Commit Graph

2214 Commits

Author SHA1 Message Date
Bruce Ashfield
cec0d5ce99 kvmtool: update to latest
Bumping kvmtool to latest, which comprises the following commits:

    336751f Makefile: Introduce LIBFDT_DIR to specify libfdt location
    6c88c26 virtio/rng: Zero-initialize the device
    fe21827 virtio/pci: Deassert IRQ line on ISR read
    ae22ac7 Makefile: Fix ARCH override
    3863f34 Makefile: Add missing build dependencies
    6a1f699 arm64: pvtime: Use correct region size
    c86ef0b virtio/pci: Remove VIRTIO_PCI_F_SIGNAL_MSI
    3d5cefc virtio/pci: Initialize all vectors to VIRTIO_MSI_NO_VECTOR
    5fe5eb0 virtio: Add support for modern virtio-mmio
    22a0823 virtio: Move MMIO transport to mmio-legacy
    b0d56e3 virtio: Add support for modern virtio-pci
    930876d virtio: Move PCI transport to pci-legacy
    3c8f82b virtio: Prepare for more feature bits
    de166e5 virtio/net: Set vhost backend after queue address
    73fd136 virtio/pci: Use the correct eventfd for vhost notification
    21c9bc7 virtio/pci: Make doorbell offset dynamic
    d060729 virtio: Extract init_vq() for PCI and MMIO
    c6590f7 virtio/pci: Delete MSI routes
    8b91a18 arm64: Allow the user to specify the RAM base address
    3f7e48f Introduce kvm__arch_default_ram_address()
    a37dad0 arm/arm64: Consolidate RAM initialization in kvm__init_ram()
    5e9c654 kvm__arch_init: Remove hugetlbfs_path and ram_size as parameters
    a9c24ec builtin_run: Allow standard size specifiers for memory
    d6d4220 arm/arm64: Kill the ARM_HIMAP_MAX_MEMORY() macro
    1af57dc arm/arm64: Kill the ARM_MAX_MEMORY() macro
    cce5a4f arm/arm64: Fail if RAM size is too large for 32-bit guests
    abe3f28 builtin-run: Add arch hook to validate VM configuration
    28b9625 builtin-run: Rework RAM size validation
    9d65519 builtin-run: Always use RAM size in bytes
    024c331 Use MB for megabytes consistently
    d9fdaad arm: gic: fdt: fix PPI CPU mask calculation
    f44af23 virtio/pci: Factor MSI route creation
    4842789 virtio/blk: Implement VIRTIO_F_ANY_LAYOUT feature
    e74b56e virtio/console: Add VIRTIO_F_ANY_LAYOUT feature
    6daffe5 virtio/net: Implement VIRTIO_F_ANY_LAYOUT feature
    b231683 virtio/net: Prepare for modern virtio
    8b27bcf virtio/net: Offload vnet header endianness conversion to tap
    c492534 Add memcpy_fromiovec_safe
    902a8ec virtio: Remove set_guest_features() device op
    17ad9fd virtio/console: Remove unused callback
    867b15c virtio: Fix device-specific config endianness
    15e6c4e virtio: Add config access helpers
    609ee90 virtio: Support modern virtqueue addresses
    fd41cde virtio: Factor virtqueue initialization
    a8e397b virtio/vsock: Remove redundant state tracking
    3a1e36e virtio: Remove redundant test
    7efc262 virtio: Add NEEDS_RESET to the status mask
    b4531b2 riscv: Add missing asm/kernel.h header
    6f6f384 mips: Do not emulate a serial device
    8ec1e8b arm64: Honor --vcpu-affinity for aarch32 guests
    1a992bb include: add new virtio uapi header files
    e539078 include: update virtio UAPI headers
    393e218 util: include virtio UAPI headers in sync
    7e22099 update virtio_mmio.h
    a68a52c kvmtool: Have stack be not executable on x86
    31e0eac virtio: Check for overflows in QUEUE_NOTIFY and QUEUE_SEL
    e473028 virtio: Sanitize config accesses
    3510a7f virtio/9p: Fix virtio_9p_config allocation size
    06e1e6f virtio: Use u32 instead of int in pci_data_in/out
    52d4ee7 mmio: Sanitize addr and len
    143ffa2 kvmtool: Add WARN_ONCE macro
    bc77bf4 stat: Add descriptions for new virtio_balloon stat types
    3a13530 virtio/balloon: Fix a crash when collecting stats
    324cc09 aarch64: Give up with MTE for AArch32 guest
    4639b72 arm64: Add --vcpu-affinity command line argument
    1393bda arm64: Add support for KVM_ARM_VCPU_PMU_V3_SET_PMU
    083a976 update_headers.sh: Sync ABI headers with Linux v5.18-rc2
    0febaae Add cpumask functions
    83713e7 arm64: Rework set_pmu_attr()
    f57ce44 arm: Make the PMUv3 emulation code arm64 specific
    b23aed2 arm: Get rid of the ARM_VCPU_FEATURE_FLAGS() macro
    412ee13 arm: Move arch specific VCPU features to the arch specific function
    5898515 arm/arm64: pmu.h: Add missing header guards
    d9b64eb linux/bitops.h: Include wordsize.h to provide the __WORDSIZE define
    443cd88 linux/err.h: Add missing stdbool.h include
    5657dd3 aarch64: Add support for MTE
    af1b793 update_headers.sh: Sync ABI headers with Linux v5.17
    ffa8654 Make --no-pvtime command argument arm specific
    faae833 Revert "kvm tools: Filter out CPU vendor string"

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-21 16:22:30 -04:00
Guenther Meyer
bcc7d479bb kubernetes: fixed typos
After upgrading from honister to kirkstone the build always failed
during the package_write_ipk step, because the package name has
been overwritten because of the typo in FILES.
While investigating, I discovered another typo in class-devupstream.

Signed-off-by: Guenther Meyer <g.meyer@signum-media.de>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-20 08:47:28 -04:00
Jose Quaresma
2d0f7255a7 docker/proxy: don't use -linkshared unconditionally
The linkshared is not supported in some machines like riscv64 and
when supported we can use the GO_LINKSHARED instaed.
So export GO_LINKSHARED on the recipe to be available for Makefile.

This is currently only used in libnetwork for the proxy build, but
could be used in additional locations in the future.

Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-20 08:42:10 -04:00
Andrei Gherzan
758da82203 podman: Add ptest support for system tests
Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-16 11:13:31 -04:00
Andrei Gherzan
481b716f7c catatonit: Integrate version 0.1.7
This is useful for podman system tests.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-16 11:12:41 -04:00
Bruce Ashfield
3373301f78 devtools: introduce udica
udica provides an (easier) way to generate selnux policies
for containers. since we already have selinux has a dependency
of meta-virt, we might as well make policy creation easier.

See https://github.com/containers/udica, for details on how
to use the tool.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-16 11:00:11 -04:00
Bruce Ashfield
d9af46db9a kubernetes: fix more TMPDIR references
Changing the clone location of kubernetes allows us to remove the
vendor symlink "fix". This reduces the number of TMPDIR references
in the binaries.

kubernetes takes care of most of the rest via using asmflags and
gcflags interally which specify -trimpath, but unfortunately these
flags are being recorded into the binaries and leave us with 4
references to the TMDIR:

  -asmflags=all=-trimpath=/opt/poky/build/tmp/work/core2-64-poky-linux/kubernetes/1_v1.24.0+git8b1b4db3834ddf7cf1b97137180f413cb9e2186f-r0/git/src/github.com/kubernetes/kubernetes/_output/local/go/src/k8s.io/kubernetes
  -gcflags="all=-trimpath=/opt/poky/build/tmp/work/core2-64-poky-linux/kubernetes/1_v1.24.0+git8b1b4db3834ddf7cf1b97137180f413cb9e2186f-r0/git/src/github.com/kubernetes/kubernetes/_output/local/go/src/k8s.io/kubernetes
  -asmflags=all=-trimpath=/opt/poky/build/tmp/work/core2-64-poky-linux/kubernetes/1_v1.24.0+git8b1b4db3834ddf7cf1b97137180f413cb9e2186f-r0/git/src/github.com/kubernetes/kubernetes/_output/local/go/src/k8s.io/kubernetes
  -gcflags="all=-trimpath=/opt/poky/build/tmp/work/core2-64-poky-linux/kubernetes/1_v1.24.0+git8b1b4db3834ddf7cf1b97137180f413cb9e2186f-r0/git/src/github.com/kubernetes/kubernetes/_output/local/go/src/k8s.io/kubernetes

We leave these for now, as attempts to remove them have broken
the build, and kubernetes uses 'go install' versus 'go build' to
construct the binaries .. making our normal solutions non functional.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-15 14:00:46 -04:00
Bruce Ashfield
a61f6ea090 containerd: fix final TMDIR references
restructure the containerd source layout to avoid symlinking vendor
dependencies. This avoid go recording paths in the final binaries.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-15 09:18:21 -04:00
Bruce Ashfield
c278a05948 riddler: remove TMPDIR references
convert the riddler recipe to a structure that doesn't need a
symlinked vendor directory. go records these links in the binary,
making our output non-reproducible.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-15 09:01:55 -04:00
Bruce Ashfield
79ff2a5b00 oci-image-tools: fix TMPDIR references
The structure of the source code layout that was used by
this recipe required symlinking subirectories of the source
into a location that would be searched by go. While this
fixes the build, and produces a working binary, go stores
the location into the binary itself. Those stored paths
reference the build directory, making the result not
reproducible.

With this change, we create an alternate structure that
doesn't require symlinking and allows go to find the
components during build. This results in a simpler recipe
and binaries without TMPDIR references.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-14 22:01:22 -04:00
Bruce Ashfield
1242b97f7f oci-runtime-tools: fix TMPDIR references
The structure of the source code layout that was used by
this recipe required symlinking subirectories of the source
into a location that would be searched by go. While this
fixes the build, and produces a working binary, go stores
the location into the binary itself. Those stored paths
reference the build directory, making the result not
reproducible.

