| Commit message (Collapse) | Author | Age | Files | Lines |
|---|
| |
|
|
| |
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping crun to version 1.18.2-17-g52ed5880, which comprises the following commits:
fd69065d test: add new test for exec-cpu-affinity
b941d6c5 linux: move reset cpu affinity to scheduler
ef33259c linux: honor exec cpu affinity mask
047b7485 src: move cpuset_string_to_bitmask to utils
2c8088c4 libocispec: sync
42b959b5 container: initialize max caps before accessing process block
46bd62b1 cgroup: do not stop process on exec
19bbd8da utils: silence compiler warning
8a0ee4b5 src: use mount API to self-clone
85d4db3d crun: check for integer overflow
10b2146e linux: add check before deref
2525752d cgroup: drop unuseful check
1ae190b0 src: run make clang-format
00ab38af NEWS: tag 1.18.2
5bc6b50e cgroup, systemd: fix first rule selection for systemd
c41f034f NEWS: tag 1.18.1
6628d7a3 utils: check for snprintf truncation
7c4a3f9c cgroup: skip DevicePolicy if all devices are allowed
ef60ec90 libcrun: deprecate cgroup v1
77e4233a cgroup, systemd: ignore rules before a default deny one
8a30a57a cgroup: ignore redundant deny dev cgroup rules
369dd95b CONTRIBUTING.md: new file
3647ecab linux: copy map_file before tokenizing in uidgidmap_helper
8656b254 NEWS: tag 1.18
bf0a3516 rpm: use embedded yajl in RHEL builds
41461290 crun.1.md: add lsm-profile and lsm-mount-context
ed642593 criu: load lsm functions
ce89aa66 restore: add lsm-mount-context option
9efd6a87 restore: add lsm-profile option
aee13711 github: update run-on-arch-action
c4a65aad cgroup: split lines when writing raw unified files
dd7adb22 cgroup: write_cgroup_file_or_alias uses write_cgroup_file
22b018d0 cgroup: convert block_io devices to IODeviceWeight
c7745e9a cgroup, systemd: add support for IODeviceWeight
8e3e693e cgroup: refactor handling of io.weight
7d0e2cdb cgroup: report errors if value contains not parsed data
efae52ab cgroup: add support for the misc controller
d55194b2 cgroup systemd: ignore unsupported properties
500cf802 cgroup, systemd: honor cpu.idle
5f64da6a linux: pass down state_root to the cgroup handler
80d9677b cgroup, systemd: honor memory.zswap.max
01fa4993 cgroup: specify devices rules to systemd
667442e4 cgroup: move standard devs definition in a common place
335d8cfb cgroup: specify TasksMax to systemd
f6d8373f cgroup: specify MemorySwapMax to systemd
1a04566d cgroup: specify MemoryLow|MemoryHigh|MemoryMin to systemd
8d90eb3a cgroup: use macro to refactor common pattern
34061ab5 add duplicate namespace detection
b29ccd7e cgroup: rename function
af034b91 cgroup: special handle value "max"
2825a579 cgroup: set io weight on systemd owned cgroup
6cf5324b Packit: constrain koji and bodhi jobs to the fedora package
7140aea1 nix: replace gitMinimal with git
27b5a2f6 Fix running on kernel without user namespaces
b5ff44f2 nix: update list of packages
3b40d773 build: specify --extra-experimental-features to nix
da616875 release.sh: update nix image
dee824e6 Fix segfault in `crun features`
4ea62f25 Disable criu support on riscv64
Bumping libocispec to latest, which comprises the following commits:
ed23e6a runtime-spec: sync from upstream
412ce10 image-spec: sync from upstream
4b8feed common: make sizeof the last argument for calloc
Bumping image-spec to version v1.1.0-44-gc66e811, which comprises the following commits:
40d3096 add example using .wh. and move opaque example to its section
cee95e9 Ignore uname/gname where uid/gid are supported
d44515e Changes requested from review
5db69d9 Feat: Pin external references on a release
76b8bae README: update runtime-spec links to use main branch
716f83b Implementations should support zstd
Bumping runtime-spec to version v1.2.0-23-g9505701, which comprises the following commits:
9ceba9f update http links to https
faf82be doc: fix the invalid hyperlink naming-a-volume
adaa517 config: simplify final CPU affinity rule
119ae42 Add CPU affinity to executed processes
2149fb5 config-linux: describe the format of cpus and mems
c6af124 ci: remove redundunt actions
d4aa6d8 chore: format JSON file `make -C schema fmt`
b983fbf CODEOWNERS: remove vbatts
bf698d0 MAINTAINERS: move vbatts to EMERITUS
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping moby to version v27.4.0-rc.2-25-g33b6b826c2, which comprises the following commits:
151c7565a9 Remove buildkit init timeout
1abc35f098 Add label on PrepareSnapshot to warn about non-expiring leases
1d1da55382 Update containerd image builder to use lease prune label
a3afccd409 Fix lease management during image operations
33e5f87d0f [27.x] vendor: github.com/moby/buildkit 80e01a9dc7c1 (v0.17.3-dev)
752c0453d6 vendor: github.com/moby/buildkit v0.17.2
6cab48bd9b vendor: github.com/containerd/typeurl v2.2.3
a64812939f Update containerd to v1.7.24
179c7c7596 vendor: github.com/tonistiigi/go-actions-cache 394979b8119e
7f9c5b278a vendor: resenje.org/singleflight v0.4.3
b90c6e922c vendor: github.com/containerd/continuity v0.4.5
e956d4a370 Dockerfile: update to runc v1.2.2
b888333fe1 Dockerfile: update containerd to v1.7.24
6b04fcf560 vendor: github.com/golang-jwt/jwt/v4@v4.5.1
0f0b83a00b vendor: google.golang.org/grpc v1.66.3
b859373da2 vendor: tags.cncf.io/container-device-interface v0.8.0
2f816b2596 [27.x] daemon/containerd: add missing go:build tag
3e03c979da update go:build tags to use go1.22
346ac21032 daemon/logger/loggerutils: add //go:build directives to prevent downgrading to go1.16
f54e5b0b19 libnetwork/networkdb: add //go:build directives to prevent downgrading to go1.16
6ec5197103 [27.x] vendor: github.com/containerd/containerd v1.7.23
31c8d23e7e Dockerfile: update compose to v2.30.3
2ee3796e3f Dockerfile: update buildx to v0.18.0
2acf9893c6 Increase test handler sleep, replace deprecated assert
edfb2048ac deprecate pkg/platform and move internal
5ab7960b46 logger/journald: plumb contexts into reader
857fc4730c logfile: Close reader when caller cancels
a7badb2bb5 Logfile: Add tracing spans
d48c403efa Logfile: skip files that are corrupted
c9a7391911 Refactor logfile reads
49f5431807 Fix time comparison in sharedtemp implementation
173a9f2091 libnet: don't put external DNS answers in OTel spans
15b69c4200 vendor: update buildkit to v0.17.1
3280e50f65 vendor: update buildkit to v0.17.0
00774deb96 vendor: update buildkit to v0.17.0-rc2
0a67347003 vendor: google.golang.org/protobuf v1.34.2
033bd73bba [27.x] pin github.com/Microsoft/hcsshim to v0.11.x
0e4ab47f23 update to go1.22.9
d3b9ec90ba api/swagger: Improve description for platform in images/push
c902e1a187 c8d/inspect: Fix duplicate RepoDigests
b089f36796 volume: VolumesService.Create: fix log-level for debug logs
afd7c9913f client: prevent idle connections leaking FDs
de0135965e c8d/httpfallback: Handle connection errors
ddb56edd00 volume/mounts: fix anonymous volume not being labeled
b7bc29af50 daemon: use OwnCgroupPath in withCgroups
1e11f2a1c0 daemon: deprecate Daemon.IsPaused
0183f5dd13 daemon: deprecate Daemon.Exists
749f9ccee4 Fix: setup user chains even if there are running containers
8deb557451 api: GET /images/json: preserve original manifest order
e4c067af91 gha: shorter time limits for smoke, validate
525b19ff04 gha: use "ubuntu-24.04" instead of "ubuntu-latest"
ceb41b83f3 gha: dco: small tweaks to running the container
2690b70a09 gha: dco: update ALPINE_VERSION to 3.20
f53efc688f gha: build (binary), build (dynbinary): limit to 20 minutes
166565e3ac gha: dco: limit to 10 minutes
57a72c3c9d container: deprecate ErrNameReserved, ErrNameNotReserved
8804551902 container: viewDB.ReserveName, view.GetID: return errdefs errors
202aac0eb4 container: viewDB.withTxn: don't wrap errors
be8be11708 container: TestNames: don't string-match error assertions
bedbe333bf dockerd-rootless-setuptool.sh: let --force ignore smoke test errors
ffb5bd905a cmd/dockerd: Add workaround for OTEL meter leak
12cc7f7696 daemon/containerd: getPushDescriptor: fix formatting of platform in errors
