56 Commits

Author	SHA1	Message	Date
Bruce Ashfield	d9af8d1514	podman: update to 4.7.1 ... Bumping libpod to version v4.7.1-6-g85b5f5723, which comprises the following commits: d1cb93d79 rtd: implement v2 build file 8d045d4c9 Adjust to path name change for resolved unit eb5b5dbc8 Switch version to 4.7.2-dev ef83eeb9c New version: v4.7.1 cc5acabf0 Update RELEASE_NOTES.md for v4.7.1 456450438 compat API: speed up network list a2efda96d inspect: ignore ENOENT during device lookup f931f08a7 test/system: --env-file test fixes 297a66c30 Revert "feat(env): support multiline in env-file" 46a85e054 Revert "docs(env-file): improve document description" 6afddf430 Revert "fix(env): parsing --env incorrect in cli" c5ca7e5fc [CI:DOCS] update swagger version on docs.podman.io 51ee25d3f Fix locale issues with WSL version detection 4d15c88a9 switch version to 4.7.1-dev 073183fe1 Bump to v4.7.0 44f727fb0 [CI:DOCS] v4.7.0 RELEASE_NOTES update 2d32314d2 rpm: remove gvproxy subpackage a2697c028 packit: tag @containers/packit-build team on copr build failures 54ce0ca7c specgen, rootless: fix mount of cgroup without a netns d2f9af717 pass --syslog to the cleanup process 133e3a4f2 fix --authfile auto-update test 2c62815e1 version: switch back from -rc1 to -dev 7845dd175 New pre-release: v4.7.0-rc1 49f76e95e [CI:DOCS] Update release notes for v4.7.0-rc1 fa6f94001 Cirrus: Update operating branch 0728a10c6 Move podman build opts to common file 8a9f778e2 Add ability for machine rm -f for WSL 919dce131 Plumbing to run machine tests with hyperv ade0c4932 CI: trace setup and runner scripts c37443e8b Bump to Buildah v1.32.0 9b36f334d [CI:DOCS] bump release notes on main with the latest release cae110f8b fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc5 4a2a423df Add --filter pod= autocompletion 075cf2254 e2e: ExitCleanly(): manual test fixes db5adca73 e2e: continuing ExitCleanly(): just the replacements c689fb4a5 Fix some spelling and formatting 522e0f43f Add support for Ulimit in quadlet b1e3e8d97 Run codespell on code 6b7f718b4 wire in new buildah build options f9aba28ca make golangci-lint happy c1b6effac add !remote tag to pkg/specgen/generate 3acee29cf pkg/specgen: do not depend on libimage for remote 2c2299ad8 bump buildah to latest bf86ed72c [CI:DOCS] restart.md: migrate to container unit 304b22729 fix(deps): update module k8s.io/kubernetes to v1.28.2 4ed3273f6 Add support for PidsLimit in quadlet 70560f916 Add DNS fields to Container and Network unit groups 777b5efa4 [CI:DOCS] update API docs version list 7b9114023 Try to fix broken CI (gvisor-something) df011f437 e2e: more ExitCleanly(): manual test fixes cb1cb338c e2e: more ExitCleanly(): dumb string replacements 62ac96e12 e2e: create_test: use ExitCleanly() b0f77acd1 e2e: diff_test: use ExitCleanly() 5920bfa2e The `podman init` command cannot modify containers. 639a1a029 bump c/common to latest main 806c5de12 Podmansh: use podmansh_timeout eefaa512a e2e: more ExitCleanly(): low-hanging fruit 9b17d6cb0 vendor: update checkpointctl to v1.1.0 cdcf18b86 kube: add DaemonSet support for generate 75b4679a7 vendor of containers/(common, storage, image) 19bd9b33d libpod: move oom_score_adj clamp to init 4f017236e e2e: commit_test: use ExitCleanly() 3a4be5e90 e2e: container_clone_test.go: use ExitCleanly() 8cb14e54a e2e: use ExitCleanly() in cleanup_test.go 925794c6a Ensure HC events fire after logs are written 65a64da27 [CI:DOCS] podman-systemd.unit: fix equivalents d9a85466a Add support for kube TerminationGracePeriodSeconds 5eb0a53a0 Update podman-kube-play.1.md.in c2cd93cdc Split up alt binaries to speed up build 7bf9f302a Switch installer task to EC2 fbbad0439 pod: fix duplicate volumes from containers.conf 0c75eac63 tests: add test for pod cgroups b8f6a12d0 libpod: create the cgroup pod before containers 331b3c216 cmd, specgen: allow cgroup resources without --infra 83334fb4e specgen: allow --share-parent with --infra=false 5de8f4aba libpod: allow cgroup path without infra container 5121c9eb0 libpod: check if cgroup exists before creating it 38209ef49 libpod: refactor platformMakePod signature 627ac1c96 libpod: destroy pod cgroup on pod stop 9a347619d utils: export MoveUnderCgroup 556db46a6 libpod: refactor code to new function 65bddfcd2 e2e: use ExitCleanly() in checkpoint tests 479680232 [CI:DOCS]Remove use of --latest|-l from tutorial afeab39d1 CI test runner: upgrade tests rely on system tests 59bd6a74a run --rmi: "cannot remove" is a warning, not an error 70cf9740f StopContainer: display signal num when name unknown 6f913f5f3 URGENT: fix broken CI b83485022 Add support for kube securityContext\.procMount 589867d71 podman: don't restart after kill 2d7d8d1d1 Tmpfs should not be mounted noexec c2575f726 sys tests: run_podman: check for unwanted warnings/errors 1211518e8 chore(deps): update dependency setuptools to ~=68.2.0 465150f10 e2e: use ExitCleanly() in attach & build tests 27495981c Some distros do not default to docker.io for shortname searches 30abd7f1a security: accept empty capabilities list c32cfb1d0 systests: random_free_port: fix EADDRINUSE flake a5798e9f5 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.2.4 dbfc3e7e0 Restrict fcos_test to amd64, arm64 7b2fc5f8d fix(deps): update github.com/containers/libhvee digest to 56fb235 0a913d578 fix(deps): update module github.com/docker/docker to v24.0.6+incompatible f9fd40221 fix(deps): update module golang.org/x/tools to v0.13.0 71549c642 Ignore spurious container-removal errors e5bf0f96d fix(deps): update module golang.org/x/net to v0.15.0 fdf694fcf systests: manifest zstd test: lots of tiny cleanups 9730c0373 vendor: update github.com/opencontainers/runc to main e825bd5d5 [skip-ci] Update actions/checkout action to v4 8b4a79a74 linux, rootless: clamp oom_score_adj if it is too low 681b6db3f machine: increase max number of inotify instances 302d15334 fix(deps): update module golang.org/x/term to v0.12.0 f094884c1 Remove redundant nil checks in system connection remove 17037af48 fix(deps): update module golang.org/x/text to v0.13.0 1d51cd14a fix(deps): update module golang.org/x/sys to v0.12.0 f542d21a7 fix(deps): update github.com/containers/libhvee digest to 2bf7930 d4fedb288 docs(readme): fix a broken link 50cd072bf [CI:BUILD] Podman FCOS image from main 58a0b7ac8 Update golang.org/x/exp digest to d852ddb fe7bafb83 Add port forwarding and gvproxy machine test 702709a91 libpod: do not parse --hostuser in base 8 13342e503 fix: default typo 3a6fc8d2b Add Japanese locale and translation of index 39c5b7fac remove rh.container.bot@gmail.com a62abfe3d Tweaks and cleanups to prepare hyperv for CI a0738e7e6 system tests: housekeeping: various small fixes 4082b67f6 CI: e2e: first use of new ExitCleanly() matcher 6cbd17c0f CI: e2e: new ginkgo matcher, ExitCleanly() da1246d58 CI: e2e: fetch the standard system-test image d20b5869f kube play: fix pull policy 18d35b612 Fix gidmap command in example e66c04c1f vendor containers/common@12405381ff b95ae3b4a manifest,push: support add_compression from containers.conf 1085177fe hyperv ignition: use gvforwarder instead of vm 2a8e6acec Set remote username earlier for hyperv 26cefcbf9 Added an additional troubleshooting problem and solution a3c2d6ad2 Remove a dependency on libimage from pkg/bindings f1c24df4f Rename parameter in pkg/bindings 259ab8594 Remove a dependency on libimage from pkg/api/handlers 4cac1d3bc Don't re-inspect an image 99834947d Cirrus: Remove multi-arch podman image builds 91b8bc7f1 uid/gid mapping flags 18c2a2be8 [DOC] Clarify default behaviour on uidmap 60e3b5ef1 Update containers/common to latest fe3c4562f update libhvee 1b45fd723 /_ping handler: return OSType http header 2dbb0b096 e2e: fix race condition (kube play + logs) fe11db1e8 Update module github.com/vbauerster/mpb/v8 to v8.6.0 7ef97fa49 Kube - support List documents 346e5e52e kube down/play --replace: handle absent objects 0938ee189 push, manifest-push: --force-compression must be true with --compression-format 4b347609d oci: print stderr only after checking state 461230c49 Updated docs to reflect pod spec sysctls support added in v4.6 b8146a8a2 [CI:BUILD] Packit: Disable unexpected journal message check for cockpit-podman a6f2f5854 [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras b6b300c79 Update machine init/set tests da81bc13a Add rootful status to machine inspect d3618719b Dedup and refactor image acquisition adf34cbd7 Share podman sock bindings with other WSL distros db95e678a Fix user-mode validation check d898ae7f9 system tests: try to fix sdnotify flakes ecf9f9fd8 Cirrus: Disable only hello multiarch build f32e954b8 Set StopTimeout for service-container started under podman kube play d2ec127c1 Set StopTimeout for compat API if not set by client 6f284dbd4 podman exec should set umask to match container 2c5c2d213 [CI:BUILD] Packit: run cockpit-podman tests in PRs 52ed7fce2 Add infra-name annotations to kube gen/play a5f6a4a3b kube: notifyproxy: close once 7a94f8c12 system service: unset NOTIFY_SOCKET 638f994c2 Update module k8s.io/kubernetes to v1.28.1 7c9c96981 API attach: return vnd.docker.multiplexed-stream header 60e58f059 test/apiv2/60-auth.at: use `doesnotexists.podman.io` 61dd7f80c e2e tests: use registry:2.8.2 (was 2.8) 243f365aa create apiutils package c5b4eb943 api docs: document stream format 70f77efef Revert "Remove `hello` multi-arch image build" 82bd56be7 manifest-push: add support for --force-compression 469ace091 push: add support for --force-compression 202cc433a Update module github.com/onsi/ginkgo/v2 to v2.12.0 7e0130f75 Remove `hello` multi-arch image build 1b0e64a10 hack/perf/system-df.sh: add `df` benchmarks 148d95d8d Expand env variables for cmds/entrypoint with format $(ENV) e092f887f vendor c/storage@6902c2d c416e4576 Ignore the resource limits on cgroups V1 rootless systems 9e680cbc6 Fixups for stopping gvproxy 21c9517b5 Revert "GHA: Closed issue/PR comment-lock test" f0e8e79c9 GHA: Closed issue/PR comment-lock test 5477fd38a GHA: Add workflow to lock closed issues/PRs 75ce47347 [CI:DOCS] update auto-update docs 85d0df330 chore(deps): update dependency containers/automation_images to v20230816 bc35e28c0 fix(deps): update module github.com/google/uuid to v1.3.1 3d00744d2 libpod: sum per-interface network stats for FreeBSD 5eee8825e Set default Umask for `podman kube play` ef8f4db81 [CI:BUILD] rpm: spdx compatible license field e9539768c chore(deps): update dependency golangci/golangci-lint to v1.54.2 63a8926e9 Implement automatic port reassignment on Windows 45ce4834a Add support for ramfs as well as tmpfs in volume mounts bdc304058 Validate current generation of WSL2 with user-mode-networking 67756ac60 use container restart policy if user specifies one 0772d8ddb Stop gvproxy on hyperv machine stop 50136ea86 [CI:BUILD] rpm: depend on man-db 36e09f18b Update machine list test 8b2990131 Update machine start tests c3dbfa9a1 Update machine rm tests c726cf810 libpod: improve conmon error handling ed1f514d5 cirrus setup: install en_US.UTF-8 locale 8f85aaf07 fixup "podman logs with non ASCII log tag" tests 27b41f087 libpod: use /var/run instead of /run on FreeBSD 9b4f1cdb9 cirrus/lib.sh: extend env to passthrough at start for locale work ff66f31dd libpod: correctly pass env so alternative locales work 29c298856 cgroups_linux: use SessionBusPrivateNoAutoStartup 362747cfa podmansh man page UID=$(id -u lockedu) is not allowed e38cf33a6 CI: systests: remove pasta ICMP tests 7103fdb3f podman.1.md: Fix formatting of exit code 127, clarify wording of `exit code` example. 896cab612 document available secret drivers 53dd37cc4 pkg/specgen: add support for read-only root on FreeBSD d5841ed52 add --module flag 6a3f09e8a Update dependency setuptools to ~=68.1.0 1d5890bcd Add riscv64 architecture to the cross build target 252f51de8 GetFcosArch add `riscv64` arch 98e7d7af0 Update WSL backend to be compat with FCOS defaults 9e14e3ebe enabled hyperv image downloads 3e2e360b9 fix(deps): update module github.com/containers/ocicrypt to v1.1.8 abd35d4d3 [CI:DOCS] Fix git build example in build page 0c52d1004 CI: e2e manifest_test: use image from quay 31dc42224 Cirrus: Remove EC2 experimental flag 4c7546cb3 sphinx: skip options include dir 345b9b029 Update rootfs.md: Fix formatting and wording of idmap option f33b01b73 fix: Docker API compatible bool deserialization 4cb2d48ca Revert "compat,build: pull must accept string" 68bd81470 Add missing verb in machinectl example 78d6cd4c9 [CI:DOCS] Update Release Notes and Release Process b6349017a chore(deps): update dependency golangci/golangci-lint to v1.54.1 4b80492bd fix podman top missing output flake 5908999e6 New partial-line test is flaking 555b4f930 [CI:BUILD] Packit: add back fedora-eln targets f0dac3677 Cirrus: Prune defunct job + fix noop alias 1947f035c Bump bundled gvproxy to 0.7.0 df28df1ae systests: tests for --env and --env-file bcebcad1f Update system connection add & remove 310f971fc Add tests for podman farm dce3ef3c4 Add podman farm update command 44a704dfc Add podman farm remove command 59a8140f1 Add podman farm list command 6fcdf1a19 Add podman farm create command 1d5ef29f0 Add podman farm subcommand 23d5b5008 CI: e2e: add delay before podman logs or journalctl 2951316b2 Add completion for Farms b672ddc79 Vendor c/common changes 3963c5639 chore(deps): update dependency golangci/golangci-lint to v1.54.0 a55c2636d file logger: fix podman logs --tail with partial lines 7ce654fea fix(env): parsing --env incorrect in cli 4c4bc0922 Update docker.io/library/golang Docker tag to v1.21 f55c48ad3 podman stop --cidfile missing --ignore 7ef03517f Skip podman exec cannot be invoked on Debian 95ceacefb Re-enable checkpoint test on Debian SID c193dbd94 Require a non-generic reason for non-Fedora skip d79e3a23d CI FIXME removal/update. 5ec856652 Update dependency containers/automation_images to v20230807 7988dd82c [skip-ci] Update dawidd6/action-send-mail action to v3.8.0 8a410784b [CI:DOCS] fixed couple typos in build docs 282594e58 Stop timer in function waitPidStop 7c0bccaf7 packit: Build PRs into default packit COPRs afaeedef7 Add support for host-gateway 2de22ebf0 Ensure volumes-from mounts override image volumes 03d7a5120 Minor: Include shasums in GHA workflow artifacts d63ac0652 Minor: Add important comment to windows GHA workflow 9d7fe4e90 Minor: Update/fix dry-run input descriptions 518daef72 [CI:DOCS] Quadlet - provide more information about network files 819129b0d man-page xref: check for duplicate entries 39641482c cp: close temporary file on error path 018fdb48e Makefile: work around the lack of 'man -l' on FreeBSD 0b7769fda Update module golang.org/x/net to v0.14.0 ec5a9b9cc libpod: fix a crash in 'kube generate' on FreeBSD 23c5890f2 remove temporary files when copy [NO NEW TESTS NEEDED] fab62f816 Update module golang.org/x/sys to v0.11.0 b46d72fec [ci] Remove the podman socket in remove_packaged_podman_files() 706c51b52 [ci] Correct the podman systemd file names dd4f47dd9 Always show RemoteSocket.Exists in json fc7c6efd3 Fail if ssh key exists 69e883493 Fix regression for hyperv 803a49da4 [CI:BUILD] Makefile: rpm target generates correct version 1a63c1b23 Fix nits in #19480 1e5453943 Add support for passing container stop timeout as -1 (infinite) d50054f1e pkg/specgen: Add device support for FreeBSD f5058f148 [CI:DOCS] man: remove duplicate entry .LastUp a8974d4a3 CI: e2e: remove useless test 53d44a65e Check tty flag to set default terminal in Env 62a22c5d6 Run codespell on code 44f159ed3 Deprecate podman generate systemd 346f9cb4e manifest/push: add support for --add-compression 8ccda1ee8 [CI:DOCS]Update Release Notes b91599742 CI: sys: quadlet %T test: do not rely on journal 4d69f0146 GHA: Support testing build/sign workflows 15f35d354 Remove unnecessary backslashes 18e75daa5 [docs] Use code blocks for commands in podman-completion f3ebd798c Make podman run --rmi automatically set --rm 8b7701f52 machine: QEMU: recover from failed start 49b8b971a vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a bfd2a8cad secret: add support for `--ignore` with rm 21ebe0e90 Move `writeConfig` logic to shared function 597ccff0b Move some logic of `setRootful` to a common file 98cf8462a move `removeFilesAndConnections` to a common file 75a8f13c4 Move `waitAPIAndPrintInfo` to common file 55c7b5cec Move `addSSHConnectionsToPodmanSocket` code to shared file 0489d3aa6 Update module golang.org/x/net to v0.13.0 d74c225f4 chore(deps): update dependency containers/automation_images to v20230726 27d79e1fc Skip pasta local forwarder test on debian SID b69cd8d84 Skip broken/flaky blkio-weight test 822f2f495 Skip tarball re-inport test in rawhide for CI 851cd9cca Cleanup CIDFile on podman-remote run --rm command a237c3f46 CI: e2e: remove workaround for missing login file 42ad0c6e7 vendor: bump c/image and c/common 5b7dce8a3 Add support for confined users 78b850c48 Cirrus: Temp. disable rawhide validation task def70012b Limit git-validation to 'short-subject' 33b8c451e Fix up man page and add test on globs 850482b31 Move alternate image acquisition to separate function 906af5bbc Move `getDevNullFiles` into a common file 89f1fdc7f Update github.com/digitalocean/go-qemu digest to 2e3d018 d6847b19c Convert QEMU functions to methods with documentation 6930f39a6 Update docs/source/markdown/podman-build.1.md.in e1114f03c do not redefine gobuild for eln 39341f283 Set default userns from containers.conf file 4f1f88d7c Mention TimeoutStartSec in quadlet man page ada71889c inspect with network=none show SandboxKey netns path 93f4cc1b5 [CI:DOCS] GHA: Use stable go for Mac/Win builds ff7d287fc Breakup AppleHV machine funcs 64873e322 Codespell fixups acbe7703f Update docs/source/markdown/podman-stats.1.md.in 0b7157e3b CI: e2e: reenable containerized checkpoint tests c67ef7c1a docs(env-file): improve document description 4ee31dc37 Don't log EOF error when using podman --remote build with an empty context directory. f2794f9a8 API: kill: return 409 on invalid state 170a78631 feat(env): support multiline in env-file 19deb6a34 Adds documentation to new functions that were added 481143e58 `startHostNetworking`: get DevNull files 13da82466 `Remove`: remove network and ready sockets from registry d896431b2 `Remove`: remove files and connections 32265e1f6 `Remove`: collect files to destroy 381b103dd `Init`: read and split ign file aa6827a67 `Init`: write ign config cc30639d7 `Init`: add network and registry socks to registry 78d3b549c `Init`: add SSH conns to podman sock 630e7ba39 Improve the description of fields in podman-stats man page 22a8b6886 make /dev & /dev/shm read/only when --read-only --read-only-tmpfs=false 663fe9446 Mention no comment lines in Containerfile.in podman-build man page e973d15c3 [CI:BUILD] RPM: define gobuild macro for rhel/centos stream 837bc2568 Fix HyperV loadMachineFromJSON function name 416a471ee machine: QEMU: lock VM on stop/rm/set bb57c1631 libpod: add 'pod top' support on FreeBSD f592c33fb [CI:DOCS] Build and Sign Mac Pkginstaller f540bbffa Make sure users changes --authfile before checking 8757fe88a github: add issue type as link to podman github discussions 3523b9b05 Break QEMU `config.go` code into its own functions c341a0ffe machine: QEMU: lock VM on start afe8d5d84 libpod: fix 'podman kube generate' on FreeBSD 0fefcf8a4 Add glob support to podman run/create --mount d6815da8c kube: add DaemonSet support 239a5b64a Fix artifacts script after removal of msitools msi build e335a66a9 System tests: quadlet: fix race in %T test d6a32a3da If quadlets have same name, only use first db0ba9b25 Add support for mounts listed in containers.conf 6dda21984 Update vendor of containers/common 33891e8e9 System tests: add test tags 5ba055937 [CI:DOCS] socket_activation.md: increase socat timeout dfec510b4 go-md2man: use vendored-in version, not system a92bb3219 CI: use different TMPDIR on prior-fedora 6894e2031 system tests: authfile-exists: minor cleanup d70f15cc0 start(): don't defer event de122bb44 Fix: use --all in podman stats to get all containers stats 349d775de Verify authfile exists if user specifies it e0ef23955 libpod: don't generate errors for createTimer etc. 0cfd12786 add "healthy" sdnotify policy cbc96a7b4 Remove LICENSE and general doc files that are installed by the main package 37f0e9620 Add missing ` 2f21df7b3 Remove legacy msitools based msi installer ac212605c Remove any quotes around distribution id e596b17fb add a podman-compose command eee2817de pkg/specgen: Don't crash for device spec with... d2796c6c1 fix(deps): update module github.com/docker/docker to v24.0.5+incompatible f4fbd6fd0 Update vendor of containers/(storage,image) d4fc66af9 Clean up /var/tmp/ when using oci-archives when creating containers 49257a3c5 [CI:BUILD] RPM: separate out gvproxy for copr and rawhide b57091ac9 Reduce qemu machine function sizes baf30e612 [CI:DOCS] migrate socket_activation.md to quadlet 7314569cb [CI:DOCS] Update kube play volume support b5ce0ab2d Fix language, typos and markdown layout cb5450af7 [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet debug 0bb73bf55 Add note on debugging quadlet unit files d4cfc498d Remove unnecessary use of the word "please". a6a207673 libpod: fix FreeBSD 'podman-remote top' default behaviour 709beb6c0 fix(deps): update module github.com/onsi/gomega to v1.27.9 3e534eff9 Add support for ShmSize to quadlet 4b9f670ca Quadlet system test - force journald log driver for short lived containers 731bd7d94 fix(deps): update module github.com/containers/libhvee to v0.4.0 413552e10 quadlet recursively scan for unit files ce736413b Ensure that we appropriately warn that TCP is insecure 558a70262 systests: quadlet: fixes for RHEL8 8d190704a Quadlet - Allow setting Service WorkingDirectory for Kube units 24bf6fc24 Quadlet system test - do not rely on journalctl in kube file tests 3d6bc2f86 Fix markdown in docs for podman-network-create 11ffea313 Man pages: check for corrupt tables 1d14bb7a8 quadlet systest: fix broken tmpdir references e55e128fc Add `since` as valid filter option for `volume` subcommands 6df17332b Podmansh: Better error, increase timeout to 30s 96241159a Fix multiple filter options logic for `podman volume ls ` 00a5b0709 Add bash-completion for podman inspect 3b6343202 Fix windows installer d7e25e14a Add missing reserved annotation support to `play` d2862c7dd Avoid progress hang with empty files 5c0912b07 Revert the usage of `home.GetConfigHome()` 5aa52659b Fix bug report issue template README link 47997857f Replace error check for non-existent file 8febb6aa1 Emergency gating-test fixes for RHEL8 d8d600b1d Add progress bar for decompress image 46058cfed refactor: move progressbar to a function ca9874ab7 Use pkg/homedir to get the home config directory 7fb17ae78 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2 a224ff731 Should be checking tmpfs versus type not source 9e60f3ec5 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1 b4ffbcdfd Enabled arm64 arch for podman applehv provider 4e4078dbb [CI:BUILD] Packit: remove pre-sync action d0602e8f7 Add `--podman-only` flag to `podman generate kube` 13a950016 Update vendor containers/(common, buildah, image, storage) f256f4f95 Use constants for mount types 310a8f103 libpod: use define.TypeBind when resolving container paths 1e9410094 Tests: remove/update obsolete skips a3bbc3a2c Fix trust not using local policy file 0997cf012 Fix `podman container prune` docs for `--filter` a8d8c9497 Add more tests for liveness probes with default hostname & named ports 383d683f8 docs: podman-build --network add slirp and pasta 5e64cbf35 docs: podman run --network mention comma separted names 1443e2918 Podman machine AppleHV pass number 3 315a7887a Makefile: `package` -> `rpm` 85d936133 network create: document --internal better e43127e0b pkg/specgen: fix support for --rootfs on FreeBSD 8c16322a8 machine start: qemu: wait for SSH readiness 12dc546fc [CI:BUILD] Packit: downstream task action fix 2b2c4453f Fix container errors not being sent via pod removal API 6ec261e7a Add missing return after utils.InternalServerError() d1950869a Update cmd/podman/login.go cce8501a5 [CI:DOCS] Reformat and reorder table with --userns options d497eb369 Add secret support to podman login 2a9b9bb53 netavark: macvlan networks keep custom nameservers c6b5b9a02 remote: fix podman-remote play kube --userns 441af003a fix(deps): update container-device-interface to v0.6.0 656ad760f go mod: no longer use 1.18 aeef403cd fix(deps): update module github.com/containers/libhvee to v0.3.0 6fd4ae6d2 chore(deps): update module github.com/gin-gonic/gin to v1.9.1 [security] 0dcfe6e06 Run codespell on code 3ad55f48b system service: unset listen fds on tcp f1c68b79e add hostname to network alias b6ec2127b libpod: set cid network alias in setupContainer() 4e96686e9 AppleHV enablement pass #2 72a1857e4 e2e: Fetch the correct user name 7b54fd84e Add `--no-trunc` flag to maintain original annotation length 600de05e3 Fix TCP probes when the optional host field is not given ac3a115c3 Add support for using port names in Kubernetes health probes 4494cefbc Fix: cgroup is not set: internal libpod error after os reboot 932fae402 Allow setting volume and network names in Quadlet 427b959a1 pasta tests: automatically determine test parameters 97fd03ccd test/e2e: wait for socket a69194b02 manifest inspect: support authentication 70428baef api: fix slow version endpoint f8213a6d5 libpod: don't make a broken symlink for /etc/mtab on FreeBSD 499b8d13c CI: remove build without cgo task 42ea0bf9c libpod: use io.Writer vs io.WriteCloser for attach streams 597ebeb60 top: do not depend on ps(1) in container 3f8ee70d0 make --syslog errors non fatal dbec2b5aa api: fix doc for default ps_args 1b7eb44d3 Fixes typo in the path where quadlet looks for files efefd8cf5 Add --replace flag to podman secret create eec438222 [CI:DOCS] uidmap man pages: fix corrupt italics 8d24e2838 [skip-ci] Update github/issue-labeler action to v3.2 f9077689e [CI:DOCS] podman-system-service.1.md: document systemd usage dd16661b1 fix(deps): update module github.com/docker/docker to v24.0.4+incompatible 65136521e fix(deps): update module github.com/docker/docker to v24.0.3+incompatible fa654e985 Use bytes size consistently instead of human size dee94ea69 bugfix: do not try to parse empty ranges 9e4045768 [CI:BUILD] Packit: fix pre-sync action for downstream tasks 531fb21d0 fix(deps): update module golang.org/x/tools to v0.11.0 ab2fa45ad fix(deps): update module golang.org/x/net to v0.12.0 459b1578c fix(deps): update module golang.org/x/term to v0.10.0 99f93d55c e2e: fix two toolbox flakes fc5aa9c9c test/e2e: use GinkgoT().TempDir() over MkdirTemp() ea8992cb4 test/e2e: use random ImageCacheDir 17a06d343 test/e2e: remove RHEL7 workaround bc22aefce test/e2e: remove unnecessary code in SynchronizedAfterSuite ff7790038 test/e2e: do not use /tmp for podman commands db7cb1dbf test/tools: vendor ginkgo v2.11 c20612bab test/e2e: write timings directly to file a0b765552 machine start: qemu: adjust backoffs d874790bc auto update: fix usage of --authfile ba1355b23 system tests: refactor registry code 94b321337 fix(deps): update module golang.org/x/text to v0.11.0 644f7cd9b pkg/specgen: properly identify image OS on FreeBSD a3a62275c libpod: use new libcontainer BlockIO constructors 2d68c3add [CI:BUILD] Minor: Don't confuse osx-debugging 5aabc5088 [CI:DOCS] Better document the default value of --userns e4644c3cb Cirrus: build FreeBSD binaries in a VM 92fc0f481 Makefile: add support for building freebsd release tarballs 4a5396b46 [CI:DOCS] uidmap man pages: fix corrupt tables 5a8e092a2 fix(deps): update github.com/crc-org/vfkit digest to c9a4b08 d0359fcca fix(deps): update module github.com/containers/buildah to v1.31.0 300eb36b4 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc4 94e59bd2f Use /proc/self/gid_map as intended, not uid_map a16488f89 fix(command): ignore `--format` in `podman search --list-tags` 9fb2f8e10 podman machine start: fix ready service 8408ad498 Makefile: don't rely on the non-standard -r flag for ln 39624473b pasta: Create /etc/hosts entries for pods using pasta networking fe0de8b9f fix(deps): update module github.com/containers/libhvee to v0.2.0 2393fe453 pasta tests: add sanity check for test name vs function 4da3e47b6 pasta tests: cleanup + 1 new test 43b9426fc cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD e3f2a97d1 cmd/podman/system: add API server support on FreeBSD 0d7da5c0b [CI:DOCS] Document support of pod security context IDs f64a1a1cc rootless: use default_rootless_network_cmd config e4efd709d Revert^3 "pasta: Use two connections instead of three in TCP range forward tests" 17cd5aecb pasta: Workaround occasional socat failures in CI 13c7d05cc pasta: Remove some leftover code from pasta bats tests bc58dae36 Bump c/image to v5.26.0, c/common 0.54.0 2cb549339 fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.3 bf60bb073 Display secret to user in inpspect 448e01566 [CI:BUILD] RPM: Fix koji and ELN issues 8fb719a9e e2e: systemd test: major fixes 865d77e94 pkg/specgen: add support for 'podman run --init' on FreeBSD 74b4615aa Bump version after v4.6 branch cut b6e636cbe Remove 'inspecting object' from inspect errors fe8355be7 pasta: Fix pasta tests to work on hosts with multiple interfaces d15cca024 [CI:DOCS] fix command incorrect in windows bcb89fc8b Fix readonly=false failure 609c47ae6 pkg/specgen: Add support for Linux emulation on FreeBSD cf9ebcddf Fix up podmansh man page 05eb3e6f1 Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs f5cc0487e Fixes for vendoring Buildah 0f4c86e26 vendor in latest buildah 6eaf8a271 tests: fix "Storing signatures" check b80fd54a5 update c/image and c/storage to latest eeb7aeb49 Kube quadlets can support autoupdate as well as containers 2160a114c debug tail 800 lines flake dd81f7ac6 Pass in correct cwd value for hooks exe 227c07aeb specgen: honor --device-cgroup-rule with a new user namespace 0220f3338 specgen, rootless: raise error with --device-cgroup-rule db37d66cd make image listing more resilient 17a18b16c Update module google.golang.org/protobuf to v1.31.0 bc5269f18 Trim whitespace from unit files while parsing 516034215 Re-organize hypervisor implementations ba3da15e0 play.go: remove volumes on down -f Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-11-06 16:21:12 +00:00
Bruce Ashfield	77fc0a2613	podman: mark incompatible with mips ... Some of the (current) rdepends for skopeo are not compatible with mips. To make this restriction more obvious, we also mark skopeo itself incompatible with mips. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-09-28 01:25:29 +00:00
Bruce Ashfield	08435d20b1	recipes/classes/scripts: Drop SRCPV usage ... bitbake has been enhanced such that SRCPV is no longer needed in PV to handle updating git hashes and task signatures. We can simplify our PV by dropping SRCPV Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-08-24 01:38:21 +00:00
Bruce Ashfield	a03c4f5845	podman: introduce README for testing/configuration ... Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-08-24 01:38:21 +00:00
Bruce Ashfield	ba6e5e9db1	podman: update to 4.6.0 ... Bumping libpod to version v4.6.0-14-g2215847e6, which comprises the following commits: f05f00717 do not redefine gobuild for eln 45fd917fa [CI:BUILD] RPM: define gobuild macro for rhel/centos stream 8ee1f1197 [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora >= 38 5831bd68b System tests: add test tags 954177e7e API: kill: return 409 on invalid state e4e983e7a Mention TimeoutStartSec in quadlet man page d68ee576e If quadlets have same name, only use first 94431182b Bump to v4.6.1-dev 38e6fab96 Bump to v4.6.0 8aec5997e Update release notes for v4.6.0 09b1da382 Ensure that we appropriately warn that TCP is insecure 0115a4800 CI: remove build without cgo task 598ebe8a1 libpod: use io.Writer vs io.WriteCloser for attach streams 574b78291 top: do not depend on ps(1) in container 255111269 api: fix doc for default ps_args 34274ce15 Add more tests for liveness probes with default hostname & named ports 48deafc64 Fix TCP probes when the optional host field is not given 6817e0ae3 Add support for using port names in Kubernetes health probes 5445bd6f0 [CI:DOCS] fix command incorrect in windows 50195c244 [CI:DOCS] Reformat and reorder table with --userns options 924bc7055 [CI:DOCS] Better document the default value of --userns e4c38e719 Add missing return after utils.InternalServerError() 7a4bd4c95 Fix markdown in docs for podman-network-create 7cbe41212 Fix multiple filter options logic for `podman volume ls ` 5ea019419 Should be checking tmpfs versus type not source b4859d283 Use constants for mount types 39b7ac99d Fix `podman container prune` docs for `--filter` 7ba306ec6 docs: podman-build --network add slirp and pasta c810420c8 docs: podman run --network mention comma separted names 2c970dd01 network create: document --internal better 5106b7a38 pkg/specgen: fix support for --rootfs on FreeBSD 41f809e3e systests: quadlet: fixes for RHEL8 061841c0c Fix windows installer 8f05405db Podmansh: Better error, increase timeout to 30s 2b683a400 Emergency gating-test fixes for RHEL8 d0dee61e7 Packit: remove pre-sync action 70e30a2be [CI:DOCS] Update RELEASE_NOTES.md with Makefile change b8ef289e3 Bump to v4.6.0-dev bfe2e0fca Bump to v4.6.0-rc2 145748d1f Makefile: `package` -> `rpm` be21bc082 Update release notes 8fffcf4d6 system tests: refactor registry code 624bb8350 machine start: qemu: wait for SSH readiness 732a02c57 machine start: qemu: adjust backoffs afe48ba36 auto update: fix usage of --authfile 24439cdd2 [CI:BUILD] Packit: downstream task action fix 7b3d47c3b Fix container errors not being sent via pod removal API 9d0470f12 netavark: macvlan networks keep custom nameservers 5583358f6 add hostname to network alias 2aea98cab libpod: set cid network alias in setupContainer() d0b0c6285 Fix: cgroup is not set: internal libpod error after os reboot 258135221 test/e2e: wait for socket a3a62854f api: fix slow version endpoint 28e92b9de manifest inspect: support authentication e354514dc libpod: don't make a broken symlink for /etc/mtab on FreeBSD c81a00101 make --syslog errors non fatal edc51d9ff Fixes typo in the path where quadlet looks for files a673bb23e [CI:DOCS] uidmap man pages: fix corrupt italics dd7dbb826 [CI:DOCS] podman-system-service.1.md: document systemd usage a312553fc Use bytes size consistently instead of human size 2ef2a671e bugfix: do not try to parse empty ranges 662cca7cc pkg/specgen: properly identify image OS on FreeBSD cf5c4c9ee [CI:DOCS] Document support of pod security context IDs c8cfcc253 pkg/specgen: add support for 'podman run --init' on FreeBSD fc8f229bd Remove 'inspecting object' from inspect errors ee6329374 Fix readonly=false failure a3598ff61 pkg/specgen: Add support for Linux emulation on FreeBSD e30197e6f Fix up podmansh man page 47e6ce19c Pass in correct cwd value for hooks exe f654f7cc7 specgen: honor --device-cgroup-rule with a new user namespace fcf673d5d specgen, rootless: raise error with --device-cgroup-rule f70189991 make image listing more resilient 62fc35c07 Trim whitespace from unit files while parsing ed5618759 play.go: remove volumes on down -f 04897ee64 Vendor c/common v0.55.2 ff71df0e8 system service: unset listen fds on tcp 6960a8183 [CI:DOCS] [Release Notes]: add static routes e4cf2afbc [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md c422072b6 [CI:DOCS] uidmap man pages: fix corrupt tables Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-08-24 01:38:21 +00:00
Bruce Ashfield	2a4b72b3a2	podman: update to 4.6 ... Bumping libpod to version v4.6.0-rc1-6-g932b8a997, which comprises the following commits: c422072b6 [CI:DOCS] uidmap man pages: fix corrupt tables 7680e5013 libpod: use new libcontainer BlockIO constructors 829b3e9b3 Bump to v4.6.0-dev 4d59a0f5c Bump to v4.6.0-rc1 e4a7923ca Bump to v4.6.1-dev c756b24f4 Bump to v4.6.0 2e53a5083 Release notes for v4.6.0 727362bde Update Release Notes for v4.5.1 8f2b73b03 rootless: use default_rootless_network_cmd config 3bd4c6a10 tests: fix "Storing signatures" check d5e8cc1d1 Fixes for vendoring Buildah 2203f2aa9 Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs a306eb5f6 Do not use deprecated hook functions from c/common bf36f1139 Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0 a64016e17 pasta: Remove some leftover code from pasta bats tests 6feb179f4 pasta: Fix pasta tests to work on hosts with multiple interfaces 9cc19b055 fix(command): ignore `--format` in `podman search --list-tags` 714c3fe72 Use /proc/self/gid_map as intended, not uid_map d29e33650 podman machine start: fix ready service 1a1602b72 Makefile: don't rely on the non-standard -r flag for ln db91ce788 cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD 82a4b0816 cmd/podman/system: add API server support on FreeBSD 2f25372de pasta: Create /etc/hosts entries for pods using pasta networking 9555446d3 RPM: Fix koji and ELN issues 0749d685a Cirrus: Update operating branch dde6bcbca system tests: add and use _prefetch 0ee19f08c pkg/api: BufferedResponseWriter flush correctly d0505d6ba pkg/api: top return error to client 1398cbce8 container wait: support health states b680daa2d [CI:DOCS] Fix example on PublishPort 811867249 container wait API: use string slice instead of state slice 64153ace0 podman wait: update man page a699ed0eb StopContainer(): ignore one more conmon warning bd69b151f run,create: modify `--env-merge` behavior for non-existent vars 614c962c2 use libnetwork/slirp4netns from c/common 180cf0cf1 update c/common to latest d0af5df89 e2e: use parallel-safe /dev subdirectories aeff58e0b [CI:BUILD] Help Renovate manage the golangci-lint version 00292ae1c systests: test instrumentation 63dfe842b compat API create/pull: fix error handling d54541894 compat API push: fix error handling 26721b0a0 GetSafeIPAddress(): discourage its use 810c97bd8 libpod: write /etc/{hosts,resolv.conf} once 13db83a00 e2e: fix one of the many log flakes bb932cc84 cmd, push: expose --compression-level 459248337 vendor: bump containers/common f4c514bff compat API container create: handle platform parameter 04a1cdfa9 refactor(machine): remove hard code ae6e39076 vendor in latests containers/common 81e63227e fix(machine): throw `connect: connection refused` after set proxy ec0924c6d [CI:BUILD] Packit: cleanups 65e5d2773 Add console mode to podman machine ddcefc9b9 e2e: kube test: specify expected exit code 574e00d32 e2e --authfile test: fix test condition f8f337501 chore(deps): update dependency setuptools to v68 84e42877a make lint: re-enable revive aa453c4f1 make lint: re-enable ginkgolinter 2efa7c3fa make lint: enable rowserrcheck f07aa1bfd make lint: enable wastedassign 60a5a5947 make lint: enable mirror a35da3ad8 bump golangci-lint to v1.53.3 47e0557d5 auto update: restart instead of stop+start acb5f97f9 cmd/podman/root.go: fix help document issue of the image store e5399aaf3 vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c 3829fbd35 podman: add support for splitting imagestore e29274853 network create --ip-range allow for custom range c2360800e fix(ssh): start machine failed to start with exit status 255 ed24f0b2c remote wait: fix "removed" condition 8d036906a [CI:DOCS] Fix service_destinations description in podman man page bfe61af6d quadlet should exit non zero on failures 91fc435cb fix(deps): update module golang.org/x/tools to v0.10.0 ef42f54ac e2e: GetSafeIPAddress() replaces GetRandomIPAddress 5ffbfd937 pasta: use code from c/common 479677cb6 Add support for setting autoupdate in quadlet 3efaffae4 New command: podmansh 67674b3a6 vendor: update c/common to latest bdc2e8165 Add quadlet container support for Mask,Umask options 13c2aca21 libpod: make conmon always log to syslog 0ecc0d9e1 Document how to get secret mounts working on RHEL8 c28a43efd Verify podman pull dup image only prints id once d464e1d4f Vendor in latests containers/common 741ad0b4f Apply suggestions from code review f31466e74 Revert "rootlessport: exclude storage drivers via build tags" 8a90765b9 filters: use new FilterID function from c/common de494eb05 logformatter: ignore 'TOP-LEVEL' headings 63f5116ad test/e2e: fix network ID test 8c48f97c9 update c/{common,image,storage} to latest 354b8e20b [CI:DOCS] clarify supported transports in manifest push aa7a4219e [CI:DOCS] podman-push: rm confusion on supported transports c0ab29313 container wait: indicate timeout in error af7555e0d network-create: document new bclim option 7d2f722ef fix(deps): update module golang.org/x/text to v0.10.0 6f821634a libpod: Podman info output more network information d0e2428fb fix(deps): update module golang.org/x/term to v0.9.0 ac0ba2c2c quadlet: adjust container unit documentation 837b47244 e2e: GetRandomIPAddress(): parallelize 676c4d4e8 Makefile: add support for 'make help' on FreeBSD ab502fc5c criu: return error when checking for min version 16092930c Update docs/source/markdown/podman-systemd.unit.5.md faa2689dc 250-systemd.bats: remove outdated comment 0714321de github: add issue type as link to podman-desktop a66bab340 Add WorkingDir support to quadlet ebf747474 rootlessport: exclude storage drivers via build tags 8bf168cc1 Add ability to set static routes 68183b07d test/upgrade: correctly share mounts between host and container 444f19cb2 Update common, image, and storage deps ec6b7dbd9 Fix system service manpage name in API Documentation d734fcbff style(specgen): omit nil check 53834ef0d fix(specgen): index out of range when unmask=[] 71cae3159 Makefile to force a shell when running command 02432fc69 cirrus,ci: default to overlay for debian env b37f74b73 Quadlet: Add support for --sysctl flag 44ec044c4 chore(deps): update dependency requests-mock to ~=1.11.0 2ebc9004f Ignore spurious warnings when killing containers 7832879bf Makefile: don't hard-code the path for bash de4b383ef fix(deps): update module github.com/burntsushi/toml to v1.3.2 a7271f9dd GHA: Fix bad job-names & links in monitoring emails 6a696cb8f podman-registry: simpler, safer invocations f1ecdca4b Ensure our mutexes handle recursive locking properly 310082444 Fix an expected error message from pod removal a750cd987 Fix a race removing multiple containers in the same pod 0e47465e4 Discard errors when a pod is already removed 398e48a24 Change Inherit to use a pointer to a container b65ba90df e2e: add ginkgo decorators to address flakes 992093ae9 filters: better handling of id= 7bdbbd0ce fix(deps): update module github.com/onsi/gomega to v1.27.8 c7a8d29f1 refactor: improve get ssh path duplicate code 137c8ef4d logformatter: better recognition of ginkgo test names 944673c88 Address review feedback and add manpage notes 3b79f241b Add support for SecurityLabelNested flag in quadlet a1c1d8d0a fix(deps): update module github.com/burntsushi/toml to v1.3.1 4fda7936c `system locks` now reports held locks 92309d917 fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17 0948c078c Add a new hidden command, podman system locks 1013696ad Add number of free locks to `podman info` 3b39eb133 Include lock number in pod/container/volume inspect 1ce53677a fix ignition config creation 4584350f6 Makefile binaries target adopted for Mac and Win e93b1f997 fix(deps): update github.com/crc-org/vfkit digest to 3d57f09 c51c6675e logformatter: proper status color for failed tests cf9bc25bb pasta: Test handling of unknown protocols b2c000670 pasta: Correct handling of unknown protocols 6611735ae Quadlet - add support for Pull key in .container 5b629e9c4 fix(deps): update module github.com/sirupsen/logrus to v1.9.3 d68121a60 Add default ulimit test for gen kube 81d64547f feat: add insecure registry troubleshooting solution 1768bf150 fix(deps): update module golang.org/x/tools to v0.9.3 7e550f78e fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2 28934897e e2e: GetPort(): safer allocation of random ports 2c9f18182 The removeContainer function now accepts a struct 4e6efbbbb Revert "test/e2e: fix "podman run ipcns ipcmk container test"" b75ff3a8f Add a test for removing dependencies with rm -fa bafb3d6cc Revert "ginkgo-v2 cleanup workaround for #18180" ef1a22cde Fix a deadlock when removing pods 8cb5d39d4 Pods now return what containers were removed with them bc1a31ce6 Make RemoveContainer return containers and pods removed e8d745627 Add an API for removing a container and dependencies 543b80949 systests: fixes for coping with extra systemd image 34c258b41 libpod: fix timezone handling 22424eb5d fix(deps): update github.com/godbus/dbus/v5 digest to 7623695 7987d2ee0 fix(deps): update module golang.org/x/tools to v0.9.2 4173f942f test/system: quadlet use correct systemd restart policy 0372bf4bd systests: minimize race-condition window 1a34e1f85 systests: fix improper backgrounding of run_podman f09772889 set max ulimits for rootless on each start 5c7d50f08 Fix: display online_cpus in compat REST API bd62119f3 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6 72d4cede2 systests: fix race in quadlet tests f48fa1113 fix(deps): update module github.com/burntsushi/toml to v1.3.0 88e78456d e2e: make BuildImage parallel-safe 370e1132c completion: fix panic in simplePathJoinUnix() 46456f5f1 Update module github.com/stretchr/testify to v1.8.4 585d715bb authfile.md: add default path of file for Windows/macOS. 