Commit Graph

23 Commits

Author SHA1 Message Date
Bruce Ashfield
d876cfc5bf global: overrides syntax conversion
OEcore/bitbake are moving to use the clearer ":" as an overrides
separator.

This is pass one of updating the meta-virt recipes to use that
syntax.

This has only been minimally build/runtime tested, more changes
will be required for missed overrides, or incorrect conversions

Note: A recent bitbake is required:

    commit 75fad23fc06c008a03414a1fc288a8614c6af9ca
    Author: Richard Purdie <richard.purdie@linuxfoundation.org>
    Date:   Sun Jul 18 12:59:15 2021 +0100

        bitbake: data_smart/parse: Allow ':' characters in variable/function names

        It is becomming increasingly clear we need to find a way to show what
        is/is not an override in our syntax. We need to do this in a way which
        is clear to users, readable and in a way we can transition to.

        The most effective way I've found to this is to use the ":" charater
        to directly replace "_" where an override is being specified. This
        includes "append", "prepend" and "remove" which are effectively special
        override directives.

        This patch simply adds the character to the parser so bitbake accepts
        the value but maps it back to "_" internally so there is no behaviour
        change.

        This change is simple enough it could potentially be backported to older
        version of bitbake meaning layers using the new syntax/markup could
        work with older releases. Even if other no other changes are accepted
        at this time and we don't backport, it does set us on a path where at
        some point in future we could
        require a more explict syntax.

        I've tested this patch by converting oe-core/meta-yocto to the new
        syntax for overrides (9000+ changes) and then seeing that builds
        continue to work with this patch.

        (Bitbake rev: 0dbbb4547cb2570d2ce607e9a53459df3c0ac284)

        Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org>

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-08-02 17:17:53 -04:00
Bruce Ashfield
b4a4f24b1c podman: update to 3.2.3 latest
There's not much here, but we pickup the 3.2.4-dev parsing bump in
preparation for that development stream.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-07-27 09:02:20 -04:00
Bruce Ashfield
e510c748df podman: update to v3.2.3
Bumping libpod to version v3.2.3-2-g09e8afe3a, which comprises the following commits:

    1e6fd46e9 Bump to v3.2.3
    1d7ddf511 Update release notes for v3.2.3
    e4c45e759 vendor containers/common@v0.38.16
    cb7016224 vendor containers/buildah@v1.21.3
    1a8b2a037 Fix race conditions in rootless cni setup
    e54a513b9 CNI-in-slirp4netns: fix bind-mount for /run/systemd/resolve/stub-resolv.conf
    1469af265 Make rootless-cni setup more robust
    6f9d9636a Support uid,gid,mode options for secrets
    bed195bf8 vendor containers/common@v0.38.15
    75431a455 [CI:DOCS] podman search: clarify that results depend on implementation
    37570b7b7 vendor containers/common@v0.38.14
    6ecedc161 vendor containers/common@v0.38.13
    8a41bf3ee [3.2] vendor containers/common@v0.38.12
    2c003d978 Bump README to v3.2.2
    bb2cbf0d5 Bump to v3.2.3-dev
    d577c44e3 Bump to v3.2.2
    9f4afa1ea fix systemcontext to use correct TMPDIR
    5dabff27d Scrub podman commands to use report package
    647c2024e Fix volumes with uid and gid options
    c2dcb3ee2 Vendor in c/common v0.38.11
    ba70363f6 Initial release notes for v3.2.2
    a9fd54775 Fix restoring of privileged containers
    d5f0729b2 Fix handling of podman-remote build --device
    90805fa39 Add support for podman remote build -f - .
    854c27c0a Fix panic condition in cgroups.getAvailableControllers
    b0dc157af Fix permissions on initially created named volumes
    f5cdb95ee Fix building static podman-remote
    1c04cfe83 add correct slirp ip to /etc/hosts
    6c4ee8535 disable tty-size exec checks in system tests
    6ba9617be Fix resize race with podman exec -it
    eb6d4b0cf Fix documentation of the --format option of podman push
    e5c939183 Fix systemd-resolved detection.
    613f427a0 Health Check is not handled in the compat LibpodToContainerJSON
    949573c5a Do not use inotify for OCICNI
    ab5e770c4 getContainerNetworkInfo: lock netNsCtr before sync
    b957bff8b [NO TESTS NEEDED] Create /etc/mtab with the correct ownership
    6d394f0e4 Create the /etc/mtab file if does not exists
    879d66e7d [v3.2] cp: do not allow dir->file copying
    6f769bc0e create: support images with invalid platform
    19a89db66 vendor containers/common@v0.38.10
    e5c070baf logs: k8s-file: restore poll sleep
    4d9a9149d logs: k8s-file: fix spurious error logs
    dac2d31a2 utils: move message from warning to debug
    60752b320 Bump to v3.2.2-dev

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-07-20 09:46:28 -04:00
Diego Sueiro
dd3bc51e3f podman: Add seccomp as REQUIRED_DISTRO_FEATURES
The libseccomp package is only available if seccomp is in DISTRO_FEATURES.

Signed-off-by: Diego Sueiro <diego.sueiro@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-30 11:19:21 -04:00
Bruce Ashfield
0f59d98670 podman: update to 3.2.1
Bumping libpod to version v3.2.1-2-gab4d0cf90, which comprises the following commits:

    60752b320 Bump to v3.2.2-dev
    152952fe6 Bump to v3.2.1
    c5d9c0a6f Updated release notes for v3.2.1
    4f56f7f13 Fix network connect race with docker-compose
    e42d727a9 Revert "Ensure minimum API version is set correctly in tests"
    f69789155 Fall back to string for dockerfile parameter
    5a158563c remote events: fix --stream=false
    38fbd2cb9 [CI:DOCS] fix incorrect network remove api doc
    26eae3bf8 remote: always send resize before the container starts
    c751544fa remote events: support labels
    c28f442b2 remote pull: cancel pull when connection is closed
    2993bdf1e Fix network prune api docs
    8ba0c92e6 Improve systemd-resolved detection
    c3f6ef63a logs: k8s-file: fix race
    f1e7a0747 Fix image prune --filter cmd behavior
    5ddd76edd Several shell completion fixes
    2afb5eeab podman-remote build should handle -f option properly
    6beae86f0 System tests: deal with crun 0.20.1
    80362b34c Fix build tags for pkg/machine...
    c85b6b3fe Fix pre-checkpointing
    b61701acb container: ignore named hierarchies
    e0dcffa8d [v3.2] vendor containers/common@v0.38.9
    d46deca8c rootless: fix fast join userns path
    f2b3da502 [v3.2] vendor containers/common@v0.38.7
    78430ee1d [v3.2] vendor containers/common@v0.38.6
    b6ef7cf21 Correct qemu options for Intel macs
    9647d8844 Ensure minimum API version is set correctly in tests
    72455ece4 Bump to v3.2.1-dev
    0281ef262 Bump to v3.2.0
    cff73766f Fix network create macvlan with subnet option
    8688f54ea Final release notes updates for v3.2.0
    f62c6bf6e add ipv6 nameservers only when the container has ipv6 enabled
    4b8ca6303 Use request context instead of background
    ce5c3b554 [v.3.2] events: support disjunctive filters
    dd83f5c0c System tests: add :Z to volume mounts
    32927f5d6 generate systemd: make mounts portable
    abb57e5cf vendor containers/storage@v1.31.3
    1e4563182 vendor containers/common@v0.38.5
    fbf8b78a3 Bump to v3.2.0-dev
    684729482 Bump to v3.2.0-RC3
    f49023031 Update release notes for v3.2.0-RC3
    ee5dd0603 Fix race on podman start --all
    6c9de9382 Fix race condition in running ls container in a pod
    69bae4774 docs: --cert-dir: point to containers-certs.d(5)
    934f36df5 Handle hard links in different directories
    5eecc2761 Improve OCI Runtime error
    ba884865c Handle hard links in remote builds
    c53638e9f Podman info add support for status of cgroup controllers
    ac8b7ddd8 Drop container does not exist on removal to debugf
    18e917cdc Downgrade API service routing table logging
    efa15b96c add libimage events
    a9108ab25 docs: generate systemd: XDG_RUNTIME_DIR
    bb589bec2 Fix problem copying files when container is in host pid namespace