01412dacf7 daemon/containerd: touch-up platform not found error
3c93981344 images: GetImage: touch-up error message for missing platform
03225b1a41 PushImage: remove misleading error about --platform without containerd
5376990d4d build: create distinct history db for each store
34d2e5e7e6 vendor: github.com/moby/swarmkit/v2 v2.0.0-20241017191044-e8ecf83ee08e
0f8fc3105e Enable bridge netfiltering if userland-proxy=false
505c4c32be Set NODAD on bridge IPv6 addresses
c00b3108e5 docs: api: document w (width) and h (height) query params as required
e39ced5c00 api: document w (width) and h (height) query params as required
3c258e6011 pkg/authorization: update link to API documentation
29f0dcd902 client: update link to API documentation
21c974b281 docs/api: version-history: update documentation links
0bc91d5dc8 gha: restrict cross and bin-image to 20 minutes
d755573aba vendor: github.com/moby/buildkit v0.17.0-rc1
32afa26719 gha: add guardrails timeouts on all jobs
8dc3ce5606 integration/build: remove TestBuildWithSession, and fsutil direct dependency
136fdfcdfc vendor: google.golang.org/grpc v1.66.2
6eed19d656 vendor: google.golang.org/protobuf v1.34.1
f29cc7c2cf vendor: github.com/cespare/xxhash/v2 v2.3.0
5f92ab397b vendor: golang.org/x/tools v0.25.0
9af7d06698 vendor: golang.org/x/mod v0.21.0
8fef24d9d4 vendor: golang.org/x/net v0.29.0
efc5252041 vendor: golang.org/x/crypto v0.27.0
a8e92fa662 vendor: golang.org/x/text v0.18.0
80cd75d7d5 vendor: golang.org/x/sys v0.25.0
a2a544202b vendor: go.etcd.io/bbolt v1.3.11
418a79d51b gha: buildkit: make sure expected Go version is installed
43580ccbc1 update to go1.22.8
af8b897560 Dockerfile: update compose to v2.29.7
d91a922ef3 Dockerfile: update docker CLI to v27.3.1
0138291345 gha: add CodeQL Analysis workflow
a6b772b24c gha: govulncheck: make sure read permissions are set
cd21af7e41 Do not DNAT packets from WSL2's loopback0
5c499fc4b2 Only enable bridge netfiltering when needed
8adc8e405d Dockerfile: update compose to v2.29.4
576fc88b1a Dockerfile: update buildx to v0.17.1
e928a0d22d man: dockerd: add description for --log-format option
82cf138590 internal/opts: SetOpts: invalidate empty option-names
487a2f5314 internal/opts: SetOpts.Set: remove redundant var assignment
6d4a507acc internal/opts: SetOpts,NamedSetOpts: test for optional value
bae46f6463 man: dockerd: value is optional for --feature flag
176e04d73b man: fix duplicate word in --feature flag description
06c9c72269 Update dlv in the dev-env
15fbba2169 man: update dockerd man-page to include --feature flag
b262a95d67 c8d/prune: Keep deletion order stable
39c17094b0 c8d/prune: Add OTEL spans
343800d7be adjust TestPruneDontDeleteUsedImage for 27.x branch
95ffe8493e c8d/prune: Keep the last tagged image instead of creating dangling image
c40cd54593 Add feature to daemon flags
dbee7b16df TestIPRangeAt64BitLimit: remove colon after XFAIL to help grepping
bd71b5d319 Explicitly disable nvidia device injection for --gpus=0
a5478dde0e Dockerfile: update RootlessKit to v2.3.1
80d0013217 Fix typos
ce86fade0d Dockerfile: update compose to v2.29.2
682b96c479 Dockerfile: update buildx to 0.17.0
c3aaaf2be0 Dockerfile: update docker CLI to v27.2.1
ce07360a1c vendor: update buildkit to v0.16.0
ab99508c07 docs/api: update deprecation version for erroneous fields (v1.46, v1.47)
c7a8942d6d api/swagger: update deprecation version for erroneous fields
57ba0b05e6 vendor: update buildkit to v0.16.0-rc2
16bf28ec2d test: update since session signature has changed
a0650bf67c vendor: update buildkit to v0.16.0-rc1
f7ea6bb4d9 vendor.mod: golang.org/x/net v0.28.0, etc.
da2b59d3a2 vendor.mod: golang.org/x/time v0.6.0
3e60519c9c vendor.mod: golang.org/x/sys v0.24.0
e6a4c5f840 vendor.mod: golang.org/x/sync v0.8.0
2514b02677 vendor.mod: golang.org/x/mod v0.20.0
69f9ab2958 vendor.mod: drop direct dependency on golang.org/x/exp
70c8d41445 vendor: github.com/containerd/nydus-snapshotter v0.14.0
54e4cdc044 vendor: github.com/containerd/nydus-snapshotter v0.13.14
dca7a36092 vendor: google.golang.org/grpc v1.62.0
458110ccd0 vendor: golang.org/x/time v0.5.0
27b5c33847 vendor: github.com/moby/sys/sequential v0.6.0
6e77ead91e vendor: github.com/moby/sys/symlink v0.3.0
0890631ac7 vendor: github.com/moby/sys/signal v0.7.1
508173c39d vendor: github.com/moby/sys/mount v0.3.4
9b26c10e8b vendor: github.com/moby/sys/mountinfo v0.7.2
d3884731cd Dockerfile: update containerd binary to v1.7.22
cdbc2b6869 vendor: github.com/containerd/containerd v1.7.22
d0462c0e80 seccomp: add riscv64 mapping to seccomp_linux.go
fc774f6dc0 docs: api: fix documentation for image push endpoint (API v1.25-v1.47)
84d78a8ad5 api: swagger: fix documentation for image push endpoint
e16197e51d gha/bin-image: Also run on branches like `27.x`
37bf6e81f9 update to go1.22.7
3a4c589290 vendor: github.com/opencontainers/runc v1.1.14
10cf2d64b6 update runc binary to 1.1.14
84cfcb0893 docs/api: add documentation for API v1.47
edeb6ba9fb golangci-lint: temporarily disable G115: integer overflow conversion
adb0b8536d update golangci-lint to v1.60.2
01f7ec0f21 update to go1.22.6
442462ad4e hack/make/.binary: set CGO_LDFLAGS=-latomic for arm/v5
a3eca63b5b hack/make/.binary: set CCGO_CFLAGS=-Wno-atomic-alignment for arm/v5
d036255b69 c8d/pull: Same error message for non-matching platform
b9f56706c5 man: create parent directories in install recipe
12d4379ad1 c8d/list: Don't exclude non-container images
0fbb78c187 daemon: fix non-constant format string in call (govet)
2bc17a1e5c api/types: fix non-constant format string in call (govet)
fe01a5fc30 api/server/router: fix non-constant format string in call (govet)
bf7ca4dc4b container/stream: fix non-constant format string in call (govet)
405a163620 libnetwork/drivers/bridge: fix non-constant format string in call (govet)
812b97d559 volume/testutils: fix non-constant format string in call (govet)
c4eef2a58c builder/dockerfile: parseChownFlag: fix non-constant format string in call (govet)
8dec1f216f layer: ignore G602: slice index out of range (gosec)
068e82bdd2 internal/cleanups: fix non-constant format string in call (govet)
8ae439ddaa libnetwork/cnmallocator: fix non-constant format string in call (govet)
c27f7de662 cmd/dockerd: fix non-constant format string in call (govet)
ec8ff9cbbd libnetwork: fix non-constant format string in call (govet)
e5bc931f17 integration-cli: fix non-constant format string in call (govet)
6c3b1992d4 integration-cli: DockerSwarmSuite: rm redundant Fprintf, handle errors
83171f6b5a integration-cli: DockerNetworkSuite: rm redundant Fprintf, handle errors
4cfa21bb92 integration-cli: use erors.New() instead of fmt.Errorf
28bdd819d0 libnetwork: TestDNSOptions: remove redundant skip check
cb2e98cfbf integration-cli: remove redundant platform checks
875e8aeef2 vendor: github.com/containerd/containerd v1.7.21
1900e4d8eb Dockerfile: update containerd binary to v1.7.21 (static binaries and CI only)
ecd2b6ff09 c8d/image: Add `hostPlatformMatcher`
d5b03423d1 man: support bringing your own go-md2man
56c5c23114 man: build dockerd man pages using make
77b2eb5734 Removed all mentions of "please" from docs and messages
805becdc7e docs: add default-network-opt daemon option
a5828ac742 docs: remove devicemapper
f7246a0e2c man/dockerd.8: assorted formatting fixes
f110e779f6 man/dockerd.8: escape asterisks and underscores
edbcbf8da7 docs: update dockerd usage output for new proxy-options
b7cc16b0b0 Fix styling of arguments
ecbc4f05bb Fix the max-concurrent-downloads and max-concurrent-uploads configs documentation
43298ad298 docs: remove documentation about deprecated cluster-store
8cc7f26f56 Document `--validate` daemon option
255eaa6647 Update man-page source MarkDown to work with go-md2man v2
ee27f4cd7f docs: update for cgroup v2 and rootless
c1d3c952e7 docker run: specify cgroup namespace mode with --cgroupns
fc9029a2e2 daemon: document --max-download-attempts option
115b10a467 Update document links and title.