01012a080 Update module github.com/rootless-containers/rootlesskit to v1.1.1 e3240c2fb hack: fix typo in hack/podman-registry de92db0c8 man pages and command help: clean up descriptions e6bfc81a8 RPM: bump gvisor-tap-vsock subpackage and fix packit scripts dfba6ddd4 Man pages: fix broken tables 5b2d963c4 test/e2e: add regression testing for comma-containing labels 047a4bc83 fix: volume create filters 0be9887af fix: move filter flags from StringSliceVar to StringArrayVar 6bc52c9c5 pkg/rootless: correctly handle proxy signals on reexec 85b4c896b [CI:BUILD] Packit: set propose-downstream action type to pre-sync 8f94a4775 [CI:DOCS] fix Quadlet man page rendering 29f7c494e Quadlet: kube: use ExecStopPost 6487d9c11 Quadlet: kube: add ExitCodePropagation field 08b0d93ea kube play: exit-code propagation 6dbc13833 prune exit codes only when container doesn't exist 977b3cdbf podman: Add pasta to podman info 373919ca0 Revert "test/system/255-auto-update.bats: add debug logs" 901900530 Quadlet - add support for PodmanArgs to all groups 6003dca9c [CI:BUILD] Packit: add jobs for downstream Fedora package builds fb8a12490 In a concurrent removal test, don't remove concurrently with builds 032d4a95f Consolidate error handling in Runtime.removeContainer f556e58bb Consolidate error handling in Container.cleanupStorage 4969c552e Fix reporting errors on container unmount 94c65a659 TEMPORARY(?) instrumentation for unlinkat-ebusy d623670e1 pkginstaller: bump Qemu to version 8.0.0 4108b3711 Support podman --remote when Containerfile is not in context directory 9969374b6 chore(deps): update dependency requests to ~=2.31.0 5f29c7bf9 fix: podman event --filter volume=vol-name should compare the event name with volume name 6b48e9962 fix(deps): update module github.com/docker/docker to v24 1b9272a06 wait: look for exit code in stopped state 7d831d555 network create/update: allow dns servers comma separated 685c73618 source code comments and docs: fix typos, language, Markdown layout fe41077d4 Increase download progress to 80ch 8fbcf8bce chore(deps): update dependency setuptools to ~=67.8.0 29749362a podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED] 2253f709b fix(deps): update module github.com/sirupsen/logrus to v1.9.2 7c53a463b stats: get mem limit from the cgroup 8e2e7a440 quadlet tests: enable device.volume test bb3f611ff quadlet tests: remove unused socketactivated.container 18c3de596 fix(deps): update module github.com/stretchr/testify to v1.8.3 5d522431c Correct markdown in docs 76595c7b9 fix(deps): update module github.com/onsi/gomega to v1.27.7 a99ad3b36 [CI:DOCS] Improve security in mysql examples 99cedae31 Cirrus: Record the buildah version for reference a54d4d7e1 test/e2e: do not call setenforce 458f2e8ed Fix discombobulated kubernetes support table 192ad70e9 run: ignore PODMAN_USERNS with --pod 5ff6fc559 Add --configmap to podman-remote kube play ad8d0e57d compat: accept tag in /images/create?fromSrc bf0cea76c fix HTMLSpan warnings a576fa3f1 generate systemd: error on init containers 32c2cea0f Remove future tense from man pages 5b148a0a6 compat,build: pull must accept string d1dcb0846 Cirrus: Add support for `[CI:NEXT]` eb4f0bc17 Cirrus: Remove support for `[CI:COPR]` magic 3360214a0 system tests: add precision timestamps 8b4987266 Makefile: add ginkgo FOCUS/FOCUS_FILE options 4bed2c285 e2e: refactor and document serialization ce07860a1 machine: fix default connection URL to use 127.0.0.1 a485ba505 e2e: serialize gpg tests b9aaafbe1 Document podman-machine-default behavior 7580b8ae4 e2e: fix more test races (missing "wait") 6d58f5bb0 fix(deps): update module github.com/openshift/imagebuilder to v1.2.5 520979ba2 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5 ae5cbf37c Fix documentation of `--network-cmd-path` CLI option 71853319f Skip rhel-release branch unnecessary CI tasks ab29ff2f6 test/e2e: dedup Before/AfterEach nodes d01ae436e remote-save: fix permissions and dir formats 5a176f09c Set machine docker.sock according to rootful flag 13f787842 Fix handling of .containenv on tmpfs 2c0f40482 Do not include image annotations when building spec dd5d22cb3 build(deps): bump github.com/docker/distribution 26f1e95ab Kube Play - Support multi-doc YAML files for configmap argument c33ba70f9 system tests: instrument, to try to catch unlinkat-ebusy 74a5b92b3 test: check restart policy of init containers 3aa6a792e Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469 04707f62d issue template: mention `su` 14001ad48 e2e: logs test: fix flakes 6b329d8c9 fix(deps): update module github.com/containernetworking/plugins to v1.3.0 ff37615bf e2e: stop podman.service test: wait for server cb8e19677 logformatter: handle podman-machine test logs 58fd87959 fix(deps): update module golang.org/x/tools to v0.9.1 2d8929d95 [CI:DOCS] Disable Dependabot in favor of Renovate 01e20818c Ensure the consistent setting of the HOME env variable on container start 8aaa13acc Quadlet system tests - fix socket notification 1fb3cdf8a sqlite: disable WAL mode d24bec0d0 system tests: timeoutize quadlet, systemd 3d6894426 test: update README for integration tests c400cc7ea libpod/Container.rootFsSize(): use recorded image sizes b97be3406 quadlet: support `HostName` 9dc107e74 e2e: fix race in a play-kube test bdb3ed795 Fix preference of user quadlets directories 40b21fa7d fix(deps): update module golang.org/x/tools to v0.9.0 661a238a9 fix(deps): update module golang.org/x/net to v0.10.0 332b47fef Check on client side for Containerfile, if none specified 18cd174c9 build(deps): bump github.com/docker/docker 9ec630f30 Buildah treadmill: several fixes 11d92ea37 fix(deps): update github.com/containers/common digest to 3e93a76 1bf057e8c chore(deps): update dependency docker to ~=6.1.0 27891a664 Update docs/source/markdown/podman-systemd.unit.5.md 505e02e04 fix(deps): update github.com/containers/common digest to bc15b04 53220717e fix: initContainer restart policy overridden by pod c27cda7c9 fix(deps): update module golang.org/x/sync to v0.2.0 773b45704 chore(deps): update dependency requests to ~=2.30.0 0c070ebfb ginkgo json output: only in CI, not on laptop runs 73d3487cc Allow user quadlets to be stored under /etc 334adac74 fix(deps): update github.com/containers/common digest to ea87b34 95557a532 libpod: do not Cleanup() more than once df9344ac4 compat container create: match duplicate mounts correctly 42c822720 Update podman-completion.1.md 3d56e4f3a fix(deps): update github.com/containers/buildah digest to e925b58 75d92f41d Run generate.CompleteSpec() for initContainers as well d25356c30 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4 df8cc7af3 remote: return better connect error 61985a610 Add missing man page links for Docker man pages f877d7dcd Replace egrep/fgrep with grep -E/-F 19aabf440 remote: exec inspect update exec session status 305bad184 fix(deps): update github.com/digitalocean/go-qemu digest to f035778 999c620d5 fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d 38f993543 fix(deps): update github.com/containers/buildah digest to f353690 1b2b0d031 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3 dc7515dc3 MVP for Podman Machine with AppleHV 54fd0d752 e2e tests: try writing & preserving ginkgo json artifacts 1c5ab9e7b vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310 e1e03a0e3 bindings, build: don't pass invalid platform in case of none ae5305134 Revert "logformatter: anchors: link to test summary, not name" fbe62f329 More cleanup: volumes: do not export to stdout 3050a6437 e2e test cleanup fa1ba17bc Update kube gen & play to use pod restart policy db4ad54f9 Add {{.Restarts}} to podman pod ps 0fef113a4 Add {{.Restarts}} to podman ps edbeee523 Add --restart flag to pod create 9e9bcec9e history: correctly set tags 073cd4bb4 fix(deps): update module github.com/moby/term to v0.5.0 3858a833b Makefile: do not run machine test in parallel 5af433923 pkg/machine/e2e: switch to GinkgoWriter 1720042d0 api: fix parsing filters c4b9f4b34 ginkgo-v2 cleanup workaround for #18180 5eb99a0ac test/e2e: fix custom timing reporting 1bff0108f logformatter: anchors: link to test summary, not name 914ff01f9 WIP: logformatter: handle ginkgo v2 logs b3424f370 test/e2e: unshare --rootless-netns cleanup slirp4netns 054154c77 test/e2e: run system reset test serial c5922cc6f test/e2e: fix CleanupVolume/Secrets() bc1ed07b5 ginkgo v2: fix new Skip() behavior cd46e7279 test/e2e: fix pause tests to unpause before cleanup() 2ce4e935b ginkgo v2: drop localbenchmarks fb7a96638 test/e2e: switch to GinkgoWriter cc19091e9 test/e2e: unset CONTAINERS_CONF before Cleanup() 8cc7a3618 ginkgo: run on all cores 9c1f713c7 test/e2e: fix Cleanup() 9bd833bcf test/e2e: fix "podman run ipcns ipcmk container test" 629a6a6e4 test/e2e: actually check for cleanup errors b9ba85044 Lower e2e timeout to not waste time when it hangs fbb7c980a test/e2e: containers.conf tests add missing Wait() c564d9d7a ginkgo v2: remove CurrentGinkgoTestDescription() 666e31447 ginkgo v2: remove deprecated flags 445815036 update to ginkgo v2 502654580 test/e2e: do not remove CNI directory 7b25f362e e2e: login_logout: use unique authfile for each test d06480d99 Fix clashing subuid 24be46a51 [CI:DOCS] troubleshooting: fix subuid example bab4217cd manifest, push: use source as destination if not specified 202701e65 Update github.com/moby/term digest to 0564e01 e8f34e457 Add name-generation test b5ef9555a Implement machine provider selection 70870895b libpod: improve errors management in cleanupStorage 5592dc12f libpod: report unmount idmapped rootfs errors 2932208c2 test: do not wait 10 seconds before killing myyaml 891bc117e podman: simplify code with a switch bac57409f test: fix typo 5fefb54d2 build(deps): bump github.com/docker/docker 0a92b399d swagger: fix Info name conflict 20c42489e Nightly dependency treadmill: remove 33fa54580 Update short description for disconnect cmd aca993632 windows: podman save allow the use of stdout 512b39475 Update c/common and avoid setting umask 7ff2eaf96 Cirrus: Update CI VM Image to F38/37 0e1ddd3df Cirrus: Run code validation on rawhide 221e3023f Fix rand.Seed() deprecation in golang 1.20 edaf3b4d5 Add sha256: to images history id for docker compatibility d51911f7b Support systemd optional prefix '-' for devices. a0c7bb26a Fix a copy/paste error in an error message ba4586375 chore(deps): update dependency requests to ~=2.29.0 d905e412e Fix simple typo in podman-network-create.md a027bf102 e2e cleanup: push with auth: add error checks eeb210bc5 e2e: remove "-it" from podman run & exec 64959b744 pkg/machine: rework RemoveConnection() 2296e71e3 machine: qemu only remove connection after confirmation c8e423b55 Add file swith for pre-exec 6aaf6a284 system reset: show graphRoot/runRoot before removal e95e9be76 fix manifest annotate help bdf367958 Netavark userns test: give aardvark time to come up bbe9d61c4 sqlite: move first read into a transaction f3c3ef72d Recover from failed podman machine start d222a392c rootless: support joining contianers that use host ns 0e955bec7 auto-update: return errors when checking for updates fc8bd4521 [skip-ci] Update dawidd6/action-send-mail action to v3.7.2 ed6b19fef fix(deps): update github.com/containers/common digest to 46c4463 230ddbe0c Add user mode networking feature to Windows 3216110de system/reset.go: help: fix typo ae5ed6d85 e2e create same-IP: try to fix flake faeed14f6 system tests: safer container-stop signaling 6014f26c4 Revert "Resolve symlink path for qemu directory if possible" c5a928c5b ps: --format {{.State}} match docker output b4eecd908 test/system/260-sdnotify.bats: fix test flake 1361c6a33 [CI:DOCS] Quadlet: clarify overriding user/system services fb3b92b96 Eliminate transient container deps from wslkerninst dd217d8e0 Wording d16c880fb fix(deps): update github.com/containers/common digest to 5547996 70bd096e4 cmd/podman/pods: omit superfluous runtime.NumCPU call 1f1525f2e support `--digestfile` for remote push d640461ce e2e: skip journald test if journald is unavailable 5156ab996 Cirrus: Enable testing on Fedora rawhide 8a3265f65 [CI:BUILD] Cirrus: remove copr rpm build task 77f86f48e chore(deps): update dependency setuptools to ~=67.7.0 03a7c6a91 Cirrus: Drop benchmarks artifacts 15664b4b0 test/e2e: correctly reap service process c9d861023 test/e2e: add missing options to remote service 1f45c715d test/e2e: fix incorrect usage of CreateTempDirInTempDir() 601d228ca test/e2e: "podman-remote send correct path to copier" do not leak file 08c651016 test/e2e: fix network create flake due same subnet 525c27fe1 test/e2e: fix SkipIfNotActive() 01d518a97 test/e2e: do not try to use docker as rootless 6e97976ad test/e2e: do not leak "hello" file 750442d09 podman-remote logs: handle server error correctly 3aaa2793d test/e2e: use custom network config v2 00fdfa063 rename ImagePushReport to ImagePushStream 81621ce8a Specify format to buildah before commit 7382494ca Add eBPF snooper that traces the entire fork/exec graph of podman edb64f8a7 libpod: stop containers with --restart=always 0364aef1e test: fix race when listing cgroups b65ab52d8 compat: Translate `noprune` into ImageRemoveOptions.NoPrune 346483717 [CI:DOCS] Update RELEASE_PROCESS.md 8019dc9e6 hyperv: add podman socket mapping a089f1b5c e2e networking test: better way to get host IP bce38c1af Updated system test to be easier to read 5f5bea0d1 bindings tests: bail out early on image errors f2cec7348 libpod: fix TestPostDeleteHooks do not depend on version 8125bab9b chore(deps): update dependency setuptools to v67 a00ed20e0 fix(deps): update module github.com/containers/libhvee to v0.0.5 da83364eb e2e: quadlet uses PODMAN env for podman binary path 6e0cf9344 Fixes format inconsistencies with docker for certain history fields acb24f164 Makefile: do not prefix /etc 7e4cd22ac libpod: configureNetNS() tear down on errors 4f93a6eee libpod: rootlessNetNs.Cleanup() fix error message 4b8230119 HyperV: wait on stop 3cdaf85d6 build(deps): bump github.com/docker/docker 459f751ae Makefile: include `release-artifacts` target 3222545ad Enabled network over vsock aec7ce4a1 fix(deps): update module github.com/microsoft/go-winio to v0.6.1 64b26df60 fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2 41d516412 fix remote start --filter 1cac53506 Update API reference to include v4.5 a0204f1dd Add missing security options to /info response de5fa9ce9 Add mention of redir to doc `rootless.md` 08f137aec fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0 8e7f98ae6 docs(readme): add status badges and remove hardcoded release info e9356ba20 Don't use bytes.NewBuffer to read data f488d9890 Add support for HVSOCK on hyperv e7a323635 docs: update network tutorial with netavark DHCP support 32344952a bump main to v4.6.0-dev 54ba17f69 Remove disused test/install 1fa4e45a9 Return title fields as a list be148665c [CI:BUILD] Packit: Initial Enablement 4aced7e3e Quadlet - do not set log-driver by default 51b582d0e system tests: address COPY-hardlink flake 25d4ecf47 chore(deps): update registry.centos.org/centos/centos docker tag to v8 31420112c system tests: fix race in kube-play read-only f544971b7 chore(deps): update dependency docker to v6 f95276bfa CI: enable sqlite system tests d28656403 test: enable test_wait_next_exit f312c8533 Update dependency PyYAML to v6 f67d640b8 test/e2e/systemd_activate_test.go: simplify test 5315c0cc7 Update docker.io/library/golang Docker tag to v1.20 b4cfc727b api: auth: fix nil deref 176c329f9 Update dependency requests-mock to ~=1.10.0 b75ee05d3 Update dependency requests to ~=2.28.2 d38b22d50 fix: Document removing anonymous volumes at create fe22299f9 Use a sane polling interval in WaitContainerDocker bb2deef8e podman: added the --out option for capturing formatted output emitted by various commands 785c63c0f Renovate: Ensure release-note-none label is added 4bc4609d8 Renovate: Update ignore paths 64ea5971a *: migrate image registry to registry.k8s.io 4f5f89cf8 Do not display the resource limits warning message Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-08-01 14:42:25 -04:00
Peter Marko	07a578d49c	podman: ignore CVE-2022-2989 and CVE-2023-0778 ... NVD shows only redhat links and does not mention fixed-in release se these CVEs will show-up in reports indefinitely. They are already fixed in current version, so ignore them. CVE-2022-2989 * https://github.com/advisories/GHSA-4wjj-jwc9-2x96 * https://github.com/containers/podman/pull/15618 * commit d82a41687e614d9ac8b2d169dee47fe226835e4c Add container GID to additional groups CVE-2023-0778 * https://github.com/advisories/GHSA-qwqv-rqgf-8qh8 * https://github.com/containers/podman/pull/17528 * commit 6ca857feb07a5fdc96fd947afef03916291673d8 volume,container: chroot to source before exporting content Signed-off-by: Peter Marko <peter.marko@siemens.com>	2023-08-01 14:41:46 -04:00
Bruce Ashfield	f634a540c4	podman: update to 4.5.1 ... Bumping libpod to version v4.5.1-6-gdae7df5a1, which comprises the following commits: 3d7aba056 completion: fix panic in simplePathJoinUnix() 9de891616 RPM: bump gvisor-tap-vsock subpackage and fix packit scripts 5933be9ba Bump to v4.5.2-dev 9eef30051 Release v4.5.1 777ddfc42 [CI:DOCS] Final release notes for v4.5.1 2b045de48 [CI:BUILD] Packit: set propose-downstream action type to pre-sync b1281ae46 Revert "Resolve symlink path for qemu directory if possible" 8b35bbab9 no need for podman-next rpm test on maint branch 6652633ce [CI:BUILD] Packit: add jobs for downstream Fedora package builds 97ec57da5 libpod: configureNetNS() tear down on errors d812087d1 libpod: rootlessNetNs.Cleanup() fix error message 083894a22 network create/update: allow dns servers comma separated 1575b3a7f machine: fix default connection URL to use 127.0.0.1 1e86d0a75 compat: accept tag in /images/create?fromSrc 7d0e4a644 compat container create: match duplicate mounts correctly dc21698d6 machine: qemu only remove connection after confirmation 02b9f4f5d windows: podman save allow the use of stdout 66fb7c9bb remote: exec inspect update exec session status 5b21c38c8 podman-remote logs: handle server error correctly 9558af2c4 libpod: stop containers with --restart=always 0f18a0144 Do not include image annotations when building spec bc2f0115d [v4.5] system tests: fix race in kube-play read-only Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-07-25 14:54:20 -04:00
Bruce Ashfield	86d7836cd4	podman: update to 4.5.0 ... This version introduces envsubt in the install stage, so we add gettext-native to our build dependencies. Bumping libpod to version v4.5.0-14-gc926b12c5, which comprises the following commits: bc2f0115d [v4.5] system tests: fix race in kube-play read-only 696c2d40d api: fix parsing filters 1fa2eb53b Support systemd optional prefix '-' for devices. 74634a46c *: migrate image registry to registry.k8s.io 0fb11cccd Makefile: include `release-artifacts` target 4d2cf293e [CI:BUILD] Packit: Initial Enablement da927a75c Bump to v4.5.1-dev 75e3c1257 Release v4.5.0 32a6892b6 [CI:DOCS] Final release notes for v4.5.0 5de2a13e0 Quadlet - do not set log-driver by default c5e704c82 Return title fields as a list bf6f58b02 Bump to v4.5.0-dev f3c365887 Bump to v4.5.0-RC2 15c302533 Final release notes for v4.5.0-RC2 af7c25811 test/e2e: remove unnecessary SkipIfNetavark() calls 80652cacf test/e2e: deduplicated network test b526839a4 docs: update podman-network-create.1 ed99a979c network create: add --interface-name 676486a85 test/system/252-quadlet.bats: fix flake 1bf5bdc68 Read kube_generate_type from containers.conf 11ac0d03e Debian setup: workaround for runc /dev/char/10:200 bug 38c217a0b pkg/rootless: use catatonit from /usr/libexec/podman bab95de9a rootless: make sure we only use a single pause process 3b2b1441e Use atomic config writing strategy for podman machine config files 67307603b Add remaining release notes for v4.5.0-RC2 d53871cf1 GHA: Use version instead of SHA for actions 25bc7d161 chore(deps): update dependency containers/automation_images to v20230405 944accffa build: pass env by reference 7edf73dfd test: retrofit error message b624ad757 test/system: expect 12 char for short id 260bc3ec4 vendor: bump containers/(storage, common, buildah, image) c5a0d8646 [skip-ci] Update actions/upload-artifact action to v3 d3cf8ccf8 [skip-ci] Update actions/stale action to v8 21fbd5c1a [skip-ci] Update actions/setup-go action to v4 f3971e412 [skip-ci] Update github/issue-labeler action to v2.6 c4e79fc16 Fix up codespell errors a5dd5c20e Capitalize all uid,gid and id words that are not options in docs 352a41e3a build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools 13135f924 Properly remove the service container during kube down f6a50311c quadlet: add `UserNS` option key 29aac4dfe [CI:DOCS] Release notes for 4.5.0 Part 1 358b46225 "podman pull by digest and list --all" test: untag instead of rmi f417861e0 build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0 43e6bc9d9 Add renovate.json configuration cf6f13704 CI: postbuild step: skip under nightly treadmill db9785ba5 The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case dc9a65e34 test/e2e: use custom network config dir where needed 35165df37 chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml` b858c7e7f update completion scripts for cobra v1.7.0 e4aad8f0f libpod.storageService.CreateContainerStorage(): retrieve ID maps d0ffb8792 Fix invalid pod name and hostname during kube generate 761eca9e7 e2e tests: fix racy flakes 56e7b511e Cirrus: Enable labeling of EC2 VMs 74f9fd8e6 Cirrus: Fix aarch64 clone_script 404 errors ce8a3a0c1 e2e: GinkgoParallelNode() -> ...Process() 45b1099ef build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0 34a5c7f15 build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0 10d2e9fde [CI:DOCS] --creds and registries 9b7fd3936 Copr: fix build deps for /usr/bin/envsubst 80f9f8077 Don't error when removing non-existant env vars ecce01e61 e2e: healthcheck on stopped container: fix flake cb7b8fb31 test/apiv2/80-kube.at e1be7d141 test/apiv2/80-kube.at 1f3ae8a4f system service: do not close Body bb70d60f1 rm `hack/release.sh` 704901d11 build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6 243ca7c28 add `quadlet -version` flag 7eb78f8a7 add version/rawversion package 53b16ccd2 quadlet: use `Flag` suffix for variables 443f8d89c quadlet: implement `Tmpfs` option 91ca15e96 Bump to v4.5.0-dev 3e48017d8 Bump to 4.5.0-rc1 b7175a366 Update release notes from 4.4 branch 2051e54e0 rootless netns: recover from invalid netns 99ace1908 System tests: unverbosify a flake log 68dbddd97 Add support for secret exists 78e7ade0d Fix Win install task failures with large PR bodies 21febcb5c docs: add `starting` to `HealthCheckResults.Status` d7051d745 Add support for cgroup_config from containers.conf 4d56292e7 libpod: mount safely subpaths 4f9019406 Support Deployment generation with kube generate 8b6a7c182 Use secret.items to create volume mounts if present 359f40869 [CI:DOCS] fix typo in --systemd option 266cc7882 rootless: drop preexec hook error message 3c9ce3e52 Edit the docker wrapper to use the install prefix 5643058c8 Update podman-for-windows.md d79519e70 Quadlet: RemapUsers documentation fixes 7f8d5e565 speed up image listing f0cfbbe2c vendor containers/common@e27c30ee9b 70abb4ae5 fix volume-plugin-test flake b3e8791f6 Document building Podman remote on Windows hosts c40eaa242 test/e2e: gpg keep stdout/err attached f131eaa74 auto-update: stop+start instead of restart sytemd units b7a8e1285 [CI:DOCS] Improve basic tutorial be7827c7e Update docs/source/markdown/podman-network.1.md c335ff241 Add debug to --wait test 81e5bffc3 fix slirp4netns resolv.conf ip with a userns 11e5c2d0f Quadlet: add support for keep-id with mapping values b5df38c23 Quadlet E2E test - run quadlet as user generator cdb5b3e99 sqlite: do not `Ping()` after connecting da96ff6cc Quadlet - treat paths starting with systemd specifiers as absolute dd8ee49f6 Update docs/source/markdown/podman-kube-play.1.md.in d85c8d7e8 system tests: use CONTAINERS_CONF_OVERRIDE 51d068ecc implement podman machine set for hyperv 46b826a90 [CI:DOCS] Add network subnets info to network man page dd8574022 CI: retry the golangci install 92e0efc5d system tests: fix racey sdnotify test 518eafaa3 hyperv: lookup machine on local filesystem first 4c72fc26b fix os.IsNotExist() CI check 7daab31f1 Ensure that SQLite state handles name-ID collisions 64ba82601 macos pkginstaller: do not fail when podman-mac-helper fails 4f3cbf15c podman-mac-helper: install: do not error if already installed ade46ae6a build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5 e061cb968 Fix a race around SQLite DB config validation c5fc44582 add CONTAINERS_CONF_OVERRIDE 5f86fae71 vendor containers/common@main 6825740fc docs: minor grammar fix in `--volume` description b31d9e15f sqlite: do not use shared cache 9be4a525f test: podman checkpoint/restore the latest container 5185e7e39 stats compat API: return "id" lowercase 5f274e45f Run make codespell 3925cd653 Drop SQLite max connections 0fbc32515 sqlite: set connection attributes on open 9f0e0e833 Fix database locked errors with SQLite cf5df5b80 quadlet tests: skip on RHEL8 rootless cb24d6c3d Kube Play Doc: Document the support for K8S Secret 6b2101bc7 New ulimit test: bump up minimum nfiles 5447e88b4 logformatter: hide --db-backend, and friendlyize quadlet 5382997e0 Quadlet - add support for relative path in Volume key in .container file 3e405a2fd Add service ctr cleanup to PlayKubeDown 956341543 fix --health-on-failure=restart in transient unit 26d5df77d Quadlet Doc: Suggest the kill operation for HealthOnFailure 5d1342fc5 Quadlet - Add support for health checks configuration in .container files 3ef707def Makefile: allow specifying /lib dir location a5abbdf1f Fix option --opts -> --opt 0dac214f5 basic hypverv machine implementation 94f905a50 Fix SQLite DB schema migration code 46d165040 Add support for oom_score_adj value from containers.conf 6046832f3 Use default_ulimits field in containers.conf e2d49fb65 CI: test and confirm DESIRED_DATABASE 1ea62f32f build(deps): bump github.com/openshift/imagebuilder 526dfb893 logformatter: futureproof output filename e21cf2d8d Vendor in latest containers/(storage, common, image) 686bdcc29 build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.30.0 ba141adce test/system/255-auto-update.bats: add debug logs c2a24abc0 Revert "Revert "pasta: Use two connections instead of three in TCP range forward tests"" 3a59af219 Add information for secret inspect 87e93a7b6 Add format to podman volume ls b424f8fb0 Add format to podman volume inspect 2555c8034 Add format to podman secret ls 1c4bd4a73 Add format to podman system df 71bcd9891 Add format to podman machine info 581611844 Add format table to podman image inspect man page e92955245 Cirrus: Store podman machine benchmark data b3035b9d6 Update Cirrus display names, and fix get-ci-vm script 6142c16a9 Ensure SQLite places uses the runroot in transient mode 2ec11b16a Fix various integration test issues with SQLite state 0f8530b1e Remove test for pod/container name global uniqueness 6e0f11da5 Improve handling of existing container names in SQLite 39fd9aa08 Add SQLite job to CI 7ed1c7fd9 buildah treadmill: also run rootless tests 2b4a27719 build(deps): bump github.com/vbatts/git-validation in /test/tools 3c51b61d7 auto update: return restart error ea2a0767a fix: Document removing anonymous volumes 408e764b9 events: no duplicates when streaming during a log rotation 82f2f8258 Add search --cert-dir, --creds bae07b6ea podman-mac-helper: exit 1 on error 7d8d3e810 system service --log-level=trace: support hijack eed389508 test/system: fix wait_for_port() to wait for bind 2d1f4a8bf cgroupns: private cgroupns on cgroupv1 breaks --systemd 01fd5bcc3 libpod: remove error stutter 4562e61d2 podman events: unhide --stream 7a7af735a test/system/255-auto-update.bats: multiple services 40d0d233e 255-auto-update.bats: turn off rollback where needed a9d70e9fe Use append() to add elements to a slice 1c08f2eda Revert "pasta: Use two connections instead of three in TCP range forward tests" ad8a96ab9 Support running nested SELinux container separation 159936a11 bud tests: rootless remote: use correct socket path 6f9f395b3 build(deps): bump github.com/vbauerster/mpb/v8 from 8.2.1 to 8.3.0 bad41f67e compat: /auth: parse server address correctly 6363fb08f docs: fix cmd `set DOCKER_HOST` suggestion fb4f6f95c test: reenable idmap test b5a99e081 Must use mountlabel when creating builtin volumes 8d952c01d podman.spec.rpkg: distro conditionals for modulesloaddir 9294b7350 build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0 21651706e podman inspect list network when using --net=host or none f928cf54a pasta: Re-enable "Local forwarder, IPv4" test, accept NXDOMAIN as response 829e910cd build(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 in /test/tools cc7a1e614 CI: Switch to c20230307t192532z-f37f36d12 images 799c20177 Cirrus: Run system & integration tests in parallel c03cb5718 Update checkpointctl v0.1.0 cb3cda55f Quadlet: add support for setting --ip and --ip6 af7a759e9 build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0 5d039ce22 build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0 34ff27b81 libpod: avoid nil pointer dereference in (*Container).Cleanup 25dd4d653 [CI:DOCS] Add image not found info to troubleshooting 0498ce3a5 cmd: do not require userns for "version" 2860d55c9 cmd: drop special handling for "scp" da04469f0 cmd: clarify meaning of ParentNSRequired 0ab4b2614 Fix package restore 0d219486f [CI:DOCS] Fix docs/version-check always requesting updates e77f370f8 sqlite: add a hidden --db-backend flag cca65db01 fix: update the default machine value when the previously set default machine is deleted 9ac0d4f1a podman machine: Adjust Chrony makestep config 2c67ff5d4 sqlite: add container short ID to network aliases 38acab832 sqlite: remove dead code 2342d1a31 sqlite: addContainer: add named volume only once 86d12520e sqlite: implement RewriteVolumeConfig df88f546b sqlite: LookupVolume: fix partial name match 01359457c sqlite: LookupVolume: wrap error 69ff04f73 sqlite: fix type rewriting container config e87014e44 sqlite: return correct error on pod-name conflict 84b5c6c71 sqlite: RewritePodConfig: update error message 51cf2dd36 test/system/255-auto-update.bats: wait 10 for update to finish b727f30ac auto-update test: wait for service to be ready 76056c670 Vendor in latest containers/(common, storage, image) 20a42d0e4 play kube: Add --wait option 6babef598 Cirrus: Fix git config permission denied ccc5aa59a Quadlet: Add support for the Mount key in .container files 6f09dbc2d build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2 77861d6af fix "podman logs --since --follow" flake 6d352dc0b Clarify that replicas are ignored in kubernetes deployment 42540a667 Revert "Skip all pasta tests" e804ddc5a CI: Switch to c20230223t153813z-f37f36d12 images 070572245 Fix user socket path 1e516e657 pkginstaller: bump Qemu to version 7.2.0 0f92e19e8 Cirrus: Fix bud tests failing to apply patches 1ef8a860c build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2 b00874c16 build(deps): bump github.com/coreos/stream-metadata-go 9d93486d2 Vendor in latest containers/storage d838c08b3 buildah-bud tests: don't sudo when rootless is desired 1f6f81f5d Temporarily disable version-check 5a08ddaec CI: new rootless buildah-bud tests (cron only) 5d2d609be sqlite: fix volume lookups with partial names 495314a16 sqlite: fix container lookups with partial IDs efe7aeb1d sqlite: fix LookupPod 19c2f37ba sqlite: fix pod create/rm e32bea937 sqlite: LookupContainer: update error message 565bb5645 sqlite: AddContainerExitCode: allow to replace 4b3b94473 system: add warning when running rootless on cgroupv1 1b1cdfa35 sqlite: fix AllContainers with state 21fcc9070 sqlite: fix "UPDATE TABLE" typos 3f96b0ef2 sqlite: SaveVolume: fix syntax error updating the volumes table 7c11f7e17 sqlite: exit code: allow -1 e74f7bcaf sqlite: fix typo when removing exec sessions 560805ac4 sqlite: AllContainers: fix inner join 8c64c4370 sqlite: move migration after table creation eeabe975e sqlite: implement pod methods 0d75854c5 Quadlet - use the default runtime 49d560e1b docs: context is not optional for build 03aaa8d35 Fix an incorrect comment on NewSqliteState eb228f264 Add support for containers.conf database setting 59a54f32d Add support for volume operations to SQLite state c0b92bdbc Implement exec session handling in SQL database 627a5b73b Various fixes from code review c4fe0af2a Remove `--namespace` flag from Podman root 89d0ccd19 Get E2E tests to pass 97499a70a Implement network disconnect for SQLite state 939a4ccef Implement Network Connect/Modify for SQLite state 8ab18d848 Fix various lint issues b4c4f9c93 Some further work on SQLite state 5c2a0670f Remove concept of Namespaces from BoltDB 1b968c607 Add initial SQLite-backed state implementation 93e7cc119 Cirrus: Support runc testing on debian VMs 81f116c59 Skip all pasta tests 642e9ddb8 Skip buildah-bud test 10382d0bc Skip buildx test with VFS podman storage driver dd51b62b7 Skip 'podman kube --network' test for rootless CGv1 197529f08 Skip tests which fail with CGv1 & runc 5b4f248a8 Skip rootless CGv1 quadlet tests due to issue e19922d09 Makefile: Define SHELL 43eb35a77 Machine refactor for QEMU/AppleHV e838ad86b machine refactoring preparations for hyperv b4471c6ed [CI:BUILD] spec.rpkg: trim dependency list 12153da83 Logs follow-until tests: loosen checks 7d17ec07f [CI:DOCS] Windows/Mac docs link update 7f5fc04b4 Doc update for docker network options via CLI 4b4b423b6 compat API: network create return 409 for duplicate 40f21da0c Apply suggestions to man page adacd3b12 vendor c/common@852ca05a1f 6a3757b73 Quadlet: Add support for LogDriver key in container and kube units ebb45b5bd machine refactoring preparations for hyperv af8d649da libpod: always use direct mapping 9dc730d9f netavark: only use aardvark ip as nameserver e9942c61d build(deps): bump github.com/container-orchestrated-devices/container-device-interface 79a05ca2b podman logs passthrough driver support --cgroups=split d7e96536e journald logs: simplify entry parsing 1590c7bf4 podman logs: read journald with passthrough 5754df806 make docs: sanity check for broken man pages 5056bd45f build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.6 to 8.2.0 5fcd2c3fa build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1 2659a3228 kube: rm secret on down, print secret on play 9ce589a4a Fix spacing typo that triggered OCD & indent units in podman-systemd.unit(5) ad866fecb Update remote_client.md e74f60dee [CI:DOCS] Add restriction to option README 975b096bc Revert "CI: Temporarily disable all AWS EC2-based tasks" 22a207d45 build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0 c95978f60 kube play: only enforce passthrough in Quadlet 21cddd723 journald: remove initializeJournal() 6dd797844 auto-update: support pods 9622d25be Emergency fix for man pages: check for broken includes c81fbd5d0 System tests: assert(): friendlier failure messages 761da776a Cirrus: Fix version-check to only run on `main` job 7f8bc6f51 CI: Temporarily disable all AWS EC2-based tasks 6f5ca7318 build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18 6ca857feb volume,container: chroot to source before exporting content 94d4b5278 Support sysctl configs via podman kube play 510e44359 [CI:BUILD] copr: podman.spec.rpkg cleanups a4677405c quadlet system tests: add useful defaults, logging 96af9e4e0 libpod: support relative positions for idmaps c7ee65596 Experimental workaround for cdn03.quay.io flake 86e55d0ec system tests: prevent leading tabs 9abe8c785 Introduce podman machine os apply 828708bac create: add support for --group-entry 33a918711 fix != filter in volume prune 4c5b79120 Allow specification of podman --remote build -f - 3d8936642 Quadlet use crun specified in containers.conf 9f84b9b52 build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0 86a4c6b65 Vendor c/image after https://github.com/containers/image/pull/1847 c0f983db8 Don't set hostPort when generating a service 3a9d14d4e man page --format xref: tighten the autocompletion check 0999991b2 add support for limiting tmpfs size for systemd-specific mnts 9a1f47887 build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0 35d16ea02 Add ulimit annotation to kube gen & play 34d412e13 man page xref: validate displayed man page names 7c54d1423 quadlet: add ExecStop d2ac85f7a install sigproxy before start/attach 191e4ce40 build(deps): bump golang.org/x/tools from 0.5.0 to 0.6.0 in /test/tools a5ca73225 Fix typos 45fb353f4 Cirrus: Make benchmarks .env file easier to load a7db3e8d2 Cirrus: Omit functions in env. file 1541ce56c kube play: set service container as main PID when possible 08e13867a Fix typos. Improve language. 9cba0474b events + container inspect test: RHEL fixes 5a9074dab Add ctrName to network alias during kube play 586515976 Run codespell on codebase c7619c8ae podman image scp: added identity for ssh.Exec fb54be2e1 [CI:DOCS] Clarify nomap constrains 433413549 [CI:DOCS] man-page checker: include --format (Go templates) e308ba021 Vendor c/image after https://github.com/containers/image/pull/1816 ec4ab08c8 [CI:DOCS] Cleanup some man pages to display options with line breaks 5ed217409 [CI:DOCS] Add tables to podman-systemd.unit man page 3de409ad6 github: remove prefix from bugs/features d6dd17fdf Quadlet: Add support for the Secret key in Container group 08d28bfc2 [CI:DOCS] OWNERS: add @ygalblum and @alexlarsson 47df0ca25 build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0 ded44be16 build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.1.6 42c7c59dd Sort quadlet keys to make it easier to read 43b357068 e2e: fix some tests on remote 83367a6b3 kube play: do not teardown unconditionally on error ac71fa01c Fix typos in comments 6b6458916 Resolve symlink path for qemu directory if possible 90eb834e7 #17363 Fix contradicting documentation podman-commit 1916da596 Fix a potential UID/GID collision in unit tests 93c35a703 golangci-lint: show all errors at once 77e4b1939 update golangci-lint to version 1.51.1 1fd0ce71d [CI:DOCS] events: document journald identifiers f1352521f Quadlet: exit 0 when there are no files to process ced934284 network ls: handle removed container 315215020 e2e: adapt play kube test on remote rootless 4e8906c5e docs/podman-systemd.unit: Explicitely mention network & kube units c4f338eec docs/podman-systemd.unit: Update example to work out of the box 50f72fe7b [CI:BUILD] Cirrus: Fix GraphQL ownerRepository:null error 83a0e97ab Add missing return after errors 84c674fee Revert "Cirrus: Emergency fix to un-stuck PRs" af0f10a22 pasta: Fix ICMPv6 Echo test, skip it for the moment 859579b6b pasta: Fix ICMP Echo Request (IPv4) test e33f4e0bc pasta: Use two connections instead of three in TCP range forward tests acaab3fa7 Add SELinux label types support to quadlet 928d589b7 Add quadlet support for rootfs= containers 6b3073f53 Cirrus: Emergency fix to un-stuck PRs 8441f01be Move clean-binaries before podman-remote in podman-remote-docs target aa0d4b266 oci: bind mount /sys with --userns=(auto|pod:) e6904f6f8 Cleanup podman-systemd.unit file 3c3526e53 Install podman-systemd.unit man page, make quadlet discoverable de63ad704 libpod: allow userns=keep-id for root 9e7f1bea4 system-reset: use CleanCacheMount to clear build cache 5ca35d6de vendor: bump buildah to v1.29.1-0.20230201192322-e56eb25575c7 3ce07b556 system tests: fix noexistent labels test in the remote a909e2f2d Expose Podman named pipe in Inspect output 2bb4c7cdd libpod: support idmap for --rootfs ed1f76917 test: adapt test to work on cgroupv1 ed18cdd6e Bump to v4.5.0-dev b6d91ebfb Update main to reflect v4.4.0 release be47eeb85 Update from /github.com/vbauerster/mpb/v7 to /v8 8aa377698 hack/perf: cleanup after benchmarks cb5a9e9f4 hack/perf/bz-2162111.sh: use custom network a1436d8fb Update bug_report.yaml 02bcf0bac Handle filetype field in kubernetes.yaml files 1a786ea53 hack/perf/bz-2162111.sh: measure stop bd8937c50 make hack/markdown-preprocess parallel-safe 68371ff55 system tests: fix volume exec/noexec test f69efb6ee system tests: minor fix for RHEL8 incompatibility cf7afed05 Cirrus: Use versionable IMAGE_SUFFIX cbb45a6d4 utils: new conversion method 0e949bfd3 libpod: use GraphRoot for overlay upper dir 427d69cc3 vendor: update containers/storage d10860a32 Do not mount /dev/tty into rootless containers 5c059e3ed build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7 9272cabd3 e2e: fix run_staticip_test about no_proxy 2e397120d docs: specify order preference for FROM 15594e92e Fixes port collision issue on use of --publish-all 952049fe5 Support for Windows paths in the source position of the volume mounts 0e3524b8b e2e tests: fix incorrect os.User.Name 7c60a784c Log data that we failed to unmarshal 61db1d5aa [CI:DOCS] hack/perf: add script for BZ 216111 29b346dea container rm: save once for exec removal and state change 8f2a40d81 [DOCS:CI] podman-events: document verbose create events 7e80edd3a e2e: Avoid hard-coding included in quadlet test 2682d3ad9 e2e: Avoid hard-coding ImageCacheDir 387f0ea2f Making gvproxy.exe optional for building Windows installer 74c090973 Add gvproxy to Windows packages ab8e49d74 Add comment to clarify error handling intention 12d70446f fix #17244: use /etc/timezone where `timedatectl` is missing on Linux 063e273e9 Fix usage of absolute windows paths with --image-path b0b166b5b Match VT device paths to be blocked from mounting exactly 553e53d44 Fix default handling of pids-limit 069edc3ad Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml) e51991030 journald: podman logs only show logs for current user 2ab90f2ed journald: podman events only show events for current user 21b82bb68 e2e: Remove the cache with "podman unshare rm" when a rootless user 9db657f40 Clean up more language for inclusiveness 814f7c569 e2e: Remove some directories at SynchronizedAfterSuite 497be102a fix: don't output "ago" when container is currently up and running b28519fd9 fix: running check error when podman is default in wsl a745d99a8 fix CI: test fail due to merge f3d8f6c49 Bump Bulidah to v1.29.0 38d5319f1 e2e: reduce dependency on /tmp for e2e tests 0ffce8181 Bump cirrus image with easier dependency management e62e42bfa quadlet: Add device support for .volume files 70e8f6243 remote,build: error if containerignore is symlink c74bdae35 DB: make loading container states optional 6132c4d54 ps: do not sync container 958c94094 Set runAsNonRoot=true in gen kube 7aef3301d WSL refactoring 08186d7dd kube-play: add support for HostIPC in pod.Spec 8850db961 Allow --device-cgroup-rule to be passed in by docker API Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-06-07 16:40:21 -04:00
Bruce Ashfield	c5f7a698bc	podman: update to 4.4.3 ... Bumping libpod to version v4.4.3-2-g6172f29f9, which comprises the following commits: 2c01aa7e3 Bump to v4.4.4-dev d2f93d621 Bump to v4.4.3 2ae3c4fe9 Release notes for v4.4.3 d6ea3983d compat: /auth: parse server address correctly 0a897f03f vendor github.com/containers/common@v0.51.1 f7fccc87c pkginstaller: bump Qemu to version 7.2.0 53212ea0e podman machine: Adjust Chrony makestep config 06925d554 [v4.4] fix --health-on-failure=restart in transient unit 9c0d2dc2f podman logs passthrough driver support --cgroups=split a0fad9f8c journald logs: simplify entry parsing 54b070ee6 podman logs: read journald with passthrough c5fa9c50f journald: remove initializeJournal() 6b19e1437 netavark: only use aardvark ip as nameserver d737a815a compat API: network create return 409 for duplicate 1a3a5594a fix "podman logs --since --follow" flake bd65bf2ed system service --log-level=trace: support hijack 8ab00424b podman-mac-helper: exit 1 on error badbd8a34 bump golang.org/x/net to v0.8.0 36ab43f77 Fix package restore df0fe4fcc Quadlet - use the default runtime 594d488b8 Bump to v4.4.3-dev 74afe2688 Bump to v4.4.2 87a1c2701 Release notes for v4.4.2 3abff420a Revert "CI: Temporarily disable all AWS EC2-based tasks" 8322cab91 kube play: only enforce passthrough in Quadlet d69512b98 Emergency fix for man pages: check for broken includes 9606d7f99 CI: Temporarily disable all AWS EC2-based tasks ab7a47840 quadlet system tests: add useful defaults, logging 805e94b03 volume,container: chroot to source before exporting content 321d05aa9 install sigproxy before start/attach 84521f52d Update to c/image 5.24.1 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-03-24 15:29:21 -04:00
Bruce Ashfield	b3346bfb26	podman: use VIRTUAL-RUNTIME variable for flexible RDEPENDS ... To make it simpler to vary the container runtime and the networking infrastructure to be used with podman, we use the recently introduced VIRTUAL-RUNTIME variables that control these values. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-03-08 17:08:02 -05:00
