1081 Commits

Author	SHA1	Message	Date
Bruce Ashfield	ebc4831a3f	cri-o: update to v1.31.0 ... Bumping cri-o to version v1.30.0-230-g04500243e, which comprises the following commits: 6d6149a0b build(deps): bump the actions group with 2 updates 922718c3f Fix typo 199f018fc build(deps): bump crate-ci/typos in the actions group 2389743df build(deps): bump k8s.io/kubelet from 0.31.0-alpha.2 to 0.31.0-alpha.3 58a9d7ed8 Enable `gci`, `godot`, `nolintlint` and `protogetter` linters e2f93c800 Add `kubernetes` group in dependabot c9844d98d Allow setting `CRICTL_BINARY` externally 6d00aaacc build(deps): bump k8s.io/client-go from 0.31.0-alpha.2 to 0.31.0-alpha.3 3789c2181 build(deps): bump the gomod group with 7 updates 49890645a Sort `crio` subcommands by name a7f937588 Fix version output in help 4148aca47 test: ensure correct parsing of supplemental groups policy in JSON ecf2c1770 build(deps): bump the gomod group across 1 directory with 3 updates 7d460145f changed the scorecard badge link to the standard format fd967972a Update nixpkgs 506badaa2 Reload config should remove pinned images when an empty list is provided 2f16f8bae Update go dependencies 11562fd1c Add space to the error message f8b860970 test: add coverage for fine-grained supplemental groups c931b90a3 server/*: add fine-grained SupplementalGroups control for enhanced security 52f3004c5 Mark v1.27 as EOL efd4385b4 server/*: Fix bug to add gid in /etc/group ffd15afda build(deps): bump crate-ci/typos in the actions group 6cb3925d9 OWNERS: adding littlejawa to the list of reviewers 486d768dc Update nixpkgs 1705f891c Update nix to v2.22.1 1494f809a Update shfmt to v3.8.0 7ad9c74e4 Update zeitgeist to v0.5.3 9cd0a9ed0 Update cni-plugins to v1.5.1 d27a9a8e3 Update shellcheck to v0.10.0 ccc030003 build(deps): bump actions/upload-artifact from 3.pre.node20 to 4.3.3 07ac2d0a7 build(deps): bump ossf/scorecard-action in the actions group 02574a396 build(deps): bump peter-evans/create-pull-request in the actions group 6d2ff549e build(deps): bump github.com/go-chi/chi/v5 in the gomod group 293359157 Fix container volume restore cf1875acc Added the scorecard github action and its badge f62cf94cd build(deps): bump the gomod group across 1 directory with 3 updates eccab8ac5 Restore container logs from checkpoint 20eba5edf server: remove container after failed start 8efa17c6a high perf hooks: short circut when writing cpuset values 80fcdafa9 build(deps): bump the gomod group across 1 directory with 14 updates 6af15ae30 Skip `[sig-network] KubeProxy should update metric…` test d85efd773 build(deps): bump the actions group with 2 updates e543c4d8e release-notes: Skip first commit 935579087 build(deps): bump crate-ci/typos in the actions group 8a08f2233 Add `conntrack-tools` to CI system packages 25e2e3566 build(deps): bump crate-ci/typos in the actions group a12fa31f2 .packit.yaml: Fix `%global commit0 <sha>` generation 4572f79b5 build(deps): bump crate-ci/typos in the actions group across 1 directory 3da7b0699 Update scripts/automated-patch-releases.md c84c357d5 Allow pull timeout set by RPC context 0a673b9ac Make unit tests work rootless 00ecf9532 Update cni-plugins to v1.5.0 4d6b85942 build(deps): bump crate-ci/typos in the actions group b9487a0b0 Fix container stats label filter ef7880da4 Don't fail CI on GitHub pages push 07ffbd248 Rebase to correct branch on patch release creation 594295d94 Update nixpkgs 7e778525a Update scripts/automated-patch-releases.md af5358508 Update scripts/automated-patch-releases.md e316beb95 Update scripts/automated-patch-releases.md ab6739e2d Update scripts/automated-patch-releases.md b48aa8ec9 Update scripts/automated-patch-releases.md 1ed84cd13 golangci-lint: bump cyclomatic complexity again 3e862ecbe server: warn about container /etc not being a regular directory 37c76ad52 server: use SecureJoin when setting container /etc directory 1c457dfe1 add mermaid flow diagram for patch releases bcea85b46 build(deps): bump the gomod group across 1 directory with 10 updates af597f05f Readd GOARCH in `Makefile` c491001e9 Switch to `containers/common/pkg/crutils` ef3d4eea6 Update conmon to v2.1.12 a9d80aa26 Update nixpkgs dde54fcad build(deps): bump the actions group with 2 updates 148cacab0 fix memory leakage 7fec7bf61 Keep the monitor exits from stopping when the watcher gets error 1e12bed7d Add small tutorial how to run CRI-O in KIND 82af00dd2 delete deprecated registries config 2da2e6830 Fix tag reconciler permissions 63f443b1f build(deps): bump cachix/install-nix-action in the actions group a5b126c0a Run workflow after tag push 5a306d4c5 Allow workflow dispatch for `integration`, `test` and `verify` actions 0a76ebe5d Create tag on reconciler 8d66907f5 Fix lint 0df965310 server: use max function instead of manually calculating max ca3c711a3 build(deps): bump the actions group with 2 updates 0540a8e90 build(deps): bump the gomod group across 1 directory with 11 updates b1b3c92ae Update a typo in the code comment 55cc11975 test: reenable crun-wasm test 64b991b1f server: support ping_group_range if in a userns 474a2ce87 contrib/test/ci: cleanup archived package for Fedora and ansible code d1db27fb2 Add parser tag for DisallowedAnnotations 8b1ce9235 Update scripts/release/release.go 3914eeb59 fix rebase branch error on patch release 8ac0907f2 Enable `revive` linter e7e37c567 build(deps): bump ossf/scorecard-action in the actions group cbe71afae Show runtime configuration f03faf99a Kill exec PIDs after main container exited 8b867c6ed build(deps): bump the gomod group across 1 directory with 4 updates 137f8a5a9 build(deps): bump golangci/golangci-lint-action in the actions group 794ce67db Remove surplus newline from the log message 0a9110393 pinns: write sysctls in correct process when userns ee49fad01 Check for nil values when importing container definition e07608b4e Fix mocks 8f4b32a53 build(deps): bump the gomod group across 1 directory with 25 updates 64c510043 Set an integration test timeout 62fede365 build(deps): bump the actions group with 2 updates e01608257 Enhance tag reconciler logging 6657190b7 build(deps): bump github.com/containers/podman/v5 from 5.0.0 to 5.0.1 5327c246b build(deps): bump github.com/docker/docker 52f185309 Fix tag-reconciler job by using `GITHUB_TOKEN` ead3cca6e Dependency update for podman 5 5f54ca9c5 build(deps): bump golangci/golangci-lint-action in the actions group e783e930e Update internal/version/version.go 481baea60 Update golangci-lint to v1.58.0 and fix lints 8132c7d15 Remove archived `containerd-cri` repo aefd7ac37 Use `codecov/codecov-action` to fix coverage report 907685a82 add tag-reconciler for patch releases c3bfcd3b4 wait for reload completion for stable e2e 7371d2170 dashboard: switch to non-deprecated metrics f0cd27e15 Replace go env GOARCH to ARCH dea6c628e Drop GOPROXY/GOSUMDB from Makefile and fix unary operator error while building crio 1585cb921 version: bump to 1.31 1beecbe27 Pin crate-ci/typos GitHub action 980db0610 test:add coverage for automatic reloading of mirror registries 01450abb7 server: implement automatic reloading of mirror registries configuration 882ce4afc Fix kubelet image GC by using new `image_id` CRI field d91496190 Fix AppArmour profile Apply() function to correctly handle an "Unconfined" mode. 97384f9a9 test/cri-metrics.bats: skip test for kata VMs 1955ce5d7 internal/criocli: Update criocli with new added metrics flags 820522dcf - internal/stats: Pass the container_server context down to statsserver 33d2f4785 - Better naming for ContainerStats struct 2ba4de466 New slice for each metric collection b4ac9a966 Add metrics integration tests d7fe9a3bb - Add missing fields and functions to unsupported stats 274a509eb - Implement ListPodSandboxMetrics e851caffb Replace libcontainer.Stats with cgmgr.CgroupStats 352afeddd Add file_mapped and failcnt fields to memory stats 40ea8516a Add metrics decscriptors list 38e296b15 - Add cri-metrics implementations 4d93b7ec4 build(deps): bump the actions group across 1 directory with 3 updates e66cd346d drop loop variable, which is no longer needed in go 1.22 8b966a886 Re-add `GITHUB_TOKEN` for GitHub actions jobs 4b4e66c63 Remove `GH_TOKEN` usage from repo e0c06c4b5 golangcilint: potentially fix lint from broken linter 8d3a11eef hack/build-rpms.sh: Update for new builder image c2d743dc6 Add debug log line to track newly started exec PIDs 614eb160e Add debug log to expose details of an exec PID being killed 6470daf8c Vendor Kubernetes v1.30.0 8c78850c1 Install `cri-tools` from `master` b7e687853 fix typo and lints of CVE-2024-3154 fix 976ab1f4c annotations: add OCI runtime specific annotations to the AllowedAnnotations b40648e43 Pin golangci-lint action b20fce0b8 build(deps): bump golangci/golangci-lint-action in the actions group 9af6c1717 Fix verify.yml for GitHub actions 2e81eedc8 contrib/test: skip fips test for kata containers 81a98deb9 test: add coverage for disabling crypto.fips_enabled when FIPS_DISABLE is set 9977160f7 server: allow containers within a cluster to opt out of FIPS mode when necessary 316c23534 Pin GitHub actions commits 0c284bea2 replace patch-release.go with release.go e34ea18ae Updates pinned images list on config reload f326ace51 oci: keep track of exec PIDs and stop them on container stop 04be0b7cc build(deps): bump crate-ci/typos in the actions group 2edec2888 Build s390x binaries using musl libc f98b96534 stop using BytesSize when merging the config 49b4a5fa4 bump ocicrypt to v1.1.10 13efa1ae1 Run patch release and nixpkgs jobs only on cri-o/cri-o 46d815d17 Distinguish conmon version parse from execution error 9e8848281 Remove duplicate comment in crio.conf 87cea5626 Rename `cron` workflow to `release-branch-forward` d5b4ae531 drop hooks from kata integration tests cd8333627 Use release-note block instead of label b01cb1886 Update cri-tools to v1.30.0 3099a8fa7 patch-release: configure the default git user and fix file update ddbd81955 Use default `cri-o` org for patch releases da1999a6a Add missing kernel version check to the RRO mounts integration tests dfc851483 Update `release-notes` to v0.16.8 851c13a05 build(deps): bump crate-ci/typos in the actions group e3873837d sasha comments cf44dd802 drop version 43f7ae0d1 Update golangci-lint to v1.57.2 and config 99aad640c Fix patch release workflow restriction 09a529bdf config,factory: use updated CDI interface. fd9aa7625 go.{mod,sum}: update CDI dependency past 0.7.1. 283ac9cb1 add imagefs integration tests 8cffb6590 Move test volume creation to a local helper function 36d5b2359 Lower verbosity of `Allowed annotations are specified for workload` message c69b09563 Enable and fix errorlint 7a098653b feat: add release versions for manual workflow run 5c4fb9a0e Use debug log level for CRI-O prow tests 25d397f98 Remove device mapper support 55857d8dd hack/govulncheck.sh: nit 0302c4150 Move to use new SELinux test helpers over the opencoded checks 9331b8628 Add test helpers to check for current SELinux status and mode 1234e86f2 Add test helpers to check for kernel and crictl versions 39be41ef9 Add support for Recursive Read-only (RRO) mounts e1b983ac7 Makefile: rm $(PROJECT) use from paths 0e20dcddb Makefile: rm i386 hack 9e2727a9b build(deps): bump crate-ci/typos in the actions group c848ba727 Print runtime version info on CRI-O startup 9bac613f5 Implement configurable container minimum memory limit per OCI runtime. f7c3a7fff server: do not chmod bind mounts bb8d956d5 server: chown secrets to root in the container 57a29faf1 add powertools repo for gpgme-devel 083656490 contrib/test/ci: use force_clone for crun to avoid outdated codebase 4fe7bc348 drop rootless dependency from podman 9231bcfa8 Add docs about the prow CI images 27982a07a update runtime spec to 1.2 0484ce3dd Fix Actuated badge in README.md e480e5b28 Cherry-pick changes from containers/image/pull#2363 4ebe38670 Remove pinned conmon-rs version 74145d0b3 contrib/test/ci: use the main branch for building crun 46feeca20 build(deps): bump crate-ci/typos in the actions group 9d0acb9c1 Disable cron workflow for forks 0490e18b3 skip crun-wasm test in image bats e3e629a5f build(deps): bump crate-ci/typos in the actions group 6718d4708 *: address issues with the latest typos update 31a0e9c12 build(deps): bump the actions group with 2 updates a3496374e contrib/test/ci: fix ansible code for building runc 618a4cf1f Do not abort startup if CRIU binary not found 03839cb0a Don't fail-fast integration test matrix ce21e6ae5 test: fix potential flake in timezone tests. b5319fd54 Allow runc to build with go 1.21 and revert wasmedge changes Signed-off-by: Kevin Hannon <kehannon@redhat.com> 12a281f4c create go1.21.9 directory 33db97543 setup golang to 1.22 0f887e69e build golang 1.29 in runc 4e1bb0ba9 ci at 1.22 f407aa06b use golang 1.21 until runc works with 1.22 aedcfd1ac Run seccomp notifier tests on arm dc44631dc add x to set for traceability 0a4272d03 test: remove references to crioctl 3c6b0e089 use wasmedge and drop crun-wasm a63bc4d7a WIP: patch release workflow and script ecd7c6ab5 Change `progressGoRoutine` to `consumeImagePullProgress` b3b0089f0 fix: validation check should handle zero values 9d1cff8f3 oci: AttachContainer: always read attach socket 6ec4e5f38 refactor: moved cpulimit to crio config 3c1fc985b test: added test to cover parsing annotations 34223ab23 upkeep: small wording changes 2c666e7cc feat: add support for cpu limits for workloads 1a377ccd8 Add dynamic pull timeout 7084db255 packit: Update config and sync to Fedora d6d21a12d In some cases the seccomp_notifier does not have time to stop the workload, in that cases exit code of container is 0. 39b3003e2 Update install.md 9b0e2b9b1 Update bats to v1.11.0 bea30a002 add a more clear pointer to what is supported for packaging ba25bb584 Migrate off deprecated AppArmorProfile CRI API b8e947a08 Add exponential backoff to the container stop loop 8460c2c1b add selinux package to crio Signed-off-by: Kevin Hannon <kehannon@redhat.com> 5bd10e270 Update OCI CNI to v0.4.2 d6ebb48a1 Use CRIU version check go-criu; not from Podman ab7961676 drop specgen from crio a6abdb326 Remove Podman `lookup` dependency bcd879fe8 Change duplicated string values into constants 511572c5a Enable and fix `ginkgolinter` reports 7de6d9882 Remove Podman `annotations` package dependency 65ffd1737 Use upcoming version as release notes `endRev` 5677831ca Update cni-plugins to v1.4.1 8c41a868f Deflake `pod annotations capability for chained cni plugins` test 169c5f0c6 Use contextual logs in `server/container_restore.go` 3b29ce532 Remove Podman `errorhandling` package dependency 7824651ac Update google.golang.org/protobuf package to version v1.33.0 6649d97af Update the CNI plugins instructions 9b9318132 Update golangci-lint to v1.56.2 and fix lints 3372a225d build(deps): bump the actions group with 1 update 3f046d1df build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 7afcf3f46 build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3 863e51424 Add OCI artifact layer cache c434ea8ad Change CRIU support from default off to default on a9ba094a1 deps: update otelttrpc to @latest and re-vendor. 365eaff17 Update zeitgeist to v0.4.4 5b246ba0a build(deps): bump the actions group with 1 update 624564010 Sync changes of PR#7719 & other defaults 791ce8045 Change process metrics collector log levels 03c4bcacc Remove `--seccomp-use-default-when-empty` option ae00cdf9b fix a minor typo in the comment of pullImageImplementation 115e11d09 Disable Recursive Read-only (RRO) mounts feature 0b7cd2f34 Do not overwrite stored latency/governor on container restart 097fe3bf0 Add s390x architecture support a1b8cb9c9 Add OCI artifact pull unit tests ed7963f03 Keep versions file simple to source only 338ea986f In-memory OCI artifact pull b302bc1a0 server: report the runtime handlers features 66ac43688 config: make error message clearer 0fa57582a vendor: bump kubernetes dependencies 08c393d17 Update release-notes to v0.16.5 b826a7f8c Remove `crun` from `dependencies.yaml` 3193916ac build(deps): bump github.com/opencontainers/image-spec c692bec92 Fix markdown lint 6bd4f6855 Allow plain annotation `seccomp-profile.kubernetes.cri-o.io` for images 7b610e32c build(deps): bump the actions group with 6 updates 474fc7780 test: always override NRI socket location. d3808e4ca Add all update types to dependabot groups 9241d7492 build(deps): bump the gomod group with 8 updates 8cc853085 build(deps): bump the actions group with 1 update 4c682eb0d Group all dependabot updates bf5cc00bc config, docs, completions: enable NRI by default. 031ba9b11 Run checkpoint restore tests on arm f1408edbe Update nixpkgs e4a4024e5 Rename seccomp profile annotation to `seccomp-profile.kubernetes.cri-o.io` fe8ec1940 Run integration tests with JOBS=2 14ef21bd2 Reduce amount of parallel jobs in integration tests 6f28ea99a Remove deprecated metrics edebdd00f Revert "Fix ImageRef field for containers to default to an image ID" 91f888a3d Filter image annotations before used ea8f1054e Don't fail-fast matrix d43d8fd92 Don't use CRLF when generating CRI-O documentation abf38859c CRI: An empty DNSConfig != unspecified 567eed921 Switch to go 1.22 and update deps 162594e9b Update openSUSE's OBS URL in install-distro.md file a38b9b956 .golangci: Bump gocyclo to enforce code complexity checks aff565f82 test: add test for timezone support 66c2aeb83 *: add support for specifying timezone for pod/container 05f4cbb19 release-notes: fix startTag calculation b20d06cc7 Add support for OCI artifact seccomp profiles ff60ac14a When crio restarts, restore the infraContainer d955623e6 go.{mod,sum}: update NRI dependency, re-vendor. 4619ca724 server,nri: enable otel tracing over ttrpc. 9613e6075 Fix ctr log max test on arm64 e84b65477 oci: handle early exited container faster in stop loop d8d3670be Update runc to 1.1.12 aedf47129 build(deps): bump github.com/opencontainers/runc from 1.1.10 to 1.1.12 511877186 report memory Swap-only values 601d85941 clean up the Populate* functions with their helpers 3bd73f662 libcontainer-based stats server for linux 5a2bbb90f Run integration tests on arm64 6fb83141a higeperfhooks: mixedcpus: set only exclusive cpus in child cgroup 63ff1eee8 Add integration tests ea75b9bef Move metrics endpoint listener to use 127.0.0.1 as default fbe8bbbee highperfhooks: add precreate hook for injecting envs 5e83e9697 Update nixpkgs 7e94aa19a server: implement stopPodSandbox for FreeBSD f70aa434c server: implement runPodSandbox for FreeBSD c13044276 internal/sandbox/infra: make this build on FreeBSD bdaa98b66 internal/node/config: implement ValidateConfig for FreeBSD 2eb3db455 internal/config/nsmgr: implement nsmgr for FreeBSD 479e316db internal/oci: Implement getPidStartTime for FreeBSD 19e407c2e server: make configureMaxThreads platform-specific... 887c4421d internal/lib/sandbox: make NeedsInfra plaform-specific 5cb9fa77a internal/factory/containers: allow non-linux containers 5d3d7260d pkg/config: only validate the pinns path on Linux c9975a3c4 build(deps): bump ocicni to latest master 3333f2fa7 build(deps): bump the opentelemetry group with 2 updates 1b9754486 fix missing line ending on crio.8.md 3cbaa5294 fix grep for whitespace 8dea35388 add metrics_host to config 8cffd22e3 fix typo for time out e510f3854 metrics: remove deleted containers from OOM count metrics 56e46815d build(deps): bump github.com/go-git/go-git/v5 from 5.10.0 to 5.11.0 0c67d8b5a version: bump to 1.30.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-11 14:07:17 +00:00
