6c75a3cc Man pages: refactor common options: --preserve-fds, -it
    dd53ee599 fix ci: update systemd generate unit test
    4df460836 Man pages: refactor common options: --ip6
    47fff4b00 improve slirp4netns allow_host_loopback docs
    0aedddd3b [systemd] Ensure that podCreateArgs appear last in ExecStartPre=
    b47ce9a6e libpod: Add support for 'podman stats' on FreeBSD
    b3e978e43 libpod: Split out the common code from GetContainerStats
    47bd9e811 libpod: Move stats.go to stats_linux.go for consistency
    1e6da1115 pkg/rctl: Add a simple FreeBSD RCTL library
    75740be39 all: stop using deprecated GenerateNonCryptoID
    76eb06330 Man pages: refactor common options: --tls-verify
    fe04c86a2 generate systemd: fix pod dependencies
    d4a000312 Man pages: Refactor common options: --publish
    9d41b95d7 rework --format system test
    dacd59424 Man pages: refactor common options: --publish-all
    885bc4742 Enable github labeler, use for api-change
    74e0511c9 Man pages: refactor common options: --os (pull)
    f30d4852e Man pages: refactor common options: --ip
    0ea5080c9 generate systemd: warn on --restart without --new
    c8c2aab50 health checks: restart timers
    908458d06 enable podman pod inspect --format test
    7f8e99ded podman version: use report.Formatter over Template
    0c21dcf70 podman machine info: use report.Formatter over Template
    e5389e98f podman info: use report.Formatter over Template
    1acebdda3 tests for 15673
    43f7bdf82 podman inspect return exit code > 0 on print error
    00240a0e2 podman inspect: use report.Formatter over Template
    377599f1f podman secret inspect: use report.Formatter over Template
    f5e13ded9 podman secret ls: use report.Formatter over Template
    1463898b0 podman network ls: use report.Formatter over Template
    90634d5ee podman volume ls: use report.Formatter over Template
    20eccfc9d podman machine inspect: use report.Formatter over Template
    a687949db podman machine ls: use report.Formatter over Template
    65e78d92c podman auto-update: use report.Formatter over Template
    70e6b19d4 events: Fix spelling of newNullEventer
    9457549ff build(deps): bump github.com/vbauerster/mpb/v7 from 7.5.2 to 7.5.3
    09ba2e0b9 Man pages: refactor common options: --rootfs
    07a8eb829 Ensure that the DF endpoint updated volume refcount
    e24c2f009 system tests: periodic cleanup and fixes
    a63a40c3e podman events --format: fix duplicated newline
    2ae4ce799 fix race where podman events exits to early
    b3212a680 set default EventsLogFilePath on first run
    12a1483e7 Improve --tmpdir and --events-backend docs
    72e715a11 Use new secret store API
    cd32b929e libpod: runtime newEventer() cleanup
    76980a222 event backend journald: fix problem with empty journal
    138b09c7e event backend none: return an error when reading events
    c5bdb6afe fix hang with podman events file logger
    56c880a7e libpod: Move ocicniPortsToNetTypesPorts and compareOCICNIPorts to networking_common.go
    221c4d5f0 libpod: Move NetworkDisconnect and NetworkConnect to networking_common.go
    f939f3fdf libpod: Move resultToBasicNetworkConfig to networking_common.go
    c9de84080 libpod: Add support for getContainerNetworkInfo on FreeBSD
    51c70e588 libpod: Move getContainerNetworkInfo to networking_common.go
    d014dca81 libpod: Move isBridgeNetMode and reloadContainerNetwork to networking_common.go
    1dd0eb467 libpod: Move teardownNetwork and teardownCNI to networking_common.go
    2bf050f1d libpod: Move setUpNetwork and getCNIPodName to networking_common.go
    3d7f9f67a libpod: Move convertPortMappings and getNetworkOptions to networking_common.go
    d1414adbb libpod: Add FreeBSD implementation of container networking
    c5f64d9f5 libpod: Re-work the container's network state to help code sharing
    36cfd05a7 libpod: Move platform-specific bind mounts to a per-platform method
    369d86040 libpod: Avoid a nil dereference when generating resolv.conf on FreeBSD
    a1fa9faa4 Buildah treadmill script: various fixes
    43da39d31 Man pages: refactor common options: --volumes-from
    050ae6181 [CI:DOCS] --volume: consistent wording
    d935e9799 update c/storage to latest
    6091ff42d Include more environment variables in conmon env.
    118546c6a refactor: use `os.ReadDir` for lightweight directory reading
    2c63b8439 Fix stutters
    b8108d06b Fix CPU usage limitation in play kube for non integer values
    8466c4a19 Cirrus: Don't run win_installer in multiarch cron
    6210c6723 TEMPORARY: instrumenting for 15488
    3a9a7dcdc Man pages: refactor common options: --volume
    a82672047 build(deps): bump github.com/docker/docker
    6bf8670b6 stop: fix error handling
    aad29e759 health check: add on-failure actions
    8e1aa7af3 Fixes for vendoring Buildah
    eb28a1c08 update buildah and c/common to latest
    c7411af9e Ignore cpu realtime options on cgroups V2 systems
    27be5eaaf Fix swagger documentation
    9a286f712 generate, kube: plug HostUsers
    1994f3823 Add --config for Docker compatibility
    ad63aa20d kube: plug HostUsers in the pod spec
    626ee118c e2e: fix run_staticip_test in proxy environment
    d10e77e1b fix podman pod inspect to support multiple pods
    911e4a138 specgen/generate: Factor out setting resource limits from CompleteSpec
    db33f06a9 fixes data race in system.Events and nil error logging
    f75c3181b podman: skip /sys/fs/cgroup/systemd if not present
    3f0b5cd40 Man pages: refactor common options: --userns (pod)
    8d40bf3f1 proper --debug/-D flag support
    4fbc4b8f7 Man pages: refactor common options: --privileged
    f85fa9806 libpod: Filter out ENOTCONN errors when trying to close unix domain sockets
    6668ac93b libpod: Factor out capabilites code from prepareProcessExec
    f6e3cfa53 system tests: fix systemd tests in proxy environment
    744878a71 Add win-installer build/verify workflows to CI
    ecb9f99b8 Add new windows installer and build
    d759576ab emit container labels also for container exited and exec died events
    9585147e1 fix Pod removal after OS hard shutdown
    e0d5b4e3f Change pipe wait to 20 seconds
    63c779a85 Fix manpage headers
    4675103c2 Man pages: refactor common options: --sysctl
    eb39d56df Bump github.com/docker/go-units from 0.4.0 to 0.5.0
    f4c39df25 Add win-sshproxy.exe to windows client zips
    40cd1c0ff Man pages: refactor common options: --device
    4462305fe Update the displayed warning in documentation regarding the system reset
    092690297 build(deps): bump github.com/container-orchestrated-devices/container-device-interface
    77ab6125f remove SkipIfNotFedora() from events test
    d22aeeec2 fix podman events with custom format
    a9a411f8a Add generate systemd -e/--env option
    274d34a25 kube play: support auto updates and rollbacks
    04f0ac2aa system tests: fix some tests in proxy environment
    6a3c28968 Drop stale config value resulting in asymmetric config
    c2c910736 CI: Cirrus setup: retry failed curls
    fb38838fe Man pages: refactor common options: --memory*
    0df291d3b Update system reset warning message to warn against deletion of all volumes
    bdfc4df1f pkg/autoupdate: allow updating multiple tasks per unit
    cbaa78cd8 Fix list of default capabilities
    a3aecf0f2 libpod: Factor out setting volume atime to container_internal_linux.go
    7a1abd03c libpod: Move miscellaneous file handlling to container_internal_common.go
    d162285f3 libpod: Don't mount /dev/shm in containers on FreeBSD
    212b11c34 libpod: Factor out handling of slirp4netns and net=none
    eab4291d9 libpod: Move functions related to /etc bind mounts to container_internal_common.go
    b3989be76 libpod: Move getRootNetNsDepCtr to container_internal_common.go
    a148c1622 libpod: Use (*Container).addNetworkNamespace to restore checkpoint network
    7518a9136 libpod: Move functions related to checkpoints to container_internal_common.go
