Go to file
Bruce Ashfield d9af8d1514 podman: update to 4.7.1
Bumping libpod to version v4.7.1-6-g85b5f5723, which comprises the following commits:

    d1cb93d79 rtd: implement v2 build file
    8d045d4c9 Adjust to path name change for resolved unit
    eb5b5dbc8 Switch version to 4.7.2-dev
    ef83eeb9c New version: v4.7.1
    cc5acabf0 Update RELEASE_NOTES.md for v4.7.1
    456450438 compat API: speed up network list
    a2efda96d inspect: ignore ENOENT during device lookup
    f931f08a7 test/system: --env-file test fixes
    297a66c30 Revert "feat(env): support multiline in env-file"
    46a85e054 Revert "docs(env-file): improve document description"
    6afddf430 Revert "fix(env): parsing --env incorrect in cli"
    c5ca7e5fc [CI:DOCS] update swagger version on docs.podman.io
    51ee25d3f Fix locale issues with WSL version detection
    4d15c88a9 switch version to 4.7.1-dev
    073183fe1 Bump to v4.7.0
    44f727fb0 [CI:DOCS] v4.7.0 RELEASE_NOTES update
    2d32314d2 rpm: remove gvproxy subpackage
    a2697c028 packit: tag @containers/packit-build team on copr build failures
    54ce0ca7c specgen, rootless: fix mount of cgroup without a netns
    d2f9af717 pass --syslog to the cleanup process
    133e3a4f2 fix --authfile auto-update test
    2c62815e1 version: switch back from -rc1 to -dev
    7845dd175 New pre-release: v4.7.0-rc1
    49f76e95e [CI:DOCS] Update release notes for v4.7.0-rc1
    fa6f94001 Cirrus: Update operating branch
    0728a10c6 Move podman build opts to common file
    8a9f778e2 Add ability for machine rm -f for WSL
    919dce131 Plumbing to run machine tests with hyperv
    ade0c4932 CI: trace setup and runner scripts
    c37443e8b Bump to Buildah v1.32.0
    9b36f334d [CI:DOCS] bump release notes on main with the latest release
    cae110f8b fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc5
    4a2a423df Add --filter pod= autocompletion
    075cf2254 e2e: ExitCleanly(): manual test fixes
    db5adca73 e2e: continuing ExitCleanly(): just the replacements
    c689fb4a5 Fix some spelling and formatting
    522e0f43f Add support for Ulimit in quadlet
    b1e3e8d97 Run codespell on code
    6b7f718b4 wire in new buildah build options
    f9aba28ca make golangci-lint happy
    c1b6effac add !remote tag to pkg/specgen/generate
    3acee29cf pkg/specgen: do not depend on libimage for remote
    2c2299ad8 bump buildah to latest
    bf86ed72c [CI:DOCS] restart.md: migrate to container unit
    304b22729 fix(deps): update module k8s.io/kubernetes to v1.28.2
    4ed3273f6 Add support for PidsLimit in quadlet
    70560f916 Add DNS fields to Container and Network unit groups
    777b5efa4 [CI:DOCS] update API docs version list
    7b9114023 Try to fix broken CI (gvisor-something)
    df011f437 e2e: more ExitCleanly(): manual test fixes
    cb1cb338c e2e: more ExitCleanly(): dumb string replacements
    62ac96e12 e2e: create_test: use ExitCleanly()
    b0f77acd1 e2e: diff_test: use ExitCleanly()
    5920bfa2e The `podman init` command cannot modify containers.
    639a1a029 bump c/common to latest main
    806c5de12 Podmansh: use podmansh_timeout
    eefaa512a e2e: more ExitCleanly(): low-hanging fruit
    9b17d6cb0 vendor: update checkpointctl to v1.1.0
    cdcf18b86 kube: add DaemonSet support for generate
    75b4679a7 vendor of containers/(common, storage, image)
    19bd9b33d libpod: move oom_score_adj clamp to init
    4f017236e e2e: commit_test: use ExitCleanly()
    3a4be5e90 e2e: container_clone_test.go: use ExitCleanly()
    8cb14e54a e2e: use ExitCleanly() in cleanup_test.go
    925794c6a Ensure HC events fire after logs are written
    65a64da27 [CI:DOCS] podman-systemd.unit: fix equivalents
    d9a85466a Add support for kube TerminationGracePeriodSeconds
    5eb0a53a0 Update podman-kube-play.1.md.in
    c2cd93cdc Split up alt binaries to speed up build
    7bf9f302a Switch installer task to EC2
    fbbad0439 pod: fix duplicate volumes from containers.conf
    0c75eac63 tests: add test for pod cgroups
    b8f6a12d0 libpod: create the cgroup pod before containers
    331b3c216 cmd, specgen: allow cgroup resources without --infra
    83334fb4e specgen: allow --share-parent with --infra=false
    5de8f4aba libpod: allow cgroup path without infra container
    5121c9eb0 libpod: check if cgroup exists before creating it
    38209ef49 libpod: refactor platformMakePod signature
    627ac1c96 libpod: destroy pod cgroup on pod stop
    9a347619d utils: export MoveUnderCgroup
    556db46a6 libpod: refactor code to new function
    65bddfcd2 e2e: use ExitCleanly() in checkpoint tests
    479680232 [CI:DOCS]Remove use of --latest|-l from tutorial
    afeab39d1 CI test runner: upgrade tests rely on system tests
    59bd6a74a run --rmi: "cannot remove" is a warning, not an error
    70cf9740f StopContainer: display signal num when name unknown
    6f913f5f3 URGENT: fix broken CI
    b83485022 Add support for kube  securityContext\.procMount
    589867d71 podman: don't restart after kill
    2d7d8d1d1 Tmpfs should not be mounted noexec
    c2575f726 sys tests: run_podman: check for unwanted warnings/errors
    1211518e8 chore(deps): update dependency setuptools to ~=68.2.0
    465150f10 e2e: use ExitCleanly() in attach & build tests
    27495981c Some distros do not default to docker.io for shortname searches
    30abd7f1a security: accept empty capabilities list