488872bcb4 Allow user to specify default address pools for docker networks This is separate commit for CLI files to address PR 36054
f623030fac Update docs and completion-scripts for deprecated features
ac7032bff9 Added docs for dockerd
161006302f fix a number of minor typos
a6de17d230 Introduce/document new IPC modes
6513e80c84 docs: add documentation for dm.libdm_log_level
3d917f3fd6 Restore dockerd man page
e854a5c201 c8d/pull: Replace pointer to interface with interface
ea58dab95e c8d/pull: Keep the replaced image as dangling
0a38589add c8d/load: Only unpack host platform images
7c069d3021 c8d/load: Don't fail whole operation if unpack failed
5002faebe8 integration/TestAPIImagesListManifests: Check `Containers`
a15a309832 c8d/list: Update benchmark to also have containers
fd5cede287 c8d/list: Fix race condition when traversing containers
65c4e49aff govulncheck to report known vulnerabilities
7ebb277873 Dockerfile: update xx to v1.5.0
ad5eb875d4 c8d/list: Don't require `opts.ContainerCount` for manifest containers
3d845e0e8c c8d/list: Add test for total and content size
3563a707d0 c8d/list: Fix `Total` size calculation
89757f83ff api/list: Expose manifests
bb2fec6425 api: Bump default version to 1.47
0f8fcec1d9 swagger: Disable ImageSummary model generation
1ec5e86154 api/types/registry: fix godoc, and add some doc-links
62f32e9a97 plugin: fix deprecation comments
830c76c6f2 vendor: update buildkit to v0.15.2
354bf75675 libcontainerd: gofumpt
4ab7d90669 pkg/plugins: gofumpt
c11b2d9c7d pkg/archive: gofumpt
ccdc79d55a libnetwork: gofumpt
35b1a30028 layer: gofumpt
9f63aa7435 internal: gofumpt
4d16ac993e integration: gofumpt
6d5266a650 integration-cli: gofumpt
4084dac566 daemon: gofumpt
c36ab4c2ca daemon/containerd: gofumpt
904867593b daemon/config: gofumpt
72876770d0 builder: gofumpt
e8109ee4da api/types: gofumpt
ed65e1224e api/server: gofumpt
d54aff9312 API 1.46: end per-interface sysctl migration in major release
8f12906274 Migrate per-endpoint sysctls until 28.0.0
c53be2f3d5 Allow --ip-range ending on a 64-bit boundary
fc0150b962 daemon/containerd: rm use of regexp
73c01d0b6a image/v1: rm regexp use
c93fe4a27d layer: rm regexp use
31459c8268 docs/api: swagger: fix x-nullable for SystemInfo.Containerd (api v1.46)
35d430c62e api/swagger: fix x-nullable for SystemInfo.Containerd
80a59c2f1a migrate to github.com/moby/sys/userns
e7fe276c00 update to go1.21.13
e8cd19e810 gha: set permissions to read-only by default
e0c52e0ba6 vendor: update buildkit to v0.15.1
efb67b16b0 api/server/router/grpc: NewRouter: set correct MaxRecvMsgSize, MaxSendMsgSize
f96e26f68d migrate to github.com/moby/sys/user/userns
78b59867f2 vendor: github.com/moby/sys/user v0.2.0
018137b01a vendor: github.com/gofrs/flock v0.12.1
650e06ac75 vendor: golang.org/x/sys v0.22.0
bfe5339c7e dockerd-rootless-setuptool.sh: move RootlessKit smoke test
99471ac2fe hack: explicitly control enabling the journald logging driver
b9b43b3bdf README: replace obsolete Docker EE mention
1bc907c97c vendor: github.com/containerd/containerd v1.7.20
1c0885d60d gha: check-pr-branch: fix branch check regression
ed83a9e3a1 update containerd binary to v1.7.20
422ef48c2f gha: check-pr-branch: verify major version only
c9d37a9198 [27.1] pkg/rootless/specconv: deprecate, and add temporary aliases
1f16a44b3d pkg/rootless/specconv: move to internal
c8f1317585 pkg/directory: deprecate, and move to internal
68587c38fe pkg/directory: fix comment, and remove import comments
d1ea2b1fec [27.1] pkg/containerfs: deprecate, and add temporary aliases
31c1b7dc17 pkg/containerfs: move to internal
6231ea4a34 pkg/containerfs: cleanup GoDoc, and make Windows a proper wrapper
dc33eb81d8 pkg/containerfs: remove CleanScopedPath and make it internal
bc6ae42031 Dockerfile: update compose to v2.29.0
af8866f324 Dockerfile: update buildx to v0.16.1
5e4ddd81a2 api/types/system: remove Info.ExecutionDriver
c7e4d181a1 vendor: cloud.google.com/go/logging v1.9.0
3d7e824bc2 vendor: golang.org/x/oauth2 v0.21.0
d66b76d2e6 vendor: cloud.google.com/go/compute/metadata v0.3.0
03dc388f63 c8d/build: Log `image tag` event when image was built with Buildkit
5ee23b6050 builder-next: Add ImageNamedByBuildkit callback
53c521a6b2 builder-next: Don't return error from exported callback
eccccd7577 Fix API version in TestSetInterfaceSysctl
d9e3d1b815 update containerd binary to v1.7.19
b91e20cc2e vendor: update buildkit to v0.15.0
505be6557b vendor: update buildkit to v0.15.0-rc2
b1613dc2a1 vendor: update buildkit to v0.15.0-rc1
52f6163746 vendor: golang.org/x/net v0.25.0
c70e404e9e vendor: golang.org/x/crypto v0.23.0
d7a3f01421 vendor: golang.org/x/text v0.15.0
0f2f9e0049 vendor: golang.org/x/sys v0.21.0
45a1c34202 vendor: github.com/klauspost/compress v1.17.9
7b31435cf8 Migrate to github.com/containerd/platforms module
99df4fee0b vendor: github.com/containerd/containerd v1.7.19
9f08d1e357 vendor: github.com/microsoft/hcsshim v0.11.7
d1bbb61844 If url includes scheme, urlPath will drop hostname, which would not match the auth check
0835eaa5a1 Authz plugin security fixes for 0-length content and path validation Signed-off-by: Jameson Hyde <jameson.hyde@docker.com>
b039de78d7 docs/api: Add missing `
7d99ebe418 rootless: add `Requires=dbus.socket`
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping libpod to version v5.3.1-5-gc2f09d78d5, which comprises the following commits:
0d22d7b74e Quadlet - Use = sign when setting the pull arg for build
62c096bbce win-installer test: revert to v5.3.0
7bf22277ca Bump to v5.3.2-dev
4cbdfde5d8 Bump to v5.3.1
50960afe33 Update release notes for v5.3.1
d26990702c Update windows installer tests
2739822424 Windows: don't install WSL/HyperV on update
a8d61c034b Switch to non-installing WSL by default
98353f27ed docs: add 5.3 as Reference version
4886a0ba64 only read ssh_config for non machine connections
93562b4955 ssh_config: allow IdentityFile file with tilde
28e7b239ba ssh_config: do not overwrite values from config file
c49944ea02 connection: ignore errors when parsing ssh_config
f7877bf9db spec: clamp rlimits in a userns
dcedf5f211 cirrus: set proper DEST_BRANCH for 5.3
a39a749ce3 libpod: addHosts() prevent nil deref
9a9f07aa4b Bump bundled krunkit to 0.1.4
5546dc6c20 fix podman machine init --ignition-path
8efa1c1075 Bump to v5.3.1-dev