    be5d1261b libpod: Move mountNotifySocket to container_internal_common.go
    71e2074e8 libpod: Move getUserOverrides, lookupHostUser to container_internal_common.go
    232eea5a0 libpod: Move isWorkDirSymlink, resolveWorkDir to container_internal_common.go
    a5ee3cb79 pkg/util: Add no-op implementation of AddPrivilegedDevices on FreeBSD
    0889215d8 libpod: Use platform-specific mount type for volume mounts
    c1a86a8c4 libpod: Factor out platform-specific sections from generateSpec
    e101f4350 libpod: Move getOverlayUpperAndWorkDir and generateSpec to container_internal_common.go
    6e4b5b007 libpod: Add FreeBSD implementation of container internals
    8ade76e79 libpod: Move networkDisable to container_linux.go
    71978b0a0 Fix #15243 Set AutomountServiceAccountToken to false
    b9df3a6a9 Man pages: refactor common options: --label
    d82a41687 Add container GID to additional groups
    3e1dde10b [CI:BUILD] Copr: Define _user_tmpfilesdir for rhel
    875fd4858 Fix swagger documentation
    070dfa3b3 Man pages: refactor common options: --digestfile
    3e744e52b System tests for podman-update
    c05b6e5d3 Update test per comment in #15555
    3d09d47a2 Man pages: refactor common options: --device-X-Y
    050f3291b implement podman update
    c63830166 Man pages: refactor common options: --name
    4a1acccf9 Fix bind-mount-option annotation in gen/play kube
    64eb07941 CI: disable flaking test on ubuntu
    b667d7340 libpod: Ensure that generated container names are random
    5faf4eff1 Cirrus: pick UIDs/GIDs starting at 1500, not 1000
    b25d62a4d [CI:BUILD] Packit: Disable until proved in other repos
    84352a81c Set enableServiceLinks to false in generated yaml
    fed4ce0ea Inhibit SIGTERM during Conmon startup
    70a599b57 Man pages: refactor common options: --signal
    da57065ab specgen: Use platform-specific mount type for volume mounts
    0300271bf libpod/define: Make TypeBind a platform-specific constant
    1ed9a4740 Man pages: refactor common options: --restart
    98169c20d Add emptyDir volume support to kube play
    8637548a3 docs: move userns options to separate file
    e015c9e3f podman: add uid and gid options to keep-id
    cd6260604 infra: remove dead code
    62d87aa9b Man pages: refactor common options: --subXidname
    08a2851ba Allow to override default username via command line
    4781bc7fe specgen/generate: Add support for FreeBSD
    68f4dcf00 specgen/generate: Move specConfigNamespaces to namespace_linux.go and add stubs
    39880670c specgen/generate: Move SpecGenToOCI, WeightDevices to oci_linux.go and add stubs.
    a240146a2 e2e tests: try to deflake 5000
    08af95f63 updated apiv2 tests to reflect hash compat fix
    c1480b39a Improved Windows compatibility for machine command
    4e18c8100 Man pages: refactor common options: --http-proxy
    0166feef2 specgen/generate: Move security.go to security_linux.go and add stubs
    a7d791202 libpod: Make sure writeConmonPipeData is called on FreeBSD
    d19438fa6 Man pages: refactor common options: --dns-*
    dcb4d4357 [makefile] disable security labeling instead of using --privileged
    78aec2130 Fix #15499 already connected network
    b4f5a246a remove github.com/docker/libnetwork dependency
    0ee9a3129 podman rmi: emit untag events
    0b3184a5a pkg/domain: Add terminal support for FreeBSD
    11de12097 Fix example sections to follow the same format
    e4f816fdb [CI:DOCS] Cirrus: Update meta-task for EC2 image
    e448122fe service: make move to sub-cgroup non fatal
    167b026e7 [CI:BUILD] Packit: Re-introduce packit with fix-spec-file action
    61d842a18 Fix template name inconsistency
    39d809d3c Bump github.com/vbauerster/mpb/v7 from 7.4.2 to 7.5.2
    e00272cd9 remote: fix implementation of build with --userns=auto for API
    15aeccb83 libpod: UpdateContainerStatus: do not wait for container
    61fc1870a cmd/podman: Enable --syslog on FreeBSD
    cfdca8293 Mark some of the option fields as ignored in pkg/bindings
    c7fda06f6 Compat API image remove events now have 'delete' status
    9553f3baf Run codespell
    b27bfbc71 [CI:DOCS] Automatically set podman version in pkginstaller
    e634470fa APIv2 test cleanup, part 2 of 2
    42fdc72aa Man pages: refactor common options: --systemd
    a5a5c6b3f Temporarily Revert "Packit: Enable scratch build testing for Fedora 36, 37 and Rawhide"
    10b460512 Remove duplicate annotations in generated service yaml
    61fe95bb4 Preserve all unknown PolicyRequirement fields on (podman image trust set)
    ad0c785f8 Reorganize the types in policy.go a bit
    a7e88c8da Add support for showing keyPaths in (podman image trust show)
    752eceaec Support (image trust show) for sigstoreSigned entries
    b36a1d1b7 BREAKING CHANGE: Change how (podman image trust show) represents multiple requirements
    bba306788 Reorganize descriptionsOfPolicyRequirements a bit
    2f6c145e8 Use the full descriptionsOfPolicyRequirements for the default scope
    b15afce55 Rename haveMatchRegistry to registriesDConfigurationForScope
    1a97c4d9f Rename tempTrustShowOutput to entry
    51064acc4 Split descriptionsOfPolicyRequirements out of getPolicyShowOutput
    d4c521728 Recognize the new lookaside names for simple signing sigstore
    4df1e2524 Add a unit test for trust.PolicyDescription
    4b2bd1036 Make the output of (podman image trust show) deterministic
    35fa8c16a Make most of pkg/trust package-private
    7723a1ea6 Move most of ImageEngine.ShowTrust into pkg/trust.PolicyDescription
    ff3f574fc Add support for sigstoreSigned in (podman image trust set)
    9828bc445 Create new policy entries together with validating input
    e2d1bdd1d Improve validation of data in ImageEngine.SetTrust
    cbdbb025a Move most of imageEngine.SetTrust to pkg/trust.AddPolicyEntries
    0ff0fde49 Man pages: refactor common options: log-related options
    4f6807530 Add a variable for scope
    4c5366ee0 Make trust.CreateTempFile private
    5be00f227 Reorganize pkg/trust
    1d2def8d0 Remove an unused trust.ShowOutput type
    df1d8d0e9 Remove commented out code
    010d495a3 APIv2 test cleanup
    a933269ba System test cleanup
    35b4f26c7 test: use private instead of slave for the mount
    2fed2a282 Man pages: refactor common options: --pid
    ea67d84f5 test: fix comment
    19a617eaa Allow colons in windows file paths
    1788b26c4 Fixes isRootfull check using qemu machine on Windows
    88e4e4c82 vendor containers/psgo@v1.7.3
    33ab7e846 Man pages: refactor common options: --ipc
    ef6285a6f Man pages: refactor common options: --gidmap
    c64a6ba07 Man pages: Refactor common options: --workdir
    b0700aa48 libpod: Enable 'podman info' for FreeBSD
    ff20c74e9 libpod: Move getCPUUtilization to info_linux.go
    694cbaca3 libpod: Read kernel version and uptime using buildah/pkg/util
    877e67399 libpod: Split out platform-specific code from hostInfo
    e1c206d98 e2e: Add run --memory-swap test
    c3dc92a50 Fix rpm packaging error
    b4584ea85 run,create: add support for --env-merge for preprocessing vars
    b47c54ab6 Install podman-docker.conf on user-tmpfiles.d too
    0e6a421ca Use tmpfiles.d specifiers instead of fixed path
    9dca68bdd Man pages: refactor common options: --ignore
    d45a5d4aa Packit: Enable scratch build testing for Fedora 36, 37 and Rawhide
    8b1e88bf8 Fix documentation of use of tcp connections
    0f7393556 Add support for containers.conf volume timeouts
    7d7aead51 Man pages: refactor common options: --device-cgroup-rule
    65efcdf70 Allow podman to run in an environment with keys containing spaces
    2c03681b2 Man pages: refactor common options: --disable-content-trust
    8f797ab66 libpod: Add definition of containerPlatformState for FreeBSD
    5c9bac141 Man pages: refactor common options: --cpus
    5f719b533 podman kube play/down --read from URL
    5b06b2e77 Document restrictions on transport in FROM