Bruce Ashfield	e28407eda5	containerd: update to 2.0.0-rc-latest ... Bumping containerd to version v2.0.0-rc.3-82-g1b24e53d0, which comprises the following commits: 63b55e6df build(deps): bump the golang-x group with 2 updates 51f34ff49 CI: update Fedora to 40 56495b404 update go version to 1.22.5 23170e20d Move fsverity package to internal f6e731c80 cri: get pid count from container metrics 96352ad22 update runhcs binary to v0.12.4 10aec359a cri: ensure NRI API never has nil CRI a723c0c6e pkg/reference: remove deprecated SplitObject ef98c7198 Implement fsverity functionality fec33aa73 pkg/reference: deprecate SplitObject a5fce38f3 pkg/reference: Spec.Digest(): inline SplitObject code 42145950b pkg/reference: SplitObject: add proper GoDoc 74a6156ac pkg/reference: SplitObject: zero allocations 799bca97f pkg/reference: Spec.String(): use string-concatenation instead of sprintf c097022a5 build(deps): bump github.com/containernetworking/cni from 1.2.1 to 1.2.2 14b053fb4 build(deps): bump github.com/containerd/go-cni from 1.1.9 to 1.1.10 8f9607eed Use the transactor interface in metadata 2cf8237a1 build(deps): bump k8s.io/klog/v2 in the k8s group a2f9101aa build(deps): bump github.com/containernetworking/plugins 2304cd9d5 build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2 469f95026 build(deps): bump github.com/containernetworking/cni from 1.2.0 to 1.2.1 243b803a1 Add pprof to runc-shim b323e9eec vendor: github.com/containerd/ttrpc v1.2.5 cb38b1e2b api: update github.com/containerd/ttrpc v1.2.5 2f1bf791b Cleanup metadata godoc 907796811 update release runners to ubuntu 24.04 dd0542f7c cmd: don't alias context package, and use cliContext for cli.Context c25183ff1 use older version of OVMF package 1bfdccee0 use vagrant from jammy in noble 769e0c8c1 add debian sources for ubuntu-24 624aa49d4 increase xfs base image size to 300Mb 027414ee5 enable ubuntu 24 runners 9edde8106 build(deps): bump github.com/klauspost/compress from 1.17.8 to 1.17.9 becb2b2d3 build(deps): bump github.com/checkpoint-restore/checkpointctl f6f655ccf build(deps): bump k8s.io/klog/v2 in the k8s group 531da9960 Reduce scope of permissions in stale workflow 15887d7ef sandbox: add update api for controller Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-11 14:07:17 +00:00
Bruce Ashfield	e977aba247	conmon: update to 2.1.12 ... Bumping conmon to version v2.1.3-147-ga500cbd, which comprises the following commits: a500cbd logging: remove unuseful fsync 1578849 fix(deps): update module golang.org/x/sys to v0.20.0 c7a88f8 Remove CI VM OS names be3e546 chore(deps): update dependency containers/automation_images to v20240513 e889663 Bump version to 2.1.12 ff8794c Make 'docs' target not depend on 'install.tools' if GOMD2MAN is set 10f7826 Packit: enable downstream sync to CentOS Stream 10 e21e7c8 Build s390x binaries using musl libc 9ce7b1a Add support for s390x Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-11 14:07:17 +00:00
Bruce Ashfield	1195b00fe9	buildah: update to 1.36-tip ... Bumping buildah to version v1.36.0-2-g0d08edeed, which comprises the following commits: 34518c5fa Packit: enable c10s downstream sync 6ceba8838 Bump to v1.36.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-11 14:07:17 +00:00
Bruce Ashfield	e7033d206d	aardvark-dns: update to v1.11.0 ... Bumping aardvark-dns to version v1.11.0-10-g5ad6420, which comprises the following commits: 2873fe5 Be sure to have at least Epoch 2 to preserve upgrade path in c10s. db1afc8 fix(deps): update rust crate log to 0.4.22 43ea35b [CI:BUILD] rpm: Update Rust macro usage 03d1c0a fix(deps): update rust crate tokio to 1.38.0 cbdc655 Bump to 1.12.0-dev 666d7b1 Release v1.11.0 802a5de v1.11.0 release notes 882c7b0 run cargo update ed6c573 chore(deps): update dependency containers/automation_images to v20240529 011f352 Internal networks cannot make external DNS requests 9db7996 fix(deps): update rust crate anyhow to 1.0.86 e30a92e fix(deps): update rust crate nix to 0.29.0 dc946ea [skip-ci] RPM: use default __cargo macro across all envs 9ebb8f2 chore(deps): update dependency containers/automation_images to v20240513 db186b4 fix(deps): update rust crate anyhow to 1.0.83 d591c8a [skip-ci] Packit: separate `packages` key for rhel jobs ae9ff92 fix(deps): update rust crate libc to 0.2.154 abba8d0 [skip-ci] Packit: enable rhel10, c10s tests and c10s downstream sync ed98d62 [skip-ci] Packit: Remove EL8 jobs fb414d9 fix(deps): update rust crate syslog to ^6.1.1 591a636 fix reverse ipv6 lookup test flake 40f76b6 fix(deps): update hickory-dns monorepo to 0.24.1 4646a22 chore(deps): update rust crate chrono to 0.4.38 1f96f76 Don't tear down all server threads on SIGHUP f244f33 fix(deps): update rust crate anyhow to 1.0.82 dfa66f6 fix(deps): update rust crate tokio to 1.37.0 f8a2e2c Update to nix-0.28.0 12a8e25 update chrono package 25dee15 chore(deps): update dependency containers/automation_images to v20240320 f3f615e fix(deps): update rust crate anyhow to 1.0.81 99d3d62 tests: check queried domain name in reverse lookup tests a256241 fix: set name for answers in reverse lookups 13055be chore: fix typo in runner script 593e007 chore: fix log message when doing reverse lookup 33817d2 fix(deps): update rust crate log to 0.4.21 7656598 fix(deps): update rust crate anyhow to 1.0.80 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-10 15:59:26 +00:00
Bruce Ashfield	58cddd438e	podman-compose: update to v1.2.0 ... Bumping podman-compose to version v1.2.0-27-gdaab93b, which comprises the following commits: 9fe3038 tests/integration: Automate 'build_fail' manual test 0f8348b tests/integration: Automate 'build' manual test 2091ade Add newsfragment ca58d7c Pass build description labels to podman build 5bf4c0f Add a way to remove dashes in default network names 67c5352 Extract default_network_name_for_project() 5040a37 tests: Add integration tests for up -d with single container at a time 29195be github: Install requirements unconditionally 9a4af0c Discover tests instead of passing a list of files to unittest 24038da Check whether pod exists before trying to create one 2056e70 tests/integration: Reduce base path calculation duplication 4ec57c1 unittests: Added unit tests for podman-compose secrets fa3e0a7 Alt Dockerfile names fix 18472b5 Move all tests to single directory "tests" d38b26b Release 1.2.0 37e2cb2 Add release notes for v1.2.0 6ef759c Use newsfragments pattern for the release notes 67ce900 Commit .env in tests/env-file-tests, bypassing root .gitignore 4e9f767 Load .env from Compose file's directory and cwd 405001b Fix comment 6b1aeff Add unittests for type=env secret f06975b Update tests for type=env secret 546cad5 Add type=env secret support 935029d Fix environment variable precedents 360b85b Allow providing custom in_pod argument as a global compose file variable 82740cc Add ability to input docker-compose.yaml via stdin 0f645e4 Add ability to input docker-compose.yaml via stdin 3b15170 Changed the global parser help message for file input, to reflect changes for reading from stdin 3359380 Add ability to input docker-compose.yaml via stdin e799a0b Fix x-podman.gidmap typo 65d1fde github: Add verbose option to integration tests 2e8ed2f pytests: Add test for object required but path non existent 040b73a pytests: Add tests for several multi-line environment files f3e9a96 Fixes #908: Add support for multi-line environment files 2c5d00d github/workflows: Add codespellignore file to address false positives b513f50 test: add missing unit tests for selinux in verbose mount cac836b Support additional_contexts 09034a0 test: Split test_gpu test 0065082 refine the test_include for multi subcomposes 4f73f2b fix: add include test file, edit the assertion 1d64f2c Update podman_compose.py 4e22fae Fix logging build error message 79865c2 Add support for enabling GPU access c23a8b2 Do not pass --ipam-driver option when value set to default b202a09 Add support for `env_file` as objects 5c4aa40 add await for create_pods call cef1785 Add instructions on install from Homebrew b761050 tests: Merge multiple compose merging tests into single test class e1d0ea7 tests: Move normalize_service tests to a separate test class 1430578 tests: Simplify command and entrypoint normalization tests d31a8b1 Don't create pods/container when registering systemd unit 5df4e78 README: explain that netavark is an alternative to the dnsname plugin 70a0e2d Fix handling of --in-pod argument eea8bac Add images command a6c4263 Add tests for x-podman.uidmaps and x-podman.gidmaps 9599cc0 Migrate x-podman dictionary to x-podman.* fields in container root 2b4ecee Add docs for podman specific compose file extensions 77f2e8e Support podman's external rootfs management 72a94d5 implement --publish in docker-compose run 2681566 Release 1.1.0 c97f003 Add release notes for v1.1.0 131010b Use x- prefix for x-podman.mac_address cdcedeb Use "service.build.ulimits" when present instead of "service.ulimits" 3e1f7d5 add tests for selinux with verbose bind mount d7cf096 add support for selinux in verbose mount 1f35c00 Add unit test for depends_on normalization as a dict 6c09ce7 FIX issue https://github.com/containers/podman-compose/issues/704 - Windows fix sock not working. 953534a Support and document all podman-specific network_modes 6feff24 slirp4netns can be used without options 9fd4cf4 Add unit tests for network_mode 65849c9 add comment about per-network aliases 9baea70 use preferred format of podman command line options bdff78d Ignore files generated by tests 45ca1f9 Support podman-specific per-network mac_address specifiation 91fbea3 Add unit tests for get_net_args() 2743d69 Fix support for multiple networks with explicitly specified ipv4/ipv6 addresses dd34a90 Add testcase for failing network config f0bae1e Don't resolve links to compose file 81d81fb Formats CONTRIBUTING.md b263dc1 Fixes typos and enhances CONTRIBUTING.md 078ee7b Updates Signed-off-by link in CONTRIBUTING.md a6e3ae7 Fixes invalid name of test package in setup.py 1e9cf1d Pass file secrets to "podman build" via parameter "--secret" bbfff78 Bump actions/checkout from 3 to 4 c351f99 Add coverage to Github Action summary 829cde0 Rename test classes to match filenames da63048 Don't spellcheck requirementfiles 5e55df8 fix python < 3.9 compatibility fde7995 Fix python < 3.11 compatibility c592596 Split out the different tests into separate CI steps 688ee9a Fix pylint issues c3a152e Enable pylint, because it catches stuff that ruff misses bd60bc9 Run tests on all supported python versions 9d8b0b8 add editorconfig f2f5483 Extract compose_run args parsing and add unit tests c4fa8f7 Split exec args parsing into new function and add unit tests for it 4c270b9 Allow run/exec -e with equals sign in value c5f7f55 Remove implemented commands from Missing Commands c98cbaa Fix #782: add support for http_proxy 91d316f Added handling `pid` option 969edb8 Add support for enable_ipv6 bba1f33 Factor out arg creation for "network create". Add unit tests. a9c335b Handle sysctls maps e67c52f test_container_to_args: handle async tests 2cdfb3e Fix stop/restart args stacking 8ec5e03 github: Add PR template da520e2 switch to % string lazy formatting * fix black and pylint issues 1e9e2ee Output: use logging, remove garbage output by default 0f693ee Replaces asyncio timeout with bespoke timeout function cf90ab2 Run codespell throughout fixing typos automagically d2fa801 ignore poped (not sure why not to make it popped) 2477748 Add pre-commit definition for codespell 6e65a73 Add rudimentary codespell config f95ca7a Add github action to codespell devel on push and PRs 0c0e77c Bump actions/checkout from 3 to 4 bb2338e Fix unsorted imports 15ae214 Add support for runtime service configuration key ed39523 github: Enable ruff check 4e43606 Shorten too long lines 91052cb Fix ambiguous variable name a6e0092 Remove unused variable 59a1fa3 Use 'not in' for membership test 36139fb Remove unused f-string b0da6f8 Fix import formatting 94df95a README: Fix link to tests badge 3a5a283 README: Remove link to pylint test badge 7c81044 github: Run actions on python:3.11-bookworm 1a24cde tests: Properly tear down containers in extends_w_file_subdir test a90da4d github: Fix test names 27c8ceb tests: Add verbose debug option via env variable 0614687 tests: Print decoded subprocess output in case of failure 6af7a2d tests: Optimize speed by using dumb-init to handle SIGTERM signal f4dc5f3 tests: Print output in case subprocess returns unexpected code b34f699 Add SPDX license identifiers to each source file 2c6c1be github: Run tests on all branches 91737ee Bump actions/setup-python from 4 to 5 b65d4a3 github: Fix ruff job setup 23fe9e7 Migrate tests to unittest 7539257 requirements: Install . for tests a967cab Format codebase with ruff a5c354d Replace flake8, black, pylint with ruff e4e5b7d Make test requirements reproducible e0edd5d Fix package installation 831caa6 remove recursion 9ac3339 Fix issue #831 c5be5ba Fixup tests c6a1c4c Add tests to make sure all async paths are covered 3c9628b Fix a couple issues and update docs 38b13a3 Use asyncio for subprocess calls bce40c2 Change "an key-value" to "a key-value" 78f8cad Fix typos 7942a54 fix styling errors cb9cf60 add stats command 06587c1 rm redundant tests bc9168b add no-normalize flag 57c527c add edits from review d1f5ac9 convert build context path to absolute during final normalisation 0164c1d Simplify the fix using `or`. e5cdce4 default to an empty dict for the from service if the service is None 280f177 Add a test to extend using an empty service (placeholder) f75d12a broken in py 3.7 5454c3a Add 'links' aliases to container aliases 901adf4 Use defined environment variables in the image build process bf07e91 Implement `include` from `compose-spec` c31b4e2 Fixes #723: merge short & long syntax of depends_on dependencies 79bfad1 move logic from rec_merge to normalize_service d150946 allow empty list to be a command/entrypoint 9011e9f add tests, dry up code, use shlex.split instead of str.split 517aeba Allow config to merge strings and lists in command and entrypoint 85d5d5d move logic from rec_merge to normalize_service 1ffd24d Python version support: sync verified and advertised versions 8c66b1c add test case for when build is a complex dictionary a0005db add code implementing build value merge 221cf14 add tests for build value merge a61945b fix format 6b6330c add build subcommand and --build arg to compose_run 5d279c4 Build-fail test example 5a3bdbf Exit code managed at PodmanCompose.run() 1eb1664 Linting fixes 82182b7 Finish execution in compose_build only on command=build calls 3f46188 Update project-1.env 91bc6eb Keep chdir after loading env file 59a59c1 Fixes #636: env-file shall be resolved relative to the CWD 620f5d7 pre-commit black config: run in check only mode 6f902fa Fix linting issues ccdf01e Revert "Use SELinux mount flag for secrets" e6b1eab Revert "Use more lenient SELinux mount flag for secrets" 75de39c Use more lenient SELinux mount flag for secrets 8741925 Use SELinux mount flag for secrets 0b853f2 Ignore access mode when merging volumes short syntax 847f01a Add a docker-compose test file for uidmaps/gidmaps e511e64 FIXES #228: Add support for uidmap and gidmap a9723ec Added a way to start containers with multiple ips and nets 1cb608d allow project name to be fetched from dotenv 252f1d5 updating black formatting for podman-compose.py 13856d2 updating black formatting 8d8df0b Adding basic support for --profile argument bc5f012 add option to start podman in existing network namespace 9a08f85 FIXES #586: preserve exit code for podman-compose build 8625d7a add ipam-driver support 016c97f Fixes #663 - Fixes linting/pylint errors 2df1167 Fixes #661 - Fixes linting/flake8 errors 5eff38e Fixes #659: fix permissions when installing OS packages for linting/black 7f5ce26 start version 1.0.7 and default with pod enabled by default f6dbce3 version 1.0.6 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-10 15:59:26 +00:00
Mingli Yu	66961d278a	aardvark-dns: Improve the ptest output ... The previous ptest result show as ✓ or ✗ , improve the result to PASS or FAIL. # ./run-ptest [snip] PASS: 6 basic container - dns itself with long network name PASS: 7 two containers on the same network PASS: 8 two containers on different networks [snip] Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-10 15:59:26 +00:00