    c32cfb1d0 systests: random_free_port: fix EADDRINUSE flake
    a5798e9f5 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.2.4
    dbfc3e7e0 Restrict fcos_test to amd64, arm64
    7b2fc5f8d fix(deps): update github.com/containers/libhvee digest to 56fb235
    0a913d578 fix(deps): update module github.com/docker/docker to v24.0.6+incompatible
    f9fd40221 fix(deps): update module golang.org/x/tools to v0.13.0
    71549c642 Ignore spurious container-removal errors
    e5bf0f96d fix(deps): update module golang.org/x/net to v0.15.0
    fdf694fcf systests: manifest zstd test: lots of tiny cleanups
    9730c0373 vendor: update github.com/opencontainers/runc to main
    e825bd5d5 [skip-ci] Update actions/checkout action to v4
    8b4a79a74 linux, rootless: clamp oom_score_adj if it is too low
    681b6db3f machine: increase max number of inotify instances
    302d15334 fix(deps): update module golang.org/x/term to v0.12.0
    f094884c1 Remove redundant nil checks in system connection remove
    17037af48 fix(deps): update module golang.org/x/text to v0.13.0
    1d51cd14a fix(deps): update module golang.org/x/sys to v0.12.0
    f542d21a7 fix(deps): update github.com/containers/libhvee digest to 2bf7930
    d4fedb288 docs(readme): fix a broken link
    50cd072bf [CI:BUILD] Podman FCOS image from main
    58a0b7ac8 Update golang.org/x/exp digest to d852ddb
    fe7bafb83 Add port forwarding and gvproxy machine test
    702709a91 libpod: do not parse --hostuser in base 8
    13342e503 fix: default typo
    3a6fc8d2b Add Japanese locale and translation of index
    39c5b7fac remove rh.container.bot@gmail.com
    a62abfe3d Tweaks and cleanups to prepare hyperv for CI
    a0738e7e6 system tests: housekeeping: various small fixes
    4082b67f6 CI: e2e: first use of new ExitCleanly() matcher
    6cbd17c0f CI: e2e: new ginkgo matcher, ExitCleanly()
    da1246d58 CI: e2e: fetch the standard system-test image
    d20b5869f kube play: fix pull policy
    18d35b612 Fix gidmap command in example
    e66c04c1f vendor containers/common@12405381ff
    b95ae3b4a manifest,push: support add_compression from containers.conf
    1085177fe hyperv ignition: use gvforwarder instead of vm
    2a8e6acec Set remote username earlier for hyperv
    26cefcbf9 Added an additional troubleshooting problem and solution
    a3c2d6ad2 Remove a dependency on libimage from pkg/bindings
    f1c24df4f Rename parameter in pkg/bindings
    259ab8594 Remove a dependency on libimage from pkg/api/handlers
    4cac1d3bc Don't re-inspect an image
    99834947d Cirrus: Remove multi-arch podman image builds
    91b8bc7f1 uid/gid mapping flags
    18c2a2be8 [DOC] Clarify default behaviour on uidmap
    60e3b5ef1 Update containers/common to latest
    fe3c4562f update libhvee
    1b45fd723 /_ping handler: return OSType http header
    2dbb0b096 e2e: fix race condition (kube play + logs)
    fe11db1e8 Update module github.com/vbauerster/mpb/v8 to v8.6.0
    7ef97fa49 Kube - support List documents
    346e5e52e kube down/play --replace: handle absent objects
    0938ee189 push, manifest-push: --force-compression must be true with --compression-format
    4b347609d oci: print stderr only after checking state
    461230c49 Updated docs to reflect pod spec sysctls support added in v4.6
    b8146a8a2 [CI:BUILD] Packit: Disable unexpected journal message check for cockpit-podman
    a6f2f5854 [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras
    b6b300c79 Update machine init/set tests
    da81bc13a Add rootful status to machine inspect
    d3618719b Dedup and refactor image acquisition
    adf34cbd7 Share podman sock bindings with other WSL distros
    db95e678a Fix user-mode validation check
    d898ae7f9 system tests: try to fix sdnotify flakes
    ecf9f9fd8 Cirrus: Disable only hello multiarch build
    f32e954b8 Set StopTimeout for service-container started under podman kube play
    d2ec127c1 Set StopTimeout for compat API if not set by client
    6f284dbd4 podman exec should set umask to match container
    2c5c2d213 [CI:BUILD] Packit: run cockpit-podman tests in PRs
    52ed7fce2 Add infra-name annotations to kube gen/play
    a5f6a4a3b kube: notifyproxy: close once
    7a94f8c12 system service: unset NOTIFY_SOCKET
    638f994c2 Update module k8s.io/kubernetes to v1.28.1
    7c9c96981 API attach: return vnd.docker.multiplexed-stream header
    60e58f059 test/apiv2/60-auth.at: use `doesnotexists.podman.io`
    61dd7f80c e2e tests: use registry:2.8.2 (was 2.8)
    243f365aa create apiutils package
    c5b4eb943 api docs: document stream format
    70f77efef Revert "Remove `hello` multi-arch image build"
    82bd56be7 manifest-push: add support for --force-compression
    469ace091 push: add support for --force-compression
    202cc433a Update module github.com/onsi/ginkgo/v2 to v2.12.0
    7e0130f75 Remove `hello` multi-arch image build
    1b0e64a10 hack/perf/system-df.sh: add `df` benchmarks
    148d95d8d Expand env variables for cmds/entrypoint with format $(ENV)
    e092f887f vendor c/storage@6902c2d
    c416e4576 Ignore the resource limits on cgroups V1 rootless systems
    9e680cbc6 Fixups for stopping gvproxy
    21c9517b5 Revert "GHA: Closed issue/PR comment-lock test"
    f0e8e79c9 GHA: Closed issue/PR comment-lock test
    5477fd38a GHA: Add workflow to lock closed issues/PRs
    75ce47347 [CI:DOCS] update auto-update docs