With this change, we create an alternate structure that
doesn't require symlinking and allows go to find the
components during build. This results in a simpler recipe
and binaries without TMPDIR references.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-14 20:34:11 -04:00
Bruce Ashfield
26f698cdb8 oci-image-tools: remove TMPDIR references
Pass -trimpath to the build to remove most (but not all)
TMDIR references.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-14 14:49:17 -04:00
Bruce Ashfield
0b0718efc1 oci-runtme-tools: fix TMPDIR references
pass -trimpath to remove most TMPDIR referneces.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-14 14:48:43 -04:00
Bruce Ashfield
ba32f19b65 netns: fix reproducible QA warnings
Pass -trimpath to the build to avoid references to TMPDIR.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-13 16:21:06 -04:00
Bruce Ashfield
ad8af62133 yq: fix build
The yq build was broken:

  - some repositories have moved from master -> main
  - missing dependencies, that were being fetched in the compile task

Correcting these issues fixes yq' build

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-13 16:11:10 -04:00
Bruce Ashfield
d0a816063d go-build: reproducible add -trimpath
Fix the TMDIR QA error by tweaking out patch to add trimpath to
go build calls.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-13 15:45:55 -04:00
Bruce Ashfield
36cb2b12a7 go-build: add dependency to fix build time fetching
go-builds compilation is fetching runc as a dependency, we can't
do that in the compilation phase without an exception, or throwing
an error.

We add the runc dependency and fetch it directly into the required
directory. This avoids the build time fetch, and we better control
the revision. win-win.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-13 15:44:26 -04:00
Bruce Ashfield
f132afed23 umoci: fix reproducibility
pass -trimpath to the umoci build to remove TMPDIR references
in the binaries.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-13 15:28:14 -04:00
Bruce Ashfield
e465ef7dcd riddler: pass -trimpath to build
To fix most of the TMPDIR references, we pass -trimpath to the build
via a new variagle GOBUILDFLAGS.

There are still some debug references to TMDIR, that will be fixed
at a later time.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-13 15:04:51 -04:00
Bruce Ashfield
e167860a87 podman-tui: reproducibility, pass -trimpath to fix QA warnings
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-13 14:45:38 -04:00
Bruce Ashfield
fce21463ff docker-distribution: pass -trimpath to fix reproducibility warnings
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-13 14:26:59 -04:00
Bruce Ashfield
f5b7922278 cni: reproducible builds: pass -trimpath
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-13 13:13:52 -04:00
Bruce Ashfield
f6f4f2c1c3 skopeo: reprodicibility enable trimpath and strip
Skopeo is throwing TMPDIR QA warnings due to paths being built
into the binaries. We fix this by creating a new variable to
pass -trimpath into the build, and also by defining the linker
flags -w -s to strip source/path information from the binaries.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-13 12:56:27 -04:00
Bruce Ashfield
7cea149bb0 docker: reproducibility add -trimpath to go -> $GO patches
With this, we build and package docker without QA warnings due to
references to TMPDIR.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-13 11:25:46 -04:00
Bruce Ashfield
c991546a7f k3s: pass -trimpath to improve reproducibility 2022-09-12 16:59:26 -04:00
Bruce Ashfield
f20516d0fd app-container: temporarily copy contens of .inc file to recipe
Variable overrides have stopped working when this specific .inc
file are used. To keep the demo working, we temporarily copy the
exact contents of the .inc file into the recipe .. and all is well.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-12 16:45:26 -04:00
Bruce Ashfield
4254c4a732 image-oci-umoci: add convenience symlink to latest image
Symlink the date-time based image name, to just the imagename-oci.

This makes scripting use of the deployed container much simpler.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-12 16:45:26 -04:00
Bruce Ashfield
c5ed5aa1e5 demo: add a sample container that just contains curl
This is useful for demonstrating how entry points and functionality
can be delivered in containers

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-12 16:45:26 -04:00
Bruce Ashfield
eb4a659acb podman-tui: add README with rendering tips
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-12 16:45:26 -04:00
Bruce Ashfield
9ef3fa52d0 containerd: improve reproducibility
We get the following QA warning on build:

WARNING: containerd-opencontainers-v1.6.8+gitAUTOINC+579a6380ec-r0 do_package_qa: QA Issue: File /usr/bin/containerd-shim-runc-v2 in package containerd-opencontainers contains reference to TMPDIR
File /usr/bin/containerd-ctr in package containerd-opencontainers contains reference to TMPDIR
File /usr/bin/containerd-shim-runc-v1 in package containerd-opencontainers contains reference to TMPDIR
File /usr/bin/containerd in package containerd-opencontainers contains reference to TMPDIR
File /usr/bin/containerd-shim in package containerd-opencontainers contains reference to TMPDIR [buildpaths]

This is the first step in fixing the QA warning, by dropping our
debug patch, passing -trimpath and not defining GO_DEBUG.

This leaves a final reference similar to:

path _/opt/poky/build/tmp/work/core2-64-poky-linux/containerd-opencontainers/v1.6.8+gitAUTOINC+579a6380ec-r0/git/src/import/cmd/ctr

That is being stored in the .rodata of the binaries.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-12 15:46:00 -04:00
Bruce Ashfield
08a59b4d93 nerdctl: reproducibility, path -trmpath to build
To avoid go embedding references to the build dir into binaries,
we pass -trimpath to the build.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-09-12 14:36:56 -04:00
Vasileios Anagnostopoulos
7106007c14 k3s: fix the version of k3s
When executing `k3s --version` the mentioned version
`k3s version dev (HEAD)`. The root cause is, that the BUILD_FLAGS
were not the expected ones. After that patch, the k3s is reporting
the correct version.

Signed-off-by: Vasileios Anagnostopoulos <vasileios.anagnostopoulos@siemens.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-31 08:20:32 -04:00
Chen Qi
da285876dc lxc: fix compilation error for ARM/ARM64
There's compilation error when building lxc for ARM/ARM64 BSPs.
The error message is as below:

  | ../git/src/lxc/cgroups/cgfsng.c🔢111: error: incompatible
    type for argument 10 of 'sd_bus_call_method_asyncv'

The 10th argument is of type va_list but NULL is supplied, thus causing
compilation error.

So we use sd_bus_call_method_async to replace the asyncv one to
solve this issue.

Signed-off-by: Chen Qi <Qi.Chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-25 22:55:48 -04:00
Pascal Bach
c16d3a58ee podman: replace GOBUILDFLAGS patch
The GOBUILDFLAGS patch is replaced by explicitly setting BUILDFLAGS="${GOBUILDFLAGS}"
in the recipe.

Signed-off-by: Pascal Bach <pascal.bach@siemens.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-25 22:55:48 -04:00
Bruce Ashfield
3a2ac5b28a podman-tui: update to v0.5.0
Bumping podman-tui to version v0.5.0-40-g8f2b80f, which comprises the following commits:

    95abf3a Bump github.com/containers/podman/v4 from 4.1.1 to 4.2.0
    868a762 Bump github.com/containers/buildah from 1.26.4 to 1.27.0
    7b02fb5 Bump github.com/containers/buildah from 1.26.2 to 1.26.4
    0932c65 Bump github.com/containers/common from 0.48.0 to 0.49.0
    7fff27e Fix flaky tests
    87589d6 Fix typos
    24a3fff Bump github.com/containers/storage from 1.41.0 to 1.42.0
    6795a8f Bump github.com/BurntSushi/toml from 1.1.0 to 1.2.0
    e4f465b Bump github.com/onsi/gomega from 1.19.0 to 1.20.0
    85a603b Bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0
    8829267 Running golangci-lint on pdcs/pods, pcs/containers
    d027158 running golangci-lint on pdcs/images
    431dbd7 Makefile target to run codespell
    2408394 running golangci-lint on pdcs/sysinfo
    a4f7c62 running golangci-lint on pdcs/networks
    7b35f80 running golangci-lint on pdcs/volumes
    9f0fdd5 Bump github.com/containers/buildah from 1.26.1 to 1.26.2
    08f96d0 Bump github.com/navidys/tvxwidgets from 0.1.0 to 0.1.1
    9a4dfd5 running golangci-lint on pdcs/registry and pdcs/utils
    a158603 Makefile - install golangci-lint and codespell tools
    843dee3 Bump to v0.6.0-dev
    e0db08b Bump to v0.5.0
    117087b Bump github.com/spf13/cobra from 1.4.0 to 1.5.0
    3e4d6c3 code coverage for network and volume create dialogs
    ac570c3 github workflow: adding templates for bug report and features
    082cf8e docs: adding security policy
    1339a05 Bump github.com/containers/podman/v4 from 4.1.0 to 4.1.1
    9f92e1c new feature - image push
    666026d Bump github.com/docker/docker
    6e50e26 show confirmation dialog in the center of different views
    a55466b disk usage dialog table headers color update
    8f21399 docs update - Mac build
    0d13526 Esc key shall not close dialogs if its dropdown widgets has focus
    a957454 docs update - Mac build
    d6d81f6 Bump github.com/rs/zerolog from 1.26.1 to 1.27.0
    95187ec infobar + help color update for headers
    c25c20e using images.GetImage function for image inspect
    83b1ac5 new feature - container commit
    509532b image history dialog update
    a4488bf update button labels based on their function
    c15c697 makefile update - darwin build
    ce6a55f Bump to v0.5.0-dev
    fafb1dc Bump to v0.4.0
    bc9c56d running codespell
    a23b601 code coverage for ui/utils
    36230ca CI setup

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-25 22:55:48 -04:00
Bruce Ashfield
28472ab0d6 crun: update to v1.5
Bumping crun to version 1.5-41-gce7533a, which comprises the following commits:

    ad9008b copr: depend on wasmtime-c-api for shared lib
    972d595 krun: add support for krun-sev
    e539aae tests: fix fedora rawhide mockbuild
    559902d autobuild copr rpms with wasmtime support
    d39f45d wasmtime: always grant filesystem capability for wrkdir inside container
    b937322 wasmtime: inherit argv from handler argument instead of process
    477ecc8 crun: restore will work on realpath
    1083f9d tests,podman: skip push to local registry with authorization
    29599a5 tests: disable login/logout tests
    8ff3eba rpm/Makefile: Fix copr build (follow-up on #979)
    f5244c7 rpm/Makefile: install all dependencies on mock environments
    a37b06a rpm/Makefile: install git-core in tarball-prep
    ab18c71 cgroup: change delegate cgroup after cgroupns creation
    4716692 cgroup: add new function libcrun_cgroup_enter_finalize
    9139896 tests: disable broken test
    a45faa2 rpm/Makefile: autobuild rpms on podman-next copr
    7ea284f src: make some error messages lower case
    43f420a syntax-check: enable prohibit atoi and atof
    9920e7b wasmer: move definitions earlier
    54e2519 wasmer: drop not needed indentation
    54fe445 wasmer: fix errors return code
    86f9a5c syntax-check: enable prohibit always true header tests
    a07112c syntax-check: enable no period at end of message check
    2656de5 maint.mk: update from upstream gnulib
    3df1458 linux: fix build with glibc 2.36
    14b2102 pidfd: fallback on ENOSYS
    fd01ef4 nix: allow to pass extra args to the runtime
    a91e905 NEWS: tag 1.5
    2c94290 nix: update nix dependencies
    76ead7b wasm: add support for running containers using wasmtime
    88e8710 python: unset LIBCRUN_RUN_OPTIONS_PREFORK for run
    9ceba95 crun: move config_file* to container
    639c98f cgroup: add fallback to io.weight
    c75b58d wasm,wasmedge: drop support for experimental WasmEdgeProcess