Mingli Yu	7d0768c428	netavark: Improve the ptest output ... * The previous ptest result show as ✓ or ✗ , improve the result to PASS or FAIL. * Skip some cases related to sit0 device(sit kernel module) and firewalld. * Add nftables to RDEPENDS for netavark-ptest as 250-bridge-nftables.bats needs it. Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-10 15:59:26 +00:00
Xiangyu Chen	e15a5484e4	lxc: update ptest cases in black list ... Released lxc-test-shutdowntest and lxc-test-state-server due to those back to normal since lxc upgraded to 6.0.0. lxc-test-no-new-privs and lxc-test-checkpoint-restore are broken test, already reported to upstream[1][2], move them to blacklist until upstream fix them. lxc-test-usernic always fails when use ptest-runner, but normal with run-ptest by manual. Ref: [1] https://github.com/lxc/lxc/issues/4296 [2] https://github.com/lxc/lxc/issues/4435 Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-10 15:59:26 +00:00
Bruce Ashfield	93113db99c	moby: update to v26.1.4 ... Bumping moby to version v26.1.4-4-gf5334644ec, which comprises the following commits: c1d4587d76 builder/mobyexporter: Add missing nil check daba2462f5 docs: api: image inspect: remove Container and ContainerConfig 17315a20ee vendor: github.com/containerd/containerd v1.7.18 cbd94183ab update containerd binary to v1.7.18 3115daaa91 update to go1.21.11 12072173df Update containerd to v1.7.17 92f00d41ba vendor: github.com/Microsoft/go-winio v0.6.2 a046857fbf vendor: golang.org/x/tools v0.16.0 476d9314d0 vendor: golang.org/x/mod v0.17.0 4021fa775e update docker-py to 7.1.0 0fd5efe64a docs/api: add Scope, ConfigOnly, ConfigFrom, Peers (v1.41 - v1.45) 1017246d24 api: swagger: Network: add Peers fbfa1bcc96 api: swagger: POST /networks/create: document Scope, ConfigOnly, ConfigFrom e12db89eef api: swagger: Network: inline examples, and add ConfigOnly, ConfigFrom 5838467405 docs/api: POST /networks/create: inline examples per-field (v1.41 - v1.45) 1033f561af api: swagger: POST /networks/create: inline examples per-field 0fa6816991 api/types: NetworkCreate: add GoDoc eaad6f503d don't depend on containerd platform.Parse to return a typed error fda7b48363 Fix issue where node promotion could fail dbec963cee integration/TestDiskUsage: Make 4096 also a 'empty' value e35c6f5625 Dockerfile: update containerd binary to v1.7.17 (static binaries and CI only) 06e19ec444 Explicity write http headers on streaming endpoints c21fe3efa3 Forward DNS requests into --internal networks 9326cda7bf Do not forward DNS requests to self. 76fcf9a8e0 apparmor: Allow confined runc to kill containers 10739af81a update to go1.21.10 2f5bbbe16b Option to avoid deleting the kernel_ll address from bridges. 40618081f1 Allow for a read-only "/proc/sys/net". 2c91196921 Update containerd to v1.7.16 c9689eccf5 vendor: update buildkit to v0.13.2 7d95fe8db5 c8d/list: Ignore unexpected image target 6667e96dad Include more details in errnotManifestOrIndex ab570ab3d6 nil dereference fix on image history Created value 7532420f3b container/SetupWorkingDirectory: Don't mutate config a4d5b6b4d0 builder/normalizeWorkdir: Always return cleaned path 6c68be24a2 Windows DNS resolver forwarding 745e2356ab Update tags.cncf.io/container-device-interface to v0.7.1 0d6a1a212b vendor: github.com/opencontainers/runtime-spec v1.2.0 f5209d23a8 daemon: add nolint-comments for deprecated kernel-memory options, hooks f07644e17e Add netiputil.AddrPortFromNet() d3c051318f daemon/cluster/executor: Add volume `Subpath` 5368c3a04f vendor: github.com/moby/swarmkit/v2 master (f3ffc0881d0e) f51e18f58e Fix typo 57dd56726a Disable IPv6 for endpoints in '--ipv6=false' networks. 9954d7c6bd Run ipvlan tests even if 'modprobe ipvlan' fails cd7240f6d9 Stop macvlan with no parent from using ext-dns 17b8631545 Enable DNS proxying for ipvlan-l3 5ae5969739 vendor: github.com/containerd/containerd v1.7.15 3485cfbb1e update containerd binary to v1.7.15 fb92caf2aa ci/validate-pr: Use `::error::` command to print errors 61269e718f github/ci: Check if backport is opened against the expected branch d8b768149b Move dummy DNS server to integration/internal/network 329d403e20 update to go1.21.9 d66589496e vendor: golang.org/x/net v0.23.0 e1ca74361b vendor: golang.org/x/net v0.22.0, golang.org/x/crypto v0.21.0 cf933115b6 Minor fix for illumos support 9160b9fda6 save: Remove platform from config descriptor 0a48d26fbc Fix cases where we are wrapping a nil error c4689034fd daemon: don't call NetworkMode.IsDefault() 4eed3dcdfe api: normalize the default NetworkMode c187f95fe1 CONTRIBUTING.md: update Slack link aff003139c ci: update workflow artifacts retention 1014f481de Restore the SetKey prestart hook. fde80fe2e7 Restore the SetKey prestart hook. 14a8fac092 chore: fix mismatched function names in godoc 61e2199b78 AUTHORS,.mailmap: update with recent contributors ea72f9f72c Dockerfile: update docker CLI to v26.0.0 22726fb63b api: document changed behavior of the `Aliases` field in v1.45 3312b82515 c8d/list: Add a test case for images sharing a top layer ad8a5a5732 c8d/list: Fix diffIDs being outputted instead of chainIDs 0c2d83b5fb c8d/list: Handle unpacked layers when calculating shared size f696e0d2a7 Dockerfile: avoid hardcoding arch combinations for delve 3d2a56e7cf docs/api: add documentation for API v1.45 731a64069f c8d/list: Generate image summary concurrently dade279565 c8d/list: Add `Images` benchmark e7c60a30e6 vendor: github.com/moby/buildkit v0.13.1 2e4ebf032a c8d/list: Pass ctx to setupLabelFilter 153de36b3f c8d/list: Add empty index test case 4ff655f4b8 resolvconf: add //go:build directives to prevent downgrading to go1.16 language 1c03312378 integration: Remove Parallel from TestDiskUsage f512dba037 c8d/list: Fix premature `Images` return 89dc2860ba c8d/list: Handle missing configs in label filter 6f3892dc99 c8d/list: Don't setup label filter if it's not specified fe8fb9b9a1 Dockerfile: update mvdan/shfmt to v3.8.0 4bd30829d1 Dockerfile: update docker compose to v2.25.0 971562b005 Dockerfile: update docker CLI to v26.0.0-rc2 d742659877 rootless: fix `open /etc/docker/plugins: permission denied` 4f46c44725 Dockerfile: update xx to v1.4.0 25c9e6e8df Makefile: generate-files: fix check for empty TMP_OUT 762ec4b60c plugin: fix mounting /etc/hosts when running in UserNS 7b414f5703 daemon: move getUnprivilegedMountFlags to internal package 790c3039d0 libnet: Don't forward to upstream resolvers on internal nw 10bdc7136c builder-next: Add env-var to override runc used by buildkit 1ca89d7eae vendor: google.golang.org/protobuf v1.33.0, github.com/golang/protobuf v1.5.4 f40bdf5f63 Dockerfile: update compose to v2.24.7 3f73d23ea0 Dockerfile: update buildx to v0.13.1 388ecf65bc c8d: Send push metrics to prom bb3ab1edb7 c8d: Send pull metrics to prom da245cab15 c8d: Send history metrics to prometheus 1cfd763214 c8d: Send image delete metrics to prometheus 0ce714a085 images: Export the image actions prometheus counter bcb4794eea Be more explicit about non-TLS TCP access deprecation 0d5ef431a1 docker-py: Temporarily skip `test_commit` and `test_commit_with_changes` 03cddc62f4 api/image-inspect: Remove Container and ContainerConfig ec19fd6fed vendor: github.com/containerd/containerd v1.7.14 d19f6d4b6d vendor: github.com/containerd/ttrpc v1.2.3 a6a445d86b set-up-git.md: clarify URL in git clone command 294fc9762e volume: Don't decrement refcount below 0 eef352b565 devcontainer: Use a separate devcontainer target 5a009cdd5b inte/networking: add isIPv6 flag 2f1a32e3e5 c8d/list: Skip images with non matching platform 72f1f82f28 c8d/list: Remove outdated TODO 52a80b40e2 c8d/list: Extract imageSummary function 288a14e264 c8d/list: Simplify "best" image selection b37ced2551 c8d/list: Count containers by their manifest a535a65c4b c8d/list: Combine size 582de4bc3c c8d/list: Add TestImageList a6e7e67d3a specialimage: Return optional ocispec.Index 1b108bdfeb daemon/c8d: Cache SnapshotService 74e2f23e1a daemon/c8d: Use i.images and i.content e8496b1ee4 imageService: Extract common code from `MakeImageCache` d66177591e c8d/cache: Use the same cache logic as graphdrivers bf30fee58a image/cache: Refactor backend specific code f5a5e3f203 golangci-lint: enable dupword linter 4adc40ac40 fix duplicate words (dupwords) 8921897e3b Ignore bad ndots in host resolv.conf 37545cc644 builder-next: fix missing lock in ensurelayer ef5295cda4 Don't configure IPv6 addr/gw when IPv6 disabled. 49b77753cb builder-next/export: Use leaseutil for descref lease c4fc6c3371 builder-next/executor: Replace removed network.Sample 0f30791a0d vendor: github.com/moby/buildkit v0.13.0 4e8d9a4522 Add IPv6 nameserver to the internal DNS's upstreams. 06628e383a remove repetitive words 21835a5696 inte/networking: rename linkLocal flag into isLinkLocal b32cfc3b3a dockerd-rootless-setuptool.sh: check RootlessKit functionality 49fd8df9b9 Dockerfile: update RootlessKit to v2.0.2 72ec187dfe go.mod: github.com/rootless-containers/rootlesskit/v2 v2.0.2 83cda67f73 go.mod: golang.org/x/sys v0.18.0 57b7ffa7f6 update to go1.21.8 cadb124ab6 daemon: overlay2: remove world writable permission from the lower file b2921509e5 api/search: Reset `is_automated` field to `false` f04f69e366 Accumulate resolv.conf options 7f69142aa0 resolv.conf comments have '#' or ';' in the first column 91d9307738 Replace uses of slices.Clone() 12dea3fa9e devcontainer: Add Golang extension automatically 9f4e824a6e vendor: github.com/miekg/dns v1.1.57 ef681124ca fix typo in error message 7ebd88d2d9 hack: block imports of vendored testify packages 4f30a930ad libn/cnmallocator: migrate tests to gotest.tools/v3 a580544d82 Don't create endpoint config for MAC addr config migration ebf3f8c7fe distribution/xfer: fix pull progress message 2af2496c8c Dockerfile: Update dev cli to v26.0.0-rc1 fc0e5401f2 ci: Update `teststat` to v0.1.25 7b0ab1011c Vendor dependency cycle-free swarmkit 62b33a2604 disable pulling legacy image formats by default 5fe96e234d integration: Reset `OTEL_EXPORTER_OTLP_ENDPOINT` for sub-daemons 84eecc4a30 Revert "integration/TestDaemonProxy: Remove OTEL span" 261dccc98a builder-next: Add `Info` to `emptyProvider` 2c9c5e1c03 vendor: github.com/moby/buildkit v0.13.0-rc3 b649e272bb Allow to enable host loopback and use 10.0.2.2 to connect to the host (OPTIONALLY) e4de4dea5c ci: Make `find` for test reports more specific 9be820d8ca vendor: go.etcd.io/bbolt v1.3.9 da643c0b8a libcontainerd: change the digest used when restoring 9083c2f10d Test DNS on Windows 'nat' networks 44167988c3 c8d/windows: Temporarily skip two failing tests 2d31532a00 otel: Default metrics protocol to http/protobuf 60358bfcab ci(buildkit): dedicated step to build test image f5722da5e0 mobyexporter: Store temporary config descriptor 951e42cd60 builder-next: Replace ResolveImageConfig with ResolveSourceMetadata e01a1c5d09 builder/mobyexporter: Set `image.name` response key fa467caf4d builder-next/mobyexporter: Use OptKeyName const 59ad1690f7 builder-next: Adjust to source changes b04a2dad6b builder/controller: Adjust NewWorkerOpt call bc6d88c09a cmd/dockerd: Fix overriding OTEL resource a79bb1e832 builder-next/exporter: Sync with new signature e68f71259a integration/build: Use fsutil.NewFS dd6992617e integration/build: Use new buildkit progressui 31545c3b67 vendor: github.com/moby/buildkit v0.13.0-rc2 f90b03ee5d go.mod: bump to go 1.21 and use local toolchain when vendoring 16aa7dd67f c8d/pull: Output truncated id for `Pulling fs layer` 881260148f api: omit missing Created field from ImageInspect response 432390320e api/pre-1.44: Default `ReadOnlyNonRecursive` to true 6aea26b431 client: fix connection-errors being shadowed by API version mismatch errors 913478b428 client: doRequest: make sure we return a connection-error 901b90593d client: NegotiateAPIVersion: do not ignore (connection) errors from Ping 349abc64ed client: fix TestPingWithError 05b883bdc8 mounts/validate: Don't check source exists with CreateMountpoint c516804d6f vendor: OTEL v0.46.1 / v1.21.0 83c02f7a11 libnet/ds: remove extra space in error msg 14df52b709 c8d/pull: Don't emit `Downloading` with 0 progress ff5f780f2b c8d/pull: Emit `Pulling fs layer` 5689dabfb3 pkg/streamformatter: Make `progressOutput` concurrency safe 1d473549e8 ci: Require changelog description b2aaf5c2b0 vendor: github.com/containerd/continuity v0.4.3 cbd45e83cf libnet: Replace DeleteAtomic in retry loops with DeleteIdempotent d9e082ff54 libnetwork: resolve: use structured logs for DNS error 8761bffcaf Makefile: Pass PAGER/GIT_PAGER variable 56aeb548b2 integration/TestDaemonProxy: Remove OTEL span 38827ba290 ci: set codecov token bddd892e91 c8d: Adjust "image list" to return only a single item for each image store entry 2aa13e950d awslogs: Replace depreacted WithEndpointResolver usage 70a4a9c969 vendor: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs to v1.32.0 9faf4855d5 Simplify macvlan/ipvlan integration test structure 4eb95d01bc Run the macvlan/ipvlan integration tests 7c2975d2df update to go1.21.7 903412d0fc api/history: Mention empty `Created` 443f56efb0 Set up DNS names for Windows default network b4fbe226e8 Set `Created` to `0001-01-01T00:00:00Z` on older API versions 5bcd2f6860 builder/dockerfile: ADD with best-effort xattrs 999f90ac1c vendor: bump github.com/aws/aws-sdk-go-v2 to v1.24.1 ef7766304c vendor: github.com/containerd/nydus-snapshotter v0.13.7 6932939326 vendor: google.golang.org/genproto/googleapis/rpc 49dd2c1f3d0b 10a72f2504 vendor: cloud.google.com/go/logging v1.8.1 a60fef0c41 vendor: golang.org/x/exp v0.0.0-20231006140011-7918f672742d 03a17a2887 migrate image spec to github.com/moby/docker-image-spec a26c953b94 Add comment explaining network-create flow for Swarm 571af915d5 Don't enforce new validation rules for existing networks b71c2792d2 image/spec: remove link to docs.docker.com "registry" specification 4ab11a1148 vendor: github.com/containerd/containerd v1.7.13 419f5a6372 Make 'internal' bridge networks accessible from host 475019d70a vendor: github.com/prometheus/procfs v0.12.0 63c354aae2 vendor: github.com/prometheus/client_golang v1.17.0 beb97f7fdf Refactor 'resolv.conf' generation. 14503ccebd api/server/middleware: NewVersionMiddleware: add validation e1897cbde4 api/server/middleware:use API-consts in tests 0fef6e1c99 api/server/middleware: VersionMiddleware: improve docs 6b01719ffb api: add MinSupportedAPIVersion const 19a04efa2f api: remove API < v1.24 8758d08bb4 api: remove handling of HostConfig on POST /containers/{id}/start (api < v1.24) ffd877f948 api: remove plain-text error-responses (api < v1.24) b3a0ff9944 api: remove POST /containers/{id}/copy endpoint (api < v1.23) 83f790cccc api: POST /exec/{id}/start: remove support for API < v1.21 d1974aa492 api: remove code for container stats on api < v1.21 ed93110e11 api: update test to reflect reality on Windows 570d5a9645 api: remove code for ContainerInspect on api v1.20 f0dd554e3c api: remove code for ContainerInspect on api < v1.20 dfdf2adf0c api: POST /containers/{id}/kill: remove handling for api < 1.20 2970b320aa api: remove code for adjusting CPU shares (api < v1.19) ef25f0aa52 api: POST /build: remove version-gate for "pull" (api < v1.16) 7fa116830b api: POST /build: remove version-gate for "rm", "force-rm" (api < v1.16) 1b1147e46b api: POST /commit: remove version-gate for "pause" (api < v1.16) d26bdfe226 runconfig: remove fixtures for api < v1.19 f1e6958295 c8d: Use the same logic to get the present images 2c01d53d96 image/cache: Use Platform from ocispec d69729e053 seccomp: add futex_wake syscall (kernel v6.7, libseccomp v2.5.5) 10d344d176 seccomp: add futex_wait syscall (kernel v6.7, libseccomp v2.5.5) df57a080b6 seccomp: add futex_requeue syscall (kernel v6.7, libseccomp v2.5.5) 8826f402f9 seccomp: add map_shadow_stack syscall (kernel v6.6, libseccomp v2.5.5) 6f242f1a28 seccomp: add fchmodat2 syscall (kernel v6.6, libseccomp v2.5.5) 4d0d5ee10d seccomp: add cachestat syscall (kernel v6.5, libseccomp v2.5.5) 1251982cf7 seccomp: add set_mempolicy_home_node syscall (kernel v5.17, libseccomp v2.5.4) 7f1b700227 Dockerfile: update RootlessKit to v2.0.1 f1730a6512 go.mod: github.com/rootless-containers/rootlesskit/v2 v2.0.1 f7192bb0b4 vendor.mod: github.com/google/uuid v1.6.0 91ea04089b image/cache: Ignore Build and Revision on Windows 2ef0b53e51 integration/save: Add tests checking OCI archive output 74d51e8553 plugins: fix panic installing from repo w/ digest e910a79e2b Remove 'VERSION' from the text 9fcea5b933 Fix broken links in project/README.md 10d6f5213a Dockerfile: update docker compose to v2.24.5 9c92c07acf Dockerfile: update dev-shell version of the cli to v25.0.2 89470a7114 libnet: bridge: ignore EINVAL when configuring bridge MTU e37172c613 api/t/network: ValidateIPAM: ignore v6 subnet when IPv6 is disabled c59e93a67b Revert "daemon: automatically set network EnableIPv6 if needed" 83af50aee3 libnet: boltdb: inline getDBhandle() 4d7c11c208 libnet: boltdb: remove PersistConnection 8070a9aa66 libnet: drop TestMultipleControllersWithSameStore 82dda18898 tests: add plugin install test w/ digest dd20bf4862 libcontainerd/supervisor: fix data race 0c3b8ccda7 api: Document `version` in `/build` 2cc627932a Add internal n/w bridge to firewalld docker zone 8c64b85fb9 No inspect 'Config.MacAddress' unless configured. dae33031e0 Only restore a configured MAC addr on restart. a2026ee442 ci: update to docker/bake-action@v4 5a3c463a37 ci: update to codecov/codecov-action@v4 9babc02283 ci: update to actions/download-artifact@v4 and actions/upload-artifact@v4 a83557d747 ci: update to actions/cache@v3 2200c0137f libnetwork/datastore: don't parse file path d21d0884ae libnetwork: share a