Bruce Ashfield	ca33915151	podman: update to 4.4 ... We adjust FILES to pickup new systemd utilities, but otherwise the recipe is unchanged. Bumping libpod to version v4.4.1-6-g73f52c051, which comprises the following commits: 84521f52d Update to c/image 5.24.1 8e5eb9a79 events + container inspect test: RHEL fixes 65c412383 Bump to v4.4.2-dev 34e8f3933 Bump to v4.4.1 7431f3d00 Update release notes for Podman 4.4.1 68a58c9a1 kube play: do not teardown unconditionally on error a1cc3733b Resolve symlink path for qemu directory if possible c3d781de0 events: document journald identifiers 52ae4a2c4 Quadlet: exit 0 when there are no files to process 1ee04fcc7 Cleanup podman-systemd.unit file f3ea36100 Install podman-systemd.unit man page, make quadlet discoverable 2b7ea6442 Add missing return after errors 1d76a166c oci: bind mount /sys with --userns=(auto|pod:) 20d31a0a6 docs: specify order preference for FROM 590186e0d Cirrus: Fix & remove GraphQL API tests 7407ccdc3 test: adapt test to work on cgroupv1 c2971a66a make hack/markdown-preprocess parallel-safe 322802e40 Fix default handling of pids-limit 6ce1a11b7 system tests: fix volume exec/noexec test e2a40dfa2 Bump to v4.4.1-dev 3443f453e Bump to v4.4.0 f42972714 Final release notes for v4.4.0 c927ad03b Emergency fix for RHEL8 gating tests ef4e7b8c7 Do not mount /dev/tty into rootless containers bbaa54258 Fixes port collision issue on use of --publish-all c3566cda4 Fix usage of absolute windows paths with --image-path 9eb960707 fix #17244: use /etc/timezone where `timedatectl` is missing on Linux 5c94568e9 podman-events: document verbose create events 45b00b648 Making gvproxy.exe optional for building Windows installer 63f964c08 Add gvproxy to Windows packages 579c5dc80 Match VT device paths to be blocked from mounting exactly 605079dc8 Clean up more language for inclusiveness f4bf448d8 Set runAsNonRoot=true in gen kube 45b9e17d7 quadlet: Add device support for .volume files 92bae973c fix: running check error when podman is default in wsl edb7779cd fix: don't output "ago" when container is currently up and running 6870dae23 journald: podman logs only show logs for current user cd4590908 journald: podman events only show events for current user 097ca6056 Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml) 916ea3e5d DB: make loading container states optional de84be54e ps: do not sync container 3a65466ba Allow --device-cgroup-rule to be passed in by docker API 36875c265 [v4.4] Bump to Buildah v1.29.0 8ff381f45 Bump to v4.4.0-dev dc3dfce94 Bump to v4.4.0-RC3 425da01d4 Create release notes for v4.4.0 300904a84 Cirrus: Update operating branch 9904fbed3 fix APIv2 python attach test flake 9d1c153cf ps: query health check in batch mode fda62b2d8 make example volume import, not import volume 623ad2a63 Correct output when inspecting containers created with --ipc 2db468204 Vendor containers/(storage, image, common, buildah) c4aae9b47 Get correct username in pod when using --userns=keep-id 6f519c9bd ps: get network data in batch mode 795708f8b build(deps): bump github.com/onsi/gomega from 1.25.0 to 1.26.0 4ed46c984 add hack/perf for comparing two container engines b7ab889a7 systems: retrofit dns options test to honor other search domains 5925fe1a5 ps: do not create copy of container config e2c44c3d4 libpod: set search domain independently of nameservers 06241077c libpod,netavark: correctly populate /etc/resolv.conf with custom dns server 366e1686a podman: relay custom DNS servers to network stack 2b650e37c (fix) mount_program is in storage.options.overlay b29313811 Change example target to default in doc 86699954b network create: do not allow `default` as name 3ae84fe0a kube-play: add support for HostPID in podSpec d0794ab9e build(deps): bump github.com/docker/docker ca91cf416 Let's see if #14653 is fixed or not 8f7886515 Add support for podman build --group-add f65d79f4c vendor in latests containers/(storage, common, build, image) 7be8ff564 unskip network update test b5bfc2654 do not install swagger by default 2ad938ec6 pasta: skip "Local forwarder, IPv4" test 3db8ef37d add testbindings Makefile target 5ad72a234 update CI images to include pasta f07aa2add [CI:DOCS] Add CNI deprecation notices to documentation 07d297ca3 Cirrus: preserve podman-server logs 4faa139b7 waitPidStop: reduce sleep time to 10ms fd42c1dcb StopContainer: return if cleanup process changed state e0f671007 StopSignal: add a comment ac47d0719 StopContainer: small refactor e8b35a8c2 waitPidStop: simplify code 51836aa47 e2e tests: reenable long-skipped build test 36510f60d Add openssh-clients to podmanimage 0bd51f6c8 Reworks Windows smoke test to tunnel through interactive session. b5a6f3f91 fix bud-multiple-platform-with-base-as-default-arg flake ef3f09879 Remove ReservedAnnotations from kube generate specification 6d3858b21 e2e: update test/README.md 17b5bd758 e2e: use isRootless() instead of rootless.IsRootless() bfc5f07d9 Cleanup documentation on --userns=auto 120d16b61 Bump to v4.4.0-dev 24cc02a64 Bump to v4.4.0-rc2 ddf8e4989 Vendor in latest c/common dc2bd0857 sig-proxy system test: bump timeout 193b2a836 build(deps): bump github.com/containernetworking/plugins a581d2a04 rootless: rename auth-scripts to preexec-hooks bdf100179 Docs: version-check updates 79865c290 commit: use libimage code to parse changes bdc323cbf [CI:DOCS] Remove experimental mac tutorial 8db2b4b73 man: Document the interaction between --systemd and --privileged 70057c8b4 Make rootless privileged containers share the same tty devices as rootfull ones 067442b57 container kill: handle stopped/exited container a218960bc Vendor in latest containers/(image,ocicrypt) 6f919af78 add a comment to container removal 5ac5aaa72 Vendor in latest containers/storage daf747f16 Cirrus: Run machine tests on PR merge 4bb69abd5 fix flake in kube system test 9a206fdc9 kube play: complete container spec a02a10f3f E2E Tests: Use inspect instead of actual data to avoid UDP flake c2b36beb4 Use containers/storage/pkg/regexp in place of regexp c433982d1 Vendor in latest containers/storage 11835d5d0 Cirrus: Support using updated/latest NV/AV in PRs d9bf3f129 Limit replica count to 1 when deploying from kubernetes YAML 1ab833fb7 Set StoppedByUser earlier in the process of stopping 6ab883448 podman-play system test: refactor 470b68077 Bump to v4.4.0-dev d8774a93c Bump to v4.4.0-RC1 882cd17f8 network: add support for podman network update and --network-dns-server d2fb6cf05 service container: less verbose error logs b10a906b5 Quadlet Kube - add support for PublishPort key ad12d61c6 e2e: fix systemd_activate_test 758f20e20 Compile regex on demand not in init 3e2b9a28d [docker compat] Don't overwrite the NetworkMode if containers.conf overrides netns. 5b1bdf949 E2E Test: Play Kube set deadline to connection to avoid hangs f4c81b0aa Only prevent VTs to be mounted inside privileged systemd containers a5ce3b3cd e2e: fix play_kube_test 81a3f7cb8 Updated error message for supported VolumeSource types 2bf94b764 Introduce pkg retry logic in win installer task db0323639 logformatter: include base SHA, with history link 37ade6be1 Network tests: ping redhat.com, not podman.io 2d8225cd4 cobra: move engine shutdown to Execute 35d2f61ec Updated options for QEMU on Windows hosts 28f13a74b Update Mac installer to use gvproxy v0.5.0 4cf06fe7e podman: podman rm -f doesn't leave processes 494db3e16 oci: check for valid PID before kill(pid, 0) cf364703f linux: add /sys/fs/cgroup if /sys is a bind mount 1bd3d32c5 Quadlet: Add support for ConfigMap key in Kube section 4a7a45f97 remove service container _after_ pods 07cc49efd Kube Play - allow setting and overriding published host ports 9fe86ec7f oci: terminate all container processes on cleanup 6dd1d48fd Update win-sshproxy to 0.5.0 gvisor tag e332b6246 Vendor in latest containers/common 92cdad031 Fix a potential defer logic error around locking a7f53932a logformatter: nicer formatting for bats failures ee3380e6b logformatter: refactor verbose line-print e82045f73 e2e tests: stop using UBI images 6038200fe k8s-file: podman logs --until --follow exit after time 767947ab8 journald: podman logs --until --follow exit after time c674b3dd8 journald: seek to time when --since is used 5f032256d podman logs: journald fix --since and --follow 7826e1ced Preprocess files in UTF-8 mode 4587e7fdb Bump golang.org/x/tools from 0.4.0 to 0.5.0 in /test/tools eea78ec7b Vendor in latest containers/(common, image, storage) 54afda22b Switch to C based msi hooks for win installer 710eeb340 hack/bats: improve usage message d7ac11005 hack/bats: add --remote option 1a2e54ce6 hack/bats: fix root/rootless logic d0c89e90b Describe copy volume options bfdffb5b6 Support sig-proxy for podman-remote attach and start 6886e80b4 libpod: fix race condition rm'ing stopping containers fb73121c4 e2e: fix run_volume_test 86965f758 Add support for Windows ARM64 f9e8e8cfd Add shared --compress to man pages df02cb51e Add container error message to ContainerState d92bfd244 Man page checker: require canonical name in SEE ALSO 2a16e0484 system df: improve json output code 03c7f47aa kube play: fix the error logic with --quiet 9f0a37cd4 System tests: quadlet network test e47964417 Fix: List container with volume filter cd3492304 adding -dryrun flag 347d5372e Quadlet Container: Add support for EnvironmentFile and EnvironmentHost 68fbebfac Kube Play: use passthrough as the default log-driver if service-container is set 635c00840 System tests: add missing cleanup 8e77f4c99 System tests: fix unquoted question marks 16b595c32 Build and use a newer systemd image a061d793d Quadlet Network - Fix the name of the required network service 3ebb822e2 System Test Quadlet - Volume dependency test did not test the dependency a741299ef fix `podman system connection - tcp` flake 1d3fd5383 vendor: bump c/storage to a747b27 598b93722 Fix instructions about setting storage driver on command-line 18b21b89c Test README - point users to hack/bats 2000c4c80 System test: quadlet kube basic test 479052afa Fixed `podman update --pids-limit` 553df8748 podman-remote,bindings: trim context path correctly when its emptydir 9f5f092f1 Quadlet Doc: Add section for .kube files 200f86ede e2e: fix containers_conf_test 0c94f6185 Allow '/' to prefix container names to match Docker 0c6805880 Remove references to qcow2 1635db474 Fix typos in man page regarding transient storage mode. 85ceb7fb5 make: Use PYTHON var for .install.pre-commit 338b28393 Add containers.conf read-only flag support d27ebf2ee Explain that relabeling/chowning of volumes can take along time 45b180c1f events: support "die" filter 1e84e1a8d infra/abi: refactor ContainerRm 3808067ff When in transient store mode, use rundir for bundlepath 0179aa245 quadlet: Support Type=oneshot container files 236f0cc50 hacks/bats: keep QUADLET env var in test env 97f9d625a New system tests for conflicting options bfec23c36 Vendor in latest containers/(buildah, image, common) 24b1e81c5 Output Size and Reclaimable in human form for json output 4724fa307 podman service: close duplicated /dev/null fd 8e05caef6 ginkgo tests: apply ginkgolinter fixes 3e48d74c8 Add support for hostPath and configMap subpath usage 3ac5d1009 export: use io.Writer instead of file 1bac16096 rootless: always create userns with euid != 0 90719d38f rootless: inhibit copy mapping for euid != 0 02555d166 pkg/domain/infra/abi: introduce `type containerWrapper` 987c8e3a7 vendor: bump to buildah ca578b290144 and use new cache API 0cf36684c quadlet: Handle booleans that have defaults better dd428af89 quadlet: Rename parser.LookupBoolean to LookupBooleanWithDefault ddeb9592c Add podman-clean-transient.service service 80de85081 Stop recording annotations set to false 9187df5b2 Unify --noheading and -n to be consistent on all commands 2bbeba70b pkg/domain/infra/abi: add `getContainers` ae706e61b Update vendor of containters/(common, image) 24ab178fb specfile: Drop user-add depedency from quadlet subpackage. e9243f904 quadlet: Default BINDIR to /usr/bin if tag not specified d974a79e2 Quadlet: add network support 070b69205 Add comment for jsonMarshal command d1496afb5 Always allow pushing from containers-storage 0bc3d3579 libpod: move NetNS into state db instead of extra bucket 80878f20b Add initial system tests for quadlets 20b10574d quadlet: Add --user option 4fa65ad0d libpod: remove CNI word were no longer applicable 1424f0958 libpod: fix header length in http attach with logs 12d058400 podman-kube@ template: use `podman kube` 3868d2d82 build(deps): bump github.com/docker/docker f4d0496b5 wait: add --ignore option 461726a3f qudlet: Respect $PODMAN env var for podman binary a4a647c0b e2e: Add assert-key-is-regex check to quadlet e2e testsuite 84f3ad356 e2e: Add some assert to quadlet test to make sure testcases are sane 97f63da67 remove unmapped ports from inspect port bindings fa4b34618 update podman-network-create for clarity 3718ac8e9 Vendor in latest containers/common with default capabilities f0a8c0bd9 pkg/rootless: Change error text ... 290019c48 rootless: add cli validator 71f96c2e6 rootless: define LIBEXECPODMAN 14ee8faff doc: fix documentation for idmapped mounts dcbf7b448 bump golangci-lint to v1.50.1 b1bb84637 build(deps): bump github.com/onsi/gomega from 1.24.1 to 1.24.2 89939dea9 [CI:DOCS] podman-mount: s/umount/unmount/ 46b7d8d1e create/pull --help: list pull policies bddd3f5b5 Network Create: Add --ignore flag to support idempotent script 866426a93 Make qemu security model none fdcc2257d libpod: use OCI idmappings for mounts 4a5581ce0 stop reporting errors removing containers that don't exist 80405a2a5 test: added test from wait endpoint with to long label fd92a6807 quadlet: Default VolatileTmp to off b4d90b2eb build(deps): bump github.com/ulikunitz/xz from 0.5.10 to 0.5.11 f155a4e78 docs/options/ipc: fix list syntax b3c7c1872 Docs: Add dedicated DOWNLOAD doc w/ links to bins f825481a4 Make a consistently-named windows installer 45a40bf58 checkpoint restore: fix --ignore-static-ip/mac 95cc7e052 add support for subpath in play kube for named volumes 364ed81b4 build(deps): bump golang.org/x/net from 0.2.0 to 0.4.0 59118b42b golangci-lint: remove three deprecated linters 08741496d parse-localbenchmarks: separate standard deviation bf66b6ac7 build(deps): bump golang.org/x/term from 0.2.0 to 0.3.0 7bd1dbb75 podman play kube support container startup probe 43e307b84 Add podman buildx version support 7c6873b23 Cirrus: Collect benchmarks on machine instances b361a42e6 Cirrus: Remove escape codes from log files 59ce7cf1c [CI:DOCS] Clarify secret target behavior fe3d3256e Fix typo on network docs 9f6cf50d5 podman-remote build add --volume support 2dde30b93 remote: allow --http-proxy for remote clients 2f29639bd Cleanup kube play workloads if error happens 1ed982753 health check: ignore dependencies of transient systemd units/timers 04ea8eade fix: event read from syslog db4d01871 Fixes secret (un)marshaling for kube play. 7665bbc12 Remove 'you' from man pages 1bfaf5194 build(deps): bump golang.org/x/tools from 0.3.0 to 0.4.0 in /test/tools 97c56eef6 [CI:DOCS] test/README.md: run tests with podman-remote 8b87665f2 e2e: keeps the http_proxy value 9b702460e Makefile: Add podman-mac-helper to darwin client zip c7b936a41 test/e2e: enable "podman run with ipam none driver" for nv 45f8b1ca9 [skip-ci] GHA/Cirrus-cron: Fix execution order 4fa307f14 kube sdnotify: run proxies for the lifespan of the service 7d16c2b69 Update containers common package 75f421571 podman manpage: Use man-page links instead of file names 86f4bd4f5 e2e: fix e2e tests in proxy environment 4134a3723 Fix test 28774f18c disable healthchecks automatically on non systemd systems 1ea00ebda Quadlet Kube: Add support for userns flag 07a386835 [CI:DOCS] Add warning about --opts,o with mount's -o 93d2ec148 Add podman system prune --external f1dbfda80 Add some tests for transient store e74b3f24e runtime: In transient_store mode, move bolt_state.db to rundir 25d9af8f4 runtime: Handle the transient store options 56115d5e5 libpod: Move the creation of TmpDir to an earlier time c9961e18c network create: support "-o parent=XXX" for ipvlan 2f5025a2d compat API: allow MacAddress on container config a55413c80 Quadlet Kube: Add support for relative path for YAML file 8c3af7186 notify k8s system test: move sending message into exec a651cdfbc runtime: do not chown idmapped volumes f3c5b0f9d quadlet: Drop ExecStartPre=rm %t/%N.cid d61618ad4 Quadlet Kube: Set SyslogIdentifier if was not set eaab4b99a Add a FreeBSD cross build to the cirrus alt build task 39b6ccb38 Add completion for --init-ctr af86b4f62 Fix handling of readonly containers when defined in kube.yaml 98a1b551f Build cross-compilation fixes 6ed8dc17c libpod: Track healthcheck API changes in healthcheck_unsupported.go 16cf34dc3 quadlet: Use same default capability set as podman run b34ab8b5f quadlet: Drop --pull=never 098ad52ec quadlet: Change default of ReadOnly to no 1c3fddfaf quadlet: Change RunInit default to no d19ea6a60 quadlet: Change NoNewPrivileges default to false a93a390b8 test: podman run with checkpoint image f4401567c Enable 'podman run' for checkpoint images 3a362462c test: Add tests for checkpoint images bdd5f8245 CI setup: simplify environment passthrough code 10e020c65 Init containers should not be restarted c83efd0f0 Update c/storage after https://github.com/containers/storage/pull/1436 486790f61 Set the latest release explicitly d19e1526d add friendly comment 1d84f0adb fix an overriding logic and load config problem 2b6cf1d07 Update the issue templates 2862ecf28 Update vendor of containers/(image, buildah) 1c1a8d33f [CI:DOCS] Skip windows-smoke when not useful 190bab553 [CI:DOCS] Remove broken gate-container docs bb10095ec OWNERS: add Jason T. Greene 68d41c68d hack/podmansnoop: print arguments 009f5ec67 Improve atomicity of VM state persistence on Windows 052174891 [CI:BUILD] copr: enable podman-restart.service on rpm installation 54ef7f98d macos: pkg: Use -arm64 suffix instead of -aarch64 fe548dd0b linux: Add -linux suffix to podman-remote-static binaries d22395007 linux: Build amd64 and arm64 podman-remote-static binaries 71f92d263 container create: add inspect data to event d2ac99d65 Allow manual override of install location f17479c71 Run codespell on code cb96eac45 Add missing parameters for checkpoint/restore endpoint d16129330 Add support for startup healthchecks 2df0d9da9 Add information on metrics to the `network create` docs 96c208efb Introduce podman machine os commands 32d80378e Document that ignoreRootFS depends on export/import 1d031bf3b Document ignoreVolumes in checkpoint/restore endpoint 279a4ac77 Remove leaveRunning from swagger restore endpoint 07940764c libpod: Add checks to avoid nil pointer dereference if network setup fails dce7b3a5b Address golangci-lint issues 3eeb50d48 Bump golang version to 1.18 fbbef79c8 Documenting Hyper-V QEMU acceleration settings 9a6b70155 Kube Play: fix the handling of the optional field of SecretVolumeSource 35b46a420 Update Vendor of containers/(common, image, buildah) 75f6a1d59 Fix swapped NetInput/-Output stats f06869168 libpod: Use O_CLOEXEC for descriptors returned by (*Container).openDirectory fad50a9f2 chore: Fix MD for Troubleshooting Guide link in GitHub Issue Template 64a450c51 test/tools: rebuild when files are changed 2ddf1c5cb ginkgo tests: apply ginkgolinter fixes c7827957a ginkgo: restructure install work flow ce7d4bbc7 Fix manpage emphasis 5d26628df specgen: support CDI devices from containers.conf 7eb11e7bb vendor: update containers/common 6502b1faa pkg/trust: Take the default policy path from c/common/pkg/config ba522e8f3 Add validate-in-container target 3bb9ed4f0 Adding encryption decryption feature e2fa94e8a container restart: clean up healthcheck state a4ba5f449 Add support for podman-remote manifest annotate 3084ed468 Quadlet: Add support for .kube files fb429dbe3 Update vendor of containers/(buildah, common, storage, image) a891199b9 specgen: honor user namespace value a575111ad [CI:DOCS] Migrate OSX Cross to M1 285d6c9ba quadlet: Rework uid/gid remapping f5a43eea2 GHA: Fix cirrus re-run workflow for other repos. 50d72bc63 ssh system test: skip until it becomes a test e7eed5aa9 shell completion: fix hard coded network drivers 504fcbbf9 libpod: Report network setup errors properly on FreeBSD dd4d212b0 E2E Tests: change the registry for the search test to avoid authentication 1498f924b pkginstaller: install podman-mac-helper by default a1b32866c Fix language. Mostly spelling a -> an caa2dfe01 podman machine: Propagate SSL_CERT_FILE and SSL_CERT_DIR to systemd environment. 72966a32c [CI:DOCS] Fix spelling and typos ae8a5a892 Modify man page of "--pids-limit" option to correct a default value. f950b1511 Update docs/source/markdown/podman-remote.1.md a9094a78a Update pkg/bindings/connection.go b6850e772 Add more documentation on UID/GID Mappings with --userns=keep-id 0d270ae38 support podman-remote to connect tcpURL with proxy 607cd39e1 Removing the RawInput from the API output 14ef6a91b fix port issues for CONTAINER_HOST 34020b353 CI: Package versions: run in the 'main' step db34c913b build(deps): bump github.com/rootless-containers/rootlesskit 4c1294ccb pkg/domain: Make checkExecPreserveFDs platform-specific 58869dcc3 e2e tests: fix restart race 7c1ad8a58 Fix podman --noout to suppress all output 9610d4c7b remove pod if creation has failed f36b3bc81 pkg/rootless: Implement rootless.IsFdInherited on FreeBSD 21f6902ec Fix more podman-logs flakes 1a839a96d healthcheck system tests: try to fix flake 36f8dfaa0 libpod: treat ESRCH from /proc/PID/cgroup as ENOENT 021a23b34 GHA: Configure workflows for reuse c7073b5fc compat,build: handle docker's preconfigured cacheTo,cacheFrom dceaa7603 docs: deprecate pasta network name a9852aa8f utils: Enable cgroup utils for FreeBSD e5f7fbcbe pkg/specgen: Disable kube play tests on FreeBSD 978c52850 libpod/lock: Fix build and tests for SHM locks on FreeBSD 3371c9d25 podman cp: fix copying with "." suffix f0dba82bb pkginstaller: bump Qemu to version 7.1.0 f6da2b060 specgen,wasm: switch to crun-wasm wherever applicable 2b4068a03 vendor: bump c/common to v0.50.2-0.20221111184705-791b83e1cdf1 1c79b01f6 libpod: Make unit test for statToPercent Linux only 95bb6efff Update vendor of containers/storage 69d737ef1 fix connection usage with containers.conf dd98e3cc6 Add --quiet and --no-info flags to podman machine start 00b2bc9b6 Add hidden podman manifest inspect -v option 05c48402b Bump github.com/onsi/gomega from 1.24.0 to 1.24.1 836ca6c00 Add podman volume create -d short option for driver 5df00c6f7 Vendor in latest containers/(common,image,storage) bc77c034f Add podman system events alias to podman events ae9a2d26d Fix search_test to return correct version of alpine 75fdbea63 Bump golang.org/x/tools from 0.1.12 to 0.3.0 in /test/tools 329b053cf GHA: Fix undefined secret env. var. d60c27c9d Release notes for 4.3.1 a13a59a70 GHA: Fix make_email-body script reference f049fef85 Add release keys to README dca407d46 GHA: Fix typo setting output parameter fcfb7d292 GHA: Fix typo. db439dd23 New tool, docs/version-check c0a9c6ebc Formalize our compare-against-docker mechanism a2c43d434 Add restart-sec for container service files 4513fde80 test/tools: bump module to go 1.17 440807210 contrib/cirrus/check_go_changes.sh: ignore test/tools/vendor 9f9bf6fb4 Bump github.com/coreos/go-systemd/v22 from 22.4.0 to 22.5.0 a1323d31d Bump golang.org/x/term from 0.1.0 to 0.2.0 8b8ce8d53 Bump golang.org/x/sys from 0.1.0 to 0.2.0 fa2b4aeef Bump github.com/container-orchestrated-devices/container-device-interface 69ed903b2 build(deps): bump golang.org/x/tools from 0.1.12 to 0.2.0 in /test/tools d95684676 libpod: Add FreeBSD support in packageVersion d9aceadea Allow podman manigest push --purge|-p as alias for --rm b5ee4de8c [CI:DOCS] Add performance tutorial cfa651f80 [CI:DOCS] Fix build targets in build_osx.md. 3e08f8535 fix --format {{json .}} output to match docker f807b6784 remote: fix manifest add --annotation 314cba259 Skip test if `--events-backend` is necessary with podman-remote 1c8196a9a kube play: update the handling of PersistentVolumeClaim 616fca9ff system tests: fix a system test in proxy environment 85ae935af Use single unqualified search registry on Windows cb8c9af5d test/system: Add, use tcp_port_probe() to check for listeners rather than binds 348c3f283 test/system: Add tests for pasta(1) connectivity b3cf83684 test/system: Move network-related helpers to helpers.network.bash ea4f168b3 test/system: Use procfs to find bound ports, with optional address and protocol 7e3d04fbc test/system: Use port_is_free() from wait_for_port() aa47e05ae libpod: Add pasta networking mode 6dd508b8e More log-flake work 3ebcfdbbc Fix test flakes caused by improper podman-logs 919678d2f fix incorrect systemd booted check 0334d8d61 Cirrus: Add tests for GHA scripts 66d857cdd GHA: Update scripts to pass shellcheck d17b7d852 Cirrus: Shellcheck github-action scripts 2ee40287e Cirrus: shellcheck support for github-action scripts 462ce32e6 GHA: Fix cirrus-cron scripts d5031946a Makefile: don't install to tmpfiles.d on FreeBSD 85f4d3717 Make sure we can build and read each line of docker py's api client cdb00332d Docker compat build api - make sure only one line appears per flush efbad590d Run codespell on code 571833d56 Update vendor of containers/(image, storage, common) 049a5d82f Allow namespace path network option for pods. f3195c930 Cirrus: Never skip running Windows Cross task 35523d560 GHA: Auto. re-run failed cirrus-cron builds once 3a85d537b GHA: Migrate inline script to file 980d5b362 GHA: Simplify script reference 417490128 test/e2e: do not use apk in builds 3fee351c3 remove container/pod id file along with container/pod 442df2967 Cirrus: Synchronize windows image 274d0f495 Add --insecure,--tls-verify,--verbose flags to podman manifest inspect cac4919bf runtime: add check for valid pod systemd cgroup d7e70c748 CI: set and verify DESIRED_NETWORK (netavark, cni) 6ec2bcb68 [CI:DOCS] troubleshooting: document keep-id options f95ff4f46 Man pages: refactor common options: --security-opt 853072455 Cirrus: Guarantee CNI testing w/o nv/av present fd9de876f Cirrus: temp. disable all Ubuntu testing ecd1927b4 Cirrus: Update to F37beta 56fae7dd0 buildah bud tests: better handling of remote 7ec743fe7 quadlet: Warn in generator if using short names 884350d99 Add Windows Smoke Testing f6c74324b Add podman kube apply command d1f3dd9e5 docs: offer advice on installing test dependencies 8e55abafd Fix documentation on read-only-tmpfs b8acdb34c version bump to 4.4.0-dev b8e03ab44 deps: bump go-criu to v6 fc65d72c3 Makefile: Add cross build targets for freebsd e23444fbc pkg/machine: Make this build on FreeBSD/arm64 3279342ff pkg/rctl: Remove unused cgo dependency d76bf4cb5 man pages: assorted underscore fixes bb78ba19e Upgrade GitHub actions packages from v2 to v3 0d505f20f vendor github.com/godbus/dbus/v5@4b691ce b20ef9c34 [CI:DOCS] fix --tmpdir typos 9003cdbf6 Do not report that /usr/share/containers/storage.conf has been edited. 71f0c9f33 Eval symlinks on XDG_RUNTIME_DIR 3ad5827b2 hack/podmansnoop 83313c547 rootless: support keep-id with one mapping 5dad34212 rootless: add argument to GetConfiguredMappings 6fe64591d Update vendor containers/(common,storage,buildah,image) f355900d3 Fix deadlock between 'podman ps' and 'container inspect' commands 59299b519 Add information about where the libpod/boltdb database lives 320ce8c9f Consolidate the dependencies for the IsTerminal() API 871172e6f Ensure that StartAndAttach locks while sending signals d50a55233 ginkgo testing: fix podman usernamespace join f0f12658d Test runners: nuke podman from $PATH before tests 3e6637a3b volumes: Fix idmap not working for volumes 237d41f3f FIXME: Temporary workaround for ubi8 CI breakage 11e4c0403 System tests: teardown: clean up volumes a141c9ac2 update api versions on docs.podman.io fdc9ca076 system tests: runlabel: use podman-under-test 05bdc7294 system tests: podman network create: use random port f0ba2d89e sig-proxy test: bump timeout 0ce234425 play kube: Allow the user to import the contents of a tar file into a volume bac907abf Clarify the docs on DropCapability 33eb45c47 quadlet tests: Disable kmsg logging while testing b07ba2441 quadlet: Support multiple Network= 8716de2ac quadlet: Add support for Network=... 721922fa7 Fix manpage for podman run --network option 6042ca7fd quadlet: Add support for AddDevice= f6f65f49d quadlet: Add support for setting seccomp profile a9f0957c2 quadlet: Allow multiple elements on each Add/DropCaps line af67f15bc quadlet: Embed the correct binary name in the generated comment 2b0d9cd94 quadlet: Drop the SocketActivated key d7e248dcf quadlet: Switch log-driver to passthrough 998f834b0 quadlet: Change ReadOnly to default to enabled 0de98b1b6 quadlet tests: Run the tests even for (exected) failed tests 8d41c7d2e quadlet tests: Fix handling of stderr checks 5c3a22e8c Remove unused script file c4ebe9e2a notifyproxy: fix container watcher 221cfc687 container/pod id file: truncate instead of throwing an error b7f05cef0 quadlet: Use the new podman create volume --ignore 734c435e0 Add podman volume create --ignore 4966f509b logcollector: include aardvark-dns 6a9c7a580 build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1 e081d22b0 build(deps): bump github.com/BurntSushi/toml from 1.2.0 to 1.2.1 622638b72 docs: generate systemd: point to kube template c1de4d3ce docs: kube play: mention restart policy 0572e5972 Fixes: 15858 (podman system reset --force destroy machine) 7a9c14d62 fix search flake 4e29ce2ba use cached containers.conf 6c7ae378c adding regex support to the ancestor ps filter function e5032a8de Fix `system df` issues with `-f` and `-v` c9c2f644d markdown-preprocess: cross-reference where opts are used 77f8eaa73 Default qemu flags for Windows amd64 e16800e8b build(deps): bump golang.org/x/text from 0.3.8 to 0.4.0 d70ffdaeb Update main to reflect v4.3.0 release b8c24bbb4 build(deps): bump github.com/docker/docker b4374f2bd move quadlet packages into pkg/systemd 34235b272 system df: fix image-size calculations 34ee37b91 Add man page for quadlet 84ed9bd5e Fix small typo 120a77e39 testimage: add iproute2 & socat, for pasta networking 30e66d600 Set up minikube for k8s testing 0a6d8b94c Makefile: don't install systemd generator binaries on FreeBSD cadb64d32 [CI:BUILD] copr: podman rpm should depend on containers-common-extra 02bb7c2cf Podman image: Set default_sysctls to empty for rootless containers 234b2230e Don't use github.com/docker/distribution 9e6b37ec1 libpod: Add support for 'podman top' on FreeBSD 21081355a libpod: Factor out jail name construction from stats_freebsd.go b82b27cc4 pkg/util: Add pid information descriptors for FreeBSD 62bb59d3b Initial quadlet version integrated in golang 44bac51fc bump golangci-lint to v1.49.0 01a3245d7 Update vendor containers/(common,image,storage) 75222add5 Allow volume mount dups, iff source and dest dirs cb2631bf3 rootless: fix return value handling 783b4e914 Change to correct break statements 04c126a3b vendor containers/psgo@v1.8.0 c39b71776 Clarify that MacOSX docs are client specific 51c376c8a libpod: Factor out the call to PidFdOpen from (*Container).WaitForExit bb2b47dc7 Add swagger install + allow version updates in CI 2a622c8af Cirrus: Fix windows clone race 973710c8b build(deps): bump github.com/docker/docker b35fab6f1 kill: wait for the container ba276e117 generate systemd: set --stop-timeout for stopping containers 5113343a5 hack/tree_status.sh: print diff at the end bab816953 Fix markdown header typo bd4ee2d57 markdown-preprocess: add generic include mechanism 9cdea7fb3 markdown-preprocess: almost complete OO rewrite 33858c1cf Update tests for changed error messages 05119a917 Update c/image after https://github.com/containers/image/pull/1299 8c7673857 Man pages: refactor common options (misc) 617a2de3a Man pages: Refactor common options: --detach-keys 69815a7f1 vendor containers/storage@main a584bb4e7 Man pages: refactor common options: --attach 0510dd2f1 build(deps): bump github.com/fsnotify/fsnotify from 1.5.4 to 1.6.0 1d18dc267 KillContainer: improve error message 5da54e183 docs: add missing options 57ddeffd0 Man pages: refactor common options: --annotation (manifest) b256f5f58 build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0 f16e9acc6 system tests: health-on-failure: fix broken logic 7ff8c8f79 build(deps): bump golang.org/x/text from 0.3.7 to 0.3.8 00adeda80 build(deps): bump github.com/onsi/gomega from 1.20.2 to 1.22.1 d08b4c133 ContainerEngine.SetupRootless(): Avoid calling container.Config() 03c5f9d02 Container filters: Avoid use of ctr.Config() af38c79e3 Avoid unnecessary calls to Container.Spec() 55191ecc2 Add and use Container.LinuxResource() helper 7b84a3a43 play kube: notifyproxy: listen before starting the pod 2bee2216c play kube: add support for configmap binaryData 1038f063e Add and use libpod/Container.Terminal() helper b47b48fd0 Revert "Add checkpoint image tests" f437078d2 Revert "cmd/podman: add support for checkpoint images" 4dd67272e healthcheck: fix --on-failure=stop d4052c1aa Man pages: Add mention of behavior due to XDG_CONFIG_HOME b5950a918 build(deps): bump github.com/containers/ocicrypt from 1.1.5 to 1.1.6 c34b5be99 Avoid unnecessary timeout of 250msec when waiting on container shutdown 02040089a health checks: make on-failure action retry aware 5b71070e4 libpod: Remove 100msec delay during shutdown b4b701139 libpod: Add support for 'podman pod' on FreeBSD 7f8964a78 libpod: Factor out cgroup validation from (*Runtime).NewPod d71160539 libpod: Move runtime_pod_linux.go to runtime_pod_common.go c35a70d21 specgen/generate: Avoid a nil dereference in MakePod e187b9711 libpod: Factor out cgroups handling from (*Pod).refresh 713428df0 Adds a link to OSX docs in CONTRIBUTING.md f8b659d09 Man pages: refactor common options: --os-version 8b189c0a0 Create full path to a directory when DirectoryOrCreate is used with play kube d4f622da7 Return error in podman system service if URI scheme is not unix/tcp 51c357841 Man pages: refactor common options: --time 0e4eeb52e man pages: document some --format options: images e136376d1 Clean up when stopping pods 11e83a095 Update vendor of containers/buildah v1.28.0 1e71d124e Proof of concept: nightly dependency treadmill Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2023-02-17 15:21:29 -05:00
Bruce Ashfield	43396cb671	podman: update to 4.3 ... We add ${datadir}/user-tmpfiles.d/* to package some newly added systemd files, but otherwise, the recipe is unchanged. Bumping libpod to version v4.3.0-7-g9ce592fcb, which comprises the following commits: 83b02f8fd Update c/image from release-5.23 branch 14563ef13 system tests: fix broken bashisms 34ebb9af2 Release notes fixes d5a0dfc1e Bump to v4.3.1-dev ad42af949 Bump to v4.3.0 9496a3836 Final release notes for v4.3.0 ac7fa8437 libpod: Add support for 'podman top' on FreeBSD f8a79409c libpod: Factor out jail name construction from stats_freebsd.go e33306683 pkg/util: Add pid information descriptors for FreeBSD 3810a9dac [CI:BUILD] copr: podman rpm should depend on containers-common-extra 94499aa47 Podman image: Set default_sysctls to empty for rootless containers 8a28b896b Allow volume mount dups, iff source and dest dirs 295d0d1d9 libpod: Factor out the call to PidFdOpen from (*Container).WaitForExit c9c683a58 markdown-preprocess: add generic include mechanism 42a221874 markdown-preprocess: almost complete OO rewrite ca9eaec5e bump golangci-lint to v1.49.0 6972d47ff rootless: fix return value handling 5a214f6e5 generate systemd: set --stop-timeout for stopping containers c6ad786ca Change to correct break statements 1a5506459 Add swagger install + allow version updates in CI 78d4af894 Cirrus: Fix windows clone race fc43751e7 kill: wait for the container 9c01425ad hack/tree_status.sh: print diff at the end 682dd8e45 Man pages: refactor common options (misc) b98f6b52f Man pages: Refactor common options: --detach-keys c7e946482 Man pages: refactor common options: --attach 83b5fcf38 build(deps): bump github.com/fsnotify/fsnotify from 1.5.4 to 1.6.0 6d5d84a05 Man pages: refactor common options: --annotation (manifest) 7f88deff1 KillContainer: improve error message b805a068c build(deps): bump github.com/containers/ocicrypt from 1.1.5 to 1.1.6 42b642509 docs: add missing options f2a2ab557 build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0 095aa5c3a play kube: notifyproxy: listen before starting the pod b7514ee40 build(deps): bump golang.org/x/text from 0.3.7 to 0.3.8 f7732ae52 Man pages: refactor common options: --os-version 298a2432e play kube: add support for configmap binaryData 2efdff528 build(deps): bump github.com/onsi/gomega from 1.20.2 to 1.22.1 802118ad1 Revert "Add checkpoint image tests" dfa55ff6a Revert "cmd/podman: add support for checkpoint images" eb43d175c system tests: health-on-failure: fix broken logic ee5bd1e0c Man pages: Add mention of behavior due to XDG_CONFIG_HOME c88dfbb98 Add and use libpod/Container.Terminal() helper cbde35e32 Avoid unnecessary timeout of 250msec when waiting on container shutdown d15b4af92 healthcheck: fix --on-failure=stop 81c645f2f libpod: Add support for 'podman pod' on FreeBSD 546e9445e libpod: Factor out cgroup validation from (*Runtime).NewPod 26df7d97c libpod: Move runtime_pod_linux.go to runtime_pod_common.go 70e0cb509 specgen/generate: Avoid a nil dereference in MakePod f92360283 libpod: Factor out cgroups handling from (*Pod).refresh b9d479b72 health checks: make on-failure action retry aware ead78d8ba libpod: Remove 100msec delay during shutdown 640eac465 Clean up when stopping pods d31a06ce8 Create full path to a directory when DirectoryOrCreate is used with play kube 9ce61988d Return error in podman system service if URI scheme is not unix/tcp 8041df3b6 Update vendor of containers/buildah v1.28.0 d13509f27 Man pages: refactor common options: --time c16078f2d Release notes for all content before cherry-picks 3451aac35 Man pages: refactor common options: --pod aaa9f4ea9 Prevent nil pointer deref in GetImage f250560a8 Add pods created by kube play to a default network 26468c227 Man pages: refactor common options: --features 2f6c911d6 build(deps): bump github.com/opencontainers/image-spec 62bc8e3a1 Cirrus: Fix tag & branch go checks failing eaa389262 Man pages: refactor common options: --variant 9bafd9c46 Man pages: refactor common options: --compression-format eb7f54ef6 cleanup: always delete netns mount a2581abbf Adds brew info podman to issue template. 73c8416c3 Update for https://github.com/klauspost/pgzip/pull/50 02b0f9fc3 container inspect: include image digest fe3c91d58 Update vendor containers/(common,image) f304a1757 Fix typo about e2e tests name 66747351f [CI:DOCS] Add quay-description update reminder 0660f5b7a Cirrus: Combine build and code consistency tasks 6c8a11b74 Cirrus: Combine pre-test checks into build task 0e7d166ee Cirrus: Minor YAML comment/whitespace fix e7328cb97 Man pages: refactor common options: --network fe2b4df38 podman kube play allow --network host e4c0c8994 Man pages: Refactor common options: --sign-passphrase-file 309f4fb54 Man pages: refactor common options: --log-opt 6f821f03d `podman pod logs -l` no longer panics f00ceaabd vendor: bump c/common to v0.49.2-0.20220929111928-2d1b45ae2423 3b5171d0e fix "podman system prune networks" flake ebff193f8 Add test for podman run with checkpoint image 9c3d8bb49 cmd/podman: add support for checkpoint images b17d8ff46 restore: make IsCheckpointImage reusable e2fe9eaba Revert "remote: fix manifest add --annotation" 32f54a81e remote: fix manifest add --annotation 496d4c753 System tests: stop deep-checking log-level ba70dd5ec build(deps): bump github.com/container-orchestrated-devices/container-device-interface 66517d86a fix: kube play liveness probe http path f5fc0960e Default missing hostPort to containerPort is defined in kube.yaml 359e39744 libpod: Add volume support for FreeBSD abe8dad34 libpod: Factor out usage of unix.MNT_DETACH from (*Volume).unmount 9de2a5ff7 libpod: Move volume_internal_linux.go to volume_internal_common.go 065474755 libpod: Move runtime_volume_linux.go to runtime_volume_common.go 95cb14aff fix: liveness check with http probe 3e8093152 System tests: light cleanup 0fb95f95d CI: only make install.tools when needed 2e4e1bb97 podman machine ssh handling 53d604182 Cirrus: Build pkginstaller in CI c1ae7f193 Add SELinux information about boolean for using random devices f32b02c7b Bump to v4.3.0-dev f818eb4a5 Bump to v4.3.0-RC1 527fc409e Cirrus: Add golang code consistency check script f6724116a Man pages: refactor common options: --env-file 7bc36602f auto-update: validate container image fa18d35e8 Man pages: refactor common options: --env 911ceb823 Man pages: Refactor common options: --sig-proxy fde4d21be man page xref: verify page title 8c627dfb5 Contrib: Add containerfile to create podman-remote binary image 9261a5469 Remove redundant log message 52656887e compat API: network inspect do not show isolate option 337f1f586 [CI:DOCS] man pages: fix incorrect title f5e83f684 Fixup Buildah merge 54653ceeb Update vendor or containers/buildah 3a5b5d04b Fix machine starting state 69ac1e36c Cirrus: Catch use of deprecated io/ioutil package 8ff54cbe8 Fix libsubid detection 326d386ee [CI:BUILD] Copr: also define _user_tmpfilesdir for f35 2478e32ca fix restore API endpoint 6ee582315 Events for containers in pods now include the pod's ID dc05d1212 Add --pretty to podman secret inspect fc6dcd12b Add support for 'image' volume driver 5a2405ae1 Don't mount /dev/tty* inside privileged containers running systemd d5f044ee7 System tests: reenable some skipped aarch64 tests 33c31112f cli: Add signature-policy flag to podman save ba6f84666 Fix a few missed io/ioutil -> os updates fb3d55006 Improve generate systemd format 9bb51e8e9 Add labels to secrets 7cfe0328f Add support to sig-proxy for podman-remote 377773ab5 Fix podman-remote run --attach stdin to show container ID d968f3fe0 Replace deprecated ioutil bb160be12 libpod: Implement 'podman cp' for FreeBSD 88f82ceab libpod: Move jointMountAndExec to container_copy_linux.go 75d6e7bae libpod: Move part of (*Container).stat to container_stat_linux.go 0b02d4cee libpod: Move container_copy_linux.go to container_copy_common.go 24d129071 libpod: Move container_stat_linux.go to container_stat_common.go 6790deb1b man pages: document some --format options 23195646d pkginstaller: use path_helper to add podman and helpers to path dc8fdb46c label.Relabel third option is shared not recurse 049b10884 podman container clone env patch 903f551ae build(deps): bump github.com/coreos/go-systemd/v22 from 22.3.2 to 22.4.0 4a053a821 notifyproxy: don't set a read deadline 1071098ee kube play: sdnotify proxy: use a wait group 21841dc38 Default to --dns-option to match Docker and Buildah d63e49a26 remote: checkpoint --export prints a rawInput or an error on remote cfbc4aaeb Cleanup: fix problems reported by shell lint e2573b734 Fix broken titles on readthedocs 62d1c487d Man pages: Refactor common options: --dns 7d1f688ff [CI:DOCS] man pages: document some --format options 884fd4575 Revert "generate systemd: drop ExecStop" 3508bd22f Add support for podman context as alias to podman system connection 9ba034293 Man pages: refactor common options: 2 stats opts c20abf12c generate systemd: drop ExecStop 45d09e65b libpod: Make getContainerInspectData work on FreeBSD 2e4db139a libpod: Factor out platform-specfic code from generateInspectContainerHostConfig 60ef4ad1c stats: cap memory limit to the available memory cf2118eab stats: map MaxUsage to the correct value 3f8591c2f Man pages: refactor common options: --shm-size f76390d5e Man pages: refactor common options: --user e19e0de5f Introduce graph-based pod container removal 51a8635c7 Cirrus: Fix win_installer task clone failure cb6ad7631 Cirrus: Only run unit-testing on Fedora. 