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-15 08:15:57 -04:00
Bruce Ashfield
f6bb19c32f podman: bump to 3.2-rcX
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-04 08:42:48 -04:00
Bruce Ashfield
a4f08e110e packages: drop libseccomp checks / package blacklist
libseccomp has moved to oe-core, so we can drop our checks and
blacklisting of packages if meta-security is not in the layer
configuration.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-04-26 11:17:27 -04:00
Nathan Dunne
35fce40e86 podman: Added kernel modules for iptables error
Added kernel modules kernel-module-xt-masquerade and
kernel-module-xt-comment to RRECOMMENDS, to avoid iptables
errors with podman

Signed-off-by: Nathan Dunne <Nathan.Dunne@arm.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-04-18 20:13:41 -04:00
Bruce Ashfield
0134bf3a20 podman: update to v3.1
Bumping to v3.1, which comprises the following commits:

   bce3e6c5f Fix tests
   ec1a512ac Bump to v3.1.1-dev
   9f09fb62c Bump to v3.1.0
   1386f9046 Fix test failure
   38bb77c5b Update release notes for v3.1.0 final release
   670e1ac67 [NO TESTS NEEDED] Turn on podman-remote build --isolation
   ac4bdd265 Fix long option format on docs.podman.io
   96ffce219 Fix containers list/prune http api filter behaviour
   e772719bf [CI:DOCS] Add note to mappings for user/group userns in build
   52cd3ce2d Validate passed in timezone from tz option
   633ae014e Generate Kubernetes PersistentVolumeClaims from named volumes
   c9640bab7 libpod/image: unit tests: use a `registries.conf` for aliases
   43c772aa2 libpod/image: unit tests: defer cleanup
   396a59b02 libpod/image: unit tests: use `require.NoError`
   a01b387e8 Unification of until filter across list/prune endpoints
   183a68a81 Unification of label filter across list/prune endpoints
   d1589f280 fixup
   31351ad94 fix: build endpoint for compat API
   7148544df [NO TESTS NEEDED] Remove /tmp/containers-users-* files on reboot
   88672b58c Check if stdin is a term in --interactive --tty mode
   23f3805df [NO TESTS NEEDED] Fix rootless volume plugins
   5e3445e6e Ensure manually-created volumes have correct ownership
   6b6989206 Support multi doc yaml for generate/play kube
   d560f168f Correct json field name
   573ed9220 Fix filters in image http compat/libpod api endpoints
   1b349d79a podman generate systemd --new do not duplicate params
   1089f83a4 Fix podman build --pull-never
   be02c8581 man pages: correct seccomp-policy label
   62b49e176 [NO TESTS NEEDED] Use same function podman-remote rmi as podman
   3d1aaffdb Add problematic volume name to kube play error messages
   d498022fd Fix list pods filter handling in libpod api
   66b1c2bd9 [NO TESTS NEEDED] Fix for kernel without CONFIG_USER_NS
   b55730180 Remove resize race condition
   e7dc66d83 [NO TESTS NEEDED] Vendor in containers/buildah v1.20.0
   57e0d8f29 Use TMPDIR when commiting images
   505f43c08 Add RequiresMountsFor= to systemd generate
   15da607d1 Fix swapped dimensions from terminal.GetSize
   0127cc184 Revert go-systemd to v2.22.0
   4f11517c0 Cirrus: Update configuration for v3.1 branch
   834f4caaa Bump to v3.1.0-dev
   1b56ea2d9 Bump to v3.1.0-rc2
   1ae87ff46 Update release notes for v3.1.0-RC2
   3b609a706 Bump github.com/coreos/go-systemd/v22 from 22.1.0 to 22.3.0
   1dfbdd5d9 Fix system prune cmd user message with options
   afce37671 System tests: reenable a bunch of skipped tests
   417f36281 Cleanup /libpod/images/load handler
   adf652e2a vendor: drop replace for github.com/syndtr/gocapability
   e85cf8f4a security: use the bounding caps with --privileged
   f46b34ecd Bump github.com/containers/common from 0.35.0 to 0.35.3
   5a18b5eb7 Bump k8s.io/apimachinery from 0.20.4 to 0.20.5
   aa2d6e6e6 Fix volumes and networks list/prune filters in http api
   ec1651fbf Bump github.com/containers/storage from 1.25.0 to 1.28.0
   1ca74b00d add a dependabot config to automate vendoring
   a596d1f5d Bump github.com/onsi/ginkgo from 1.15.1 to 1.15.2
   8ea02d0b6 network prune filters for http compat and libpod api
   8da5fd820 test: check for io.stat existence on cgroup v2
   592aae4f9 test: fix test for last crun/runc
   1c873c7da test: simplify cgroup path
   af3499db5 Latest crun/runc should handle blkio-weight test
   82858a97c fix user message image prune --all
   3d01d42f2 Docs: removing secrets is safe for in-use secrets
   21f229a3d Downgrade github.com/coreos/go-systemd/v22
   e8918ff10 pkg/bindings/images.Build(): fix a race condition in error reporting
   310eae4ba Switch all builds to pull-never
   963d19c75 System test cleanup
   f4b2d597a Fix for volumes prune in http compat api
   8de560703 Fix remote client timezone test
   57e8c6632 Do not leak libpod package into the remote client
   762148deb Split libpod/network package
   955aaccc5 fix use with localhost (testing)
   9251b6c8c add /auth for docker compatibility
   3803d0a4a create endpoint for querying libpod networks
   12fb9e465 Bump github.com/sirupsen/logrus from 1.8.0 to 1.8.1
   660a72993 sdnotify tests: try real hard to kill socat processes
   7b0155cf7 Fix array instead of one elem network http api
   92a8d69a7 Delete all containers and pods between tests
   258749e43 apiv2 tests: finally fix POST as originally intended
   c9ef26071 Document CONTAINERS_CONF/CONTAINERS_STORAGE_CONF Env variables
   f1eb8e816 Removing a non existing container API should return 404
   dc0c72a48 Docs: Add docs to access APIs inside container
   6d4899745 options: append CLI graph driver options
   930bec4d3 podman load: fix error handling
   1f2f7e745 podman cp: evaluate symlink correctly when copying from container
   2033fa4c7 rm pkg/api/handlers/libpod/copy.go
   31b11b5cd podman cp: fix copying to a non-existent dir
   a61d70cf8 podman cp: fix ownership
   2abfef380 podman cp: ignore EPERMs in rootless mode
   d175fbfdb vendor buildah@v1.19.8
   e33f52390 apiv2 tests: add helpers to start/stop a local registry
   e926b5d73 Bump to v3.1.0-dev
   aa9616cd4 Bump to v3.1.0-rc1
   e9db60492 allow the removal of storage images
   9eac4a7f7 podman-remote build does not support volumes
   d1878cc67 Compat API: Avoid trying to create volumes if they already exist
   7e289833e Bump github.com/onsi/gomega from 1.10.5 to 1.11.0
   0e36e65ea Allow users to generate a kubernetes yaml off non running containers
   80390dd18 Bump github.com/onsi/ginkgo from 1.15.0 to 1.15.1
   d0d084dd8 turn hidden --trace into a NOP
   320df8388 pkg/terminal: use c/storage/pkg/homedir
   cc7a7568a Update nix pin with `make nixpkgs`
   9e75cafd5 build-arg
   326f3eda3 Handle podman build --dns-search
   01ffe2c30 podman build --build-arg should fall back to environment
   2c500a814 Add support for podman build --ignorefile
   1a33b7648 replace local mount consts with libpod/define
   e4da5096b separate file with mount consts in libpod/define
   9fc29f63e Correct compat images/{name}/push response
   a910f74ea [NO TESTS NEEDED] Bump pre-commit-hooks version
   3ae580b0e [ci skip] Bad formatting fix in build documentation
   803e58b36 Bump  github.com/containernetworking/plugins to v0.9.1
   d107c3729 podman-remote stop -time 0 does not work
   5bb8fa30b Do not return from c.stop() before re-locking
   2bcc95257 Fix for podman network rm (-f) workflow
   3396343d4 Bump github.com/coreos/go-systemd/v22 from 22.1.0 to 22.2.0