single datastore with drivers 835cdcac95 update containerd binary to v1.7.13 f4a93b6993 vendor: github.com/moby/buildkit v0.12.5 b20dccba5e vendor: github.com/opencontainers/runc v1.1.12 44bf407d4d update runc binary to v1.1.12 ecb217cf69 hack/make.ps1: Fix go list pattern 3a8191225a gha: update to crazy-max/ghaction-github-runtime@v3 08251978a8 gha: update to docker/login-action@v3 5d396e0533 gha: update to docker/setup-qemu-action@v3 4a1839ef1d gha: update to docker/bake-action@v4 b7fd571b0a gha: update to docker/setup-buildx-action@v3 00a2626b56 gha: update to docker/metadata-action@v5 e27a785f43 gha: update to actions/setup-go@v5 fb53ee6ba3 gha: update to actions/github-script@v7 0ffddc6bb8 gha: update to actions/checkout@v4 987fe37ed1 d/logger/journald: quit waiting when logger closes d53b7d7e46 d/logger/journald: sync logger on close in tests 39c5c16521 d/logger/loggertest: improve TestConcurrent 5792bf7ab3 d/logger/journald: log journal-remote cmd output 982e777d49 d/logger/journald: fix data race in test harness ca40ac030c vendor: google.golang.org/grpc v1.59.0 0818a476e5 vendor: github.com/go-logr/logr v1.3.0 a0b53f6fd2 vendor: golang.org/x/net v0.18.0 2ddec74d59 Remove unused params from etchosts.Build() 5e13f54f57 c8d/save: Handle digested reference same as ID d131f00fff image/save: Fix untagged images not present in index.json 21136865ac libnet: remove arg `options` from (*Endpoint).Leave() a8e8a4cdad libn/d/overlay: drop miss flags from peerAddOp 6ee58c2d29 libnetwork/d/overlay: drop miss flags from peerAdd 905477c8ae logger/journald: drop errDrainDone sentinel d70fe8803c logger/journald: wait no longer than the deadline e94ec8068d logger/journald: use deadline for drain timeout 71bfffdad1 l/journald: make tests compatible with systemd 255 931568032a daemon/logger/loggertest: expand log-follow tests 388ba9a69c Dockerfile: update docker compose to v2.24.3 3eb1527fdb Dockerfile: update dev-shell version of the cli to v25.0.1 7f94acb6ab docs: remove dead links from api verison history 5c2eda6f71 vendor swarmkit v2.0.0-20240125134710-dcda100a8261 96d461d27e builder/windows: Don't set ArgsEscaped for RUN cache probe 877ebbe038 image/cache: Check image platform 96ac22768a image/cache: Restrict cache candidates to locally built images c6156dc51b daemon/imageStore: Mark images built locally 537348763f image/cache: Compare all config fields bd4ff31775 add more //go:build directives to prevent downgrading to go1.16 language e245fb76de internal/sliceutil: add utilities to map values 3147a013fb libnet/ds: remove unused param `key` from List f7ef0e9fc7 libnet/ds: remove unused param `key` from GetObject 3a617e5463 c8d: Use a specific containerd namespace when userns are remapped f7e2357745 image: remove deprecated IDFromDigest 13f46948dd api/types: remove deprecated container-types 4b09bc2145 api/types: remove deprecated service-types 49637d0206 api/types: remove deprecated image-types eccb1a3eb8 api/types: remove deprecated checkpoint-types 0b1921649f api/types: remove deprecated system info types and functions 6f44138269 libnetwork: fix tiny grammar mistake on design.md 9a41cc58d9 libnetwork: fix typo in iptables.go ac2a028dcc api/types: move image options to api/types/image 80c44b4b2e daemon: rename: don't reload endpoint from datastore 250886741b volume/local: Fix cifs url containing spaces f4beb130b0 volume/local: Add tests for parsing nfs/cifs mounts df43311f3d volume/local: Break early if `addr` was specified 9f37672ca8 daemon: only add short cid to aliases for custom networks c25773ecbf cmd/dockerd: newRouterOptions: pass cluster as argument, and slight cleanup 00c9785e2e fix "host-gateway-ip" label not set for builder workers 0d51cf9db8 volume/local: Make host resolution backwards compatible 05d952b246 Dockerfile: update docker compose to v2.24.2 20bd690844 integration-cli: simplify test-file creation 34668a5945 pkg/archive: fixe some unclosed file-handles in tests 1090aaaedd libnetwork: fix some unclosed file-handles in tests c482383458 fix some leaking mounts in tests 43bf65c174 pkg/system: return even richer xattr errors a3a42c459e api/types/image: move GetImageOpts to api/types/backend cd53b7380c Remove generated MAC addresses on restart. fb19f1fc20 c8d/snapshot: Create any platform if not specified 6100190e5c daemon/cluster/executer: Add missing `StartInterval` 17fd6562bf image/save: Fix layers order in OCI manifest 4979605212 image/save: Change layers type to DiffID fcc651972e daemon: return an InvalidParameter error when ep settings are wrong a0466ca8e1 integration-cli: TestInspectAPIMultipleNetworks: use current version 13a384a6fa integration-cli: TestInspectAPIBridgeNetworkSettings121: use current version 52e3fff828 integration-cli: TestPutContainerArchiveErrSymlinkInVolumeToReadOnlyRootfs: use current API 521123944a docs/api: remove version matrices from swagger files d54be2ee6d docs: remove documentation for deprecated API versions < v1.23 64a6cc3afd integration/build: improve some asserts, and add asserts for unhandled errs a88cd68d3e integration/images: improve some asserts, and add asserts for unhandled errs a404017a86 vendor: golang.org/x/tools v0.14.0 41a2aa2ee2 vendor: golang.org/x/oauth2 v0.11.0 2799417da1 vendor: golang.org/x/mod v0.13.0, golang.org/x/tools v0.13.0 407ad89ff0 vendor: golang.org/x/sync v0.5.0 94b4765363 pkg/platforms: internalize in daemon/containerd 0a9bc3b507 libnetwork: Sandbox.ResolveName: refactor ordering of endpoints 058b30023f libnetwork: loosen container IPAM validation 844ca49743 pkg/containerfs: remove deprecated ResolveScopedPath 2767d9ba05 pkg/homedir: remove deprecated Key() and GetShortcutString() f16a2179a6 pkg/system: remove deprecated ErrNotSupportedOperatingSystem, IsOSSupported e2086b941f remove deprecated pkg/loopback (utility package for devicemapper) f07c45e4f2 daemon: remove --oom-score-adjust flag 307fe9c716 Dockerfile: update docker compose to v2.24.1 dfced4b557 Dockerfile: update dev-shell version of the cli to v25.0.0 c655b7dc78 Assert temp output directory is not an empty string a8f7c5ee48 Detect IPv6 support in containers. 0046b16d87 daemon: set libnetwork sandbox key w/o OCI hook 5bbcc41c20 volumes/subpath: Plumb context cb1af229f2 daemon/populateVolumes: Support volume subpath 349a52b279 container: Change comment into debug log 42afac91d7 internal/safepath: Add windows implementation 5841ed4e5e internal/safepath: Adapt k8s openat2 fallback 56bb143a4d internal/safepath: Import k8s safeopen function 3784316d46 internal/safepath: Handle EINTR in unix syscalls 9a0cde66ba internal/safepath: Add linux implementation bfb810445c volumes: Implement subpath mount f2e1105056 Introduce a helper that collects cleanup functions f07387466a daemon/oci: Extract side effects from withMounts 9c8752505f volume/mounts: Rename errors in defer block 5bcbedb7ee API: bump version to 1.45 35789fce99 daemon.images: ImageService.getImage: use named fields in struct literals 7c1914411f daemon/images: ImageService.manifestMatchesPlatform: optimize logger 5581efe7cd rename "ociimage" var to be proper camelCase 66cf6e3a7a rename "image" vars to prevent conflicts with imports c72e458a72 Fix libnetwork/osl test TestAddRemoveInterface 768146b1b0 Fix isGitURL regular expression 585d74bad1 pkg/ioutils: Make subsequent Close attempts noop fbdc02534a De-flake TestSwarmClusterRotateUnlockKey... again... maybe? Bumping docker-cli to version v26.1.4-2-g6eb67bf57, which comprises the following commits: 5bab750c2 cli/command: more go1.19 ("predeclared any") e8bc27d4c vendor: github.com/docker/docker de5c9cf0b96e (v26.1.4-dev) 2acb9c2e8 vendor: github.com/containerd/containerd v1.7.18 230d4d0ba vendor: github.com/containerd/containerd v1.7.17 6d47c06b0 vendor: tags.cncf.io/container-device-interface v0.7.2 a6d757c0e vendor: github.com/Microsoft/hcsshim v0.11.5 c463d968f vendor: github.com/opencontainers/image-spec v1.1.0 0576b3dad update to go1.21.11 60b13f1f8 Dockerfile: update ALPINE_VERSION to 3.20 b600054c5 migrate to new github.com/containerd/platforms package dafe63b08 gha: update to actions/upload-artifact@v4 079107e1b [26.1] vendor: github.com/docker/docker v26.1.3 14d7485d9 vendor: github.com/Microsoft/go-winio v0.6.2 50bb59277 docs: tidy up CDI docs c4767b314 docs: fix json syntax error 258e27438 context list: temporarily add ContextType to JSON output 29cd8591e cli/command/context: list: add test for JSON output e23a63eb4 cli/command/context: test inspecting context with custom metadata 1e52a86d4 cli/command/context: add test-utility to create multiple contexts e382a5f22 plugins/hooks: Don't show empty hooks 26e9ff49c vendor: github.com/docker/docker v26.1.3-dev (8e96db1c328d) 326c7138b OTel: implement missing MeterProvider `ForceFlush` ee359a394 OTel: add `command.time` metric to plugin commands 669108501 Use funcs on DockerCli to return Meter/TracerProviders, not initialize them. Initialize them during DockerCli struct init 81b482ea5 docs: clarify that --data-path-addr doesn't restrict access e64914c89 vendor: github.com/docker/docker v26.1.2-dev (ef1912d8b6ae) c1d70d1fb update to go1.21.10 4add46d68 Add e2e tests for run w/ bad entrypoint ccea7d8a3 Fix hang when container fails to start 1c6a8ecf2 cli-plugins: PluginRunCommand: use cmd.Environ instead of os.Environ 6d1c387af vendor: github.com/docker/docker ac2de55998d4 (v26.1.1) 840016ea0 waitExitOrRemoved: Handle context cancellation aec1d364b vendor: github.com/docker/docker v26.1.0-dev (c8af8ebe4a89) 43cb06e1a hooks: pass command execution error to plugins 9d8320de9 hooks: include full configured command 6ad512068 vendor: github.com/docker/docker v26.1.0-dev (ee8b788538ea) c3243a8cc ci/validate-pr: Use `::error::` command to print errors f92fcdef1 github/ci: Check if backport is opened against the expected branch 745704d7b ci: Require changelog description 762a85a10 Warn about deprecation of windows-dns-proxy flag 501175905 hooks: set expected environment when executing d6796c002 Fix OTLP env var overriding c449c1a49 plugins/hooks: run hooks when exit code != 0 287f482e3 Feature option 'windows-dns-proxy' 867061b00 plugins/templates: break on newlines when printing hooks 718203d50 cli-bin/windows: Add .exe extension 5515b8651 vendor: github.com/docker/docker v26.0.1-0.20240410103514-f9dfd139ec0d+incompatible (master) c1053bf9d vendor: github.com/moby/swarmkit/v2 v2.0.0-20240227173239-911c97650f2e 8a3a7b945 vendor: github.com/containerd/containerd v1.7.15 458580984 docs: add systempaths=unconfined security-opt 5fcbbde4b vendor: golang.org/x/net v0.23.0 4745b957d vendor: golang.org/x/net v0.22.0, golang.org/x/crypto v0.21.0 c7a50ebb9 vendor: golang.org/x/term v0.18.0 9a2133f2d vendor: golang.org/x/sys v0.18.0 0a5bd6c75 update to go1.21.9 cefcba987 otel: capture exit code as int64 ee1b2836a otel: capture whether process was invoked from a terminal 8f45f1495 command: include default otel error handler for the cli 910d5d024 chore: remove backticks and resolve linting issues 2a3b6c03f cli: add go:build tag to the docker telemetry efd82e1e3 Initial otel impl using our utils b6e2eca4b Enable overriding of the otel exporter otlp endpoint via env var for testing purposes 160f65d9d Added some telemetry utils 9a1b0f8bb CONTRIBUTING.md: update Slack link 7c722c08d feat: standardize error for prompt 7ea10d5ce refactor: prompt tests 89db01ef9 cli: add otel sdk tracing and metric providers to the core cli c5016c6d5 cli-plugins: Introduce support for hooks 509123f93 plugin: drop explicit unlink fdb48a066 vendor: github.com/docker/docker v26.0.0 542e82cae plugin: update/improve process lifecycle documentation d68cc0e8d plugin: closer-based plugin notification socket d2ea5adfe fix: flaky prompt termination on reader close test ccfd0b2cc test/ Improve test coverage in volume.go 69575f617 vendor: github.com/docker/docker 8b79278316b5 (master) b70a26dea vendor: github.com/docker/docker 330d777c53fb (v26.0.0-rc3-dev) f96d8e78c docs/deprecated: update status of short cid alias deprecation b120b96ac ci: set DISABLE_WARN_OUTSIDE_CONTAINER=1 for CodeQL action 24186d800 ci: fix CodeQL 2.16.4 autobuild 48b5efee0 Dockerfile: update mvdan/gofumpt to v0.6.0 38c3ff67a vendor: github.com/docker/docker 70e46f2c7c2d (v26.0.0-rc3-dev) f8fc5b6bc scripts/vendor: remove -compat=1.19 a4a79d75c vendor: google.golang.org/protobuf v1.33.0, github.com/golang/protobuf v1.5.4 115c8d56e vendor: github.com/containerd/containerd v1.7.14 939283181 builder: correct the command path for docker build dc4163fb1 docs/deprecated: Deprecate Container fields in image inspect 3da26a5e7 docs: add description and link for --userns flag 4bb2abaa5 docs: typo fixes and other corrections 90c33dbfd deprecate legacy image formats 800a51d6c Set CGO_ENABLED=1 on riscv64 9349f58b8 docs: clarify what the --privileged flag does adb018084 Dockerfile: update to xx 1.4.0 46afd26c4 cli/command: deprecate EventHandler and InitEventHandler 5c54f75f2 cli/command/container: use ping-result for OS-version 617377c04 Describe an 'internal' network. 860b4f3a7 'docker daemon' flags refer to the default bridge 645b97352 vendor: github.com/docker/docker v26.0.0-rc2 3cf2fe0ff docs: deprecate TCP connection without TLS a8379092a vendor: github.com/docker/docker f4c696eef17d62a42 ab9d56057 bake: Add `windows/arm64` target to bin-image-cross 3b7747794 update to go1.21.8 10bf91a02 fix: cli prompt termination exit code 238d659ff Add support for --detach/-d flag in stack rm b086d7276 Add support for --detach flag in stack deploy 5e8023239 vendor: github.com/docker/docker v26.0.0-rc1 d51ba4179 docs: prefer -it over -ti a5b82e9f8 docs: fix typo in tty example abe78b79d chore: `docker help` should not show plugin vendor and version 5786f2068 plugins: fix encoding for OTEL env var passed to plugin 85dcacd78 plugins: set OTEL_RESOURCE_ATTRIBUTES when invoking a plugin acc675014 vendor: github.com/docker/docker c70d7905fbd9 (v26.0.0-dev) 79541b7e2 vendor: google.golang.org/grpc v1.59.0 096ced089 vendor: OTEL v0.46.1 / v1.21.0 f3c77df31 vendor: github.com/prometheus/client_golang v1.17.0 1b42d04d6 vendor: github.com/go-logr/logr v1.3.0 f5a29ff8e vendor: github.com/containerd/containerd v1.7.13 2663c1057 ci: set codecov token 48a670f26 docs: fix invalid daemon.json examples f2e98f9a9 docs: regenerate markdown caf72655f docs: update url scheme for reference docs e24404494 deps: update cli-docs-tool version (v0.7.0) 20b9d489e update to go1.21.7 c514003e6 Fixed typo in bash completion functions ff5b0d18f man/docker-build.1: typo in parameter variable: CID => IID 3b5e81424 cli-plugins/socket: remove use of deprecated distribution uuid package 69ed6588a Cleanup of dockerfiles, compose files and env vars 6b67b9549 Update gha runners and engines used in e2e tests edc09e603 mount: Add `volume-subpath` option 9831fea4d testenv: Add DaemonAPIVersion helper 8bae66271 cli/connhelper/commandconn: inline variables df6220d43 vendor: github.com/docker/docker 86b86412a1b7 (v26.0-dev) 30dd7c131 Minor test fixes necessary for eventually upgrading ci runners and engine version 2c214241f Avoid keeping @docker_cli_[UUID] files c986d09bc docker stack: allow '=' separator in extra_hosts 324309b08 vendor: github.com/docker/docker 9e075f3808a5 (master, v26.0.0-dev) 93ad9fbdf vendor: github.com/moby/swarmkit/v2 v2.0.0-20240125134710-dcda100a8261 69e0f53a0 Uniform volume prune output msg with other prune commands 809eb8cde images: print hint when invoking "docker images" with ambiguous argument b158181a1 cli/command/images: runImages: use proper camel-case for dockerCLI 1328bb338 cli/command/images: runImages: inline intermediate var b123ce652 build(deps): Bump codecov/codecov-action from 3 to 4 1587b70ee Remove dummy circleci config cfa9fef77 tests: add plugin-socket-compatibility tests dfdff11a2 cli/command: don't use pflags.XXXVarP for flags without shorthand 690f63e6d cli/command/container: minor cleanup in attach 53e2e54c2 Dockerfile: update docker compose to v2.24.3 1c4d6d85d scripts: don't hardcode architecture in e2e script 4fa2fe9b9 Replace deprecated types.Image* usage 68dac842a vendor: github.com/docker/docker 43ffb1ee9d5a (v26.0.0-dev) 4b1ed1f44 vendor: github.com/docker/docker v25.0.1 d9294f06b info: remove printSecurityOptionsWarnings, printServerWarnings ec0a62436 docs: update host-gateway-ip to use daemon.json instead of cli flag 469bfc05e tests: add tests for `cli-plugins/socket` 091af560c Dockerfile: update docker compose to v2.24.2 2402dac81 cli/command/container: remove deprecated NewStartOptions b43377a38 cli/command: remove deprecated DockerCliOption, InitializeOpt a71d39bca info: remove printServerWarningsLegacy 8cd3b0042 socket: return from loop after EOF 337dd82d8 vendor: github.com/docker/docker v25.0.0 d633890f9 docs: move base command to docker.md aff4649cb docs: fix broken links to alias pages 852d198bb docs: add documentation for CDI 1f9573bb0 Add Linode docker volume plugin Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-10 15:59:26 +00:00