    85d0df330 chore(deps): update dependency containers/automation_images to v20230816
    bc35e28c0 fix(deps): update module github.com/google/uuid to v1.3.1
    3d00744d2 libpod: sum per-interface network stats for FreeBSD
    5eee8825e Set default Umask for `podman kube play`
    ef8f4db81 [CI:BUILD] rpm: spdx compatible license field
    e9539768c chore(deps): update dependency golangci/golangci-lint to v1.54.2
    63a8926e9 Implement automatic port reassignment on Windows
    45ce4834a Add support for ramfs as well as tmpfs in volume mounts
    bdc304058 Validate current generation of WSL2 with user-mode-networking
    67756ac60 use container restart policy if user specifies one
    0772d8ddb Stop gvproxy on hyperv machine stop
    50136ea86 [CI:BUILD] rpm: depend on man-db
    36e09f18b Update machine list test
    8b2990131 Update machine start tests
    c3dbfa9a1 Update machine rm tests
    c726cf810 libpod: improve conmon error handling
    ed1f514d5 cirrus setup: install en_US.UTF-8 locale
    8f85aaf07 fixup "podman logs with non ASCII log tag" tests
    27b41f087 libpod: use /var/run instead of /run on FreeBSD
    9b4f1cdb9 cirrus/lib.sh: extend env to passthrough at start for locale work
    ff66f31dd libpod: correctly pass env so alternative locales work
    29c298856 cgroups_linux: use SessionBusPrivateNoAutoStartup
    362747cfa podmansh man page UID=$(id -u lockedu) is not allowed
    e38cf33a6 CI: systests: remove pasta ICMP tests
    7103fdb3f podman.1.md: Fix formatting of exit code 127, clarify wording of `exit code` example.
    896cab612 document available secret drivers
    53dd37cc4 pkg/specgen: add support for read-only root on FreeBSD
    d5841ed52 add --module flag
    6a3f09e8a Update dependency setuptools to ~=68.1.0
    1d5890bcd Add riscv64 architecture to the cross build target
    252f51de8 GetFcosArch add `riscv64` arch
    98e7d7af0 Update WSL backend to be compat with FCOS defaults
    9e14e3ebe enabled hyperv image downloads
    3e2e360b9 fix(deps): update module github.com/containers/ocicrypt to v1.1.8
    abd35d4d3 [CI:DOCS] Fix git build example in build page
    0c52d1004 CI: e2e manifest_test: use image from quay
    31dc42224 Cirrus: Remove EC2 experimental flag
    4c7546cb3 sphinx: skip options include dir
    345b9b029 Update rootfs.md: Fix formatting and wording of idmap option
    f33b01b73 fix: Docker API compatible bool deserialization
    4cb2d48ca Revert "compat,build: pull must accept string"
    68bd81470 Add missing verb in machinectl example
    78d6cd4c9 [CI:DOCS] Update Release Notes and Release Process
    b6349017a chore(deps): update dependency golangci/golangci-lint to v1.54.1
    4b80492bd fix podman top missing output flake
    5908999e6 New partial-line test is flaking
    555b4f930 [CI:BUILD] Packit: add back fedora-eln targets
    f0dac3677 Cirrus: Prune defunct job + fix noop alias
    1947f035c Bump bundled gvproxy to 0.7.0
    df28df1ae systests: tests for --env and --env-file
    bcebcad1f Update system connection add & remove
    310f971fc Add tests for podman farm
    dce3ef3c4 Add podman farm update command
    44a704dfc Add podman farm remove command
    59a8140f1 Add podman farm list command
    6fcdf1a19 Add podman farm create command
    1d5ef29f0 Add podman farm subcommand
    23d5b5008 CI: e2e: add delay before podman logs or journalctl
    2951316b2 Add completion for Farms
    b672ddc79 Vendor c/common changes
    3963c5639 chore(deps): update dependency golangci/golangci-lint to v1.54.0
    a55c2636d file logger: fix podman logs --tail with partial lines
    7ce654fea fix(env): parsing --env incorrect in cli
    4c4bc0922 Update docker.io/library/golang Docker tag to v1.21
    f55c48ad3 podman stop --cidfile missing --ignore
    7ef03517f Skip podman exec cannot be invoked on Debian
    95ceacefb Re-enable checkpoint test on Debian SID
    c193dbd94 Require a non-generic reason for non-Fedora skip
    d79e3a23d CI FIXME removal/update.
    5ec856652 Update dependency containers/automation_images to v20230807
    7988dd82c [skip-ci] Update dawidd6/action-send-mail action to v3.8.0
    8a410784b [CI:DOCS] fixed couple typos in build docs
    282594e58 Stop timer in function waitPidStop
    7c0bccaf7 packit: Build PRs into default packit COPRs
    afaeedef7 Add support for host-gateway
    2de22ebf0 Ensure volumes-from mounts override image volumes
    03d7a5120 Minor: Include shasums in GHA workflow artifacts
    d63ac0652 Minor: Add important comment to windows GHA workflow
    9d7fe4e90 Minor: Update/fix dry-run input descriptions
    518daef72 [CI:DOCS] Quadlet - provide more information about network files
    819129b0d man-page xref: check for duplicate entries
    39641482c cp: close temporary file on error path
    018fdb48e Makefile: work around the lack of 'man -l' on FreeBSD
    0b7769fda Update module golang.org/x/net to v0.14.0
    ec5a9b9cc libpod: fix a crash in 'kube generate' on FreeBSD
    23c5890f2 remove temporary files when copy [NO NEW TESTS NEEDED]
    fab62f816 Update module golang.org/x/sys to v0.11.0
    b46d72fec [ci] Remove the podman socket in remove_packaged_podman_files()
    706c51b52 [ci] Correct the podman systemd file names
    dd4f47dd9 Always show RemoteSocket.Exists in json
    fc7c6efd3 Fail if ssh key exists
    69e883493 Fix regression for hyperv
    803a49da4 [CI:BUILD] Makefile: rpm target generates correct version