815655b9d Cirrus: Move gitlab test to cirrus-cron "main" 88879d588 System tests: cleanup in --format test d4a62ff93 System tests: fix three races 14e5d1c15 libpod: fix lookup for subpath in volumes 92dc61d5e libpod: rename function 42937cd9a Ensure that a broken OCI spec does not break inspect b6c75a3cc Man pages: refactor common options: --preserve-fds, -it dd53ee599 fix ci: update systemd generate unit test 4df460836 Man pages: refactor common options: --ip6 47fff4b00 improve slirp4netns allow_host_loopback docs 0aedddd3b [systemd] Ensure that podCreateArgs appear last in ExecStartPre= b47ce9a6e libpod: Add support for 'podman stats' on FreeBSD b3e978e43 libpod: Split out the common code from GetContainerStats 47bd9e811 libpod: Move stats.go to stats_linux.go for consistency 1e6da1115 pkg/rctl: Add a simple FreeBSD RCTL library 75740be39 all: stop using deprecated GenerateNonCryptoID 76eb06330 Man pages: refactor common options: --tls-verify fe04c86a2 generate systemd: fix pod dependencies d4a000312 Man pages: Refactor common options: --publish 9d41b95d7 rework --format system test dacd59424 Man pages: refactor common options: --publish-all 885bc4742 Enable github labeler, use for api-change 74e0511c9 Man pages: refactor common options: --os (pull) f30d4852e Man pages: refactor common options: --ip 0ea5080c9 generate systemd: warn on --restart without --new c8c2aab50 health checks: restart timers 908458d06 enable podman pod inspect --format test 7f8e99ded podman version: use report.Formatter over Template 0c21dcf70 podman machine info: use report.Formatter over Template e5389e98f podman info: use report.Formatter over Template 1acebdda3 tests for 15673 43f7bdf82 podman inspect return exit code > 0 on print error 00240a0e2 podman inspect: use report.Formatter over Template 377599f1f podman secret inspect: use report.Formatter over Template f5e13ded9 podman secret ls: use report.Formatter over Template 1463898b0 podman network ls: use report.Formatter over Template 90634d5ee podman volume ls: use report.Formatter over Template 20eccfc9d podman machine inspect: use report.Formatter over Template a687949db podman machine ls: use report.Formatter over Template 65e78d92c podman auto-update: use report.Formatter over Template 70e6b19d4 events: Fix spelling of newNullEventer 9457549ff build(deps): bump github.com/vbauerster/mpb/v7 from 7.5.2 to 7.5.3 09ba2e0b9 Man pages: refactor common options: --rootfs 07a8eb829 Ensure that the DF endpoint updated volume refcount e24c2f009 system tests: periodic cleanup and fixes a63a40c3e podman events --format: fix duplicated newline 2ae4ce799 fix race where podman events exits to early b3212a680 set default EventsLogFilePath on first run 12a1483e7 Improve --tmpdir and --events-backend docs 72e715a11 Use new secret store API cd32b929e libpod: runtime newEventer() cleanup 76980a222 event backend journald: fix problem with empty journal 138b09c7e event backend none: return an error when reading events c5bdb6afe fix hang with podman events file logger 56c880a7e libpod: Move ocicniPortsToNetTypesPorts and compareOCICNIPorts to networking_common.go 221c4d5f0 libpod: Move NetworkDisconnect and NetworkConnect to networking_common.go f939f3fdf libpod: Move resultToBasicNetworkConfig to networking_common.go c9de84080 libpod: Add support for getContainerNetworkInfo on FreeBSD 51c70e588 libpod: Move getContainerNetworkInfo to networking_common.go d014dca81 libpod: Move isBridgeNetMode and reloadContainerNetwork to networking_common.go 1dd0eb467 libpod: Move teardownNetwork and teardownCNI to networking_common.go 2bf050f1d libpod: Move setUpNetwork and getCNIPodName to networking_common.go 3d7f9f67a libpod: Move convertPortMappings and getNetworkOptions to networking_common.go d1414adbb libpod: Add FreeBSD implementation of container networking c5f64d9f5 libpod: Re-work the container's network state to help code sharing 36cfd05a7 libpod: Move platform-specific bind mounts to a per-platform method 369d86040 libpod: Avoid a nil dereference when generating resolv.conf on FreeBSD a1fa9faa4 Buildah treadmill script: various fixes 43da39d31 Man pages: refactor common options: --volumes-from 050ae6181 [CI:DOCS] --volume: consistent wording d935e9799 update c/storage to latest 6091ff42d Include more environment variables in conmon env. 118546c6a refactor: use `os.ReadDir` for lightweight directory reading 2c63b8439 Fix stutters b8108d06b Fix CPU usage limitation in play kube for non integer values 8466c4a19 Cirrus: Don't run win_installer in multiarch cron 6210c6723 TEMPORARY: instrumenting for 15488 3a9a7dcdc Man pages: refactor common options: --volume a82672047 build(deps): bump github.com/docker/docker 6bf8670b6 stop: fix error handling aad29e759 health check: add on-failure actions 8e1aa7af3 Fixes for vendoring Buildah eb28a1c08 update buildah and c/common to latest c7411af9e Ignore cpu realtime options on cgroups V2 systems 27be5eaaf Fix swagger documentation 9a286f712 generate, kube: plug HostUsers 1994f3823 Add --config for Docker compatibility ad63aa20d kube: plug HostUsers in the pod spec 626ee118c e2e: fix run_staticip_test in proxy environment d10e77e1b fix podman pod inspect to support multiple pods 911e4a138 specgen/generate: Factor out setting resource limits from CompleteSpec db33f06a9 fixes data race in system.Events and nil error logging f75c3181b podman: skip /sys/fs/cgroup/systemd if not present 3f0b5cd40 Man pages: refactor common options: --userns (pod) 8d40bf3f1 proper --debug/-D flag support 4fbc4b8f7 Man pages: refactor common options: --privileged f85fa9806 libpod: Filter out ENOTCONN errors when trying to close unix domain sockets 6668ac93b libpod: Factor out capabilites code from prepareProcessExec f6e3cfa53 system tests: fix systemd tests in proxy environment 744878a71 Add win-installer build/verify workflows to CI ecb9f99b8 Add new windows installer and build d759576ab emit container labels also for container exited and exec died events 9585147e1 fix Pod removal after OS hard shutdown e0d5b4e3f Change pipe wait to 20 seconds 63c779a85 Fix manpage headers 4675103c2 Man pages: refactor common options: --sysctl eb39d56df Bump github.com/docker/go-units from 0.4.0 to 0.5.0 f4c39df25 Add win-sshproxy.exe to windows client zips 40cd1c0ff Man pages: refactor common options: --device 4462305fe Update the displayed warning in documentation regarding the system reset 092690297 build(deps): bump github.com/container-orchestrated-devices/container-device-interface 77ab6125f remove SkipIfNotFedora() from events test d22aeeec2 fix podman events with custom format a9a411f8a Add generate systemd -e/--env option 274d34a25 kube play: support auto updates and rollbacks 04f0ac2aa system tests: fix some tests in proxy environment 6a3c28968 Drop stale config value resulting in asymmetric config c2c910736 CI: Cirrus setup: retry failed curls fb38838fe Man pages: refactor common options: --memory* 0df291d3b Update system reset warning message to warn against deletion of all volumes bdfc4df1f pkg/autoupdate: allow updating multiple tasks per unit cbaa78cd8 Fix list of default capabilities a3aecf0f2 libpod: Factor out setting volume atime to container_internal_linux.go 7a1abd03c libpod: Move miscellaneous file handlling to container_internal_common.go d162285f3 libpod: Don't mount /dev/shm in containers on FreeBSD 212b11c34 libpod: Factor out handling of slirp4netns and net=none eab4291d9 libpod: Move functions related to /etc bind mounts to container_internal_common.go b3989be76 libpod: Move getRootNetNsDepCtr to container_internal_common.go a148c1622 libpod: Use (*Container).addNetworkNamespace to restore checkpoint network 7518a9136 libpod: Move functions related to checkpoints to container_internal_common.go be5d1261b libpod: Move mountNotifySocket to container_internal_common.go 71e2074e8 libpod: Move getUserOverrides, lookupHostUser to container_internal_common.go 232eea5a0 libpod: Move isWorkDirSymlink, resolveWorkDir to container_internal_common.go a5ee3cb79 pkg/util: Add no-op implementation of AddPrivilegedDevices on FreeBSD 0889215d8 libpod: Use platform-specific mount type for volume mounts c1a86a8c4 libpod: Factor out platform-specific sections from generateSpec e101f4350 libpod: Move getOverlayUpperAndWorkDir and generateSpec to container_internal_common.go 6e4b5b007 libpod: Add FreeBSD implementation of container internals 8ade76e79 libpod: Move networkDisable to container_linux.go 71978b0a0 Fix #15243 Set AutomountServiceAccountToken to false b9df3a6a9 Man pages: refactor common options: --label d82a41687 Add container GID to additional groups 3e1dde10b [CI:BUILD] Copr: Define _user_tmpfilesdir for rhel 875fd4858 Fix swagger documentation 070dfa3b3 Man pages: refactor common options: --digestfile 3e744e52b System tests for podman-update c05b6e5d3 Update test per comment in #15555 3d09d47a2 Man pages: refactor common options: --device-X-Y 050f3291b implement podman update c63830166 Man pages: refactor common options: --name 4a1acccf9 Fix bind-mount-option annotation in gen/play kube 64eb07941 CI: disable flaking test on ubuntu b667d7340 libpod: Ensure that generated container names are random 5faf4eff1 Cirrus: pick UIDs/GIDs starting at 1500, not 1000 b25d62a4d [CI:BUILD] Packit: Disable until proved in other repos 84352a81c Set enableServiceLinks to false in generated yaml fed4ce0ea Inhibit SIGTERM during Conmon startup 70a599b57 Man pages: refactor common options: --signal da57065ab specgen: Use platform-specific mount type for volume mounts 0300271bf libpod/define: Make TypeBind a platform-specific constant 1ed9a4740 Man pages: refactor common options: --restart 98169c20d Add emptyDir volume support to kube play 8637548a3 docs: move userns options to separate file e015c9e3f podman: add uid and gid options to keep-id cd6260604 infra: remove dead code 62d87aa9b Man pages: refactor common options: --subXidname 08a2851ba Allow to override default username via command line 4781bc7fe specgen/generate: Add support for FreeBSD 68f4dcf00 specgen/generate: Move specConfigNamespaces to namespace_linux.go and add stubs 39880670c specgen/generate: Move SpecGenToOCI, WeightDevices to oci_linux.go and add stubs. a240146a2 e2e tests: try to deflake 5000 08af95f63 updated apiv2 tests to reflect hash compat fix c1480b39a Improved Windows compatibility for machine command 4e18c8100 Man pages: refactor common options: --http-proxy 0166feef2 specgen/generate: Move security.go to security_linux.go and add stubs a7d791202 libpod: Make sure writeConmonPipeData is called on FreeBSD d19438fa6 Man pages: refactor common options: --dns-* dcb4d4357 [makefile] disable security labeling instead of using --privileged 78aec2130 Fix #15499 already connected network b4f5a246a remove github.com/docker/libnetwork dependency 0ee9a3129 podman rmi: emit untag events 0b3184a5a pkg/domain: Add terminal support for FreeBSD 11de12097 Fix example sections to follow the same format e4f816fdb [CI:DOCS] Cirrus: Update meta-task for EC2 image e448122fe service: make move to sub-cgroup non fatal 167b026e7 [CI:BUILD] Packit: Re-introduce packit with fix-spec-file action 61d842a18 Fix template name inconsistency 39d809d3c Bump github.com/vbauerster/mpb/v7 from 7.4.2 to 7.5.2 e00272cd9 remote: fix implementation of build with --userns=auto for API 15aeccb83 libpod: UpdateContainerStatus: do not wait for container 61fc1870a cmd/podman: Enable --syslog on FreeBSD cfdca8293 Mark some of the option fields as ignored in pkg/bindings c7fda06f6 Compat API image remove events now have 'delete' status 9553f3baf Run codespell b27bfbc71 [CI:DOCS] Automatically set podman version in pkginstaller e634470fa APIv2 test cleanup, part 2 of 2 42fdc72aa Man pages: refactor common options: --systemd a5a5c6b3f Temporarily Revert "Packit: Enable scratch build testing for Fedora 36, 37 and Rawhide" 10b460512 Remove duplicate annotations in generated service yaml 61fe95bb4 Preserve all unknown PolicyRequirement fields on (podman image trust set) ad0c785f8 Reorganize the types in policy.go a bit a7e88c8da Add support for showing keyPaths in (podman image trust show) 752eceaec Support (image trust show) for sigstoreSigned entries b36a1d1b7 BREAKING CHANGE: Change how (podman image trust show) represents multiple requirements bba306788 Reorganize descriptionsOfPolicyRequirements a bit 2f6c145e8 Use the full descriptionsOfPolicyRequirements for the default scope b15afce55 Rename haveMatchRegistry to registriesDConfigurationForScope 1a97c4d9f Rename tempTrustShowOutput to entry 51064acc4 Split descriptionsOfPolicyRequirements out of getPolicyShowOutput d4c521728 Recognize the new lookaside names for simple signing sigstore 4df1e2524 Add a unit test for trust.PolicyDescription 4b2bd1036 Make the output of (podman image trust show) deterministic 35fa8c16a Make most of pkg/trust package-private 7723a1ea6 Move most of ImageEngine.ShowTrust into pkg/trust.PolicyDescription ff3f574fc Add support for sigstoreSigned in (podman image trust set) 9828bc445 Create new policy entries together with validating input e2d1bdd1d Improve validation of data in ImageEngine.SetTrust cbdbb025a Move most of imageEngine.SetTrust to pkg/trust.AddPolicyEntries 0ff0fde49 Man pages: refactor common options: log-related options 4f6807530 Add a variable for scope 4c5366ee0 Make trust.CreateTempFile private 5be00f227 Reorganize pkg/trust 1d2def8d0 Remove an unused trust.ShowOutput type df1d8d0e9 Remove commented out code 010d495a3 APIv2 test cleanup a933269ba System test cleanup 35b4f26c7 test: use private instead of slave for the mount 2fed2a282 Man pages: refactor common options: --pid ea67d84f5 test: fix comment 19a617eaa Allow colons in windows file paths 1788b26c4 Fixes isRootfull check using qemu machine on Windows 88e4e4c82 vendor containers/psgo@v1.7.3 33ab7e846 Man pages: refactor common options: --ipc ef6285a6f Man pages: refactor common options: --gidmap c64a6ba07 Man pages: Refactor common options: --workdir b0700aa48 libpod: Enable 'podman info' for FreeBSD ff20c74e9 libpod: Move getCPUUtilization to info_linux.go 694cbaca3 libpod: Read kernel version and uptime using buildah/pkg/util 877e67399 libpod: Split out platform-specific code from hostInfo e1c206d98 e2e: Add run --memory-swap test c3dc92a50 Fix rpm packaging error b4584ea85 run,create: add support for --env-merge for preprocessing vars b47c54ab6 Install podman-docker.conf on user-tmpfiles.d too 0e6a421ca Use tmpfiles.d specifiers instead of fixed path 9dca68bdd Man pages: refactor common options: --ignore d45a5d4aa Packit: Enable scratch build testing for Fedora 36, 37 and Rawhide 8b1e88bf8 Fix documentation of use of tcp connections 0f7393556 Add support for containers.conf volume timeouts 7d7aead51 Man pages: refactor common options: --device-cgroup-rule 65efcdf70 Allow podman to run in an environment with keys containing spaces 2c03681b2 Man pages: refactor common options: --disable-content-trust 8f797ab66 libpod: Add definition of containerPlatformState for FreeBSD 5c9bac141 Man pages: refactor common options: --cpus 5f719b533 podman kube play/down --read from URL 5b06b2e77 Document restrictions on transport in FROM 70e103c04 inspect, image: alias .Config.HealthCheck to .HealthCheck for compatibility f87f6d2fc Improved Windows compatibility 64339d47c Warning messages are printed and ignored if we use an unsupported option 716ac1c86 Refactor: About the RawInput process 74388fe75 Man pages: refactor common options: --pod-id-file 0f768cef3 [CI:DOCS] Update Troubleshooting.md c6488fe4a Man pages: fix sloppiness 53369aaa1 pass environment variables to container clone 46f31361f Man pages: refactor common options: --cidfile bd90818b0 Man pages: refactor common options: --creds fbe2bd87b [CI:DOCS] elaborate on image lookups of foreign platforms eee0ec97e Add quiet/q flag to podman secret ls d5f83135b version bump to 4.3.0-dev be1455ead Update "CONTRIBUTING" file with Debian/Ubuntu dependencies" f8e73eadd [CI:DOCS] Update how to enable resource limit delegation a0560eefa Man pages: refactor common options: cert-dir 8ffeb626c events: Add freebsd support for libpod/event 8aa29fd54 cmd/podman: Enable ABI and Tunnel mode for freebsd 1f76ad40a fix CI: remove hardcodeded alpine version 3bf52aa33 Add ProgressWriter to PullOptions ec9508ea1 Pass io.Writer when pushing images/manifests from command line e48681e60 Use request Context() in API handlers b9fb60c68 Simplify ImagesPull for when Quiet flag is on 09ef6fc66 podman generate kube - add actual tests 976ce76eb podman save: update --compress validation 054d64710 libpod: Build oci_conmon_common.go and oci_conmon_attach_common on FreeBSD cb4158889 libpod: Move openUnixSocket to oci_conmon_attach_linux.go d43fac20f libpod: Move moveConmonToCgroupAndSignal and GetLimits to oci_conmon_linux.go 93bad9048 libpod: Move socket label handling from oci_conmon_common.go to oci_conmon_linux.go 6791cdbdf libpod: Move rootless handling from oci_conmon_common.go to oci_conmon_linux.go 68b2450d3 libpod: Move oci_conmon_exec_linux.go to oci_conmon_exec_common.go 8d229c6cd libpod: Move oci_conmon_attach_linux.go to oci_conmon_attach_common.go bebf55c0f libpod: Move oci_conmon_linux.go to oci_conmon_common.go 20ad12274 runtime: use FindCommon from c/common 86f665a1d vendor: update containers/common 0dd2fcf71 Add podman manifest create -a. Alias for --amend:Docker compatibility aa197a65f sort hc.Binds returned from compat api 546bb3548 Add podman stats --no-trunc option f6e7b0b59 Add podman secret inspect -f alias for --format: Docker compatibility d50ff4f51 Add podman secret create -d as alias for --driver for Docker compatibility 6411f57e7 api: return imageID instead of imageName, for "Image" when Podman API is queried 2a6daa1e3 Cirrus: add podman_machine_aarch64 1572420c3 libpod: Move uses of unix.O_PATH to container_internal_linux.go 5d7778411 libpod: Move rootless network setup details to container_internal_linux.go 1b88927c2 libpod: Add stubs for non-linux builds 7e7a79b07 podman manifest create: accept --amend and --insecure flags 5f09d9b60 Fix podman kube generate --help to show correct help message 06b3a4c1c system tests: fix broken runc test f0e864075 Man pages: refactor common options: authfile a78b67a47 Man pages: refactor common options: --annotation a68e6ddbb utils: Add missing symbols for FreeBSD a6af67ca9 Cirrus: Update podman-machine comment 22f3dd4c2 Man pages: refactor common options: arch f14bf91c4 podman images and friends can take one image as argument 7e490e195 [CI:DOCS] Add .DS_Store to gitignore ab72a371b Don't warn on '/' not being shared while in a container 2d30b4dee Add compatibility support for --debug -D flag from docker bfae6bca9 build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16 b9c094a5d Add Docker compatibility for --dns-option to --dns-opt 1393038c8 pkg/domain: Add stubs for non-linux builds 65641ba8d pkg/specgen: Add stubs for non-linux builds 056917c22 Reword --exit-policy option d7f6d355b podman-kube@.service.in: Remove Restart=never option with typo bd0a8c146 added docs for installing certficate authority 5ee3522f5 pkg: Build pkg/machine on FreeBSD b806e9f36 pkg: Build pkg/util on FreeBSD 6df0ceb9a Add default value for $RM bc56ee158 Update cmd/podman/containers/restart.go f26a5246e Fix updated link to install instructions 0dbbb1cb3 Add restart --cidfile, --filter d856fb43e Add "podman kube generate" command e2a3f9592 docs: specify git protocol is not supported for github hosted repo 2935c38fd Update release notes for v4.2.0 a4efd401c remote manifest push: show copy progress 79e21b5b1 kube play: sd-notify integration 3fc126e15 libpod: allow the notify socket to be passed programatically 67a2e7351 add `pkg/systemd/notifyproxy` 245be9b39 Document behavior of --timestamp when only FROM is used e3f029cb8 build(deps): bump github.com/container-orchestrated-devices/container-device-interface 658960c97 build(deps) bump CDI dependency from 0.4.0 to 0.5.0 2bcee9f62 Man pages: refactor common options 25f6fc9c6 I believe that these tests will now run with crun. a561b7dac check memory test based on range 280f5d8cb podman ssh work, using new c/common interface d2d7898b8 Cirrus: Improve CI VM image updates for EC2 d7f134d68 Refactor common man page options, phase 2 3738221c5 test: update apply-podman-deltas for new tests 59cb410fe build: implement --cache-to,--cache-from and --cache-ttl 7bd886480 Bump to Buildah v1.27.0 1045647a4 Add interface for apple hypervisor 62e889e2b fix LogConfig type for libpod API 2e3a192bb cmd: refuse --userns if a mapping is specified 696ea7905 specgen: use sandbox id instead of name for annotation 771a35e4b pkginstaller: use correct GOARCH value in case of arm build b1d1248a1 pkg/bindings: Support writing image push progress to specified io.Writer f4c53a41c docs: update the podman logo 7ebaabb93 [CI:COPR] podman.spec.rpkg: add python3 dependency for el8 d4c6e056d Fixes #15154 Change order when config and connections are written 83bd7a5c2 e2e: Add rootless mount cleanup test cc8e4d5fe remove image podman no prune 842c6c7c6 podman generate spec 4cea8adb9 Cirrus: Run Cross builds in [CI:DOCS] mode 3102194f0 podman rmi: improve error message for build containers 5ea4ebb16 markdown-preprocess: force extra newline on comments 9964366f6 start filter flag changes e67e60226 podman info: hide `--debug` 623b0c57f pkginstaller: use correct GOARCH while building podman binaries bcfbee986 ISSUE TEMPLATE: remove `--debug` from `podman info` 81a1ea18c pkg/autoupdate: "image" policy: add deprecation comment 43cca5d97 pkg/autoupdate: decompose the update logic 0df51bb6b pkg/autoupdate: move status into `task` af3ce7084 pkg/autoupdate: document fields of `updater` 3fdd3b1ae pkg/autoupdate: remove image map from updater 82d18a86f pkg/autoupdate: use policy consts were possible 1cc933c6b pkg/autoupdate: introduce status constants 42c4c17c0 pkg/autoupdate: move authfile into `tasks` 3f1928d76 pkg/autoupdate: move more logic under `task` cfa089c36 pkg/autoupdate: s/updateImage/pullImage/ 13a8ebd09 pkg/autoupdate: repull image if other containers failed 2c999f1ec pkg/autoupdate: update unit-by-unit f8b6a81ae test/system/255-auto-update.bats: add an SELinux comment 87c0c760e pkg/autoupdate: introduce the notion of a `task` 033cc059f pkg/autoupdate: remove redundant branch 328c8ba7b pkg/autoupdate: move policy map into updater d47609773 pkg/autoupdate: introduce `updater` for shared state 79b10a7c6 readthedocs(sphinx): run the markdown preprocessor 65fb90165 hack/markdown-preprocess: allow to be executed from any dir 031b7dec7 fix hack/markdown-preprocess to support older python versions 7df8d8050 add omitempty to Secret in k8s VolumeSource 328eb2b4c Cirrus: Remove disused env. var. 1e4a141d8 Cirrus: Support EC2 instances in hack/get_ci_vm.sh 44212b90b pkginstaller: makefile improvements to avoid redownloading e6670cd29 pkginstaller: add makefile target to notarize the built pkg c5029d2ee pkginstaller: sign qemu-system-* binary for the pkg 56039cffd Refactor common options in man pages 50981cb84 skip pod resource limits test on aarch64 1dbd61653 Cirrus: Fix e2e tests for "mount_rootless_test" 3a7a275c3 Cirrus: use dnf instead of rpm to install packages 1249cbb75 add "podman kube down" command c5150a571 Add support, and default to rootless w/WSL prompt bce16a58d Disable F36 service that is incompat with WSL kern 69d7407af switch from "kube/play" endpoint to "play/kube" endpoint. 2685c8dc4 Output messages display rawInput 4dfef202c podman generate systemd --new: allow -h hostname 5ab98f2c0 test: verify manifest inspect must contain OCI annotations 3a05ddfb7 fix e2e sign tests 6c69a2ea1 podman-volume-import: Reword "precendence" c21306f06 man podman-volume-import: Clarify that merge happens d462da676 Add support for creating sigstore signatures, and providing passphrases 7075e2e1d Hide podman manifest push --sign-by on remote 68cf11611 Use signByFlagName instead of copy&pasting the string 02f570e4b Remove libpod/common 63d77da5b Update c/common to an unreleased version 5a5624f81 Update the registry server we test against from 2.6 to 2.8 7599fde73 Use existing REGISTRY_IMAGE variables in more places 24a599fe1 Add flag "--compression-format" to "podman manifest push" both in local/remote mode. 53ec47968 Add rm --filter option 68463278e Use httpasswd from the surrouding OS instead of the registry image 49bcb7eaa Bump google.golang.org/protobuf from 1.28.0 to 1.28.1 7a909a3e2 Use 8k buffer to help clients w/ broken parsing a53a0fca9 Cirrus: Minor YAML cleanup a24cc463a Remove bats installation script and make target 6764fe03d CI: new check for leftover skips/fixmes 17e3680fb Bump golang.org/x/tools from 0.1.11 to 0.1.12 in /test/tools 379bf1080 Bump github.com/containernetworking/cni from 1.1.1 to 1.1.2 de04d9d75 docs: resolve typo in create,run manpages de13dea86 With --rm option remove container if podman run fails da98c8877 Cirrus: enable Fedora 36 aarch64 tasks on EC2 389a4a6cc syncContainer: transition from `stopping` to `exited` 7fab449e3 [CI:DOCS] socket_activation.md: Add start/stop sections 8628c01f5 Fix: manifest push --rm removes a correct manifest list e4992fb81 Fix: Restore a container which name is equal to a image name 75419c5d8 When removing objects specifying --force,podman should exit with 0 56578c413 Cirrus: Use the latest imgts container c35ae7640 Add support for building macOS pkg installer 8e56a5605 machine: Fix check which is always true 1b099eec8 [CI:DOCS] podman-generate-systemd.1.md: document --sdnotify 52a4642ed Set TLSVerify=true by default for API endpoints 94e0a364a Semiperiodoc cleanup of obsolete FIXMEs 27679d80b pod create --share none should not create infra 4d18a98ec benchmarks: fix create test 4724a0000 prune filter handling 6a9338ad6 podman generate systemd: handle --sdnotify correctly ad8940cec fix container create/run throttle devices 290116bf8 integration test: fix network backend option with remote 5a80770e8 API: libpod/create use correct default umask 35035d281 container wait: improve error message cbdda4e56 docs: remove CNI word where it is not applicable 0a160fed7 Bump VMs, to Ubuntu 2204 with cgroups v1 c00ea686f resource limits for pods bc6a48eeb [CI:DOCS] Cirrus: Add prominent gitlab warning 88b57dd9f fix broken machine test 19f4a463e pkg/machine/e2e: do not import from cmd/podman 604920dd1 fix some pkg/machine/e2e test to read stderr ee35ce86d enable linter for pkg/machine/e2e dd2b79406 libpod: create /etc/passwd if missing b79ac0aca remote push: show copy progress afbfbe18a compose test: remove cni config copy 56093a3b4 compat api: always turn on network isolation for networks 80ad0cfd0 compat api: allow default bridge name for networks 3a016c6e4 e2e: show command and output when a timeout happens 138d185cc Bump github.com/BurntSushi/toml from 1.1.0 to 1.2.0 ab4c58bd3 Compat API: unify pull/push and add missing progress info c1f04a024 podman-remote pull: fix duplicate progress outputs af118f7c6 libpod: do not lock all containers on pod rm 139d65be8 Fix machine test 438fef1ca kube secret handling for podman play kube 8d190fc48 vendor: remove unused deps 013300a7c Makefile: remove building pages for man5 19495b9fc makefile: remove processing of pkg/docs f64985135 rpkg: remove usage of pkg/hooks ffe5da20a pkg,libpod: remove pkg/hooks and use hooks from c/common da33f1005 Update init ctr default for play kube 4e72aa586 fix goroutine leaks in events and logs backend 9b152ef20 Add pause/unpause --latest, --cidfile, --filter a65265942 Fix potential leak on mid-stream read error 10d6586cb Makefile: use order-only prereq for podman-remote 0a2ddc9bd [CI:DOCS] Fix typo in manifest manpage 26ae055a2 Remove return error from "containers.pause" eef39b69e "pod pause/unpause/stop" append "report.Errs" to "reports" aa1711e3d Cirrus: comment out f35 for podman4 1f0116817 system tests: new system-service bats file fdba0d790 Vendor in latests containers/storage and opencontainers/runtime-tools 82b1d85eb Print rootfs download as a specific version on Win 576321729 document isolate option for network create 1aafb01a9 buildah vendor treadmill f67ab1eb2 Vendor in containers/(storage,image, common, buildah) 5f848d89e Run codespell 18c0c19aa Add --host and -H as equivalent options to --url c9722c0b1 [CI:DOCS] socket_activation.md: fix typo and layout 5f04f9961 Machine init: create .ssh dir if not exist 56cfdffe4 [CI:DOCS] Tutorials.rst: add socket activation b513dc4c1 Clean up cached machine images d95e79ebe GHA: Fix dumb error check d385914cd Cirrus: Trigger podman-machine task by label a2f6cc74e Podman stop --filter flag 90607a6d0 Podman pull --all-tags shorthand option 3b5034e91 fix tests for "podman kube play" 8e2add770 [CI:DOCS] Update docs/tutorials/socket_activation.md 2270bc5f9 [CI:DOCS] Add socket activation tutorial ad7c54e13 man page checker: enforce stricter options format 66cb856f9 Switch to `github.com/blang/semver/v4` 0f53abd09 Fixes #14698 Use prepared image for WSL2 machine init cc2cfe060 Add podman events -f to be alias for --filter e08a77ce6 Add "podman kube play" cmd 1392922d4 [CI:DOCS] man pages: replace -c with --cpu-shares e3419c032 abi: create new cgroup when running in a container 7b4afbf62 podman: always call into SetupRootless 16b8d77f9 utils: call MaybeMoveToSubCgroup once 4b547a72a podman: move MaybeMoveToSubCgroup to utils/ 445089421 Fix last machine test bb8ff86bf Use SafeChown rather then chown for volumes on NFS c9a82d72a Docker uses "-c" to mean "--cpu-shares" in create and run e83ff8e5e [CI:DOCS] podman-create.md: replace -c with --cpu-shares da8c6a8ea CI: sanity check for desired runtime b8a7e275d [CI:DOCS] rootless_tutorial: Remove incorrect advice regarding volumes and mount points f6ed7a8c9 [CI:DOCS] man pages: remove non-existent option builtin-volume 27e12aa07 test,manifest-run: declare TARGETPLATFORM before using it ffbc2adf7 fix wrong log message on Trace level 377057b40 [CI:DOCS] Improve language. Fix spelling and typos. 3ed323e1b logformatter: link by *task ID*, not build ID 3ce0709f3 podman machine: do not commit proxies into config file Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2022-12-01 17:01:44 -05:00
Andrei Gherzan	758da82203	podman: Add ptest support for system tests ... Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2022-09-16 11:13:31 -04:00
Pascal Bach	c16d3a58ee	podman: replace GOBUILDFLAGS patch ... The GOBUILDFLAGS patch is replaced by explicitly setting BUILDFLAGS="${GOBUILDFLAGS}" in the recipe. Signed-off-by: Pascal Bach <pascal.bach@siemens.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2022-08-25 22:55:48 -04:00
Bruce Ashfield	3292170646	podman: update to 4.2 ... We refresh one patch, and drop another that is already part of the 4.2.x release series. Bumping libpod to version v4.2.0-8-g754ec89a8, which comprises the following commits: eb2496a77 Skip / update some tests under runc eba1f7749 Bump to v4.2.1-dev 7fe5a419c Bump to v4.2.0 754e32056 Final release notes for v4.2.0 4900394c8 Document behavior of --timestamp when only FROM is used b619c7a72 check memory test based on range a3778b051 specgen: use sandbox id instead of name for annotation fa1085ed0 cmd: refuse --userns if a mapping is specified 91a1f3022 e2e: Add rootless mount cleanup test 297c72238 [CI:COPR] podman.spec.rpkg: add python3 dependency for el8 a6ea3325a start filter flag changes a19c5a252 Cirrus: Run Cross builds in [CI:DOCS] mode e776425e5 podman info: hide `--debug` 53a631ca2 ISSUE TEMPLATE: remove `--debug` from `podman info` a7d932422 Cirrus: use dnf instead of rpm to install packages 8c36b8c52 Cirrus: Fix e2e tests for "mount_rootless_test" bd3e36040 podman generate systemd --new: allow -h hostname 5c17d1b14 test: verify manifest inspect must contain OCI annotations 6b2bbd2d1 podman-volume-import: Reword "precendence" 54ee42331 man podman-volume-import: Clarify that merge happens c5c0efc95 podman generate systemd: handle --sdnotify correctly 7e7951145 Bump google.golang.org/protobuf from 1.28.0 to 1.28.1 8b9e5fb08 Use 8k buffer to help clients w/ broken parsing 7efd81cb8 With --rm option remove container if podman run fails 346b22f07 Bump golang.org/x/tools from 0.1.11 to 0.1.12 in /test/tools 5b5e53d70 syncContainer: transition from `stopping` to `exited` b7feafcb0 Fix: manifest push --rm removes a correct manifest list 24f219efb Fix: Restore a container which name is equal to a image name 32848b95f When removing objects specifying --force,podman should exit with 0 312bef288 test: update apply-podman-deltas for new tests 9b0a1fa75 build: implement --cache-to,--cache-from and --cache-ttl a382bd329 vendor: bump buildah to v1.27.0 916d51bd0 test: update apply-podman-deltas for new tests 3a239947a build: implement --cache-to,--cache-from and --cache-ttl 6b2512f67 vendor: bump buildah to v1.27.0 6beb3f208 Fixes #15154 Change order when config and connections are written eab03100f Add support, and default to rootless w/WSL prompt f826ed584 Disable F36 service that is incompat with WSL kern d16b42f26 pkginstaller: use correct GOARCH value in case of arm build 0593ceb01 Cirrus: Update DEST_BRANCH to v4.2 fb8584332 Cirrus: Improve CI VM image updates for EC2 d5793db28 Bump back to v4.2.0-dev 7e1f3106f Bump to v4.2.0-rc3 1b7e16654 v4.2.0-rc3 release notes bf2a53a2e pkginstaller: use correct GOARCH while building podman binaries d4481a317 pkginstaller: makefile improvements to avoid redownloading 1b3844f65 pkginstaller: add makefile target to notarize the built pkg 64db955e0 pkginstaller: sign qemu-system-* binary for the pkg 9a820b480 Add support for building macOS pkg installer 5c95c0920 Add support for creating sigstore signatures, and providing passphrases 0aebdb687 Hide podman manifest push --sign-by on remote b2b3edaca Use signByFlagName instead of copy&pasting the string 49d40293b Remove libpod/common eacee60c8 Update c/common to an unreleased version 62cc871c6 Update the registry server we test against from 2.6 to 2.8 52db76373 Use existing REGISTRY_IMAGE variables in more places 230363225 Use httpasswd from the surrouding OS instead of the registry image 74155705e fix e2e sign tests 983cfb90e Final v4.2.0-RC2 release notes bf6f79630 Skip one failing test on Ubuntu 25efc9b2e Fix incorrect release note about regexp 4acc14b4e Bump to v4.2.0-dev 81005b8d8 Bump to v4.2.0-RC2 6fafe120c Final release notes for v4.2.0-RC2 990ef3cf6 [CI:DOCS] podman-generate-systemd.1.md: document --sdnotify c85722eb9 pod create --share none should not create infra c3e0f8ebe machine: Fix check which is always true e6ebfbd1e Set TLSVerify=true by default for API endpoints 64bc2ee97 Semiperiodoc cleanup of obsolete FIXMEs b339045db benchmarks: fix create test fd1f5f55a integration test: fix network backend option with remote c7fef7316 docs: remove CNI word where it is not applicable 976f818f1 libpod: do not lock all containers on pod rm 772e883f8 container wait: improve error message 206f11d4f Makefile: use order-only prereq for podman-remote c4616510a API: libpod/create use correct default umask ce8b6cebd compose test: remove cni config copy 553a70096 compat api: always turn on network isolation for networks aef8039d3 compat api: allow default bridge name for networks fa7e9f0f8 Compat API: unify pull/push and add missing progress info fde39edb9 remote push: show copy progress 1f48980af fix broken machine test cbcbde587 pkg/machine/e2e: do not import from cmd/podman 69fcf04c6 fix some pkg/machine/e2e test to read stderr ce790e61b enable linter for pkg/machine/e2e ff7259567 [CI:DOCS] Cirrus: Add prominent gitlab warning 3edaa174e libpod: create /etc/passwd if missing e41113dca e2e: show command and output when a timeout happens f6d18ed41 fix goroutine leaks in events and logs backend dc1dc4600 podman-remote pull: fix duplicate progress outputs 2350ef9dd Fix potential leak on mid-stream read error 7b28a1b7c vendor: remove unused deps 3aec669e9 Makefile: remove building pages for man5 ed49f9411 makefile: remove processing of pkg/docs 24bbd40ce rpkg: remove usage of pkg/hooks 73ecc5a4b pkg,libpod: remove pkg/hooks and use hooks from c/common d151edeea Fix machine test 86159e39b document isolate option for network create c3c07ed09 Update init ctr default for play kube 6057db75d Remove return error from "containers.pause" de8d2cc94 "pod pause/unpause/stop" append "report.Errs" to "reports" 409fbeaab system tests: new system-service bats file d2e2756a4 Print rootfs download as a specific version on Win 244055030 [CI:DOCS] Fix typo in manifest manpage 76fa80447 Vendor in latests containers/storage and opencontainers/runtime-tools e89550bcd buildah vendor treadmill 9c1de040b Vendor in containers/(storage,image, common, buildah) 03eaea8bb Run codespell e4b82c77f Add --host and -H as equivalent options to --url 183fdea5f Use SafeChown rather then chown for volumes on NFS 17dbce2fb Clean up cached machine images e473c5e4b Machine init: create .ssh dir if not exist 53edd9b65 Podman pull --all-tags shorthand option f07d2bac4 Cirrus: Trigger podman-machine task by label 3bd248ae7 GHA: Fix dumb error check 6d84a9952 Podman stop --filter flag a78be890e Switch to `github.com/blang/semver/v4` 52850ce70 man page checker: enforce stricter options format a5827e13c Fixes #14698 Use prepared image for WSL2 machine init a4bae330a Add podman events -f to be alias for --filter d560c7897 [CI:DOCS] man pages: replace -c with --cpu-shares 5f5379deb [CI:DOCS] podman-create.md: replace -c with --cpu-shares f7707c81a Fix last machine test 35dc17bfe abi: create new cgroup when running in a container 7b4ebfa65 podman: always call into SetupRootless 3b37095b2 utils: call MaybeMoveToSubCgroup once edfe80027 podman: move MaybeMoveToSubCgroup to utils/ b29a52a48 Docker uses "-c" to mean "--cpu-shares" in create and run ffd2e6df9 test,manifest-run: declare TARGETPLATFORM before using it ca4630ede CI: sanity check for desired runtime bf269e634 podman machine: do not commit proxies into config file b2f3b28c6 logformatter: link by *task ID*, not build ID cfb768a36 fix wrong log message on Trace level 557b65e09 [CI:DOCS] Improve language. Fix spelling and typos. a363b3a65 Initial release notes for v4.2.0-RC1 f22af2bf8 Bump to v4.2.0-dev 74aa681e5 Bump to v4.2.0-rc1 aa29bd6de Update CI base branch 87793b633 [CI:DOCS] Rewrite the --gidmap option docs 3bb4cf8ee libpod: read exit code when cleaning up the runtime 62cdc387d podman wait: return 0 if container never ran 25d74db45 [CI:DOCS] podman-info.1.md: Update examples b41e42f42 test/system/130-kill.bats: use $IMAGE 81a19a568 Add ports and hostname correctly in kube yaml 6b9abe69d improve pull-policy documentation 76d887c77 Fix machine tests 1e7686df6 Manifest test cleanup: use defer() 96dd57ca5 podman wait can take multiple conditions a46f79883 pkg: switch to golang native error wrapping d1754bdd4 Refactored networkPrune function 1161e8bd5 manifest_test: safer registry setup and teardown 61a67a07b pkg/machine/qemu: start VM check if qemu is alive a26cf638e machine: qemu fix chardev id starting with letter 4374038cc pkg/machine/e2e: do not import from cmd/podman 4cfa8ccb2 machine test: fix endless loop in test 3adda62d2 [minor] fix duplicate test name e8d2d70ee port forward range test: fix many oopses 0424084b3 fix namespace reporting 03ee8204d podman machine: make 9p security model configurable; adjust docs 44bd166b3 test-apiv2: streamed response testing based on response duration a5898129c Fix qemu machine startHostNetworking always failing cc6faddfa use c/common code for resize and CopyDetachable 1267515e1 Update play kube docs 791dbf823 golangci install: explicitly set BINDIR 4fd5fb97a e2e tests: cleanup: capitalize CONSTANTS 72aa00aca Fix streaming for libpod/pods/stats endpoint ee05bc031 Fix network inspect compat API discrepancy 9d6efb344 Podman machine info 65d511c6d Fix podman pod unpaue TODO 251d91699 libpod: switch to golang native error wrapping 8f2d9e7a7 podman pod create --uts support 5633ef1d1 Docker-compose disable healthcheck properly handled 488eb3b74 (rootful) docker-compose now updates network MTU 4fe7b8baf Podman system df JSON format outputs `Size` and `Reclaimable` b9aa47555 Sync: handle exit file 49cb288df hack/test/utils: switch to golang native error wrapping 2da731a7e test: reduce sleep interval c02f793ba test: return immediately on connect efe1176dd specgen,run: support running container from valid manifest list 8601ab6b0 Silence setlocale warnings from `podman machine ssh` 33a474286 pkg/machine: add missing build tags to tests 5b1867923 TestEnvVarValue: fix assertion 3fbe93371 envVarValueResourceFieldRef: use int64 for value 4c5b058e8 fix flake in aardvark tests 597de7a08 libpod/runtime: switch to golang native error wrapping 8106568ca test: drop pod-create --device-read-bps test 5491123c2 [CI:DOCS] troubleshooting: document --tty and CR fe559287c docs: Remove -s from systemctl enable --now sshd 24fcfb5d9 Fix spelling "read only" -> "read-only" 2f1075dfb Implement proxy support for Windows b92149e2a podman pod create --memory 8cff1c2bf Cirrus: Add podman-machine integration test f58d7dbda Cirrus: Fix elevator workaround multi-cloud support 7131c8472 fix build d6678adc9 overlay,mount: convert lowerdir to absolute path for overlay mounts of path 891dfd3a8 specgen: fix parsing of cgroup devices rule 5262f7e01 Fix podman machine on Windows 9c658f490 docs: mention the podman-kube template c6fb533ca podman-play-kube template: rename to podman-kube bd51410b8 service: do not run under the root cgroup 5c3979762 utils: move the cgroup if root on cgroupv2 e8adec5f4 cmd/podman: switch to golang native error wrapping 7bbfb3eb0 api,images: add support for LookupManifest to Image remove API 64ec894c5 [CI:DOCS] Update podmanimage comment. d9ff0fd15 Only allow Rootless runs of Podman Machine 6904b1a61 build(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0 5790caaef bindings: Add support for Delete in pkg/bingings/manifest 1affceb29 runtime: unpause the container before killing it 7f994a80d only create crgoup when not rootless if using cgroupfs 59a7ac210 Make `podman machine stop` wait for qemu to exit 2ee9fe4cb vendor containers/common 79a38a2c6 Add test for restore runtime verification using non-default runtime 8e3a46a87 Fix runtime check during restore 6c4c050d3 fix volume reporting in system df cc4914633 Docker compat returning unknown "initialized" for `status.status` 6d3520e8b podman image scp remote support & podman image scp tagging dc58a7306 Makefile: don't try to build rootlessport on FreeBSD c55feb7bf Makefile: don't use '-t' to specify the directory to install manpages af16edf49 Makefile: use GNU sed to convert manpages on FreeBSD 94a634fcf Makefile: use bash to evaluate tool paths 0e03a64f9 pod: ps does not race with rm 0cabd8006 pods: move code to a new function 3b10c1b78 Use Regexp in volume ls --filter name aada13f24 volume: new options [no]copy a4094530b volume: drop TODO comment 443a2afdb volumes: switch order of checks 28e2a604b vendor: update containers/common 99f68898c reveal machine error, ignore false state 9cb93c6f9 go.sum: run make vendor 0c1a3b70f Show Health Status events 386ea49cf Show starting state when machine is starting 66c62eb96 Implement CatchAll and StopCatch in signal_common.go 345778ece Fix "podman run port forward range" flake 4c5788bac Fix spelling of GetCriuVersion 590290597 Add missing criu symbols to criu_unsupported.go 2792e598c podman cgroup enhancement 09754d21d [CI:DOCS] Minor update to podmanimage upstream docs 041947b11 Bump github.com/stretchr/testify from 1.7.4 to 1.7.5 3619f0be9 Fix: Prevent OCI runtime directory remain a4ae22df8 Workaround for bug 14653 (checkpoint flake) 491857a88 Use HaveLen instead of len in podman machine list e2e tests f0b9e56e9 Fix machine list: --format implies --noheading 2fab7d169 add podman volume reload to sync volume plugins 6e8953abf test/testvol: rework testvol binary fcc25afa5 test/testvol: update container image golang to 1.18 472f79f08 test/testvol: move Containerfile into testvol dir 0d3aa61be libpod: volume plugin sendRequest remove body bool ad78d239d fix system connection and scp testing 3a810b8d2 Two fixes for DB exit code handling 30e7cbccc libpod: fix wait and exit-code logic 15188dce0 conmon: silence json-file error 2eda547dc podman run/create -v relative filepath support ef563c5a1 logformatter: link to logs using Cirrus API aa4279ae1 Fix spelling "setup" -> "set up" and similar 0320ce37d Fix system prune output message 7ef282d64 Remove lorgus.Infof on bindings start and attach 132393d15 Update basic_networking.md 4a981c490 allow filter networks by dangling status 050693b2e bump github.com/spf13/cobra from 1.4.0 to 1.5.0 ecf225019 rootless: attempt to join all specified paths 9afd5e31c rootless: improve error messages 99258703a rootless: do not ignore reexec_in_user_namespace_wait errors cfba09f68 Bump github.com/stretchr/testify from 1.7.2 to 1.7.4 1f539a264 api: show the memory limit specified for the container 7f82c4323 Fix typos f451b68df podman pod create --shm-size 46da7bc78 podman machine init --now: respect proxy envs bb5bd09ea API: containers/json always set application/json content type 282714090 [CI:DOCS] "setup" -> "set up" in source code comments dda68201a [CI:DOCS] Rewrite --env docs 948866e8a Update to use gopkg.in/yaml.v3 075c9ac45 .cirrus.yml: fix matrix expansion by properly merging YAML mappings 809044576 vendor in latests containers/image ce3d0954a Open Windows tutorial after MSI installation a3b3f1723 linter fix from #14299 065302bd5 Cirrus: Fix build. dep. missed in #14521 3af047b63 Vendor in latest containers/storage 09c462d73 fix "podman -h" help output 6c5e1420e Make it clear the REST API could be a security issue 28a38617e [CI:DOCS] fix typos in prerequisites for Fedora and make binaries sections b3f094a61 test/system/410-selinux: fix for newer runc e69691c27 Fix interrupting machine start leaves the machine unstartable 0a202a9f0 system test image: bump to 20220615 21819254d golangci-lint: update to v1.46.2 c6b9baa6c system tests: avoid rmi -a ... plus cleanup 693d439ac Update release notes and README on Main for v4.1.1 751ba07a7 libpod: improve check to create conmon cgroup 90a669594 fix CI: golangci-lint is broken on main 20b3fbe6d systemd socker activation: check listener to prevent panic 43e12c135 Fix #14416: Use absolute path to WSL binary to create ssh keys for `machine init` bfc446eea buildah-bud tests: reenable skipped 'bud' tests 455f4c782 CI: APIv2 tests: add rootless 232b3e342 buildah-bud tests: add arg sanity check 41528739c golangci-lint: enable nolintlint 1b62e4543 golangci-lint: add systemd build tag fcfcd4cdb container: do not create .containerenv with -v SRC:/run 4811cb110 podman system prune support prune unused networks 5e9d20448 Update vendor of containers/buildah 608ad7d11 Non-running containers now report statistics via the `podman stats` command 958759a71 podman pod clone 8d3e6577a Fix M1 QEMU flags b7c283759 Bump golang.org/x/tools from 0.1.10 to 0.1.11 in /test/tools 48cf1d258 podman-remote push --remove-signatures support d4272bed5 podman cp: do not overwrite non-dirs with dirs and vice versa 46c8da7d9 vendor buildah@main 7b3e43c1f podman volume create --opt=o=timeout... 