Bruce Ashfield	59a433c1f2	podman-tui: update to v1.1.0 ... Bumping podman-tui to version v0.9.0-336-g6bcf5993, which comprises the following commits: 6bcf5993 Bump to v1.1.0 d4bee0e9 Bump github.com/containers/podman to v5.1.0 4bd183c1 Bump github.com/BurntSushi/toml from 1.3.2 to 1.4.0 e31f2ee6 Bump github.com/rs/zerolog from 1.32.0 to 1.33.0 b404db37 Bump to v1.1.0-dev 35fb1650 Bump to v1.0.1 834150f0 Bump github.com/containers/podman/v5 from 5.0.2 to 5.0.3 372cedf6 Bump golang.org/x/crypto from 0.22.0 to 0.23.0 f9752fa9 Bump golang.org/x/net from 0.22.0 to 0.23.0 4da6d71f Bump github.com/containers/podman/v5 from 5.0.1 to 5.0.2 a41cf8b3 Bump github.com/containers/common from 0.58.1 to 0.58.2 2aad7a8e Bump golang.org/x/crypto from 0.21.0 to 0.22.0 9fa703c8 Bump github.com/distribution/reference from 0.5.0 to 0.6.0 46ed43e6 Bump github.com/containers/podman/v5 from 5.0.0 to 5.0.1 775d389e Bump github.com/containers/common from 0.58.0 to 0.58.1 ac74c549 Bump github.com/containers/buildah from 1.35.1 to 1.35.2 c3440609 Bump to v1.1.0-dev 47c47d46 Bump to v1.0.0 45253e1e Bump github.com/docker/docker f39102a5 podman v5 b5297884 Bump to v0.19.0-dev 64ea1b82 Bump to v0.18.0 bee2b067 README.md update 445fc4d5 Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 da408b5d Bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3 b138f049 Bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3 ff1f99ca install.md update - ArchLinux (AUR) 52a56ac0 install.md update - Alpine Linux, AlmaLinux and Rocky Linux 34bd6420 golangci-lint update 1.56.2 2afefdd3 Bump github.com/gdamore/tcell/v2 from 2.7.1 to 2.7.4 aba7af2c Bump golang.org/x/crypto from 0.19.0 to 0.21.0 7c81b05b Vagrantfile update (fedora 39) feafd1a9 ghaction update 26620476 Bump tim-actions/get-pr-commits from 1.3.0 to 1.3.1 b793ec2c Bump codecov/codecov-action from 3 to 4 61b81c38 unit test 31fa7523 unit tests 0ec32f51 resolves #438 Substitute env variables in config file 8eb6b865 Bump github.com/gdamore/tcell/v2 from 2.7.0 to 2.7.1 b3cfedb2 README update 341f1b2c unit test coverage 75c926a5 podman-tui installation via homebrew for Mac 6d5c1a0a Bump github.com/containers/podman/v4 from 4.9.2 to 4.9.3 6023f58d Bump golang.org/x/crypto from 0.18.0 to 0.19.0 b8b3cc3d Bump pre-commit/action from 3.0.0 to 3.0.1 1b393f33 Bump github.com/rs/zerolog from 1.31.0 to 1.32.0 20985d53 Bump to v0.18.0-dev b4350927 Bump to v0.17.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-10 15:59:26 +00:00
Bruce Ashfield	c3c9c8a01f	podman: update to 5.1.1 ... Bumping libpod to version v5.1.1-2-gef359624cb, which comprises the following commits: 7a1f39dc4d Bump to v5.1.2-dev bda6eb03dc Bump to v5.1.1 cd0a0d7d6d Update release notes for v5.1.1 aa031ad1ba libpod: do not leak systemd hc startup unit timer d79b94c82b Check AppleHypervisor before accessing it a9377a8ec3 [v5.1] Bump c/common to v0.59.1 4dc75c67f9 [v5.1] pkg/rootless: set _CONTAINERS_USERNS_CONFIGURED ... correctly d5cc37f78a test/e2e: use local skopeo not image 2906582149 [v5.1] Mac PM test: Require pre-installed rosetta 7ad138c3db Fix typo in release notes 515e44be74 Bump to v5.1.1-dev 4e9486dbc6 Bump to v5.1.0 2f343ce778 Release notes for v5.1 8ba3626c94 Add configuration for podmansh 8eff425410 [v5.1] Bump c/* for vendor dance 178600e531 test/e2e: fix new error message 7df3715430 Add Hyper-V option in windows installer 6ad6132987 Only stop chowning volumes once they're not empty 65d26b0cde remote API: restore v4 payload in container inspect 3949bf8af1 Fix windows action trigger acf137b342 Update podman network docs 7207461196 Add Rosetta support for Apple Silicon mac d1a86a4b61 fix incorrect host.containers.internal entry for rootless bridge mode c837ebc44e vendor latest c/common main 97251d0ee6 Bump to v5.1.0-dev 6a8f2e7f29 Bump to v5.1.0-rc1 bd4e4a1d8f Add release notes for v5.1.0 (preliminary) c46884aa93 `podman events`: check for an error after we finish reading events 277312d282 Fix updating connection when SSH port conflict happens 2a609b0f74 rootless: fix reexec to use /proc/self/exe d4e40fedaf ExitWithError() - enforce required exit status & stderr 82f9811a8d ExitWithError() - a few that I missed 44825ab428 [skip-ci] Packit: use only one value for `packages` key for `trigger: commit` copr builds 92338642d1 Revert "Temporarily disable rootless debian e2e testing" 5901bf52b9 CI tests: enforce TMPDIR on tmpfs 6e655c7fd2 use new CI images with tmpfs /tmp e771618531 run e2e test on tmpfs 3122549d6b Update module github.com/crc-org/crc/v2 to v2.36.0 6830d0e3c8 Address CVE-2024-3727 07ed2ddb93 [CI:DOCS] Use checkout@v4 in GH Actions 755fc021f9 ExitWithError() - rmi_test 5e240ab1f5 ExitWithError() - more r files 0c22de7811 ExitWithError() - s files 03f036b515 ExitWithError() - more run_xxx tests 3b1c735b67 Fix podman-remote support for `podman farm build` 71473976ac [CI:DOCS] Trigger windows installer action properly 8433a01aa2 Revert "container stop: kill conmon" 3fa8e98a31 Ensure that containers do not get stuck in stopping 279e2d0cb2 [CI:DOCS] Improvements to make validatepr 9e43e586c9 ExitWithError() - rest of the p files dfbb6ea9ff [CI:DOCS] Update dependency golangci/golangci-lint to v1.58.1 a2cf948f90 Graceful shutdown during podman kube down 521bbab864 test/system: fix broken "podman volume globs" test 6d1098f823 Quadlet/Container: Add GroupAdd option 7bfac4f349 Don't panic if a runtime was configured without paths d4c7ca39fd update c/{buildah,common,image,storage} to latest main 6bdebea8ae update golangci-lint to 1.58 ee5153c545 machine: Add LibKrun provider detection 641cd7c5a2 ExitWithError() - continue tightening b59edad58b fix(deps): update module google.golang.org/protobuf to v1.34.1 303d0b398e test: improve test for powercap presence 9865511d00 fix(deps): update module go.etcd.io/bbolt to v1.3.10 be5cbc443e fix(deps): update module golang.org/x/tools to v0.21.0 36c05b5c6a [skip-ci] RPM: `bats` required only on Fedora 42cc712485 fix(deps): update module golang.org/x/exp to v0.0.0-20240506185415-9bf2ced13842 e3b0e58d2e gpdate and remove parameter settings in `.golangci.yml` 7d12ae0973 ExitWithError() - play_kube_test.go 02b8fd7156 Temporarily disable rootless debian e2e testing 7745854155 fix(deps): update module golang.org/x/crypto to v0.23.0 b520e909e0 CI Docs: Clarify passthrough_envars() comments 87747ca820 Skip machine tests if they don't need to be run e8ef36e26e Update CI VMs to F40, F39, D13 83ee16b9ba ExitWithError() - v files 22eff26916 Update module golang.org/x/term to v0.20.0 431cbffab6 machine: Add provider detection API 419efb9eb5 util: specify a not empty pause dir for root too 1d1dba3843 Add missing option 'healthy' to output of `podman run --help` b09f764ef5 [CI:DOCS] Add info on the quay.io images to the README.md 4fd84190b8 Add a random suffix to healthcheck unit names 7a43c2ed1b test/e2e: remove toolbox image 46f247d880 Also substitute $HOME in runlabel with user's homedir 7f6108233f Update module github.com/cyphar/filepath-securejoin to v0.2.5 275c068df7 ExitWithError() - pod_xxx tests c378f2d03a ExitWithError() -- run_test.go f8115d203c Update module golang.org/x/exp to v0.0.0-20240416160154-fe59bbe5cc7f a96326f608 Update module github.com/shirou/gopsutil/v3 to v3.24.4 61b09333a8 Update module github.com/docker/docker to v26.1.1+incompatible 8942e2dbda GHA: Attempt fix exceeded a secondary rate limit 1bc6f16bd0 vendor ginkgo 2.17.2 into test/tools a140c74ba4 Fix machine volumes with long path and paths with dashes d1f8933a93 Update module google.golang.org/protobuf to v1.34.0 d886d87edf Update module github.com/crc-org/crc/v2 to v2.35.0 c17f7af6b4 Update module github.com/onsi/gomega to v1.33.1 88b80c1df6 test/e2e: podman unshare image mount fix tmpdir leak 0faded53b8 test/e2e: do not leak /tmp/private_file 88a625d319 test/e2e: "persistentVolumeClaim with source" do not leak file eaf60c7fe7 e2e tests: use /var/tmp, not $TMPDIR, as workdirs 60b5488308 Update dependency pytest to v8.1.2 cd6ff71cc3 Remove unncessary lines at the end of specfile summary e412eff33f Clean machine pull cache d2c1de5993 Add krun support to podman machine ca23774b5b Use custom image for make validatepr 9a0ed6929a test/e2e: force systemd cgroup manager d1bfdc7900 e2e and bindings tests: fix $PATH setup 5040c6e390 Makefile: remove useless HACK variable in e2e test 537c21a49a test/e2e: fix volumes and suid/dev/exec options 31034a1b6f test/e2e: volumes and suid/dev/exec options works remote cc6e999f2a test/e2e: fix limits test c2d7b5415f Update module github.com/rootless-containers/rootlesskit/v2 to v2.1.0 3c1c6a44ef Correct option name `ip` -> `ip6` 30e2c923d6 Add the ability to automount images as volumes via play 693ae0ebc6 Add support for image volume subpaths 5f57571d65 Bump Buildah to latest main e8a9c58125 Update Makefile to Go 1.22 for in-container e4c9910aec ExitWithError() - yet more low-hanging fruit 80c3a22440 ExitWithError() - more low-hanging fruit 4da5c5d3aa ExitWithError() - low-hanging fruit c681df35c0 chore: fix function names in comment 3f78c39c50 Remove redundant Prerequisite before build section fa1fd1646e Remove PKG_CONFIG_PATH 3b28cdfb20 Add installation instructions for openSUSE 83dbbc3a51 Replace golang.org/x/exp/slices with slices from std c04d03ef8c Update to go 1.21 c31728ca57 fix(deps): update module github.com/docker/docker to v26.1.0+incompatible c22eefb939 [CI:DOCS] Fix artifact action 333682132a [skip-ci] Packit/rpm: remove el8 jobs and spec conditionals ac04cb4ac5 e2e tests: stop littering 27174ff3fb [CI:DOCS] format podman-pull example as code e7f0c1947e [CI:DOCS] Build & upload release artifacts with GitHub Actions 2681ab23d1 libpod: getHealthCheckLog() remove unessesary check 2ae6d0d4dd add containers.conf healthcheck_events support 33def2eea7 vendor latest c/common b026e1d635 libpod: make healthcheck events more efficient ce9054ff45 libpod: wrap store setup error message e83b2cce82 [skip-ci] Packit: enable CentOS 10 Stream build jobs e58972cd1d pkg/systemd: use fileutils.(Le|E)xists acc78af0c3 pkg/bindings: use fileutils.(Le|E)xists 94c699192f pkg/util: use fileutils.(Le|E)xists 0e8d1ad811 pkg/trust: use fileutils.(Le|E)xists 1991990d5a pkg/specgen: use fileutils.(Le|E)xists aab06ac445 pkg/rootless: use fileutils.(Le|E)xists af24326133 pkg/machine: use fileutils.(Le|E)xists cbffddc72e pkg/domain: use fileutils.(Le|E)xists bd00c6fef9 pkg/api: use fileutils.(Le|E)xists 5656ad40b1 libpod: use fileutils.(Le|E)xists 90304dd507 cmd: use fileutils.(Le|E)xists 598fc516a6 vendor: update containers/{buildah,common,image,storage} a169c4ec5c fix(deps): update module github.com/docker/docker to v26.0.2+incompatible [security] dc68a47d7a fix podman-pod-restart.1.md typo eacc3f07e5 [skip-ci] Packit: switch to EPEL instead of centos-stream+epel-next af78b69208 fix(deps): update module github.com/onsi/gomega to v1.33.0 422eb0e58a Add more annnotation information to podman kupe play man page b1736c472a test/compose: remove compose v1 code 2c61ee9a31 CI: remove compose v1 tests 713c026b4d [CI:DOCS] Fix windows installer action d6b68ecfad fix(deps): update module tags.cncf.io/container-device-interface to v0.7.2 7b3456b5d9 add `list` as an alias to list networks 482ef7bfcf Add support for updating restart policy ddea30e40e Add Compat API for Update be3f075402 Make `podman update` changes persistent 7ef0290a1d Emergency fix (well, skip) for failing bud tests 7c4f2c79ea fix swagger doc for manifest create d4ecae59bd [CI:DOCS] options/network: fix markdown lists 714920512e Makefile: do not hardcode `GOOS` in `podman-remote-static` target 3dc69a01e3 chore(deps): update module golang.org/x/crypto to v0.17.0 [security] 0e291ce760 chore(deps): update dependency setuptools to ~=69.5.0 1600cfffa5 Fix some comments e8055904e1 swagger fix infinitive recursion on some types 5e9725983d install swagger from source f95b9d4e37 Revert "Swap out javascript engine" 5e68fbd132 podman exec CID without command should exit 125 df69b36ee5 (minor) prefetch systemd image before use 49729c82a9 Update go-swagger version 1b6e8d73aa Swap out javascript engine 3418405351 fix(deps): update module github.com/docker/docker to v26.0.1+incompatible 08a49389c8 Add os, arch, and ismanifest to libpod image list e773ed42b3 [CI:DOCS]Initial PR validation 4a07131f83 fix(deps): update github.com/containers/gvisor-tap-vsock digest to d744d71 67c6d7ec80 vendor ginkgo 2.17.1 into test/tools 999d6c0750 fix "concurrent map writes" in network ls compat endpoint 26f866b5df chore(deps): update dependency pytest to v8 2d9159821a e2e: redefine ExitWithError() to require exit code 8de92ec912 docs: fix missleading run/create --expose description 0bedf7f1d2 podman ps: show exposed ports under PORTS as well aee1e1408d rootless: drop function ReadMappingsProc 9d18a48803 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.3 0313693d48 New CI VMs, to give us pasta 2024-04-05 394820c4f0 Add big warning to GHA workflow 7f0268a2e7 GHA: Fix intermittent workflow error 266801bf2d fix(deps): update module golang.org/x/tools to v0.20.0 847ca1f9ea e2e tests: remove requirement for fuse-overlayfs 36e4d512b3 docs: update Quadlet volume Options desc b8670a3834 fix(deps): update module golang.org/x/sync to v0.7.0 0b36126e92 Fix relabeling failures with Z/z volumes on Mac f8533c71c4 fix(deps): update module golang.org/x/net to v0.24.0 b9a8a2c61c Makefile: fix annoying errors in docs generation 59ee130048 chore: fix function names in comment a40cf3195a Bump tags.cncf.io/container-device-interface to v0.7.1 3f83164526 fix(deps): update module golang.org/x/crypto to v0.22.0 3560ccd5df Detect unhandled reboots and require user intervention fcf9327773 podman --runroot: remove 50 char length restriction 10995192f8 update github.com/rootless-containers/rootlesskit to v2 156ae500f2 Update module github.com/gorilla/schema to v1.3.0 beb4fd1b4a Update dependency requests-mock to ~=1.12.1 e8f26699df Update module github.com/crc-org/crc/v2 to v2.34.1 f2c365c6f6 rm --force work for more than one arg 71f6f50ee1 [CI:DOCS] Update kube docs 81d2ef889b fix(deps): update module github.com/shirou/gopsutil/v3 to v3.24.3 0f949d884c [CI:DOCS] Add GitHub action to update version on Podman.io ccb71f9ffa [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.2 ff133a544d Windows: clean up temporary perl install 498445871c pkg/util: FindDeviceNodes() ignore ENOENT errors 549dbf8327 [CI:DOCS] build deps: make-validate needs docs a61ae8c0a9 test/system: add rootless-netns test for setup errors ce04fbc16a vendor latest c/common main 519a66c6a9 container: do not chown to dest target with U fbd6df92d4 [CI:DOCS] golangci-lint: update deprecated flags d27313ad10 systests: conditionalize slirp4netns tests e697631af9 CI: systests: instrument flaky tests d2143fac59 s3fs docs 7d68362cf5 test: do not skip tests under rootless d3927f9076 Add note about host networking to Kube PublishPort option 1a99d87746 Inject additional build tags from the environment d81319eb71 libpod: use original IDs if idmap is provided f3434298df Switch back to checking out the same branch the action script runs in f7b9168649 docs/podman-login: Give an example of writing the persistent path aab4674feb CI: Bump VMs to 2024-03-28 4c2a44ef9b [skip-ci] Update dawidd6/action-send-mail action to v3.12.0 fc18dbad70 fix(deps): update module github.com/openshift/imagebuilder to v1.2.7 ffb8b2dc36 Fix reference to deprecated types.Info c0e32e93c0 Use logformatter for podman_machine_windows_task d305e70af8 applehv: Print vfkit logs in --log-level debug 23bf357fc3 [CI:DOCS]Add Mario to reviewers list c8e1e0034a [CI:DOCS] Document CI-maintenance job addition 48b8d7f8be Add golang 1.21 update warning b56331cd2f Add rootless network command to `podman info` 80e2bc6966 libpod: don't warn about cgroupsv1 on FreeBSD c62c74970f hyperv: error if not admin 83671f95d8 Properly parse stderr when updating container status 492f0b7c5f [skip-ci] Packit: specify fedora-latest in propose-downstream 11415b3e74 Use built-in ssh impl for all non-pty operations 83fe867c14 Add support for annotations a6ffb5656f hyperv: fix machine rm -r f632663f26 [skip-ci] Packit: Enable CentOS Stream 10 update job 3c611c47e4 5.0 release note fix typo in cgroupv1 env var 3a9968ef81 fix remote build isolation on client side 17aa152459 chore: remove repetitive words b2d0b92db2 Dont save remote context in temp file but stream and extract 493179be45 fix remote build isolation when server runs as root 4740367330 util: use private propagation with bind 9a13b8f17d util: add some tests for ProcessOptions 50d764b0e6 util: refactor ProcessOptions into an internal function 49ab250cf9 util: rename files to snake case c03256e23c Add LoongArch support for libpod f2073ca397 fix(deps): update github.com/containers/common digest to bc5f97c 5e017a87a0 [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.1 5fe1945e41 fix(deps): update module github.com/docker/docker to v25.0.5+incompatible [security] 77c4cb5721 fix(deps): update module github.com/onsi/gomega to v1.32.0 c66400f624 [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.0 a872003a2a Update module github.com/cpuguy83/go-md2man/v2 to v2.0.4 b1fd03f9f5 Fix type-o 3f2b8bb314 Use correct extension in suite aa5c4879b4 minikube: instrument tests, to allow debugging failures 15b8bb72a8 libpod: restart always reconfigure the netns dc1795b4b2 use new c/common pasta2 setup logic to fix dns 2566ee2f38 utils: drop conversion float->string->float 816c7279e1 utils: do not generate duplicate range f16ab115ed logformatter: handle Windows logs 0e38815387 utils: add test for the new function cda3dc83d8 utils: move rootless code to a new function 079bfb085a CVE-2024-1753 fix for main 1141962e2a xref-helpmsgs-manpages: cross-check Commands.rst 23433ec7bd test/system: Add support for multipath routes in pasta networking tests 73a12b0c07 [skip-ci] rpm: use macro supported vendoring 7fbdd9e6e2 Adjust to the standard location of gvforwarder used in new images 7711833827 Makefile: add target `podman-remote-static` fdad9ab1ff Switch to 5.x WSL machine os stream using new automation 3a9eef4bee Cleanup build scratch dir if remote end disconnects while passing the context ee4b1efb24 bump main to 5.1.0-dev 3f068d1973 Use faster gzip for compression for 3x speedup for sending large contexts to remote e82d196269 pkg/machine: make checkExclusiveActiveVM race free b238303a40 pkg/machine/wsl: remove unused CheckExclusiveActiveVM() c9a5c4b943 pkg/machine: CheckExclusiveActiveVM should also check for starting 1dfd3d3d12 pkg/machine: refresh config after we hold lock d5e0ecc619 Update dependency setuptools to ~=69.2.0 60a3eb8491 [skip-ci] rpm: update containers-common dep on f40+ 2ff5716b7e fix invalid HTTP header values when hijacking a connection c6ae7fd145 Add doc to build podman on windows without MSYS 1901403eda Removing CRI-O related annotations 83e671a2c5 fix(deps): update module github.com/containers/ocicrypt to v1.1.10 d7fa0aa351 Pass the restart policy to the individual containers cb81da9bee kube play: always pull when both imagePullPolicy and tag are missing Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-10 15:59:26 +00:00