    70e103c04 inspect, image: alias .Config.HealthCheck to .HealthCheck for compatibility
    f87f6d2fc Improved Windows compatibility
    64339d47c Warning messages are printed and ignored if we use an unsupported option
    716ac1c86 Refactor: About the RawInput process
    74388fe75 Man pages: refactor common options: --pod-id-file
    0f768cef3 [CI:DOCS] Update Troubleshooting.md
    c6488fe4a Man pages: fix sloppiness
    53369aaa1 pass environment variables to container clone
    46f31361f Man pages: refactor common options: --cidfile
    bd90818b0 Man pages: refactor common options: --creds
    fbe2bd87b [CI:DOCS] elaborate on image lookups of foreign platforms
    eee0ec97e Add quiet/q flag to podman secret ls
    d5f83135b version bump to 4.3.0-dev
    be1455ead Update "CONTRIBUTING" file with Debian/Ubuntu dependencies"
    f8e73eadd [CI:DOCS] Update how to enable resource limit delegation
    a0560eefa Man pages: refactor common options: cert-dir
    8ffeb626c events: Add freebsd support for libpod/event
    8aa29fd54 cmd/podman: Enable ABI and Tunnel mode for freebsd
    1f76ad40a fix CI: remove hardcodeded alpine version
    3bf52aa33 Add ProgressWriter to PullOptions
    ec9508ea1 Pass io.Writer when pushing images/manifests from command line
    e48681e60 Use request Context() in API handlers
    b9fb60c68 Simplify ImagesPull for when Quiet flag is on
    09ef6fc66 podman generate kube - add actual tests
    976ce76eb podman save: update --compress validation
    054d64710 libpod: Build oci_conmon_common.go and oci_conmon_attach_common on FreeBSD
    cb4158889 libpod: Move openUnixSocket to oci_conmon_attach_linux.go
    d43fac20f libpod: Move moveConmonToCgroupAndSignal and GetLimits to oci_conmon_linux.go
    93bad9048 libpod: Move socket label handling from oci_conmon_common.go to oci_conmon_linux.go
    6791cdbdf libpod: Move rootless handling from oci_conmon_common.go to oci_conmon_linux.go
    68b2450d3 libpod: Move oci_conmon_exec_linux.go to oci_conmon_exec_common.go
    8d229c6cd libpod: Move oci_conmon_attach_linux.go to oci_conmon_attach_common.go
    bebf55c0f libpod: Move oci_conmon_linux.go to oci_conmon_common.go
    20ad12274 runtime: use FindCommon from c/common
    86f665a1d vendor: update containers/common
    0dd2fcf71 Add podman manifest create -a. Alias for --amend:Docker compatibility
    aa197a65f sort hc.Binds returned from compat api
    546bb3548 Add podman stats --no-trunc option
    f6e7b0b59 Add podman secret inspect -f alias for --format: Docker compatibility
    d50ff4f51 Add podman secret create -d as alias for --driver for Docker compatibility
    6411f57e7 api: return imageID instead of imageName, for "Image" when Podman API is queried
    2a6daa1e3 Cirrus: add podman_machine_aarch64
    1572420c3 libpod: Move uses of unix.O_PATH to container_internal_linux.go
    5d7778411 libpod: Move rootless network setup details to container_internal_linux.go
    1b88927c2 libpod: Add stubs for non-linux builds
    7e7a79b07 podman manifest create: accept --amend and --insecure flags
    5f09d9b60 Fix podman kube generate --help to show correct help message
    06b3a4c1c system tests: fix broken runc test
    f0e864075 Man pages: refactor common options: authfile
    a78b67a47 Man pages: refactor common options: --annotation
    a68e6ddbb utils: Add missing symbols for FreeBSD
    a6af67ca9 Cirrus: Update podman-machine comment
    22f3dd4c2 Man pages: refactor common options: arch
    f14bf91c4 podman images and friends can take one image as argument
    7e490e195 [CI:DOCS] Add .DS_Store to gitignore
    ab72a371b Don't warn on '/' not being shared while in a container
    2d30b4dee Add compatibility support for --debug -D flag from docker
    bfae6bca9 build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16
    b9c094a5d Add Docker compatibility for --dns-option to --dns-opt
    1393038c8 pkg/domain: Add stubs for non-linux builds
    65641ba8d pkg/specgen: Add stubs for non-linux builds
    056917c22 Reword --exit-policy option
    d7f6d355b podman-kube@.service.in: Remove Restart=never option with typo
    bd0a8c146 added docs for installing certficate authority
    5ee3522f5 pkg: Build pkg/machine on FreeBSD
    b806e9f36 pkg: Build pkg/util on FreeBSD
    6df0ceb9a Add default value for $RM
    bc56ee158 Update cmd/podman/containers/restart.go
    f26a5246e Fix updated link to install instructions
    0dbbb1cb3 Add restart --cidfile, --filter
    d856fb43e Add "podman kube generate" command
    e2a3f9592 docs: specify git protocol is not supported for github hosted repo
    2935c38fd Update release notes for v4.2.0
    a4efd401c remote manifest push: show copy progress
    79e21b5b1 kube play: sd-notify integration
    3fc126e15 libpod: allow the notify socket to be passed programatically
    67a2e7351 add `pkg/systemd/notifyproxy`
    245be9b39 Document behavior of --timestamp when only FROM is used
    e3f029cb8 build(deps): bump github.com/container-orchestrated-devices/container-device-interface
    658960c97 build(deps) bump CDI dependency from 0.4.0 to 0.5.0
    2bcee9f62 Man pages: refactor common options
    25f6fc9c6 I believe that these tests will now run with crun.
    a561b7dac check memory test based on range
    280f5d8cb podman ssh work, using new c/common interface
    d2d7898b8 Cirrus: Improve CI VM image updates for EC2
    d7f134d68 Refactor common man page options, phase 2
    3738221c5 test: update apply-podman-deltas for new tests
    59cb410fe build: implement --cache-to,--cache-from and --cache-ttl
    7bd886480 Bump to Buildah v1.27.0
    1045647a4 Add interface for apple hypervisor
    62e889e2b fix LogConfig type for libpod API
    2e3a192bb cmd: refuse --userns if a mapping is specified
    696ea7905 specgen: use sandbox id instead of name for annotation
    771a35e4b pkginstaller: use correct GOARCH value in case of arm build
    b1d1248a1 pkg/bindings: Support writing image push progress to specified io.Writer
    f4c53a41c docs: update the podman logo
    7ebaabb93 [CI:COPR] podman.spec.rpkg: add python3 dependency for el8
    d4c6e056d Fixes #15154 Change order when config and connections are written
    83bd7a5c2 e2e: Add rootless mount cleanup test
    cc8e4d5fe remove image podman no prune
    842c6c7c6 podman generate spec
    4cea8adb9 Cirrus: Run Cross builds in [CI:DOCS] mode
    3102194f0 podman rmi: improve error message for build containers
    5ea4ebb16 markdown-preprocess: force extra newline on comments
    9964366f6 start filter flag changes
    e67e60226 podman info: hide `--debug`
    623b0c57f pkginstaller: use correct GOARCH while building podman binaries
    bcfbee986 ISSUE TEMPLATE: remove `--debug` from `podman info`
    81a1ea18c pkg/autoupdate: "image" policy: add deprecation comment
    43cca5d97 pkg/autoupdate: decompose the update logic
    0df51bb6b pkg/autoupdate: move status into `task`
    af3ce7084 pkg/autoupdate: document fields of `updater`
    3fdd3b1ae pkg/autoupdate: remove image map from updater
    82d18a86f pkg/autoupdate: use policy consts were possible
    1cc933c6b pkg/autoupdate: introduce status constants
    42c4c17c0 pkg/autoupdate: move authfile into `tasks`
    3f1928d76 pkg/autoupdate: move more logic under `task`
    cfa089c36 pkg/autoupdate: s/updateImage/pullImage/
    13a8ebd09 pkg/autoupdate: repull image if other containers failed
    2c999f1ec pkg/autoupdate: update unit-by-unit
    f8b6a81ae test/system/255-auto-update.bats: add an SELinux comment
    87c0c760e pkg/autoupdate: introduce the notion of a `task`
    033cc059f pkg/autoupdate: remove redundant branch
    328c8ba7b pkg/autoupdate: move policy map into updater
    d47609773 pkg/autoupdate: introduce `updater` for shared state
    79b10a7c6 readthedocs(sphinx): run the markdown preprocessor
    65fb90165 hack/markdown-preprocess: allow to be executed from any dir
    031b7dec7 fix hack/markdown-preprocess to support older python versions