80d5a00bb Fix Remote filtering embedded directory test 2b97795c1 APIv2 tests: (try to) fix flaky registry panic 81153ffa2 Introduce 'Starting' status for machines b13fc1bf9 patch for pod host networking & other host namespace handling 5614c29ce compat api: fix regressions from "Swagger refactor/cleanup" eed0e6671 Pass '--file-locks' to OCI runtime at restoring c77691f06 Do not error on signalling a just-stopped container 7e9767502 Bump github.com/opencontainers/runc from 1.1.2 to 1.1.3 549bffe58 shell completion: fix problems with container path completion bce97a3b5 apiv2 tests: clean up 700248bfe Update remote_client.md 254048e17 Cirrus: Fix artifact passing when dep. skipped f0516a014 --userns=keep-id,nomap are not allowed in rootful mode 126686f3d Podman images generated with empty /etc/containers/storage.conf 20aaaa382 Minor: Fix podmanimage README links dc4a01ec6 Add docs of changing default netavark networks ed1e4f94f Infra Inheritance patch 5fc3d871a Cirrus: Simplify only_if/skip + optimize multiarch a69a48b0d test/e2e: network dis-/connect test remove unhelpful assertions 90d80cf81 use resolvconf package from c/common/libnetwork ddf1d2cb3 update c/common to latest 811cce5a8 libpod: store network status when userns is used 0f424e90d Bump github.com/docker/docker e41d4a247 Add missing tests for manifests API 2a0d896b3 runtime: make error clearer 2c12f7bd1 Add some Readme updates around machine 8533ea000 Privileged containers can now restart if the host devices change 335925f47 Minor: Remove useless addition of storage.conf aadae49ad overlay-volumes: add support for non-volatile upperdir,workdir for anonymous volumes 5c508cb4e Bump github.com/stretchr/testify from 1.7.1 to 1.7.2 67ea5fdad Cleanup the leftovers used with ginkgo focus option 1fc5a107a [CI:DOCS] PodmanImage Readme touchup 22e442ee2 tests: buildah-bud fix reason for skip 9de092ec0 Fix secret-verify-leak flake: set build context to subdir 259c79963 Improve robustness of `podman system reset` 87b05b6a6 Prevent simultaneous machine starts 3c9b75c21 Using logDriver instead of query.LogDriver for podman play kube 241458666 podman logs k8s-file: do not reassemble partial log lines 2b0cb3002 test/e2e/save_test.go: fix flake b8de285a4 Stop machine before force removing files 1b6505d74 Update test output expectation 9a34b88c9 changed megabyte to mebibyte 831d6534f fix pod network handling with a host network 5023ce585 Align docker load and podman load output f2bbbd20d shell completion for paths inside the image/container 69e44bbcc bindings: add manifest should follow es_model while marshalling OSVersion and OSFeatures 5b9729c47 Document protocol usage for --publish 6dffa453a Bump github.com/containernetworking/cni from 1.1.0 to 1.1.1 44f11ec2c podman-remote: enable support for additional build-context on macOS, remote 3fa09e9db Makefile: Handle unexpected empty var. values fc95f832a Podman image: Mass cleanup + fix missing storage.conf f728b7b5a podman pod create --uidmap patch 8291b51ce expose podman.sock in machine inspect dbdc26a4c Removed `imageStream` hardcoded value 2805c7353 pkg/specgen: parse default network mode on server 78d1f5d7d fix "tail 800 lines: journald" flake 193397290 Add ExecStop and dependencies to fix shutdown f91c852fa Makefile: force podman-remote-static to linux cef044d85 Bump gopkg.in/yaml.v3 to v3.0.1 205c8c071 fix podman container restore without CreateNetNS 16e8b2f32 podman stats: work with network connect/disconnect ec576a549 podman volume export/import: give better error 4a8346551 podman machine ssh: do not print warning everytime 7e69e2b53 Podman no-new-privileges format 0e58636c3 podman machine ssh: set correct exit code a6f8cad54 fix bad import path for cmd/podman/utils c0ad9a43e Mount propagation works with named volumes f23ae4d66 healthcheck: wait for systemd operations 8efdbf5c4 Add API support for NoOverwriteDirNonDir e13c5f3a9 Refactor populating uptime 3a32d60e5 [CI:DOCS] Quick typo for troubleshooting ea1a8e243 Move Attach under the OCI Runtime interface fb163976f Support setting image_volume_mode in containers.conf d730f2b25 Add Authorixation field to Plugins for Info ab0728421 docs: note regarding version compatablity between server and client for bug fixes 87ad46060 Remove TODO comment 66a56ce05 vendor: bump buildah to v1.26.1-0.20220524184833-5500333c2e06 6124b5199 build: allow using cache explicitly with --squash-all using --layers 8c1128db4 Cirrus: Fix several TODOs 426a07e70 Combine the CheckAllLatest CID and PodID functions c9f6639ec Fix TODO in parse/net.go 32aa12a28 Remove TODO from pods/ps.go 8c781416b Fix swagger model of `InspectPodResponse` de54d33d2 Fix test block bypass instructions b730e7328 cmd, build: remove redundant squash processing logic 66c846616 Support remote deadlock errors in rm badf76e17 Remove more FIXMEs 9fcfea764 First batch of resolutions to FIXMEs 02c437405 [CI:DOCS] Add play kube support docs 338f01237 Remove unused archive flag from diff commands cb76d1523 fix f35 integration test network flake c3677f515 test/system/250-systemd.bats: clean up outdated TODO c9279d4d9 pkg/bindings/play/play.go: drop TODO message 462cb3370 pkg/bindings/containers/archive.go: drop TODO 60e31d87d pkg/auth: drop the TODO 09ae060a7 pkg/api/handlers/compat/images.go: drop TODO message c04ec104d libpod/pod_top_linux.go: s/TODO/NOTE/ b19e2d6f8 events: drop TODO comment 429b1f768 Fix codespell errors 4a447a213 work queue: simplify and use a wait group 2ce475576 Allow podman pod create --share +pid df394b521 Allow podman pod create to accept name argument 70f147d01 cmd/podman/common/completion.go: fix FIXMEs 2be4589b5 Remove TODO re: storage-driver 8de3e9102 help-message system test: catch more cases 33628003c Put current product first and historical product second 2400d1d52 go format previosly touched files b3e2324f5 test/e2e/search_test.go: re-enable registry.redhat.io test 956e2e1b8 pkg/domain/infra/abi/images_test.go: remove commented code fbeef1d70 image list: remove unused ConfigDigest 90a6f39d0 pkg/inspect: remove unused ImageResult type 5268314e5 podman image mount: print pretty table d3d3a207d pkg/bindings/images/rm.go: remove redundant FIXME 6c6e97018 pkg/bindings/images: remove TODOs re: system context d924c46da autocomplete `podman search --filter` f98a7d140 build(deps): bump github.com/vbauerster/mpb/v7 from 7.4.1 to 7.4.2 8af98b342 contain_top_linux.go: s/TODO/NOTE/ f5450b1e8 system tests: fix flake waiting for container to run 2133edb2c compat, build: suppress step errors when quiet is set 8fbb933f5 look for firmware based on the path of qemu binary 5d37d80ff Use containers/common/pkg/util.StringToSlice d29dec967 Cirrus: Fix building multiarch images dde428642 Bump Compat API maximum version to v1.41 b7dbc505b Instead of erroring, clean up after dangling IDs in DB e22611baf fix typo ac154425d Update _play kube_ doc following PR #14266 merged c984956f9 fix compat image resolution d66288315 auto update: create an event 633d5f1f8 fix --init with /dev bind mount 4960a17a5 fix tests by randomize the device folder name 94e82121b Support running podman under a root v2 cgroup a0d0207a2 fix podman-for-windows.md 5b79cf15a Swagger refactor/cleanup fb219a809 Update c/image 9c9fc96d2 shell completion: use more constants instead of duplicating strings 337f8b9d9 shell completion: podman save --format use all valid values 74f70315b shell completion: update podman inspect --type options 318e95fd2 shell completion: fix podman event --filter values b22143267 linter: enable unconvert linter 3b0844f99 shell completion --format: add help to function with args 3d8a1f917 shell completion --format: support maps and functions ecd6edb19 shell completion --format: fix embedded struct handling 11ff5ffd3 shell completion --format: only show usable methods eeeb88a66 shell completion --format: only show exported fields f5c8c0911 add tests and fix bug when char device pass the test as block device 653117087 ci: pr-should-include-tests: add more exceptions 40a1cd4ef Remove GO111MODULES use d49efde27 Makefile: rm gofmt target 9bf81814a Makefile: rm CHANGELOG_* and ISODATE vars d2070a39e Makefile: rm -mod=vendor 2b54bf3e6 Move GOPROXY from Makefile to cirrus.yml 11d3cf269 Makefile, podman.spec.rpkg: rm GOBIN and GOPATH c63bb6b9a Makefile,.gitignore: rm .install.goimports e2d2b537a Makefile: rm .gopathok d8c42de41 Makefile: rm .install.libseccomp.sudo target c632a2efc dependabot: add release-note-none label 0c9b0e2aa expose block and char devices with play kube 8684d41e3 k8systemd: run k8s workloads in systemd 6f9155cbb api: make no-op remote functional in /libpod/build 21a5ef859 Don't complain about XDG_RUNTIME_DIR, Closes #1424 dc435ecb2 Make errors on removing exec sessions nonfatal ee782fcb7 Deleting an n use image should return conflict not system error 977cd9bd1 Update WSL machine OS to enable user lingering 0961002d9 Update tutorial list to include Podman for Windows 5b2d5c365 Robust whitespace split of cpu utilization line from /proc/stat de4f76e7e Fix strange buildtag edit c45d51899 [BZ #2083997] pod: build pause image in custom user NS c058b828c Changed permission to 755 25f80941a build(deps): bump github.com/docker/docker 2b03a1088 Vendor in latest containers/common b8103640a Make sure tests are cleaned up when they complete 7804f4d29 Add support for machine events on Windows a4aa07a07 [CI:DOCS] Treadmill script: add --reset option b7ce98619 Fix broken pwd 1094d7553 build(deps): bump github.com/opencontainers/runc from 1.1.1 to 1.1.2 9df390655 shell completion --format: work with pointer functions 03af8213c sdnotify: send MAINPID only once 840c120c2 play kube: service container ecf0177a0 vendor c/common@main 16e22dbbe vendor: update c/storage and c/image 37e30bcb2 Fix hang in build-each-commit test e76a07087 [CI:DOCS] man pages: fix inconsistencies 60258925a test: update fedora toolbox image 1834afd3e [CI:DOCS] Benchmarks: new tool for parsing results 813f6a68f [CI:DOCS] fix `make localbenchmarks` 876b05cdb Add initial Windows guide c7c00ce55 Add more machine tests d0ca90b3e test: simplify cleanup code 0774a4ce1 kube: add support for --userns= 2b5778d41 Cirrus: Update images + new automation library 9ffc2a6ac Cirrus: Fix Makefile including 'hack' in $PATH abf4f77bc Cirrus: Simplify use of cache in automation 237f76126 Cirrus: Simplify rootless ssh setup c1656e2ee Cirrus: Guarantee $DEST_BRANCH is passed through 82f2b3edb bloat check: make more robust 9e1ee081f kube: honor pod security context IDs 82a4b8f01 kube: refactor setupSecurityContext to accept directly the security ctx be5abf03a fix: Container.cGroupPath() skip empty line to avoid false error logging c48657671 test skipper: check for $DEST_BRANCH 8ecd0b5bc fix broken CI test bb8f53a72 test: fix "podman search format json" b58e7e7f1 play kube log tag handling a1a299797 Update version to v4.2.0-dev bce014e19 Update release notes for Podman v4.1.0 9cd74a13c update podman version in readme 0dbfd376f Add 4.1 branch to API documentation 2a401b3ff Bump github.com/docker/docker ed8c1dfb4 libpod: add c.ConfigWithNetworks() d7f43e677 test: fix failing TestPostDeleteHooks cf35168f0 test: use `T.TempDir` to create temporary test directory 6ddccd94f e2e: pull_test: speed up --all-tags c38e7e5f6 build: disable --output for podman-remote clients 140fb3ae1 e2e: pull_test: squash --quiet test 669401c31 e2e: pull_test: move tests around 2fa906cca e2e: pull_test: remove redundant tests 6eaa9ca26 e2e: manifest_test: use cached registry ed159f864 Vendor in containers/buildah@v1.26.1 ebde52583 update rootless_tutorial.md 7c59f1d07 Fix usermod call in rootless_tutorial.md 5fa6f686d Report correct RemoteURI 386614367 exclude new tools vendor dir from validate f6b397bf1 add dependabot config for test/tools go.mod 3b9177995 vendor test tools in submodule 80744c644 podman system reset removed machines incorrectly 9974c90cc libpod: treat ECONNRESET as EOF 245151e62 Add more unit tests a5800c78f machine events: only open sockets when needed 36c5e6e0c Bump github.com/containers/storage from 1.40.0 to 1.40.2 ccd576504 play kube default log driver 8781a3635 benchmarks: push/pull 1585b175d pass networks to container clone 88015cf0d Implement --format for machine inspect 8da5f3f73 Add podman machine events 9166894c6 vendor test dependencies instead of installing via network 6e2e3a78e generate systemd: pods: set exit policy 5fac879ea vendor treadmill script: run 'git add vendor' 0bb484937 Additional stats for podman info e247f02a4 Vendor in containers/(common, storage, image) e74717f34 Treadmill script: revamp e17b56e0c CI: emergency fix for broken go get 4e44e5b5d Bump github.com/rootless-containers/rootlesskit from 1.0.0 to 1.0.1 4eff0c8cf pod: add exit policies cfca85356 libpod: unset networks before storing container conf 77d872ea3 vendor c/common@main 5b78f9576 Implement machine inspect for WSL 772ead253 Use simulated dual-stack binds when using WSL 23de3801d buildah-vendor-treadmill script: yet more checks 01acc2565 libpod: host netns keep same /etc/resolv.conf 519820926 fix incorrect permissions for /etc/resolv.conf in userns e6557bf0a pkg/api: do not register decoder in endpoint handler a48c37df3 fix broken hooks-dir test 69c479b16 enable errcheck linter 384c2359b libpod: unlock containers when removing pod 2902d32c4 Refactor machine inspect 64a368ba2 remove unused codepath for creating/running ctr in a pod 6b7fd318b image search --format: add completion for go template 0d9f19028 shell completion --format: use structs by reference cac2b7800 image --format: fix add completion for go template 7f28fd938 Report properly whether pod shares host network cb9a45630 shell completion --format: use anonymous struct field once 8be978158 network inspect --format: add completion for go template f93ba587c shell completion --format: work with nil structs 589e42c99 Bump github.com/containernetworking/cni from 1.0.1 to 1.1.0 a5aea8e50 Three manual fixes b3f38c31b Ginkgo: use HaveField() for better error checking 91ead1528 volume: add new option -o o=noquota ea1fcd7bc podman search: truncate by default c721acf08 podman machine starting test 3b8fa515f Emergency fix for new CI linter 83a75d2a3 Produce better test error messages 461b73f56 Github PR template: add release-note block 22b421dd7 Add CreatedSince & CreatedAt format fields to podman image history e7390f30b Allow changing of CPUs, Memory, and Disk Size 9c0c29f08 Cirrus: Fix ownership of repos. to keep git happy d4e30b33a Temporarily skip netavark/aardvark e2e test cf449e81a Cirrus: Temporarily update netavark/aardvark-dns cd7cff6bb Cirrus: Test w/ netavark/aardvark-dns in F36+ 3a07fc446 Cirrus: Update to F36 CI VM Images a73425a0b Revert "Cirrus: Disable F34 aka prior-fedora testing" Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2022-08-25 22:55:48 -04:00
Andrei Gherzan	d55da717eb	podman: Rename podman-rootless.conf sysctl file to aid overrides ... Files are sorted in lexicographic order. Moving podman-rootless.conf to something greater then '00' would help with systems providing default values in other configuration files that can be overridden by podman-rootless.conf. Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2022-08-23 21:44:32 -04:00
Andrei Gherzan	eb1f9b1e1f	podman: Use gcc-based toolchain ... clang-based builds are still broken due to: https://github.com/llvm/llvm-project/issues/53999 Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2022-08-03 23:18:32 -04:00
Andrei Gherzan	89abebb0fe	podman: Backport patch to fix duplicate switch statements ... This will fix clang-based builds. Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2022-08-03 23:18:32 -04:00
Bruce Ashfield	7ec4b4746d	podman; fix patch fuzz/failure ... patch a33188f [podman: Fix host contamination] appears to have introduced fuzz/failures. Which strangely wasn't picked up on merge testing. We refresh the patch to fix the issues. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2022-07-17 14:37:43 -04:00
Andrei Gherzan	cf8a763b28	podman: Add support for rootless mode ... This support is disabled by default and exposed via PACKAGECONFIG. Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2022-07-15 17:11:58 -04:00
Andrei Gherzan	2e05df2f43	podman: Silence docker emulation warnings ... Podman can run in via a docker symlink emulating docker commands. By default this generates a runtime warning. This change silences it via the provided interface. Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2022-07-15 17:11:58 -04:00
Andrei Gherzan	a33188fab8	podman: Fix host contamination ... The project's internal Makefile uses BUILDFLAGS variable to pass arguments to `go build` while Yocto/OE defines it as GOBUILDFLAGS. Add a patch to align this and avoid using host headers in which case, a musl build will fail similarly to: | [...]ld: /tmp/go-link-3172010154/000015.o: in function `vfprintf': | /usr/include/x86_64-linux-gnu/bits/stdio2.h:130: undefined reference to `__vfprintf_chk' | [...]ld: /tmp/go-link-3172010154/000016.o: in function `fprintf': | /usr/include/x86_64-linux-gnu/bits/stdio2.h💯 undefined reference to `__fprintf_chk' | collect2: error: ld returned 1 exit status Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2022-07-05 16:25:25 -04:00
Bruce Ashfield	8aa3d557c6	podman: update to v4.1.0 ... Bumping libpod to version v4.1.0-8-gcedbbfa54, which comprises the following commits: 4ae7161c4 Fix strange buildtag edit 44d253b6c Add support for machine events on Windows 8e3a991ff test: fix "podman search format json" ab4d33e14 Update README for 4.1.0 release 3b4de8efc Bump to v4.1.1-dev e4b039020 Bump to v4.1.0 e87b07f7c Release notes for v4.1.0 final a8b55a3b9 pass networks to container clone b2025c64f Add more unit tests 7b64cd783 libpod: treat ECONNRESET as EOF 6d1d6cc0b play kube default log driver d57bbdb5c Cirrus: Fix ownership of repos. to keep git happy 4716b6b1b build: disable --output for podman-remote clients fbab06796 Vendor in containers/buildah@v1.26.1 ee4e0aa43 Temporarily skip netavark/aardvark e2e test 8b897a586 Cirrus: Temporarily update netavark/aardvark-dns b73bdcdb9 Cirrus: Test w/ netavark/aardvark-dns in F36+ 80cf4e31c Cirrus: Update to F36 CI VM Images 0d8ff6fa9 Add 4.1 branch to API documentation 6ea122f6e Report correct RemoteURI 2fd178ac0 Misc readme update to retrigger CI d3f406e9f podman system reset removed machines incorrectly 8cbe598fd Bump to v4.1.0-dev 0abf24320 Bump to v4.1.0-rc2 d45a68bce Update release notes for v4.1.0 RC2 9e83826d5 machine events: only open sockets when needed a21e11236 Add podman machine events bea8301a8 Implement --format for machine inspect 3ab8fa679 Release notes for more v4.1.0 backports 8842e9b7a Additional stats for podman info 642204821 libpod: unset networks before storing container conf 9d5158e94 Implement machine inspect for WSL b7e8b25d4 Bump github.com/rootless-containers/rootlesskit from 1.0.0 to 1.0.1 65108dede Use simulated dual-stack binds when using WSL 95633146e libpod: host netns keep same /etc/resolv.conf 1cdf18a86 fix incorrect permissions for /etc/resolv.conf in userns bbb10bb52 pkg/api: do not register decoder in endpoint handler c441a1756 fix broken hooks-dir test fb14171cb enable errcheck linter 724965132 libpod: unlock containers when removing pod 159d597cd remove unused codepath for creating/running ctr in a pod a9a70a949 Refactor machine inspect 1d2120412 image search --format: add completion for go template d4fe645ed shell completion --format: use structs by reference 524b53610 image --format: fix add completion for go template a9deb5c67 shell completion --format: use anonymous struct field once 835b89c60 network inspect --format: add completion for go template 68f7349bc shell completion --format: work with nil structs 07bc615b4 podman machine starting test 66500b82a Report properly whether pod shares host network 8627b5151 Bump github.com/containernetworking/cni from 1.0.1 to 1.1.0 9f6131e9c Three manual fixes ecc39b595 Ginkgo: use HaveField() for better error checking e5d6b6b0a volume: add new option -o o=noquota 77f147468 podman search: truncate by default b1089a23b Produce better test error messages 4ff6884fb Add CreatedSince & CreatedAt format fields to podman image history 3226561cf Allow changing of CPUs, Memory, and Disk Size cb399245b CI: emergency fix for broken go get 1593e75c6 Bump to v4.1.0-dev 146dcb28d Bump to v4.1.0-rc1 b2beb5a53 Add release notes for v4.1.0-RC1 3bcfd256b manifest endpoints fix ordering 4a4906b91 pkg/bindings: manifest remove 3.X API support conditional e9599fb1a fix manifest modify endpoint to respect tlsverify param 609b52f72 Bump version to v4.1.0-dev 652921119 Bump github.com/fsnotify/fsnotify from 1.5.3 to 1.5.4 70a2c0008 play kube respect hostNetwork 7259a6315 Truncate annotations when generating kubernetes yaml files 4f8ece76f play kube: do not skip containers by name 51fbf3da9 enable gocritic linter 1a9f110b5 Cirrus: Fix skipping all/most tests 7c914355d [CI:DOCS]Remove unnecesarry files c090931da remote: do not join user NS 49264c714 vendor in containers/(common,buildah,storage,image) facc009ca benchmarks: add more image benchmarks ee9d755c5 Robustify nginx tests ecd245d8f Unit tests for pkg/specgenutil pkg/signal c5e48f12e Cirrus: Re-fix build-cache miss on main eb4e53087 Revert "Cirrus: Fix cirrus cache race on bin/podman" b0d36f635 Implements Windows volume/mount support 3b6ffcd29 Update to use new common machine API d441a711e machine starting status 833456e07 Add podman machine test suite 3d1e40608 Pass --tls-verify option in podman -remote build 62f4ae98f fix staticcheck linter warning for deprecated function a615cb2fe Docs rootfull -> rootful 2f53259a8 Cirrus: Fix cirrus cache race on bin/podman 1260bf631 Revert "Switch all rootful to rootfull" c7b16645a enable unparam linter 94d043be8 Modify the pod name suffix '_pod' to '-pod' 0d83f4b76 Allow filtering of "removing", it is a valid status 13079abe3 Add support for passing --volumepath 44642bee8 libpod/networking_linux.go: switch to sha256 hashes ad249222d Fix hang in test_connect cafb76b63 Increase verbosity and sequencing of APIv2 testing 5b4af0584 replace golint with revive linter 454468e03 Update test to run network check in both rootless and rootfull mode 3e240c3ae Bump github.com/fsnotify/fsnotify from 1.5.2 to 1.5.3 104042e20 Bump github.com/container-orchestrated-devices/container-device-interface e0f5bf279 test/system: add containers.conf test for new /etc/hosts options e912f1b68 Improve /etc/hosts documentation e4ab8a5be shared netns and --add-host should conflict cf1b0c196 network dis-/connect: update /etc/hosts 128086639 libpod: fix c.Hostname() to respect the utsNsCtr 696bcd277 use etchosts package from c/common 1514d5c93 silence deprecated warnings for manifest functions 2a8e43567 enable staticcheck linter 56d6ee080 move golang.org/x/crypto/ssh/terminal to golang.org/x/term e39f4495e Run codespell on code f87f23e3b specgen-volumes: parse --mount using csv-reader instead of split by comma 93ecafcba Workaround criu re-linking output in system test cc3790f33 Switch all rootful to rootfull 566b6071d Cirrus: Fix missing git-enforced runtime identity 80c0fceb2 Add support for --userns=nomap 8080a5f8e Revert "container,inspect: convert Entrypoint to array instead of a string" 17105028e vendor in latest containers/(storage,common,image) 537540196 podman container clone -f d24507c1e Fix upgrade tests assuming storage.conf exists c67d6a52c Fix using --network-backend on podman-remote dc02e99d8 Fix size-check to display more context b7dcbfed0 Update release notes for v4.0.3 and v3.4.7 55a5bd8a0 Optimization: skip tests in some circumstances df156ab78 [CI:DOCS] podman build --pull=*missing* fa239f2ec Bump github.com/fsnotify/fsnotify from 1.5.1 to 1.5.2 eb7171262 systemd socker activation: check listener ff2e6291a vendor c/common 13c6fd067 system service: remove unnecessary pointer to listner 97ee41146 system tests: add assert(), and start using it 93b8ef627 Buildah Vendor Treadmill: the script d865fcc5e Fix e2e tests referencing generic env. var. bbe1063a5 Add checkpoint image tests 756ecd540 Add support for checkpoint image fca3397dc Update github.com/checkpoint-restore/checkpointctl 80d175279 slirp4netns: actually make ipv6 default 519535daa healthcheck: set default healthcheck Interval if not specified in image 0162f678c benchmarking Podman: proof of concept a2077e5ea Add missing events to podman-events man page be0da4a22 Translate Memory Limit to Swap in API 1b3dc899d manpage vs --help checker: better error messages 99bcd6595 Add --quiet to machine ls e716790af Fix typo in generate kube docs for selinux labeling 08d08f995 Correct play kube docs for selinux labeling b03466cb7 Update troubleshooting.md a4798ab4e Respect "Rootful" when starting WSL API Forwarding d68e9faee Update vendor of storage,common 900739d13 Add container.conf default volume to init f38b03d37 Fix Memory Swappiness passing in Container Clone 2a75164e2 add a regression test for CVE-2022-1227 3f2939c2e run, create: add --passwd-entry 97f93dc78 Revert "images --size" 3da3afa57 Add log rotation based on log size 2f4874eb0 Update containers/common to main branch 9ef745d54 System tests: Usage checks: better error messages 63c38b99f Fix --tail log on restart problem 02b7eeff6 Allow HTTP attach to stopped containers 970c8d472 compat api: use network mode bridge as default 6c878b7a5 docs: fix typo in podman-container-clone.1.md 20384b037 build(deps) bump CDI dependency from 0.3.0 to 0.3.2 8710197e8 Introduce machine inspect 3987c529f Add support for ipc namespace modes "none, private, sharable" 2c800a717 System tests: fix oops in start --filter tests 5e680d54e Bump golang.org/x/crypto to 7b82a4e 8fb9dbdb4 machine,rm: Ignore ENOENT while cleaning machine 857b36ca8 Update vendor of storage,common,image fb4fc03ec Pretty print systemd services file 81a95fade run, mount: allow setting driver specific option using volume-opt 923d454b2 [CI:DOCS] Rewrite rootless --userns=auto docs 61cf22288 Cirrus: Fix unsupported cirrus-cron build status ee4a583ed pkg/bindings: document requirements for use d8a902a16 API: use no_hosts from containers.conf 615099ddb System tests: reenable ps --external test 784a13f57 network create: add support for ipam-driver none 2508913a0 If newuidmap or newgidmap fail, then check their permissions 0cebd158b container,inspect: convert Entrypoint to array instead of a string dc17195bd Vendor in new opencontainers/selinux e133a06d2 images --size a95f7f9ca Cirrus: Multi-arch build auto-update + tagging update 356d53434 Fix docker socket handling 90ac1ba2a Prevent set command from updating a running instance db7d69950 Add Podman Hello to readme.md e73547a63 Unify examples section across several man pages: pod rm/start/unpause 9c72ea343 machine refactor 3: add symlinks for sockets bd4b9c3d5 build(deps): bump github.com/BurntSushi/toml from 1.0.0 to 1.1.0 dd9eec06a Unify examples section across several man pages: init/kill 164b64ea3 specgen: do not set OOMScoreAdj by default bf4318e60 Allow creating anonymous volumes with --mount 1cd529b22 specgen: permit --privileged and --cap-add d55c46f8c Cirrus: Allow manually running image-build task 5fcd2a7ac Cirrus: Upd VM images to fix multi-arch build bug f8c2df87c Add build test for .containerignore tar file e5745139a cli commands: better error for unsupported commands daeea48df kube: configmap volume should be reused if already exists 9cacc18c9 Set permissions for GitHub actions a06df4fc1 Machine refactor part 2 81632722e systemd: enable all cgroups when running as a service 23cdbf322 test/apiv2: support netavark 1f1cf7bd4 rootless netns: move process to scope only with systemd 1ffcc4a88 Add 'Os' to be queried via 'version' output b60854e8b Prefer registering both machine and global pipe 2a882b770 Upgrade tests: reexamine cross-testing matrix eedaaf33c fix slirp4netns port forwarding with ranges c185d8c0d Add option for pod logs to display different colors per container. 7a5342804 fix pod volume passing and alter infra inheritance c602084a5 size-check: display binary size and growth 61c518627 upgrade tests: fix networking problems 21502987b replace hpcloud/tail with nxadm/tail f6963cea1 Cirrus: Build multi-arch images + manifests cdf74f208 Set systemd mode if entrypoint begins with /bin/sh -c a8e6c639e Unify examples section across several man pages 6e0e1cbdd Migrate machine configs 1821eb383 Pin actions to a full length commit SHA 2ac897aa0 Machine refactor - part 1 38bd4010c network setup: fail if slirp4netns is not installed 82ed99b6a event: generate a valid event on container rename operation 798988050 Fixes errors from 'manifest push' being dropped in remote case d106b294b Switch all calls to filepath.Walk to filepath.WalkDir 446c35efd Vendor common Added patch provided by rhatdan to add support for shareable ab41037c8 Update filter docs with missing entries and add negation option. 3cc173937 Resolves #13629 Add RegistryAuthHeader to manifest push 7680211ed Remove error stutter 76614c461 build(deps): bump google.golang.org/protobuf from 1.27.1 to 1.28.0 ffbab30d7 Run codespell to cleanup typos 25345c087 build(deps): bump github.com/rootless-containers/rootlesskit 640c2d53a test: fix podman run test as rootless 4f73cf3fc Misc typo fixes c01d1f8e3 [CI:DOCS] docs: drop note about upcoming RHEL 7.7 d4bf6b4d7 clarifying "loginctl enable-linger" section in doc 61b2d8844 Bump github.com/prometheus/client_golang to v1.11.1 b469bf5c0 container: allow clone to an existing pod eb5b08f62 build(deps): bump github.com/docker/docker 7189b6f26 podman machine set: clarify --rootful option c0bbca8c4 podman machine: fix port forwarding with proxy 7ae52e86f readConmonPipeData: try to improve error 809f82bdb specgen: fix typo bf6430d18 Remove experimental warning from podman-remote rpm e90b35438 machine-set: fix example for setting rootful flag 752680366 play: kube: use in-memory kubefile and remove tempfile 9b0c8d23b man pages: sort flags, and keep them that way 346beec35 Remove nix packages, since no one is supporting this 5e28cbc5f When running systemd in a container set container_uuid da5891130 fix podman machine start log level detection 59dc70bb4 podman machine start: lookup qemu path again if not found 5669ffb35 document that using libpod package directly is not supported cdda1924a Explicitly use IPv4 to check if podman-machine VM is listening a6504963b Fix manifest 4.0 endpoints [NO NEW TESTS NEEDED] 5b2597d52 Fix a potential race around the exec cleanup process aafa80918 do not set the inheritable capabilities eedce31eb import: allow users to set os, arch and variant of imports 13b6ff652 docs: Fix links to Containerfile and containerignore 41a6dd36f Update swagger to improve compatibility [NO NEW TESTS NEEDED] 88d4db009 Binary growth check, part 2 of 2 3627dfc52 podman unshare: document that command cannot be used with remote 130bcc3a9 podman stats: improve cpu average calc 0edb3ddd3 podman stats: calc CPU percentage correctly 1a7f5b3d5 Cirrus: Publish binary artifacts on success 501355d4a Fix unreadable netavark logs 5e1e13c18 add contextDir to tar on remote c25213c8f fix compose test error in retry logic 84e7ce82d Binary growth check, part 1 of 2 06dd9136a fix a number of errcheck issues 07999b237 [CI:DOCS] troubleshooting: document rm in image stores 6c030cd57 fix a number of `godot` issues 68b94338b linter: enable makezero 0f12b6fe5 linter: enable nilerr 081e09143 linter: document nolintlint 7c047bfbe linter: document tagliatelle 9e8cca26a test/e2e/inspect_test.go: wait for sessions fb792f7ed linter: enable ineffassign f72a678f2 linter: enable errchkjson bb6b69b4a linter: enable wastedassign 070e40149 linter: enable interfacer 90f37e1a6 build(deps): bump github.com/containers/ocicrypt from 1.1.2 to 1.1.3 6d6bdabc8 healthcheck: stop showing wrong status when --no-healthcheck is set 8961dd345 Makefile: build podman-remote-static with cgo disabled 1b68c3826 libpod: drop warning for Fedora 31 63bf3991e vendor containers/storage with https://github.com/containers/storage/pull/1165 e3cc0717b podman system df: fix percent calculation 53e770566 pod system tests: clean up stray image 026bd9b20 bump golangci-lint to v1.45.0 2460261fb Fix documentation typo 36ff8f2b3 Add Windows installer support for upgrades 95dad4d8a podman rmi --ignore 4408db330 Updated dependabot to GitHub actions cc7b5974b Fix type-o and cleanup doc punctuation 54641f5f7 fix compose test flake 622d0068e fix dual stack network e2e flake 57cdc21b0 vendor c/common@0ededd18a1 ea08765f4 go fmt: use go 1.18 conditional-build syntax 3c968c3d2 Handle incompatible machines d3e3ea843 logformatter: link to bats sources on error 4b359e459 Set names in compose tests based on version bde3ca8c3 Add tests with Docker Compose v2 1fd76c901 podman machine: remove hostip from port 0793a5834 Deduplicate between Volumes and Mounts in compat API ff54aaa63 podman create: building local pause image: do not read ignore files 714e5a13d Separator is no longer prepended when prefix is empty on podman generate systemd 1387b5bd8 Add test for BZ #2052697 449f2fc0b Set rawimage for containers created via play kube c732adf2d build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1 ca7376bb1 Exit with 0 when receiving SIGTERM 29f24ff68 [CI:DOCS]: Mention netavark limitations for macvlan/ipvlan drivers 45df70ec1 fix empty newline in version output 33aa2f2d1 Fix windows win-sshproxy build 0db184fb0 fix breaking change in pkg/bindings 19d0c5a8a pkg/k8s.io: add small readme with copyright notice dd9e4dc72 pkg/k8s.io/api/core/v1: remove unneeded types f106867ac pkg/k8s.io/...: remove more unneeded files 0612f859b pkg/k8s.io/...: remove protobuf field tags f8577766d pkg/k8s.io/...: fix lint errors a0ad1f2ad remove unneeded k8s code 918fc88a9 move k8s deps into podman 3d82d17f8 Bump github.com/spf13/cobra from 1.3.0 to 1.4.0 439323cd2 Bump github.com/docker/docker daebf50b8 apply-podman-deltas: skip modified test case for --add-host which adds anomaly 3bb046a5e slirp: fix setup on ipv6 disabled systems 217197340 Fix typo e8968c867 Add support for --chrootdirs c845216fd docs: podman-build add --no-hosts 780d4b2d6 vendor: bump buildah, c/image and c/storage edc62b529 Fixes TTY & resizing on Mac and Windows 6e41d1f44 podman.spec.rpkg: enable rhel8 builds on copr c06460bea Bump golang to 1.17 in `vendor-in-container` 4ab24a068 Bump github.com/docker/docker 931477461 Bump github.com/spf13/cobra from 1.3.0 to 1.4.0 e6b64703f Bump github.com/containernetworking/plugins from 1.1.0 to 1.1.1 a5353207c Bump github.com/vbauerster/mpb/v7 from 7.3.2 to 7.4.1 e5a86d293 CI: fix golangci-lint installation feaa1a134 Add podman play kube --annotation 30bf065c3 Use github.com/vbauerster/mpb/v7 in pkg/machine 8f2f8d4ca use gopkg.in/yaml.v2 instead of v3 166edf00a Fix handling of tmpfs-mode for tmpfs creation in compat mode e56150264 Bump github.com/docker/distribution db3010279 [CI:DOCS] troubleshooting.md: mention "podman unshare chown 0:0 path" a7c4691bf Improve agent install message to add restart instructions 5b51b42cc machine rm -f stops and removes machine 8cfdddf50 test/e2e: add aardvark specific tests e66c46441 Skip flaky pprof tests bd0766e96 selinux: remove explicit range transition when starting conmon 9ce3c0a87 Move secret-verify-leak containerfile into its own Directory 611b45c51 Inspect network info of a joined network namespace d2f77c256 Set default rule at the head of device configuration cdb6deb14 MacOS improvements 6dfe63463 [CI:DOCS] DISTRO_PACKAGE.md: List the packaging changes for v4 639e6899b [CI:DOCS] RELEASE_PROCESS.md: cosmetic fix f13ca392c [CI:DOCS] Remove "(1)" from web tab text 01514f33b Fixes: #13301 ("machine rm removes the mounted socket file on macos") b20993393 [CI:DOCS] troubleshooting.md: Improve language and fix typos d302c08cf Throw an error if kube yaml has duplicate ctr names dca2e7924 Move all python tests to pytest 2fb6a8daf Add ExitCommandDelay configuration use in API exec handler 63f92d0a6 test: add a test to verify race free concurrent/parallel builds a3497cee9 RELEASE_PROCESS.md: build artifacts locally a901c919a libpod: pods do not use cgroups if --cgroups=disabled 0bd0ad594 container: workdir resolution must consider symlink if explicitly configured 410d28660 vendor: bump c/image to main/9a9cd9 08036e9af vendor: bump c/storage to main/d06b0f e71d497e7 libpod: drop warning if cgroup doesn't exist 22f331e54 Revert "use GetRuntimeDir() from c/common" 572e6464f Use storage that better supports rootless overlayfs 7729afe97 Refactor docker-py compatibility tests 675d775eb Add --context-dir option to podman play kube 40c6192e9 Add the names flag for pod logs 2e14c7270 Allow setting binarypath from Makefile 569319d39 Vendor in containers/common@main 3dc1b8e83 Add podman volume mount support dbf34bfe7 Clarify v2 API testing for podman vs docker clients 988190db5 copr packaging: use generic macros for tmpfiles and modules load dirs 6f71fa6d9 Show version of the deb package in info output a7fc8a146 Improve the error message for usused configMaps f3e883fb4 Bump github.com/containernetworking/plugins from 1.0.1 to 1.1.0 e1b298166 docs: generate-systemd: pod requires an infra container eab5a4cfb Load ip_tables modules at boot fbbcb957c container-commit: support --squash to squash layers into one ed73040b3 kube: honor mount propagation mode 5cba5cbfd play kube: set defaults to container resources 46b7c5bc6 Bump CDI go dependency to v0.3.0 6f7a803d0 Cleanup display of trust with transports 80c5962db Add containers-common spec and command to podman 4a60319ec Remove the runtime lock c4dfbd58f Don't log errors on removing volumes inuse, if container --volumes-from b19251242 system tests: cleanup networks on teardown ea01f8963 [CI:DOCS]Update networking tutorial for netavark 9ce61e3a4 kube: honor --build=false and make --build=true by default 44d037898 provide better error on invalid flag f018c07ed System tests: show one-line config overview f150f2921 troubleshooting.md: tweak subuid paragraph, encryption fc5cf812c use GetRuntimeDir() from c/common 94df70151 Implement Podman Container Clone 23a7f4e0d Option --url and --connection should imply --remote. d12489858 [CI:DOCS] troubleshooting: mention overlay option for --rootfs 8c9d37faf [CI:DOCS] troubleshooting: mention machinectl and systemd-run db4d15e85 Propagate $CONTAINERS_CONF to conmon d615ab81f tests: Remove inaccurate comment 7b55ab442 Cirrus: Disable F34 aka prior-fedora testing 632c089cc Cirrus: Use updated VM images aa1703037 Update release notes with v4.0.0 additions 1252f9dd3 Fix a potential flake in volume plugins tests 38811823c vendor: update c/storage to 26c561f9 095026c3d Bump github.com/containers/buildah from 1.24.1 to 1.24.2 90066af62 Calculate device major/minor using bitshift 13f6261f8 increase subuid and subgid in image 7a83d16f9 [CI:DOCS] logformatter: handle python logs a811acf74 pkg: support passing down options for idmap 50fbe52f4 Update to podman4 copr stream c74f8f04f Introduce podman machine init --root=t|f and podman machine set --root=t|f 8f5ba05ec Initial implementation of mac forwarding using a privileged docker sock claim helper b62816578 e2e: merge after/since image-filter tests 10580ec19 Unify ls --filter docs for networks and pods 6a8d29eea Changes of docker descriptions 5b98efe1d Fix images since/after tests 4a166c8b6 podman network: add documentation for netavark a0991c6f3 create: Fix key=value annotation in the flag output a8928a3ca ignition: propagate proxy settings from a host into a vm 3b5a3f4a7 [CI:DOCS] Add --userns=keep-id, --uidmap, --gidmap troubleshooting 73f35ff2a Temporarily pull machine images from side repo 6f9f78f7f enable netavark specific tests 4b90542d5 Fix checkpoint/restore pod tests 4966adddb Make sure building with relative paths work correctly. 3f28d697e Add 409 response to swagger godoc 40ba9f10e Make the hello image leaner [NO TESTS NEEDED] a0b38c071 troubleshooting: add doc for ssh into a container 87cca4e5e Modify /etc/resolv.conf when connecting/disconnecting c4676c571 Add version guard to libpod API endpoints 1512740e3 Bump c/common to v0.47.4 829f88d74 Show API doc for several versions 3762946e6 Do not set the network config dir to cni plugin dir 411fca0b3 helloimage: header symmetry e405fefb3 [NO NEW TEST NEEDED] Add schema for ImageCreate 200 response. 61f97083c idmap should be able to be specified along with other options 5bcd9134f Bump github.com/docker/distribution 58adf1a83 fix: Multiplication of durations 8d0fb0a4e move rootless netns slirp4netns process to systemd user.slice d0d1ffa43 Cleanup: remove obsolete/misleading bug workaround 3b561a468 compat: endpoint /build must set header content type as application/json in reponse 44fb431a3 Fix: Do not print error when parsing journald log fails f0826b3a4 Cirrus: Expand netavark testing to include rootless 3cf64a8e9 tests: retrofit healthcheck system tests 4f77331c9 healthcheck, libpod: Read healthcheck event output from os pipe d733c3baa append podman dns search domain 54cf0f05e Bump github.com/buger/goterm from 1.0.1 to 1.0.4 1d1b2b150 Update containers/buildah v1.24.1 7cfe4d3fe System tests: revert emergency skip of checkpoint tests 185dc5b2f Bump github.com/containers/common from 0.47.2 to 0.47.3 642a691cb Cirrus: Add netavark/aardvark system test task daf51eafe Bump github.com/containers/image/v5 from 5.19.0 to 5.19.1 ebbf10ae8 Cirrus: Log netavark/aardvark binary build info. 9eb88ea47 Podman pod create --share-parent vs --share=cgroup 55c4a1468 system prune: remove all networks fee76f6ab Document `schema` values in the `--url` flag 5468757ad play kube envVar.valueFrom.resourceFieldRef 725a6f893 pkg/bindings/images.Build(): slashify "dockerfile" values, too 7d3ad6081 netavark e2e tests 25e073492 Revert "Move each search dns to its own line" 3d3e8d8f8 hack/bats: fix broken usage message 903f9a3a2 Cirrus: Minor - limit release task applicability a1bc8cb52 Move each search dns to its own line 4ddc4e79d Only change network fields if they were actually changed by the user c4dfd004a libpod: enforce noexec,nosuid,nodev for /dev/shm b6fe7d119 Fix size to match Docker selection 012e24b79 [CI:DOCS] Add a hello world image to quay.io 852ca9a7a Cirrus: Add [CI:BUILD] magic that only builds cd8b30289 COPR: fix dependencies 85e8c1c9a docs: clarify rootless net stats 865f0a197 libpod: report slirp4netns network stats 6609bb73a Fix use of infra image to clarify default 2ceab1194 play kube envVar.valueFrom.fieldRef e7bdd1260 CI: fix nightly builds 009d9eb67 Add notes to "--oom-kill-disable" not supported on cgroups V2 a8fb8f52c Adapt podman images ls filters docs to be aligned with prune filters docs 636543787 Clarify remote client means Mac and Windows 6f2b027b3 ignition, machine: delegate cpu,io cgroup controllers to machine's default users 56d95172f podman image scp syntax correction 8842dab68 Cirrus: Also download aardvark-dns binary b381d7565 Cirrus: Add e2e task w/ upstream netavark Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2022-06-03 09:32:13 -04:00