   efc592fba Bump github.com/containers/buildah from 1.19.6 to 1.19.7
   793c52dd5 Add tests for selinux kvm/init labels
   8453424e2 Respect NanoCpus in Compat Create
   a090301bb podman cp: support copying on tmpfs mounts
   e43385eca image removal: ignore unknown-layer errors
   aa0a57f09 Fix cni teardown errors
   f86d64130 Use version package to track all versions
   252aec1c9 Check for supportsKVM based on basename of the runtime
   53d22c779 Compat API: create volume source dirs on the host
   61e626c85 Makefile: add install.docker-docs-nobuild for packaging use
   81a3f8a43 Add /sys/fs/cgroup as readonly path in docs
   8f2192922 Add network summary to compat ps
   4eed89aca Fix possible panic with podman build --iidfile
   9391bfc52 Add version field to secret compat list/inspect api
   b19791c0b Tidy duplicate log tests
   5df625140 Fix support for podman build --timestamp
   43e899c2e Rewrite Rename backend in a more atomic fashion
   91b2f07d5 Use functions and defines from checkpointctl
   bf92e2111 Move checkpoint/restore code to pkg/checkpoint/crutils
   bd819ef7d Vendor in checkpointctl
   2c8c5393a Support label type dict on compat build
   ac992e4b0 Makefile: install systemd services conditionally
   63a3b8a09 podman-system-service.1.md: fix timeout example
   774aea45e swagger: update the libpodPutArchive operation verb
   3908c0079 Makefile: split install.docker-docs from install.docker
   2f0fc2911 Bump RootlessKit v0.14.0-beta.0
   8b7caa6d0 Compat api containers/json Ports field is null
   14d5bd164 Bump github.com/cri-o/ocicni to latest master
   7927fe01f Refactor python tests to run against python3.9
   9435e5b79 APIv2 tests: make more maintainable
   e9d94dc90 [CI:DOCS] Improve release process docs
   375201633 podman rmi: handle corrupted storage better
   d9cb135b6 Enable cgroupsv2 rw mount via security-opt unmask
   cc679d952 podman-image-sign.1.md: typo fix
   f54ed7269 compat api network ls accept both format options
   680dacaea Enable no_hosts from containers.conf
   fcce1da1b Correct compat images/create?fromImage response
   ba319e3ba [Compat API] Also print successfully tagging images in /build endpoint
   43d010bd0 Fix parsing of Tmpfs field in compat create
   24d9bda7f prune remotecommand dependency
   bee21f1e4 system test image: build it multiarch
   ef549235e Updated based on Jhonce comments
   ccbe4ff73 updated common to 0.35.0
   836bfebb4 Refactored file
   1aa96ed2e swagger: removes the schema type for PodSpecGenerator $ref
   431f75519 podman-system-connection.1.md: fix copy/paste error
   90050671b Add dns search domains from cni response to resolv.conf
   f152f9cf0 Network connect error if net mode is not bridge
   fc32ec768 Sort CapDrop in inspect to guarantee order
   79eaadd3f podman upgrade tests
   3947feb4b test: ignore named hierarchies for cgroups=split
   e5ac28f3b container removal: handle already removed containers
   a775c5920 Bump github.com/rootless-containers/rootlesskit from 0.13.1 to 0.13.2
   0ab32d11d Bump k8s.io/apimachinery from 0.20.3 to 0.20.4
   874f2327e Add U volume flag to chown source volumes
   fcf669fd9 Replace Labels and Options nulls with {} in NetworkResource
   4875a8fb4 Cirrus: Temp. disable prior-fedora (F32) testing
   f3a8e3324 podman cp: test /dev/stdin correctly
   8577be72e podman cp: treat /dev/stdout correctly
   e87c5b6c1 cgroup: change cgroup deletion logic on v1
   9d818be73 Fix podman network IDs handling
   d9655b0f0 pr-should-include-tests: recognized "renamed" tests
   d2f3098c6 --no-header flag implementation for generate systemd
   af7a68fa8 [NO TESTS NEEDED] Make binding util internal
   c236aebb9 Two variations of --new flag added to e2e
   a2e1b3eab swagger: add missing schema properties
   5dded6fae bump go module to v3
   d333ef82b Fix 'storage.options' indent
   d886cd930 Bump github.com/sirupsen/logrus from 1.7.1 to 1.8.0
   b40d778f4 Bump github.com/containers/buildah from 1.19.4 to 1.19.6
   05eb06f56 Turn on journald and k8s file logging tests
   f06dd45e0 Allow podman play kube to read yaml file from stdin
   43a581904 Log working dir when chdir fails
   d6b0b5412 Fix segfault in run with memory-swap
   e1ad50654 leak fix in rootless_linux.c fcn can_use_shortcut
   612ba6aa8 Fix journald logs with more than 1 container
   9016387bb Fix journald logs --follow
   f2d057c94 Fix journald logs --since
   fbc50e528 fix journald logs --tail 0
   cf2a55189 [CI:DOCS]basic networking guide
   71689052a cp: treat "." and "/." correctly
   caa0bc157 [CI:DOCS] [NO TESTS NEEDED] Update swagger doc for libpod container wait
   31eca5c20 Bump k8s.io/apimachinery from 0.20.2 to 0.20.3
   e022c1975 Don't switch on a single case
   3e168b19f Quote URL
   b3f9559c8 bindings: support simple types that implement fmt.Stringer interface
   9699e81a0 API: fix libpod's container wait endpoint condition conversion
   a9d548bf7 Change source path resolution for volume copy-up
   e2d5a1d05 podman ps --format '{{ .Size }}' requires --size option
   12b6342c3 infra: downgrade warning to debug
   12a577aea Ignore entrypoint=[\"\"]
   684290725 Bump github.com/sirupsen/logrus from 1.7.0 to 1.7.1
   68a8d397c Add missing early returns in compat API
   5d1ec2960 Do not reset storage when running inside of a container
   958f90143 podman kill should report rawInput not container id
   759fc9334 Fix an issue where copyup could fail with ENOENT
   2ec0e3b65 do not set empty $HOME
   2a21ecafa images/create: always pull image
   f2f18768a Fix panic in pod creation
   0fd480708 Bump github.com/rootless-containers/rootlesskit from 0.13.0 to 0.13.1
   2845f7b83 podman build: pass runtime to buildah
   39c1fdb15 correct startup error message
   690c02f60 Add missing params for podman-remote build
   a532994f8 Fix typo podman run doc in flag -pid=mode "efault"
   4a9bd7a18 When stopping a container, print rawInput
   714acf326 fix create container: handle empty host port
   3d50393f0 Don't chown workdir if it already exists
   bf083c185 Fix broken podman generate systemd --new with pods
   227c54813 fix dns resolution on ubuntu
   0ab5bfd31 e2e: fix network alias test
   704fa8b55 fix failing image e2e test
   9a24d5098 Update troubleshooting.md
   6ffd05d0b [NO TESTS NEEDED] Refactor generated code
   2c31f3839 Fix superfluous response.WriteHeader call in WaitContainerLibpod()
   4067f3a4d change ps Created to unix
   78b419909 Enable more golangci-lint linters
   adfcb7460 make layer-tree lookup errors non-fatal
   78c8a8736 Enable whitespace linter
   69ab67bf9 Enable golint linter
   ef2fc90f2 Enable stylecheck linter
   40c3c972d Update Master to reflect the 3.0 release
   660a06f2f utils: takes the longest path on cgroup v1
   5f999b6bc container ps json format miscue
   8e2fae186 Bump github.com/spf13/cobra from 1.1.2 to 1.1.3
   1b5f3ed24 utils: create parent cgroups
   9196a5ce3 utils: ignore unified on cgroupv1 if not present
   f4fd25a00 utils: skip empty lines
   f28b08fe9 Correct compat network prune response
   5ccb1596b Display correct value for unlimited ulimit
   fdf39e169 apiv2: handle docker-java clients pulling
   ea910fc53 Rewrite copy-up to use buildah Copier
   31b2b2cc2 bump to v3.1.0-dev
   68133414f [NO TESTS NEEDED] Update linter
   46b014bad Bump github.com/spf13/cobra from 1.1.1 to 1.1.2
   1cc387bf7 Add shell completion tests for secrets
   f4ece018b Docker APIv2 push sends digest in response body