    1a63c1b23 Fix nits in #19480
    1e5453943 Add support for passing container stop timeout as -1 (infinite)
    d50054f1e pkg/specgen: Add device support for FreeBSD
    f5058f148 [CI:DOCS] man: remove duplicate entry .LastUp
    a8974d4a3 CI: e2e: remove useless test
    53d44a65e Check tty flag to set default terminal in Env
    62a22c5d6 Run codespell on code
    44f159ed3 Deprecate podman generate systemd
    346f9cb4e manifest/push: add support for --add-compression
    8ccda1ee8 [CI:DOCS]Update Release Notes
    b91599742 CI: sys: quadlet %T test: do not rely on journal
    4d69f0146 GHA: Support testing build/sign workflows
    15f35d354 Remove unnecessary backslashes
    18e75daa5 [docs] Use code blocks for commands in podman-completion
    f3ebd798c Make podman run --rmi automatically set --rm
    8b7701f52 machine: QEMU: recover from failed start
    49b8b971a vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a
    bfd2a8cad secret: add support for `--ignore` with rm
    21ebe0e90 Move `writeConfig` logic to shared function
    597ccff0b Move some logic of `setRootful` to a common file
    98cf8462a move `removeFilesAndConnections` to a common file
    75a8f13c4 Move `waitAPIAndPrintInfo` to common file
    55c7b5cec Move `addSSHConnectionsToPodmanSocket` code to shared file
    0489d3aa6 Update module golang.org/x/net to v0.13.0
    d74c225f4 chore(deps): update dependency containers/automation_images to v20230726
    27d79e1fc Skip pasta local forwarder test on debian SID
    b69cd8d84 Skip broken/flaky blkio-weight test
    822f2f495 Skip tarball re-inport test in rawhide for CI
    851cd9cca Cleanup CIDFile on podman-remote run --rm command
    a237c3f46 CI: e2e: remove workaround for missing login file
    42ad0c6e7 vendor: bump c/image and c/common
    5b7dce8a3 Add support for confined users
    78b850c48 Cirrus: Temp. disable rawhide validation task
    def70012b Limit git-validation to 'short-subject'
    33b8c451e Fix up man page and add test on globs
    850482b31 Move alternate image acquisition to separate function
    906af5bbc Move `getDevNullFiles` into a common file
    89f1fdc7f Update github.com/digitalocean/go-qemu digest to 2e3d018
    d6847b19c Convert QEMU functions to methods with documentation
    6930f39a6 Update docs/source/markdown/podman-build.1.md.in
    e1114f03c do not redefine gobuild for eln
    39341f283 Set default userns from containers.conf file
    4f1f88d7c Mention TimeoutStartSec in quadlet man page
    ada71889c inspect with network=none show SandboxKey netns path
    93f4cc1b5 [CI:DOCS] GHA: Use stable go for Mac/Win builds
    ff7d287fc Breakup AppleHV machine funcs
    64873e322 Codespell fixups
    acbe7703f Update docs/source/markdown/podman-stats.1.md.in
    0b7157e3b CI: e2e: reenable containerized checkpoint tests
    c67ef7c1a docs(env-file): improve document description
    4ee31dc37 Don't log EOF error when using podman --remote build with an empty context directory.
    f2794f9a8 API: kill: return 409 on invalid state
    170a78631 feat(env): support multiline in env-file
    19deb6a34 Adds documentation to new functions that were added
    481143e58 `startHostNetworking`: get DevNull files
    13da82466 `Remove`: remove network and ready sockets from registry
    d896431b2 `Remove`: remove files and connections
    32265e1f6 `Remove`: collect files to destroy
    381b103dd `Init`: read and split ign file
    aa6827a67 `Init`: write ign config
    cc30639d7 `Init`: add network and registry socks to registry
    78d3b549c `Init`: add SSH conns to podman sock
    630e7ba39 Improve the description of fields in podman-stats man page
    22a8b6886 make /dev & /dev/shm read/only when --read-only --read-only-tmpfs=false
    663fe9446 Mention no comment lines in Containerfile.in podman-build man page
    e973d15c3 [CI:BUILD] RPM: define gobuild macro for rhel/centos stream
    837bc2568 Fix HyperV loadMachineFromJSON function name
    416a471ee machine: QEMU: lock VM on stop/rm/set
    bb57c1631 libpod: add 'pod top' support on FreeBSD
    f592c33fb [CI:DOCS] Build and Sign Mac Pkginstaller
    f540bbffa Make sure users changes --authfile before checking
    8757fe88a github: add issue type as link to podman github discussions
    3523b9b05 Break QEMU `config.go` code into its own functions
    c341a0ffe machine: QEMU: lock VM on start
    afe8d5d84 libpod: fix 'podman kube generate' on FreeBSD
    0fefcf8a4 Add glob support to podman run/create --mount
    d6815da8c kube: add DaemonSet support
    239a5b64a Fix artifacts script after removal of msitools msi build
    e335a66a9 System tests: quadlet: fix race in %T test
    d6a32a3da If quadlets have same name, only use first
    db0ba9b25 Add support for mounts listed in containers.conf
    6dda21984 Update vendor of containers/common
    33891e8e9 System tests: add test tags
    5ba055937 [CI:DOCS] socket_activation.md: increase socat timeout
    dfec510b4 go-md2man: use vendored-in version, not system
    a92bb3219 CI: use different TMPDIR on prior-fedora
    6894e2031 system tests: authfile-exists: minor cleanup
    d70f15cc0 start(): don't defer event
    de122bb44 Fix: use --all in podman stats to get all containers stats
    349d775de Verify authfile exists if user specifies it
    e0ef23955 libpod: don't generate errors for createTimer etc.