874bf2c301 Bump to v5.3.0
2e3836d226 Update release notes for v5.3.0
31df1bb97c [v5.3] Bump to Buildah v1.38.0
9556882bbf [v5.3] Skip FIPS mode secrets run test
c6dd2c77ab [v5.3] Buildah treadmill tweaks
0710e83c41 test/buildah-bud: build new inet helper
d852c58d6c test/system: add regression test for TZDIR local issue
ac59fb9231 vendor latest c/{buildah,common,image,storage}
1f0e2db2a9 Reapply "CI: test nftables driver on fedora"
16acfd7edb Revert "cirrus: test only on f40/rawhide"
dc97a7e0de test f41 VMs
9e38b455e4 volume ls: fix race that caused it to fail
44df7344fe AdditionalSupport for SubPath volume mounts
17224fcb05 Bump to v5.3.0-dev
8469dcc4f0 Bump to v5.3.0-rc3
a18365c665 Update release notes for v5.3-rc3
10309bfb45 podman: update roadmap
b237b4dc2a libpod: journald do not lock thread
2597eeae70 Add key to control if a container can get started by its pod
c6be5a6684 Honor users requests in quadlet files
2c01264568 CI: systests: workaround for parallel podman-stop flake
528b085438 Fix inconsistent line ending in win-installer project
5ae5ab8c26 fix(deps): update module github.com/opencontainers/runc to v1.2.1
dbfc8cccda Quadlet - support image file based mount in container file
e6d987882e API: container logs flush status code
768ad8653a rework event code to improve API errors
e3abf5c9e8 events: remove memory eventer
6348778348 libpod: log file use Wait() over event API
0acd192b59 Makefile: vendor target should always remove toolchain
ef20e75a77 cirrus: check consitent vendoring in test/tools
f4ad93d5f6 test/tools/go.mod: remove toolchain
3f15f710ce fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.10
d8311353b9 fix(deps): update module github.com/onsi/gomega to v1.35.1
37c8e10031 doc: explain --interactive in more detail
cd1b6b7121 fix(deps): update golang.org/x/exp digest to f66d83c
2dff79bd2c fix(deps): update github.com/opencontainers/runtime-tools digest to 6c9570a
5722304613 fix(deps): update github.com/linuxkit/virtsock digest to cb6a20c
1e7593d17f Bump to v5.3.0-dev
ffad01fbc8 Bump to v5.3.0-rc2
b6919a5712 Update release notes for v5.3.0-rc2
314dece926 add default polling interval to Container.Wait
d633824a95 Instrument cleanup tracer to log weird volume removal flake
6b8e8cbbf7 make podman-clean-transient.service work as user
b455f94ca8 Add default remote socket path if empty
48a8a9c22c Use current user if no user specified
e523734ab6 Add support for ssh_config for connection
c98538db7d libpod: use pasta Setup() over Setup2()
c7ff3b75cb fix(deps): update module github.com/onsi/ginkgo/v2 to v2.21.0
5a1bc6126e fix(deps): update module github.com/onsi/gomega to v1.35.0
bd75a4e0e0 logformatter: add cleanup tracer log link
2a0a52469c docs: fix broken example
f4be5e34c2 docs: add missing swagger links for the stable branches
b9fed4fcf2 readthedocs: build extra formats
ce24ab0683 pkg/machine/e2e: remove debug
4a54fd8756 fix(docs): Integrate pasta in rootless tutorial
5f66277138 chore(deps): update dependency setuptools to ~=75.3.0
1f44d0f8b2 libpod: report cgroups deleted during Stat() call
9abc17f1e1 chore: fix some function names in comment
41a82c9a95 CI: parallelize 450-interactive system tests
10d056cc5e CI: parallelize 520-checkpoint tests
e6b7e4ff84 CI: make 070-build.bats use safe image names
64516e1b8f test/system: add podman network reload test to distro gating
743a0d49eb System tests: clean up unit file leaks
c0f4e2ce67 healthcheck: do not leak service on failed stop
6069cdda00 healthcheck: do not leak statup service
45e1ffb799 fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.8.0
afedb83917 Add Startup HealthCheck configuration to the podman inspect
d2ba730f33 buildah version display: use progress()
825eed4bde new showrun() for displaying and running shell commands
9db04e87b6 Buildah treadmill: redo the .cirrus.yml tweaks
a925c9f831 Buildah treadmill: more allow-empty options
ba8375c9e4 Buildah treadmill: improve test-failure instructions
ee9c681f31 Buildah treadmill: improve wording in test-fail instructions
eb90154975 doc: Remove whitespace before comma
da783f3f70 fix(deps): update module github.com/checkpoint-restore/checkpointctl to v1.3.0
0cdb9b3b22 ps: fix display of exposed ports
73fb6623cd ps: do not loop over port protocol
390aec18b2 readme: Add reference to pasta in the readme
5b131b8273 test/system: Fix spurious "duplicate tests" failures in pasta tests
6fd0e227b4 Improve "podman load - from URL"
77ef28c14f Try to repair c/storage after removing an additional image store
1d7ec1ef5f Use the config digest to compare images loaded/pulled using different methods
bf8f2b5551 Simplify the additional store test
3bc6072142 Fix the store choice in "podman pull image with additional store"
6a11e75c48 Bump to v5.3.0-dev
d306e80127 Bump to v5.3.0-rc1
23ab7b858a Set quota on volume root directory, not _data
1a5ff0765e fix(deps): update module github.com/opencontainers/runc to v1.2.0
94878af151 test: set soft ulimit
ef26488fd7 Vagrantfile: Delete
642b61a091 Enable pod restore with crun
2e94ca5816 vendor: update c/{buildah,common,image,storage}
fdc9feea0e Fix 330-corrupt-images.bats in composefs test runs
67e0fa8b89 quadlet: add default network dependencies to all units
57b022782b quadlet: ensure user units wait for the network
203ab6573b add new podman-user-wait-network-online.service
a6c4e00e9a contrib/systemd: switch user symlink for file symlinks
1462b52090 Makefile: remove some duplication from install.systemd
21d0711a02 contrib/systemd: move podman-auto-update units
9c6b1e20a3 quadlet: do not reject RemapUsers=keep-id as root
ada75c0bb8 test/e2e: test quadlet with and without --user
fa920f54c7 CI: e2e: fix checkpoint flake
fe96c843bf APIv2 test fix: image history
67e39c1ec5 pasta udp tests: new bytecheck helper
a92958eb0c Document packaging process
cf124ee1bb [skip-ci] RPM: remove dup Provides
927cb7624c Update dependency setuptools to ~=75.2.0
1ddb15c81f System tests: safer pause-image creation
40d4f7240b Update module github.com/opencontainers/selinux to v1.11.1
1227f19393 Added escaping to invoked powershell command for hyperv stubber.
b7b2ef48e8 use slices.Clone instead of assignment
768aaadca1 libpod API: only return exit code without conditions
b3302e8e18 Housekeeping: remove duplicates from success_task
1bf37eecf3 Thorough overhaul of CONTRIBUTING doc.
