meta-virtualization/recipes-containers/podman
Bruce Ashfield ac6a273778 podman: update to v5.2.0-rc1
Bumping libpod to version v5.2.0-rc1-2-g72fd507205, which comprises the following commits:

    59696341b5 Bump to v5.2.0-dev
    973e865422 Bump to v5.2.0-rc1
    eb750f61f6 Vendor in latest containers(common, storage,image, buildah)
    b08b630c84 test: drop unmount for overlay
    e16e528f39 test: gracefully terminate server
    fbc4768a00 libpod: shutdown Stop waits for handlers completion
    6832a35f65 libpod: cleanup store at shutdown
    54fce37968 Add NetworkAlias= support to quadlet
    317a88ee4e cmd: call shutdown handler stop function
    3280da0500 fix race conditions in start/attach logic
    04fb77efe2 swagger: exlude new docker network types
    f90bd48859 vendor: bump c/storage
    e24367aa14 update to docker 27
    b1e535b911 contrib: use a distinct --pull-option= for each flag
    02af4f8bd6 Update warning message when using external compose provider
    7c775a3f4c Update module github.com/cyphar/filepath-securejoin to v0.3.0
    830e550073 Ignore result of EvalSymlinks on ENOENT
    926547f7d3 test/upgrade: fix tests when netavark uses nftables
    5856adb9f8 test/system: fix network reload test with nftables
    c4b2015e3a test/e2e: rework some --expose tests
    9945981afb test: remove publish tests from e2e
    43f6173cc6 CI: test nftables driver on fedora
    07b69943a4 CI: use local registry, part 3 of 3: for developers
    dd1bcabae9 CI: use local registry, part 2 of 3: fix tests
    2e8c074234 CI: use local registry, part 1 of 3: setup
    d4c0e7ecbd CI: test composefs on rawhide
    176630b5db chore(deps): update module google.golang.org/grpc to v1.64.1 [security]
    4487f17a47 chore(deps): update dependency setuptools to ~=70.3.0
    bd71b75de4  Improve container filenname ambiguity.
    4336c5a4f5 containers/attach: Note bug around goroutine leak
    1dd8a35b2f Drop minikube CI test
    6f6e0e7126 add libkrun test docs
    766955fc6d fix(deps): update module tags.cncf.io/container-device-interface to v0.8.0
    4b7aaafb2d cirrus: check for header files in source code check
    336c45f68e pkg/machine/e2e: run debug command only for macos
    c819c7a973 create runtime's worker queue before queuing any job
    34ba26ec52 test/system: fix pasta host.containers.internal test
    81250cc5a9 Visual Studio BuildTools as a MinGW alternative
    a2c83cb0fd SetupRootless(): only reexec when needed
    3350cd3eed pkg/rootless: simplify reexec for container code
    049942db04 cirrus: add missing test/tools to danger files
    1d9ac9a203 fix(deps): update module golang.org/x/tools to v0.23.0
    e2ff5d4e5d Windows Installer: switch to wix5
    f90060bff3 fix(deps): update module golang.org/x/net to v0.27.0
    5e3d821814 pkg/machine/e2e: print tests timings at the end
    527c0f0bfa pkg/machine/e2e: run debug commands after init
    ada4e1a8c1 pkg/machine/e2e: improve timeout handling
    62956ac192 libpod: first delete container then cidfile
    ea86582f6c fix(deps): update module golang.org/x/term to v0.22.0
    a181b7bc61 System test fixes
    55ad0d6e0e cirrus.yml: automatic skips based on source
    2c2da039de fix(deps): update module github.com/containers/ocicrypt to v1.2.0
    d00e68e550 podman events: fix error race
    b6f151ad1c chore(deps): update dependency setuptools to ~=70.2.0
    1c704157c2 fix(deps): update module github.com/gorilla/schema to v1.4.1 [security]
    5c41eb6df8 Update CI VM images
    3c0176b2d0 pkg/machine/e2e: fix broken cleanup
    f84f4a9cce pkg/machine/e2e: use tmp file for connections
    fad1f757cc test/system: fix podman --image-volume to allow tmpfs storage
    e810b340ef CI: mount tmpfs for container storage
    9814ed40c7 docs: --network remove missing leading sentence
    83863a6863 specgen: parse devices even with privileged set
    5e156c424f vendor: update c/storage
    22b57d3230 feat(quadlet): log option handling
    786ea01a64 Error when machine memory exceeds system memory
    0d0418a5bf machine: Always use --log-file with gvproxy
    c9e3458c99 CI: Build-Each-Commit test: run only on PRs
    d2ca2058c6 Small fixes for testing libkrun
    069eace84b Podman machine resets all providers
    e58e715583 Clearly indicate names w/ URLencoded duplicates
    926e6dd0aa [skip-ci] Packit: split rhel and centos-stream jobs
    fdb736d282 apple virtiofs: fix racy mount setup
    67df6d60c3 cirrus: fix broken macos artifacts URL
    6db8ff7f7b libpod/container_top_linux.c: fix missing header
    3703cbf1d7 refactor(build): improve err when file specified by -f does not exist
    905e7ae070 Minor: Remove unhelpful comment
    541cdaa441 Update module github.com/openshift/imagebuilder to v1.2.11
    439fe90208 Minor: Rename the OSX Cross task
    02b922ebfc [skip-ci] Remove conditionals from changelog
    65ed96585d podman top: join the container userns
    6c75a10875 Run linting in parallel with building
    7ff4bbae26 Fix missing Makefile target dependency
    a3d5842746 build API: accept platform comma separated
    180cc6f863 [skip-ci] RPM: create podman-machine subpackage
    de58c5f292 ExitWithError() - more upgrades from Exit()
    a7415c9316 test/e2e: remove podman system service tests
    a0b2b0d34c cirrus: reduce int tests timeout
    8f2d403cd1 cirrus: remove redundant skip logic
    7562f4ccdb pkg/machine/apple: machine stop timeout
    1a6a200403 CI: logformatter: link to correct PR base