   f2a856203 Fix compat networks endpoint for a empty result
   21deafba8 hardening flags for fedora rpmbuilds
   e15e170ac [CI:DOCS]First pass at release process
   46385dd60 Restart service when CONTAINERS_CONF changes
   cc846a8cd Support annotations from containers.conf
   68414537c vendor github.com/containers/image v5.10.2
   ea704da72 APIv2 tests: lots of cleanup
   721a1e104 Fix Docker APIv2 push endpoint
   48c612cf6 generate kube: support --privileged
   08d8290f1 Bump github.com/containers/ocicrypt from 1.0.3 to 1.1.0
   832a69b0b Implement Secrets
   45981ba29 Bump containers/buildah to v1.19.4
   1caace8f4 Allow path completion for podman create/run --rootfs
   6c75419a8 Cirrus: Send cirrus-cron report e-mail to list.
   feecdf919 make `podman rmi` more robust
   407e86dcd Implement missing arguments for podman build
   3c3e644c1 vendor latest containers/common
   91ea3fabd add network prune
   821ef6486 fix logic when not creating a workdir
   002f2aca7 Bump remote API version to 3.0.0
   6c713984e play kube selinux test case
   5c6ab3075 Fix podman network disconnect wrong NetworkStatus number
   05444cb2c Fix per review request
   c995b5460 generate kube: handle entrypoint
   96adf0e2a play kube selinux test case
   2b8d6ca09 Increase timeouts in some tests
   3c57bc845 Add test for Docker APIv2 wait
   4a219aa23 Implement Docker wait conditions
   fc385806d Improve ContainerEngine.ContainerWait()
   570e1587d Improve container libpod.Wait*() functions
   6a6e86829 Cirrus: Collect ginkgo node logs artifacts
   ebc42f508 Bump github.com/containers/storage from 1.24.5 to 1.25.0
   9dc795191 Bump github.com/containernetworking/cni from 0.8.0 to 0.8.1
   bc149a4dd bindings: attach: warn correct error
   d87f54fbb Fix invalid wait condition on kill
   dfa9a340a Makefile: make bin/* real targets!
   3d105015f typo
   c40cd1be9 Bump github.com/onsi/gomega from 1.10.4 to 1.10.5
   bda95bdb6 Update nix pin with `make nixpkgs`
   1c50e09b0 System test for #9096 (truncated stdout)
   432ee04c5 play kube selinux label test case
   e0bc8ffb5 Gating tests: diff test: workaround for RHEL8 failure
   bde23a021 [NO TESTS NEEDED] style: indendation
   89df89b5f [NO TESTS NEEDED] fixup: remove debug code
   7e4d696d9 Report StatusConflict on Pod opt partial failures
   bd0e22ed1 Honor network options for macvlan networks
   095919680 Make slirp MTU configurable (network_cmd_options)
   ac3bd4c33 [NO TESTS NEEDED] Generated files
   5a746c08f [NO TESTS NEEDED] Improve generator
   c68b59f97 play kube selinux label issue
   e9f936a29 Makefile: refactor ginkgo * ginkgo-remote
   931ea939a Allow pods to use --net=none
   323ab314e Bump github.com/onsi/ginkgo from 1.14.2 to 1.15.0
   077fd670b Update release notes for v3.0.0
   ee8ee651d New 'make completions' target
   e11d8f15e add macvlan as a supported network driver
   5352df226 Fix podman generate systemd --new special char handling
   eaafd975a Bump github.com/rootless-containers/rootlesskit from 0.12.0 to 0.13.0
   51c11fea8 Endpoint that lists containers does not return correct Status value
   3cfd4ce45 Fix --network parsing for podman pod create
   9b5b03d1e list volumes before pruning
   4a6d042c2 Docker ignores mount flags that begin with constency
   cdbbc6120 podman generate kube ignores --network=host
   073f76c13 Switch podman stop/kill/wait handlers to use abi
   b842d97f5 [CI:DOCS]build instructions for macOS
   280f332bd Vendor in containers/buildah v1.19.3
   ca0dd76bf Honor custom DNS in play|generate kube
   d7c356552 Podman-remote push can support --format
   b74f939fb Bump github.com/containers/image/v5 from 5.10.0 to 5.10.1
   8d979e093 Cirrus: Build static podman-remote
   c0bf0ba9e podman build --pull: refine help message and docs
   c450092fd Revert "podman build --pull: use correct policy"
   75c3b3389 Bump github.com/containers/image/v5 from 5.9.0 to 5.10.0
   59076888d Cleanup bindings for image pull
   89bb8a9b3 Don't fail if one of the cgroups is not setup
   1fac43654 Add support for rootless network-aliases
   c717b3cac Allow static ip and mac with rootless cni network
   15caebfe5 podman build --pull: use correct policy
   bfc1b66be Cirrus: Fix running Validate task on branches
   f8bf509d1 Fix static build cache by using cachix
   84f7bdc4d Switch podman image push handlers to use abi
   fee2fadc3 e2e tests: synchronize test results
   21cb3043f podman-remote ps --external --pod --sort do not work.
   f79d68eea Fix podman history --no-trunc for the CREATED BY field
   c63599d36 remote exec: write conmon error on hijacked connection
   e9f4fb975 Fix #9100 Change console mode message to debug
   02ec5299f Add default net info in container inspect
   1ae410d19 Ensure the Volumes field in Compat Create is honored
   35c89ccc5 [CI:DOCS]update state of restful service
   0f668aa08 workdir presence checks
   7b186dcb9 libpod: add (*Container).ResolvePath()
   74a63df05 Fixup search
   97f5e9458 Pass DefaultMountsFile to podman build
   5350254f0 Ensure shutdown handler access is syncronized
   33179c281 System tests: cover gaps from the last month
   5623cb9d3 Fix --arch and --os flags to work correctly
   a86d23c75 Bump github.com/google/uuid from 1.1.5 to 1.2.0
   75698b4b7 Fix typo
   393a8f026 disable dnsname when --internal
   ef76b92b8 swagger.go: Fix compilation error
   8c1768e38 Fix fish completion issue if the command is prefixed with a space
   a457c5c92 Bump golang.org/x/crypto
   0ba1942f2 networking: lookup child IP in networks
   c182091b0 Small API test improvement for compatibility search endpoint
   6e6a38b41 podman manifest exists
   c9baa6b93 Accept and ignore 'null' as value for X-Registry-Auth
   4b8df5903 Turn on some remote test
   94f96c78a Add a notice to remove pod before starting service
   ef654941d libpod: move slirp magic IPs to consts
   5e65f0ba3 rootlessport: set source IP to slirp4netns device
   37319dec1 vendor: update rootlesskit to v0.12.0
   2fa67fe4b api: fix import image swagger definition
   9d31fed5f podman volume exists
   4e4d318b7 Cirrus: Upload swagger YAML in every context
   dbb99433d [CI:DOCS] Cirrus: Skip smoke task on branch-push
   836fa4c49 Move the cni lock file into the cni config dir
   c1cd512cb Use random network names in the e2e tests
   3fedb2b6d [CI:DOCS] Update project name in Code of Conduct
   f43046745 Set log driver for compatability containers
   c3cbaa355 Make generate systemd --new robust against double curly braces
   6518391e8 Fix man page for fuse-overlayfs config in rootless mode
   a3621a7cf Cirrus: add bindings checks
   e7df73efa Fix handling of container remove
   41a7e11c7 make bindings generation explicit
   f302ce578 make bindings generation more robuts
   175fc3867 Revert "ginkgo: install on demand via `go get -u`"
   37abec240 [CI:DOCS] fix go-md2man HTMLSpan warnings
   9f6bb3563 CI: smoke test: insist on adding tests on PRs
   a45d22a1d podman network exists
   de05e5816 ginkgo: install on demand via `go get -u`
   d2ee3d815 runner.sh : deal with bash 'set -e'
   4ccb0729b Add binding options for container|pod exists
   683bab03f [CI:DOCS]Do not run compose tests with CI:DOCS
   2df59829e simplify bindings generation
   462994268 make: generate bindings: use vendor
   caaaa2c5e hack/install_golangci.sh: smarter install
   f38b7f48c golangci-lint: install to ./bin