    7df8d8050 add omitempty to Secret in k8s VolumeSource
    328eb2b4c Cirrus: Remove disused env. var.
    1e4a141d8 Cirrus: Support EC2 instances in hack/get_ci_vm.sh
    44212b90b pkginstaller: makefile improvements to avoid redownloading
    e6670cd29 pkginstaller: add makefile target to notarize the built pkg
    c5029d2ee pkginstaller: sign qemu-system-* binary for the pkg
    56039cffd Refactor common options in man pages
    50981cb84 skip pod resource limits test on aarch64
    1dbd61653 Cirrus: Fix e2e tests for "mount_rootless_test"
    3a7a275c3 Cirrus: use dnf instead of rpm to install packages
    1249cbb75 add "podman kube down" command
    c5150a571 Add support, and default to rootless w/WSL prompt
    bce16a58d Disable F36 service that is incompat with WSL kern
    69d7407af switch from "kube/play" endpoint to "play/kube" endpoint.
    2685c8dc4 Output messages display rawInput
    4dfef202c podman generate systemd --new: allow -h hostname
    5ab98f2c0 test: verify manifest inspect must contain OCI annotations
    3a05ddfb7 fix e2e sign tests
    6c69a2ea1 podman-volume-import: Reword "precendence"
    c21306f06 man podman-volume-import: Clarify that merge happens
    d462da676 Add support for creating sigstore signatures, and providing passphrases
    7075e2e1d Hide podman manifest push --sign-by on remote
    68cf11611 Use signByFlagName instead of copy&pasting the string
    02f570e4b Remove libpod/common
    63d77da5b Update c/common to an unreleased version
    5a5624f81 Update the registry server we test against from 2.6 to 2.8
    7599fde73 Use existing REGISTRY_IMAGE variables in more places
    24a599fe1 Add flag "--compression-format" to "podman manifest push" both in local/remote mode.
    53ec47968 Add rm --filter option
    68463278e Use httpasswd from the surrouding OS instead of the registry image
    49bcb7eaa Bump google.golang.org/protobuf from 1.28.0 to 1.28.1
    7a909a3e2 Use 8k buffer to help clients w/ broken parsing
    a53a0fca9 Cirrus: Minor YAML cleanup
    a24cc463a Remove bats installation script and make target
    6764fe03d CI: new check for leftover skips/fixmes
    17e3680fb Bump golang.org/x/tools from 0.1.11 to 0.1.12 in /test/tools
    379bf1080 Bump github.com/containernetworking/cni from 1.1.1 to 1.1.2
    de04d9d75 docs: resolve typo in create,run manpages
    de13dea86 With --rm option remove container if podman run fails
    da98c8877 Cirrus: enable Fedora 36 aarch64 tasks on EC2
    389a4a6cc syncContainer: transition from `stopping` to `exited`
    7fab449e3 [CI:DOCS] socket_activation.md: Add start/stop sections
    8628c01f5 Fix: manifest push --rm removes a correct manifest list
    e4992fb81 Fix: Restore a container which name is equal to a image name
    75419c5d8 When removing objects specifying --force,podman should exit with 0
    56578c413 Cirrus: Use the latest imgts container
    c35ae7640 Add support for building macOS pkg installer
    8e56a5605 machine: Fix check which is always true
    1b099eec8 [CI:DOCS] podman-generate-systemd.1.md: document --sdnotify
    52a4642ed Set TLSVerify=true by default for API endpoints
    94e0a364a Semiperiodoc cleanup of obsolete FIXMEs
    27679d80b pod create --share none should not create infra
    4d18a98ec benchmarks: fix create test
    4724a0000 prune filter handling
    6a9338ad6 podman generate systemd: handle --sdnotify correctly
    ad8940cec fix container create/run throttle devices
    290116bf8 integration test: fix network backend option with remote
    5a80770e8 API: libpod/create use correct default umask
    35035d281 container wait: improve error message
    cbdda4e56 docs: remove CNI word where it is not applicable
    0a160fed7 Bump VMs, to Ubuntu 2204 with cgroups v1
    c00ea686f resource limits for pods
    bc6a48eeb [CI:DOCS] Cirrus: Add prominent gitlab warning
    88b57dd9f fix broken machine test
    19f4a463e pkg/machine/e2e: do not import from cmd/podman
    604920dd1 fix some pkg/machine/e2e test to read stderr
    ee35ce86d enable linter for pkg/machine/e2e
    dd2b79406 libpod: create /etc/passwd if missing
    b79ac0aca remote push: show copy progress
    afbfbe18a compose test: remove cni config copy
    56093a3b4 compat api: always turn on network isolation for networks
    80ad0cfd0 compat api: allow default bridge name for networks
    3a016c6e4 e2e: show command and output when a timeout happens
    138d185cc Bump github.com/BurntSushi/toml from 1.1.0 to 1.2.0
    ab4c58bd3 Compat API: unify pull/push and add missing progress info
    c1f04a024 podman-remote pull: fix duplicate progress outputs
    af118f7c6 libpod: do not lock all containers on pod rm
    139d65be8 Fix machine test
    438fef1ca kube secret handling for podman play kube
    8d190fc48 vendor: remove unused deps
    013300a7c Makefile: remove building pages for man5
    19495b9fc makefile: remove processing of pkg/docs
    f64985135 rpkg: remove usage of pkg/hooks
    ffe5da20a pkg,libpod: remove pkg/hooks and use hooks from c/common
    da33f1005 Update init ctr default for play kube
    4e72aa586 fix goroutine leaks in events and logs backend
    9b152ef20 Add pause/unpause --latest, --cidfile, --filter
    a65265942 Fix potential leak on mid-stream read error
    10d6586cb Makefile: use order-only prereq for podman-remote
    0a2ddc9bd [CI:DOCS] Fix typo in manifest manpage
    26ae055a2 Remove return error from "containers.pause"
    eef39b69e "pod pause/unpause/stop" append "report.Errs" to "reports"
    aa1711e3d Cirrus: comment out f35 for podman4
    1f0116817 system tests: new system-service bats file
    fdba0d790 Vendor in latests containers/storage and opencontainers/runtime-tools
    82b1d85eb Print rootfs download as a specific version on Win
    576321729 document isolate option for network create
    1aafb01a9 buildah vendor treadmill
    f67ab1eb2 Vendor in containers/(storage,image, common, buildah)
    5f848d89e Run codespell
    18c0c19aa Add --host and -H as equivalent options to --url
    c9722c0b1 [CI:DOCS] socket_activation.md: fix typo and layout
    5f04f9961 Machine init: create .ssh dir if not exist
    56cfdffe4 [CI:DOCS] Tutorials.rst: add socket activation
    b513dc4c1 Clean up cached machine images
    d95e79ebe GHA: Fix dumb error check
    d385914cd Cirrus: Trigger podman-machine task by label
    a2f6cc74e Podman stop --filter flag
    90607a6d0 Podman pull --all-tags shorthand option
    3b5034e91 fix tests for "podman kube play"
    8e2add770 [CI:DOCS] Update docs/tutorials/socket_activation.md
    2270bc5f9 [CI:DOCS] Add socket activation tutorial
    ad7c54e13 man page checker: enforce stricter options format
    66cb856f9 Switch to `github.com/blang/semver/v4`
    0f53abd09 Fixes #14698 Use prepared image for WSL2 machine init
    cc2cfe060 Add podman events -f to be alias for --filter
    e08a77ce6 Add "podman kube play" cmd
    1392922d4 [CI:DOCS] man pages: replace -c with --cpu-shares
    e3419c032 abi: create new cgroup when running in a container
    7b4afbf62 podman: always call into SetupRootless
    16b8d77f9 utils: call MaybeMoveToSubCgroup once
    4b547a72a podman: move MaybeMoveToSubCgroup to utils/
    445089421 Fix last machine test
    bb8ff86bf Use SafeChown rather then chown for volumes on NFS
    c9a82d72a Docker uses "-c" to mean "--cpu-shares" in create and run
    e83ff8e5e [CI:DOCS] podman-create.md: replace -c with --cpu-shares
    da8c6a8ea CI: sanity check for desired runtime
    b8a7e275d [CI:DOCS] rootless_tutorial: Remove incorrect advice regarding volumes and mount points
    f6ed7a8c9 [CI:DOCS] man pages: remove non-existent option builtin-volume
    27e12aa07 test,manifest-run: declare TARGETPLATFORM before using it
    ffbc2adf7 fix wrong log message on Trace level
    377057b40 [CI:DOCS] Improve language. Fix spelling and typos.
    3ed323e1b logformatter: link by *task ID*, not build ID
    3ce0709f3 podman machine: do not commit proxies into config file