    d1bfc6d8d0 Update module github.com/crc-org/crc/v2 to v2.38.0
    f50734636c ExitWithError(): continued
    31888f23aa test/system: Add test steps for journald log check in quadlet
    def182d396 restore: fix missing network setup
    a158eae7ff podman run use pod userns even with --pod-id-file
    5815195528 macos-installer: bundle krunkit
    e404976d1b remote API: fix pod top error reporting
    29ecf5984c libpod API: return proper error status code for pod start
    945226a844 fix #22233
    5d009715f6 added check for `registry.IsRemote()`. and correct error message.
    e4f64f91fe fix #20686
    4dc98e3a5a pkg/machine/e2e: Remove unnecessary copy of machine image.
    49eb5af301 libpod: intermediate mount if UID not mapped into the userns
    08a8429459 libpod: avoid chowning the rundir to root in the userns
    c81f075f43 libpod: do not chmod bind mounts
    094bc673ef libpod: unlock the thread if possible
    d53fee511f CI Cleanup: Remove cgroups v1 support
    d810f4187e ExitWithError() - more upgrades from Exit()
    4b3890ccac remote: fix incorrect CONTAINER_CONNECTION parsing
    7d22f04f56 container: pass KillSignal and StopTimeout to the systemd scope
    e48f3137c0 libpod: fix comment
    8be9ec7216 e2e: test container restore in pod by name
    c22ae53d31 docs: Adds all PushImage supported paramters to openapi docs.
    3f785e8735 systests: kube: bump up a timeout
    f134ab77bc cirrus.yml: add CI:ALL mode to force all tests
    d9183f0587 cirrus.yml: implement skips based on source changes
    2f680eb4b5 CI VMs: bump
    7dc288dbed restore: fix container restore into pod
    6dd9abf9ec sqlite_state: Fix RewriteVolumeConfig
    83549ba11f chore(deps): update dependency setuptools to ~=70.1.0
    91a5c0de2a Quadlet - use specifier for unescaped values for templated container name
    0eaec1a2e9 cirrus: check for system test leaks in nightly
    4e0cd49148 test/system: check for leaks in teardown suite
    81c90f51c2 test/system: speed up basic_{setup,teardown}()
    a2352fa3ea test/system: fix up many tests that do not cleanup
    e9c6cd1559 test/system: fix podman --authfile=nonexistent-path
    f611ac9304 Update module github.com/containernetworking/plugins to v1.5.1
    043ce618bc Update module github.com/checkpoint-restore/checkpointctl to v1.2.1
    f4aa71e730 Update module github.com/spf13/cobra to v1.8.1
    0627fce798 Update module github.com/gorilla/schema to v1.4.0
    5c1e5cd026 pkg/machine/wsl: force terminate wsl instance
    bd906cb314 pkg/machine/wsl: wrap command errors
    dca94be028 [CI:DOCS] Quadlet - add note about relative path resolution
    c20767120f CI: do not install python packages at runtime
    54edf3d8ee Release workflow: Include candidate descriptor
    19989380b8 Minor: Fix indentation in GHA release workflow
    82973c38e4 GHA: Send release notification mail
    ad56dc7e2b GHA: Validate release version number
    64091777fe Remove references to --pull=true and --pull=false
    267d838e38 ExitWithError, continued
    730a215025 podman: add new hidden flag --pull-option
    5a4416be08 [CI:DOCS] Fix typos in podman-build
    8fececcdb9 infra: mark storageSet when imagestore is changed
    18c7a55ccd [CI:DOCS] Add jnovy as reviewer and approver
    5b24d1b48c fix(deps): update module google.golang.org/protobuf to v1.34.2
    0c587f0246 refactor(machine,wsl): improve operations of Windows API
    ad8fc6a74b --squash --layers=false should be allowed
    858b3b7def fix(deps): update module github.com/checkpoint-restore/checkpointctl to v1.2.0
    fa4f11facc update golangci-lint to v1.59.1
    3825e73120 Rename master to main in CONTRIBUTING.md
    cec6859369 podman 5, pasta and inter-container networking
    a9de888a15 libpod: do not resuse networking on start
    4b29c9dd73 machine/linux: Switch to virtiofs by default
    bf541c6740 machine/linux: Support virtiofs mounts (retain 9p default)
    406f130590 machine/linux: Use memory-backend-memfd by default
    f317eb29ab ExitWithError() - continued
    550cb07fc0 Enable libkrun provider to open a debug console
    dcec81e694 Add new targets on Windows makefile (winmake.ps1)
    5b23a2e1c7 fix(deps): update module github.com/docker/docker to v26.1.4+incompatible
    2334a7ea6c fix(deps): update module github.com/crc-org/crc/v2 to v2.37.1
    f4b14c11ef fix(deps): update module golang.org/x/tools to v0.22.0
    8cc9bb1842 fix(deps): update module golang.org/x/net to v0.26.0
    ffc8522646 libpod: fix 'podman kube generate' on FreeBSD
    df0c2e5d03 fix(deps): update module golang.org/x/sys to v0.21.0
    e8ea1e7632 libpod: do not leak systemd hc startup unit timer
    15a4e1dffd vendor latest c/common
    7c5c60bc39 pkg/rootless: set _CONTAINERS_USERNS_CONFIGURED correctly
    80ed85dc17 run bats -T, to profile timing hogs
    350dfabf66 test/system: speed up podman ps --external
    8fa1ffbbec test/system: speed up podman network connect/disconnect
    8640ce998c test/system: speed up podman network reload
    609146fb75 test/system: speed up quadlet - pod simple
    7f3bb2d238 test/system: speed up podman parallel build should not race
    8852614792 test/system: speed up podman cp dir from host to container
    8d3f65b026 test/system: speed up podman build - workdir, cmd, env, label
    471e001c7f test/system: speed up podman --log-level recognizes log levels
    26bdb5d110 test/system: remove obsolete debug in net connect/disconnect test