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-04-15 10:56:27 -04:00
Martin Jansa
04f8621d82 cri-o, podman, packagegroup-container: replace anonymous python function calling bb.parse.SkipRecipe with conditional PNBLACKLISTs
* PNBLACKLISTs are IMHO a bit easier to read and easier to override from distro
  which e.g. provides own recipe for libseccomp

Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-04-06 20:34:26 -04:00
Bruce Ashfield
773fd5a023 podman: update to 3.x release series
Bumping to the 3.x release series, to pickup new functionality
for the release.

As part of this update we drop the build of iopodman.go, since
varlink support has been dropped in favour of a ReST API.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-02-06 12:02:31 -05:00
Bruce Ashfield
1dcd6c6406 podman: update to 2.0.7
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-09-01 15:41:30 -04:00
Ming Liu
4344c3db40 podman: uprev 1.8.1 > 2.0.1
Updating to 2.0.1 to pickup bugfixes and security changes. The
following commits comprise this update:

a11c4ead1 Bump to v2.0.1
6a541f680 Merge pull request #6780 from mheon/even_more_201_backports
f7b16d017 Update release notes with further v2.0.1 changes
8bb986137 Fix inspect to display multiple label: changes
2ad9dcc07 Set syslog for exit commands on log-level=debug
723a9e308 Friendly amendment for pr 6751
68543bbec podman run/create: support all transports
c69ce171a systemd generate: allow manual restart of container units in pods
9de1581e9 Revert sending --remote flag to containers
dc22350be Print port mappings in `ps` for ctrs sharing network
48ce67fb5 Merge pull request #6776 from vrothberg/2.0-vendor-common
6eefff647 vendor github.com/containers/common@v0.14.3
0b9143df8 Merge pull request #6758 from mheon/v2.0.1_backports
915f8698f Update release notes for v2.0.1
8e428fa4e utils: drop default mapping when running uid!=0
eb9fd40d2 Set stop signal to 15 when not explicitly set
6594d5d65 podman untag: error if tag doesn't exist
639b809c8 Reformat inspect network settings
01bc6bdda APIv2: Return `StatusCreated` from volume creation
1cc603c1f APIv2:fix: Remove `/json` from compat network EPs
d26662484 Fix ssh-agent support
d94644d35 libpod: specify mappings to the storage
f425aede4 APIv2:doc: Fix swagger doc to refer to volumes
ddf78b2ba Add podman network to bash command completions
bfd303e16 Fix typo in manpage for `podman auto update`.
9a4517b37 Add JSON output field for ps
61bd64573 V2 podman system connection
f81ad0058 wip
cd0b18c24 image load: no args required
8fbfffc08 Re-add PODMAN_USERNS environment variable
0b4dcc7a3 Fix conflicts between privileged and other flags
7ea37dfe1 Bump required go version to 1.13
36d8b6979 Add explicit command to alpine container in test case.
03f952cfa Use POLL_DURATION for timer
07f535d8b Stop following logs using timers
dbce3468e "pod" was being truncated to "po" in the names of the generated systemd unit files.
5d9ec1ce7 rootless_linux: improve error message
37abb88aa Fix podman build handling of --http-proxy flag
27120bfba correct the absolute path of `rm` executable
4af208142 Merge pull request #6711 from lsm5/v2.0-custom-GO_BUILD-backport
0ac4061bd Makefile: allow customizable GO_BUILD
13924bac1 Merge pull request #6695 from cevich/update_v2.0
bade38c32 Merge pull request #6697 from mheon/bump_v2.0.0
c866e584d Update release notes to reflect we are now v2.0
f458c5968 Bump to v2.0.1-dev
eec482cae Bump to v2.0.0
64ba72363 Merge pull request #6694 from mheon/release_notes_2.0
5bda75cfd Update release notes for v2.0.0
89dbd1a91 Merge pull request #6674 from jwhonce/issues/6670
ed91524ae Merge pull request #6637 from jwhonce/issues/6574
ea8e61e4e Fixes #6670
bda4a6982 Correct logic for demux'ing channels
1a2eb3e61 Merge pull request #6677 from baude/pollOnEvents
33a602761 Merge pull request #6690 from vrothberg/fix-6687
f46664546 Poll on events for file reading
bba433ed9 podman images --format json: pretty print
5ec29f8d4 Merge pull request #6684 from vrothberg/fix-ci
334d3b1ef CI: force registry:2.6
a2661b1c2 Merge pull request #6673 from ashley-cui/master
4dc934080 Fix remote docs
e6b9b3ab2 Merge pull request #6656 from mheon/recursive_init
2e621aece Merge pull request #6662 from containers/dependabot/go_modules/k8s.io/apimachinery-0.18.4
1099ad6ac Merge pull request #6669 from vrothberg/unflake-rmi
b20619e5b Allow recursive dependency start with Init()
ec7822795 Bump k8s.io/apimachinery from 0.18.3 to 0.18.4
59cd8a0cf unflake rmi tests
3eb0ad04a Merge pull request #6663 from containers/dependabot/go_modules/k8s.io/api-0.18.4
ad33b2363 Merge pull request #6661 from containers/dependabot/go_modules/go.etcd.io/bbolt-1.3.5
b5f7afd04 Merge pull request #6658 from mheon/experimental_no_more
d0b3035c3 Merge pull request #6611 from lsm5/fix-Makefile-for-varlink
5d161c8ca Bump k8s.io/api from 0.18.3 to 0.18.4
16dbc160c Bump go.etcd.io/bbolt from 1.3.4 to 1.3.5
6472b44c3 Merge pull request #6654 from rhatdan/keepid
6e410ede7 Merge pull request #6647 from rhatdan/caps
43ead88e8 Podman system service is no longer experimental
fe69aa9ba Handle dropping capabilties correctly when running as non root user
7b00e49f6 Merge pull request #6560 from mheon/fix_exec_logdriver
daabbc1a1 Merge pull request #6657 from mheon/bump-2.0.0-rc7
c385e6d36 Don't ignore --user flag in rootless --userns keepid
4b08d9ea5 Bump to v2.0.0-dev
5460ea87d Bump to v2.0.0-rc7