Bruce Ashfield	ea2a7de432	containerd: update to 2.0.0-rc.3 ... Bumping containerd to version v2.0.0-rc.3-19-g741c4bde5, which comprises the following commits: 531da9960 Reduce scope of permissions in stale workflow ed64e6503 core/mount: remove logrus import ea8265fb1 core/transfer/local: remove logrus import 75fd7a5a7 pkg/shim: remove logrus imports 38e2f0038 Adds a mutex to protect fallback host 587ee80f6 pkg/tracing: LogrusHook.Fire: micro-optimisation ccf793812 pkg/tracing: remove direct use of github.com/sirupsen/logrus 4203e2de8 pkg/tracing/plugin: rename var that collided with import e2e09b384 pkg/tracing: rename func that shadowed builtin, rm makeSpanName e69ad9442 build(deps): bump the k8s group across 1 directory with 4 updates 5b8dfbd11 Allow proxy plugins to have capabilities cc2cedae0 Revert "install-runc: pin Go to 1.21" 3c097352a update runc binary to v1.1.13 8c13ed1b8 Prepare v2.0.0-rc.3 release 86b8a8824 Remove pkg/seed 09d3e20d3 Allow running test in usernamespace 8bcffa944 KEP-3619: Fine grained SupplementalGroups control 87dd4309d vendor: github.com/containerd/platforms v0.2.1 939135ae3 CI: golangci-lint v1.59.1 df7f6ba5b ctr: return explicit errors for flags unsupported by transfer service 686a610ee build(deps): bump github.com/checkpoint-restore/checkpointctl 156458e54 build(deps): bump the golang-x group with 2 updates 08c1e12e9 CI: add back EL 8 149ca6880 Update hcsshim tag to 0.12.4 b1a23c495 Fail integration test early when a plugin load fails d23c4b8b5 Use unix and windows specific connection error checks 02b6c6939 Allow fallback across default ports 80ce8bd61 build(deps): bump github.com/containerd/containerd/api cde2527fc ctr: pull: Do not ignore labels when transfer service is used 1c123efb4 Update Go version to 1.22.4 e1e793e4a Update rockylinux vagrant build 5611fdd4a Transfer: Push: Enable to specify platforms 0e8cc9146 Transfer: Push: fix failure on pushing duplicated blobs 4123170a3 *: export RemoveVolatileOption for CRI image volumes 3e71ccafc Add type alias for event Envelope da1d9672f Enable imgcrypt in cri pull 9857afda4 Add vendor for github.com/containerd/imgcrypt 359d84351 Update api minimum go version to 1.21 2d73340c2 Explicitly set release latest to false ca59fb0b4 Cleanup shim manager configuration 9831a62d7 auth: add span to FetchToken helpers 58be88189 sandbox: do retry for wait to remote sandbox controller Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-10 15:59:26 +00:00
Bruce Ashfield	c138943fed	podman-compose: switch to main branch ... The upstream project has made the "interesting" decision to delete the stable branch and move to "main" for recent releases. So rather than being able to simply switch for our updates, we have to switch to main on all releases that had podman-compose recipes using the stable branch. Luckily, the commit hashes haven't changed, so we only have to modify the branch in the SRC_URI. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-07-10 14:43:11 +00:00
Marcus Flyckt	e8214becb9	podman: Use slirp4netns instead of pasta ... podman uses pasta as the default rootless network command since 5.0.0, but only slirp4netns is available when building for Yocto. This commit adds a containers.conf file setting slirp4netns as default rootless command if 'rootless' is set in PACKAGECONFIG Signed-off-by: Marcus Flyckt <mafl@kvaser.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-31 16:20:17 +00:00
Bruce Ashfield	f487ea4aa0	lxc: update to v6.0.0 ... Bumping lxc to version v6.0.0, which comprises the following commits: 3dee5fb88 Release LXC 6.0.0 17ac6f691 lxc.spec: Align SPDX license id 5fe2de84c Makefile: Align SPDX license id 97f93be72 meson: Align SPDX license id d4cd3741d COPYING: Clarify licensing of files without SPDX 8e67eb07c doc: Add SPDX headers and remove Author field cb94edf53 src/include: Add SPDX headers 7bc33ef6e src/tests: Add SPDX headers 007642c89 hooks: Add SPDX headers 1e9e66be3 lxc.spec: Clear default changelog 202d649d1 lxc.spec: Use SPDX 85abd4026 template: Use SPDX a074b3d27 config/yum: Use SPDX header 7ed43e5e9 COPYING: Remove whitespace 522721216 MAINTAINERS: Remove Dwight from the maintainer list 08bf8b9e2 lxc-checkconfig: Fix shellcheck 0f18db543 lxc-checkconfig: Show namespace limits f71b8e3f8 lxc-ls: list names with whitespaces in `--active`. 816b8973d lxc/tools: set default log_priority to ERROR 989ea3969 tools/lxc_autostart: don't fail when there are no containers dc4df2335 lxc/lxccontainer: specify file mode in open() call inside mod_rdep 630b46ed2 lxc/confile: do not print excess space before scale suffix for time.offset.boot 796f2ccb7 lxc/confile: do not print newline symbol in getter for lxc.time.offset.* dcc4fb929 tests/parse_config_file: fix some typos 6fea67429 tests/parse_config_file: add tests for lxc.time.offset.* ad8f55445 tree-wide: replace multiply_overflow with check_mul_overflow 4464cee19 lxccontainer: rework copy_file() 9d1aa932d lxccontainer: improve mod_rdep() 81c1bbf45 Revert "lxccontainer: fixes" 82fe01821 src/lxc/syscall_numbers.h: drop define -1 590a95d83 rexec: Avoid invalid free in rexec failure path f9978b179 README: Correct 'armvl7' to 'armv7l' 046b63cd2 unshare: simplify lookup_name 7452ee8ab lxc-unshare: fix an buffer overflow issue in lxc_unshare e88883445 lxc-net: Enable IPv6 by default d78ca00bc tests/meson: attempt to fix ossfuzz builds d18f993b3 github: master -> main 86799f554 meson: link with liblxc dynamically everywhere if possible b90fecfda network: use IN_LIBLXC 9eee450d2 storage_utils: move get_fssize to utils 6eb0a73e2 storage_utils: unhide and rename is_valid_storage_type to lxc_is_valid_storage_type 42eeffcb0 confile: unhide lxc_config_parse_arch() helper 9bb318881 conf: reorganize/split code to utils.c 863c59dc3 conf: reorganize/split code to idmap_utils.c b7591ad49 confile: unhide lxc_config_define*() helpers f14656ebf meson: introduce IN_LIBLXC preprocessor macro 672b2172d confile: move lxc_fill_elevated_privileges() to tools/lxc_attach 8f9733d75 tests: remove old and broken cgroup handling code from tests d51ea224e config: apparmor: add AppArmor profile for lxc-copy 627bb9460 tests: lxc-test-usernic: use iproute tool instead of brctl df0665b6d oci: resolve cross-filesystem blob caching failure ec85e5ca4 lxc-test-usernic: drop cgroup handling 27ec0b0f6 test-usernic: don't use ifconfig 44e845b3c Add x32 to the list of recognized architectures 07e3a516e lxc-download, lxc-local: preserve xattrs on unpack 9ac7c4895 tree-wide: use container_uses_namespace() in less trivial cases 64341ce7b tree-wide: use container_uses_namespace() helper 6b40e66c1 Fix error message. c8189ee2a Add verbose output in download template. 84cc3155a Align columns in lxc-download.in template 872db5424 build: add more options for customizing install df17ac417 Add loongarch64 support 112d5615e build(deps): bump actions/upload-artifact from 3 to 4 789457f1a config: try to create workdir if not exist 86f5c1226 lxc-local: Add --no-dev option to exclude /dev from the fstree f885a3c56 lxc-local: Re-organize code to use more functions 7c025072e lxc-local: Improve usage info faa38a197 lxc-local: Change LXC_CONFIG to LXC_METADATA to match args and be more clear d65fe1b27 Disable IPv6 link-local addresses for bridged veth 8cff8fa1a don't try to delete vlan 0 from veth 0e932812a conf: fix ephemeral copies abffab441 config/init: Drop upstart files 79a4a3cf8 doc: remove the warning mentionning upstart 7bf1695d0 hooks/ubuntu-cloud-prep: remove upstart handling fb73c18d2 meson: Remove support for upstart cc6819c69 reset root_nsuid_map and root_nsgid_map when idmaps is cleared a87d6fcc9 lxc/checkconfig: use multiline `echo` f3e01fa80 lxc/checkconfig: replace `echo -n` by printf ba4f810bc lxc/checkconfig: minor cosmetic change d52c345c8 lxc/checkconfig: avoid subshell (SC2235) f84f03d1d lxc/checkconfig: remove superfluous (..) around test command (SC2234) 74b9faa64 lxc/checkconfig: check exit code directly (SC2181) 5cc69e440 lxc/checkconfig: replace `! -z` by `-n` (SC2236) a4684eb11 lxc/checkconfig: add missing quotes to please shellcheck 8a611c0b2 lxc/checkconfig: remove some unneeded `echo -n` cb2574319 lxc/checkconfig: replace `type` by `command` 003efe6db lxc/checkconfig: replace `cat | grep` with `grep` adadfa372 lxc/lxccontainer: fix do_lxcapi_set_timeout retval c02367e59 containers in the FREEZING state also need to be unfreeze aca53bcf7 build(deps): bump actions/checkout from 3 to 4 84169158f lxccontainer.h: Move new fields to the end e2696df93 Remove references to LXD 7cec54455 Update console perms to 0600 3f45443fd Fix start api call to split quoted strings in execute or init command. fbc31691e github: Update for main branch 69e51b919 CONTRIBUTING: add a note on AI generated code 84cfe9772 get_hierarchy: dont WARN about no usable controller 64167f906 Add libarchive tar support for lxc download 213e2f68d github: Add DCO/target tests cf2b20209 explicitly convert *mainloop_handler to __u64 8575ffeb7 tests: fix parse_config_file seccomp test ca25f3bf6 src/tests: Fix container creation errors 539c39772 rename functions which clash with libsystemd's b670f0e75 commands: support timeout in LXC_CMD_GET_STATE 0fed82b26 lxccontainer: extend lxccontainer API with set_timeout 7fd671dbc mainloop: io_uring: disable IORING_POLL_ADD_MULTI 715fb4eff terminal: make a terminal FDs non-blocking 7eff16cc4 file_utils: add fd_make_nonblocking helper 747c4df31 file_utils: rename fd_make_nonblocking to fd_make_blocking ebea2b5a9 setproctitle(): Handle potential NULL return from strrchr() f7f15b20a make setproctitle()'s /proc/pid/stat parsing safe 890de0759 lsm: apparmor: allow to change mount propagation 5894cf310 console-log test: make sure container is stopped before restarting 820d2a2b3 switch from libsystemd's dbus to dbus-1 3c1453a38 tree-wide: convert fcntl(FD_CLOEXEC) to SOCK_CLOEXEC 4ea0b361f Allow fuse mounts in apparmor start-container. 1a2da75b6 Add support for squashfs images in oci via atomfs db3cbfa75 apparmor: don't try to mmap empty files 304bf58fa initutils: use PRIu64 for uint64_t in setproctitle 4de047f51 lxc-net.in: fix nftables syntax for IPv6 NAT 311bb8c53 Fix strlcat's return value checks 588b53b19 Fix typo: bev_type -> bdev_type 7914c259f drop broken lxc-test-fuzzers 849d80877 Fix build error on sparc64 caused by using the gold linker 43ad7816d lxc-default-cgns apparmor profile: allow overlay mounts 4fa83282b lxc_user_nic: fix get_mtu() error handling 1b0469530 Patching an incoming CVE (CVE-2022-47952) a8e1070c6 build: force linking against liblxc c27ea96f7 checkconfig: Fix filesystem capability check 3f361da61 checkconfig: Tweak cgroup handling 3ab04999d checkconfig: Tweak layout e027ca711 checkconfig: Hide version if no lxc-start 914fec51b checkconfig: Fix mixed tabs/spaces 70b176b0d src/lxc/meson.build: fix build without apparmor 42b22da6d cgroups: fix cgroup layout detection in __initialize_cgroups 0072919dd state: additional check in lxc_wait to prevent OOB 62b94d3ec cgroups: check snprintf retval in unpriv_systemd_create_scope 93d545e37 cgroups: fix buffer out-of-bounds access in enable_controllers_delegation f8aa61f97 network: always initialize struct nl_handler 6ea4a6c06 apparmor: properly check lxc_strmmap ret value b37cce95b github: fix coverity (add libpam-dev) a8dcf88d0 github: fix coverity build 7e7393413 conf: ensure mount tunnel is a dependent mount 01ae6d471 apparmor: allow shared mounts in start-container.in 81d94a4ee conf: create separate peer group for container's root 68020412c cgroups: only allocate user namespace if we have to 27f69d45b cgroups: use userns_exec_full() during cgroup removal 1029c2a06 README: remove lgtm dcf85308c meson.build: strip newline for variable assignments 8aac58866 meson.build: strip newlines from git output 16c6ff226 tests: lxc-test-reboot: Fix build on ia64 64eb31d02 src/lxc/meson.build: fix the static library path c6c705bfa build: drop build-time systemd dependency f321cd610 build: use cc.get_define to detect FS_CONFIG_* symbols 5aff4ea37 build: only build init.lxc.static if libcap is statically linkable c1f87c811 build: fix handling of dependancies to fix build on openSUSE bc318926d cgroups: fix -Waddress warning 4deaa28c0 Unroll IN_SET since the max usage is 2 elements check 73fd9bf55 tests: lxc-test-checkpoint-restore: use trap to do cleanup 8480c56a4 tools: lxc-destroy: update help message for --force 3cac3fce4 build: add libsystemd to oss fuzz dependencies f7cadaa34 lxc/attach: Detect EACCES from execvp and convert to 126 exit status 4ebca5a00 lxc-attach: Fix lost return codes of spawned processes that are killed 09233897b Update README.md 4a66dabf8 conf: allow cross-device links dc4f1220f build(deps): bump actions/checkout from 2 to 3 2b802090f Update cifuzz.yml 20cc78456 fix error message when use tools with -? option b0abedf60 use sd_bus_call_method_async to replace the asyncv one 589a930f1 tree-wide: split open helpers into open_utils.h 7b1836bce build: prevent the inclusion of linux/mount.h with a hack da8c29853 mount_utils: remove conf.h include 74c2f58e1 mount: move mount utilities from syscall_wrappers.h into mount_utils.h 68cf56489 tree-wide: minimize liburing.h inclusion 06f99c259 meson: fix docbook2x detection 133aa416c tree-wide: use struct open_how directly 63468abd3 tree-wide: use struct clone_args directly 4771699fd tree-wide: wipe direct or indirect linux/mount.h inclusion 16ebb29dc meson.build: allow explicit distrosysconfdir cbabe8abf build: check for FS_CONFIG_* header symbol in sys/mount.h ef1e0607b build: detect sys/pidfd.h availability c1115e150 build: detect where struct mount_attr is declared e452c8945 gitignore: Simplify 32a071519 lxc-usernsexec: allow to select which {g,u}id to switch to 7f6643071 README: update security mails 5e704fe38 meson.build: fix build without stack-protector 7d7235489 meson.build: fix build with -Dcapabilities=false 8ee887908 src/lxc/log.h: fix STRERROR_R_CHAR_P 353f0f992 meson: add remaining still-in-use config checks 3d360cf9d Store mount options in correct variable df3301046 Fix off-by-one error constructing mount options 8ee615c27 add check for statvfs 07a00b78f start: fix namespace sharing eae44ce19 conf: fix append_ttyname() 6c50e09f2 start: record inherited namespaces earlier to make it available for idmapped rootfs setup 7317d2a8a start: don't overwrite file descriptors during namespace preservation fc133a9f3 conf: log file descriptors on error during idmapped mount setup 26de6cbc8 fix for issue 4026: set broadcast to 0.0.0.0 for /31 and /32 c55353f84 use systemd dbus StartTransientUnit for unpriv cgroup2 b203e1a14 Fix uninitialized read in parse_cap when libcap is not used e73520adf meson: Set DEVEL flag post release f4d02217e tools: Provide multicall lxc binary 289d6413e meson: Generate compile commands by iterating over an array 132ff8e28 lxccontainer: rework copy_file() f357cb290 lxccontainer: improve mod_rdep() b576a47d5 Read list until process exits We also: - drop two patches that were backported - refresh the context of one Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:23:51 +00:00