    c466377013 test/system: speed up quadlet - basic
    6b021dd4ba test/system: speed up user namespace preserved root ownership
    2e70d4201f System tests: add `podman system check` tests
    fec58a4571 Add `podman system check` for checking storage consistency
    f18298181b fix(deps): update module github.com/crc-org/crc/v2 to v2.37.0
    7243c7109c fix(libpod): add newline character to the end of container's hostname file
    6e4d7c7159 fix(deps): update module github.com/openshift/imagebuilder to v1.2.10
    e8514bde85 fix(deps): update github.com/containers/image/v5 digest to aa93504
    af7bd67d4e Fix 5.1 release note re: runlabel
    164573dc34 test/e2e: use local skopeo not image
    b9b60f14b4 fix(deps): update golang.org/x/exp digest to fd00a4e
    e4123026b5 [CI:DOCS] Add contrib/podmanimage/stable path back in repo
    b146f9126a chore(deps): update dependency requests to ~=2.32.3
    dffac6ecb1 fix(deps): update github.com/containers/image/v5 digest to 2343e81
    900e29549a libpod: do not move podman with --cgroups=disabled
    12f634edf0 Update release notes on Main to v5.1.0
    5dc1738c05 test: look at the file base name
    6243f5cebe tests: simplify expected output
    7552735fa9 Sigh, new VMs again
    4adb5cbbff Fail earlier when no containers exist in stats
    fb4ddf86cc Add Hyper-V option in windows installer
    4ece83bdf9 libpod: cleanup default cache on system reset
    aa08552bf6 vendor: update c/image
    ad661b5b31 test/system: speed up kube generate tmpfs on /tmp
    bff0697de8 test/system: speed up podman kube play tests
    67356a71b3 test/system: speed up podman shell completion test
    01642c64ea test/system: simplify test signal handling in containers
    6fa064f991 test/system: speed up podman container rm ...
    37120bbe80 test/system: speed up podman ps - basic tests
    4f3c691087 test/system: speed up read-only from containers.conf
    edf6f1814e test/system: speed up podman logs - multi ...
    fe05e25edf test/system: speed up podman run --name
    1ae05473c1 Debian: switch to crun
    1093ebb72b test/system: speed up podman generate systemd - envar
    15606148e5 test/system: speed up podman-kube@.service template
    42f43fb3a3 test/system: speed up kube play healthcheck initialDelaySeconds
    9e321aafda test/system: speed up exit-code propagation test
    94ba2cf1a1 test/system: speed up "podman run --timeout"
    82bffb9c50 test/system: fix slow kube play --wait with siginterrupt
    7ce3c6bf1e undo auto-formatting
    9a7ffaa077 test/system: speed up podman events tests
    9f823ecb25 Quadlet: Add support for .build files
    9de1d4f653 test/system: speed up "podman auto-update using systemd"
    a09152ab28 test/system: remove podman wait test
    7f567a4e51 tests: disable tests affected by a race condition
    2b43f62233 update golangci-lint to v1.59.0
    6dcde80999 kubernetes_support.md: Mark volumeMounts.subPath as supported
    b45364254f working name of pod on start and stop
    c5597cb12c fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.0
    f8cc1b4807 Bump Buildah to v1.36.0
    661e9ee804 fix(deps): update module github.com/burntsushi/toml to v1.4.0
    9c92bc64a7 fix typo in Tutorials.rst
    74e8f98772 Mac PM test: Require pre-installed rosetta
    db3abd0d28 test/e2e: fix new error message
    23c830704d Add configuration for podmansh
    4fd425429b Update containers/common to latest main
    046c0e5fc2 Only stop chowning volumes once they're not empty
    d094a9f18e podman: fix --sdnotify=healthy with --rm
    e166f6bfe0 libpod: wait another interval for healthcheck
    ad1d3f8fc7 quadlet: Add a network requirement on .image units
    d418391ce6 test, pasta: Ignore deprecated addresses in tests
    18557659e4 [CI:DOCS] performance: update network docs
    08507f3ffe fix(deps): update module github.com/onsi/ginkgo/v2 to v2.18.0
    93ef340071 CI: disable minikube task
    8f8dfb971f [CI:DOCS] Fix windows action trigger
    1766a1a24b chore(deps): update dependency setuptools to v70
    3ab9e864f6 Check AppleHypervisor before accessing it
    e590cced06 fix(deps): update module github.com/containernetworking/plugins to v1.5.0
    d9d0840a4d [CI:DOCS] Update dependency golangci/golangci-lint to v1.58.2
    63df724a40 add podman-clean-transient.service service to rootless
    9a8c3433c1 [CI:DOCS] Update podman network docs
    fb2ab832a7 fix incorrect host.containers.internal entry for rootless bridge mode
    54ce5c6af1 vendor latest c/common main
    fe7cc67ef4 Add Rosetta support for Apple Silicon mac
    ad297b1823 bump main to 5.2.0-dev
    8afa06ee89 Use a defined constant instead of a hard-coded magic value
    47f01e85c5 cirrus: use faster VM's for integration tests
    943ddfb0fe fix(deps): update github.com/containers/gvisor-tap-vsock digest to 01a1a0c
    4b0ae78e00 [CI:DOCS] Fix Mac pkg link
    061bcc06ea test: remove test_podman* scripts
    cb905f59ea test/system: fix documentation
    6408a05927 Return StatusNotFound when multiple volumes matching occurs
    35375e0af8 container_api: do not wait for healtchecks if stopped
    b06c58b4a5 libpod: wait for healthy on main thread
    bcb7edfded remote API: restore v4 payload in container inspect
    6c78a72995 Remove duplicate  call
    164aef814e fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.3
    590fec7a78 Change tmpDir for macOS
    120660e239 fix: close resource file