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-25 22:55:48 -04:00
Bruce Ashfield
d1aece6d43 cri-tools: update to v1.24.2
Bumping cri-tools to version v1.24.2-35-g77d02a03, which comprises the following commits:

    a685ed61 No truncate PodID in ps command if --no-trunc exists
    90214b0c Bump version in install section to 1.24.2 on README
    acf387b3 Update crictl pods to show pod name
    e7c20ee1 Switch to golang native error wrapping
    cee70655 Bump github.com/urfave/cli/v2 from 2.11.0 to 2.11.1
    e8133ffb Bump github.com/onsi/gomega from 1.19.0 to 1.20.0
    b8543347 Bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0
    57da46e7 Add documentation about 'statsp' command
    6182e3ce Implement checkpoint command
    8152f295 Bump github.com/urfave/cli/v2 from 2.10.3 to 2.11.0
    a0a19a36 Bump github.com/urfave/cli/v2 from 2.10.2 to 2.10.3
    4bb67144 Validate container status in volume mount tests
    4da8fc8d Switch to go 1.18 for GitHub actions
    1f6b4299 Bump github.com/urfave/cli/v2 from 2.10.1 to 2.10.2
    99b030fe Switch to go 1.18 as requirement
    55020abc Bump github.com/urfave/cli/v2 from 2.8.1 to 2.10.1
    1e69ea9c Bump github.com/opencontainers/runc from 1.1.2 to 1.1.3
    b9de22b0 Bump github.com/docker/docker
    d7fb1f5b Fix timeout for exec sync
    ecb5c7f8 Fix cri-dockerd build
    d2da6561 Bump github.com/urfave/cli/v2 from 2.8.0 to 2.8.1
    ce68c70c skip tests for dockershim
    4f533d58 add-list-stat-test: add tests for list stats
    db554dad Bump github.com/urfave/cli/v2 from 2.6.0 to 2.8.0
    d000ae7a docs: update the version to the latest
    acf82056 Bump github.com/docker/docker
    a7df3acb Bump github.com/onsi/ginkgo/v2 from 2.1.3 to 2.1.4
    603495f3 Bump github.com/opencontainers/runc from 1.1.1 to 1.1.2
    8c659770 Remove selinux build tag
    d4fe3e7a cmd/critest: fix empty ginkgo flag's value issue
    4ee0c367 Add lifecycle index in benchmark update messages.
    8ba9205d Skip benchmarks if associated resource number is not set.
    2ba1d0e3 Standardize image lifecycle and listing benchmarks.
    64263891 Parametrize benchmarking-related timeouts.
    4355d842 Pass verbose flag when querying Container/Pod statuses.
    b40d492e Formalize mechanism for recording/managing benchmark results.
    2dd37ab8 Parametrize benchmark settings.
    52e0c3dc Rewrite pod.go
    f0f71212 Vendor onsi/gomega/gmeasure
    21aebcad Bump github.com/docker/docker
    81036863 Bump github.com/urfave/cli/v2 from 2.5.1 to 2.6.0
    f9710f79 Vendor Kubernetes v1.24.0
    3ceb4eee Fixes the incubator project reference
    1a168cb6 update containerd socket in windows
    54148d3d Bump github.com/opencontainers/runc from 1.1.0 to 1.1.1
    ce9a5aec Switch to ginkgo/v2
    9e9d83d6 Bump github.com/urfave/cli/v2 from 2.4.0 to 2.5.1
    a156899c Bump github.com/opencontainers/selinux from 1.10.0 to 1.10.1
    4291d65c Bump github.com/docker/docker
    5fe1f012 Bump github.com/onsi/gomega from 1.18.1 to 1.19.0
    dd6467a3 install CNI on linux
    abeab06b Fix setup-gcloud action by referencing `v0`
    69579189 Fix CRI-O tests
    511767e5 Add CRICTL_AUTH env var option to crictl pull
    1616f258 Make RPCs CRI v1 and v1alpha2 compatible
    769acd39 Bump github.com/urfave/cli/v2 from 2.3.0 to 2.4.0
    e5877df5 Bump github.com/docker/docker
    6a2a5284 Bump google.golang.org/grpc from 1.44.0 to 1.45.0
    e27bb02f Bump github.com/docker/distribution
    3e01b9f2 fix seccomp test case for arm64
    c6d3e52e Add `crictl statsp` command

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-25 22:55:48 -04:00
Bruce Ashfield
c1977562f6 cri-o: update to 1.25-tip
Bumping cri-o to version v1.24.0-292-gda7b5b1d9, which comprises the following commits:

    4b6936f8f bump cri-api to k8s 1.25 rc0
    1988e00f0 server: handle exit files asynchronously
    45a55ed20 server: remove exit file in exit monitor
    ced6fdaca server: cleanup exit monitor function
    1e27ac3eb server: allow for kubelet to specify -1 for swap
    3e7fd1de9 Add packit configuration
    66b2ccc34 fix lint errors from 1.19 bump
    9b49723de golangci: drop nolintlint
    1e2f0055f bump golangci-lint to 1.48.0
    7fe1f1b9e dependencies: update with new ci
    c42d0d464 bump golang to 1.19
    2426f669f fix documentation issue in contrib/cni/README.md: build-output changed
    cc933c7a8 build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
    30bb89319 utils/RunUnderSystemdScope: fix
    3e0aa19bd oci: take opLock for UpdateContainer
    a560c8d8f node_e2e_installer: use runc/crun from PATH
    1c4d63c41 build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
    3d0fc3630 fix documentation issues in contrib/cni/README.md
    33fbbcde1 Fix possible panic in pod runtime attach
    784245033 Pin containers/* dependencies
    e82c16b16 migrate image_list to quay.io
    f7d02e2c4 add critest-images mirror
    dc5769f4f add GCP vagrant environment
    76c96ce83 build(deps): bump github.com/containernetworking/cni from 1.1.1 to 1.1.2
    2e8612255 Add bundle e2e and integration tests using conmonrs
    d4530cb40 Fix nginx based integration tests
    45badb2a0 add vagrantfile to test CI and fixes
    7f4ddeca6 build(deps): bump sigs.k8s.io/release-utils from 0.7.2 to 0.7.3
    19ae364e0 Enter mount namespace if set in $KUBENSMNT environment
    483fd0cf0 bats: Alter cleanup_testdir to handle nested mountpoints
    65b52fb80 highperfhooks: avoid unbound growth of irqbalance
    e09fe0efa Add support for max log size in runtime pod
    d3cd7a07b unzips cri-o to the go dir
    c60fd9473 Bump crun: 1.4.5 -> 1.5
    c2984518d build(deps): bump github.com/urfave/cli/v2 from 2.11.0 to 2.11.1
    c42240355 build(deps): bump github.com/BurntSushi/toml from 1.1.0 to 1.2.0
    9d5abc2ad Add Lyft to adopters
    eff3a3191 build(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0
    74fa8341f Re-enable conmon-rs attach test
    ad5f650bd Remove etcd dependency replacement
    f6d6ba4c7 updates ansible for use with prow instead of jenkins
    d8e76f15e copies test/integration to test/ci
    35f4900ba Pin sigs.k8s.io/bom to v0.3.0
    edb06fbf9 Switch to `github.com/blang/semver/v4`
    6a1b6b581 Fallback to default seccomp profile if not found on disk
    639843795 build(deps): bump google.golang.org/grpc from 1.47.0 to 1.48.0
    7dc5333c6 build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
    222051ffb build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
    45304727c build(deps): bump github.com/urfave/cli/v2 from 2.10.3 to 2.11.0
    084dbcf4d build(deps): bump github.com/emicklei/go-restful
    8c66b2aa3 remove succinct option to fix jenkins
    4f75284ff build(deps): bump k8s.io/klog/v2 from 2.70.0 to 2.70.1
    4ca27d0b0 Remove enable_custom_shm_size
    f71d92ed8 Retry dependency report push if failed
    410258613 Fix Unmasked ProcMountType
    8e6895172 Add a unit test around configuring taskset on InfraCtrCPUSet
    5a59d9f58 Add test for "Canonize selinux label"

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-25 22:55:48 -04:00
Bruce Ashfield
19045acf78 containerd: update to 1.6.8
Bumping containerd to version v1.6.8-8-g579a6380e, which comprises the following commits:

    1efd8b947 ci: remove GOPROXY environment variable due to https://github.com/go-yaml/yaml/issues/887
    0448673af Do not append []string{""} to command to preserve Docker compatibility
    5c230ece0 Fix cleanup in critest
    ed9d3dc37 oci: WithDefaultUnixDevices(): remove tun/tap from the default devices
    3364f411e Prepare release notes for v1.6.8
    390920429 release workflow: remove Go setup action
    cf48ba6e8 release workflow: increase timeout to 30 minutes
    57873e652 release: rollback Ubuntu to 18.04 (except for riscv64)
    eccb82f6d Update release build timeout to 20 minutes
    6a854d4b5 Update mailmap
    61612e1a2 Prepare release notes for 1.6.7
    d199ee462 Update golang to 1.17.13
    0578d20c5 Change os.Stderr reassign for Windows service
    12cae4961 Update Vagrant CI to macos-12
    bc4091aae chore: bump macos runner version
    cb73bd050 Windows HostProcess container CRI stats test
    ac388525a Add validations for Windows HostProcess CRI configs
    0007f40fe [release/1.6] go.mod: Bump hcsshim to v0.9.4
    c9607e78c Update Fedora version to 36
    2952b66c0 CI: add riscv64 builds
    6b2dc9a37 release/Dockerfile: update Ubuntu to 22.04 for supporting riscv64
    745dc07c4 seccomp: support riscv64
    c2f841f21 Create ppc64le release
    86b55bd8d seccomp: allow clock_settime64 when CAP_SYS_TIME is added
    f3da3e51f allow ptrace(2) by default for kernel >= 4.8
    aa1101068 [release/1.6] update golang to 1.17.12
    37dfc5c9d [release/1.6] Fix WWW-Authenticate parsing