Bruce Ashfield	3373478346	containerd: update to v2.0.0-rc.2 ... Bumping containerd to version v2.0.0-rc.2-12-g5d2c988a5, which comprises the following commits: 446e63579 remove uses of platforms.Platform alias 22f2af40c update pause image to 3.10 65024e6fd core/image: fix usage of "unknown" platform 8b3060717 Provide runtime options in plugin info 332caf1a1 Provide ability to set lo up without CNI 288f0592e Prepare release notes for v2.0.0-rc.2 f24a95185 build(deps): bump github.com/prometheus/client_golang 8b2a69c19 build(deps): bump golangci/golangci-lint-action from 5 to 6 96ff18d37 build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3 1cae3dc9b update ttrpc to 1.2.4 e2251f948 Update instrumentation fuzzer with new flag ef76a90e9 Update platforms package to v0.2.0 0b113d78d doc: add the description of sandboxer and io_type 7cead8800 cri: restart created container with correct io type 42f778fc1 modify streaming io url form 25c2f690a Update toolchain to Go 1.22.3 681a083fa Update unpacker to always fetch all 2788604e4 Update ctr image pull all platforms 58be88189 sandbox: do retry for wait to remote sandbox controller 059731775 Preserve CL_UNPRIVILEGED locked flags during remount of bind mounts 9a9a8c46a Don't require vagrant tests in merge queues d9dc2811a fix: delete sockets on shim exit 41dc94ee1 CI: bump up golangci-lint to v1.58.0 9ecfac7f6 Integration: Change to grpc.NewClient 8c6183d74 Add lease test for metadata snapshotter c7fb8a925 Update metadata snapshotter to lease on exists b8dfb4d8f cri: support io by streaming api 3b065cddd CI: skip test in arm64 CI 6c3c5376f critools-version: v1.30.0 b488e76db build(deps): bump google.golang.org/protobuf from 1.33.0 to 1.34.1 a6e417dc6 build(deps): bump go.etcd.io/bbolt from 1.3.9 to 1.3.10 4401c3cb7 build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.1 to 2.2.2 42e02c6c0 build(deps): bump golang.org/x/sys in the golang-x group 88b52119c Update api version to v1.8.0-rc.0 1c9c64f31 Update release procedure to mention api replace e69efd56d Add go mod replace when proto changes happen 678137199 sandbox: remove PID() in sandbox client 13f2fa1de remove go1.21.9 from CI matrix f0363a7f6 Chore: Simplify some syscall error checks 99ad11a00 core/metadata: failfast on content.Commit 3fb84403b CI: bump up crun to 1.15 55fcebffc Prepare release notes for api/v1.8.0 b811a8879 Add API release action b8060d641 Update ctr shim subcommand to task v3 f1e265b13 core/runtime: Check shim PluginInfo to enforce idmap support 05a3171bb Update transfer proxy to support ttrpc ec04e4f63 Add streaming proxy fe01cad20 Cleanup local transfer interface 171fc1434 Update release doc to mention API versioning 2ac2b9c90 Make api a Go sub-module e1b94c0e7 Move protobuf package under pkg 3e9cace72 Move runtimeoptions to api directory 4a4550777 Move runc options to api directory 25a288662 Fix v2 migrate for testutil package fb1f15d30 docs: correct the typo in the documentation 2df04b403 build(deps): bump the otel group with 8 updates 950db7eb7 build(deps): bump the k8s group across 1 directory with 4 updates 93690baf4 build(deps): bump github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus 4c753d124 go.mod: k8s.io/cri-api v0.30.0 de38490ed sandbox: merge address and protocol to one url c3b306240 add task api endpoint in task create options 72fe47b2a add task api endpoint in oci proto b1fefccc7 sandbox: store endpoint in cri sandboxStore f6e0cf189 sandbox: add address info in Start and Status response 15782881e go.mod: go 1.22 2d5689434 CI: use Go 1.22 by default fef78c102 install-runc: pin Go to 1.21 11d8beff8 optimize error logs by providing absolute file paths 81a9df625 build(deps): bump github.com/urfave/cli/v2 from 2.27.1 to 2.27.2 c001a7056 build(deps): bump lycheeverse/lychee-action from 1.9.3 to 1.10.0 6df759e24 build(deps): bump golangci/golangci-lint-action from 4 to 5 b7c977414 container.Checkpoint(), WithRestoreImage(): use ocispec.AnnotationRefName 8a8c3e221 pkg/cri/server/base: log CRI config as embedded JSON f62edda5a pkg/cri/server/base: use structured log for CRI plugin startup e07b63d84 document usage and design of blockfile snapshotter b6bd12f13 Add Syself Autopilot to adopters 7bc476001 ADOPTERS.md: Fix Actuated italics 416741675 Perform file sync outside of lock on Commit c27bcdc56 cri: introspectRuntimeFeatures: fix nil panic dfdfa206f Update for latest updates to release tool 53c9e6f86 Update release process after 1.7 a12acedfa sandbox: make a independent shim plugin 9ee3bfaba images: tests: Fix typos in the tests c51463010 docs: update registry config guide 7bd4d348e add info of exited event 218e2cf7c Return correct error if CRIU binary is missing bb9d923aa content: add a BlobReadSeeker func to allow multipart blob streaming Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:23:51 +00:00
Bruce Ashfield	7179de293c	buildah: update to 1.36 ... Bumping buildah to version v1.36.0, which comprises the following commits: 6ceba8838 Bump to v1.36.0 c09e08b53 build: be more selective about specifying the default OS 3fa5531ca Bump to c/common v0.59.0 4d1690bc3 Fix buildah prune --help showing the same example twice 208b7111e fix(deps): update module github.com/onsi/ginkgo/v2 to v2.18.0 c7937cd1d fix(deps): update module github.com/containers/image/v5 to v5.31.0 183582f03 bud tests: fix breakage when vendoring into podman de8510c9d Integration tests: fake up a replacement for nixery.dev/shell d9191e17c copierWithSubprocess(): try to capture stderr on io.ErrClosedPipe 97382f928 Don't expand RUN heredocs ourselves, let the shell do it 864a40cbd Don't leak temp files on failures 97d44ab9c Add release note template to split dependency chores 4a524737f fix CentOS/RHEL build - no BATS there 420949a5a fix(deps): update module github.com/containers/luksy to v0.0.0-20240506205542-84b50f50f3ee bbab575ff Address CVE-2024-3727 6a48ae700 chore(deps): update module github.com/opencontainers/runtime-spec to v1.2.0 d5b2e3c41 Builder.cdiSetupDevicesInSpecdefConfig(): use configured CDI dirs da4e2d7ad Setting --arch should set the TARGETARCH build arg 6f1f687c3 fix(deps): update module golang.org/x/exp to v0.0.0-20240416160154-fe59bbe5cc7f cd1960725 [CI:DOCS] Add link to Buildah image page to README.md f6d49125a Don't set GOTOOLCHAIN=local a04741d9f fix(deps): update module github.com/cyphar/filepath-securejoin to v0.2.5 53f2dc231 Makefile: set GOTOOLCHAIN=local e0077e8c6 Integration tests: switch some base images fdfd2237d containerImageRef.NewImageSource: merge the tar filters f2825bf7b fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.2 2c1c73169 fix(deps): update module github.com/containers/luksy to v0.0.0-20240408185936-afd8e7619947 7688d880d Disable packit builds for centos-stream+epel-next-8 7425f6f8f Makefile: add missing files to $(SOURCES) fbd2b7db4 CI VMs: bump to new versions with tmpfs /tmp 89ee4f4b0 chore(deps): update module golang.org/x/net to v0.23.0 [security] c01061e47 integration test: handle new labels in "bud and test --unsetlabel" f86c2748e Switch packit configuration to use epel-9-$arch ... 14d964d92 Give unit tests a bit more time 8bb87aefa Integration tests: remove a couple of duplicated tests 3e756d507 Integration tests: whitespace tweaks 8ee7bebd7 Integration tests: don't remove images at start or end of test c7f088142 Integration tests: use cached images more b213c5e7a Integration tests _prefetch: use registry configs 8bdd6a66d internal: use fileutils.(Le|E)xists 441bdc927 pkg/parse: use fileutils.(Le|E)xists 705338379 buildah: use fileutils.(Le|E)xists 9dcd1cc9a chroot: use fileutils.(Le|E)xists 358814f69 vendor: update containers/(common|storage) be74b733f Fix issue/pr lock workflow a99fe1513 [CI:DOCS] Add golang 1.21 update warning 77400c4fc heredoc: honor inline COPY irrespective of ignorefiles ff13a08c9 Update install.md 5b414ad08 source-push: add support for --digestfile d9129b463 Fix caching when mounting a cached stage with COPY/ADD 58579ba65 fix(deps): update github.com/containers/luksy digest to 3d2cf0e 2cd31a069 Makefile: softcode `strip`, use it from env var f812c8949 Man page updates 5198af7d7 Add support for passing CDI specs to --device 14bf3db27 Update comments on some API objects 2a7ff9905 pkg/parse.DeviceFromPath(): dereference src symlinks c1b43b57b Makefile - instead of calling `as` directly, use it from env var 23b8d9767 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.1 c1119f886 CI: bump VMs 2c47fdccd fix(deps): update module github.com/docker/docker to v25.0.5+incompatible f95b7a188 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.0 9cf83d8f8 Change RUN to comment in bud.bats 5808b9603 Stop rebasing renovate PRs automatically 37994356f Update renovate validation image 4304d618f CVE-2024-1753 container escape fix 516f9e9a2 correctly configure /etc/hosts and resolv.conf when using network 9db5a16f7 buildah: refactor resolv/hosts setup. 8c1fee7e7 rename the hostFile var to reflect the value better f8a7841cc vendor latest c/common 26da74d54 [skip-ci] rpm: use go-rpm-macros supported vendoring 547d9bf0e Update docs/buildah-add.1.md 80f9f7cb0 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.16.0 5cf05ac08 fix(deps): update module github.com/docker/docker to v25.0.4+incompatible c355679d3 fix(deps): update module github.com/containers/ocicrypt to v1.1.10 550139916 chore(deps): update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [security] 1a6d3513f chore(deps): update module github.com/go-jose/go-jose/v3 to v3.0.3 [security] bf3263ec1 Bump google.golang.org/protobuf to v1.33.0 e635558d2 fix links to containerignore doc e53e50f7a [skip-ci] Makefile: update rpm target 87ef84d3a pr-should-include-tests: use GitHub label, not commit text d50122aeb tests: enable pasta tests 1bc5dd692 [CI:DOCS] Migrate buildah container image 7c88bb372 Update .gitignore da81d2e2b Bump to v1.36.0-dev fedbd7967 Bump v1.35.0 3164076e2 Bump c/common v0.58.0, c/image v5.30.0, c/storage v1.53.0 b2504c263 conformance tests: don't break on trailing zeroes in layer blobs a2f0ebef6 Add a conformance test for copying to a mounted prior stage e504df188 fix(deps): update module github.com/stretchr/testify to v1.9.0 951dccd3f cgroups: reuse version check from c/common bbea3eb54 Update vendor of containers/(common,image) 6474279ed fix(deps): update github.com/containers/storage digest to eadc620 f9d603608 fix(deps): update github.com/containers/luksy digest to ceb12d4 53f230e2b fix(deps): update github.com/containers/image/v5 digest to cdc6802 8a1bcd51c manifest add: complain if we get artifact flags without --artifact d0ffb9d37 Use retry logic from containers/common e9c3c1666 Vendor in containers/(storage,image,common) 5047a3566 Update module golang.org/x/crypto to v0.20.0 26d5b84b1 Add comment re: Total Success task name 4853c0042 tests: skip_if_no_unshare(): check for --setuid 63975b541 Properly handle build --pull=false 836b9384d [skip-ci] Update tim-actions/get-pr-commits action to v1.3.1 5748595ae Update module go.etcd.io/bbolt to v1.3.9 fee705081 Revert "Reduce official image size" aee02318a Update module github.com/opencontainers/image-spec to v1.1.0 cdb1a4ff8 Reduce official image size eb6269d8c Build with CNI support on FreeBSD 98f870753 build --all-platforms: skip some base "image" platforms d73e21120 Bump main to v1.35.0-dev 90c0d9794 Vendor in latest containers/(storage,image,common) 1def7d6de Split up error messages for missing --sbom related flags aca884a89 `buildah manifest`: add artifact-related options 07057917d cmd/buildah/manifest.go: lock lists before adding/annotating/pushing a0852e994 cmd/buildah/manifest.go: don't make struct declarations aliases 4f0b619dd Use golang.org/x/exp/slices.Contains e202d62cc Disable loong64 again e99960085 Fix a couple of typos in one-line comments 302a798ad egrep is obsolescent; use grep -E e6d179476 Try Cirrus with a newer VM version 04847f57f Set CONTAINERS_CONF in the chroot-mount-flags integration test 56e6ef854 Update to match dependency API update 5d58b88c7 Update github.com/openshift/imagebuilder and containers/common a20d5b2a5 docs: correct default authfile path 9d58d1382 fix(deps): update module github.com/containerd/containerd to v1.7.13 533aac2d4 tests: retrofit test for heredoc summary 1bfd3336f build, heredoc: show heredoc summary in build output 811ee6797 manifest, push: add support for --retry and --retry-delay 1a8cbc185 fix(deps): update github.com/openshift/imagebuilder digest to b767bc3 9d516e22e imagebuildah: fix crash with empty RUN e14f46f2e fix(deps): update github.com/containers/luksy digest to b62d551 a7aec1941 fix(deps): update module github.com/opencontainers/runc to v1.1.12 [security] f1f0d9d4d fix(deps): update module github.com/moby/buildkit to v0.12.5 [security] 79fb3c213 Make buildah match podman for handling of ulimits 13fd5bd2c docs: move footnotes to where they're applicable 011736e12 Allow users to specify no-dereference 34dff20da Run codespell on code 86afc1ffd Fix FreeBSD version parsing 32b8ceeb6 Fix a build break on FreeBSD e3d043ebf Remove a bad FROM line f6f6da8f0 fix(deps): update module github.com/onsi/gomega to v1.31.1 4b5caebd7 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc6 f157be843 docs: use reversed logo for dark theme in README cf69e8a18 build,commit: add --sbom to scan and produce SBOMs when committing b3af07dab commit: force omitHistory if the parent has layers but no history de7c1e1f7 docs: fix a couple of typos 89f50af21 internal/mkcw.Archive(): handle extra image content 4cc811f4f stage_executor,heredoc: honor interpreter in heredoc 339839d4b stage_executor,layers: burst cache if heredoc content is changed dd186ee0f fix(deps): update module golang.org/x/crypto to v0.18.0 a42bfd019 Replace map[K]bool with map[K]struct{} where it makes sense 905551f51 fix(deps): update module golang.org/x/sync to v0.6.0 efe76552b fix(deps): update module golang.org/x/term to v0.16.0 d371fc7b9 Bump CI VMs 53c65dd36 Replace strings.SplitN with strings.Cut b5ee4fb34 fix(deps): update github.com/containers/storage digest to ef81e9b 114bb6f0c fix(deps): update github.com/containers/image/v5 digest to 1b221d4 fd0899f1f fix(deps): update module github.com/fsouza/go-dockerclient to v1.10.1 59ea8af1b Document use of containers-transports values in buildah b2c80f9a3 fix(deps): update module golang.org/x/crypto to v0.17.0 [security] b283c48db chore(deps): update dependency containers/automation_images to v20231208 4a9dba647 manifest: addCompression use default from containers.conf 041388f87 commit: add a --add-file flag 81435aadc mkcw: populate the rootfs using an overlay 5b9141887 chore(deps): update dependency containers/automation_images to v20230517 de0c3cdaf [skip-ci] Update actions/stale action to v9 2ab21c666 fix(deps): update module github.com/containernetworking/plugins to v1.4.0 29d945f38 fix(deps): update github.com/containers/image/v5 digest to 7a40fee 4276a735b Bump to v1.34.1-dev 471460018 Ignore errors if label.Relabel returns ENOSUP Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:23:51 +00:00
Bruce Ashfield	bad7f6f1d8	crun: update to v1.15 ... Bumping crun to version 1.15-13-g700e2ed, which comprises the following commits: c6c1c7f crun run --help: say --no-subreaper is ignored 8801bc4 github: disable CentOS 10 tests 5f0643c github: fix running tests on CentOS 10 d795081 tests: build on CentOS 10 without yajl f00fa22 libocispec: sync from upstream dd9428b blake3: initialize chunks_array 8c80ab9 utils: initialize fd 81b8f45 linux: fix mount of special files with rro e6eacaf NEWS: tag 1.15 08b5e78 Packit: Enable c10s downstream sync, rhel / centos separation in tests 4618d50 status: rmdirfd: try harder to remove mount points c72bf7f linux: cgroups: cleanup unused mount if move failed ff321e1 tests: install slirp4netns a946f04 utils: fix a compiler warning aa72cc4 Packit/TMT: add centos-stream-10, cleanup tests f39bc4a tests, oci-validation: use perl tap driver f5548f2 tests, oci-validation: use tap-18 18e84a1 tests, oci-validation: use git clone 49090f2 Build s390x binaries using musl libc 307d35e Fix clang format test 4b8f7c9 build(deps): bump uraimo/run-on-arch-action from 2.7.1 to 2.7.2 e6a8d51 libocispec: update 1809973 tests: use npm-18 475a3fd features: add support for potentiallyUnsafeConfigAnnotations 4f5479e src/libcrun/handlers: add option to load wasi-nn plugin for wasmedge 631e767 release: use zstd instead of xz 0722689 release.sh: generate .zst release instead of .xz 3ad68ed linux: fixup libcrun_safe_chdir 699564b rpm: remove eln macro f50da23 Packit: reuse non-RHEL failure message notification on RHEL 0b7fc08 packit: podman reverse dependency tests 820471a libocispec: use runtime-spec v1.2.0 9eea9ff cgroup: make error clearer 59ad70a container: validate option flags 7918dca container: split create and run options 8894495 crun: add option --keep to run 35dccc3 libcrun, run: add option to not delete containers a220ca6 NEWS: tag 1.14.4 6cd74cb Add support for s390x 5884fd4 linux: fix mount of file with recursive flags b9e87e7 tests: test bind mounts of files crun/ocispec: update to latest 2236d50 github: test with the embedded yajl library bed19ad configure.ac: --enable-embedded-yajl skips check for yajl b633f89 Makefile.am: distribute the src/yajl symlink 86650dc fix compilation error with clang++17 20d3936 helpers.py: remove __str__() afed951 generate.py: fix some typos daeb197 runtime-spec: use version v1.2.0 66f6f71 optimize writefile e9a99a8 Optimize headers writefile 7a5f2b6 Refresh strings format sources 210f4d3 Refresh strings format headers b085839 runtime-spec: update crun/ispec: update to v1.1.0 535d657 Fix a typo in the annotations spec 89fee07 MAINTAINERS: move jonboulle to EMERITUS f17d647 CODEOWNERS: remove vbatts 818209a MAINTAINERS: move vbatts to EMERITUS 652ec7c Add note about `ImageID` to the `config` section of `manifest.md` 2d95dde Reformat "Platform Variants", especially to add amd64, ppc64le, riscv64 e191267 Update Go versions in release scripts 4da0cfc Update GitHub Actions packages to resolve warnings in CI a32e6c3 Pin golangci-lint for Go v1.20 8baa69b media-types: Fix broken links 0a41c19 version: bump back to +dev e7f7c0c version: release v1.1.0 d0f90e6 Clarify that subject references a separate DAG 8b1e951 version: bump back to +dev 6c2b5fa version: release v1.1.0-rc6 53d9855 new section for projects no longer maintained b391bc0 fix: SPDX licenses URL dd66b54 Test older versions of Go with toolchain=local 93f6e65 Makefile: remove stray trailing space (#1126) d881fa8 deps: remove deprecated github.com/pkg/errors (#1125) 072574d add ORAS to implementations.md 9954739 specs-go: group MediaTypes 344b098 fix markdown table formatting c7a064f Update supported Go range to 1.19 - 1.21 f0ef80e version: bump back to +dev 1e54f01 version: release v1.1.0-rc5 061cba3 Fix golangci-lint install on older versions of Go a2a5750 Add step to update website after a release 0c1622e Add `riscv64` arch to `check{Architecture|Platform}` e6a75e6 Provide a decision tree for artifacts 9ac8f92 Quote lint-md wildcard expression a6af2b4 Add a markdown linter and fix linting issues af9c838 OCI has a distribution-spec 37bac87 Create artifacts guidance ddf2dfd chore(descriptor.md): correct canonicalization reference d36ccf1 MediaType is required in the descriptor f6c60b5 Clean up the markdown in considerations da8994a Cleanup broken links and markdown spacing 56877ad Remove deprecated golangci lint checks b29a06c Hacking markdown and Makefile cleanup 73aca56 Cleanup markdown in governance fd95ded Fix label schema link aed07a8 Test subject field in index 8620a49 version: bump HEAD back to +dev 82e8329 version: bump for release of v1.1.0-rc.4 988df0a specs-go: remove artifact prefixed annotations a845c7a image-index: add artifactType to specs and schema 73f386c Add constants for "index.json" and "blobs" 25fc553 Switch from scratch to empty 749ea9a Add artifactType to image index 32036d8 Apply version change from #1050 e13840d Add language from artifacttype field to forbid allowlists of media types 77efc6e spec: clarify descriptor, align with de facto artifact usage c6854a6 image-index: add the `subject` field crun/rspec: update to v1.2.0 b983fbf CODEOWNERS: remove vbatts bf698d0 MAINTAINERS: move vbatts to EMERITUS 12b653d Update golangci-lint to v1.56.1 in CI 8547911 Add Go v1.21 and v1.22 to GitHub Actions CI matrix 1a729af Update GitHub Actions packages to resolve warnings in CI 65cd1f8 Back to +dev 36852b0 version: release v1.2.0 021ba94 config.md: allow empty mappings for [r]idmap 5e98fec features: add potentiallyUnsafeConfigAnnotations cabeea7 specs-go: mark LinuxMemory.Kernel as deprecated 4005c81 specs-go: add missing deprecation comment for Hooks.Prestart 2f6b090 config: improve bind mount and propagation doc 0ec4e6b fix link to hooks in features 6ffddf6 mount: Allow relative mount destinations on Linux f329913 features-linux: Expose idmap information 7b8eb69 config: add reference to mount_setattr(2) for idmapped mounts 2547bb0 config: add idmap and ridmap mount options 3f552ce version: release v1.1.0+dev 0625254 version: release v1.1.0 d56ba70 ChangeLog: squash v1.1.0-rc.1...v1.1.0 5430e36 ChangeLog: Document changes since v1.1.0-rc.3 2bd22fa features.md: add a note to avoid confusion about annotations 5612d21 Remove outdated meeting.ics 085728a README.md: update chat information 8b4cadd version: v1.1.0-rc.3+dev ae35e39 version: release v1.1.0-rc.3 d8be1e3 ChangeLog: Document changes since v1.1.0-rc.2 1beaf68 CODEOWNER: Add Toru Komatsu(@utam0) to sync with MAINTAINERS fccfb09 config: add support for org.opencontainers.image annotations Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:23:51 +00:00