    0cfd12786 add "healthy" sdnotify policy
    cbc96a7b4 Remove LICENSE and general doc files that are installed by the main package
    37f0e9620 Add missing `
    2f21df7b3 Remove legacy msitools based msi installer
    ac212605c Remove any quotes around distribution id
    e596b17fb add a podman-compose command
    eee2817de pkg/specgen: Don't crash for device spec with...
    d2796c6c1 fix(deps): update module github.com/docker/docker to v24.0.5+incompatible
    f4fbd6fd0 Update vendor of containers/(storage,image)
    d4fc66af9 Clean up /var/tmp/ when using oci-archives when creating  containers
    49257a3c5 [CI:BUILD] RPM: separate out gvproxy for copr and rawhide
    b57091ac9 Reduce qemu machine function sizes
    baf30e612 [CI:DOCS] migrate socket_activation.md to quadlet
    7314569cb [CI:DOCS] Update kube play volume support
    b5ce0ab2d Fix language, typos and markdown layout
    cb5450af7 [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet debug
    0bb73bf55 Add note on debugging quadlet unit files
    d4cfc498d Remove unnecessary use of the word "please".
    a6a207673 libpod: fix FreeBSD 'podman-remote top' default behaviour
    709beb6c0 fix(deps): update module github.com/onsi/gomega to v1.27.9
    3e534eff9 Add support for ShmSize to quadlet
    4b9f670ca Quadlet system test - force journald log driver for short lived containers
    731bd7d94 fix(deps): update module github.com/containers/libhvee to v0.4.0
    413552e10 quadlet recursively scan for unit files
    ce736413b Ensure that we appropriately warn that TCP is insecure
    558a70262 systests: quadlet: fixes for RHEL8
    8d190704a Quadlet - Allow setting Service WorkingDirectory for Kube units
    24bf6fc24 Quadlet system test - do not rely on journalctl in kube file tests
    3d6bc2f86 Fix markdown in docs for podman-network-create
    11ffea313 Man pages: check for corrupt tables
    1d14bb7a8 quadlet systest: fix broken tmpdir references
    e55e128fc Add `since` as valid filter option for `volume` subcommands
    6df17332b Podmansh: Better error, increase timeout to 30s
    96241159a Fix multiple filter options logic for `podman volume ls `
    00a5b0709 Add bash-completion for podman inspect
    3b6343202 Fix windows installer
    d7e25e14a Add missing reserved annotation support to `play`
    d2862c7dd Avoid progress hang with empty files
    5c0912b07 Revert the usage of `home.GetConfigHome()`
    5aa52659b Fix bug report issue template README link
    47997857f Replace error check for non-existent file
    8febb6aa1 Emergency gating-test fixes for RHEL8
    d8d600b1d Add progress bar for decompress image
    46058cfed refactor: move progressbar to a function
    ca9874ab7 Use pkg/homedir to get the home config directory
    7fb17ae78 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2
    a224ff731 Should be checking tmpfs versus type not source
    9e60f3ec5 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1
    b4ffbcdfd Enabled arm64 arch for podman applehv provider
    4e4078dbb [CI:BUILD] Packit: remove pre-sync action
    d0602e8f7 Add `--podman-only` flag to `podman generate kube`
    13a950016 Update vendor containers/(common, buildah, image, storage)
    f256f4f95 Use constants for mount types
    310a8f103 libpod: use define.TypeBind when resolving container paths
    1e9410094 Tests: remove/update obsolete skips
    a3bbc3a2c Fix trust not using local policy file
    0997cf012 Fix `podman container prune` docs for `--filter`
    a8d8c9497 Add more tests for liveness probes with default hostname & named ports
    383d683f8 docs: podman-build --network add slirp and pasta
    5e64cbf35 docs: podman run --network mention comma separted names
    1443e2918 Podman machine AppleHV pass number 3
    315a7887a Makefile: `package` -> `rpm`
    85d936133 network create: document --internal better
    e43127e0b pkg/specgen: fix support for --rootfs on FreeBSD
    8c16322a8 machine start: qemu: wait for SSH readiness
    12dc546fc [CI:BUILD] Packit: downstream task action fix
    2b2c4453f Fix container errors not being sent via pod removal API
    6ec261e7a Add missing return after utils.InternalServerError()
    d1950869a Update cmd/podman/login.go
    cce8501a5 [CI:DOCS] Reformat and reorder table with --userns options
    d497eb369 Add secret support to podman login
    2a9b9bb53 netavark: macvlan networks keep custom nameservers
    c6b5b9a02 remote: fix podman-remote play kube --userns
    441af003a fix(deps): update container-device-interface to v0.6.0
    656ad760f go mod: no longer use 1.18
    aeef403cd fix(deps): update module github.com/containers/libhvee to v0.3.0
    6fd4ae6d2 chore(deps): update module github.com/gin-gonic/gin to v1.9.1 [security]
    0dcfe6e06 Run codespell on code
    3ad55f48b system service: unset listen fds on tcp
    f1c68b79e add hostname to network alias
    b6ec2127b libpod: set cid network alias in setupContainer()
    4e96686e9 AppleHV enablement pass #2
    72a1857e4 e2e: Fetch the correct user name
    7b54fd84e Add `--no-trunc` flag to maintain original annotation length
    600de05e3 Fix TCP probes when the optional host field is not given
    ac3a115c3 Add support for using port names in Kubernetes health probes
    4494cefbc Fix: cgroup is not set: internal libpod error after os reboot
    932fae402 Allow setting volume and network names in Quadlet