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-12-01 17:01:44 -05:00
Guenther Meyer
cb5dfda6f6 nerdctl: renamed upstream branch master to main
Signed-off-by: Guenther Meyer <g.meyer@signum-media.de>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-12-01 17:01:29 -05:00
Changqing Li
b2ab6a11a4 conmon: avoid host contamination by GOCACHE
By default GOCACHE is set to $HOME/.cache.

Fix:
make[1]: Entering directory '/mnt/tmp-glibc/work/core2-64-wrs-linux/conmon/2.1.3+gitAUTOINC+19110c9746-r0/git/tools'
| failed to initialize build cache at /home/build/.cache/go-build: mkdir /home/build: permission denied

Signed-off-by: Changqing Li <changqing.li@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-12-01 16:58:17 -05:00
Chen Qi
3626f2c9cc docker-distribution: do not build for riscv64
Currently docker-distribution has a do_compile error for riscv64.
The problem could be reproduced by:
  MACHINE=qemuriscv64 bitbake docker-distribution

So explicitly set COMPATIBLE_HOST here to avoid it building for
riscv64. When someone interested in using this recipe for riscv64
fixes the compile issue, this setting could be removed.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-11-22 23:32:16 -05:00
Bruce Ashfield
d36563caf1 k3s: update to v1.24.7
Bumping k3s to version v1.24.7-rc4+k3s1, which comprises the following commits:

    e3c9d859e8 Return ProviderID in URI format
    e44d22ca61 Add ServiceAccount for svclb pods
    2ca51a3d59 Update to v1.24.7-k3s1 (#6270)
    0751b6052e Fix dualStack test
    519f13e34d [Release-1.24] Replace deprecated ioutil package (#6235)
    c1c7b95dc0 Fix flakey etcd test
    6ed1e1423f Fix helm job failure on multi-server tests
    87bfc8883b Bump traefik to 2.9.1 / chart 12.0.0
    06eb948c23 Fix the typo in the test
    3a829ae860 Handle custom kubelet port in agent tunnel
    3f5c88e4a3 Fix occasional "TLS handshake error" in apiserver network proxy.
    cb0f4bd49c Use structured logging instead of logrus for event recorders
    44ae7aa4db Dump info on coredns when deployment rollout fails
    a75bbf5f4e Add ADR for ServiceLB move to CCM
    69dd30433b Disable cloud-node and cloud-node-lifecycle if CCM is disabled
    76f13d3558 Move servicelb into cloudprovider LoadBalancer interface
    23c302dccc Move DisableServiceLB/Rootless/ServiceLBNamespace into config.Control
    307e45e739 Implement InstancesV2 instead of Instances
    7198eb2f74 Bump metrics-server to v0.6.1
    0be4ef9213 Add flannel-external-ip when there is a k3s node-external-ip
    a8e0c66d1a updating to v1.24.6-k3s1 (#6164)
    fb823c8a5f Update to v1.24.5 (#6143)
    ae7d6285b6 Fix gofmt warnings
    1b806f5fee Bump golang to correct version
    ee859f7f5a Add validation check to confirm correct golang version for Kubernetes
    cf684c74a3 [Release-1.24] Bulk Backport of Testing Changes
    b8f05e4904 Bump containerd to v1.6.8-k3s1
    35e488c9c7 Bump runc to v1.1.4
    e1884e4d60 Update Flannel to v0.19.2 to fix older iptables issue
    79bb7bccd9 Fix e2e tests (#6018)
    4c9ad2546c Fix dualStack test and change ipv6 network (#6023)
    654d2b9567 CI: update Fedora 34 -> 35 (#5996)
    2b35f89664 Convert install tests to run PR build of k3s (#6003)
    f81138402e E2E: Add support for CentOS 7 and Rocky 8 (#6015)
    ab2638a247 mark v1.24.4+k3s1 as stable (#6036)
    7d6982d1fa Export agent.NetworkName for Windows
    3e394f8ec5 The Windows kubelet does not accept cadvisor flags
    c3f830e9b9 Update to v1.24.4 (#6014)
    035c03cfaa Remove codespell from Drone, add to GH Actions (#6004)
    b14cabc107 Add nightly install github action (#5998)
    75f8cfb6ea E2E: Local cluster testing (#5977)
    116c977fbf Convert vagrant tests to yaml based config (#5992)
    30fc909581 Update run scripts (#5979)
    a30971efaa Updated flannel to v0.19.1
    6b7b9c5aa9 Add scripts to run e2e test using ansible (#5134)
    18cb7ef650 fix checkError in terraform/testutils (#5893)
    77fa7fb490 Removing checkbox indicating backports since the policy is to backport everything (#5947)
    b7f7379157 Update MAINTAINERS with new folks and departures (#5948)
    db3c569b7f Add docker e2e test
    aadab55145 Add ADR for inclusion of cri-dockerd
    4aca21a1f1 Add cri-dockerd support as backend for --docker flag
    b1fa63dfb7 Revert "Remove --docker/dockershim support"
    cf66559940 Print stack on panic
    abdf0c7319 Fix comments and add check in case of IPv6 only node
    d90ba30353 Added NodeIP autodect in case of dualstack connection
    82e5da35a9 Upgrade macos-10.15 to macos-12 (#5953)
    43508341c1 Bump minio to v7.0.33
    1c17f05b8e Fix secrets reencryption for 8K+ secrets (#5936)
    118a68c913 Updates to CLI flag grouping + deprecated flag warnings. (#5937)
    13af0b1d88 Save agent token to /var/lib/rancher/k3s/server/agent-token
    4c0bc8c046 Update etcd error to match correct url (#5909)
    db2ba7b61d Don't enable unprivileged ports and icmp on old kernels
    90016c208d ADR: Depreciating and Removing Old Flags (#5890)
    24da6adfa9 Move v1.24.3+k3s1 to stable (#5889)

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-10-25 15:09:46 -04:00
Bruce Ashfield
75de565e3b docker-compose2: introduce go version of docker-compose
Introducing a recipe to build (and create a vendor directory) for the
docker-compose2 command, which is a go implementation of he formely
python3 docker-compose.