Bruce Ashfield	037f0d3155	podman: update to v4.0.1 ... Podman now installs the systemd service and socket by default, so we can drop our custom installation of those elements, otherwise the build is unchanged. Bumping libpod to version v4.0.1-11-g717edd7b8, which comprises the following commits: 0f626c377 Bump to v4.0.3-dev 342c82593 Bump to v4.0.2 bd5ff1c32 Update release notes for v4.0.2 791c8c347 Revert "use GetRuntimeDir() from c/common" cc4a70c80 Revert "Option --url and --connection should imply --remote." ca980c2e0 Option --url and --connection should imply --remote. cfcc0d639 Bump to v4.0.2-dev c8b9a2e3e Bump to v4.0.1 b1ffa822f Update release notes for v4.0.1 de9f22805 Fix a potential flake in volume plugins tests 697dd2890 Propagate $CONTAINERS_CONF to conmon c559e4e6f tests: Remove inaccurate comment 3718d096b System tests: show one-line config overview e1d5c812d provide better error on invalid flag 2b85f62a2 use GetRuntimeDir() from c/common 82f4760de kube: honor --build=false and make --build=true by default e356dfe06 system tests: cleanup networks on teardown 71b0909f2 Remove the runtime lock ee7cf3cc2 Don't log errors on removing volumes inuse, if container --volumes-from eb9fe52a5 kube: honor mount propagation mode a0c34d64a Load ip_tables modules at boot e8d7e580a Cirrus: Disable F34 aka prior-fedora testing 7b106f5b6 Cirrus: Update VM Images for 4.0 release d59749d64 Bump to v4.0.1-dev 49f8da727 Bump to v4.0.0 84c8870ac Release notes for v4.0.0 final 15cb91855 Fix lint ae9ad416a Fix manifest 4.0 Endpoints Branch forced 4.0 only endpoints 1a8c715f1 Introduce podman machine init --root=t|f and podman machine set --root=t|f f71dfcb5d Initial implementation of mac forwarding using a privileged docker sock claim helper 2128236da ignition: propagate proxy settings from a host into a vm 809da6b0b Update to podman4 copr stream bd8ac0017 Unify ls --filter docs for networks and pods 77e51e188 e2e: merge after/since image-filter tests 8ad29421e podman network: add documentation for netavark f35e03ec8 create: Fix key=value annotation in the flag output 22cfa9860 enable netavark specific tests d77b4f92c Fix checkpoint/restore pod tests a72e22160 Make sure building with relative paths work correctly. 975d79aed Add 409 response to swagger godoc 421b7466c Fix images since/after tests 04badc2c9 Changes of docker descriptions 09708bee9 Fix images since/after tests 35a4f32be Changes of docker descriptions 629d86445 Temporarily pull machine images from side repo a6fbfd47c Cirrus: TODO: netavark/aardvark release branches e5644bbf1 Cirrus: Expand netavark testing to include rootless 1656a2335 Cirrus: Minor - limit release task applicability afb39f2e4 Cirrus: Add [CI:BUILD] magic that only builds 926c3b08a CI: fix nightly builds 1e3115cf4 Cirrus: Log netavark/aardvark binary build info. 66a3be370 Cirrus: Add netavark/aardvark system test task 6b0d4d915 Cirrus: Also download aardvark-dns binary b63f61f5c Cirrus: Add e2e task w/ upstream netavark 6a3de9351 Revert minimum API change 9688a462e netavark e2e tests 92790e98c Bump to v4.0.0-dev d7d79ce81 Bump to v4.0.0-RC5 5356e36b8 Update release notes for v4.0.0-RC5 77ca2498e Modify /etc/resolv.conf when connecting/disconnecting f8cd4df1b Do not set the network config dir to cni plugin dir d0fccbbbb Show API doc for several versions e7998b122 [NO NEW TEST NEEDED] Add schema for ImageCreate 200 response. 6d01b6dd6 fix: Multiplication of durations ed60f8908 move rootless netns slirp4netns process to systemd user.slice 7e37c608f compat: endpoint /build must set header content type as application/json in reponse 9aee36b76 Cleanup: remove obsolete/misleading bug workaround b1b9a0d7a tests: retrofit healthcheck system tests 74cba33c7 healthcheck, libpod: Read healthcheck event output from os pipe 7ec63f092 Fix: Do not print error when parsing journald log fails d62a0204d Bump github.com/buger/goterm from 1.0.1 to 1.0.4 bcd5f5ead append podman dns search domain b1bf91a22 Podman pod create --share-parent vs --share=cgroup 85c0fe7dc System tests: revert emergency skip of checkpoint tests 71d151449 Add version guard to libpod API endpoints 345413540 [v4.0] Bump c/common to v0.47.4 7499496f3 idmap should be able to be specified along with other options e47a3bec9 Vendor in containers/buildah v1.24.1 cad3eb78b Bump to v4.0.0-dev 0c9648136 Bump to v4.0.0-RC4 c1618042f Disable failing E2E test 70623790d Revert "Move each search dns to its own line" 48f10e1d0 Move each search dns to its own line 938d5152c Update release notes for v4.0.0-RC4 99968002f Document `schema` values in the `--url` flag 6d747dca2 podman image scp syntax correction e0cbcdc33 system prune: remove all networks 8f3f0710f Only change network fields if they were actually changed by the user fb6fca806 docs: clarify rootless net stats cad6459b6 Fix size to match Docker selection 06821627f libpod: enforce noexec,nosuid,nodev for /dev/shm 44cd232be Clarify remote client means Mac and Windows 9d3bcb587 libpod: report slirp4netns network stats f65b62c98 Add notes to "--oom-kill-disable" not supported on cgroups V2 178cccbf9 Fix use of infra image to clarify default 97c8bdfeb Adapt podman images ls filters docs to be aligned with prune filters docs 49076ba87 ignition, machine: delegate cpu,io cgroup controllers to machine's default users 0c9a8ac07 pkg/bindings/images.Build(): slashify "dockerfile" values, too 3b565bacf Remove mention of IPv6 portfwd from release notes 10a966a2a Bump to v4.0.0-dev 9b441c0dd Bump to v4.0.0-RC3 f5dfe026d Update release notes for v4.0.0-RC3 ebf5ad50e Fix Cirrus destination branch e64e6500d volume: add support for non-volatile upperdir,workdir for overlay volumes a928d39d0 github: label issues based on os fix regex 525bdc377 github: label issues based on os 4c26a3a5c Cirrus: Fix get_ci_vm.sh initial setup d455bb879 System tests: emergency skip of checkpoint tests 6961d9120 network create: allow multiple subnets 86547cc24 Update troubleshooting.md 24dc02064 Fix sort ordering of filters 63b1557a2 Unify podman prune filter description: volumes, networks, system 4a4d86d40 Bump Buildah to v1.24.0 6336e1ff1 rootless: drop permission check for devices 77cd38d40 switch podman image scp from depending on machinectl to just os/exec ab22a688d Bump github.com/containers/image/v5 from 5.18.0 to 5.19.0 991652988 Bump github.com/containers/storage from 1.38.0 to 1.38.1 9073b56a3 change location of where make outputs podman binary on osx 72ddacdbe Github workflow: Fix parsing of GraphQL response JSON 6df245c6e Github-workflow: Fix YAML syntax 44a87229b Update godoc, swagger using wrong struct e4636ebdc Makefile: install targets independent of build 42e1c2981 [CI:DOCS] Fix typos and improve language 7cdb00a45 CI: enable rootless-remote system tests 98739237e pkg/specgen/generate/security: fix error message 29e89da1a Github workflow: Send e-mail on job error 0d42d9f8d Github workflow: Update Cirrus-cron GraphQL query dbfe79757 remote build: set rootless oci isolation correctly 8099a61b6 [CI:DOCS] Fix typos and improve language 80a5295d4 Fix handling of duplicate matches on id expansion 1cddd6397 Show correct default values or show none e252b3b4f exec: retry rm -rf on ENOTEMPTY and EBUSY 2f371cb12 container create: do not check for network dns support 75e6994d4 libpod: fix leaking fd f6e36a649 libpod: fix connection leak e68d188f6 [CI:DOCS] fix typo subpordinate aff6a5af8 Fix filter description and unify filters docs for containers/images prune 7938f32c5 Remove unused param and clean API handlers e834297b3 Restore machine start logic that was hanging c81a616ca Bump to v4.0.0-dev 71238d3cc Bump to v4.0.0-RC2 b29640c78 Final release notes for v4.0.0-rc2 5736649eb Run codespell on code f6bb60087 Update release notes for Podman v4.0.0 653da8fe8 Fix #2 for compat commit handling of --changes 9d815707e Fix nil pointer dereference for configmap optional 0b5136c7c Make error message matching in 030-run.bats less fragile 9241b4e34 Don't explicitly check for crun|runc in package information 2947ded7a Don't segfault if an image layer has no creation timestamp 1c0fdba4f compat: remove hardcoded index from load images output report 9df31cfb7 compat: images/load must be able to load tar with multiple images 47df14af5 System tests: fix for new systemd on rawhide ee039b740 Remove rootless_networking option from containers.conf e22b9889d vendor c/psgo@v1.7.2 1f85244ab Engine.Remote from containers.conf 2c492be00 vendor: bump c/common and other vendors 7046e7804 rootless: report correctly the error 2d0b5ebb5 Implement API forwarding for podman machine on Windows 4693fc6db Implement env parsing on Windows c674d3cc7 Handle changes in docker compat mode dbaaef5c4 Show package version when running on alpine b9a2d8698 Handlers for `generate systemd` with custom dependencies abcd29239 APIv2 tests: followup to recent log test 4b384e08a Add IndexConfigs to compat /info endpoint a0165a64b Bump github.com/opencontainers/runc from 1.0.3 to 1.1.0 af6a43fa4 apiv2 test: add regression test for #12904 4d1c327ed SECURITY.md: fix the project name c0e072346 rename --cni-config-dir to --network-config-dir 7e30531f2 compat attach: fix write on closed channel 774271c38 upgrade all dependencies 38fbc8af1 Revert "Cirrus: Temporarily disable OSX Cross task" 4adf457ff Bump github.com/opencontainers/runc from 1.0.3 to 1.1.0 bd09b7aa7 bump go module to version 4 f23e8ca67 [NO NEW TESTS NEEDED] add builddeps to copr template 471a4356b CI: rootless user: also create in some root tests c8124b88a [WIP] Tests for podman image scp (the sudo form) 141de8686 Revamp Libpod state strings for Docker compat 860463d97 Cirrus: Temporarily disable OSX Cross task 06ad51c83 update c/common to latest 10d969ff1 Use PODMAN_USERNS environment variable when running as a service 6bca61e0f Unify the method of parsing filters in cmd 3c2a5947c fix default branch links d6e55577c [CI:DOCS] fix default branch links bb3097cd0 [CI:DOCS] Unprivileged native overlayfs is now supported ab8a50848 [CI:DOCS] Fix typo in --env 420303b94 Recursively copy cert files. 8a7e70919 Refactor manifest list operations 350765e79 Add rpkg template for COPR autobuild 607cb80bf Fix cgroup mode handling in api server a15dfb364 Standardize on capatalized Cgroups 13917dfab test/system: podman run update /etc/hosts 14940a067 Remove two GetImages functions from API 72ab66d88 Use fully-qualified device name in CDI test 968deb7c2 Use new CDI API 96be2bb3d troubleshooting links to main branch bf3734ad5 Podman Build use absolute filepath 699683010 Prohibit --uid/gid map and --pod for container create/run a4cef5435 podman container rm: remove pod ece768ff9 Manual fixes for PR #12642: 92e787521 podman build enable --all-platforms and --unsetenv fa6405c3c use events_logfile_path from containers.conf for events log. f257d9839 Podman Pod Create --sysctl support b7fe25dc2 Wait for podman stop to complete 194d14ca2 libpod: fix check for systemd session 8dc2464b0 libpod: refine check for empty pod cgroup b24063582 fix buildah-bud test diff 85f9cf390 upgrade test: check that network backend is cni 918890a4d use netns package from c/common 0151e10b6 update buildah to latest and use new network stack 858b21064 podman image scp: implement --quiet 495884b31 use libnetwork from c/common fde6ad637 Add --noout option to prevent the output of ids 5aedcb364 remote events: convert TimeNano properly 47374aac8 Bump github.com/BurntSushi/toml from 0.4.1 to 1.0.0 485305a5f vendor latest c/common 6e208c222 add additional fields to podman machine ls --json 6fa077750 buildah bud tests: skip failing tests 83b0fb469 Fix permission on secrets directory 8f2358eea Add podman rm --depend f04465bfe fix host.containers.internal entry for macvlan networks 6d5ad9c11 It takes some time to start a VM c085fb3c9 Pretty Print output of podman machine ls --format json 19a475906 Use the InfraImage defined in containers.conf 799078216 Cirrus: Freshen VM images 0e4e5cf99 Revert "Cirrus: Temp. ignore gitlab task failures" a95c01e0e pkg: use PROXY_VARS from c/common a8b02cf4b ignition: add support from setting SSL_CERT_FILE 5c363ff27 ignition: propogate HTTP proxy variables from host to remote 18785450e Bump to v4.0.0-dev 9d26c1abb Bump to v4.0.0-RC1 508f9b76e System tests: fix RHEL8 gating tests b7380a7c3 vendor c/common 01ba2531b Remove dead RuntimeOption functions 0933f6c0b Update docker cli message for case where user creates directory 4dc5a5b15 Don't add env if optional and not found a8a3e8bc9 Fix type-o in podman.wxs 37c0b27b6 [CI:DOCS] fixes indentation of example pod yaml 7dada6d49 Prevent double decoding of storage options f68890815 Emergency system-test fixes 1941d45e3 add OCI Runtime name to errors 2a524fcae fix healthcheck timeouts and ut8 coercion 4191616cc Don't rename pod if container has the same name 13f3fd255 Set volume NeedsCopyUp to false iff data was copied up 7a24be6ad Fix CI 680923743 correct typo words in docs 64df41755 Change Tests to ignore missing containers when removing --all 79c5b73ed test/e2e/pod_initcontainers: fix a flake cf7fc3695 test/e2e/run: don't use date +%N on Alpine 2e0d3e9ea Support all volume mounts for rootless containers 32e845028 Fix wrong 'podman search --format' placeholder 0c6ae3ab2 Fix Container List API call to return mount info 76a944b14 fix misleading comment regarding default value of cpu period [NO NEW TESTS NEEDED] c496001d0 add --ip6 flag to podman create/run 116a276e8 legacy events: also set exitCode f6a3eddd2 Don't initialize the global RNG with GinkgoRandomSeed() in e2e tests 90e74e794 Avoid collisions on RemoteSocket paths ee146a9ab Refactor remote socket path determination in tests a8e223faf fix doc 2ff5644bf test/system: podman run image with filesystem permission fc65b0f73 test/system: podman run with log-opt option 1e3434d11 Update swagger documentation 6630e5cf6 Make it possible to select the volume driver a3326e23d Check the mount type for future compatibility 8e7eeaa4d Implement virtfs volumes for podman machine ec32430a0 [CI:DOCS] Add example of cpus to init command a2687783d prefix imageId with sha256: in containers list test for compat API ImageId 289270375 Pod Security Option support f21744939 ignition: add certs from current user into the machine while init 410082f25 docs: sort swagger operations alpabetically 7117d5605 .service file removal on failure 803defbe5 Introduce Windows WSL implementation of podman machine f6d00ea6e podman image scp never enter podman user NS e8c06fac9 Allow users to add host user accounts to /etc/passwd 1aa4e4d4d container creation: don't apply reserved annotations from image cbcab4342 [CI:DOCS] clarify `io.podman.annotations.seccomp` d669dbfb9 Error out early if system does not support pre-copy checkpointing b746b2256 Update go-criu to v5.3.0 cb4f498e4 [CI:DOCS] docs: document rootless userns mappings 3ac5999f8 Switch to a new installer approach using a path manipulation helper 207823eb0 e2e: Add dev/shm checkpoint/restore test f3d485d4d Enable checkpoint/restore for /dev/shm 2d7dbda41 Update github.com/checkpoint-restore/checkpointctl af1dbbfb7 Always run passwd management code when DB value is nil a5e49d966 Warn on use of --kernel-memory 04dbbd96b support hosts without /etc/hosts 20ce6e5c6 Podman run --passwd fca66b6cb ci: force scratch build for crun 64ce6949f Use hosts public ip address in rootless containers b1f5e861b compat: image normalization: handle sha256 prefix 89ee302a9 specgen: honor userns=auto from containers.conf bb096c3bf [CI:DOCS] Small checkpoint/restore man page fixes 1ddb49c66 [CI:DOCS] Explicitly mention that checkpointing systemd containers might fail 3570c38ff vendor: update containers/storage 48cb44651 build: fix test for subid 4 46a094a7a test: add --rm to podman run commands af6bcd086 fix(generate): fix up podman generate kube missing env field bug a1ebde118 legacy events: also set Action="die" a837984c4 rootless: include the args in the debug message 5cbc6b62d apiv2 tests: use quay.io/libpod/testimage:20210610 for platform tests 12d762f8e image rm: allow for force-remove infra images 6423174c6 tests: adjust old build test to expect exit code 28018ce60 Test for checkpoint specific inspect fields bc3389e21 Add more checkpoint/restore information to 'inspect' f566d8b8e build: relay exitcode from imagebuildah to registry e88c21366 Removed .service file for healthchecks a86495ea6 Set machine timezone 459e78414 MovePauseProcessToScope do not seed everytime f241efb17 bindings rmi test: clarify behavior 03a3fc37f bump cobra to 1.3.0 6cde9255f .github: revert to the old template 4243ca93a oci: configure the devices cgroup with default devices 3b6510da6 kill: fix output 5392ff51c e2e: search flake: skip test on registry.redhat.io 7b51acd4c APIv2 tests: fail on syntax/logic errors 51a4bef2e Show --external containers even without --all option 0a2eb7b18 apiv2 tests: refactor complicated curls 888c778ee fix network id handling afdb4dc22 Update Windows Install Doc 52b12fe98 Fixes #12063 Add docker compatible output after image build. 65d5a2b68 pause scope: don't use the global math/rand RNG ef325bc8c specgen: check that networks are only set with bridge 094e1d70d container restore/import: store networks from db 3e9af2029 play kube add support for multiple networks 535818414 support advanced network configuration via cli d072167fe Add new networks format to spegecen 46938bbf8 fix incorrect swagger doc for network dis/connect 4791595b5 network connect allow ip, ipv6 and mac address 9ce6b6413 network db: add new strucutre to container create 4e8ad039c remove unneeded return value from c.Networks() 5490be67b network db rewrite: migrate existing settings 5f1f62f0b network ls: show networks in deterministic order 5a071d9f5 Bump github.com/docker/docker 1fff76c3c pprof flakes: bump timeout to 20 seconds 50501f49a Add secret list --filter to cli 8cb93ac10 Cirrus: Temp. ignore gitlab task failures 81a0a7984 compat build: adhere to q/quiet 5bbcfaf4a Make XRegistryAuthHeader and XRegistryConfigHeader private 3cfefa124 Remove the authfile parameter of MakeXRegistryAuthHeader d79414c54 Simplify the header decision in pkg/bindings/images.Build a bit f9be32627 Remove the authfile parameter of MakeXRegistryConfigHeader 935dcbb00 Remove no-longer-useful name variables 0e29b8975 Consolidate creation of SystemContext with auth.json into a helper fe1230ef7 Remove pkg/auth.Header 3725a34cb Call MakeXRegistryAuthHeader instead of Header(..., XRegistryAuthHeader) 78dd79752 Turn headerAuth into MakeXRegistryAuthHeader d073b1275 Call MakeXRegistryConfigHeader instead of Header(..., XRegistryConfigHeader) 8155fb565 Turn headerConfig into MakeXRegistryConfigHeader 29f408871 Move the auth file creation to GetCredentials 9d56ebb61 Consolidate the error handling path in GetCredentials da86a2328 Only look up HTTP header values once in GetCredentials 1589d70bc Use Header.Values in GetCredentials.has 2946e8349 Beautify GetCredentials.has a bit 1ecc6ba72 Pass a header value directly to parseSingleAuthHeader and parseMultiAuthHeader 6f1a26b04 Simplify parseSingleAuthHeader 7674f2f76 Simplify the interface of parseSingleAuthHeader 2aeb690d3 Don't return a header name from auth.GetCredentials 491951d66 Fix normalizeAuthFileKey to use the correct semantics 1b6bf9713 Rename normalize and a few variables d29a4a6d1 Add TestHeaderGetCredentialsRoundtrip ad7e5e34f Add tests for auth.Header 5a5aa6009 Improve TestAuthConfigsToAuthFile ff003928b Add unit tests for singleAuthHeader b162d8868 Add unit tests for multiAuthHeader bc191ca7d fix e2e test missing network cleanup 99bc00421 pprof CI flakes: enforce 5 seconds grace period 1d781ccbe [NO NEW TESTS NEEDED] rootless: declare TEMP_FAILURE_RETRY before usage (Fixes: #12563) 593d0907c --hostname should be set when using --pod new:foobar a63035be2 Cirrus: Use cached swagger binary 6d19ecadc inotify: make sure to remove files 18854f566 System tests: remove rm_pause_image() b526a0ccd specgen: honor empty args for entrypoint 2d517b687 generate systemd: support entrypoint JSON strings 6c05961ba Bump github.com/uber/jaeger-client-go d7f6f4e88 remove runlabel test for global opts 0999245e4 utils: reintroduce moveToCgroup 99e9fcdb6 autocopr: distro conditionals for containers-common d87a9b788 vendor c/image/v5@main 2130d1853 Update vendor or containers/common moving pkg/cgroups there 7d0fd175f volume: apply exact permission of target directory without adding extra 0111 851349345 Cirrus: Remove remnants of nix-based static build d35aa3f29 Refactor podman pods to report.Formatter 3753347d6 rootless netns: resolve all path components for resolv.conf eee3a42b7 tests: clean up FIXMEs and noise 207065ce9 fix remote run/start flake 6d7e6d744 e2e: fix pprof flakes c91fb244c Bump github.com/opencontainers/runc from 1.0.2 to 1.0.3 76f5100be vendor c/common@main 527fd3c0f Escape trailing slash in install directory location so the closing quote is not escaped e89a62602 centos 9 stream cannot use %autochangelog 7d22cc88e Refactor podman system to report.Formatter [NO NEW TESTS NEEDED] 8e0532623 add spec file for automated copr builds c9ad1da51 Add restart-sec option to systemd generate 2e132d1d4 Fix documentation of (podman image save --compress --uncompressed) 952046ffd Improve documentation of (podman image save --format) 7d331d35d Add support for configmap volumes to play kube bd9f8815e cmd, push: use the configured compression format aafbaa497 [CI:DOCS] logformatter: fix corner case with links ecd48325f UPdate vendor of image-spec and containers/storage fe1cdab59 vendor: update containers/common babc69367 Update doc to explictly mention using ed25519 in ssh keys 61792de36 Refactor podman image command output 6cb25b3d1 Manual fixes eb1212bed Same thing, with BeNumerically("==", x) c0a8814fb Use HaveLen(x) instead of Expect(len(y)).To(Equal(x)) 92f9e1176 Same thing, for BeNumerically("==", 0) 7c6123f8e Use BeEmpty() instead of len(x).To(Equal(0)) c67649546 Same as previous, for assertions other than Equal() 478f2da5d e2e tests: a little more minor cleanup 8d6d9df40 compat API: push: report size of manifest 2683ecbbc compat: images/json a0e696411 Add ashley-cui, lsm5 and floutoc to owners 65109494b remove ARTIFACT_DIR and ArtifactPath 3ac1b9bc0 Image caches: allow overriding cache dir 5ac66e2aa Rename CrioRoot as just Root 3ff47748d Fix possible rootless netns cleanup race db3a4c070 [NO NEW TESTS NEEDED] Refactor podman container command output 4e63f9192 Hostname in `spec.hostname` should be passed to infra ctr init opt 0afaf7837 container, cgroup: detect pid termination e2b344728 top: parse ps(1) args correctly 6673ff78d podman, push: expose --compression-format 9ce7ade8c e2e: yet more cleanup of BeTrue/BeFalse f415b3055 Ensure the generated NodePort values are unique a948ecbb9 Allow containerPortsToServicePorts to fail ec686d68d Don't use the global math/rand RNG for service ports d48c00418 Move a comment to the relevant place 8eb0be0a2 a few more manual BeTrue cleanups f7cbb1d84 Convert strings.Contains() to Expect(ContainSubstring) 12787963b e2e tests: more cleanup of BeTrue()s 5a56f4094 Implement 'podman run --blkio-weight-device' 9a10e2124 systemd: replace multi-user with default.target 5bdd571b1 compat API: allow enforcing short-names resolution to Docker Hub 0ddb09448 Fixed the containerfile not found during remote build. c80a2e449 podman-remote: prevent leaking secret into image e7204178e podman-remote: copy secret to contextdir is absolute path on host bfcaf538b api: allow build api to accept secrets 931c08157 Only open save output file with WRONLY f330c197b List /etc/containers/certs.d as default for --cert-path b63d69640 e2e tests: enable golint 697ff213d fix: parsing of HostConfig.Mounts for container create 2e50514ad Move the chown to after the ADDs cbda62d1b fix: error reporting for archive endpoint d5c3cc949 Bindings test: emit GIT_COMMIT, for links in logs bc3c5be2f checkpoint do not modify XDG_RUNTIME_DIR e648122b2 libpod: improve heuristic to detect cgroup a66f40b4d libpod, inspect: export cgroup path b25b33030 stats: get the memory limit from the spec 84e81252f compat: Add compatiblity with Docker/Moby API for scenarios where build fails c7ebaeee0 libpod: leave thread locked on errors eb3708a52 Find and fix empty Expect()s df6aa6730 Unset SocketLabel after system finishes checkpointing c034147fe Remove StringInSlice(), part 2 2fcb39586 Remove StringInSlice(), part 1 cd59721de e2e test cleanup, continued 533636395 Update basic_networking.md 5cf2683bf Warn on failing to update container status a4e4b8d92 oci: ack crun output when container is not there 08558b27f oci: exit gracefully if container is already dead dd80635df Support env variables based on ConfigMaps sent in payload 0d1aaf080 image lookup: do not match *any* tags 566b78dd0 generate systemd: add --start-timeout flag 49d63ad5c Oops! Manual edits to broken tests 97ab9176f e2e tests: clean up antihelpful BeTrue()s aa301225a Cirrus: Strip out static nix build 9c8fb5cc0 Rename pod on generate of container 2ab28140d [CI:DOCS] Update notes on java TZ in man page 73e95d1c3 Bump github.com/containers/image/v5 from 5.16.1 to 5.17.0 044edbb9c Fix netavark error handling and teardown issue 13ee1788f swagger: add layers to build api docs 022273c19 compat: add layer caching compatiblity for non podman clients f564c9a34 Bump github.com/opencontainers/selinux from 1.9.1 to 1.10.0 a8b3c67b9 Add note about volume with unprivileged container d173ebc06 Add EXPOSE e2e test 02be831ce Support EXPOSE with port ranges ab56a7c4b compat: Add subnet mask behind IP address to match Docker API d06899769 [CI:DOCS] Add java TZ note to run manpage 44b240470 Bump github.com/rootless-containers/rootlesskit from 0.14.5 to 0.14.6 21629b050 podman-remote does not support signature-policy ced0ffbe8 Add tests for restore runtime verification c76caba36 Use same runtime to restore a container as during checkpointing 8198e96f3 Force iptables driver for netavark tests 501643c8b Make sure netavark output is logged to the syslog 6011149ca filter: use filepath.Match to maintain consistency with other pattern matching in podman c03b6b54f Semiperiodic cleanup of obsolete Skip()s a3664269b [CI:DOCS]upload a translation file b2623ceb4 api/handlers: Add checkpoint/restore FileLocks 84021cfdc test: Update error string for --file-locks test 22ef7b620 fix duplicated logs command 19400ec0d Bump github.com/docker/docker 7f96a8d2d Bump k8s.io/api from 0.22.3 to 0.22.4 0dae50f1d Do not store the exit command in container config 7098463e7 Add test for checkpoint/restore with --file-locks 6d23ea60d Add --file-locks checkpoint/restore option 7f52bd843 Cirrus: Bump Fedora to release 35 3ee2d2367 Cirrus: Partially revert catatonit --force install 226be65bd Revert "Cirrus: Temp. disable prior-fedora testing" 5bd43fbea Cirrus: Workaround log_driver=journald setting f3021f3f6 Cirrus: Fix bindings test hang b/c logging config mismatch 155a443a9 Cirrus: Timeout bindings test after 30m 3aa7076ff Cirrus: Log more things in bindings and unit tests d6d1ce980 Minor Makefile fix 62d6b6bf7 rootless netns, one netns per libpod tmp dir 2e5d3e8fb Introduce Address type to be used in secondary IPv4 and IPv6 inspect data structure. e83d36665 volumes: add new option idmap fceecc3a5 remote checkpoint/restore: more fixes 6f6a6925b fix CI 010bee04c fix: take absolute path for dd on apple silicon d6c18902e System tests: new checkpoint tests 3073543fd rootless: use catatonit to maintain user+mnt namespace cb9de1007 rootless: drop strerror(errno) calls 084e32336 rootless: reuse existing open_namespace function 277d52686 rootless: use auto cleanup functions ee6271113 utils: use podman-pause-$RANDOM.scope name e367f4614 hack/bats: deal with new bin helpers 422dc5e69 Change error message for compatibility with docker 97c6403a1 rename libpod nettypes fields 8ca300ae9 podman machine start wait for ssh 33ec8c669 fix remote checkpoint/restore 44d1618dd Add --unsetenv & --unsetenv-all to remove def environment variables 364b242b7 Set config environment variables early in Podman init 63ef7135d journald logs: keep reading until the journal's end 014cc4b9d secret: honor custom target for secrets with run 5df883e87 bindings: reuse context for API requests 295d87bb0 podman machine improve port forwarding c21259bf8 Network test: fix podman-remote-rootless corner case c050f05cc filter: add basic pattern matching for label keys c8790bfbb cirrus: force-install catatonit 5934e4c9b infra container: replace pause with catatonit 58cf0d462 Revert "add kubernetes pause" d28b39a90 Added test for checkpoint/restore --print-stats 914f4c890 Update man pages for checkpoint/restore --print-stats 80e56fa12 Added optional container restore statistics 6202e8102 Added optional container checkpointing statistics 062c88771 Error logs --follow if events-backend != journald, event-logger=journald 9226ccb59 Enable 'podman run --memory-swappiness=0' 164c42b48 Fix network mode in play kube b1c002342 Always create working directory when using compat API f517510bc play kube: don't force-pull infra image ac38eca3f Podman Image SCP transfer patch 6762d5e23 --authfile command line argument for image sign command. f35d7f4dc Cirrus: Temp. disable prior-fedora testing 0b60b191d Cirrus: Update to Ubuntu 21.10 3af19917a Add failing run test for netavark fe90a45e0 Add flag to overwrite network backend from config 9f4d63f91 libpod: create /etc/mtab safely 8041d44c9 Add network backend to podman info b2f7430b6 Add more netavark tests 1c88f741a select network backend based on config 3fe0c4917 Fix RUST_LOG envar for netavark 4febe5576 netavark IPAM assignment eaae29462 netavark network interface 12c62b92f Make networking code reusable c43b81f9a Fix flake in upgrade tests 73e1cdfe9 export adding id-specifier code to setContainerNameForTemplate 980c47aaa VOLUME must be declared after RUN chown command 3690532b3 network reload return error if we cannot reload ports 27de152b5 network reload without ports should not reload ports a55fdbb49 Print headers for system connection ls 6236be4ff [CI:DOCS] Add CI check for SEE ALSO in man pages 1ef66d6d7 podman load: support downloading files 2720156fa Add links to all SEE ALSO sections df0666436 pod create: read infra image from containers.conf 9877280f5 rootless: adjust error message 216e2cb36 Fix rootless networking with userns and ports faf450ea1 support health checks from image configs 6ee3b33d3 change from run to create in 250-systemd.bats d0b502fce Exclude already built sources for static build 72cf38968 shm_lock: Handle ENOSPC better in AllocateSemaphore 8a9da7698 Fix Zsh completion command documentation 555e21557 Match .c files in Makefile 65609f338 Add Static Build download instructions to README 7225ddb5b Add links to podman build,run, create see also 2ed31f9f1 Minor test tweaks 8b7b0b7ca pod create: read network mode from config 5fbc67f20 Bump Catatonit up to v0.1.7 e907f095b test connection add 338eb9d75 system: Adds support for removing all named destination via --all 6444f2402 pod/container create: resolve conflicts of generated names f3fab1e17 podman-generate-kube - remove empty structs from YAML 4e8bf8be4 Add some information about disabling SELinux when using system volumes 02f67181a Fix swagger definition for the new mac address type 5c0351cc6 Log Apache access_log-like entries at Info level [NO NEW TESTS NEEDED] 3e1940a8e Test to check for presence of 'stats-dump' in exported checkpoints 6b8fc3bd1 Add 'stats-dump' file to exported checkpoint ffa5ed0e0 Podman Image SCP rootful to rootless transfer 7f433df7e rename rootless cni ns to rootless netns 58f8c3d74 mount full XDG_RUNTIME_DIR in rootless cni ns 6fee827c7 Bump github.com/checkpoint-restore/go-criu/v5 from 5.1.0 to 5.2.0 756dda298 Keep error semantics intact 614c6f597 Fix rootless cni netns cleanup logic b85e3764a tweak a couple of flag descriptions in help output ff92d7371 Update swagger doc make filed optional ba8eba83e Fix bindings container log test 0234b153c test: run --cgroups=split in new cgroup 001d48929 MAC address json unmarshal should allow strings 6e6388eac Make stop message more similar to start 449cc7a5c Implement top streaming for containers and pods f2115471d Handle HTTP 409 error messages properly for Pod actions d0dfc5e22 Add tests 48d0d2b4a Fix swagger definitions 48e1cca9f More conforming libpod API and swagger types 62ee24bb7 More conforming libpod API and swagger types a845613d0 Better emptiness test for custom JSON serializer 7b2531c13 System tests: enhance volume test, add debug prints 15eb01601 add unit test to containers_test 120ad2d3c Use correct swagger type in doc-comment 9c34bd52f Cirrus: Authorize rootless user self-ssh 218d91d76 Fix libpod API conformance to swagger e69eae645 Fix help message case for `podman version` 9fc98f265 Fix pause usage example 749487600 Use systemctl in local system test 98506c961 Allow label and labels when creating volumes c5f0a5d78 volumes: be more tolerant and fix infinite loop 3c79202fb Add information on how podman machine is updated 4e9e6f21f volumes: allow more options for devpts e6286fbac volumes: do not pass mount opt as formatter string feebf1bd8 Bump k8s.io/api from 0.22.2 to 0.22.3 960831f9c runtime: change PID existence check 9e5cd3205 oci: rename sub-cgroup to runtime instead of supervisor 0136a66a8 libpod: deduplicate ports in db e68fbf03a Set flags to test 'logs -f' with journald driver dcbf5cae1 Set Checkpointed state to false after restore ff31f2264 container create: fix --tls-verify parsing 6b3b0a17c runtime: check for pause pid existence 825889cc7 utils: do not overwrite the err variable d53789068 Fix systemd PID1 test 864748df5 Record the image stream along with the path 55397de93 cgroups: use SessionBusPrivateNoAutoStartup 8163d38c6 vendor: update godbus to v5.0.6 008075ce5 Slirp4netns with ipv6 set net.ipv6.conf.default.accept_dad=0 c723e6b97 Fix a few problems in 'podman logs --tail' with journald driver bf8fd943e Allow 'container restore' with '--ipc host' efd1c080b Document to not set K8S envars for CNI 773caf293 Bump github.com/docker/docker 75f478c08 pod create: remove need for pause image 9d2b8d279 add kubernetes pause e86549b18 cirrus: containers: mount directory in /var/tmp to /tmp 2e3611d61 overlay root fs: create mount on runtime dir a42c131c8 Update vendor github.com/opencontainers/runtime-tools d6296c918 If Dockerfile exists in same directory as service, we should not use it. adee084d6 Fix tests of podman image trust --raw and --json 53ff49237 Tighten the expected output of the "podman image trust show" test c872788e4 Use INTEGRATION_ROOT instead of current directory acd8b4900 Add support to play kube for --log-opt d7662edf6 [NO NEW TESTS NEEDED] Fix off-by-one index comparision (reported by LGTM) 24c83980e Fix some typos in documentation and comments (found by codespell) 22270fb84 Replace 'an user' => 'a user' 936ab158c [CI:DOCS] Fix typo keep_id -> keep-id 38c78381c Set DOCKER_HOST in the VM ce4ed7d13 fuse-overlay probably means fuse-overlayfs. ece0c7e5d Support template unit files in podman generate systemd 8e3760c29 Remove --kernel-memory options f4f96962c tag: Support tagging manifest list instead of resolving to images 30245f584 Remove infra ID from DB before removing containers 70a5d8cd1 System tests: confirm that -a and -l clash 12d0a8509 systemd: compatible with rootless mode 960a55c09 system tests: CONTAINER_* and --help: cleanup 20b5a8599 podman run --memory=0 ... should not set memory limit c3801f0fa Add information on how to discover default log driver d24ce0a33 Add test for system connection 517b56b02 Generate Kube should not print default structs 9500e11a8 libpod: change mountpoint ownership c.Root when using overlay on top of external rootfs 34dcbc949 Change podman connection list to use default field 087f8fc73 Allow API to specify size and inode quota db7a98de4 Use exponential backoff when waiting for a journal entry 4f7a431da Pod Rm Infra Improvements c8cffe1b3 system tests: socket activation: clean up d0f7b99c6 rootfs-overlay: fix overlaybase path for cleanups 468e7c689 Move CONTAINER_HOST and _CONNECTION to IsRemote Function 207abc4a9 We should only be relabeling when on first run 4f857bc10 If CONTAINER_HOST env variable is set default podman --remote=true 8db62d04f Set targetPort to the port value in the kube yaml 16e7cc8bf Do not add TCP to protocol in generated kube yaml ab4c9a894 Use CGO_ENABLED=1 when building natively on darwin c1497cf44 Test-hang fix: Wait for ready + timeout on connect. 8439a6d5e Checkpoint/Restore test fixes f9ff0525c Don't include ctr.log if not using file logging 50b9d82f2 Don't use docker/pkg/archive, use containers/storage/pkg/archive 7112a4159 Fix codespell errors 184de3955 Adjust tests to verify all subcommands show the help message 8cae2978e Fix panic in container create compat api 5d18fb923 Don't add image entrypoint to the generate kube yaml cc875fd26 Display help text on empty subcommand by default 14bfee31f podman search: display only name and description by default 8600bce53 codespell code 7b1e386f7 Add information about .containerignore to podman build man page cead18537 CNI: fix network create --ip-range 4631f5b28 Kube Gen run as user/group issues 3ba69dccf rootlessport: reduce memory usage of the process ab0e6630f No space in kube annotations for bind mounts 0459484bd Fix CI flake on time of shutdown for API service b28a8bc19 Refactor podman search to be more code friendly 69b665996 Unit files: Use actual installed path for podman 1e81787e3 Bump github.com/onsi/ginkgo from 1.16.4 to 1.16.5 9042520cf cgroups: use cgroup.controllers to read controllers ab8fb3876 builder: Add support for builder prune 7580c2273 Remove a volume with --force if container is running 6b2939884 Use SplitN(2) when copying env variables e57b32c59 podman stats: move cgroup validation to server 54471acba fix test dd5975f3d Support readonly rootfs contains colon 90b5318b8 [CI:DOCS] oci-hooks.5.md: fixup section in header 8d3aec9d0 Enable /debug/pprof API service endpoints 5caf6b94e Not all fields in machine list were set properly fad14dafe faster image inspection 48d26a893 Warn if podman stop timeout expires that sigkill was sent 6fc73ea4e [CI:DOCS] introduce --replace flag for play kube 0479fd8d6 [CI:DOCS] Include manifest example usage a487a6382 Change podman.1 man page to show corret log-level default da8e4cdeb Bump github.com/opencontainers/selinux from 1.8.5 to 1.9.1 6f9e9ee9e Fixes #11668 fbce7584d libpod: fix race when closing STDIN 8bd9f58d1 Ensure `podman ps --sync` functions e1089e89d Allow `podman stop` to be run on Stopping containers 675d2d0c1 Bump github.com/containers/image/v5 from 5.16.0 to 5.16.1 033a662b9 Bump github.com/docker/docker 521c0cbd1 It really should be no **NEW** tests needed fb118b852 README.md: Point to Podman's channels 8e80f4d24 Add podman-plugins to upstream image a726043d0 CNI networks: reload networks if needed 8156df5b7 bump c/common to latest and c/storage to 1.37.0 21c9dc3c4 Add --time out for podman * rm -f commands d6b9451b4 Cirrus: Fix defunct package metadata breaking cache 163d81cc0 Pod Events Logging Fix c67593df1 [NO TESTS NEEDED] Ignore removed containers 6da97c863 Pod Volumes From Support 4ea5d6971 Add note about empty fields and null values for API responses 97bf6331f Bump github.com/containers/buildah from 1.23.0 to 1.23.1 641f0ccc4 Add podman play kube --no-hosts options fb2355adb Gating tests: fix permissions error 686b7ef7b pkg/specgen: cache image in generator 0b5a2b746 cirrus: gitlab: download packages 648882bf6 Add guard for BuildOptions.CommonBuildOpts bf94ebf42 System tests: tighten 'is' operator 7e81d78ed Update README and release notes for v3.4.0 cc4232169 sdnotify test: accept MAINPID anywhere 642d68299 machine: silently cleanup dangling sockets before rm if possible a1dce3a0d Add expose type map[uint16]string to description 0a156211d [NO TESTS NEEDED] Fix typo in storage.conf file exists message 1ff6a5082 Support selinux options with bind mounts play/gen 9c6c98192 kube: fix conversion from milliCPU to period/quota 5090920cc Bump github.com/mattn/go-isatty from 0.0.12 to 0.0.14 5c1b3e8d7 test: use new helper 788106dad test: skip test on rootless cgroupsv1 5a33b7aef machine: Info on successfully stopping qemu machine c25cc7230 Allow a value of -1 to set unlimited pids limit 1805ed360 Vendor in latest containers/storage c9ea2cae1 Storage can remove ErrNotAContainer as well ccff77025 libpod: container create: init variable: do not deep copy spec 5ea369ade libpod: add GetConfigNoCopy() 30bf31010 libpod: add execSessionNoCopy 98176f001 libpod: do not call (*container).Spec() 2d8605189 Pod Device-Read-BPS support 97f755f87 Remind user to check connection or use podman machine 678b554b1 Ensure pod ID bucket is properly updated on rename 60824c613 Fix contributor make targets on Ubuntu and Debian 0d4fa7bc9 Implement PR template to assist review & release 5d6ea90e7 libpod: do not call (*container).Config() a3cdee979 [NO TESTS NEEDED] Add port configuration to first regular container d14f66972 [CI:DOCS] cmd/podman: no dot for short descriptions 1c8926285 move network alias validation to container create d0950f3ef set --cni-config-dir for exit command 05614ee13 always add short container id as net alias a9a54eefa image prune: support removing external containers 86083c580 System tests: speed up. They've gotten too slow. 344ba32c8 Add dockerfile.5 as man link to containerfile man page 87559b020 Set MSI to be 64-bit only. ca3c08bf9 fix podman network prune integration test flakes f76fa3475 Cirrus: Add gitlab podman runner test 1df0646b0 CNI: network remove do not error for ENOENT 464fec260 remote build: EvalSymlinks() the context directory 8fca626e3 stop: Do nothing if container was never created in runtime 3ce98a5ec logging: new mode -l passthrough 3600054d1 Allow machine options to be set from containers.conf 5a2ca77b9 Vendor in containers/common v0.46.0 c668ca859 podman machine: do not join userns b3307bc9c Disable docker and alias to podman in FCOS ignition 1e0039a83 added healthcheck to ps command a97551eb2 Fix english on prune prompt 3d8dec982 Document missing /images/search query parameters 6095c4fac rootful: do not set XDG_RUNTIME_DIR for cni plugins 1cf66f514 Revert "rootful: unset XDG_RUNTIME_DIR" ba46613a6 Add completion for machine list format 2df0685cb Set context dir for play kube build ce080d25c Makefile: use -ldflags/-gccgoflags depending on the go implemenatiton 82818caff Update docs for --platform in podman-build.1 b6e5a4909 shell completion: do not show images without tag 119973375 podman inspect add State.Health field for docker compat 01bf8a668 podman save: enforce signature removal 4ecaf85d9 Add JSON version of the machine list ed3c4a89d Add support for :U flag with --mount option 2d5d98c04 [CI:DOCS] Add link to running ctrimage on enablesysadm b6fecbb75 Ignore mount errors except ErrContainerUnknown when cleaningup container 1c4e6d862 standardize logrus messages to upper case 45ee5c5db podman generate kube should not include images command f5f95d722 Fix machine image db44addf9 sync container state before reading the healthcheck 0baee2cc3 Also show the (initial) disk size 911298252 Show cpus and memory in machine list 5acf8ae12 Eighty-six eighty-eighty 68d21b6ff net types: remove omitempty from required fields 49c5688a3 podman save: add `--uncompressed` af49810a6 Bump CNI to v1.0.1 5875e409e vendor c/psgo@v1.7.1 738f2b36e [CI:DOCS] Add network alias note in man pages 4ecbc7caa Add a backoff and retries to retrieving exited event 319fcf52f Cross-build release-archives w/ arch in filename 34043bd81 Fix Error, empty output for info: 'VERSION' 185294cb8 Generate kube should'd add podman default environment vars ae5de8b39 volume: Add support for overlay on named volumes 8fac34b8f Pod Device Support 8453c8ce6 Support --format tables in ps output 61217f3ba Remove references to kube being development b74edfb0a Add support for retrieving system service --timeout 3221f50a4 Add podman image/container inspect man pages 665b451e5 [CI:DOCS] Add link to skopeo delete in podman rmi 509812457 vendor c/common@main 92ee2f372 remote untag: support digests cb077c968 Created MapOptions for PodCreate a1861c570 Bump k8s.io/api from 0.22.1 to 0.22.2 5242030ac compat API: /images/json prefix image id with sha256 cf28dab9f podman machine: use gvproxy for host.containers.internal eea5d2512 utils: return error message from StartTransientUnit 4caca0969 utils: raise warning only on cgroupv2 74ad05396 Add podman machine init --now option 22df773f7 System tests: cleanup, and remove obsolete skips e3e9e5175 Add username flag for machine ssh c692f7a18 Remove unused code from libpod 62350fed6 [CI:DOCS] markdown cleanup 613ef220f Fix up build the docs site 7ca666f47 Use a new markdown converter for sphinx a2c8b5d9d runtime: move pause process to scope 72534a74b system: move MovePauseProcessToScope to utils 9c1e27fdd system: always move pause process when running on systemd fa9728c55 system: avoid reading pause pid file f1ee23425 Only add 127.0.0.1 entry to /etc/hosts with --net=none 4216f7b7f Add no-trunc support to podman-events aee0ab98c CNI: add ipvlan driver c20f61148 CNI: network create support macvlan modes 5c7935057 Do not allow network modes to be used as network names 9c091e42d fix inverted condition 7c5d64b47 Fix /auth compat endpoint 5e8309464 Add Drivers method to the Network Interface 1bcd006c5 CI: load ipv6 kernel modules for rootless tests b906b9d85 Drop OCICNI dependency 85e8fbf7f Wire network interface into libpod 218f132fd cni network configs set ipv6 enables correctly 24bec9a76 default network: do not validate the used subnets aa7bc4e37 network create: validate the input subnet 3e77f960f Set default storage from containers.conf for temporary images 0b1c45bc5 container runlabel remove image tag from name 962675c14 build.bats: fix copy tests after containers/buildah#3486 d0c605cd3 build: mirror --authfile to filesystem if pointing to FD instead of file 5cafb6d18 Fix example in podman machine init man page 222b62e7b vendor: Bump github.com/containers/buildah from 1.22.3 to 1.23.0 9b04e1789 api: handle nil pointer dereference in rest endpoints 5dbf3ee7a build: take advantage of --platform lists 64de4f612 Document `all` query parameter for /libpod/images/prune 38c5f6721 Show variant and codename of the distribution 952fc4a6f Use new aarch64 fcos repos d7256be80 Enhance bindings for IDE hints 84005330a Pod Volumes Support b1768d3b0 test: enable --cgroup-parent test 44abc1797 libpod: honor --cgroups=split also with pods 65f3b16c6 tests: enable --cgroups=disabled test for rootless afe4d17be tests: simplify --cgroups=disabled test d3f0f09ad libpod: rootful close binded ports 072b061b4 Search gvproxy with config.FindHelperBinary() a55e2a00f rootfs: Add support for rootfs-overlay and bump to buildah v1.22.1-0.202108 6221f269a fix restart always with rootlessport d30facfda Cirrus: NM/CNI workaround + Remove prior-Ubuntu ba2130ff5 If container exits with 125 podman should exit with 125 9ae947654 Bump github.com/json-iterator/go from 1.1.11 to 1.1.12 b0cbcd1d0 bump c/common to v0.44.0 32424d9a9 remove rootlessport socket to prevent EADDRINUSE 3c77a98e4 Add deprecated fields for 1.22+ clients that still expect them 7a667c4ac Use default username for podman machine ssh Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2022-03-21 17:31:28 -04:00