b0f2ebbe9d test/e2e: fix default signal exit code test
dc55b59987 Test new VM build
1b57dcab61 CI: fix changing-rootFsSize flake
feb46513f0 scp: add option types
06b470d79b Unlock mutex before returning from function
7ea6120794 Note in the README that we are moving to timed releases
5d10e6e16b cirrus: let tar extract figure out the compression
94dcf76eb2 Make error messages more descriptive
3a4c4468f2 Mention containers.conf settings for podman machine commands
7dc58c105b [skip-ci] Packit: re-enable CentOS Stream 10/Fedora ELN teasks"
3d57560a21 cmd: use logrus to print error
71d5ee0e04 podman: do not set rlimits to the default value
5ebba75dbd spec: always specify default rlimits
8896ace2a4 vendor: update containers/common
92a188ea38 Note in the README that we are moving to timed releases
7f836df303 Revert "CI: test nftables driver on fedora"
9e35fead03 cirrus: use zstd over bzip2 for repo archive
6e69978d2e cirrus: use shared repo_prep/repo_artifacts scripts
7eb4a6fe2b cirrus: speed up postbuild
04dffbc2c7 cirrus: change alt arch task to only compile binaries
9082a14d76 cirrus: run make with parallel jobs where useful
bc3db7c95b Makefile: allow man-page-check to be run in parallel
39963cc984 cirrus: use fastvm for builds
4e3a03795d test/e2e: skip some Containerized checkpoint tests
fe404959ed test: update timezone checks
a79fec5e98 cirrus: update CI images
f517e52167 test/e2e: try debug potential pasta issue
38803713d6 CI: quadlet system tests: use airgapped testimage
bac655a6b1 Allow removing implicit quadlet systemd dependencies
05a449c61e fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.4
b3829a2932 libpod API: make wait endpoint better against rm races
3215d5124f podman-remote run: improve how we get the exit code
3d1a4301af [skip-ci] Packit: constrain koji and bodhi jobs to fedora package to avoid dupes
e7833d52cf 055-rm test: clean up a test, and document
3cedd0c2b5 CI: remove skips for libkrun
858472aa83 Bump bundled krunkit to 0.1.3
43a4bddd10 fix(deps): update module google.golang.org/protobuf to v1.35.0
385e2ea650 fix(deps): update module golang.org/x/net to v0.30.0
45df394072 server: fix url parsing in info
b8dbe09f98 fix(deps): update module golang.org/x/tools to v0.26.0
e2e1996c6a Makefile: fix ginkgo FOCUS option
fbd9fe45cb fix(deps): update module golang.org/x/crypto to v0.28.0
d0cb62aacc podman-systemd.unit.5: adjust example options
374844817d docs: prefer --network to --net
1470961e6c fix(deps): update module golang.org/x/term to v0.25.0
567906ed5b fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.24
53785ed055 fix(deps): update module golang.org/x/sys to v0.26.0
505c585b49 OWNERS file audit and update
8061553c0f Exposed ports are only included when not --net=host
e46ae46f18 libpod: hasCurrentUserMapped checks for gid too
e948c4ed90 [CI:DOCS] Document TESTFLAGS in test README file
985b57d9f7 Validate the bind-propagation option to `--mount`
d8b26ac1b4 Fix typo in secret inspect examples
6f9cc3755a Mention `no_hosts` and `base_hosts_file` configs in CLI option docs
043b82ef59 Fixes for vendoring Buildah
83a0299309 vendor: update buildah to latest
23f256349b Makefile - silence skipped tests when focusing on a file
dde1c3d98c vendor: update to latest c/common
fc25a3a5fc Quadlet - prefer "param val" over "param=val" to allow env expansion
410537808e System tests: sdnotify: wait for socket file creation
28e01cc8cc Switch to moby/sys/capability
6a91149b53 platformInspectContainerHostConfig: rm dead code
b791dfb558 CI: require and test CI_DESIRED_NETWORK on RHEL
edc3dc5e11 Add ExposedPorts to Inspect's ContainerConfig
28d3775c4d fix(deps): update golang.org/x/exp digest to 701f63a
abc4cfb049 quadlet: allow variables in PublishPort
7cde3abd17 fix(deps): update module github.com/shirou/gopsutil/v4 to v4.24.9
8ef495594c fix(deps): update github.com/godbus/dbus/v5 digest to a817f3c
bb35ad1da4 Document that zstd:chunked is downgraded to zstd when encrypting
ce9716ee41 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.3
ece76a2537 chore(deps): update dependency ubuntu to v24
b5e1863d1c rpm: do not load iptables modules on f41+
e07c31068f adding docs for network-cmd-path
a619c03eff Include exposed ports in inspect output when net=host
1dd90dbe20 feat(libpod): support kube play tar content-type (#24015)
1950555b26 podman mount: some better error wrapping
5c3019e028 podman mount: ignore ErrLayerUnknown
ebbec00b0d Quadlet - make sure the order of the UnitsDir is deterministic
f47abd8e1e packit: disable Centos Stream/fedora ELN teasks
5de7b7c3f3 libpod: remove shutdown.Unregister()
0bbef4b830 libpod: rework shutdown handler flow
2de82d523b libpod: ensure we are not killed during netns creation
27838b26d6 Update module github.com/moby/sys/capability to v0.3.0
6e4ef2c54d Update documentation of `--no-hosts`, `--hostname`, and `--name` CLI options
c67d8baeb6 Update documentation of `--add-host` CLI option
70c131ed68 System tests: set a default XDG_RUNTIME_DIR
e9b8564690 Modify machine "Remove machine" test
73cbc13190 CORS system test: clean up
de856dab99 Add --health-max-log-count, --health-max-log-size, --health-log-destination flags
7fbc6d9370 troubleshooting: adjust home path in tip 44
1f2658e0ef test/system: For pasta port forwarding tests don't bind socat server
24deec835c Update connection on removal
c709be3a29 Simplify `RemoveConnections`
9febd2c27a Move `DefaultMachineName` to `pkg/machine/define`
7f29233a3f vendor: update containers/image
c81c77109b vendor: update containers/storage
fd4c63838b CI: skip the flaking quadlet test
faf4604883 CI: make systemd tests parallel-safe (*)
09ba5db035 CI: run and collect cleanup tracer logs
0b59f67c3a add epbf program to trace podman cleanup errors
4be6bf2270 CI: parallelize logs test as much as possible
600634c62c CI: format test: use local registry if available
d92f2d39ee CI: make 700-play parallel-safe
62e5eb4734 docs: Fix missing negation
6ef0288ca6 bin/docker support warning message suppression from user config dir
6d4006b123 Update module github.com/docker/docker to v27.3.1+incompatible
133ea31ffb Quadlet - add full support for Symlinks
792796183f libpod: setupNetNS() correctly mount netns
f6bda786ed vendor latest c/common
7dccf8faee docs: remove usage of deprecated `--storage`
597773464c Update module github.com/docker/docker to v27.3.0+incompatible
a08ae98161 CI: Quadlet rootfs test: use container image as rootfs
9c51eead06 CI: system test registry: use --net=host
e3af5a38d3 CI: rm system test: bump grace period
3396dabdf3 CI: system tests: minor documentation on parallel
31cdf1197b fix typo in error message Fixes: containers/podman#24001
1d5c8ac18e CI: system tests: always create pause image
5e5c68ffbe CI: quadlet system test: be more forgiving
6dcda2196a vendor latest c/common
6fe832d5d6 CI: make 200-pod parallel-safe
d7335855d7 allow exposed sctp ports
755a06aa44 test/e2e: add netns leak check
2d469e517d test/system: netns leak check for rootless as well
2505381551 test/system: Improve TODO comments on IPv6 pasta custom DNS forward test
4919440428 test/system: Clarify "Local forwarder" pasta tests
63e286ac55 test/system: Simplify testing for nameserver connectivity
6c79fe292b test/system: Consolidate "External resolver" pasta tests
85045406b5 test/system: Move test for default forwarder into its own case
5468718f22 CI: make 090-events parallel-safe
8402b6535f Misc minor test fixes
7fcf94d7b5 Add network namespace leak check
b3da5be2b1 Add workaround for buildah parallel bug
5fc3de5583 registry: lock start attempts
bf6131780a Update system test template and README
6502e30cfd bats log: differentiate parallel tests from sequential
6b621d9571 ci: bump system tests to fastvm
bcffa9ce30 clean_setup: create pause image
812c7e9436 CI: make 012-manifest parallel-safe
00c13afcb9 podman-manifest-remove: update docs and help output
aa108924ea test/system: remove wait workaround
fbed3a01d2 wait: fix handling of multiple conditions with exited
e04668c8ca Match output of Compat Top API to Docker
d571ca6536 system test parallelization: enable two-pass approach
8d119f0c2d New VMs: test crun 1.17
a5e9b4d126 libpod: hides env secrets from container inspect
111a4bbe71 CI: e2e: workaround for events out-of-sequence flake
49a07fce49 update golangci-lint to 1.61.0
432325236b libpod: convert owner IDs only with :idmap
f4d0e124d6 Podman CLI --add-host with multiple host for a single IP
a664708f35 Quadlet - Split getUnitDirs to small functions
1a1001d824 fix(deps): update module github.com/cpuguy83/go-md2man/v2 to v2.0.5
c436a9b658 chore(deps): update dependency setuptools to ~=75.1.0
fdb2edf46a Fxi typo in cache-ttl.md
b2e6d53265 Get WSL disk as an OCI artifact
c6616004f1 CI: make 260-sdnotify parallel-safe
42a1f5e87c quadlet: do not log ENOENT errors
91dbd6dc33 pkg/specgen: allow pasta when running inside userns
9a8e17816a troubleshooting: add tip about the user containers
95833a6207 chore(deps): update dependency setuptools to v75
1857d7e50f Convert windows paths in volume arg of the build command
d124d90e18 Improve error when starting multiple machines
fe08440ec3 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.3.2
01a1761fd9 Minor typo noticed when reading podman man page
e041f2a7b7 Remove `RemoveFilesAndConnections`
54b71b637c Add `GetAllMachinesAndRootfulness`
ac4a31cc4a rewrite typo osascript
089d2513d8 typo
31a1fd8f33 fix(deps): update module github.com/docker/docker to v27.2.1+incompatible
cb03ca31b2 Add radio buttons to select WSL or Hyper-V in windows setup.exe
297ec1c083 [skip-ci] Packit: split out ELN jobs and reuse fedora downstream targets
5f6a22dc1b [skip-ci] Packit: Enable sidetags for bodhi updates
b9fe4097dd vendor: update c/common
e61682f50e CI: make 710-kube parallel-safe
0ff89a00af CI: mark 320-system-df *NOT* parallel safe
db12343e27 Add kube play support for image volume source
837755e643 refactor: add sshClient function
a83fef34a9 fix(deps): update module golang.org/x/tools to v0.25.0
22ec8ea06d CI: make 505-pasta parallel safe
18932e0339 CI: make 020-tag parallel-safe
a165289574 CI: make 410-selinux parallel-safe
359092e463 Bump VMs. ShellCheck is now built-in
005d9b543b troubleshooting: add tip about auto, keep-id, nomap
a1e6603133 libpod: make use of new pasta option from c/common
2f858675b3 vendor latest c/common
0abbcfa50a podman images: sort repository with tags
eb396705c6 Remove containers/common/pkg/config from pkg/util
2840b21862 fix(deps): update module golang.org/x/net to v0.29.0
38555305c2 fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.23
1c23bd5acf fix(deps): update module golang.org/x/crypto to v0.27.0
133bbd3769 Fix CI
c203c48c70 Detect and fix typos using codespell
12b3d01438 Fix typo: replace buildin with built-in
4700b5a58a Add codespell config, pre-commit definition, and move options from Makefile
901f621daa prune: support clearing build cache using CleanCacheMount
1543c5f0ad test/e2e: fix network prune flake
bdf96e7df2 Add support for Job to kube generate & play
c317da8deb Add podman-rootless.7 man page
15bde1abdb Add DNS, DNSOption and DNSSearch to quadlet pod
0f77363ff5 podman.1.md: improve policy.json section
579e8b2d7a e2e: flake fix: SIGPIPE in hook test
01296038dc libpod: fix rootless cgroup path with --cgroup-parent
5a15e70345 vendor: update c/storage
7b019e9905 CI: make 055-rm parallel-safe
e5624510ce CI: make 130-kill parallel-safe
f38953c156 CI: make 125-import parallel-safe
0e1ac9cee1 CI: make 110-history parallel-safe
bca7c20530 CI: system tests: parallelize low-hanging fruit
8eb7eff899 Add disclaimer to `podman machine info` manpage.