This co-exists (for now) with the python version.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-10-25 15:08:39 -04:00
Jose Quaresma
8177e4a6b7 tini: fix function declaration without a prototype
This also fix building with clang 1.15

Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-10-04 16:55:18 -04:00
Kai Kang
f8c8b90244 criu: 3.17 -> 3.17.1
Update criu from 3.17 to 3.17.1:

* update file path and remove __pycache__ directory in do_install
* rebase 0002-criu-Change-libraries-install-directory.patch
* backport patches to fix build errors with glibc 2.36.

Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-10-04 16:42:07 -04:00
Bruce Ashfield
2542c4b3b0 buildah: update to 1.27.2
Bumping buildah to version v1.25.0-420-g13622b14, which comprises the following commits:

    9c640b00 tag v1.27.2
    264c825f Fix broken command completion
    be919817 build: support --skip-unused-stages for multi-stage builds
    40cd1053 release: bump to v1.27.1
    4a8bf740 run: add container gid to additional groups
    db8d5921 release: tag v1.27.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-28 16:30:45 -04:00
Guenther Meyer
bcc7d479bb kubernetes: fixed typos
After upgrading from honister to kirkstone the build always failed
during the package_write_ipk step, because the package name has
been overwritten because of the typo in FILES.
While investigating, I discovered another typo in class-devupstream.

Signed-off-by: Guenther Meyer <g.meyer@signum-media.de>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-20 08:47:28 -04:00
Jose Quaresma
2d0f7255a7 docker/proxy: don't use -linkshared unconditionally
The linkshared is not supported in some machines like riscv64 and
when supported we can use the GO_LINKSHARED instaed.
So export GO_LINKSHARED on the recipe to be available for Makefile.

This is currently only used in libnetwork for the proxy build, but
could be used in additional locations in the future.

Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-20 08:42:10 -04:00
Andrei Gherzan
758da82203 podman: Add ptest support for system tests
Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-16 11:13:31 -04:00
Andrei Gherzan
481b716f7c catatonit: Integrate version 0.1.7
This is useful for podman system tests.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-16 11:12:41 -04:00
Bruce Ashfield
d9af46db9a kubernetes: fix more TMPDIR references
Changing the clone location of kubernetes allows us to remove the
vendor symlink "fix". This reduces the number of TMPDIR references
in the binaries.

kubernetes takes care of most of the rest via using asmflags and
gcflags interally which specify -trimpath, but unfortunately these
flags are being recorded into the binaries and leave us with 4
references to the TMDIR:

  -asmflags=all=-trimpath=/opt/poky/build/tmp/work/core2-64-poky-linux/kubernetes/1_v1.24.0+git8b1b4db3834ddf7cf1b97137180f413cb9e2186f-r0/git/src/github.com/kubernetes/kubernetes/_output/local/go/src/k8s.io/kubernetes
  -gcflags="all=-trimpath=/opt/poky/build/tmp/work/core2-64-poky-linux/kubernetes/1_v1.24.0+git8b1b4db3834ddf7cf1b97137180f413cb9e2186f-r0/git/src/github.com/kubernetes/kubernetes/_output/local/go/src/k8s.io/kubernetes
  -asmflags=all=-trimpath=/opt/poky/build/tmp/work/core2-64-poky-linux/kubernetes/1_v1.24.0+git8b1b4db3834ddf7cf1b97137180f413cb9e2186f-r0/git/src/github.com/kubernetes/kubernetes/_output/local/go/src/k8s.io/kubernetes
  -gcflags="all=-trimpath=/opt/poky/build/tmp/work/core2-64-poky-linux/kubernetes/1_v1.24.0+git8b1b4db3834ddf7cf1b97137180f413cb9e2186f-r0/git/src/github.com/kubernetes/kubernetes/_output/local/go/src/k8s.io/kubernetes

We leave these for now, as attempts to remove them have broken
the build, and kubernetes uses 'go install' versus 'go build' to
construct the binaries .. making our normal solutions non functional.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-15 14:00:46 -04:00
Bruce Ashfield
a61f6ea090 containerd: fix final TMDIR references
restructure the containerd source layout to avoid symlinking vendor
dependencies. This avoid go recording paths in the final binaries.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-15 09:18:21 -04:00
Bruce Ashfield
c278a05948 riddler: remove TMPDIR references
convert the riddler recipe to a structure that doesn't need a
symlinked vendor directory. go records these links in the binary,
making our output non-reproducible.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-15 09:01:55 -04:00
Bruce Ashfield
79ff2a5b00 oci-image-tools: fix TMPDIR references
The structure of the source code layout that was used by
this recipe required symlinking subirectories of the source
into a location that would be searched by go. While this
fixes the build, and produces a working binary, go stores
the location into the binary itself. Those stored paths
reference the build directory, making the result not
reproducible.

With this change, we create an alternate structure that
doesn't require symlinking and allows go to find the
components during build. This results in a simpler recipe
and binaries without TMPDIR references.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-14 22:01:22 -04:00
Bruce Ashfield
1242b97f7f oci-runtime-tools: fix TMPDIR references
The structure of the source code layout that was used by
this recipe required symlinking subirectories of the source
into a location that would be searched by go. While this
fixes the build, and produces a working binary, go stores
the location into the binary itself. Those stored paths
reference the build directory, making the result not
reproducible.

With this change, we create an alternate structure that
doesn't require symlinking and allows go to find the
components during build. This results in a simpler recipe
and binaries without TMPDIR references.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-14 20:34:11 -04:00
Bruce Ashfield
26f698cdb8 oci-image-tools: remove TMPDIR references
Pass -trimpath to the build to remove most (but not all)
TMDIR references.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-14 14:49:17 -04:00
Bruce Ashfield
0b0718efc1 oci-runtme-tools: fix TMPDIR references
pass -trimpath to remove most TMPDIR referneces.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-14 14:48:43 -04:00
Bruce Ashfield
f132afed23 umoci: fix reproducibility
pass -trimpath to the umoci build to remove TMPDIR references
in the binaries.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-13 15:28:14 -04:00
Bruce Ashfield
e465ef7dcd riddler: pass -trimpath to build
To fix most of the TMPDIR references, we pass -trimpath to the build
via a new variagle GOBUILDFLAGS.