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-25 22:55:48 -04:00
Bruce Ashfield
783e36d15e conmon: update to 2.1.3
Bumping conmon to version v2.1.3-5-g19110c9, which comprises the following commits:

    636e239 Use /usr/bin/env to locate bash
    d7625dc Cirrus: Add meta task to keep CI VM images alive
    ab52a59 VERSION: bump to 2.1.3
    a627951 meson: build with seccomp if available
    1750b2d Fix build on FreeBSD-13.0
    0a2e0db Reduce the amount of duplicated code between Linux and FreeBSD
    32816bd Port conmon to FreeBSD
    b1ca51f gh actions: bump versions
    05163fd bump golang in gh action to 1.18
    d91cc43 Stop using g_unix_signal_add() to avoid threads
    2bc95ee [Fixup #342] `log-size-global-max` Should Be`log-global-size-max`
    99eac3e bump to v2.1.2
    143121b log_global_max: ignore if negative
    98058b1 add log-global-size-max option to limit the total output conmon processes
    65b6eaa bump to v2.1.1
    81086b7 journald: print tag and name if both are specified
    c61367c logging: add missing static keyword
    0c3412a drop some logs to debug level
    4c41ec2 meson: Handle journald

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-25 22:55:48 -04:00
Bruce Ashfield
13c1312c5b buildah: update to 1.27
Bumping buildah to version v1.25.0-411-gdb8d5921, which comprises the following commits:

    db8d5921 release: tag v1.27.0
    50a4acb0 make,cross: ignore loong64 from target list
    15b0a250 Allow chflags operations inside the container
    fb6da991 Don't try to call runLabelStdioPipes if spec.Linux is not set
    e8c7e3fe build(deps): bump github.com/golangci/golangci-lint in /tests/tools
    b7f51ea3 build: support filtering cache by duration using --cache-ttl
    b218fdf3 build: support building from commit when using git repo as build context
    99488b06 build: clean up git repos correctly when using subdirs
    8bbeed70 integration tests: quote "?" in shell scripts
    5f34c5e2 Fix a copy/paste error
    f96bf7c5 build(deps): bump github.com/golangci/golangci-lint in /tests/tools
    50183aa0 vendor c/common@v0.49.1
    dfba70e9 test: manifest inspect should have OCIv1 annotation
    873a9e1f vendor: bump to c/common@87fab4b701
    81b4edfa Failure to determine a file or directory should print an error
    5e3f7cea build(deps): bump github.com/containernetworking/cni from 1.1.1 to 1.1.2
    ad4976d0 refactor: remove unused CommitOptions from generateBuildOutput
    dbd22863 stage_executor: generate output for cases with no commit
    adbd7ef5 stage_executor, commit: output only if last stage in build
    bb149ea6 Use errors.Is() instead of os.Is{Not,}Exist
    ac5d37c0 Minor test tweak for podman-remote compatibility
    a47dee2c Cirrus: Use the latest imgts container
    239c06cf imagebuildah: complain about the right Dockerfile
    bef61d79 tests: don't try to wrap `nil` errors
    c9407334 cmd/buildah.commitCmd: don't shadow "err"
    36006c9a cmd/buildah.pullCmd: complain about DecryptConfig/EncryptConfig
    0ded0dca Fix a copy/paste error message
    aed3fdc7 Fix a typo in an error message
    6f660bde build,cache: support pulling/pushing cache layers to/from remote sources
    6c96dd95 Update vendor of containers/(common, storage, image)
    ac4b39a2 Rename chroot/run.go to chroot/run_linux.go
    79bc4a38 Don't bother telling codespell to skip files that don't exist
    62954c89 Set user namespace defaults correctly for the library
    c79f7272 imagebuildah: optimize cache hits for COPY and ADD instructions
    6841f92e Cirrus: Update VM images w/ updated bats
    6243a938 build(deps): bump github.com/onsi/gomega from 1.19.0 to 1.20.0
    eb4ec4a9 docs, run: show SELinux label flag for cache and bind mounts
    a51011f4 build(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0
    05d48980 imagebuildah, build: remove undefined concurrent writes
    d0a675ed bump github.com/opencontainers/runtime-tools
    dc1bc10d Add FreeBSD support for 'buildah info'
    80870d50 Vendor in latest containers/(storage, common, image)
    4387e7e3 Add freebsd cross build targets
    d0ef62ae Make the jail package build on 32bit platforms
    36d95b05 Cirrus: Ensure the build-push VM image is labeled
    e1f3468a GHA: Fix dynamic script filename
    7c0f2253 Vendor in containers/(common, storage, image)
    6fb7bb4b Run codespell
    2c8436a7 Remove import of github.com/pkg/errors
    34026835 Avoid using cgo in pkg/jail
    ad389b19 Rename footypes to fooTypes for naming consistency
    cdac8e1b Move cleanupTempVolumes and cleanupRunMounts to run_common.go
    4b7c61d5 Make the various run mounts work for FreeBSD
    57a73847 Move get{Bind,Tmpfs,Secret,SSH}Mount to run_common.go
    0832ea2f Move runSetupRunMounts to run_common.go
    9c808c76 Move cleanableDestinationListFromMounts to run_common.go
    c21f4bd2 Make setupMounts and runSetupBuiltinVolumes work on FreeBSD
    cf079d01 Move setupMounts and runSetupBuiltinVolumes to run_common.go
    417c6018 Tidy up - runMakeStdioPipe can't be shared with linux
    95a18737 Move runAcceptTerminal to run_common.go
    1ab56715 Move stdio copying utilities to run_common.go
    ba5ff64d Move runUsingRuntime and runCollectOutput to run_common.go
    b290c861 Move fileCloser, waitForSync and contains to run_common.go
    bff1c193 Move checkAndOverrideIsolationOptions to run_common.go
    75ae8040 Move DefaultNamespaceOptions to run_common.go
    acdf4777 Move getNetworkInterface to run_common.go
    8e36f5fc Move configureEnvironment to run_common.go
    f68f1092 Don't crash in configureUIDGID if Process.Capabilities is nil
    7ea97716 Move configureUIDGID to run_common.go
    a405d62c Move runLookupPath to run_common.go
    4d9a035e Move setupTerminal to run_common.go
    42010799 Move etc file generation utilities to run_common.go
    1c0a08e3 Add run support for FreeBSD
    3faa6984 Add a simple FreeBSD jail library
    6bb4efdb Add FreeBSD support to pkg/chrootuser
    76a0c821 Sync call signature for RunUsingChroot with chroot/run.go
    8dca0a65 test: verify feature to resolve basename with args
    f146c718 vendor: bump openshift/imagebuilder to master@4151e43
    d300c614 GHA: Remove required reserved-name use
    35bfc66a buildah: set XDG_RUNTIME_DIR before setting default runroot
    9d7ac758 imagebuildah: honor build output even if build container is not commited
    9445aa12 chroot: honor DefaultErrnoRet
    48c888a6 [CI:DOCS] improve pull-policy documentation
    0e745d15 tests: retrofit test since --file does not supports dir
    ce384684 Switch to golang native error wrapping
    825561b2 BuildDockerfiles: error out if path to containerfile is a directory
    066b5448 define.downloadToDirectory: fail early if bad HTTP response
    fc9255f5 GHA: Allow re-use of Cirrus-Cron fail-mail workflow
    7a22c40e add: fail on bad http response instead of writing to container
    dab6d12e build(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0
    263f5adc [CI:DOCS] Update buildahimage comment
    252bf17b lint: inspectable is never nil
    869c705d vendor: c/common to common@7e1563b
    5686018e build: support OCI hooks for ephemeral build containers
    c0be04e6 [CI:BUILD] Install latest buildah instead of compiling
    1fd5d73f Add subid support with BuildRequires and BUILDTAG [NO NEW TESTS NEEDED]
    d6340b6c build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.7.5
    ffce8b36 Make sure cpp is installed in buildah images
    404852be demo: use unshare for rootless invocations
    198b4c36 buildah.spec.rpkg: initial addition
    74f2c9bd build: fix test for subid 4
    d3eeea37 build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0
    20c5c5c6 build, userns: add support for --userns=auto
    ecae0e2f Fix building upstream buildah image
    e54c9efa Remove redundant buildahimages-are-sane validation
    cf6b1bcf Docs: Update multi-arch buildah images readme
    0a1d828d Cirrus: Migrate multiarch build off github actions
    0d3246ff retrofit-tests: we skip unused stages so use stages
    08bc5d91 stage_executor: dont rely on stage while looking for additional-context
    25f9ff84 buildkit, multistage: skip computing unwanted stages
    dc07d9ff More test cleanup
    b23a20ee copier: work around freebsd bug for "mkdir /"
    f577fc4f Replace $BUILDAH_BINARY with buildah() function
    0b7c5002 Fix up buildah images
    be3b9c36 Make util and copier build on FreeBSD
    9042b86b Vendor in latest github.com/sirupsen/logrus
    8bbe7a60 build(deps): bump github.com/opencontainers/runc from 1.1.2 to 1.1.3
    8d9e9d6f Makefile: allow building without .git
    2d4d2824 run_unix: don't return an error from getNetworkInterface
    79bab77a run_unix: return a valid DefaultNamespaceOptions
    39880517 Update vendor of containers/storage
    c06c6dbb chroot: use ActKillThread instead of ActKill
    ed4412b9 use resolvconf package from c/common/libnetwork
    ee3d131d update c/common to latest main
    7cc5f198 copier: add `NoOverwriteNonDirDir` option
    3aea4093 Sort buildoptions and move cli/build functions to internal
    d452494d build(deps): bump github.com/fsouza/go-dockerclient from 1.8.0 to 1.8.1
    9c7ce03f build(deps): bump github.com/docker/docker
    f2dae989 build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2
    2182e0af build(deps): bump github.com/containerd/containerd from 1.6.5 to 1.6.6
    236c0bab Fix TODO: de-spaghettify run mounts
    6225b23d Move options parsing out of build.go and into pkg/cli
    7cf6dbd4 [CI:DOCS] Tutorial 04 - Include Debian/Ubuntu deps
    495add93 build, multiarch: support splitting build logs for --platform
    1ac1f035 build(deps): bump github.com/containerd/containerd from 1.6.4 to 1.6.5
    be9ef3b6 [CI:BUILD] WIP Cleanup Image Dockerfiles
    0bcc7c5e build(deps): bump github.com/fsouza/go-dockerclient from 1.7.11 to 1.8.0
    60b625ce cli remove stutter
    e80fed06 docker-parity: ignore sanity check if baseImage history is null
    c61ecc69 build, commit: allow disabling image history with --omit-history
    4cf93e3e Fix use generic/ambiguous DEBUG name
    73a5ec42 build(deps): bump github.com/containernetworking/cni from 1.1.0 to 1.1.1
    1a79fbed Cirrus: use Ubuntu 22.04 LTS
    0986de40 Fix codespell errors
    00d46292 Remove util.StringInSlice because it is defined in containers/common
    b3fbb598 buildah: add support for renaming a device in rootless setups
    149880a1 squash: never use build cache when computing last step of last stage
    7cc18838 Update vendor of containers/(common, storage, image)
    f7ea2d84 build(deps): bump github.com/golangci/golangci-lint in /tests/tools
    c2adbade buildkit: supports additionalBuildContext in builds via --build-context
    f4ad4faa test cleanup
    73e0ad71 buildah source pull/push: show progress bar
    45bd47b4 run: allow resuing secret twice in different RUN steps
    7dbc5ce8 test helpers: default to being rootless-aware
    c80e6a31 Add --cpp-flag flag to buildah build
    e4d25d53 build(deps): bump github.com/golangci/golangci-lint in /tests/tools
    784a8c4c build: accept branch and subdirectory when context is git repo
    177141d4 build(deps): bump github.com/docker/docker
    82e9c841 Vendor in latest containers/common
    714fbed4 build(deps): bump github.com/opencontainers/runc from 1.1.1 to 1.1.2
    8d57bff9 vendor: update c/storage and c/image
    1c1ba51c build(deps): bump github.com/golangci/golangci-lint in /tests/tools
    5e338aad Fix gentoo install docs
    f45fbf77 build(deps): bump github.com/docker/docker
    cf2bb5a1 copier: move NSS load to new process
    063abf6f Add test for prevention of reusing encrypted layers
    fccc7895 Make `buildah build --label foo` create an empty "foo" label again
    6750810f Bump to v1.27.0-dev
    0a9d6e6e Bump to v1.26.0