7b5073b46 Merge pull request #6655 from TomSweeneyRedHat/dev/tsweeney/b1_15_0
30c0fc9f1 Makefile: install.varlink needs to create dirs
a76bf114d Merge pull request #6620 from jgallucci32/api-logs-separate
70f6cf7ff Merge pull request #6634 from baude/v2buildfixes
fde8040fa Bump Buildah to v1.15.0
fd184fa4a Merge pull request #6522 from mheon/unless-stopped
585b14a9f Move logs functionality to separate file for APIv2
5694104c2 Merge pull request #6644 from jgallucci32/revert-log-follow
d97b5b04a Merge pull request #6630 from ashley-cui/master
96b442172 Merge pull request #6641 from vrothberg/harden-units
6645e0d6f Merge pull request #6648 from vrothberg/vendor-image
e5c343294 generate systemd: `ExecStopPost` for all units
f29360648 Merge pull request #6631 from rhatdan/hooks
03e99c9b4 Revert #6591 to fix issue with failed tests
ac4f4b148 vendor github.com/containers/image/v5@v5.5.1
6f1440a3e Add support for the unless-stopped restart policy
0e171b7b3 Do not share container log driver for exec
1acd2adcc Merge pull request #6640 from edsantiago/fix_flaky_logs_test
78ad57ebd Merge pull request #6636 from mheon/add_warnings
200afe7a9 Merge pull request #6583 from mheon/inspect_ctr_before_img
65c3a5660 fix misc remote build issues
38391ed25 Merge pull request #6622 from goochjj/podman_fix_init
6d5a432c2 "streaming output" logs test: fix flake
0d2b5532c Merge pull request #5852 from baude/v1prune
241326a9a Podman V2 birth
88c6fd06c Merge pull request #5837 from vrothberg/ignore
57f389728 Merge pull request #5848 from jwhonce/wip/options
8b178f12c Merge pull request #5839 from rhatdan/troubleshoot
1d93d2125 V2 Enable rootless
5def21140 Merge pull request #5842 from baude/v2bloat2
a8a61d976 Add SELinux volume information to troubleshoot.md
8c4d4b58e Merge pull request #5597 from sujil02/systemd-updates
ba430bfe5 podman v2 remove bloat v2
c1bafb8b5 Merge pull request #5844 from baude/apiv2filteridfix
e154249b4 allow filters to work when listing containers
8857ba20a Merge pull request #5835 from containers/dependabot/go_modules/github.com/containers/common-0.9.1
a037d9cd4 Update podman-generate-systemd man page
155a7d661 Merge pull request #5826 from cevich/gate_pip
09e821a8e Merge pull request #5690 from rhatdan/selinux
04e83f63a .gitignore: ignore v2 remote
084cfb81d Merge pull request #5834 from rhatdan/version
897847ccc Bump github.com/containers/common from 0.9.0 to 0.9.1
62803f8d3 Add version to podman info command
d6b3bc18f Merge pull request #5752 from mheon/pod_inspect_structs
c7d17613e Merge pull request #5827 from baude/v2bloat
0f7162d79 Merge pull request #5817 from rhatdan/selinux1
82ce9703e Add basic structure of output for APIv2 pod inspect
30d2964ff v2 bloat pruning phase 2
3500a8bc3 Merge pull request #5830 from baude/v2runtime
c4ca3c71f Add support for selecting kvm and systemd labels
6e9622aa9 Merge pull request #5775 from sujil02/v2-container-prune
ac94a96a7 Fix up SELinux labeling
195cb1127 Merge pull request #5671 from edsantiago/swagger-check
693a8039c Merge pull request #5776 from vrothberg/au
bbc0c4a97 podmanv2 fix runtime assignment
97bded830 Merge pull request #5823 from mheon/update_readme_19
337e8d6d2 Merge pull request #5786 from containers/dependabot/go_modules/github.com/containers/common-0.9.0
e394ff407 Cirrus: Fix gate container build failure
2aca1b7f9 logformat: handle apiv2 results, add anchor links
ef297d466 Merge pull request #5767 from edsantiago/logformat_add_anchors_and_apiv2
9b78bf929 Merge pull request #5770 from baude/v2events
d522755b5 Update README to reflect that latest version is v1.9.0
cc9b78f07 Merge pull request #5820 from mheon/bump-1.9.0
ec4060aef Ability to prune container in api V2
4489440aa Bump to v2.0.0-dev
d98572350 Bump to v1.9.0
37ed662f3 Merge pull request #5814 from baude/v2specgenprunelibpod
165aef776 podmanv2 events
a756161e8 Merge pull request #5813 from baude/v2edtests2
ffcb99d83 Merge pull request #5818 from vrothberg/fix-nil-deref
123158e83 podmanV2: fix nil deref
d83213634 test case added for image prune cache image
1e8e4bb33 note for skipping cache image added.
9dc9f5cf4 image prune skips images with child images.
714718794 v2specgen prune libpod
60dde457f More system test fixes on regressions
f0b6cdede Merge pull request #5812 from jwhonce/wip/options
d51727642 Add support for the global flags and config files
ba26c763c swagger-check: new CI tool to cross-check swagger
0d01f09bf Merge pull request #5811 from mheon/bump-1.9.0-rc2
bf97e803d Bump to v1.9.0-dev
443aab15e Bump to v1.9.0-rc2
a6caae0b5 Merge pull request #5808 from baude/v2psformat2
01c5915a5 Merge pull request #5809 from mheon/release_notes_1.9.0_rc2
246ee9320 Merge pull request #5801 from baude/v2mount
548645e75 Update release notes for v1.9.0-RC2
1be617891 Merge pull request #5445 from sujil02/podFilter-new
d1c26af14 apiv2 add bindings for logs|events
e87fe4dbb Merge pull request #5550 from giuseppe/rootless-hidepid
fea5f913e Don't include SUBDIR in windows.zip
1091440e5 rootless: fix usage with hidepid=1
68a5a85cc Bump github.com/containers/common from 0.5.0 to 0.6.1
fbe743501 V2 podman command
bd9386dda Merge pull request #5542 from rhatdan/vendor
464a1cd48 Merge pull request #5540 from jwhonce/issues/5531
d66d54282 Merge pull request #5544 from baude/apiv2serveswagger
c9c95a7e0 Merge pull request #5543 from edsantiago/swagger_fixes
52c835053 serve swagger when present
f557cf91d swagger: more consistency fixes
67d0d1e50 Vendor in containers/buildah v1.14.3