d803bb3407 man pages: refactor two more options
beffd05d5a update github.com/opencontainers/runc to v1.2.0-rc.3
77702d73ef update go.etcd.io/bbolt to v1.3.11
a269f098cd update github.com/onsi/{ginkgo,gomega}
e9a4534cb1 Update module github.com/shirou/gopsutil to v4
54b8c4fb64 packit: update fedora and epel targets
f93fcf7dee bump go to 1.22
d03e8ffc56 cirrus: test only on f40/rawhide
2ca4efb9f4 cirrus: remove CI_DESIRED_NETWORK reference
e598bcafb8 cirrus: prebuild use f40 for extra tests
c68c2974a3 chore(deps): update dependency setuptools to ~=74.1.0
60af13ca0f libpod: fix HostConfig.Devices output from 'podman inspect' on FreeBSD
70358ecf18 fix(deps): update golang.org/x/exp digest to 9b4947d
1732338630 Implement publishing API UNIX socket on Windows platforms
c6fe5e5395 Vendor c/common:8483ef6022b4
71fd15726d quadlet: support container network reusing
f40eb5f06a docs: update read the docs changes
abea5ad4ac CI: parallel-safe network system test
2b14db2af3 Quadlet - Support multiple image tags in .build files
3bdddea8fa fix(deps): update module github.com/vbauerster/mpb/v8 to v8.8.3
6a0ab6f7bc cirrus: remove _bail_if_test_can_be_skipped
d5c5261e6f cirrus: move renovate check into validate
ac18b1a0af cirrus: remove 3rd party connectivity check
34a7d8dd10 cirrus: remove cross jobs for aarch64 and x86_64
186f50ad7d cirrus: do not upload alt arch cross artifacts
94431c29b4 cirrus: remove ginkgo-e2e.json artifact
78be80f2cd cirrus: fix default timeouts
775d27fcd8 github: remove fcos-podman-next-build-prepush
63545126c2 Clarify podman machine volume mounting behavior under WSL
41f945fc24 machine: Add -all-providers flag to machine list
5389eee737 Create a podman-troubleshooting man page
33b96e78c8 chore(deps): update dependency setuptools to v74
565ad236a5 fix(deps): update module github.com/docker/docker to v27.2.0+incompatible
6e027c0e37 Fix an improperly ignored error in SQLite
678323efd8 CI: flake workaround: ignore socat waitpid warnings
00027bc251 fix(deps): update module github.com/rootless-containers/rootlesskit/v2 to v2.3.1
4f4ebdce5b Stop skipping machine volume test on Hyper-V
a89fef6e2a cleanup: add new --stopped-only option
bf74797c69 fix races in the HTTP attach API
dbd2adc798 cirrus: skip windows/macos machine task on RHEL branches
a508d7631f Update module github.com/containers/gvisor-tap-vsock to v0.7.5
dc724e5e80 run: fix detach passthrough and --rmi
8e78028e2c podman run: ignore image rm error
7c5d8bec0d Add support for AddHost in quadlet .pod and .container
07c9fe82a8 [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.3
df3c9efb03 update github.com/vishvananda/netlink to v1.3.0
5f57f4ea22 build: Update gvisor-tap-vsock to 0.7.5
3e58e04d3e Quote systemd DefaultEnvironment Proxy values, as documented in systemd.conf man page:
16007e4370 fix typo in podman-network-create.1.md
6c68f4ad97 Use HTTP path prefix of TCP connections to match Docker context behavior
cae427e2f8 Makefile: remotesystem: use real podman server, no --url
215af114ab Update module github.com/openshift/imagebuilder to v1.2.15
11547942b1 CI: parallel-safe userns test
7164177c68 Update module github.com/onsi/ginkgo/v2 to v2.20.1
d55b12f70b Add support for IP in quadlet .pod files
b2fb944e19 Specify format to use for referencing fixed bugs.