    427b959a1 pasta tests: automatically determine test parameters
    97fd03ccd test/e2e: wait for socket
    a69194b02 manifest inspect: support authentication
    70428baef api: fix slow version endpoint
    f8213a6d5 libpod: don't make a broken symlink for /etc/mtab on FreeBSD
    499b8d13c CI: remove build without cgo task
    42ea0bf9c libpod: use io.Writer vs io.WriteCloser for attach streams
    597ebeb60 top: do not depend on ps(1) in container
    3f8ee70d0 make --syslog errors non fatal
    dbec2b5aa api: fix doc for default ps_args
    1b7eb44d3 Fixes typo in the path where quadlet looks for files
    efefd8cf5 Add --replace flag to podman secret create
    eec438222 [CI:DOCS] uidmap man pages: fix corrupt italics
    8d24e2838 [skip-ci] Update github/issue-labeler action to v3.2
    f9077689e [CI:DOCS] podman-system-service.1.md: document systemd usage
    dd16661b1 fix(deps): update module github.com/docker/docker to v24.0.4+incompatible
    65136521e fix(deps): update module github.com/docker/docker to v24.0.3+incompatible
    fa654e985 Use bytes size consistently instead of human size
    dee94ea69 bugfix: do not try to parse empty ranges
    9e4045768 [CI:BUILD] Packit: fix pre-sync action for downstream tasks
    531fb21d0 fix(deps): update module golang.org/x/tools to v0.11.0
    ab2fa45ad fix(deps): update module golang.org/x/net to v0.12.0
    459b1578c fix(deps): update module golang.org/x/term to v0.10.0
    99f93d55c e2e: fix two toolbox flakes
    fc5aa9c9c test/e2e: use GinkgoT().TempDir() over MkdirTemp()
    ea8992cb4 test/e2e: use random ImageCacheDir
    17a06d343 test/e2e: remove RHEL7 workaround
    bc22aefce test/e2e: remove unnecessary code in SynchronizedAfterSuite
    ff7790038 test/e2e: do not use /tmp for podman commands
    db7cb1dbf test/tools: vendor ginkgo v2.11
    c20612bab test/e2e: write timings directly to file
    a0b765552 machine start: qemu: adjust backoffs
    d874790bc auto update: fix usage of --authfile
    ba1355b23 system tests: refactor registry code
    94b321337 fix(deps): update module golang.org/x/text to v0.11.0
    644f7cd9b pkg/specgen: properly identify image OS on FreeBSD
    a3a62275c libpod: use new libcontainer BlockIO constructors
    2d68c3add [CI:BUILD] Minor: Don't confuse osx-debugging
    5aabc5088 [CI:DOCS] Better document the default value of --userns
    e4644c3cb Cirrus: build FreeBSD binaries in a VM
    92fc0f481 Makefile: add support for building freebsd release tarballs
    4a5396b46 [CI:DOCS] uidmap man pages: fix corrupt tables
    5a8e092a2 fix(deps): update github.com/crc-org/vfkit digest to c9a4b08
    d0359fcca fix(deps): update module github.com/containers/buildah to v1.31.0
    300eb36b4 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc4
    94e59bd2f Use /proc/self/gid_map as intended, not uid_map
    a16488f89 fix(command): ignore `--format` in `podman search --list-tags`
    9fb2f8e10 podman machine start: fix ready service
    8408ad498 Makefile: don't rely on the non-standard -r flag for ln
    39624473b pasta: Create /etc/hosts entries for pods using pasta networking
    fe0de8b9f fix(deps): update module github.com/containers/libhvee to v0.2.0
    2393fe453 pasta tests: add sanity check for test name vs function
    4da3e47b6 pasta tests: cleanup + 1 new test
    43b9426fc cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD
    e3f2a97d1 cmd/podman/system: add API server support on FreeBSD
    0d7da5c0b [CI:DOCS] Document support of pod security context IDs
    f64a1a1cc rootless: use default_rootless_network_cmd config
    e4efd709d Revert^3 "pasta: Use two connections instead of three in TCP range forward tests"
    17cd5aecb pasta: Workaround occasional socat failures in CI
    13c7d05cc pasta: Remove some leftover code from pasta bats tests
    bc58dae36 Bump c/image to v5.26.0, c/common 0.54.0
    2cb549339 fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.3
    bf60bb073 Display secret to user in inpspect
    448e01566 [CI:BUILD] RPM: Fix koji and ELN issues
    8fb719a9e e2e: systemd test: major fixes
    865d77e94 pkg/specgen: add support for 'podman run --init' on FreeBSD
    74b4615aa Bump version after v4.6 branch cut
    b6e636cbe Remove 'inspecting object' from inspect errors
    fe8355be7 pasta: Fix pasta tests to work on hosts with multiple interfaces
    d15cca024 [CI:DOCS] fix command incorrect in windows
    bcb89fc8b Fix readonly=false failure
    609c47ae6 pkg/specgen: Add support for Linux emulation on FreeBSD
    cf9ebcddf Fix up podmansh man page
    05eb3e6f1 Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs
    f5cc0487e Fixes for vendoring Buildah
    0f4c86e26 vendor in latest buildah
    6eaf8a271 tests: fix "Storing signatures" check
    b80fd54a5 update c/image and c/storage to latest
    eeb7aeb49 Kube quadlets can support autoupdate as well as containers
    2160a114c debug tail 800 lines flake
    dd81f7ac6 Pass in correct cwd value for hooks exe
    227c07aeb specgen: honor --device-cgroup-rule with a new user namespace
    0220f3338 specgen, rootless: raise error with --device-cgroup-rule
    db37d66cd make image listing more resilient
    17a18b16c Update module google.golang.org/protobuf to v1.31.0
    bc5269f18 Trim whitespace from unit files while parsing
    516034215 Re-organize hypervisor implementations
    ba3da15e0 play.go: remove volumes on down -f

Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2023-11-06 16:21:12 +00:00
classes umoci: allow encoding of multiple entrypoint or cmd arguments 2023-11-06 16:21:12 +00:00
conf conf: drop mickledore, only specify nanbield 2023-09-15 16:10:00 +00:00
docs podman: Add support for rootless mode 2022-07-15 17:11:58 -04:00
dynamic-layers xen-boot-cmd: Remove hard assigment for ramdisk image 2023-08-17 20:01:19 +00:00
files fs-perms-nagios.txt: add perms conf file 2018-09-06 12:45:17 -04:00
lib/oeqa/runtime/cases xtf: add testimage integration to run XTF test cases in OEQA 2021-09-02 16:36:23 -04:00
recipes-containers podman: update to 4.7.1 2023-11-06 16:21:12 +00:00
recipes-core packagegroup-container: require ipv6 for podman 2023-11-06 16:21:12 +00:00
recipes-demo app-container: temporarily copy contens of .inc file to recipe 2022-09-12 16:45:26 -04:00
recipes-devtools devtools: fork python3-flask-cors 2023-10-30 03:20:22 +00:00
recipes-extended iptables: add kernel-module-xt-nat to RRECOMMENDS 2023-09-15 17:30:40 +00:00
recipes-graphics/xorg-xserver global: overrides syntax conversion 2021-08-02 17:17:53 -04:00
recipes-kernel kernel: drop 6.4 .inc file 2023-11-06 16:21:12 +00:00
recipes-networking libslirp-virt: remove recipe 2023-09-27 01:04:05 +00:00
scripts oe-go-mod-autogen: clarify need to update main SRCREV 2023-11-06 16:21:12 +00:00
wic xen-image-minimal: supply bootloader config for qemux86-64 machine 2021-09-02 16:36:23 -04:00
.gitignore buildah: add seccomp and ipv6 to REQUIRED_DISTRO_FEATURES 2023-04-12 13:10:11 -04:00
COPYING.MIT Initial meta-xen layer documentation. 2012-06-21 15:51:11 -06:00
MAINTAINERS MAINTAINERS: add xtf and the raspberry pi dynamic layer for Xen 2021-12-16 21:45:00 -05:00
meta-virt-roadmap.txt docs: roadmap: add missing workflow items 2019-10-28 11:56:10 -04:00
README README: remove some cri-o specific layer dependencies 2023-02-17 15:34:51 -05:00