45e7cbfef Merge pull request #5480 from vrothberg/auto-updates
651ddd356 Reduce CPU usage when --timeout=0
81005f463 New test: man page cross-ref against --help
e89c6382a Add inspect for exec sessions
118e78c5d Add structure for new exec session tracking to DB
f138405b4 Populate ExecSession with all required fields
d9eb078e2 Merge pull request #5532 from baude/filetimeoutflake
de43a00b5 Merge pull request #5533 from mheon/bump-1.8.2-rc1
f08b992f3 Merge pull request #5536 from giuseppe/avoid-conmon-zombie
a6f5b6a48 podman: avoid conmon zombie on exec
15326f051 Filter pods through pod list api
e9846b962 Bump to v1.8.2-dev
c617484c1 Bump to v1.8.2-rc1
f3a28de32 Merge pull request #5528 from mheon/fix_master_vendor
d47dc63cf Fix vendoring on master
14186ca28 fix timeout file flake
bcdcfeb3e Merge pull request #5529 from mheon/release_notes_182_rc1
7c5ffe377 Update release notes for v1.8.2-rc1
83d2686f4 Fix vendoring on master
8f1ce4bdd Merge pull request #5524 from rhatdan/vendor
f4e873c4e auto updates
68ef7aa4f Fix path of tmp_dir
9ef5d2875 Merge pull request #5449 from baude/manifests
c4a62733a Merge pull request #5520 from giuseppe/make-warning-clearer
8081d9c74 Update containers/storage to v1.16.5
a255d7986 pkg/systemd: add dbus support
cc57b88f7 config: make warning clearer
2b2996d09 Merge pull request #5515 from edsantiago/ci_sundry_small_fixes
da17fbaad Merge pull request #5490 from containers/dependabot/go_modules/k8s.io/api-0.17.4
83c037c58 Merge pull request #5489 from containers/dependabot/go_modules/github.com/containers/common-0.5.0
300338478 Four small CI fixes:
67a985ddb Merge pull request #5514 from vrothberg/fix-ci
bfa1ba588 fix systemd generate tests
abbbeacd6 apiv2 addition of manifests
412a114d3 Merge pull request #5439 from ttys3/fixup-systemdgen-with-new-param
5288d112b Merge pull request #5252 from QiWang19/not-reset-tempdir
759ffb0a2 Merge pull request #5505 from tonybenoy/tony_typo
4e13ef58c Merge pull request #5476 from edsantiago/run_rmi_test_fix
af1ac85da Merge pull request #5508 from baude/buildaddarchos
9ca4b6c6f add os|arch attributes when building
9128ef85c Missing double quotes in troubleshooting guide.
194723f31 force run container detached if container CreateCommand missing the detach param
8b07ad113 Merge pull request #5496 from baude/preemptive
16536af11 Merge pull request #5491 from containers/dependabot/go_modules/github.com/fsnotify/fsnotify-1.4.9
4f497991b Merge pull request #5327 from baude/apiv2hc
c4a62733a Merge pull request #5520 from giuseppe/make-warning-clearer
8081d9c74 Update containers/storage to v1.16.5
a255d7986 pkg/systemd: add dbus support
cc57b88f7 config: make warning clearer
2b2996d09 Merge pull request #5515 from edsantiago/ci_sundry_small_fixes
da17fbaad Merge pull request #5490 from containers/dependabot/go_modules/k8s.io/api-0.17.4
83c037c58 Merge pull request #5489 from containers/dependabot/go_modules/github.com/containers/common-0.5.0
300338478 Four small CI fixes:
67a985ddb Merge pull request #5514 from vrothberg/fix-ci
bfa1ba588 fix systemd generate tests
abbbeacd6 apiv2 addition of manifests
412a114d3 Merge pull request #5439 from ttys3/fixup-systemdgen-with-new-param
5288d112b Merge pull request #5252 from QiWang19/not-reset-tempdir
759ffb0a2 Merge pull request #5505 from tonybenoy/tony_typo
4e13ef58c Merge pull request #5476 from edsantiago/run_rmi_test_fix
af1ac85da Merge pull request #5508 from baude/buildaddarchos
9ca4b6c6f add os|arch attributes when building
9128ef85c Missing double quotes in troubleshooting guide.
194723f31 force run container detached if container CreateCommand missing the detach param
8b07ad113 Merge pull request #5496 from baude/preemptive
16536af11 Merge pull request #5491 from containers/dependabot/go_modules/github.com/fsnotify/fsnotify-1.4.9
4f497991b Merge pull request #5327 from baude/apiv2hc
a95e9e5b4 Bump github.com/containers/common from 0.4.2 to 0.5.0
40ac4779e Bump k8s.io/api from 0.17.3 to 0.17.4
e7e5d125f Bump github.com/fsnotify/fsnotify from 1.4.7 to 1.4.9
e6fba1e44 eat signal 23 in signal proxy
2099643aa add apiv2 healthcheck code
c9f148fb1 Merge pull request #5470 from containers/dependabot/go_modules/github.com/containers/storage-1.16.3
d586e16ad Merge pull request #5484 from baude/bindingsnocolor
ac6c8fb68 Merge pull request #5482 from baude/removeimagefilter
9215eb033 Cirrus: Disable non-docs release processing
194759b96 turn off color-mode for bindings
3aa58ccd0 remove imagefilter for varlink remote client
925da7411 Bump github.com/containers/storage from 1.16.2 to 1.16.3
9c7481dbd Merge pull request #5474 from giuseppe/detect-containers-rootlessport-child-exit
235f36786 Merge pull request #5469 from giuseppe/no-size-create-container
358578087 run --rmi test: make it work
19f5d557b Merge pull request #5468 from Akasurde/5244_follow_up
647dc33e1 rootlessport: detect rootless-child exit
8741eb8a9 create: do not calculate image size
eb2d0a228 Follow up changes from #5244
78e090092 Merge pull request #5458 from baude/apiv2eventslibpod
9cfcf5692 Merge pull request #5460 from edsantiago/man_page_xref
9bc27118b Merge pull request #5372 from sujil02/podstatus
dbb3de990 Merge pull request #5459 from mheon/bump_readme_181
3d1bff6db man page cross-reference fixes: part 2
29c071d4f Update version in README to v1.8.1
da9d21635 Merge pull request #5457 from mheon/bump-1.8.1
216a6091d [CI:DOCS]Add libpod event endpoint
8877fed86 Bump to v1.8.2-dev