68efa7e3a1 CI: parallel-safe run system test
4dc5708f14 Revert "test/e2e: work around for pasta issue"
17193af962 CI: On vX.Y-rhel branches, ensure that some downstream Jira issue is linked
4fbfa7de6e quadlet: support user mapping in pod unit
5ccaa699f1 Update Release Process
154d832696 Test new VM build
29071ac498 command is not optional to podman exec
9c3921ca58 CI: parallel-safe namespaces system test
13b31845c8 [CI:DOCS] Update dependency golangci/golangci-lint to v1.60.2
1ccccde183 quadlet: add key CgroupsMode
458ba5a8af Fix `podman stop` and `podman run --rmi`
e5c91ff03a quadlet: set infra name to %s-infra
990fc335fa chore(deps): update dependency setuptools to v73
76e1bbb57d [skip-ci] Packit: update targets for propose-downstream
fc30620cdb Do not segfault on hard stop
d5cd388729 Fix description of :Z to talk about pods
145c7511aa CI: disable ginkgo flake retries
b755a1c60b vendor: update go-criu to latest
84a85319e1 golangci-lint: make darwin linting happy
666d839157 golangci-lint: make windows linting happy
cd2a4c7cac test/e2e: remove kernel version check
6c0d94328f golangci-lint: remove most skip dirs
942f789a88 set !remote build tags where needed
c17daf2b09 update golangci-lint to 1.60.1
57016f5cc3 test/e2e: rm systemd start test
e2e2763b0e fix(deps): update module github.com/vbauerster/mpb/v8 to v8.8.1
80639df27a podman wait: allow waiting for removal of containers
ddece758a4 libpod: remove UpdateContainerStatus()
7a7aec355b podman mount: fix storage/libpod ctr race
480d43748a CI: quadlet tests: make parallel-safe
420bd16a21 CI: system tests: make random_free_port() parallel-safe
478b262f9b remove trailing comma in example
1a1d2646df CI: format test: make parallel-safe
004c040ca2 Fix podman-docker.sh under -eu shells (fixes #23628)
6fb10421fb docs: update podman-wait man page
94fd5fe6f7 libpod: remove duplicated HasVolume() check
a65aecd260 podman volume rm --force: fix ABBA deadlock
b6beed9f76 test/system: fix network cleanup restart test
30eb6b6aae libpod: do not stop pod on init ctr exit
8a943311db libpod: simplify WaitForExit()
5b6de98ee8 CI: remove build-time quay check
6b1c7de3d5 Fix known_hosts file clogging and remote host id
c4cdb6defa Update docker.io/library/golang Docker tag to v1.23
0d1c19248a Update dependency setuptools to ~=72.2.0
9945736a3e Update module github.com/docker/docker to v27.1.2+incompatible
0d7e14fb83 healthcheck system check: reduce raciness
30ee9c0114 CI: healthcheck system test: make parallel-safe
8f191618e4 Validate renovate config in every PR
0177f74dc6 pkg/machine: Read stderr from ssh-keygen correctly
e30b0978b8 Fix renovate config syntax error
36f9a04499 CI: 080-pause.bats: make parallel-safe
6656a18c3f CI: 050-stop.bats: make parallel-safe
25d66d97d2 Additional potential race condition on os.Readdir
5ec413fac7 pkg/bindings/containers: handle ignore for stop
6fce734f42 remote: fix invalid --cidfile + --ignore
e111b6c0be Update/simplify renovate config header comment
6c0b8b64d4 Migrate renovate config to latest schema
d33abcdf10 Fix race condition when listing /dev
d26341332c docs/podman-systemd: Try to clarify `Exec=` more
ecf88f17b6 libpod: reset state error on init
20f3e8909e test/system: pasta_test_do add explicit port check
20a32d33cd test/e2e: work around new push warning
be41ee4131 vendor: update c/common to latest
4aaa5cb6f0 stopIfOnlyInfraRemains: log all errors
78cb1e28cb libpod: do not save expected stop errors in ctr state
f276d53532 libpod: fix broken saveContainerError()
b0948a5cd0 Quadlet: fix filters failure when the search paths are symlinks
2043d1647c readme: replace GPG with PGP
a48cd241ad Drop APIv2 CNI configuration
dcdb5408de De-duplicate docker-py testing
ec59508d4c chore(podmansnoop): explain why crun comm is 3
f2a03e5753 libpod: cleanupNetwork() return error
61a889de4c fix(deps): update module golang.org/x/sys to v0.24.0
7936809f75 Reduce python APIv2 test net dependency
bf091abdc5 Fix not testing registry.conf updates
be2212804b test/e2e: improve command timeout handling
52ff2a41fa Update module github.com/onsi/ginkgo/v2 to v2.20.0
09639a07fb Update module github.com/moby/sys/user to v0.3.0
f041d059b5 Add passwd validate and generate steps
4620e91f86 podman container cleanup: ignore common errors
795851edd3 Quadlet - Allow the user to override the default service name
1a2e1eb46e CI: e2e: serialize root containerPort tests
a06a7d7ba8 Should not force conversion of manifest type to DockerV2ListMediaType
2038d88680 fix(deps): update module golang.org/x/tools to v0.24.0
6714b6302d fix(deps): update github.com/containers/common digest to 05b2e1f
f99c7ead92 CI: mount system test: parallelize
53ae4ea927 Update module golang.org/x/net to v0.28.0
81003f2d08 Ignore ERROR_SHARING_VIOLATION error on windows
f9b67cea57 CI: manifest system tests: make parallel-safe
eb7ce80cf9 Create volume path before state initialization
84a5119d17 vendor: update c/storage
029f9b38cc CI: fix broken libkrun test
1912dd4bf6 test/e2e: work around for pasta issue
71bcd25ab6 test/e2e: fix missing exit code checks
082650b68f Test new CI images
abd586cb1c Remove another race condition when mounting containers or images
91b3fdbba3 fix(deps): update github.com/containers/common digest to c0cc6b7
01d739a65e Change Windows installer MajorUpgrade Schedule
d628e14355 Ignore missing containers when calling GetExternalContainerLists
37226e2e93 Remove runc edit to lock to specific version
67ce828152 fix(deps): update module golang.org/x/sys to v0.23.0
87dad1caef CI: podman-machine: do not use cache registry
bfb42b3b15 CI: completion system test: use safename
e429160e5b Temporarly disable failing Windows Installer CI test
3ae1568933 libpod: fix volume copyup with idmap
61def05cd9 libpod: avoid hang on errors
457c64564a Temp. disable PM basic Volume ops test
029a9aa34e Add libkrun Mac task
014b7af4f3 Never skip checkout step in release workflow
83e90a2f5b System tests: leak_test: readable output
f446f59d71 fix(deps): update github.com/docker/go-plugins-helpers digest to 45e2431
75a316aae4 vendor: bump c/common
fcf7cd7d5c Version: bump to v5.3.0-dev
7610cedc80 libpod: inhibit SIGTERM during cleanup()
2550a7290a Tweak versions in register_images.go
4c3531a1a4 fix network cleanup flake in play kube
84f57e4ba0 WIP: Fixes for vendoring Buildah
b8a9b184af Add --compat-volumes option to build and farm build
286fbf98d1 Bump to Buildah v1.37.0
7d9c1a2c53 Quadlet test - Split between success, warning and error cases
77081df8cd libpod: bind ports before network setup
cfac059d14 Disable compose-warning-logs if PODMAN_COMPOSE_WARNING_LOGS=false
1c46686a41 Use new syntax for selinux options in quadlet
616005e0ad fix(deps): update module github.com/onsi/gomega to v1.34.1
396961069c CI: kube test: fix broken external-storage test
8b5b9d0bb5 Update dependency setuptools to v72
bf3f207a49 Convert additional build context paths on Windows
1b91df012d pkg/api: do not leak config pointers into specgen
f3a86266e6 Quadlet - Allow the user to set the service name for .pod files
1c4fbe7965 Quadlet tests - allow overriding the expected service name
41cc3ae6f9 fix(deps): update module github.com/moby/sys/user to v0.2.0
884c43d416 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.5
7bb3b83c17 CI: enable root user namespaces
b59918e536 libpod: force rootfs for OCI path with idmap
1d23f3ff11 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.19.1
a18bd3e9c0 Add test steps for automount with multi images
25fffdb74f CI: cp tests: use safename
1ecb68d92b [skip-ci] RPM: podman-iptables.conf only on Fedora
fd0ff9060f CI: 700-play: fix a leaked non-safename
d9c2806461 test: check that kube generate/play restores the userns
fef125c7b1 test: disable artifacts cache with composefs
8403f4c33f test: fix podman pull tests
90411b2290 vendor: bump c/storage
eadfbbc809 Update module github.com/cyphar/filepath-securejoin to v0.3.1
ce7dded38b Add /run/containers/systemd, ${XDG_RUNTIME_DIR}/containers/systemd quadlet dirs
599c0d167c build: Update gvisor-tap-vsock to 0.7.4
2e20681f05 test/system: fix borken pasta interface name checks
da3edce4e6 test/system: fix bridge host.containers.internal test
f70976a7e2 api: honor the userns for the infra container
fa2590a97a play: handle 'private' as 'auto'
61f0230c31 kube: record infra user namespace
bf8c3065f2 infra: user ns annotation higher precedence
bbe0e4a5db specgenutil: record the pod userns in the annotations
e97bb79b7a kube: invert branches
64f2d85e4f CI: system log test: use safe names
84eb640160 Update encryption tests to avoid a warning if zstd:chunked is the default
059c298389 Fix "podman pull and decrypt"/"from local registry"
6c55ef505d Use unique image names for the encrypted test images
b61667470c CI: system tests: instrument to allow failure analysis
96771eec53 Fix outdated comment for the build step win-gvproxy
71d6e2fbaf Add utility to convert VMFile to URL for UNIX sockets
7768cf235e Run codespell on source
83160b1d02 fix(deps): update module github.com/docker/docker to v27.1.0+incompatible
a493a584c0 chore(deps): update dependency setuptools to ~=71.1.0
a05a9cae07 logformatter: tweaks to pass html tidy
174190132c More information for podman --remote build and running out of space.