Bruce Ashfield	b8e53d99f9	podman: update to 3.4.2 ... Bumping libpod to version v3.4.2-4-g72031783c, which comprises the following commits: 25f35ac9e Use CGO_ENABLED=1 when building natively on darwin 7c98d542b Bump to v3.4.3-dev 2ad1fd355 Bump to v3.4.2 1d6397e5c Add release notes for v3.4.2 6d9b1e4b8 Fix partial log line handling with journald log driver 8b368b5e1 Fix Zsh completion command documentation c2fb170b8 Fix flake in upgrade tests 6770fede7 VOLUME must be declared after RUN chown command cedf1a3d4 podman-generate-kube - remove empty structs from YAML e456873c0 Exclude already built sources for static build e9f6e5194 Match .c files in Makefile de852ebd0 shm_lock: Handle ENOSPC better in AllocateSemaphore fc1707dfe Minor test tweaks c8b7ca2ba pod/container create: resolve conflicts of generated names 2dc8db773 Add some information about disabling SELinux when using system volumes 93a3e720d Log Apache access_log-like entries at Info level [NO NEW TESTS NEEDED] b1ac02dcb tweak a couple of flag descriptions in help output 718de67f3 Fix bindings container log test dd6551055 test: run --cgroups=split in new cgroup df9e0fdcb Fix tests of podman image trust --raw and --json df736396e Tighten the expected output of the "podman image trust show" test 18c322d1c Use INTEGRATION_ROOT instead of current directory 3bd80ac9a Handle HTTP 409 error messages properly for Pod actions a8332f694 Fix swagger definitions 5889c2c24 Cirrus: Authorize rootless user self-ssh 2a0aad6be Add information on how podman machine is updated 0ded340e6 Fix help message case for `podman version` fa29ca710 Fix pause usage example 6bf6d7237 Set Checkpointed state to false after restore 2d6252b98 runtime: change PID existence check a208bc24d Set DOCKER_HOST in the VM 246782133 runtime: check for pause pid existence 0519e7ef8 utils: do not overwrite the err variable 2b85684ad Fix systemd PID1 test 0e1f67b72 cgroups: use SessionBusPrivateNoAutoStartup 9707ff5d4 vendor: update godbus to v5.0.6 a67bf0f92 Slirp4netns with ipv6 set net.ipv6.conf.default.accept_dad=0 47afa6d96 Fix a few problems in 'podman logs --tail' with journald driver 729310a85 If Dockerfile exists in same directory as service, we should not use it. 7275d389b Document to not set K8S envars for CNI 955d01f5a [NO NEW TESTS NEEDED] Fix off-by-one index comparision (reported by LGTM) 2ff511798 Fix some typos in documentation and comments (found by codespell) eead06b9d [CI:DOCS] Fix typo keep_id -> keep-id 8887cc7e4 podman run --memory=0 ... should not set memory limit 6f779b230 systemd: compatible with rootless mode 465e27cf1 Use exponential backoff when waiting for a journal entry 3b67336b6 Pod Rm Infra Improvements f8ede7c5e System tests: confirm that -a and -l clash c3f3e6d3b Remove infra ID from DB before removing containers b3eaa08c5 Generate Kube should not print default structs d489abf26 fuse-overlay probably means fuse-overlayfs. 34739f441 Replace 'an user' => 'a user' 9c94530bb network reload without ports should not reload ports eca1b6c0b pod create: read network mode from config 9e78185e3 volumes: be more tolerant and fix infinite loop 5c2d17e1c [backport] tag: Support tagging manifest list instead of resolving to images 46f7d2af1 Bump to v3.4.2-dev a6493ae69 Bump to v3.4.1 56a4372c2 Update release notes for v3.4.1 f05e206bd Fix test failures from backports 437ec951d system tests: socket activation: clean up 5aa89c88f Checkpoint/Restore test fixes d39e41283 Set targetPort to the port value in the kube yaml 7923bfcb0 Test-hang fix: Wait for ready + timeout on connect. c135ff76d Don't include ctr.log if not using file logging 9168db8bc Do not add TCP to protocol in generated kube yaml b5dd62f31 Don't use docker/pkg/archive, use containers/storage/pkg/archive a213661ae Fix panic in container create compat api 92ed439d2 Don't add image entrypoint to the generate kube yaml 16fb4161a Kube Gen run as user/group issues 3082ba8b7 No space in kube annotations for bind mounts b470de05b cgroups: use cgroup.controllers to read controllers 8b87793d4 Use SplitN(2) when copying env variables d458bc304 [CI:DOCS] Include manifest example usage fbe94088f podman stats: move cgroup validation to server 338e01f04 [CI:DOCS] oci-hooks.5.md: fixup section in header de6a4af5a Change podman.1 man page to show corret log-level default 326eae3b7 Add podman-plugins to upstream image ca33df146 Ensure `podman ps --sync` functions 7bbf774e8 Allow `podman stop` to be run on Stopping containers 2cd206d0f libpod: fix race when closing STDIN 37347c321 It really should be no **NEW** tests needed 62d12a2ad Add guard for BuildOptions.CommonBuildOpts c6be71486 machine: silently cleanup dangling sockets before rm if possible 835d74ac6 sdnotify test: accept MAINPID anywhere 14509a92b Allow a value of -1 to set unlimited pids limit deb7517cc Gating tests: fix permissions error cd4e10fdf [v3.4] bump c/common to v0.44.3 91f9682c7 Bump to v3.4.1-dev 6e8de00bb Bump to v3.4.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2021-11-22 11:20:14 -05:00
Bruce Ashfield	0a7ae8bc50	global: convert github SRC_URIs to use https protocol ... github is removing git:// access, and fetches will start experiencing interruptions in service, and eventually will fail completely. bitbake will also begin to warn on github src_uri's that don't use https. So we convert the meta-virt instances to use protocol=https (done using the oe-core contrib conversion script) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2021-11-02 09:57:03 -04:00
Bruce Ashfield	0429ecbcd8	podman: add rdepend on nsenter ... Podman requires nsenter (for obvious reasons) .. and while this dependency is normally satisfied on images (via busybox), it is possible to build a minimal container image that excludes busybox .. and hence will not have nsenter present. Rather than making this a hard rdepends on util-linux-nsenter, we use a variable: VIRTUAL-RUNTIME_base-utils-nsenter, which can either be set to busybox or util-linux-nsenter (the current default). The VIRTUAL-RUNTIME_base-utils- format follows similarly named OEcore providers and variables .. which the exception that there is no entry in the preferred providers file there, and there's no package created called busybox-nsenter (but perhaps there could be in the future). Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2021-10-21 19:17:56 -04:00
Bruce Ashfield	b2299d3900	podman: check for ipv6 in DISTRO_FEATURES ... When setting up networking, podman is looking for the ipv6tables executable. We have iptables in our rdepnds, but the ipv6 variant won't be available unless ipv6 is in DISTRO_FEATURES. We can use our distro feature check to detect the issue and alert the developer. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2021-10-15 09:34:18 -04:00
Bruce Ashfield	6dc96e83ec	podman: upate to v3.4.o ... We adjust the LICENSE checksum due to: commit 84694170402ff699065382ba2d2fb172c3b6c88f Author: Daniel J Walsh <dwalsh@redhat.com> Date: Thu Aug 26 13:15:23 2021 -0400 Globally replace http:// with https:// [NO TESTS NEEDED] Hopefully existing tests will find issues. Signed-off-by: Daniel J Walsh <dwalsh@redhat.com> and import the following changes: 6e8de00bb Bump to v3.4.0 3c93afbf4 Final release notes update for v3.4.0 128e168be Support selinux options with bind mounts play/gen 855746cc9 Fix release notes 09b353081 Release notes for v3.4.0 final release 2247d5f1b Disable docker and alias to podman in FCOS ignition 7d72e8324 [NO TESTS NEEDED] Add port configuration to first regular container 4fc40c82f Remind user to check connection or use podman machine 5064fd519 Ensure pod ID bucket is properly updated on rename ba74d6e6e libpod: do not call (*container).Config() a1199dbaf [CI:DOCS] cmd/podman: no dot for short descriptions ddc2b9bbe System tests: speed up. They've gotten too slow. b3af5a92c stop: Do nothing if container was never created in runtime 7bfc5250d remote build: EvalSymlinks() the context directory 7395459c7 podman machine: do not join userns 5e9aa13dc added healthcheck to ps command 6638a91e8 Fix english on prune prompt 31df5b78f rootful: do not set XDG_RUNTIME_DIR for cni plugins 8c944274f Revert "rootful: unset XDG_RUNTIME_DIR" 6ef2d3bd8 shell completion: do not show images without tag 063ba47d7 Update docs for --platform in podman-build.1 0f87cfd28 podman generate kube should not include images command da67c7199 Also show the (initial) disk size 2c5382ba9 Show cpus and memory in machine list 57c055f61 Ignore mount errors except ErrContainerUnknown when cleaningup container 8084c5ef2 Allow machine options to be set from containers.conf c0efa0dba Vendor in containers/buildah v1.23.1 6c7445d2b Vendor in containers/common v0.44.2 d6f6767a5 Set context dir for play kube build f2c676e99 [3.4] podman save: enforce signature removal 8ee18bde1 Use a new markdown converter for sphinx 9dd75d311 Bump to v3.4.0-dev e343b5368 Bump to v3.4.0-rc2 5bc648762 Release notes for v3.4.0-RC2 72e19cf51 Generate kube should'd add podman default environment vars 909cbfe21 sync container state before reading the healthcheck 897150946 Eighty-six eighty-eighty e06abee1d vendor c/psgo@v1.7.1 d45cbbda3 Add a backoff and retries to retrieving exited event 70da2e858 [CI:DOCS] Add network alias note in man pages a98e0371e Remove references to kube being development 70a428662 Support --format tables in ps output 45f8b01f6 Add podman image/container inspect man pages 863ea75c4 compat API: /images/json prefix image id with sha256 c66db2b70 [CI:DOCS] Add link to skopeo delete in podman rmi 7bfe9ca3d remote untag: support digests 7e6921170 System tests: cleanup, and remove obsolete skips 8784c1dd6 Remove unused code from libpod 79966def8 [CI:DOCS] markdown cleanup be15a01c5 Only add 127.0.0.1 entry to /etc/hosts with --net=none d27fcbdc2 container runlabel remove image tag from name 1a25a90a4 Fix /auth compat endpoint c8fd65ea6 fix inverted condition 3bd3c6213 Fix machine image 331ce0f7e utils: return error message from StartTransientUnit 046fa2740 utils: raise warning only on cgroupv2 6001cd02a test/apiv2: set main version back to 3 4406ebb46 [3.4] vendor c/common@v0.44.1 40eeb7d3b runtime: move pause process to scope e6fe5d631 system: move MovePauseProcessToScope to utils ae5a5b51b system: always move pause process when running on systemd 34c9ce2ec system: avoid reading pause pid file 41cd360dc Bump to v3.4.0-dev bd47b9eff Bump to v3.4.0-rc1 29edeaa89 Fix buildah-bud tests by using main's diff file 66eb69224 Fix podman-build manpages by using version from main a647e1d18 Fix release notes 0d43151c2 Remove Pod CPU tests fd56c8386 Set DEST_BRANCH in cirrus to fix CI 4841ec5c6 Final release notes for v3.4.0 RC1 5532cd488 libpod: honor --cgroups=split also with pods e07dccc3a build: take advantage of --platform lists c7c4cb886 build.bats: fix copy tests after containers/buildah#3486 c407813d6 build: mirror --authfile to filesystem if pointing to FD instead of file 69e327378 Bump to Buildah v1.23.0 331d4c5c7 Further release notes updates 901cf71a6 Show variant and codename of the distribution 507000a30 api: handle nil pointer dereference in rest endpoints 702e524ff Fix example in podman machine init man page c8cbd87fd Document `all` query parameter for /libpod/images/prune 939db105c tests: enable --cgroups=disabled test for rootless e0881fd5e tests: simplify --cgroups=disabled test 74bc365eb Enhance bindings for IDE hints e37883f13 Cirrus: NM/CNI workaround + Remove prior-Ubuntu 0ca62196a libpod: rootful close binded ports b6789c3d5 fix restart always with rootlessport ffc8e57d3 remove rootlessport socket to prevent EADDRINUSE fd8d332a4 test: enable --cgroup-parent test 33591c3ef Search gvproxy with config.FindHelperBinary() 1af0f8934 Add deprecated fields for 1.22+ clients that still expect them c6e4453f6 If container exits with 125 podman should exit with 125 5829d62ea Use default username for podman machine ssh c487389fa bump c/common to v0.44.0 069d90124 Initial release notes for v3.4.0 RC1 3c24d1fda Remove pod create options `--cpus` and `--cpuset-cpus` fceec6972 Use new aarch64 fcos repos 31604b43d Revert "logs: adjust handling around partial log messages" c23f81fab Fix #11444: remote breaks with stdout redirection a8875faca [CI:DOCS] Remove short 'a' option from all-tags eec59cea2 Bump github.com/containers/storage from 1.35.0 to 1.36.0 deaf96924 Refacter API server emphasis on logging 4fbc5b8fe Stop outputting 'healthy' on healthcheck 81751bebc Bump github.com/opencontainers/selinux from 1.8.4 to 1.8.5 f5e4ffb5e Add init containers to generate and play kube d2e10a71d podman unshare keep exit code 309d98971 Bump github.com/containers/psgo from 1.5.2 to 1.6.0 f87f27ddc Add /containers/stats response to API docs 8d638d502 try to create the runroot before we warn that it is not writable 5bf220144 machine: set filemodes in octal 6f36a47ac podman machine: enforce a single search registry 50688da29 stats: detect containers restart 2b85382ca api: correctly set the container stats 53dc99fa6 stats: allow to read stats for paused containers a4cc32c2c Fix missing args in name in example 5fdd0431b Cirrus: Run unit-tests rootless 4ccb4f81f Add a system test to modify and import an exported container. c65b43a0f Bump github.com/godbus/dbus/v5 from 5.0.4 to 5.0.5 7cf22279d Fix conmon attach socket buffer size e5468d404 test/e2e/search_test.go - relax tests 78c5a47fc vendor mpb@v7.1.4 6888b061d inspect: printTmpl must Flush writer 4d9dcab0c podman upgrade tests for networking bbdaf837b Normalize auth key before calling `SetAuthentication` 2f967b81c Add logDriver to podman info ab272d1e9 Add 'Machine %q started' message when podman machine start successful cee689af1 Fix spacing on --userns options in docs 1ff797e36 system tests: new random_free_port helper a1cab358c fix play kube can't use infra_image in config file 6aa666a27 container inspect: improve error handling aa412ccc4 test/testvol/main.go: Fix missing arguments to Errorf() f18ccbcc0 fix play kube --network options 748c2700b pkg/bindings/images.nTar(): set ownership of build context to 0:0 bfcd83ecd Add Checkpointed bool to Inspect 0d1ba0a58 Remove changelog.txt from the repository 8b4f99ac2 QEMU Apple Silicon: Find BIOS FD wherever 1150d1b0b Document default timeout for libpod API Container Restart d1573b95e generate systemd: handle --restart 1eaa44959 logs -f: file: fix dead lock 3d02cfb5e network create: add warning for deprecated macvlan flag bd6403927 cgroup-info: check if user.slice is valid before accessing value 57133bb33 Fix warning of unsupported feature on MacOS c01f7725a TCG Accel fallback for Apple Silicon. Iss #10577 ebd37ede9 Example says there is not IP then in the next command suggests to use it 11fc0e554 kube: Add support for podman pod logs ce5baa125 feat: add localhost into hosts if the networking mode is not host e151f4c9f Fix #11418 - Default TMPDIR to /tmp on OS X 5d31c4250 Bump release to 3.3.1 274a3bc80 Remove unused stubs intended to start a machine with libvirt 8d9e19b03 Spell "build linux darwin" as "build !windows". d346e6e73 Add filtering functionality to http api secrets list 90998176d machine: always check error of net.Dial, even after last try 02a0d4b7f auto-update systemd test: skip on RHEL b3bb7da72 [#11408] podman help machine init cba114dd3 manifest: rm should not remove referenced images. a077335ce make podman run --systemd case insensitive ddeaaa47c Drop dependency on iproute e3c7e02a0 System tests: add cleanup & debugging output abdedc31a rootlessport: allow socket paths with more than 108 chars a55f595fe podman stop always cleanup f9a689f3e generate systemd: clarify limitations of `--new` 1ed0a7209 Cirrus: Reduce APIv2 task timeout 1fb07c422 Make secret env var available to exec session d674eb41e [CI:DOCS] podman cp: highlight globbing and multi-file copy 10144b707 pass LISTEN_* environment into container 9f7bad7da Use UNMERGED vbauerster/mpb PR to fix a pull deadlock b3aee22bd Cirrus: Skip APIv2 tests for [CI:DOCS] 375c3a7b3 docs: fix indentation for userns modes 1122c66ce upgrade test: add new baseline a2a166345 clean up socket and pid files from podman machine 06f94dd09 rootless cni: resolve absolute symlinks correctly ec1f350ee container: resolve workdir after all the mounts happen. de3920c0e auto-update: fix authfile label 9b7ef3dad runtime: Warn if XDG_RUNTIME_DIR is set but is not writable. a5adc3d80 Add support for mount options to API db60a1e65 Add support for libsubid 846941704 Globally replace http:// with https:// ab6c43f3e Shell completion for --format with anonymous fields d28e85741 InfraContainer Rework 1e6d1e5c6 Add filter params description to volume list/prune docs f5ce02b22 Bump github.com/containers/image/v5 from 5.15.2 to 5.16.0 d5507704e volumes: Add volume import to allow importing contents on tar into volume e88b62b34 Fix swagger issue c6e12a2e4 Bump github.com/fsnotify/fsnotify from 1.4.9 to 1.5.1 1dc6d1473 Fix file descriptor leaks and add test 1e176923b teardown play kube 3f22e5296 Allow setting of machine stream and image path from containers.conf 274d6fa19 generate systemd: use --cidfile again 4b2dc48d0 podman inspect show exposed ports 74ab2aaf9 Revert "generate systemd: custom stop signal" c0b1edd6a Network interface 70801b3d7 generate systemd: custom stop signal 3007bd4a9 130-kill.bats: increase timeouts from 10s to 60s 21f396de6 logs: adjust handling around partial log messages b20a54705 330-corrupt-images: don't try to tag with a canonical name fc6a02033 bump github.com/containers/common 1411fa5f2 libpod/Container.readFromJournal(): don't skip the first entry 6b06e9b77 Switch eventlogger to journald by default 02e59c668 utils.RunUnderSystemdScope(): always close Conn d06d285e6 logFile until flag issue edddfe8c4 volumes: Add support for exporting volumes to external tar d24a5d9fd Bump github.com/opencontainers/runc from 1.0.1 to 1.0.2 7b54a5fbe profiling: higher memory sampling rate fe4dc452e Bump github.com/containers/buildah from 1.22.0 to 1.22.3 1493b86c7 Bump github.com/onsi/gomega from 1.15.0 to 1.16.0 feff0d3c4 Use pod netns with --pod-id-file 57a0ed182 Bump k8s.io/api from 0.22.0 to 0.22.1 319c85e89 Support for --tls-verify flag in podman run & podman create e5d8defc4 Update README for 3.3.0 release 33fee83de add flag to record memory profiles db7eaa98b Bump k8s.io/apimachinery from 0.22.0 to 0.22.1 c22f3e8b4 Implement SD-NOTIFY proxy in conmon 7f3f792e2 Fix network aliases with network id fd32c73e3 Update /version endpoint to add components 745f6d949 e2e tests: fix overlay: Unknown option vfs.imagestore 16dfce486 Podman info output plugin information 0897946f6 [NO TESTS NEEDED] Clean up swagger b19812b5a machine: compute sha256 as we read the image file 043457192 machine: check for file exists instead of listing directory 82bb999e3 Bump github.com/containers/image/v5 from 5.15.1 to 5.15.2 2d0a0c0d2 fix rootlessport flake 592fae422 Volumes: Only remove from DB if plugin removal succeeds 9dd088e55 Cirrus: Confirm CGv1 / CGv2 VM expectations 5c837fe5b Skip stats test in CGv1 container environments dc7038288 Fix AVC denials in tests of volume mounts 77f665200 Restore buildah-bud test requiring new images 14f3658da Revert ".cirrus.yml: use fresh images for all VMs" aeffdb05d pkg/bindings/images.nTar(): slashify hdr.Name values cd40c875a Add ability to build images in play kube f0247df89 Bump github.com/rootless-containers/rootlesskit from 0.14.4 to 0.14.5 970529b6a Documented ways to fix firewall rules that are lost when firewalld reloads c1b7787a2 Bump github.com/containers/image/v5 from 5.15.0 to 5.15.1 bfc936261 Cirrus: Resolve two upgrade-test FIXMEs 1f632f357 fix: unifiedOverlays should be assigned if no conflicts found. e9f4d8179 Bump github.com/containers/storage from 1.34.0 to 1.34.1 e7ee15f8c cgroup-manager-systemd:Fail early if user:rootless and relevent session is not present. 3cee85531 libpod/option.go remove error stutter from wrap/wraf fe2be7f88 make sure that signal buffers are sufficiently big f98569946 volume: move validating volume dest from client to server. 91e21bed4 rootful: unset XDG_RUNTIME_DIR 2a8c41448 Fix rootless cni dns without systemd stub resolver 257d5e8a7 Fixed healthcheck default values when container created via compat API d99756434 Add space trimming check in ValidateSysctls bef26f258 rename oneshot initcontainers to once 9fc946563 Set gvproxy path to /usr/libexec/podman/gvproxy 5a32946d6 For compatibility, ignore Content-Type 404488a08 Run codespell to fix spelling 643178c1e Revert "Use static path for gvproxy" 73a755eec Fix device tests using ls test files d0e3b3c3a Enhance priv. dev. check cfbbc38a5 Workaround host availability of /dev/kvm 2e3ba9cd9 Change connection error to be helpful for machine users ed30ae4a8 Add until filter to podman pod ps 800a65fb2 [CI:DOCS] Fix multi-arch image docs 4e4c4b62f Bump github.com/opencontainers/selinux from 1.8.3 to 1.8.4 af46a64a8 Document source ip for the rootlesskit port handler f7de8bc80 Bump github.com/containers/storage from 1.33.1 to 1.34.0 8b9b925e7 skip flaking auto-update test 27443660c Enable docker-py compat. testing w/ ignored result 221b1add7 Add support for pod inside of user namespace. 12ac4198c Libpod images pull changes e7b7c90ba Reproducible Builds: trim embedded cgo paths 170fb2572 Alias build to buildx, so it won't fail bb96da9f1 Skip cgroup-parent test due to frequent flakes a4bdc67c4 Added autocompletion for images and system connections 1adeb2b70 podman info show correct slirp4netns path 79e4baf4c Bump github.com/onsi/gomega from 1.14.0 to 1.15.0 541e83ffe personality: Add support for setting execution domain. 88b9cbd5e Bump k8s.io/api from 0.21.3 to 0.22.0 e52187e7f show podman machine ssh command line 30df551bd auto-update: simple rollback adee0ca59 Bump github.com/BurntSushi/toml from 0.3.1 to 0.4.1 eb2e99101 Bump k8s.io/apimachinery from 0.21.3 to 0.22.0 c9e2f2f60 [CI:DOCS] tests-expect-exit: include source line numbers 8cbbbe6ef Fix TS parsing for fractional values 3c3fa6fac implement init containers in podman f4dd22b31 Cirrus: Fix not uploading logformatter html ddc360fe1 Bump Buildah to v1.22.0 [NO TESTS NEEDED] 41f94a4dc Fix podman unpause,pause,kill --all to work like podman stop --all cfcd1e186 Do not add an entry to /etc/hosts with `--net=host` f40a0e7c8 Handle timezone on server containers.conf e78f3e8c4 Bump github.com/docker/docker bd29ec4c3 Bump github.com/rootless-containers/rootlesskit from 0.14.3 to 0.14.4 9cc974c96 Only support containers stats using cgroups v2 ecf103302 podman info: try qfile before equery cc43b5133 image scp: fix typo in output e88d8dbea fix rootless port forwarding with network dis-/connect 4acc1d685 Use static path for gvproxy a210a2292 Compat API: Fix healthcheck status and healthcheck config 0762c7e97 Bump github.com/opencontainers/selinux from 1.8.2 to 1.8.3 985c71708 Fix handling of user specified container labels 03ffba29a podman-registry: minor usability updates 0ab9d19ad Bump to v4.0.0-dev 34b28d959 e2e tests: re-enable and fix podman stats tests c0952c733 Support size and inode options on builtin volumes 1d10ca739 Created scp.go image_scp_test.go and podman-image-scp.1.md 8ccf2539e test: move container process to a sub-cgroup cdbbd7915 stats: add a interval parameter to cli and api stream mode Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2021-10-04 08:48:30 -04:00
Bruce Ashfield	5e108f4598	podman: update to 3.3.1 ... Bumping libpod to version v3.3.1-2-g364efce39, which comprises the following commits: 1b33f7675 Bump to v3.3.2-dev 4c5283fab Bump to v3.3.1 bea109608 clean up socket and pid files from podman machine 68a059d89 Update release notes for v3.3.1 0103a0459 rootless cni: resolve absolute symlinks correctly 77948c8b4 Add filter params description to volume list/prune docs aa754c7e2 logFile until flag issue f363b805c Fix file descriptor leaks and add test d1ea54549 utils.RunUnderSystemdScope(): always close Conn 17afae4eb Use pod netns with --pod-id-file c16daa07e e2e tests: fix overlay: Unknown option vfs.imagestore 85846b633 change error comparison for exec.ErrNotFound 822818287 generate systemd: use --cidfile again 8aeaf681d Bump to v3.3.1-dev 98f252a3a Bump to v3.3.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2021-09-06 10:57:40 -04:00
Bruce Ashfield	263e4d3d4e	virtual/runc: don't rprovide virtual/ ... Similar to the oe-core commit: commit 93ac180d8c389f16964bce8bd5538d9389e970e6 Author: Michael Opdenacker <michael.opdenacker@bootlin.com> Date: Wed Sep 1 11:20:20 2021 +0200 meta: stop using "virtual/" in RPROVIDES and RDEPENDS Fixes [YOCTO #14538] Recipes shouldn't use the "virtual/" string in RPROVIDES and RDEPENDS. That's confusing because "virtual/" has no special meaning in RPROVIDES and RDEPENDS (unlike in PROVIDES and DEPENDS). Instead, using "virtual-" instead of "virtual/" as already done in the glibc recipe. We stop rproviding virtual/runc to keep the namespace clean. There aren't many users of this virtual provides, but we keep it around (for now) to maintain compatibility. At the same time we convert the RPROVIDES to virtual-runc, to keep it available and consistent with oe-core use virtual-libc, etc. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2021-09-06 10:57:17 -04:00
Bruce Ashfield	2c066bf7e2	podman: update to 3.3.0 ... Bumping libpod to version v3.3.0-2-g8809aed56, which comprises the following commits: 8aeaf681d Bump to v3.3.1-dev 98f252a3a Bump to v3.3.0 2408247f4 Final release notes for v3.3.0 dd3a49703 Fix network aliases with network id b5e04ae11 machine: compute sha256 as we read the image file a52b6bf23 machine: check for file exists instead of listing directory b71ef443a pkg/bindings/images.nTar(): slashify hdr.Name values f0d0c48d2 Volumes: Only remove from DB if plugin removal succeeds 89818f72b For compatibility, ignore Content-Type 7fb7f15af [v3.3] Bump c/image 5.15.2, buildah v1.22.3 5fc7c880a Implement SD-NOTIFY proxy in conmon 15fff7d91 Fix rootless cni dns without systemd stub resolver 63e06acfe fix rootlessport flake a92441e1b Skip stats test in CGv1 container environments 37b22af33 Fix AVC denials in tests of volume mounts daa311db3 Restore buildah-bud test requiring new images 2757d868c Revert ".cirrus.yml: use fresh images for all VMs" cd0677d89 Fix device tests using ls test files ce7ed3359 Enhance priv. dev. check 1d54315b6 Workaround host availability of /dev/kvm c0d0d31c4 Skip cgroup-parent test due to frequent flakes 0c7f08805 Cirrus: Fix not uploading logformatter html a098eafce Bump to v3.3.0-dev 7aa18e0a6 Bump to v3.3.0-RC3 e200b07f5 Release notes for v3.3.0-RC3 204ac5d46 [v3.3] Bump c/storage to v1.34.1 and c/image to v5.15.1 440188f3b fix gvproxy path search for macos de67e990e Bump to v3.3.0-dev 88559c197 Bump to v3.3.0-rc2 1acbdf940 Set gvproxy path to /usr/libexec/podman/gvproxy 7442f0b85 Revert "Podman Pod Create --cpus and --cpuset-cpus flags" 61a5e9812 Address review comments e63753afd Final release notes for v3.3.0-RC2 f9f315c75 Document source ip for the rootlesskit port handler 66c0024a0 podman info show correct slirp4netns path d746a7e09 show podman machine ssh command line 4b42265b5 Fix TS parsing for fractional values 85d5c24ed Handle timezone on server containers.conf 67bf11e8c Fix podman unpause,pause,kill --all to work like podman stop --all a1afb2300 Do not add an entry to /etc/hosts with `--net=host` a82006160 Only support containers stats using cgroups v2 c836ffe5b Compat API: Fix healthcheck status and healthcheck config 04e59f11d podman info: try qfile before equery 870576b39 test: move container process to a sub-cgroup cb7f0a302 Fix handling of user specified container labels d749770fe Release notes for v3.3.0-RC2: Initial 0c82c6fa8 Bump github.com/rootless-containers/rootlesskit from 0.14.3 to 0.14.4 0eec16ce9 fix rootless port forwarding with network dis-/connect 50c6cc229 [v3.3] Bump to Buildah v1.22.0 [NO TESTS NEEDED] b1c9c5b5f Disable aarch64 support 489e0f075 Cirrus: CI Support for v3.3 Branch b347a3583 Bump to v3.3.0-dev ce0dee984 Bump to v3.3.0-rc1 c1156d48b Bump github.com/containers/storage from 1.33.0 to 1.33.1 58672847e Bump github.com/containers/image/v5 from 5.14.0 to 5.15.0 9d33abac6 Fix auto-update system test for older systemd 2a484e782 ps: support the container notation for ps --filter network=... 732ece6ae Add `--accept-repositories` integration tests d59391c04 system tests: fix race in stop test 2b5d9cd7d Fix: healthcheck tests use .Should() instead of .To() 872c442e6 Remove ReadHeaderTimeout 724d04823 rootless: avoid zombie process on first launch 1d34a2c4c Update transfer.md ec9dad7e4 buildah bud tests under podman-remote a9f6592af Fixed Healthcheck formatting, string to []string 4df6e31cc remote build: fix streaming and error handling e3b0ba928 [CI:DOCS] Update podman-cp manpage 013267006 cp: consolidate and simplify 67d439197 rootless: check that / is mounted as shared 32b589216 Multi-arch image build: Daily version-tag push 60b9e8c0d Added tests for out of and into pod checkpoint and restore support eb9446778 Support checkpoint/restore with pods 3375cbb19 Vendor in go-criu v5.1.0 for Pod checkpoint/restore support 92dce3e2f Prepare CRIU version check to work with multiple versions b09073832 Bump github.com/containers/storage from 1.32.6 to 1.33.0 0aec93edc cp system tests: reduce number of exec's 6fe03b25a support container to container copy 63ef5576e command: migrate doesn't move process to cgroup a0313ef92 rootless: do not overwrite err variable 7689783ae exec: fix cleanup fd1f57b3a Fixed Healthcheck formatting, string to []string 7fa4d2cb1 Add prune until filter test for podman volume cli 8d5d5face dual-stack network: fix duplicated subnet assignment 5473490c6 fix: podman manifest push respect --tls-verify flag c197d19fe play kube: support capitalized pull policy 1b6423e9f refine dangling checks 23a938fa2 Bump github.com/containers/image/v5 from 5.13.2 to 5.14.0 1a188f622 Add tests to verify CORS is enabled 2c9f18100 Fix handling of shadow-utils dcb5c92c0 import: write stdin to tmp file 8f9d33b7f Networking test: fix silent breakage 0f708efd8 Implemented --until flag for libpod's container logs 9c659b3bc docs: fix broken remote client link 2d8e837a9 Add until filter to volume ls filters list 12f4b14a1 Add notes to flags not supported on cgroups V2 3e79296a8 Support DeviceCgroupRules to actually get added. 4376f14c3 Ensure journald events tests only run where supported ac588c751 [CI:DOCS] Fix GitHub URL to Podman logo db2f47428 Drop podman create --storage-opt container flag 595227095 e2e tests: prevent 'Expect(ExitCode())' pattern 064bd9d19 Copy the content from the underlying image into the newly created volume. Fixes: #10262 313c7118e system tests: cleaner, safer use of systemd e64545004 [CI:DOCS] Multi-arch image workflow: Make steps generic 2b98a226b system test: auto-update: multiarch fixes caf03fd7a system test: auto-update: allow running as rootless 117850e6e Fix handling of selinux labels in podman play kube 6430c1316 [CI:DOCS] refine the runlabel man page eaaca4999 compat: image create: handle platform correctly 80e807a19 Flake Fix: Wait before connecting container port c622c7f2a (minor) typo fix: timeout variable 0784a5d04 Bump github.com/opencontainers/runc from 1.0.0 to 1.0.1 b92bbfd76 Just restore protections of shadow-utils 81e32b180 Kube: Add liveness probe for containers. b8accad0e Update Release Notes and README for 3.2.3 50fcb06e7 Bump k8s.io/api from 0.21.2 to 0.21.3 2e02942d4 vendor containers/common@main 6f1c7a0b6 systemd: require network*-online*.target e1ac0c303 vendor containers/common@main e3a09c51e Bump k8s.io/apimachinery from 0.21.2 to 0.21.3 be51173ed APIv2 (python) tests: fix flake 9924c57d4 podman start: remove containers configured for auto removal af40dfc2b --infra-name command line argument 7996e2b82 Randomize the auto-update of podman containers e4dcb1004 System tests: fix a multiarch problem ec6150751 Correct a typo in documentation f7321681d podman pod create --pid flag 0007c98dd Fix race conditions in rootless cni setup 547fff270 e2e tests: use Should(Exit()) and ExitWithError() 59f31d86a auto-update: add --dry-run e73d48299 CNI-in-slirp4netns: fix bind-mount for /run/systemd/resolve/stub-resolv.conf c9970647b podman-remote build use .containerignore over .dockerignore 100c23dc5 Fix up documentation of the userns audit flag 48e6a8eed Return macvlan object in /network REST API response Fixes: #10266 6ced24d0b Fix broken volume and container tests 01cfb51fe auto-update: make output more user friendly 92c9def93 Update nix pin with `make nixpkgs` cbbb1a80f Perform a one-sided close of HTTP attach conn on EOF 7d6f3c4dc Bump github.com/google/uuid from 1.2.0 to 1.3.0 6fcf0b2f3 auto update: minor style nits a90a4ec7c auto update: pass through a context a8847c01f auto-update: use libimage for image checks eda8d1f58 auto update: fix authfile detection db26e1ef9 auto-update: make restarted unit more obvious 6ca574dc3 Update USE in order to fix tests fe044d51e Fix cirrus-cron failure notification GH workflow 6cac65c84 fix: uid/gid for volume mounted to existing dir 084dbeb56 Bump github.com/containers/storage from 1.32.5 to 1.32.6 00db5c6ea Manifest create subcommand should accept more than 2 arguments 48ff2ef5a Don't exclude Dockerfile, Containerfiles from tar content 6bdb990c9 Restore headers of optional information in 'podman pod ps' 4624142c2 Implemented Until Query Parameter for Containers/logs a2d15d981 Mention new hostname for loopback IP daebdf385 Add container config to compat image inspect 00ed696ed fix: logo not loading after barnch renaming 95c463785 Update docs/tutorials/rootless_tutorial.md: e5fcffc55 Remove GetStore function from Libpod 563532aef Bump github.com/onsi/gomega from 1.13.0 to 1.14.0 38863e764 Replace old RESTful tutorial with updated README 38bef70b3 manifest push --rm: use libimage for removal 2c7c67958 Make rootless-cni setup more robust 518457b35 Bump github.com/cyphar/filepath-securejoin from 0.2.2 to 0.2.3 59abb77fc multiple image pull support 4ea4a92c0 Fixed notation for macOS 0c9dc86de Create podman temp dir on machine start ed51e3f54 podman service reaper 84da70a0f update shell completion scripts 924cd37a3 Bump github.com/spf13/cobra to v1.2.1 8f6a0243f podman diff accept two images or containers 735be1248 force github.com/spf13/cobra@v1.1.3 7eb9ed975 vendor containers/common@main 8606ead91 [CI:DOCS] podman search: clarify that results depend on implementation 493786fba podman: ignore ESRCH from kill 86c601414 Implement --archive flag for podman cp 092902b45 Handle advanced --network options in podman play kube 40ef17ac2 Cirrus: Fixes due to master->main rename 8b52204ba vendor containers/common@7482cf851d 2243b6020 reset: remove external containers on podman system reset 2ce78aace Enhance system connection add URL input 6d37e0348 Add CNI rootless networking troubleshooting for v2.2.1 05f39af5b Bump github.com/containers/storage from 1.32.3 to 1.32.5 3e8c0e00d Make system connection ls deterministic fb5f70296 Bump github.com/containers/ocicrypt from 1.1.1 to 1.1.2 1edada477 Makefile: remove install.cni 3d0e08f04 prefix `ETCDIR` with `${PREFIX}/` f95b0995e remove `pkg/registries` e7507fe7c make DriverOpts name consistent. a7a701196 fix: swapped volume relabel option values 364e8a26d pkg/systemd: don't require LISTEN_FDNAMES for socket activation b39aacf32 add @mtrmac to OWNERS b1082696e cp: do not allow dir->file copying ee7a9d736 [NO TESTS NEEDED] suggestions for incorrect cmds b56b4b537 read secret config from config file if no user data. 15fbf950e [CI:DOCS] podman save: clarify formats and transports 9db534e53 [NO TESTS NEEDED] Create /etc/mtab with the correct ownership 7d83f9b6c [CI:DOCS] Follow-up to PR 10676 bbd085ad1 Podman Pod Create --cpus and --cpuset-cpus flags 6ecdf4c38 Health Check is not handled in the compat LibpodToContainerJSON f2dff41db Support log_tag defaults from containers.conf 525cb54e1 [CI:DOCS] push/pull docs: clarify supported transports 5fc622f94 create: support images with invalid platform f26fa5392 Podman Stats additional features 1aa9dcfad markdown/*: typos 'a image' d12027e0d disable tty-size exec checks in system tests a0b24de32 Add support for volume prune until filter to http api 1f388ede6 Add --format to connection list a84fa194b getContainerNetworkInfo: lock netNsCtr before sync e01460853 Do not use inotify for OCICNI 7f98d2ddb docs: podman-rmi removes dangling parent images ee4cab0e0 logs: k8s-file: restore poll sleep f4ba433b1 logs: k8s-file: fix spurious error logs 0fb165ed0 Fix systemd-resolved detection. 9cc3473b5 Bump k8s.io/api from 0.21.1 to 0.21.2 1e36be439 Add support for podman login --verbose 7864108ff fix systemcontext to use correct TMPDIR 9a02b5055 Add an entry for `/run/user-$UID/libpod` to tmpfiles b56d6c646 Bump github.com/containers/storage from 1.32.2 to 1.32.3 d39823085 Bump k8s.io/apimachinery from 0.21.1 to 0.21.2 2bd382c8c Fix documentation of the --format option of podman push b6662eed3 Vendor in containers/common v0.40.0 bd9987239 Scrub podman commands to use report package 6b230bc92 Fix multi-arch image build clone:failure 705b799af Cirrus: Prevent BZ1965743 workaround pruning e344a5899 [CI:DOCS] UPDATE manpages with MANPAGE_SYNTAX 666f555aa Fix resize race with podman exec -it 404d5edb1 .cirrus.yml: use c5521575421149184 for Ubuntu 769df3207 test: drop invalid test 969cc3237 utils: move message from warning to debug 517479731 utils: improve error message eb927dc84 Docs Switch from Query Param to Header 9c81b8cf7 add correct slirp ip to /etc/hosts fc9868e22 Fix panic condition in cgroups.getAvailableControllers 2a974e8b9 Create user storage dir with correct permissions 5f2c0f63a Fix building static podman-remote 81eb71fe3 Fix permissions on initially created named volumes 3ddadc532 Image import fromSrc now supports OS/Arch 302b3084e Restart all containers with restart-policy=always on boot e8006c797 Fix handling of podman-remote build --device 4bca1984a UPDATE manpages with MANPAGE_SYNTAX 8d860cfcd podman-run.1.md:detach-keys: spell the default value just once ded2f004f Fall back to string for dockerfile parameter 44d9c453d Fix network connect race with docker-compose ad3b56c62 Fix volumes with uid and gid options 3a65ba2fa Add support for podman remote build -f - . 991647c77 Add documentation on ignore_chown_errors 40d70334e System tests: the continuing multiarch saga 62f4b0a19 Add ExecDied event and use it to retrieve exit codes 341e6a162 Always spawn a cleanup process with exec 4a4fe48cc Fix docs links due to branch rename 240bbc3bf Fix pre-checkpointing 3b6cb8fab container: ignore named hierarchies d9a1c34e4 Fix restoring of privileged containers c3a14103f Fix build tags for pkg/machine... b5890fc86 Bump github.com/containers/storage from 1.32.1 to 1.32.2 e7e09bf2f Update nix pin with `make nixpkgs` d5527c330 System tests: deal with crun 0.20.1 11badab04 rootless: fix fast join userns path 8e89d7071 [CI:DOCS] Update swagger for inspect network a9cb82498 podman-remote build should handle -f option properly 5117deda0 fixed docs and schemas 18fa124df Improve systemd-resolved detection 84b55eec2 logs: k8s-file: fix race a5ad36c65 Fix image prune --filter cmd behavior 346c7fda6 Bump github.com/containers/buildah from 1.21.0 to 1.21.1 c60548279 remote pull: cancel pull when connection is closed 8378a9c4d Fix network prune api docs 5e7876089 auto-update tests: various fixes f6d9dbb62 [CI:DOCS]instructions for podman machine on macs 260192670 Fix compat create with NetworkMode=default 17193e468 System test: Add podman auto-update related test cases a2b842df4 Version bump: 3.3.0-dev 949374e58 Added tests for different checkpoint archive compressions 68070f1b2 Add --compress to podman-container-checkpoint.1.md 8aa5340ad Add parameter to specify checkpoint archive compression 10875a67e Order checkpoint options in man page alphabetically ab7e7f651 UPDATE MANPAGE_SYNTAX (commit,attach,auto-update) 13a807b86 fix go-bindings examples with v3 new parameters 8f89bc4e0 [CI:DOCS] Document which CNI fields are encoded 1f73374ac remote: always send resize before the container starts 9c5048544 remote events: support labels ce01b4f09 made requested changes, fixed api tests 2810c478a Add CORS support df7c3a703 [CI:DOCS] fix incorrect network remove api doc e23c5b25f Add restore --publish to the man page 837ba7ec3 Add test for restore --publish 1ac9198d7 Allow changing of port forward rules on restore 86610c785 remote events: fix --stream=false 9ac526759 systemd/generate: change type to notify 346c08225 Update main branch to reflect 3.2.0 release b928278e6 extend docs to include help for when pub/priv key is signed with an unsupported algo 735470ff2 Bump go.etcd.io/bbolt from 1.3.5 to 1.3.6 48ea142ca Bump github.com/docker/docker b36278c3e Bump github.com/opencontainers/selinux from 1.8.1 to 1.8.2 df2e7e00f add ipv6 nameservers only when the container has ipv6 enabled 366016fa8 Bump github.com/onsi/ginkgo from 1.16.3 to 1.16.4 433a5a8c7 Fix spacing in buildthedocs 37f39eefe events: support disjunctive filters b6167cedb System tests: add :Z to volume mounts ff79b2e5a Fix link error 433674918 Use secrets and machine rst file properly 2cc4535e1 added tests in python rest api 7ef3981ab Enable port forwarding on host ad182976b Use request context instead of background 1daaf34d7 [NO TESTS NEEDED] API list networks should return [] when used with no networks 249da1b93 [CI:DOCS] rm containers-mounts.conf.5.md ef8ba99ff Use request context instead of background context 3330f9876 Better error handing for images/create compat api d657a070d Bump github.com/uber/jaeger-client-go 761466dca Bump github.com/onsi/ginkgo from 1.16.2 to 1.16.3 fb4a0c572 support tag@digest notation 530721841 generate systemd: make mounts portable 699272ed2 add missing space 51a8e01f8 [CI:DOCS] point IRC to libera.chat 2addc0f90 rootless: fix SIGSEGV ,make LISTEN_FDNAMES optional [Closes #10435]. [NO TESTS NEEDED] 5bd1b7dfd Update a way out of date transfer document 6deb1bc2a Manpage syntax proposal 33944cefe [Techinal Debt] Cleanup ABI vs. Tunnel CLI commands c9609d820 Vendor in containers/storage v1.32.1 9822c3309 create libimage-events channel in main routine 8e5388e41 Add options to podman machine ssh 61167834f Bump github.com/onsi/gomega from 1.12.0 to 1.13.0 de293c980 Handle image user and exposed ports in podman play kube fad6e1d3e Ensure that container still exists when removing 533d88b65 Add the option of Rootless CNI networking by default 10569c988 journald logger: fix race condition d1c9e034f libimage-events channel: fix data race 568e911b8 Bump github.com/containers/common from 0.38.4 to 0.39.0 738a8fe63 Add podman run --gpus flag for compatibility e6a3d6aac Fix race on podman start --all 9ab3fd876 Fix race condition in running ls container in a pod 586af5c74 docs: --cert-dir: point to containers-certs.d(5) afe33573d Handle hard links in different directories 2f5552c32 Podman info add support for status of cgroup controllers f22791aec Handle hard links in remote builds 4c095aa7e Improve OCI Runtime error 3c82059c3 Sync. workflow across skopeo, buildah, and podman 8bf852d5f Match swagger to "as built" output 0766777d6 Document all transports for podman manifest add 6ca721ccc Drop container does not exist on removal to debugf 94665bdf0 Bump github.com/containers/storage from 1.31.1 to 1.31.2 7bcfae44b Downgrade API service routing table logging c553181fd Vendor in containers/buildah v1.21.0 5a0257d46 Fix network create macvlan with subnet option 8352e5bc3 add libimage events 26652111b Bump github.com/opencontainers/runc from 1.0.0-rc94 to 1.0.0-rc95 12aa71ab8 Use correct extension for example network config 898a8ad28 update c/common 2b89b2414 Add support for podman manifest rm command 55f00bac0 Clear the storage-options from the graphdriver if users specifies --root 44c493717 Bump k8s.io/api from 0.21.0 to 0.21.1 bc0e12a04 Fix problem copying files when container is in host pid namespace 379df7f2c docs: generate systemd: XDG_RUNTIME_DIR af748b94e Bump k8s.io/apimachinery from 0.21.0 to 0.21.1 6b187e445 Bump github.com/vbauerster/mpb/v6 from 6.0.3 to 6.0.4 92e858914 fix: response body of containers wait endpoint 98955bedb Break up python APIv2 tests 8f3605e7d Add script for identifying commits in release branches bab7caafe Fix formatting and indentation in network http api docs cf30f160a Support uid,gid,mode options for secrets 0d811b233 Several shell completion fixes 6efca0bba Ensure that :Z/:z/:U can be used with named volumes 4cc19f9e0 Support automatic labeling of kube volumes b75bb4665 Create the /etc/mtab file if does not exists Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2021-08-27 10:50:45 -04:00
Bruce Ashfield	d876cfc5bf	global: overrides syntax conversion ... OEcore/bitbake are moving to use the clearer ":" as an overrides separator. This is pass one of updating the meta-virt recipes to use that syntax. This has only been minimally build/runtime tested, more changes will be required for missed overrides, or incorrect conversions Note: A recent bitbake is required: commit 75fad23fc06c008a03414a1fc288a8614c6af9ca Author: Richard Purdie <richard.purdie@linuxfoundation.org> Date: Sun Jul 18 12:59:15 2021 +0100 bitbake: data_smart/parse: Allow ':' characters in variable/function names It is becomming increasingly clear we need to find a way to show what is/is not an override in our syntax. We need to do this in a way which is clear to users, readable and in a way we can transition to. The most effective way I've found to this is to use the ":" charater to directly replace "_" where an override is being specified. This includes "append", "prepend" and "remove" which are effectively special override directives. This patch simply adds the character to the parser so bitbake accepts the value but maps it back to "_" internally so there is no behaviour change. This change is simple enough it could potentially be backported to older version of bitbake meaning layers using the new syntax/markup could work with older releases. Even if other no other changes are accepted at this time and we don't backport, it does set us on a path where at some point in future we could require a more explict syntax. I've tested this patch by converting oe-core/meta-yocto to the new syntax for overrides (9000+ changes) and then seeing that builds continue to work with this patch. (Bitbake rev: 0dbbb4547cb2570d2ce607e9a53459df3c0ac284) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2021-08-02 17:17:53 -04:00