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-25 22:55:48 -04:00
Bruce Ashfield
3292170646 podman: update to 4.2
We refresh one patch, and drop another that is already part of the
4.2.x release series.

Bumping libpod to version v4.2.0-8-g754ec89a8, which comprises the following commits:

    eb2496a77 Skip / update some tests under runc
    eba1f7749 Bump to v4.2.1-dev
    7fe5a419c Bump to v4.2.0
    754e32056 Final release notes for v4.2.0
    4900394c8 Document behavior of --timestamp when only FROM is used
    b619c7a72 check memory test based on range
    a3778b051 specgen: use sandbox id instead of name for annotation
    fa1085ed0 cmd: refuse --userns if a mapping is specified
    91a1f3022 e2e: Add rootless mount cleanup test
    297c72238 [CI:COPR] podman.spec.rpkg: add python3 dependency for el8
    a6ea3325a start filter flag changes
    a19c5a252 Cirrus: Run Cross builds in [CI:DOCS] mode
    e776425e5 podman info: hide `--debug`
    53a631ca2 ISSUE TEMPLATE: remove `--debug` from `podman info`
    a7d932422 Cirrus: use dnf instead of rpm to install packages
    8c36b8c52 Cirrus: Fix e2e tests for "mount_rootless_test"
    bd3e36040 podman generate systemd --new: allow -h hostname
    5c17d1b14 test: verify manifest inspect must contain OCI annotations
    6b2bbd2d1 podman-volume-import: Reword "precendence"
    54ee42331 man podman-volume-import: Clarify that merge happens
    c5c0efc95 podman generate systemd: handle --sdnotify correctly
    7e7951145 Bump google.golang.org/protobuf from 1.28.0 to 1.28.1
    8b9e5fb08 Use 8k buffer to help clients w/ broken parsing
    7efd81cb8 With --rm option remove container if podman run fails
    346b22f07 Bump golang.org/x/tools from 0.1.11 to 0.1.12 in /test/tools
    5b5e53d70 syncContainer: transition from `stopping` to `exited`
    b7feafcb0 Fix: manifest push --rm removes a correct manifest list
    24f219efb Fix: Restore a container which name is equal to a image name
    32848b95f When removing objects specifying --force,podman should exit with 0
    312bef288 test: update apply-podman-deltas for new tests
    9b0a1fa75 build: implement --cache-to,--cache-from and --cache-ttl
    a382bd329 vendor: bump buildah to v1.27.0
    916d51bd0 test: update apply-podman-deltas for new tests
    3a239947a build: implement --cache-to,--cache-from and --cache-ttl
    6b2512f67 vendor: bump buildah to v1.27.0
    6beb3f208 Fixes #15154 Change order when config and connections are written
    eab03100f Add support, and default to rootless w/WSL prompt
    f826ed584 Disable F36 service that is incompat with WSL kern
    d16b42f26 pkginstaller: use correct GOARCH value in case of arm build
    0593ceb01 Cirrus: Update DEST_BRANCH to v4.2
    fb8584332 Cirrus: Improve CI VM image updates for EC2
    d5793db28 Bump back to v4.2.0-dev
    7e1f3106f Bump to v4.2.0-rc3
    1b7e16654 v4.2.0-rc3 release notes
    bf2a53a2e pkginstaller: use correct GOARCH while building podman binaries
    d4481a317 pkginstaller: makefile improvements to avoid redownloading
    1b3844f65 pkginstaller: add makefile target to notarize the built pkg
    64db955e0 pkginstaller: sign qemu-system-* binary for the pkg
    9a820b480 Add support for building macOS pkg installer
    5c95c0920 Add support for creating sigstore signatures, and providing passphrases
    0aebdb687 Hide podman manifest push --sign-by on remote
    b2b3edaca Use signByFlagName instead of copy&pasting the string
    49d40293b Remove libpod/common
    eacee60c8 Update c/common to an unreleased version
    62cc871c6 Update the registry server we test against from 2.6 to 2.8
    52db76373 Use existing REGISTRY_IMAGE variables in more places
    230363225 Use httpasswd from the surrouding OS instead of the registry image
    74155705e fix e2e sign tests
    983cfb90e Final v4.2.0-RC2 release notes
    bf6f79630 Skip one failing test on Ubuntu
    25efc9b2e Fix incorrect release note about regexp
    4acc14b4e Bump to v4.2.0-dev
    81005b8d8 Bump to v4.2.0-RC2
    6fafe120c Final release notes for v4.2.0-RC2
    990ef3cf6 [CI:DOCS] podman-generate-systemd.1.md: document --sdnotify
    c85722eb9 pod create --share none should not create infra
    c3e0f8ebe machine: Fix check which is always true
    e6ebfbd1e Set TLSVerify=true by default for API endpoints
    64bc2ee97 Semiperiodoc cleanup of obsolete FIXMEs
    b339045db benchmarks: fix create test
    fd1f5f55a integration test: fix network backend option with remote
    c7fef7316 docs: remove CNI word where it is not applicable
    976f818f1 libpod: do not lock all containers on pod rm
    772e883f8 container wait: improve error message
    206f11d4f Makefile: use order-only prereq for podman-remote
    c4616510a API: libpod/create use correct default umask
    ce8b6cebd compose test: remove cni config copy
    553a70096 compat api: always turn on network isolation for networks
    aef8039d3 compat api: allow default bridge name for networks
    fa7e9f0f8 Compat API: unify pull/push and add missing progress info
    fde39edb9 remote push: show copy progress
    1f48980af fix broken machine test
    cbcbde587 pkg/machine/e2e: do not import from cmd/podman
    69fcf04c6 fix some pkg/machine/e2e test to read stderr
    ce790e61b enable linter for pkg/machine/e2e
    ff7259567 [CI:DOCS] Cirrus: Add prominent gitlab warning
    3edaa174e libpod: create /etc/passwd if missing
    e41113dca e2e: show command and output when a timeout happens
    f6d18ed41 fix goroutine leaks in events and logs backend
    dc1dc4600 podman-remote pull: fix duplicate progress outputs
    2350ef9dd Fix potential leak on mid-stream read error
    7b28a1b7c vendor: remove unused deps
    3aec669e9 Makefile: remove building pages for man5
    ed49f9411 makefile: remove processing of pkg/docs
    24bbd40ce rpkg: remove usage of pkg/hooks
    73ecc5a4b pkg,libpod: remove pkg/hooks and use hooks from c/common
    d151edeea Fix machine test
    86159e39b document isolate option for network create
    c3c07ed09 Update init ctr default for play kube
    6057db75d Remove return error from "containers.pause"
    de8d2cc94 "pod pause/unpause/stop" append "report.Errs" to "reports"
    409fbeaab system tests: new system-service bats file
    d2e2756a4 Print rootfs download as a specific version on Win
    244055030 [CI:DOCS] Fix typo in manifest manpage
    76fa80447 Vendor in latests containers/storage and opencontainers/runtime-tools
    e89550bcd buildah vendor treadmill
    9c1de040b Vendor in containers/(storage,image, common, buildah)
    03eaea8bb Run codespell
    e4b82c77f Add --host and -H as equivalent options to --url
    183fdea5f Use SafeChown rather then chown for volumes on NFS
    17dbce2fb Clean up cached machine images
    e473c5e4b Machine init: create .ssh dir if not exist
    53edd9b65 Podman pull --all-tags shorthand option
    f07d2bac4 Cirrus: Trigger podman-machine task by label
    3bd248ae7 GHA: Fix dumb error check
    6d84a9952 Podman stop --filter flag
    a78be890e Switch to `github.com/blang/semver/v4`
    52850ce70 man page checker: enforce stricter options format
    a5827e13c Fixes #14698 Use prepared image for WSL2 machine init
    a4bae330a Add podman events -f to be alias for --filter
    d560c7897 [CI:DOCS] man pages: replace -c with --cpu-shares
    5f5379deb [CI:DOCS] podman-create.md: replace -c with --cpu-shares
    f7707c81a Fix last machine test
    35dc17bfe abi: create new cgroup when running in a container
    7b4ebfa65 podman: always call into SetupRootless
    3b37095b2 utils: call MaybeMoveToSubCgroup once
    edfe80027 podman: move MaybeMoveToSubCgroup to utils/
    b29a52a48 Docker uses "-c" to mean "--cpu-shares" in create and run
    ffd2e6df9 test,manifest-run: declare TARGETPLATFORM before using it
    ca4630ede CI: sanity check for desired runtime
    bf269e634 podman machine: do not commit proxies into config file
    b2f3b28c6 logformatter: link by *task ID*, not build ID
    cfb768a36 fix wrong log message on Trace level
    557b65e09 [CI:DOCS] Improve language. Fix spelling and typos.
    a363b3a65 Initial release notes for v4.2.0-RC1
    f22af2bf8 Bump to v4.2.0-dev
    74aa681e5 Bump to v4.2.0-rc1
    aa29bd6de Update CI base branch
    87793b633 [CI:DOCS] Rewrite the --gidmap option docs
    3bb4cf8ee libpod: read exit code when cleaning up the runtime
    62cdc387d podman wait: return 0 if container never ran
    25d74db45 [CI:DOCS] podman-info.1.md: Update examples
    b41e42f42 test/system/130-kill.bats: use $IMAGE
    81a19a568 Add ports and hostname correctly in kube yaml
    6b9abe69d improve pull-policy documentation
    76d887c77 Fix machine tests
    1e7686df6 Manifest test cleanup: use defer()
    96dd57ca5 podman wait can take multiple conditions
    a46f79883 pkg: switch to golang native error wrapping
    d1754bdd4 Refactored networkPrune function
    1161e8bd5 manifest_test: safer registry setup and teardown
    61a67a07b pkg/machine/qemu: start VM check if qemu is alive
    a26cf638e machine: qemu fix chardev id starting with letter
    4374038cc pkg/machine/e2e: do not import from cmd/podman
    4cfa8ccb2 machine test: fix endless loop in test
    3adda62d2 [minor] fix duplicate test name
    e8d2d70ee port forward range test: fix many oopses
    0424084b3 fix namespace reporting
    03ee8204d podman machine: make 9p security model configurable; adjust docs
    44bd166b3 test-apiv2: streamed response testing based on response duration
    a5898129c Fix qemu machine startHostNetworking always failing
    cc6faddfa use c/common code for resize and CopyDetachable
    1267515e1 Update play kube docs
    791dbf823 golangci install: explicitly set BINDIR
    4fd5fb97a e2e tests: cleanup: capitalize CONSTANTS
    72aa00aca Fix streaming for libpod/pods/stats endpoint
    ee05bc031 Fix network inspect compat API discrepancy
    9d6efb344 Podman machine info
    65d511c6d Fix podman pod unpaue TODO
    251d91699 libpod: switch to golang native error wrapping
    8f2d9e7a7 podman pod create --uts support
    5633ef1d1 Docker-compose disable healthcheck properly handled
    488eb3b74 (rootful) docker-compose now updates network MTU
    4fe7b8baf Podman system df JSON format outputs `Size` and `Reclaimable`
    b9aa47555 Sync: handle exit file
    49cb288df hack/test/utils: switch to golang native error wrapping
    2da731a7e test: reduce sleep interval
    c02f793ba test: return immediately on connect
    efe1176dd specgen,run: support running container from valid manifest list
    8601ab6b0 Silence setlocale warnings from `podman machine ssh`
    33a474286 pkg/machine: add missing build tags to tests
    5b1867923 TestEnvVarValue: fix assertion
    3fbe93371 envVarValueResourceFieldRef: use int64 for value
    4c5b058e8 fix flake in aardvark tests
    597de7a08 libpod/runtime: switch to golang native error wrapping
    8106568ca test: drop pod-create --device-read-bps test
    5491123c2 [CI:DOCS] troubleshooting: document --tty and CR
    fe559287c docs: Remove -s from systemctl enable --now sshd
    24fcfb5d9 Fix spelling "read only" -> "read-only"
    2f1075dfb Implement proxy support for Windows
    b92149e2a podman pod create --memory