There are still some debug references to TMDIR, that will be fixed
at a later time.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-13 15:04:51 -04:00
Bruce Ashfield
e167860a87 podman-tui: reproducibility, pass -trimpath to fix QA warnings
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-13 14:45:38 -04:00
Bruce Ashfield
fce21463ff docker-distribution: pass -trimpath to fix reproducibility warnings
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-13 14:26:59 -04:00
Bruce Ashfield
f6f4f2c1c3 skopeo: reprodicibility enable trimpath and strip
Skopeo is throwing TMPDIR QA warnings due to paths being built
into the binaries. We fix this by creating a new variable to
pass -trimpath into the build, and also by defining the linker
flags -w -s to strip source/path information from the binaries.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-13 12:56:27 -04:00
Bruce Ashfield
7cea149bb0 docker: reproducibility add -trimpath to go -> $GO patches
With this, we build and package docker without QA warnings due to
references to TMPDIR.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-13 11:25:46 -04:00
Bruce Ashfield
c991546a7f k3s: pass -trimpath to improve reproducibility 2022-09-12 16:59:26 -04:00
Bruce Ashfield
eb4a659acb podman-tui: add README with rendering tips
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-12 16:45:26 -04:00
Bruce Ashfield
9ef3fa52d0 containerd: improve reproducibility
We get the following QA warning on build:

WARNING: containerd-opencontainers-v1.6.8+gitAUTOINC+579a6380ec-r0 do_package_qa: QA Issue: File /usr/bin/containerd-shim-runc-v2 in package containerd-opencontainers contains reference to TMPDIR
File /usr/bin/containerd-ctr in package containerd-opencontainers contains reference to TMPDIR
File /usr/bin/containerd-shim-runc-v1 in package containerd-opencontainers contains reference to TMPDIR
File /usr/bin/containerd in package containerd-opencontainers contains reference to TMPDIR
File /usr/bin/containerd-shim in package containerd-opencontainers contains reference to TMPDIR [buildpaths]

This is the first step in fixing the QA warning, by dropping our
debug patch, passing -trimpath and not defining GO_DEBUG.

This leaves a final reference similar to:

path _/opt/poky/build/tmp/work/core2-64-poky-linux/containerd-opencontainers/v1.6.8+gitAUTOINC+579a6380ec-r0/git/src/import/cmd/ctr

That is being stored in the .rodata of the binaries.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-12 15:46:00 -04:00
Bruce Ashfield
08a59b4d93 nerdctl: reproducibility, path -trmpath to build
To avoid go embedding references to the build dir into binaries,
we pass -trimpath to the build.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-12 14:36:56 -04:00
Vasileios Anagnostopoulos
7106007c14 k3s: fix the version of k3s
When executing `k3s --version` the mentioned version
`k3s version dev (HEAD)`. The root cause is, that the BUILD_FLAGS
were not the expected ones. After that patch, the k3s is reporting
the correct version.

Signed-off-by: Vasileios Anagnostopoulos <vasileios.anagnostopoulos@siemens.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-31 08:20:32 -04:00
Chen Qi
da285876dc lxc: fix compilation error for ARM/ARM64
There's compilation error when building lxc for ARM/ARM64 BSPs.
The error message is as below:

  | ../git/src/lxc/cgroups/cgfsng.c🔢111: error: incompatible
    type for argument 10 of 'sd_bus_call_method_asyncv'

The 10th argument is of type va_list but NULL is supplied, thus causing
compilation error.

So we use sd_bus_call_method_async to replace the asyncv one to
solve this issue.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-25 22:55:48 -04:00
Pascal Bach
c16d3a58ee podman: replace GOBUILDFLAGS patch
The GOBUILDFLAGS patch is replaced by explicitly setting BUILDFLAGS="${GOBUILDFLAGS}"
in the recipe.

Signed-off-by: Pascal Bach <pascal.bach@siemens.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-25 22:55:48 -04:00
Bruce Ashfield
3a2ac5b28a podman-tui: update to v0.5.0
Bumping podman-tui to version v0.5.0-40-g8f2b80f, which comprises the following commits:

    95abf3a Bump github.com/containers/podman/v4 from 4.1.1 to 4.2.0
    868a762 Bump github.com/containers/buildah from 1.26.4 to 1.27.0
    7b02fb5 Bump github.com/containers/buildah from 1.26.2 to 1.26.4
    0932c65 Bump github.com/containers/common from 0.48.0 to 0.49.0
    7fff27e Fix flaky tests
    87589d6 Fix typos
    24a3fff Bump github.com/containers/storage from 1.41.0 to 1.42.0
    6795a8f Bump github.com/BurntSushi/toml from 1.1.0 to 1.2.0
    e4f465b Bump github.com/onsi/gomega from 1.19.0 to 1.20.0
    85a603b Bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0
    8829267 Running golangci-lint on pdcs/pods, pcs/containers
    d027158 running golangci-lint on pdcs/images
    431dbd7 Makefile target to run codespell
    2408394 running golangci-lint on pdcs/sysinfo
    a4f7c62 running golangci-lint on pdcs/networks
    7b35f80 running golangci-lint on pdcs/volumes
    9f0fdd5 Bump github.com/containers/buildah from 1.26.1 to 1.26.2
    08f96d0 Bump github.com/navidys/tvxwidgets from 0.1.0 to 0.1.1
    9a4dfd5 running golangci-lint on pdcs/registry and pdcs/utils
    a158603 Makefile - install golangci-lint and codespell tools
    843dee3 Bump to v0.6.0-dev
    e0db08b Bump to v0.5.0
    117087b Bump github.com/spf13/cobra from 1.4.0 to 1.5.0
    3e4d6c3 code coverage for network and volume create dialogs
    ac570c3 github workflow: adding templates for bug report and features
    082cf8e docs: adding security policy
    1339a05 Bump github.com/containers/podman/v4 from 4.1.0 to 4.1.1
    9f92e1c new feature - image push
    666026d Bump github.com/docker/docker
    6e50e26 show confirmation dialog in the center of different views
    a55466b disk usage dialog table headers color update
    8f21399 docs update - Mac build
    0d13526 Esc key shall not close dialogs if its dropdown widgets has focus
    a957454 docs update - Mac build
    d6d81f6 Bump github.com/rs/zerolog from 1.26.1 to 1.27.0
    95187ec infobar + help color update for headers
    c25c20e using images.GetImage function for image inspect
    83b1ac5 new feature - container commit
    509532b image history dialog update
    a4488bf update button labels based on their function
    c15c697 makefile update - darwin build
    ce6a55f Bump to v0.5.0-dev
    fafb1dc Bump to v0.4.0
    bc9c56d running codespell
    a23b601 code coverage for ui/utils
    36230ca CI setup

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-25 22:55:48 -04:00