meta-virtualization

This layer provides support for building Xen, KVM, Libvirt, and associated packages necessary for constructing OE-based virtualized solutions.

The bbappend files for some recipes (e.g. linux-yocto) in this layer need to have 'virtualization' in DISTRO_FEATURES to have effect. To enable them, add in configuration file the following line.

DISTRO_FEATURES:append = " virtualization"

If meta-virtualization is included, but virtualization is not enabled as a distro feature a warning is printed at parse time:

You have included the meta-virtualization layer, but
'virtualization' has not been enabled in your DISTRO_FEATURES. Some bbappend files
may not take effect. See the meta-virtualization README for details on enabling
virtualization support.

If you know what you are doing, this warning can be disabled by setting the following variable in your configuration:

SKIP_META_VIRT_SANITY_CHECK = 1

Depending on your use case, there are other distro features in meta-virtualization that may also be enabled:

  • xen: enables xen functionality in various packages (kernel, libvirt, etc)
  • kvm: enables KVM configurations in the kernel and autoloads modules
  • k8s: enables kubernets configurations in the kernel, tools and configuration
  • aufs: enables aufs support in docker and linux-yocto
  • x11: enable xen and libvirt functionality related to x11
  • selinux: enables functionality in libvirt and lxc
  • systemd: enable systemd services and unit files (for recipes for support)
  • sysvinit: enable sysvinit scripts (for recipes with support)
  • seccomp: enable seccomp support for packages that have the capability.

Dependencies

This layer depends on:

URI: git://github.com/openembedded/openembedded-core.git branch: master revision: HEAD prio: default

URI: git://github.com/openembedded/meta-openembedded.git branch: master revision: HEAD layers: meta-oe meta-networking meta-filesystems meta-python

BBFILE_PRIORITY_openembedded-layer = "4"

Required for Xen XSM policy: URI: git://git.yoctoproject.org/meta-selinux branch: master revision: HEAD prio: default

Required for Ceph: URI: git://git.yoctoproject.org/meta-cloud-services branch: master revision: HEAD prio: default

Required for cri-o: URI: git://git.yoctoproject.org/meta-selinux branch: master revision: HEAD prio: default

Community / Colaboration

Repository: https://git.yoctoproject.org/cgit/cgit.cgi/meta-virtualization/ Mailing list: https://lists.yoctoproject.org/g/meta-virtualization IRC: libera.chat #meta-virt channel

Maintenance

Send pull requests, patches, comments or questions to meta-virtualization@lists.yoctoproject.org

Maintainer: Bruce Ashfield bruce.ashfield@gmail.com see MAINTAINERS for more specific information

When sending single patches, please using something like: $ git send-email -1 -M --to meta-virtualization@lists.yoctoproject.org --subject-prefix='meta-virtualization][PATCH'

License

All metadata is MIT licensed unless otherwise stated. Source code included in tree for individual recipes is under the LICENSE stated in each recipe (.bb file) unless otherwise stated.