    8cff1c2bf Cirrus: Add podman-machine integration test
    f58d7dbda Cirrus: Fix elevator workaround multi-cloud support
    7131c8472 fix build
    d6678adc9 overlay,mount: convert lowerdir to absolute path for overlay mounts of path
    891dfd3a8 specgen: fix parsing of cgroup devices rule
    5262f7e01 Fix podman machine on Windows
    9c658f490 docs: mention the podman-kube template
    c6fb533ca podman-play-kube template: rename to podman-kube
    bd51410b8 service: do not run under the root cgroup
    5c3979762 utils: move the cgroup if root on cgroupv2
    e8adec5f4 cmd/podman: switch to golang native error wrapping
    7bbfb3eb0 api,images: add support for LookupManifest to Image remove API
    64ec894c5 [CI:DOCS] Update podmanimage comment.
    d9ff0fd15 Only allow Rootless runs of Podman Machine
    6904b1a61 build(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0
    5790caaef bindings: Add support for Delete in pkg/bingings/manifest
    1affceb29 runtime: unpause the container before killing it
    7f994a80d only create crgoup when not rootless if using cgroupfs
    59a7ac210 Make `podman machine stop` wait for qemu to exit
    2ee9fe4cb vendor containers/common
    79a38a2c6 Add test for restore runtime verification using non-default runtime
    8e3a46a87 Fix runtime check during restore
    6c4c050d3 fix volume reporting in system df
    cc4914633 Docker compat returning unknown "initialized" for `status.status`
    6d3520e8b podman image scp remote support & podman image scp tagging
    dc58a7306 Makefile: don't try to build rootlessport on FreeBSD
    c55feb7bf Makefile: don't use '-t' to specify the directory to install manpages
    af16edf49 Makefile: use GNU sed to convert manpages on FreeBSD
    94a634fcf Makefile: use bash to evaluate tool paths
    0e03a64f9 pod: ps does not race with rm
    0cabd8006 pods: move code to a new function
    3b10c1b78 Use Regexp in volume ls --filter name
    aada13f24 volume: new options [no]copy
    a4094530b volume: drop TODO comment
    443a2afdb volumes: switch order of checks
    28e2a604b vendor: update containers/common
    99f68898c reveal machine error, ignore false state
    9cb93c6f9 go.sum: run make vendor
    0c1a3b70f Show Health Status events
    386ea49cf Show starting state when machine is starting
    66c62eb96 Implement CatchAll and StopCatch in signal_common.go
    345778ece Fix "podman run port forward range" flake
    4c5788bac Fix spelling of GetCriuVersion
    590290597 Add missing criu symbols to criu_unsupported.go
    2792e598c podman cgroup enhancement
    09754d21d [CI:DOCS] Minor update to podmanimage upstream docs
    041947b11 Bump github.com/stretchr/testify from 1.7.4 to 1.7.5
    3619f0be9 Fix: Prevent OCI runtime directory remain
    a4ae22df8 Workaround for bug 14653 (checkpoint flake)
    491857a88 Use HaveLen instead of len in podman machine list e2e tests
    f0b9e56e9 Fix machine list: --format implies --noheading
    2fab7d169 add podman volume reload to sync volume plugins
    6e8953abf test/testvol: rework testvol binary
    fcc25afa5 test/testvol: update container image golang to 1.18
    472f79f08 test/testvol: move Containerfile into testvol dir
    0d3aa61be libpod: volume plugin sendRequest remove body bool
    ad78d239d fix system connection and scp testing
    3a810b8d2 Two fixes for DB exit code handling
    30e7cbccc libpod: fix wait and exit-code logic
    15188dce0 conmon: silence json-file error
    2eda547dc podman run/create -v relative filepath support
    ef563c5a1 logformatter: link to logs using Cirrus API
    aa4279ae1 Fix spelling "setup" -> "set up" and similar
    0320ce37d Fix system prune output message
    7ef282d64 Remove lorgus.Infof on bindings start and attach
    132393d15 Update basic_networking.md
    4a981c490 allow filter networks by dangling status
    050693b2e bump github.com/spf13/cobra from 1.4.0 to 1.5.0
    ecf225019 rootless: attempt to join all specified paths
    9afd5e31c rootless: improve error messages
    99258703a rootless: do not ignore reexec_in_user_namespace_wait errors
    cfba09f68 Bump github.com/stretchr/testify from 1.7.2 to 1.7.4
    1f539a264 api: show the memory limit specified for the container
    7f82c4323 Fix typos
    f451b68df podman pod create --shm-size
    46da7bc78 podman machine init --now: respect proxy envs
    bb5bd09ea API: containers/json always set application/json content type
    282714090 [CI:DOCS] "setup" -> "set up" in source code comments
    dda68201a [CI:DOCS] Rewrite --env docs
    948866e8a Update to use gopkg.in/yaml.v3
    075c9ac45 .cirrus.yml: fix matrix expansion by properly merging YAML mappings
    809044576 vendor in latests containers/image
    ce3d0954a Open Windows tutorial after MSI installation
    a3b3f1723 linter fix from #14299
    065302bd5 Cirrus: Fix build. dep. missed in #14521
    3af047b63 Vendor in latest containers/storage
    09c462d73 fix "podman -h" help output
    6c5e1420e Make it clear the REST API could be a security issue
    28a38617e [CI:DOCS] fix typos in prerequisites for Fedora and make binaries sections
    b3f094a61 test/system/410-selinux: fix for newer runc
    e69691c27 Fix interrupting machine start leaves the machine unstartable
    0a202a9f0 system test image: bump to 20220615
    21819254d golangci-lint: update to v1.46.2
    c6b9baa6c system tests: avoid rmi -a ... plus cleanup
    693d439ac Update release notes and README on Main for v4.1.1
    751ba07a7 libpod: improve check to create conmon cgroup
    90a669594 fix CI: golangci-lint is broken on main
    20b3fbe6d systemd socker activation: check listener to prevent panic
    43e12c135 Fix #14416: Use absolute path to WSL binary to create ssh keys for `machine init`
    bfc446eea buildah-bud tests: reenable skipped 'bud' tests
    455f4c782 CI: APIv2 tests: add rootless
    232b3e342 buildah-bud tests: add arg sanity check
    41528739c golangci-lint: enable nolintlint
    1b62e4543 golangci-lint: add systemd build tag
    fcfcd4cdb container: do not create .containerenv with -v SRC:/run
    4811cb110 podman system prune support prune unused networks
    5e9d20448 Update vendor of containers/buildah
    608ad7d11 Non-running containers now report statistics via the `podman stats` command
    958759a71 podman pod clone
    8d3e6577a Fix M1 QEMU flags
    b7c283759 Bump golang.org/x/tools from 0.1.10 to 0.1.11 in /test/tools
    48cf1d258 podman-remote push --remove-signatures support
    d4272bed5 podman cp: do not overwrite non-dirs with dirs and vice versa
    46c8da7d9 vendor buildah@main
    7b3e43c1f podman volume create --opt=o=timeout...
    80d5a00bb Fix Remote filtering embedded directory test
    2b97795c1 APIv2 tests: (try to) fix flaky registry panic
    81153ffa2 Introduce 'Starting' status for machines
    b13fc1bf9 patch for pod host networking & other host namespace handling
    5614c29ce compat api: fix regressions from "Swagger refactor/cleanup"
    eed0e6671 Pass '--file-locks' to OCI runtime at restoring
    c77691f06 Do not error on signalling a just-stopped container
    7e9767502 Bump github.com/opencontainers/runc from 1.1.2 to 1.1.3
    549bffe58 shell completion: fix problems with container path completion
    bce97a3b5 apiv2 tests: clean up
    700248bfe Update remote_client.md
    254048e17 Cirrus: Fix artifact passing when dep. skipped
    f0516a014 --userns=keep-id,nomap are not allowed in rootful mode
    126686f3d Podman images generated with empty /etc/containers/storage.conf
    20aaaa382 Minor: Fix podmanimage README links
    dc4a01ec6 Add docs of changing default netavark networks
    ed1e4f94f Infra Inheritance patch
    5fc3d871a Cirrus: Simplify only_if/skip + optimize multiarch
    a69a48b0d test/e2e: network dis-/connect test remove unhelpful assertions
    90d80cf81 use resolvconf package from c/common/libnetwork
    ddf1d2cb3 update c/common to latest
    811cce5a8 libpod: store network status when userns is used
    0f424e90d Bump github.com/docker/docker
    e41d4a247 Add missing tests for manifests API
    2a0d896b3 runtime: make error clearer
    2c12f7bd1 Add some Readme updates around machine
    8533ea000 Privileged containers can now restart if the host devices change
    335925f47 Minor: Remove useless addition of storage.conf
    aadae49ad overlay-volumes: add support for non-volatile upperdir,workdir for anonymous volumes
    5c508cb4e Bump github.com/stretchr/testify from 1.7.1 to 1.7.2
    67ea5fdad Cleanup the leftovers used with ginkgo focus option
    1fc5a107a [CI:DOCS] PodmanImage Readme touchup
    22e442ee2 tests: buildah-bud fix reason for skip
    9de092ec0 Fix secret-verify-leak flake: set build context to subdir
    259c79963 Improve robustness of `podman system reset`
    87b05b6a6 Prevent simultaneous machine starts
    3c9b75c21 Using logDriver instead of query.LogDriver for podman play kube
    241458666 podman logs k8s-file: do not reassemble partial log lines
    2b0cb3002 test/e2e/save_test.go: fix flake
    b8de285a4 Stop machine before force removing files
    1b6505d74 Update test output expectation
    9a34b88c9 changed megabyte to mebibyte
    831d6534f fix pod network handling with a host network
    5023ce585 Align docker load and podman load output
    f2bbbd20d shell completion for paths inside the image/container
    69e44bbcc bindings: add manifest should follow es_model while marshalling OSVersion and OSFeatures
    5b9729c47 Document protocol usage for --publish
    6dffa453a Bump github.com/containernetworking/cni from 1.1.0 to 1.1.1
    44f11ec2c podman-remote: enable support for additional build-context on macOS, remote
    3fa09e9db Makefile: Handle unexpected empty var. values
    fc95f832a Podman image: Mass cleanup + fix missing storage.conf
    f728b7b5a podman pod create --uidmap patch
    8291b51ce expose podman.sock in machine inspect
    dbdc26a4c Removed `imageStream` hardcoded value
    2805c7353 pkg/specgen: parse default network mode on server
    78d1f5d7d fix "tail 800 lines: journald" flake
    193397290 Add ExecStop and dependencies to fix shutdown
    f91c852fa Makefile: force podman-remote-static to linux
    cef044d85 Bump gopkg.in/yaml.v3 to v3.0.1
    205c8c071 fix podman container restore without CreateNetNS
    16e8b2f32 podman stats: work with network connect/disconnect
    ec576a549 podman volume export/import: give better error
    4a8346551 podman machine ssh: do not print warning everytime
    7e69e2b53 Podman no-new-privileges format
    0e58636c3 podman machine ssh: set correct exit code
    a6f8cad54 fix bad import path for cmd/podman/utils
    c0ad9a43e Mount propagation works with named volumes
    f23ae4d66 healthcheck: wait for systemd operations
    8efdbf5c4 Add API support for NoOverwriteDirNonDir
    e13c5f3a9 Refactor populating uptime
    3a32d60e5 [CI:DOCS] Quick typo for troubleshooting
    ea1a8e243 Move Attach under the OCI Runtime interface
    fb163976f Support setting image_volume_mode in containers.conf
    d730f2b25 Add Authorixation field to Plugins for Info
    ab0728421 docs: note regarding version compatablity between server and client for bug fixes
    87ad46060 Remove TODO comment