Testing has been performed across x86-64/arm/arm64 via cli and
podman-compose.

Signed-off-by: Ming Liu <ming.liu@toradex.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-06-30 04:01:03 +00:00
Stefan Agner
bbbda2aff9 podman: add system service for podman
Add system service for podman which starts a podman instance allow to
access the new HTTP based API (apiv2).

Signed-off-by: Stefan Agner <stefan.agner@toradex.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-03-13 21:53:18 -04:00
Stefan Agner
dcc50fe2f2 podman: bump to the latest version 1.8.1
Bump to the newest podman release 1.8.1. Many new networking features
and a new HTTP API has been added since 1.6.1.

Signed-off-by: Stefan Agner <stefan.agner@toradex.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-03-13 21:53:17 -04:00
Stefan Agner
f569d1bfd5 podman: bump to latest release 1.7.0
Bump to latest podman release 1.7.0. It features improvements to
networking, podman play kube, and systemd unit file integration.
They have also added the podman system reset command, to remove all
existing containers, pods, images, and volumes and reset the system
to its initial state.

Signed-off-by: Stefan Agner <stefan.agner@toradex.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-01-17 16:24:59 -05:00
Tim Orling
5fb77ae4c4 podman: upgrade 1.6.1 -> 1.6.2
Lateest upstream is 1.6.4, but neither 1.6.3 nor 1.6.4
build cleanly.

Release notes:
https://github.com/containers/libpod/releases/tag/v1.6.2

Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-12-18 10:47:43 -05:00
Stefan Agner
cff94d5df6 podman: bump to latest release 1.6.1
Bump to latest podman release 1.6.1.

Signed-off-by: Stefan Agner <stefan.agner@toradex.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-10-13 11:16:40 -04:00
Stefan Agner
d549242592 podman: remove comment about runc
It seems that docker uses nowadays a rather vanilla version of runc,
at the time of writing 1.0.0-rc8. This version has successfully
tested with podman, hence remove the obsolete comment.

Signed-off-by: Stefan Agner <stefan.agner@toradex.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-10-13 11:16:40 -04:00
Bruce Ashfield
4e35b5d861 podman: fix layer check cut & paste errors
The layer check for podman was copied from cri-o .. and some non
podman elements came over as part of that copy. We drop selinux
as a check, and fix some comments.

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-10-07 08:10:06 -04:00
Bruce Ashfield
9e7345d8ec podman: make docker wrapper configurable via packageconfig
podman can behave as transparent drop in replacement for docker
via a wrapper 'docker' script that simply calls podman when any
docker command is issues.

While this is an interesting feature, we want it to be optional
.. since it is possible that podman and docker might want to be
installed at the same time.

So we introduce a 'podman' PACKAGECONFIG, that controls whether
or not this wrapper is installed, and if it is installed it marks
the podman package as conflicting with docker (which gets us a
better message than a failed image assembly provides).

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-10-03 00:25:15 -04:00
Bruce Ashfield
14f14957c9 podman: add build flexibility to dependencies
In a similar manner to cri-o, we don't want to make meta-selinux
or meta-security a hard dependency to meta-virtualization. So we
implement a similar anonymous python check that allows the recipe
to be skipped if the dependent layers are not present (and hence
we are yocto compatible). If we get more than two recipes doing
layer checks (this is the 2nd), we can move the functionality to
a class.

We also make the runc dependency be virtual/runc versus picking
a specific provider (even if only runc-opencontainers has been
tested).

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-10-02 22:27:17 -04:00
Stefan Agner
e5de94ab78 podman: add the Pod Manager tool
Podman is a daemonless container engine for developing, managing, and
running OCI Containers on your Linux System. Containers can either be
run as root or in rootless mode.

This patch adds the initial recipe for podman. Currently the build tags
systemd (if in DISTRO_FEATURES), seccomp, varlink and remoteclient are
enabled which allows to run podman with overlayfs as root and vfs in
rootless mode. The storage drivers btrfs and device-mapper have not
been tested and are disabled at the moment.

It seems that seccomp is mandatory, which makes meta-security which
provides libseccomp a mandatory dependency for this recipe.

Signed-off-by: Stefan Agner <stefan.agner@toradex.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-10-02 14:13:35 -04:00