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2024-07-16 14:07:08 +00:00
..
podman podman: Add ptest support for system tests 2022-09-16 11:13:31 -04:00
podman_git.bb podman: update to v5.2.0-rc1 2024-07-16 14:07:08 +00:00
README podman: add test instructions for podman system service 2024-01-19 14:29:24 +00:00

rootless podman

Basic configuration:

https://developers.redhat.com/blog/2020/09/25/rootless-containers-with-podman-the-basics#

% echo "user.max_user_namespaces=28633" > /etc/sysctl.d/userns.conf % sysctl -p /etc/sysctl.d/userns.conf

% useradd -c "yocto" yocto % passwd yocto

% su - yocto

% podman pull alpine % podman run alpine cat /etc/os-release % podman images % podman unshare cat /proc/self/uid_map

podman system service

The podman system service command creates a listening service that answers API calls for Podman, it supports systemd socket activation.

Test with docker-compose (v2):

To be noticed, docker could NOT be installed together with podman, so docker-compose should be built as a standalone tool, remove 'docker-plugin' from its PACKAGECONFIG at build time:

PACKAGECONFIG:remove:pn-docker-compose = "docker-plugin"

% sudo systemctl start podman.socket % git clone https://github.com/docker/awesome-compose.git % cd awesome-compose/postgresql-pgadmin; source .env % sudo docker-compose up -d