    66a56ce05 vendor: bump buildah to v1.26.1-0.20220524184833-5500333c2e06
    6124b5199 build: allow using cache explicitly with --squash-all using --layers
    8c1128db4 Cirrus: Fix several TODOs
    426a07e70 Combine the CheckAllLatest CID and PodID functions
    c9f6639ec Fix TODO in parse/net.go
    32aa12a28 Remove TODO from pods/ps.go
    8c781416b Fix swagger model of `InspectPodResponse`
    de54d33d2 Fix test block bypass instructions
    b730e7328 cmd, build: remove redundant squash processing logic
    66c846616 Support remote deadlock errors in rm
    badf76e17 Remove more FIXMEs
    9fcfea764 First batch of resolutions to FIXMEs
    02c437405 [CI:DOCS] Add play kube support docs
    338f01237 Remove unused archive flag from diff commands
    cb76d1523 fix f35 integration test network flake
    c3677f515 test/system/250-systemd.bats: clean up outdated TODO
    c9279d4d9 pkg/bindings/play/play.go: drop TODO message
    462cb3370 pkg/bindings/containers/archive.go: drop TODO
    60e31d87d pkg/auth: drop the TODO
    09ae060a7 pkg/api/handlers/compat/images.go: drop TODO message
    c04ec104d libpod/pod_top_linux.go: s/TODO/NOTE/
    b19e2d6f8 events: drop TODO comment
    429b1f768 Fix codespell errors
    4a447a213 work queue: simplify and use a wait group
    2ce475576 Allow podman pod create --share +pid
    df394b521 Allow podman pod create to accept name argument
    70f147d01 cmd/podman/common/completion.go: fix FIXMEs
    2be4589b5 Remove TODO re: storage-driver
    8de3e9102 help-message system test: catch more cases
    33628003c Put current product first and historical product second
    2400d1d52 go format previosly touched files
    b3e2324f5 test/e2e/search_test.go: re-enable registry.redhat.io test
    956e2e1b8 pkg/domain/infra/abi/images_test.go: remove commented code
    fbeef1d70 image list: remove unused ConfigDigest
    90a6f39d0 pkg/inspect: remove unused ImageResult type
    5268314e5 podman image mount: print pretty table
    d3d3a207d pkg/bindings/images/rm.go: remove redundant FIXME
    6c6e97018 pkg/bindings/images: remove TODOs re: system context
    d924c46da autocomplete `podman search --filter`
    f98a7d140 build(deps): bump github.com/vbauerster/mpb/v7 from 7.4.1 to 7.4.2
    8af98b342 contain_top_linux.go: s/TODO/NOTE/
    f5450b1e8 system tests: fix flake waiting for container to run
    2133edb2c compat, build: suppress step errors when quiet is set
    8fbb933f5 look for firmware based on the path of qemu binary
    5d37d80ff Use containers/common/pkg/util.StringToSlice
    d29dec967 Cirrus: Fix building multiarch images
    dde428642 Bump Compat API maximum version to v1.41
    b7dbc505b Instead of erroring, clean up after dangling IDs in DB
    e22611baf fix typo
    ac154425d Update _play kube_ doc following PR #14266 merged
    c984956f9 fix compat image resolution
    d66288315 auto update: create an event
    633d5f1f8 fix --init with /dev bind mount
    4960a17a5 fix tests by randomize the device folder name
    94e82121b Support running podman under a root v2 cgroup
    a0d0207a2 fix podman-for-windows.md
    5b79cf15a Swagger refactor/cleanup
    fb219a809 Update c/image
    9c9fc96d2 shell completion: use more constants instead of duplicating strings
    337f8b9d9 shell completion: podman save --format use all valid values
    74f70315b shell completion: update podman inspect --type options
    318e95fd2 shell completion: fix podman event --filter values
    b22143267 linter: enable unconvert linter
    3b0844f99 shell completion --format: add help to function with args
    3d8a1f917 shell completion --format: support maps and functions
    ecd6edb19 shell completion --format: fix embedded struct handling
    11ff5ffd3 shell completion --format: only show usable methods
    eeeb88a66 shell completion --format: only show exported fields
    f5c8c0911 add tests and fix bug when char device pass the test as block device
    653117087 ci: pr-should-include-tests: add more exceptions
    40a1cd4ef Remove GO111MODULES use
    d49efde27 Makefile: rm gofmt target
    9bf81814a Makefile: rm CHANGELOG_* and ISODATE vars
    d2070a39e Makefile: rm -mod=vendor
    2b54bf3e6 Move GOPROXY from Makefile to cirrus.yml
    11d3cf269 Makefile, podman.spec.rpkg: rm GOBIN and GOPATH
    c63bb6b9a Makefile,.gitignore: rm .install.goimports
    e2d2b537a Makefile: rm .gopathok
    d8c42de41 Makefile: rm .install.libseccomp.sudo target
    c632a2efc dependabot: add release-note-none label
    0c9b0e2aa expose block and char devices with play kube
    8684d41e3 k8systemd: run k8s workloads in systemd
    6f9155cbb api: make no-op remote functional in /libpod/build
    21a5ef859 Don't complain about XDG_RUNTIME_DIR, Closes  #1424
    dc435ecb2 Make errors on removing exec sessions nonfatal
    ee782fcb7 Deleting an n use image should return conflict not system error
    977cd9bd1 Update WSL machine OS to enable user lingering
    0961002d9 Update tutorial list to include Podman for Windows
    5b2d5c365 Robust whitespace split of cpu utilization line from /proc/stat
    de4f76e7e Fix strange buildtag edit
    c45d51899 [BZ #2083997] pod: build pause image in custom user NS
    c058b828c Changed permission to 755
    25f80941a build(deps): bump github.com/docker/docker
    2b03a1088 Vendor in latest containers/common
    b8103640a Make sure tests are cleaned up when they complete
    7804f4d29 Add support for machine events on Windows
    a4aa07a07 [CI:DOCS] Treadmill script: add --reset option
    b7ce98619 Fix broken pwd
    1094d7553 build(deps): bump github.com/opencontainers/runc from 1.1.1 to 1.1.2
    9df390655 shell completion --format: work with pointer functions
    03af8213c sdnotify: send MAINPID only once
    840c120c2 play kube: service container
    ecf0177a0 vendor c/common@main
    16e22dbbe vendor: update c/storage and c/image
    37e30bcb2 Fix hang in build-each-commit test
    e76a07087 [CI:DOCS] man pages: fix inconsistencies
    60258925a test: update fedora toolbox image
    1834afd3e [CI:DOCS] Benchmarks: new tool for parsing results
    813f6a68f [CI:DOCS] fix `make localbenchmarks`
    876b05cdb Add initial Windows guide
    c7c00ce55 Add more machine tests
    d0ca90b3e test: simplify cleanup code
    0774a4ce1 kube: add support for --userns=
    2b5778d41 Cirrus: Update images + new automation library
    9ffc2a6ac Cirrus: Fix Makefile including 'hack' in $PATH
    abf4f77bc Cirrus: Simplify use of cache in automation
    237f76126 Cirrus: Simplify rootless ssh setup
    c1656e2ee Cirrus: Guarantee $DEST_BRANCH is passed through
    82f2b3edb bloat check: make more robust
    9e1ee081f kube: honor pod security context IDs
    82a4b8f01 kube: refactor setupSecurityContext to accept directly the security ctx
    be5abf03a fix: Container.cGroupPath() skip empty line to avoid false error logging
    c48657671 test skipper: check for $DEST_BRANCH
    8ecd0b5bc fix broken CI test
    bb8f53a72 test: fix "podman search format json"
    b58e7e7f1 play kube log tag handling
    a1a299797 Update version to v4.2.0-dev
    bce014e19 Update release notes for Podman v4.1.0
    9cd74a13c update podman version in readme
    0dbfd376f Add 4.1 branch to API documentation
    2a401b3ff Bump github.com/docker/docker
    ed8c1dfb4 libpod: add c.ConfigWithNetworks()
    d7f43e677 test: fix failing TestPostDeleteHooks
    cf35168f0 test: use `T.TempDir` to create temporary test directory
    6ddccd94f e2e: pull_test: speed up --all-tags
    c38e7e5f6 build: disable --output for podman-remote clients
    140fb3ae1 e2e: pull_test: squash --quiet test
    669401c31 e2e: pull_test: move tests around
    2fa906cca e2e: pull_test: remove redundant tests
    6eaa9ca26 e2e: manifest_test: use cached registry
    ed159f864 Vendor in containers/buildah@v1.26.1
    ebde52583 update rootless_tutorial.md
    7c59f1d07 Fix usermod call in rootless_tutorial.md
    5fa6f686d Report correct RemoteURI
    386614367 exclude new tools vendor dir from validate
    f6b397bf1 add dependabot config for test/tools go.mod
    3b9177995 vendor test tools in submodule
    80744c644 podman system reset removed machines incorrectly
    9974c90cc libpod: treat ECONNRESET as EOF
    245151e62 Add more unit tests
    a5800c78f machine events: only open sockets when needed
    36c5e6e0c Bump github.com/containers/storage from 1.40.0 to 1.40.2
    ccd576504 play kube default log driver
    8781a3635 benchmarks: push/pull
    1585b175d pass networks to container clone
    88015cf0d Implement --format for machine inspect
    8da5f3f73 Add podman machine events
    9166894c6 vendor test dependencies instead of installing via network
    6e2e3a78e generate systemd: pods: set exit policy
    5fac879ea vendor treadmill script: run 'git add vendor'
    0bb484937 Additional stats for podman info
    e247f02a4 Vendor in containers/(common, storage, image)
    e74717f34 Treadmill script: revamp
    e17b56e0c CI: emergency fix for broken go get
    4e44e5b5d Bump github.com/rootless-containers/rootlesskit from 1.0.0 to 1.0.1
    4eff0c8cf pod: add exit policies
    cfca85356 libpod: unset networks before storing container conf
    77d872ea3 vendor c/common@main
    5b78f9576 Implement machine inspect for WSL
    772ead253 Use simulated dual-stack binds when using WSL
    23de3801d buildah-vendor-treadmill script: yet more checks
    01acc2565 libpod: host netns keep same /etc/resolv.conf
    519820926 fix incorrect permissions for /etc/resolv.conf in userns
    e6557bf0a pkg/api: do not register decoder in endpoint handler
    a48c37df3 fix broken hooks-dir test
    69c479b16 enable errcheck linter
    384c2359b libpod: unlock containers when removing pod
    2902d32c4 Refactor machine inspect
    64a368ba2 remove unused codepath for creating/running ctr in a pod
    6b7fd318b image search --format: add completion for go template
    0d9f19028 shell completion --format: use structs by reference
    cac2b7800 image --format: fix add completion for go template
    7f28fd938 Report properly whether pod shares host network
    cb9a45630 shell completion --format: use anonymous struct field once
    8be978158 network inspect --format: add completion for go template
    f93ba587c shell completion --format: work with nil structs
    589e42c99 Bump github.com/containernetworking/cni from 1.0.1 to 1.1.0
    a5aea8e50 Three manual fixes
    b3f38c31b Ginkgo: use HaveField() for better error checking
    91ead1528 volume: add new option -o o=noquota
    ea1fcd7bc podman search: truncate by default
    c721acf08 podman machine starting test
    3b8fa515f Emergency fix for new CI linter
    83a75d2a3 Produce better test error messages
    461b73f56 Github PR template: add release-note block
    22b421dd7 Add CreatedSince & CreatedAt format fields to podman image history
    e7390f30b Allow changing of CPUs, Memory, and Disk Size
    9c0c29f08 Cirrus: Fix ownership of repos. to keep git happy
    d4e30b33a Temporarily skip netavark/aardvark e2e test
    cf449e81a Cirrus: Temporarily update netavark/aardvark-dns
    cd7cff6bb Cirrus: Test w/ netavark/aardvark-dns in F36+
    3a07fc446 Cirrus: Update to F36 CI VM Images
    a73425a0b Revert "Cirrus: Disable F34 aka prior-fedora testing"