Mingli Yu	7cdd07a736	netavark: Make ptest run ... Fixes: # ./run-ptest /tmp/bats-run-ELGGaA/bats.18820.src: line 5: To: command not found 1..1 not ok 1 bats-gather-tests # (in test file test/README.md, line 5) # `To run the tests locally in your sandbox, you can use one of these methods:' failed with status 127 Signed-off-by: Mingli Yu <mingli.yu@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:23:51 +00:00
Bruce Ashfield	2fdfa68445	podman: convert remaining WORKDIR references to UNPACKDIR ... While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Bruce Ashfield	d79afeac8c	lxc: convert remaining WORKDIR references to UNPACKDIR ... While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Bruce Ashfield	2aa6da625d	kubernetes: convert remaining WORKDIR references to UNPACKDIR ... While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. The remaining WORDIR references are to a secondary git repository with artifacts and should be safe. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Bruce Ashfield	01a6b4771f	docker-distribution: convert remaining WORKDIR references to UNPACKDIR ... While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Bruce Ashfield	d190fb4a13	container-host-config: convert remaining WORKDIR references to UNPACKDIR ... While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. We also explicitly set S to point to the UNPACKDIR to avoid a build warning. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Bruce Ashfield	27db959787	cgroup-lite: convert remaining WORKDIR references to UNPACKDIR ... While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Bruce Ashfield	3dc0db19e1	k3s: convert remaining WORKDIR references to UNPACKDIR ... While the WORKDIR references seem to work, they may not continue to work. We switch to using UNPACKDIR which is where the SRC_URI referenced elements / files will be placed by the fetcher. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Bruce Ashfield	288d9bdfb1	podman-tui: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX} ... As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Bruce Ashfield	34b281d1a9	k3s: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX} ... As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Bruce Ashfield	9de2c86118	crio-o: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX} ... As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. We also adjust our WORKDIR reference to use UNPACKDIR instead Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Bruce Ashfield	754c3134c2	podman: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX} ... As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Bruce Ashfield	d4f36f3ff5	docker-compose: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX} ... As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. We also adjust our WORKDIR reference to UNPACKDIR, and the destination for vendor'd source. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Bruce Ashfield	caec6371aa	nerdctl: SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX} ... As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. We also adjust our S directory, and references to WORKDIR to fix the build for the new source layout. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Bruce Ashfield	df90aeb1ae	cri-tools: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX} ... As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Bruce Ashfield	258742feb5	moby: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX} ... As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. We also adjust our paths to the new source location and drop references to WORKDIR. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Bruce Ashfield	f12df6ce27	runc-docker: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX} ... As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Bruce Ashfield	d04caa21f0	buildah: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX} ... As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Bruce Ashfield	b78f5ac678	runc: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX} ... As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-29 13:16:56 +00:00
Patrick Wicki	380eae7bdd	podman: require catatonit ... Alternatively, we could add it to RRECOMMENDS. But I would say, given its name, managing pods is part of podman's core functionality and that requires catatonit, which is currently only pulled in for the ptest: root@qemux86-64:~# podman pod create Error: building local pause image: finding pause binary: exec: "catatonit": executable file not found in $PATH Signed-off-by: Patrick Wicki <patrick.wicki@siemens.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-13 22:32:38 -04:00
Patrick Wicki	992253f871	podman: remove skopeo rdepends ... Podman does not require skopeo to run. They are both independent tools. In distros like Debian, Fedora and Arch they don't depend on it either. Skopeo also seems to be used in some of podman's tests, so it makes sense to keep it around for the ptest. We do require skopeo's libdevmapper dependency, so include that directly. And inherit container-host to make sure the container configs are present on the device. Signed-off-by: Patrick Wicki <patrick.wicki@siemens.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-13 22:32:38 -04:00
Bruce Ashfield	4cea448064	runc-opencontainers: update to 1.1.12 ... Bumping runc to version v1.1.12-14-ge8bb71e1, which comprises the following commits: 6379b58d libcontainer: force apps to think fips is enabled/disabled for testing 265e7371 Vagrantfile.fedora: bump Fedora to 39 59056a02 silence security false positives from golang/net 452bf88e build: update libseccomp to v2.5.5 3fada6ec tests/int: fix flaky "runc run with tmpfs perm" aae41a4b Fix integration tests failure when calling "ip" 82a8b979 update go version to 1.21 in cirrus ci 03271050 ci/gha/cross-i386: pin Go to 1.21 29d6d873 VERSION: back to development 51d5e946 VERSION: release 1.1.12 e9665f4d init: don't special-case logrus fds 683ad2ff libcontainer: mark all non-stdio fds O_CLOEXEC before spawning init b6633f48 cgroup: plug leaks of /sys/fs/cgroup handle 284ba305 init: close internal fds before execve fbe3eed1 setns init: do explicit lookup of execve argument early 0994249a init: verify after chdir that cwd is inside the container 506552a8 Fix File to Close Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-13 22:32:38 -04:00
Bruce Ashfield	a03ff1cd0a	containerd: update to v2.0.0-rc.1 ... Bumping containerd to version v2.0.0-rc.1-8-g0426e3c2e, which comprises the following commits: c27bcdc56 cri: introspectRuntimeFeatures: fix nil panic c5ba71d11 Makefile: update default PACKAGE to v2 094bafe2a apparmor: Allow confined runc to kill containers e461a59ae fix migrateConfig for io.containerd.cri.v1.images eb5a0c04b apparmor: add `signal (receive) peer=/usr/local/bin/rootlesskit,` 5e470e1ca Update HTTPFallback to handle tls handshake timeout a37b451cd build(deps): bump tags.cncf.io/container-device-interface 888fd315f Update CNI to v1.2.0 13e6b2b68 update to go1.21.9, go1.22.2 42e4de9c5 Prepare release notes for v2.0.0-rc.1 4a31bd606 chore: use errors.New to replace fmt.Errorf with no parameters will much better a6a82c102 Update hcsshim to v0.12.3 7e60d5a07 Account for ipv4 vs ipv6 localhost in windows port forwarding a153b2cd3 mod: bump github.com/containerd/nri@v0.6.1 77512e2d7 build(deps): bump the golang-x group with 3 updates c8d9eba7c build(deps): bump github.com/klauspost/compress from 1.17.7 to 1.17.8 1c0f73aa0 build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.0 to 2.2.1 32caaee48 Snapshotters: Export the root path b82ced57f fix: close profile c7ea06a69 fix default working directory `hostProcess` 1040c7b98 build(deps): bump the otel group with 8 updates b50e9eae4 Refactor spots to make use of sys.IgnoringEintr 3ea69db8e Add helper to ignore eintr 1b6222418 Bump tags.cncf.io/container-device-interface to v0.7.1 ad584ebec Replace direct waitid syscall with unix.Waitid 7c5078459 Remove empty default tls configuration in ctr b6e361694 cri: add pause image name to annotations 0ec14fdf8 core/diff/apply: use unix.Syncfs 739659a4b build(deps): bump google.golang.org/grpc from 1.62.1 to 1.63.2 433279438 Transfer: Registry: Enable plain HTTP 88b4cc659 address review comments f20c49311 Update tracing documentation to add details about manual instrumentation 63d5573a3 remote: Fix HTTPFallback fails when pushing manifest 2474a99c3 Add IsNotFound case to ListPodSandboxStats 3830f8167 fix(cri): fix unexpected order of mounts since go 1.19 cbb644182 build(deps): bump github.com/Microsoft/hcsshim from 0.12.0 to 0.12.2 362fcf2d2 build(deps): bump github.com/distribution/reference from 0.5.0 to 0.6.0 5b6ae0f79 Use different containerd sock address in tests ab2c569fb ctr: fix parsing mount options b97ef91fb Change port forwarding on windows ea681afba docs: fix typo 6d00c3ada runc-shim: only defer init process exits da4ca4949 build(deps): bump github.com/pelletier/go-toml/v2 from 2.1.1 to 2.2.0 dd72fb3b2 build(deps): bump github.com/intel/goresctrl from 0.6.0 to 0.7.0 e41e9e11b transfer: Platform matcher should match multiple platforms d0d35f0d0 core/images/archive: normalizeReference: remove outdated TODO 26158609b pkg/seutil: move to internal/cri 33732bc13 pkg/systemd: move to internal/cri 0d0850af1 Prepare v2.0.0-rc.0 f5abb63c0 Update mailmap 30813f646 build(deps): bump github.com/containernetworking/plugins 0fafc0c50 build(deps): bump github.com/checkpoint-restore/go-criu/v7 7c1fca096 Update migration script based on usage 45e425ccc vendor: github.com/golang/protobuf v1.5.4 4aa6fedd5 CRI: postpone removal of deprecated config properties 34c545824 Automatically decompress archives for transfer service import df26c189a Clean cri options and useless parms 88421068f Fix invalid event filter in podsandbox 357c59b79 Update github actions ci to run on forks 4b719cc4b build(deps): bump google.golang.org/grpc from 1.62.0 to 1.62.1 10c7f03b3 build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0 21d3fedf4 build(deps): bump softprops/action-gh-release from 1 to 2 228aa42a6 build(deps): bump the otel group with 8 updates 47d13767f Clean typos in plugins. 7ac9d6909 Use the Go toolchain in CI matrix to build binaries 6a96e4501 Move shim package to pkg f25770e48 Wire through CRI ContainerCheckpoint RPC 7ecdebff9 update to go 1.21.8, 1.22.1 723306d0e Disable OOM set score unpriv test temporarily 994fdd74e Don't create new scratch VHD per image for CimFS 016b588a9 build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 d9409c461 Update hcsshim to v0.12.0 00d714e90 build(deps): bump the golang-x group with 2 updates ab4de3e4c build(deps): bump azure/login from 1 to 2 713dd8f8d go.mod: k8s.io/cri-api v0.30.0-alpha.3 d9b9160ae mv internal/testutil pkg/testutil 752917c0f build(deps): bump github.com/prometheus/client_golang 7a3b7fba5 Transfer: Registry: Enable to use registry configuration diretory 1bf781d8e Cleanup introspection interface 5bd204109 Remove grpc from Client connection interface 347346e3c Add ttrpc support to content proxy 9104e6a24 Add events proxy interface 892dc54bd runc-shim: process exec exits before init 9128ee0a9 Move nri packages to plugin and internal d0da3d1ca sandbox: make event monitor in CRI independent 17ea3959b adds mediatype to oci index record c5ef8a2c2 fix(docs): fix duplicate instructions for windows installation 87e8e9c7f Add Go client stability in releases for 2.0. 72f21833b Move events to plugins and core caa9e2075 add k8s 1.29 and 1.30preview to support table 154ed26a7 vendor: go.etcd.io/bbolt v1.3.9 6d1dfe55f cri: ensure the pause image loaded in older versions is pinned 2884b318f build(deps): bump github.com/klauspost/compress from 1.17.6 to 1.17.7 bd44df8a1 refactor code - clean switch and if statements a60e52f58 sandbox: add struct tags for PinnedImages a0b73ae11 sandbox: optimize the lock in PodSandbox 0f1d27412 sandbox: add methods to sandboxService a2768f19d plugins/sandbox: move local plugin into services d651cb743 mediatypes: support zstd compression Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-13 22:32:38 -04:00
Bruce Ashfield	e7a13cbbc3	containerd: consolidate to "containerd" ... We no longer need the split between container-docker and containerd-opencontainers and dependent layers have been given over a year to adapt. We do keep the provides and rprovides around for a bit longer, but those will also be removed in the future. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-13 22:32:38 -04:00
Changqing Li	e9bb0a338f	kubernetes: Pass -trimpath to build ... Fix following QA WARNING: WARNING: QA Issue: File /usr/bin/kubectl in package kubectl contains reference to TMPDIR [buildpaths] WARNING: QA Issue: File /usr/bin/kubeadm in package kubeadm contains reference to TMPDIR [buildpaths] WARNING: QA Issue: File /usr/bin/kube-proxy in package kube-proxy contains reference to TMPDIR [buildpaths] WARNING: QA Issue: File /usr/bin/kube-apiserver in package kubernetes-misc contains reference to TMPDIR WARNING: QA Issue: File /usr/bin/kubelet in package kubelet contains reference to TMPDIR [buildpaths] Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-02 18:22:42 +00:00
Changqing Li	e46214eea8	containerd-opencontainers: fix wrong version display ... * Update containerd to v2 to fix following containerd version: containerd github.com/containerd/containerd/v2 2.0.0-beta.0+unknown it should be like: containerd github.com/containerd/containerd/v2 v2.0.0-beta.2-204-gb1624c362.m b1624c3628954e769dd50783b63823040b2db38c.m * Remove CONTAINERD_PKG, it is not used * Update default PACKAGE in Makefile to v2 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-02 18:22:42 +00:00
Changqing Li	b50d4899fa	kubernetes: skip textrel QA warning ... -buildmode=pie need cgo is enabled, but for kubernetes, some build targets are static, and cgo is disable in build script directly, refer [1]. If we add -buildmode=pie by default, will cause these static target build failed with error "-buildmode=pie requires external (cgo) linking, but cgo is not enabled". This warning is acceptable, so just skip it. [1] https://github.com/kubernetes/kubernetes/blob/master/hack/lib/golang.sh#L811 Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-02 17:59:55 +00:00
Theodore A. Roth	74455bb615	podman: Fix missing brace in FILES ... When converting to use {systemd_user_unitdir}, the closing brace was omitted Signed-off-by: Theodore A. Roth <theodore_roth@trimble.com> Signed-off-by: Theodore A. Roth <troth@openavr.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-05-02 17:58:45 +00:00
Lukasz Czechowski	0b5cf63796	podman: fix location of user systemd service units ... The value of USERSYSTEMDDIR is currently set to ${systemd_unitdir}/user, which might not be present in user unit search path. Use dedicated bitbake variable ${systemd_user_unitdir} instead. Signed-off-by: Lukasz Czechowski <lukasz.czechowski@thaumatec.com> Cc: Bruce Ashfield <bruce.ashfield@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-04-22 15:02:52 +00:00
Xiangyu Chen	8410846c0b	lxc: fix broken test cases ... Upstream dropped cgroup handling in lxc-test-usernic lxc-test-unpriv and lxc-test-apparmor-mount to fix the broken cases. Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-04-09 14:08:26 +00:00
Bruce Ashfield	da840d8845	runc-docker: update to 1.1.12 ... Bumping runc to version v1.1.12-2-ga9833ff3, which comprises the following commits: 29d6d873 VERSION: back to development 51d5e946 VERSION: release 1.1.12 e9665f4d init: don't special-case logrus fds 683ad2ff libcontainer: mark all non-stdio fds O_CLOEXEC before spawning init b6633f48 cgroup: plug leaks of /sys/fs/cgroup handle 284ba305 init: close internal fds before execve fbe3eed1 setns init: do explicit lookup of execve argument early 0994249a init: verify after chdir that cwd is inside the container 506552a8 Fix File to Close d0b1a374 keyring: update AkihiroSuda key expiry d561e5da keyring: update cyphar@cyphar.com key expiry 7887736f VERSION: back to development 4bccb38c VERSION: release 1.1.11 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>	2024-04-09 13:10:39 +00:00