Bruce Ashfield	b4a4f24b1c	podman: update to 3.2.3 latest ... There's not much here, but we pickup the 3.2.4-dev parsing bump in preparation for that development stream. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2021-07-27 09:02:20 -04:00
Bruce Ashfield	e510c748df	podman: update to v3.2.3 ... Bumping libpod to version v3.2.3-2-g09e8afe3a, which comprises the following commits: 1e6fd46e9 Bump to v3.2.3 1d7ddf511 Update release notes for v3.2.3 e4c45e759 vendor containers/common@v0.38.16 cb7016224 vendor containers/buildah@v1.21.3 1a8b2a037 Fix race conditions in rootless cni setup e54a513b9 CNI-in-slirp4netns: fix bind-mount for /run/systemd/resolve/stub-resolv.conf 1469af265 Make rootless-cni setup more robust 6f9d9636a Support uid,gid,mode options for secrets bed195bf8 vendor containers/common@v0.38.15 75431a455 [CI:DOCS] podman search: clarify that results depend on implementation 37570b7b7 vendor containers/common@v0.38.14 6ecedc161 vendor containers/common@v0.38.13 8a41bf3ee [3.2] vendor containers/common@v0.38.12 2c003d978 Bump README to v3.2.2 bb2cbf0d5 Bump to v3.2.3-dev d577c44e3 Bump to v3.2.2 9f4afa1ea fix systemcontext to use correct TMPDIR 5dabff27d Scrub podman commands to use report package 647c2024e Fix volumes with uid and gid options c2dcb3ee2 Vendor in c/common v0.38.11 ba70363f6 Initial release notes for v3.2.2 a9fd54775 Fix restoring of privileged containers d5f0729b2 Fix handling of podman-remote build --device 90805fa39 Add support for podman remote build -f - . 854c27c0a Fix panic condition in cgroups.getAvailableControllers b0dc157af Fix permissions on initially created named volumes f5cdb95ee Fix building static podman-remote 1c04cfe83 add correct slirp ip to /etc/hosts 6c4ee8535 disable tty-size exec checks in system tests 6ba9617be Fix resize race with podman exec -it eb6d4b0cf Fix documentation of the --format option of podman push e5c939183 Fix systemd-resolved detection. 613f427a0 Health Check is not handled in the compat LibpodToContainerJSON 949573c5a Do not use inotify for OCICNI ab5e770c4 getContainerNetworkInfo: lock netNsCtr before sync b957bff8b [NO TESTS NEEDED] Create /etc/mtab with the correct ownership 6d394f0e4 Create the /etc/mtab file if does not exists 879d66e7d [v3.2] cp: do not allow dir->file copying 6f769bc0e create: support images with invalid platform 19a89db66 vendor containers/common@v0.38.10 e5c070baf logs: k8s-file: restore poll sleep 4d9a9149d logs: k8s-file: fix spurious error logs dac2d31a2 utils: move message from warning to debug 60752b320 Bump to v3.2.2-dev Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2021-07-20 09:46:28 -04:00
Diego Sueiro	dd3bc51e3f	podman: Add seccomp as REQUIRED_DISTRO_FEATURES ... The libseccomp package is only available if seccomp is in DISTRO_FEATURES. Signed-off-by: Diego Sueiro <diego.sueiro@arm.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2021-06-30 11:19:21 -04:00
Bruce Ashfield	0f59d98670	podman: update to 3.2.1 ... Bumping libpod to version v3.2.1-2-gab4d0cf90, which comprises the following commits: 60752b320 Bump to v3.2.2-dev 152952fe6 Bump to v3.2.1 c5d9c0a6f Updated release notes for v3.2.1 4f56f7f13 Fix network connect race with docker-compose e42d727a9 Revert "Ensure minimum API version is set correctly in tests" f69789155 Fall back to string for dockerfile parameter 5a158563c remote events: fix --stream=false 38fbd2cb9 [CI:DOCS] fix incorrect network remove api doc 26eae3bf8 remote: always send resize before the container starts c751544fa remote events: support labels c28f442b2 remote pull: cancel pull when connection is closed 2993bdf1e Fix network prune api docs 8ba0c92e6 Improve systemd-resolved detection c3f6ef63a logs: k8s-file: fix race f1e7a0747 Fix image prune --filter cmd behavior 5ddd76edd Several shell completion fixes 2afb5eeab podman-remote build should handle -f option properly 6beae86f0 System tests: deal with crun 0.20.1 80362b34c Fix build tags for pkg/machine... c85b6b3fe Fix pre-checkpointing b61701acb container: ignore named hierarchies e0dcffa8d [v3.2] vendor containers/common@v0.38.9 d46deca8c rootless: fix fast join userns path f2b3da502 [v3.2] vendor containers/common@v0.38.7 78430ee1d [v3.2] vendor containers/common@v0.38.6 b6ef7cf21 Correct qemu options for Intel macs 9647d8844 Ensure minimum API version is set correctly in tests 72455ece4 Bump to v3.2.1-dev 0281ef262 Bump to v3.2.0 cff73766f Fix network create macvlan with subnet option 8688f54ea Final release notes updates for v3.2.0 f62c6bf6e add ipv6 nameservers only when the container has ipv6 enabled 4b8ca6303 Use request context instead of background ce5c3b554 [v.3.2] events: support disjunctive filters dd83f5c0c System tests: add :Z to volume mounts 32927f5d6 generate systemd: make mounts portable abb57e5cf vendor containers/storage@v1.31.3 1e4563182 vendor containers/common@v0.38.5 fbf8b78a3 Bump to v3.2.0-dev 684729482 Bump to v3.2.0-RC3 f49023031 Update release notes for v3.2.0-RC3 ee5dd0603 Fix race on podman start --all 6c9de9382 Fix race condition in running ls container in a pod 69bae4774 docs: --cert-dir: point to containers-certs.d(5) 934f36df5 Handle hard links in different directories 5eecc2761 Improve OCI Runtime error ba884865c Handle hard links in remote builds c53638e9f Podman info add support for status of cgroup controllers ac8b7ddd8 Drop container does not exist on removal to debugf 18e917cdc Downgrade API service routing table logging efa15b96c add libimage events a9108ab25 docs: generate systemd: XDG_RUNTIME_DIR bb589bec2 Fix problem copying files when container is in host pid namespace Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2021-06-15 08:15:57 -04:00
Bruce Ashfield	f6bb19c32f	podman: bump to 3.2-rcX ... Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2021-06-04 08:42:48 -04:00
Bruce Ashfield	a4f08e110e	packages: drop libseccomp checks / package blacklist ... libseccomp has moved to oe-core, so we can drop our checks and blacklisting of packages if meta-security is not in the layer configuration. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2021-04-26 11:17:27 -04:00
Nathan Dunne	35fce40e86	podman: Added kernel modules for iptables error ... Added kernel modules kernel-module-xt-masquerade and kernel-module-xt-comment to RRECOMMENDS, to avoid iptables errors with podman Signed-off-by: Nathan Dunne <Nathan.Dunne@arm.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2021-04-18 20:13:41 -04:00
Bruce Ashfield	0134bf3a20	podman: update to v3.1 ... Bumping to v3.1, which comprises the following commits: bce3e6c5f Fix tests ec1a512ac Bump to v3.1.1-dev 9f09fb62c Bump to v3.1.0 1386f9046 Fix test failure 38bb77c5b Update release notes for v3.1.0 final release 670e1ac67 [NO TESTS NEEDED] Turn on podman-remote build --isolation ac4bdd265 Fix long option format on docs.podman.io 96ffce219 Fix containers list/prune http api filter behaviour e772719bf [CI:DOCS] Add note to mappings for user/group userns in build 52cd3ce2d Validate passed in timezone from tz option 633ae014e Generate Kubernetes PersistentVolumeClaims from named volumes c9640bab7 libpod/image: unit tests: use a `registries.conf` for aliases 43c772aa2 libpod/image: unit tests: defer cleanup 396a59b02 libpod/image: unit tests: use `require.NoError` a01b387e8 Unification of until filter across list/prune endpoints 183a68a81 Unification of label filter across list/prune endpoints d1589f280 fixup 31351ad94 fix: build endpoint for compat API 7148544df [NO TESTS NEEDED] Remove /tmp/containers-users-* files on reboot 88672b58c Check if stdin is a term in --interactive --tty mode 23f3805df [NO TESTS NEEDED] Fix rootless volume plugins 5e3445e6e Ensure manually-created volumes have correct ownership 6b6989206 Support multi doc yaml for generate/play kube d560f168f Correct json field name 573ed9220 Fix filters in image http compat/libpod api endpoints 1b349d79a podman generate systemd --new do not duplicate params 1089f83a4 Fix podman build --pull-never be02c8581 man pages: correct seccomp-policy label 62b49e176 [NO TESTS NEEDED] Use same function podman-remote rmi as podman 3d1aaffdb Add problematic volume name to kube play error messages d498022fd Fix list pods filter handling in libpod api 66b1c2bd9 [NO TESTS NEEDED] Fix for kernel without CONFIG_USER_NS b55730180 Remove resize race condition e7dc66d83 [NO TESTS NEEDED] Vendor in containers/buildah v1.20.0 57e0d8f29 Use TMPDIR when commiting images 505f43c08 Add RequiresMountsFor= to systemd generate 15da607d1 Fix swapped dimensions from terminal.GetSize 0127cc184 Revert go-systemd to v2.22.0 4f11517c0 Cirrus: Update configuration for v3.1 branch 834f4caaa Bump to v3.1.0-dev 1b56ea2d9 Bump to v3.1.0-rc2 1ae87ff46 Update release notes for v3.1.0-RC2 3b609a706 Bump github.com/coreos/go-systemd/v22 from 22.1.0 to 22.3.0 1dfbdd5d9 Fix system prune cmd user message with options afce37671 System tests: reenable a bunch of skipped tests 417f36281 Cleanup /libpod/images/load handler adf652e2a vendor: drop replace for github.com/syndtr/gocapability e85cf8f4a security: use the bounding caps with --privileged f46b34ecd Bump github.com/containers/common from 0.35.0 to 0.35.3 5a18b5eb7 Bump k8s.io/apimachinery from 0.20.4 to 0.20.5 aa2d6e6e6 Fix volumes and networks list/prune filters in http api ec1651fbf Bump github.com/containers/storage from 1.25.0 to 1.28.0 1ca74b00d add a dependabot config to automate vendoring a596d1f5d Bump github.com/onsi/ginkgo from 1.15.1 to 1.15.2 8ea02d0b6 network prune filters for http compat and libpod api 8da5fd820 test: check for io.stat existence on cgroup v2 592aae4f9 test: fix test for last crun/runc 1c873c7da test: simplify cgroup path af3499db5 Latest crun/runc should handle blkio-weight test 82858a97c fix user message image prune --all 3d01d42f2 Docs: removing secrets is safe for in-use secrets 21f229a3d Downgrade github.com/coreos/go-systemd/v22 e8918ff10 pkg/bindings/images.Build(): fix a race condition in error reporting 310eae4ba Switch all builds to pull-never 963d19c75 System test cleanup f4b2d597a Fix for volumes prune in http compat api 8de560703 Fix remote client timezone test 57e8c6632 Do not leak libpod package into the remote client 762148deb Split libpod/network package 955aaccc5 fix use with localhost (testing) 9251b6c8c add /auth for docker compatibility 3803d0a4a create endpoint for querying libpod networks 12fb9e465 Bump github.com/sirupsen/logrus from 1.8.0 to 1.8.1 660a72993 sdnotify tests: try real hard to kill socat processes 7b0155cf7 Fix array instead of one elem network http api 92a8d69a7 Delete all containers and pods between tests 258749e43 apiv2 tests: finally fix POST as originally intended c9ef26071 Document CONTAINERS_CONF/CONTAINERS_STORAGE_CONF Env variables f1eb8e816 Removing a non existing container API should return 404 dc0c72a48 Docs: Add docs to access APIs inside container 6d4899745 options: append CLI graph driver options 930bec4d3 podman load: fix error handling 1f2f7e745 podman cp: evaluate symlink correctly when copying from container 2033fa4c7 rm pkg/api/handlers/libpod/copy.go 31b11b5cd podman cp: fix copying to a non-existent dir a61d70cf8 podman cp: fix ownership 2abfef380 podman cp: ignore EPERMs in rootless mode d175fbfdb vendor buildah@v1.19.8 e33f52390 apiv2 tests: add helpers to start/stop a local registry e926b5d73 Bump to v3.1.0-dev aa9616cd4 Bump to v3.1.0-rc1 e9db60492 allow the removal of storage images 9eac4a7f7 podman-remote build does not support volumes d1878cc67 Compat API: Avoid trying to create volumes if they already exist 7e289833e Bump github.com/onsi/gomega from 1.10.5 to 1.11.0 0e36e65ea Allow users to generate a kubernetes yaml off non running containers 80390dd18 Bump github.com/onsi/ginkgo from 1.15.0 to 1.15.1 d0d084dd8 turn hidden --trace into a NOP 320df8388 pkg/terminal: use c/storage/pkg/homedir cc7a7568a Update nix pin with `make nixpkgs` 9e75cafd5 build-arg 326f3eda3 Handle podman build --dns-search 01ffe2c30 podman build --build-arg should fall back to environment 2c500a814 Add support for podman build --ignorefile 1a33b7648 replace local mount consts with libpod/define e4da5096b separate file with mount consts in libpod/define 9fc29f63e Correct compat images/{name}/push response a910f74ea [NO TESTS NEEDED] Bump pre-commit-hooks version 3ae580b0e [ci skip] Bad formatting fix in build documentation 803e58b36 Bump github.com/containernetworking/plugins to v0.9.1 d107c3729 podman-remote stop -time 0 does not work 5bb8fa30b Do not return from c.stop() before re-locking 2bcc95257 Fix for podman network rm (-f) workflow 3396343d4 Bump github.com/coreos/go-systemd/v22 from 22.1.0 to 22.2.0 efc592fba Bump github.com/containers/buildah from 1.19.6 to 1.19.7 793c52dd5 Add tests for selinux kvm/init labels 8453424e2 Respect NanoCpus in Compat Create a090301bb podman cp: support copying on tmpfs mounts e43385eca image removal: ignore unknown-layer errors aa0a57f09 Fix cni teardown errors f86d64130 Use version package to track all versions 252aec1c9 Check for supportsKVM based on basename of the runtime 53d22c779 Compat API: create volume source dirs on the host 61e626c85 Makefile: add install.docker-docs-nobuild for packaging use 81a3f8a43 Add /sys/fs/cgroup as readonly path in docs 8f2192922 Add network summary to compat ps 4eed89aca Fix possible panic with podman build --iidfile 9391bfc52 Add version field to secret compat list/inspect api b19791c0b Tidy duplicate log tests 5df625140 Fix support for podman build --timestamp 43e899c2e Rewrite Rename backend in a more atomic fashion 91b2f07d5 Use functions and defines from checkpointctl bf92e2111 Move checkpoint/restore code to pkg/checkpoint/crutils bd819ef7d Vendor in checkpointctl 2c8c5393a Support label type dict on compat build ac992e4b0 Makefile: install systemd services conditionally 63a3b8a09 podman-system-service.1.md: fix timeout example 774aea45e swagger: update the libpodPutArchive operation verb 3908c0079 Makefile: split install.docker-docs from install.docker 2f0fc2911 Bump RootlessKit v0.14.0-beta.0 8b7caa6d0 Compat api containers/json Ports field is null 14d5bd164 Bump github.com/cri-o/ocicni to latest master 7927fe01f Refactor python tests to run against python3.9 9435e5b79 APIv2 tests: make more maintainable e9d94dc90 [CI:DOCS] Improve release process docs 375201633 podman rmi: handle corrupted storage better d9cb135b6 Enable cgroupsv2 rw mount via security-opt unmask cc679d952 podman-image-sign.1.md: typo fix f54ed7269 compat api network ls accept both format options 680dacaea Enable no_hosts from containers.conf fcce1da1b Correct compat images/create?fromImage response ba319e3ba [Compat API] Also print successfully tagging images in /build endpoint 43d010bd0 Fix parsing of Tmpfs field in compat create 24d9bda7f prune remotecommand dependency bee21f1e4 system test image: build it multiarch ef549235e Updated based on Jhonce comments ccbe4ff73 updated common to 0.35.0 836bfebb4 Refactored file 1aa96ed2e swagger: removes the schema type for PodSpecGenerator $ref 431f75519 podman-system-connection.1.md: fix copy/paste error 90050671b Add dns search domains from cni response to resolv.conf f152f9cf0 Network connect error if net mode is not bridge fc32ec768 Sort CapDrop in inspect to guarantee order 79eaadd3f podman upgrade tests 3947feb4b test: ignore named hierarchies for cgroups=split e5ac28f3b container removal: handle already removed containers a775c5920 Bump github.com/rootless-containers/rootlesskit from 0.13.1 to 0.13.2 0ab32d11d Bump k8s.io/apimachinery from 0.20.3 to 0.20.4 874f2327e Add U volume flag to chown source volumes fcf669fd9 Replace Labels and Options nulls with {} in NetworkResource 4875a8fb4 Cirrus: Temp. disable prior-fedora (F32) testing f3a8e3324 podman cp: test /dev/stdin correctly 8577be72e podman cp: treat /dev/stdout correctly e87c5b6c1 cgroup: change cgroup deletion logic on v1 9d818be73 Fix podman network IDs handling d9655b0f0 pr-should-include-tests: recognized "renamed" tests d2f3098c6 --no-header flag implementation for generate systemd af7a68fa8 [NO TESTS NEEDED] Make binding util internal c236aebb9 Two variations of --new flag added to e2e a2e1b3eab swagger: add missing schema properties 5dded6fae bump go module to v3 d333ef82b Fix 'storage.options' indent d886cd930 Bump github.com/sirupsen/logrus from 1.7.1 to 1.8.0 b40d778f4 Bump github.com/containers/buildah from 1.19.4 to 1.19.6 05eb06f56 Turn on journald and k8s file logging tests f06dd45e0 Allow podman play kube to read yaml file from stdin 43a581904 Log working dir when chdir fails d6b0b5412 Fix segfault in run with memory-swap e1ad50654 leak fix in rootless_linux.c fcn can_use_shortcut 612ba6aa8 Fix journald logs with more than 1 container 9016387bb Fix journald logs --follow f2d057c94 Fix journald logs --since fbc50e528 fix journald logs --tail 0 cf2a55189 [CI:DOCS]basic networking guide 71689052a cp: treat "." and "/." correctly caa0bc157 [CI:DOCS] [NO TESTS NEEDED] Update swagger doc for libpod container wait 31eca5c20 Bump k8s.io/apimachinery from 0.20.2 to 0.20.3 e022c1975 Don't switch on a single case 3e168b19f Quote URL b3f9559c8 bindings: support simple types that implement fmt.Stringer interface 9699e81a0 API: fix libpod's container wait endpoint condition conversion a9d548bf7 Change source path resolution for volume copy-up e2d5a1d05 podman ps --format '{{ .Size }}' requires --size option 12b6342c3 infra: downgrade warning to debug 12a577aea Ignore entrypoint=[\"\"] 684290725 Bump github.com/sirupsen/logrus from 1.7.0 to 1.7.1 68a8d397c Add missing early returns in compat API 5d1ec2960 Do not reset storage when running inside of a container 958f90143 podman kill should report rawInput not container id 759fc9334 Fix an issue where copyup could fail with ENOENT 2ec0e3b65 do not set empty $HOME 2a21ecafa images/create: always pull image f2f18768a Fix panic in pod creation 0fd480708 Bump github.com/rootless-containers/rootlesskit from 0.13.0 to 0.13.1 2845f7b83 podman build: pass runtime to buildah 39c1fdb15 correct startup error message 690c02f60 Add missing params for podman-remote build a532994f8 Fix typo podman run doc in flag -pid=mode "efault" 4a9bd7a18 When stopping a container, print rawInput 714acf326 fix create container: handle empty host port 3d50393f0 Don't chown workdir if it already exists bf083c185 Fix broken podman generate systemd --new with pods 227c54813 fix dns resolution on ubuntu 0ab5bfd31 e2e: fix network alias test 704fa8b55 fix failing image e2e test 9a24d5098 Update troubleshooting.md 6ffd05d0b [NO TESTS NEEDED] Refactor generated code 2c31f3839 Fix superfluous response.WriteHeader call in WaitContainerLibpod() 4067f3a4d change ps Created to unix 78b419909 Enable more golangci-lint linters adfcb7460 make layer-tree lookup errors non-fatal 78c8a8736 Enable whitespace linter 69ab67bf9 Enable golint linter ef2fc90f2 Enable stylecheck linter 40c3c972d Update Master to reflect the 3.0 release 660a06f2f utils: takes the longest path on cgroup v1 5f999b6bc container ps json format miscue 8e2fae186 Bump github.com/spf13/cobra from 1.1.2 to 1.1.3 1b5f3ed24 utils: create parent cgroups 9196a5ce3 utils: ignore unified on cgroupv1 if not present f4fd25a00 utils: skip empty lines f28b08fe9 Correct compat network prune response 5ccb1596b Display correct value for unlimited ulimit fdf39e169 apiv2: handle docker-java clients pulling ea910fc53 Rewrite copy-up to use buildah Copier 31b2b2cc2 bump to v3.1.0-dev 68133414f [NO TESTS NEEDED] Update linter 46b014bad Bump github.com/spf13/cobra from 1.1.1 to 1.1.2 1cc387bf7 Add shell completion tests for secrets f4ece018b Docker APIv2 push sends digest in response body f2a856203 Fix compat networks endpoint for a empty result 21deafba8 hardening flags for fedora rpmbuilds e15e170ac [CI:DOCS]First pass at release process 46385dd60 Restart service when CONTAINERS_CONF changes cc846a8cd Support annotations from containers.conf 68414537c vendor github.com/containers/image v5.10.2 ea704da72 APIv2 tests: lots of cleanup 721a1e104 Fix Docker APIv2 push endpoint 48c612cf6 generate kube: support --privileged 08d8290f1 Bump github.com/containers/ocicrypt from 1.0.3 to 1.1.0 832a69b0b Implement Secrets 45981ba29 Bump containers/buildah to v1.19.4 1caace8f4 Allow path completion for podman create/run --rootfs 6c75419a8 Cirrus: Send cirrus-cron report e-mail to list. feecdf919 make `podman rmi` more robust 407e86dcd Implement missing arguments for podman build 3c3e644c1 vendor latest containers/common 91ea3fabd add network prune 821ef6486 fix logic when not creating a workdir 002f2aca7 Bump remote API version to 3.0.0 6c713984e play kube selinux test case 5c6ab3075 Fix podman network disconnect wrong NetworkStatus number 05444cb2c Fix per review request c995b5460 generate kube: handle entrypoint 96adf0e2a play kube selinux test case 2b8d6ca09 Increase timeouts in some tests 3c57bc845 Add test for Docker APIv2 wait 4a219aa23 Implement Docker wait conditions fc385806d Improve ContainerEngine.ContainerWait() 570e1587d Improve container libpod.Wait*() functions 6a6e86829 Cirrus: Collect ginkgo node logs artifacts ebc42f508 Bump github.com/containers/storage from 1.24.5 to 1.25.0 9dc795191 Bump github.com/containernetworking/cni from 0.8.0 to 0.8.1 bc149a4dd bindings: attach: warn correct error d87f54fbb Fix invalid wait condition on kill dfa9a340a Makefile: make bin/* real targets! 3d105015f typo c40cd1be9 Bump github.com/onsi/gomega from 1.10.4 to 1.10.5 bda95bdb6 Update nix pin with `make nixpkgs` 1c50e09b0 System test for #9096 (truncated stdout) 432ee04c5 play kube selinux label test case e0bc8ffb5 Gating tests: diff test: workaround for RHEL8 failure bde23a021 [NO TESTS NEEDED] style: indendation 89df89b5f [NO TESTS NEEDED] fixup: remove debug code 7e4d696d9 Report StatusConflict on Pod opt partial failures bd0e22ed1 Honor network options for macvlan networks 095919680 Make slirp MTU configurable (network_cmd_options) ac3bd4c33 [NO TESTS NEEDED] Generated files 5a746c08f [NO TESTS NEEDED] Improve generator c68b59f97 play kube selinux label issue e9f936a29 Makefile: refactor ginkgo * ginkgo-remote 931ea939a Allow pods to use --net=none 323ab314e Bump github.com/onsi/ginkgo from 1.14.2 to 1.15.0 077fd670b Update release notes for v3.0.0 ee8ee651d New 'make completions' target e11d8f15e add macvlan as a supported network driver 5352df226 Fix podman generate systemd --new special char handling eaafd975a Bump github.com/rootless-containers/rootlesskit from 0.12.0 to 0.13.0 51c11fea8 Endpoint that lists containers does not return correct Status value 3cfd4ce45 Fix --network parsing for podman pod create 9b5b03d1e list volumes before pruning 4a6d042c2 Docker ignores mount flags that begin with constency cdbbc6120 podman generate kube ignores --network=host 073f76c13 Switch podman stop/kill/wait handlers to use abi b842d97f5 [CI:DOCS]build instructions for macOS 280f332bd Vendor in containers/buildah v1.19.3 ca0dd76bf Honor custom DNS in play|generate kube d7c356552 Podman-remote push can support --format b74f939fb Bump github.com/containers/image/v5 from 5.10.0 to 5.10.1 8d979e093 Cirrus: Build static podman-remote c0bf0ba9e podman build --pull: refine help message and docs c450092fd Revert "podman build --pull: use correct policy" 75c3b3389 Bump github.com/containers/image/v5 from 5.9.0 to 5.10.0 59076888d Cleanup bindings for image pull 89bb8a9b3 Don't fail if one of the cgroups is not setup 1fac43654 Add support for rootless network-aliases c717b3cac Allow static ip and mac with rootless cni network 15caebfe5 podman build --pull: use correct policy bfc1b66be Cirrus: Fix running Validate task on branches f8bf509d1 Fix static build cache by using cachix 84f7bdc4d Switch podman image push handlers to use abi fee2fadc3 e2e tests: synchronize test results 21cb3043f podman-remote ps --external --pod --sort do not work. f79d68eea Fix podman history --no-trunc for the CREATED BY field c63599d36 remote exec: write conmon error on hijacked connection e9f4fb975 Fix #9100 Change console mode message to debug 02ec5299f Add default net info in container inspect 1ae410d19 Ensure the Volumes field in Compat Create is honored 35c89ccc5 [CI:DOCS]update state of restful service 0f668aa08 workdir presence checks 7b186dcb9 libpod: add (*Container).ResolvePath() 74a63df05 Fixup search 97f5e9458 Pass DefaultMountsFile to podman build 5350254f0 Ensure shutdown handler access is syncronized 33179c281 System tests: cover gaps from the last month 5623cb9d3 Fix --arch and --os flags to work correctly a86d23c75 Bump github.com/google/uuid from 1.1.5 to 1.2.0 75698b4b7 Fix typo 393a8f026 disable dnsname when --internal ef76b92b8 swagger.go: Fix compilation error 8c1768e38 Fix fish completion issue if the command is prefixed with a space a457c5c92 Bump golang.org/x/crypto 0ba1942f2 networking: lookup child IP in networks c182091b0 Small API test improvement for compatibility search endpoint 6e6a38b41 podman manifest exists c9baa6b93 Accept and ignore 'null' as value for X-Registry-Auth 4b8df5903 Turn on some remote test 94f96c78a Add a notice to remove pod before starting service ef654941d libpod: move slirp magic IPs to consts 5e65f0ba3 rootlessport: set source IP to slirp4netns device 37319dec1 vendor: update rootlesskit to v0.12.0 2fa67fe4b api: fix import image swagger definition 9d31fed5f podman volume exists 4e4d318b7 Cirrus: Upload swagger YAML in every context dbb99433d [CI:DOCS] Cirrus: Skip smoke task on branch-push 836fa4c49 Move the cni lock file into the cni config dir c1cd512cb Use random network names in the e2e tests 3fedb2b6d [CI:DOCS] Update project name in Code of Conduct f43046745 Set log driver for compatability containers c3cbaa355 Make generate systemd --new robust against double curly braces 6518391e8 Fix man page for fuse-overlayfs config in rootless mode a3621a7cf Cirrus: add bindings checks e7df73efa Fix handling of container remove 41a7e11c7 make bindings generation explicit f302ce578 make bindings generation more robuts 175fc3867 Revert "ginkgo: install on demand via `go get -u`" 37abec240 [CI:DOCS] fix go-md2man HTMLSpan warnings 9f6bb3563 CI: smoke test: insist on adding tests on PRs a45d22a1d podman network exists de05e5816 ginkgo: install on demand via `go get -u` d2ee3d815 runner.sh : deal with bash 'set -e' 4ccb0729b Add binding options for container|pod exists 683bab03f [CI:DOCS]Do not run compose tests with CI:DOCS 2df59829e simplify bindings generation 462994268 make: generate bindings: use vendor caaaa2c5e hack/install_golangci.sh: smarter install f38b7f48c golangci-lint: install to ./bin Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2021-04-15 10:56:27 -04:00
Martin Jansa	04f8621d82	cri-o, podman, packagegroup-container: replace anonymous python function calling bb.parse.SkipRecipe with conditional PNBLACKLISTs ... * PNBLACKLISTs are IMHO a bit easier to read and easier to override from distro which e.g. provides own recipe for libseccomp Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2021-04-06 20:34:26 -04:00
Bruce Ashfield	773fd5a023	podman: update to 3.x release series ... Bumping to the 3.x release series, to pickup new functionality for the release. As part of this update we drop the build of iopodman.go, since varlink support has been dropped in favour of a ReST API. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2021-02-06 12:02:31 -05:00
Bruce Ashfield	1dcd6c6406	podman: update to 2.0.7 ... Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2020-09-01 15:41:30 -04:00
Ming Liu	4344c3db40	podman: uprev 1.8.1 > 2.0.1 ... Updating to 2.0.1 to pickup bugfixes and security changes. The following commits comprise this update: a11c4ead1 Bump to v2.0.1 6a541f680 Merge pull request #6780 from mheon/even_more_201_backports f7b16d017 Update release notes with further v2.0.1 changes 8bb986137 Fix inspect to display multiple label: changes 2ad9dcc07 Set syslog for exit commands on log-level=debug 723a9e308 Friendly amendment for pr 6751 68543bbec podman run/create: support all transports c69ce171a systemd generate: allow manual restart of container units in pods 9de1581e9 Revert sending --remote flag to containers dc22350be Print port mappings in `ps` for ctrs sharing network 48ce67fb5 Merge pull request #6776 from vrothberg/2.0-vendor-common 6eefff647 vendor github.com/containers/common@v0.14.3 0b9143df8 Merge pull request #6758 from mheon/v2.0.1_backports 915f8698f Update release notes for v2.0.1 8e428fa4e utils: drop default mapping when running uid!=0 eb9fd40d2 Set stop signal to 15 when not explicitly set 6594d5d65 podman untag: error if tag doesn't exist 639b809c8 Reformat inspect network settings 01bc6bdda APIv2: Return `StatusCreated` from volume creation 1cc603c1f APIv2:fix: Remove `/json` from compat network EPs d26662484 Fix ssh-agent support d94644d35 libpod: specify mappings to the storage f425aede4 APIv2:doc: Fix swagger doc to refer to volumes ddf78b2ba Add podman network to bash command completions bfd303e16 Fix typo in manpage for `podman auto update`. 9a4517b37 Add JSON output field for ps 61bd64573 V2 podman system connection f81ad0058 wip cd0b18c24 image load: no args required 8fbfffc08 Re-add PODMAN_USERNS environment variable 0b4dcc7a3 Fix conflicts between privileged and other flags 7ea37dfe1 Bump required go version to 1.13 36d8b6979 Add explicit command to alpine container in test case. 03f952cfa Use POLL_DURATION for timer 07f535d8b Stop following logs using timers dbce3468e "pod" was being truncated to "po" in the names of the generated systemd unit files. 5d9ec1ce7 rootless_linux: improve error message 37abb88aa Fix podman build handling of --http-proxy flag 27120bfba correct the absolute path of `rm` executable 4af208142 Merge pull request #6711 from lsm5/v2.0-custom-GO_BUILD-backport 0ac4061bd Makefile: allow customizable GO_BUILD 13924bac1 Merge pull request #6695 from cevich/update_v2.0 bade38c32 Merge pull request #6697 from mheon/bump_v2.0.0 c866e584d Update release notes to reflect we are now v2.0 f458c5968 Bump to v2.0.1-dev eec482cae Bump to v2.0.0 64ba72363 Merge pull request #6694 from mheon/release_notes_2.0 5bda75cfd Update release notes for v2.0.0 89dbd1a91 Merge pull request #6674 from jwhonce/issues/6670 ed91524ae Merge pull request #6637 from jwhonce/issues/6574 ea8e61e4e Fixes #6670 bda4a6982 Correct logic for demux'ing channels 1a2eb3e61 Merge pull request #6677 from baude/pollOnEvents 33a602761 Merge pull request #6690 from vrothberg/fix-6687 f46664546 Poll on events for file reading bba433ed9 podman images --format json: pretty print 5ec29f8d4 Merge pull request #6684 from vrothberg/fix-ci 334d3b1ef CI: force registry:2.6 a2661b1c2 Merge pull request #6673 from ashley-cui/master 4dc934080 Fix remote docs e6b9b3ab2 Merge pull request #6656 from mheon/recursive_init 2e621aece Merge pull request #6662 from containers/dependabot/go_modules/k8s.io/apimachinery-0.18.4 1099ad6ac Merge pull request #6669 from vrothberg/unflake-rmi b20619e5b Allow recursive dependency start with Init() ec7822795 Bump k8s.io/apimachinery from 0.18.3 to 0.18.4 59cd8a0cf unflake rmi tests 3eb0ad04a Merge pull request #6663 from containers/dependabot/go_modules/k8s.io/api-0.18.4 ad33b2363 Merge pull request #6661 from containers/dependabot/go_modules/go.etcd.io/bbolt-1.3.5 b5f7afd04 Merge pull request #6658 from mheon/experimental_no_more d0b3035c3 Merge pull request #6611 from lsm5/fix-Makefile-for-varlink 5d161c8ca Bump k8s.io/api from 0.18.3 to 0.18.4 16dbc160c Bump go.etcd.io/bbolt from 1.3.4 to 1.3.5 6472b44c3 Merge pull request #6654 from rhatdan/keepid 6e410ede7 Merge pull request #6647 from rhatdan/caps 43ead88e8 Podman system service is no longer experimental fe69aa9ba Handle dropping capabilties correctly when running as non root user 7b00e49f6 Merge pull request #6560 from mheon/fix_exec_logdriver daabbc1a1 Merge pull request #6657 from mheon/bump-2.0.0-rc7 c385e6d36 Don't ignore --user flag in rootless --userns keepid 4b08d9ea5 Bump to v2.0.0-dev 5460ea87d Bump to v2.0.0-rc7 7b5073b46 Merge pull request #6655 from TomSweeneyRedHat/dev/tsweeney/b1_15_0 30c0fc9f1 Makefile: install.varlink needs to create dirs a76bf114d Merge pull request #6620 from jgallucci32/api-logs-separate 70f6cf7ff Merge pull request #6634 from baude/v2buildfixes fde8040fa Bump Buildah to v1.15.0 fd184fa4a Merge pull request #6522 from mheon/unless-stopped 585b14a9f Move logs functionality to separate file for APIv2 5694104c2 Merge pull request #6644 from jgallucci32/revert-log-follow d97b5b04a Merge pull request #6630 from ashley-cui/master 96b442172 Merge pull request #6641 from vrothberg/harden-units 6645e0d6f Merge pull request #6648 from vrothberg/vendor-image e5c343294 generate systemd: `ExecStopPost` for all units f29360648 Merge pull request #6631 from rhatdan/hooks 03e99c9b4 Revert #6591 to fix issue with failed tests ac4f4b148 vendor github.com/containers/image/v5@v5.5.1 6f1440a3e Add support for the unless-stopped restart policy 0e171b7b3 Do not share container log driver for exec 1acd2adcc Merge pull request #6640 from edsantiago/fix_flaky_logs_test 78ad57ebd Merge pull request #6636 from mheon/add_warnings 200afe7a9 Merge pull request #6583 from mheon/inspect_ctr_before_img 65c3a5660 fix misc remote build issues 38391ed25 Merge pull request #6622 from goochjj/podman_fix_init 6d5a432c2 "streaming output" logs test: fix flake 0d2b5532c Merge pull request #5852 from baude/v1prune 241326a9a Podman V2 birth 88c6fd06c Merge pull request #5837 from vrothberg/ignore 57f389728 Merge pull request #5848 from jwhonce/wip/options 8b178f12c Merge pull request #5839 from rhatdan/troubleshoot 1d93d2125 V2 Enable rootless 5def21140 Merge pull request #5842 from baude/v2bloat2 a8a61d976 Add SELinux volume information to troubleshoot.md 8c4d4b58e Merge pull request #5597 from sujil02/systemd-updates ba430bfe5 podman v2 remove bloat v2 c1bafb8b5 Merge pull request #5844 from baude/apiv2filteridfix e154249b4 allow filters to work when listing containers 8857ba20a Merge pull request #5835 from containers/dependabot/go_modules/github.com/containers/common-0.9.1 a037d9cd4 Update podman-generate-systemd man page 155a7d661 Merge pull request #5826 from cevich/gate_pip 09e821a8e Merge pull request #5690 from rhatdan/selinux 04e83f63a .gitignore: ignore v2 remote 084cfb81d Merge pull request #5834 from rhatdan/version 897847ccc Bump github.com/containers/common from 0.9.0 to 0.9.1 62803f8d3 Add version to podman info command d6b3bc18f Merge pull request #5752 from mheon/pod_inspect_structs c7d17613e Merge pull request #5827 from baude/v2bloat 0f7162d79 Merge pull request #5817 from rhatdan/selinux1 82ce9703e Add basic structure of output for APIv2 pod inspect 30d2964ff v2 bloat pruning phase 2 3500a8bc3 Merge pull request #5830 from baude/v2runtime c4ca3c71f Add support for selecting kvm and systemd labels 6e9622aa9 Merge pull request #5775 from sujil02/v2-container-prune ac94a96a7 Fix up SELinux labeling 195cb1127 Merge pull request #5671 from edsantiago/swagger-check 693a8039c Merge pull request #5776 from vrothberg/au bbc0c4a97 podmanv2 fix runtime assignment 97bded830 Merge pull request #5823 from mheon/update_readme_19 337e8d6d2 Merge pull request #5786 from containers/dependabot/go_modules/github.com/containers/common-0.9.0 e394ff407 Cirrus: Fix gate container build failure 2aca1b7f9 logformat: handle apiv2 results, add anchor links ef297d466 Merge pull request #5767 from edsantiago/logformat_add_anchors_and_apiv2 9b78bf929 Merge pull request #5770 from baude/v2events d522755b5 Update README to reflect that latest version is v1.9.0 cc9b78f07 Merge pull request #5820 from mheon/bump-1.9.0 ec4060aef Ability to prune container in api V2 4489440aa Bump to v2.0.0-dev d98572350 Bump to v1.9.0 37ed662f3 Merge pull request #5814 from baude/v2specgenprunelibpod 165aef776 podmanv2 events a756161e8 Merge pull request #5813 from baude/v2edtests2 ffcb99d83 Merge pull request #5818 from vrothberg/fix-nil-deref 123158e83 podmanV2: fix nil deref d83213634 test case added for image prune cache image 1e8e4bb33 note for skipping cache image added. 9dc9f5cf4 image prune skips images with child images. 714718794 v2specgen prune libpod 60dde457f More system test fixes on regressions f0b6cdede Merge pull request #5812 from jwhonce/wip/options d51727642 Add support for the global flags and config files ba26c763c swagger-check: new CI tool to cross-check swagger 0d01f09bf Merge pull request #5811 from mheon/bump-1.9.0-rc2 bf97e803d Bump to v1.9.0-dev 443aab15e Bump to v1.9.0-rc2 a6caae0b5 Merge pull request #5808 from baude/v2psformat2 01c5915a5 Merge pull request #5809 from mheon/release_notes_1.9.0_rc2 246ee9320 Merge pull request #5801 from baude/v2mount 548645e75 Update release notes for v1.9.0-RC2 1be617891 Merge pull request #5445 from sujil02/podFilter-new d1c26af14 apiv2 add bindings for logs|events e87fe4dbb Merge pull request #5550 from giuseppe/rootless-hidepid fea5f913e Don't include SUBDIR in windows.zip 1091440e5 rootless: fix usage with hidepid=1 68a5a85cc Bump github.com/containers/common from 0.5.0 to 0.6.1 fbe743501 V2 podman command bd9386dda Merge pull request #5542 from rhatdan/vendor 464a1cd48 Merge pull request #5540 from jwhonce/issues/5531 d66d54282 Merge pull request #5544 from baude/apiv2serveswagger c9c95a7e0 Merge pull request #5543 from edsantiago/swagger_fixes 52c835053 serve swagger when present f557cf91d swagger: more consistency fixes 67d0d1e50 Vendor in containers/buildah v1.14.3 45e7cbfef Merge pull request #5480 from vrothberg/auto-updates 651ddd356 Reduce CPU usage when --timeout=0 81005f463 New test: man page cross-ref against --help e89c6382a Add inspect for exec sessions 118e78c5d Add structure for new exec session tracking to DB f138405b4 Populate ExecSession with all required fields d9eb078e2 Merge pull request #5532 from baude/filetimeoutflake de43a00b5 Merge pull request #5533 from mheon/bump-1.8.2-rc1 f08b992f3 Merge pull request #5536 from giuseppe/avoid-conmon-zombie a6f5b6a48 podman: avoid conmon zombie on exec 15326f051 Filter pods through pod list api e9846b962 Bump to v1.8.2-dev c617484c1 Bump to v1.8.2-rc1 f3a28de32 Merge pull request #5528 from mheon/fix_master_vendor d47dc63cf Fix vendoring on master 14186ca28 fix timeout file flake bcdcfeb3e Merge pull request #5529 from mheon/release_notes_182_rc1 7c5ffe377 Update release notes for v1.8.2-rc1 83d2686f4 Fix vendoring on master 8f1ce4bdd Merge pull request #5524 from rhatdan/vendor f4e873c4e auto updates 68ef7aa4f Fix path of tmp_dir 9ef5d2875 Merge pull request #5449 from baude/manifests c4a62733a Merge pull request #5520 from giuseppe/make-warning-clearer 8081d9c74 Update containers/storage to v1.16.5 a255d7986 pkg/systemd: add dbus support cc57b88f7 config: make warning clearer 2b2996d09 Merge pull request #5515 from edsantiago/ci_sundry_small_fixes da17fbaad Merge pull request #5490 from containers/dependabot/go_modules/k8s.io/api-0.17.4 83c037c58 Merge pull request #5489 from containers/dependabot/go_modules/github.com/containers/common-0.5.0 300338478 Four small CI fixes: 67a985ddb Merge pull request #5514 from vrothberg/fix-ci bfa1ba588 fix systemd generate tests abbbeacd6 apiv2 addition of manifests 412a114d3 Merge pull request #5439 from ttys3/fixup-systemdgen-with-new-param 5288d112b Merge pull request #5252 from QiWang19/not-reset-tempdir 759ffb0a2 Merge pull request #5505 from tonybenoy/tony_typo 4e13ef58c Merge pull request #5476 from edsantiago/run_rmi_test_fix af1ac85da Merge pull request #5508 from baude/buildaddarchos 9ca4b6c6f add os|arch attributes when building 9128ef85c Missing double quotes in troubleshooting guide. 194723f31 force run container detached if container CreateCommand missing the detach param 8b07ad113 Merge pull request #5496 from baude/preemptive 16536af11 Merge pull request #5491 from containers/dependabot/go_modules/github.com/fsnotify/fsnotify-1.4.9 4f497991b Merge pull request #5327 from baude/apiv2hc c4a62733a Merge pull request #5520 from giuseppe/make-warning-clearer 8081d9c74 Update containers/storage to v1.16.5 a255d7986 pkg/systemd: add dbus support cc57b88f7 config: make warning clearer 2b2996d09 Merge pull request #5515 from edsantiago/ci_sundry_small_fixes da17fbaad Merge pull request #5490 from containers/dependabot/go_modules/k8s.io/api-0.17.4 83c037c58 Merge pull request #5489 from containers/dependabot/go_modules/github.com/containers/common-0.5.0 300338478 Four small CI fixes: 67a985ddb Merge pull request #5514 from vrothberg/fix-ci bfa1ba588 fix systemd generate tests abbbeacd6 apiv2 addition of manifests 412a114d3 Merge pull request #5439 from ttys3/fixup-systemdgen-with-new-param 5288d112b Merge pull request #5252 from QiWang19/not-reset-tempdir 759ffb0a2 Merge pull request #5505 from tonybenoy/tony_typo 4e13ef58c Merge pull request #5476 from edsantiago/run_rmi_test_fix af1ac85da Merge pull request #5508 from baude/buildaddarchos 9ca4b6c6f add os|arch attributes when building 9128ef85c Missing double quotes in troubleshooting guide. 194723f31 force run container detached if container CreateCommand missing the detach param 8b07ad113 Merge pull request #5496 from baude/preemptive 16536af11 Merge pull request #5491 from containers/dependabot/go_modules/github.com/fsnotify/fsnotify-1.4.9 4f497991b Merge pull request #5327 from baude/apiv2hc a95e9e5b4 Bump github.com/containers/common from 0.4.2 to 0.5.0 40ac4779e Bump k8s.io/api from 0.17.3 to 0.17.4 e7e5d125f Bump github.com/fsnotify/fsnotify from 1.4.7 to 1.4.9 e6fba1e44 eat signal 23 in signal proxy 2099643aa add apiv2 healthcheck code c9f148fb1 Merge pull request #5470 from containers/dependabot/go_modules/github.com/containers/storage-1.16.3 d586e16ad Merge pull request #5484 from baude/bindingsnocolor ac6c8fb68 Merge pull request #5482 from baude/removeimagefilter 9215eb033 Cirrus: Disable non-docs release processing 194759b96 turn off color-mode for bindings 3aa58ccd0 remove imagefilter for varlink remote client 925da7411 Bump github.com/containers/storage from 1.16.2 to 1.16.3 9c7481dbd Merge pull request #5474 from giuseppe/detect-containers-rootlessport-child-exit 235f36786 Merge pull request #5469 from giuseppe/no-size-create-container 358578087 run --rmi test: make it work 19f5d557b Merge pull request #5468 from Akasurde/5244_follow_up 647dc33e1 rootlessport: detect rootless-child exit 8741eb8a9 create: do not calculate image size eb2d0a228 Follow up changes from #5244 78e090092 Merge pull request #5458 from baude/apiv2eventslibpod 9cfcf5692 Merge pull request #5460 from edsantiago/man_page_xref 9bc27118b Merge pull request #5372 from sujil02/podstatus dbb3de990 Merge pull request #5459 from mheon/bump_readme_181 3d1bff6db man page cross-reference fixes: part 2 29c071d4f Update version in README to v1.8.1 da9d21635 Merge pull request #5457 from mheon/bump-1.8.1 216a6091d [CI:DOCS]Add libpod event endpoint 8877fed86 Bump to v1.8.2-dev Testing has been performed across x86-64/arm/arm64 via cli and podman-compose. Signed-off-by: Ming Liu <ming.liu@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2020-06-30 04:01:03 +00:00
Stefan Agner	bbbda2aff9	podman: add system service for podman ... Add system service for podman which starts a podman instance allow to access the new HTTP based API (apiv2). Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2020-03-13 21:53:18 -04:00
Stefan Agner	dcc50fe2f2	podman: bump to the latest version 1.8.1 ... Bump to the newest podman release 1.8.1. Many new networking features and a new HTTP API has been added since 1.6.1. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2020-03-13 21:53:17 -04:00
Stefan Agner	f569d1bfd5	podman: bump to latest release 1.7.0 ... Bump to latest podman release 1.7.0. It features improvements to networking, podman play kube, and systemd unit file integration. They have also added the podman system reset command, to remove all existing containers, pods, images, and volumes and reset the system to its initial state. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2020-01-17 16:24:59 -05:00
Tim Orling	5fb77ae4c4	podman: upgrade 1.6.1 -> 1.6.2 ... Lateest upstream is 1.6.4, but neither 1.6.3 nor 1.6.4 build cleanly. Release notes: https://github.com/containers/libpod/releases/tag/v1.6.2 Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2019-12-18 10:47:43 -05:00