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-25 22:55:48 -04:00
Bruce Ashfield
f6bf30aca6 docker: ensure that sysvinit and systemd are exclusive
The sysvinit functionality conflicts with the docker daemon
settings required for the systemd docker.socket.

Ensure that the sysvinit capabilities are only enabled if
systemd is not present.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-25 22:55:48 -04:00
Bruce Ashfield
5cfc4c3f80 kernel/cfg: add CONFIG_NETFILTER_XT_MATCH_IPVS to docker config
This is an optional feature (but still commonly used), so we add
it to our default fragment.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-25 22:55:48 -04:00
Bruce Ashfield
05f316f70a lxc: update to 5.x and meson
This is a significant update to lxc as autotools has been replaced
with meson.

Not all existing autotools options have meson equivalents, so there
may be differences in functionallity.

As part of this update, and unused features have been dropped, mainly
when the meson equivalent was not available.

Basic / core functionality has been tested with systemd, sysvinit
requires more work, and patches will be accepted to restore that
capability.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-25 22:55:48 -04:00
Andrei Gherzan
538e94e674 skopeo: Mark CVE-2019-10214 as fixed
This CVE was fixed[1] in the container image go library skopeo is using
(vendoring). The current version of the image go module is v5.20.0 while
the fix landed since v3.0.0[2].

See RedHat's resolution[3] for more details.

[1] https://github.com/containers/image/issues/654
[2] a3d69a4a89
[3] https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10214

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-25 22:54:25 -04:00
Andrei Gherzan
d55da717eb podman: Rename podman-rootless.conf sysctl file to aid overrides
Files are sorted in lexicographic order. Moving podman-rootless.conf to
something greater then '00' would help with systems providing default
values in other configuration files that can be overridden by
podman-rootless.conf.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-23 21:44:32 -04:00
He Zhe
46f9004365 irqbalance: Use built-in irqbalance.service instead of local one
The local irqbalanced.service was written long before when there wasn't one in
upstream. Then upstream created temporary runtime directory /run/irqbalance in
its irqbalanced.service, but no one did this for this recipe. Which renders the
following error.

/usr/sbin/irqbalance[314]: Daemon couldn't be bound to the file-based socket.

This patch starts to use upstream irqbalance.service instead and remove the
local one.

root@qemux86-64:~# systemctl status irqbalanced
* irqbalanced.service - irqbalance daemon
     Loaded: loaded (/lib/systemd/system/irqbalanced.service; enabled; preset: enabled)
     Active: active (running) since Mon 2022-08-22 10:10:22 UTC; 3s ago
       Docs: man:irqbalance(1)
             https://github.com/Irqbalance/irqbalance
   Main PID: 208 (irqbalance)
      Tasks: 2 (limit: 263)
     Memory: 1.4M
     CGroup: /system.slice/irqbalanced.service
             `-208 /usr/sbin/irqbalance --foreground

Aug 22 10:10:22 qemux86-64 systemd[1]: Started irqbalance daemon.
root@qemux86-64:~# ls -l /run/irqbalance/irqbalance208.sock
srwxr-xr-x 1 root root 0 Aug 22 10:10 /run/irqbalance/irqbalance208.sock

Signed-off-by: He Zhe <zhe.he@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-23 21:43:33 -04:00
Joe Slater
dccd964570 ceph: Fix CVE-2021-3979
Ceph-volume does not properly control key sizes.

Cherry-pick from github.com/ceph/ceph.git.

Signed-off-by: Joe Slater <joe.slater@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-20 23:23:08 -04:00
Andrei Gherzan
fc1df13027 singularity: Drop explicit runtime dep glibc
There is no need we can see for this dependency to be provided as such -
especially forcing this to using glibc.

Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2022-08-20 23:18:44 -04:00