2e4b640ad2 Fix windows installer deleting machine provider config file
7202e6172d Use uploaded .zip for Windows action
5e9ab00063 pr-should-include-tests: no more CI:DOCS override
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping runc to version v1.2.0-69-gb7da1673, which comprises the following commits:
b7da1673 build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2
119111a0 libct/cg: add test for remove a non-existent dir in a ro mount point
068d7da7 Revert "Temporary set vagrant to 2.4.1-1"
ac435895 memfd-bind: elaborate kernel requirements for overlayfs protection
ba3d026e libct/cg: RemovePath: improve comments
12e06a7c libct/cg: RemovePath: simplify logic
db59489b runc delete: fix for rootless cgroup + ro cgroupfs
ca4a7a86 build(deps): bump golang.org/x/net from 0.30.0 to 0.31.0
43af111e MAINTAINERS: move dqminh and hqhq to EMERITUS
ec5e7eb7 build(deps): bump golang.org/x/sys from 0.26.0 to 0.27.0
9cb59b46 ci: rm "skip on CentOS 7" kludges
5000f169 Temporary set vagrant to 2.4.1-1
b9dfb22d readme: drop unused memfd-bind reference
aa505bfa memfd-bind: mention that overlayfs obviates the need for it
9bc42d61 dmz: overlay: set xino=off to disable dmesg spam
9ce7392b Vagrantfile.fedora: bump Fedora to 41
609e9a51 Vagrantfile.fedora: stop using dnf shell
80c46d31 build(deps): bump golang.org/x/net from 0.24.0 to 0.30.0
5586d7ca libct: rm obsoleted comment
f9fd70b7 CHANGELOG: add (forward-port) v1.1.15 changes
8cc73754 libct: fix a comment
ee1bced1 script/check-config.sh: add OVERLAY_FS check
c8f5d033 docs: remove prompt symbols from shell snippets
871057d8 drop runc-dmz solution according to overlay solution
34a92855 test join other container userns with selinux enabled
c78f3f2e libct/nsenter: become root after joining userns
1e674098 libct/int: add exec benchmark
cb201487 libct/int: use testing.TB for utils
4df7b1b1 build(deps): bump golang.org/x/sys from 0.22.0 to 0.26.0
cbb9b309 ci: use Go 1.23
732806e2 runc update: fix updating swap for cgroup v2
cb9f3d6d libct/cg: improve ConvertMemorySwapToCgroupV2Value
69b3be76 build(deps): bump github.com/vishvananda/netlink from 1.1.0 to 1.3.0
eb2ff52a libct: rm x/sys/execabs usage
f20f273a build(deps): bump github.com/opencontainers/selinux
139789f1 build(deps): bump google.golang.org/protobuf from 1.33.0 to 1.35.1
93db63ab build(deps): bump github.com/urfave/cli from 1.22.14 to 1.22.16
af024b6c build(deps): bump github.com/moby/sys/mountinfo from 0.7.1 to 0.7.2
42f96305 VERSION: back to development
0b9fa21b VERSION: release v1.2.0
568231cc Revert "increase memory.max in cgroups.bats"
e6699266 fix an error caused by fd reuse race when starting runc init
515f09f7 dmz: use overlayfs to write-protect /proc/self/exe if possible
8cfbccb6 tests: integration: add helper to check if we're in a userns
54ef07d8 tests/int: skip "update memory vs CheckBeforeUpdate" on EL9
ff775363 tests/int: rm centos-7 exclusion
76a821fa tests/int: update info about EL9 kernel
b5bdf592 libct: rm initWaiter
9fa324c4 dmz: cloned binary: set +x permissions when creating regular tmpfile
324fcea4 Terminate execution for criu that does not meet version requirements
eff6f049 libct/cap: no need to load capabilities
9b60a93c libcontainer/userns: migrate to github.com/moby/sys/userns
1623cde1 go: update github.com/cyphar/filepath-securejoin to v0.3.4
4fdd5616 memfd-bind: more specific doc URL
9e554587 memfd-bind: fixup systemd unit file and README
13a6f560 runc run: fix mount leak
b096459a vendor: update github.com/cyphar/filepath-securejoin to v0.3.3
f55957de build(deps): bump bats-core/bats-action from 2.1.1 to 3.0.0
bb2bd38d change go minimum version in README
faffe1b9 replace strings.SplitN with strings.Cut
1be06760 libcontainer/cgroups/fs: remove todo since strings.Fields performs well
7a449109 libct/README: simplify example, rm inheritable caps
0de19533 runc spec, libct/int: do not add ambient capabilities
3e3f9603 runc exec --cap: do not add capabilities to ambient
5b161e04 update bats-action to 2.1.1
35f999dd remove installation of unused bats support libs
10c951e3 add ErrCgroupNotExist
319e133c go.mod: Use toolchain 1.22.4
8671a7db ci: update to setup bats action from bats-core
30f8f51e runc create/run: warn on rootless + shared pidns + no cgroup
21c61165 tests/int: log when teardown starts
b1449fd5 libct: use Namespaces.IsPrivate more
d8844e29 tests: integration: add setgid mkdirall test
066b109e vendor: update to github.com/cyphar/filepath-securejoin@v0.3.2
646efe70 utils: mkdirall: mask silently ignored mode bits to match os.MkdirAll
457e1ffa tests: add regression test for CVE-2019-19921 / CVE-2023-27561
216175a9 Upgrade Cilium's eBPF library version to 0.16
a31efe70 libct/seccomp/patchbpf: use binary.NativeEndian
429e06a5 libct: Signal: honor RootlessCgroups
dd827f7b utils: switch to securejoin.MkdirAllHandle
1d308c7d vendor: update to github.com/cyphar/filepath-securejoin@v0.3.1
5ab5ef3d deps: update to golang.org/x/sys@v0.22
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping runc to version v1.2.0-69-gb7da1673, which comprises the following commits:
b7da1673 build(deps): bump google.golang.org/protobuf from 1.35.1 to 1.35.2
119111a0 libct/cg: add test for remove a non-existent dir in a ro mount point
068d7da7 Revert "Temporary set vagrant to 2.4.1-1"
ac435895 memfd-bind: elaborate kernel requirements for overlayfs protection
ba3d026e libct/cg: RemovePath: improve comments
12e06a7c libct/cg: RemovePath: simplify logic
db59489b runc delete: fix for rootless cgroup + ro cgroupfs
ca4a7a86 build(deps): bump golang.org/x/net from 0.30.0 to 0.31.0
43af111e MAINTAINERS: move dqminh and hqhq to EMERITUS
ec5e7eb7 build(deps): bump golang.org/x/sys from 0.26.0 to 0.27.0
9cb59b46 ci: rm "skip on CentOS 7" kludges
5000f169 Temporary set vagrant to 2.4.1-1
b9dfb22d readme: drop unused memfd-bind reference
aa505bfa memfd-bind: mention that overlayfs obviates the need for it
9bc42d61 dmz: overlay: set xino=off to disable dmesg spam
9ce7392b Vagrantfile.fedora: bump Fedora to 41
609e9a51 Vagrantfile.fedora: stop using dnf shell
80c46d31 build(deps): bump golang.org/x/net from 0.24.0 to 0.30.0
5586d7ca libct: rm obsoleted comment
f9fd70b7 CHANGELOG: add (forward-port) v1.1.15 changes
8cc73754 libct: fix a comment
ee1bced1 script/check-config.sh: add OVERLAY_FS check
c8f5d033 docs: remove prompt symbols from shell snippets
871057d8 drop runc-dmz solution according to overlay solution
34a92855 test join other container userns with selinux enabled
c78f3f2e libct/nsenter: become root after joining userns
1e674098 libct/int: add exec benchmark
cb201487 libct/int: use testing.TB for utils
4df7b1b1 build(deps): bump golang.org/x/sys from 0.22.0 to 0.26.0
cbb9b309 ci: use Go 1.23
732806e2 runc update: fix updating swap for cgroup v2
cb9f3d6d libct/cg: improve ConvertMemorySwapToCgroupV2Value
69b3be76 build(deps): bump github.com/vishvananda/netlink from 1.1.0 to 1.3.0
eb2ff52a libct: rm x/sys/execabs usage
f20f273a build(deps): bump github.com/opencontainers/selinux
139789f1 build(deps): bump google.golang.org/protobuf from 1.33.0 to 1.35.1
93db63ab build(deps): bump github.com/urfave/cli from 1.22.14 to 1.22.16
af024b6c build(deps): bump github.com/moby/sys/mountinfo from 0.7.1 to 0.7.2
42f96305 VERSION: back to development
0b9fa21b VERSION: release v1.2.0
568231cc Revert "increase memory.max in cgroups.bats"
e6699266 fix an error caused by fd reuse race when starting runc init
515f09f7 dmz: use overlayfs to write-protect /proc/self/exe if possible
8cfbccb6 tests: integration: add helper to check if we're in a userns
54ef07d8 tests/int: skip "update memory vs CheckBeforeUpdate" on EL9
ff775363 tests/int: rm centos-7 exclusion
76a821fa tests/int: update info about EL9 kernel
b5bdf592 libct: rm initWaiter
9fa324c4 dmz: cloned binary: set +x permissions when creating regular tmpfile
324fcea4 Terminate execution for criu that does not meet version requirements
eff6f049 libct/cap: no need to load capabilities
9b60a93c libcontainer/userns: migrate to github.com/moby/sys/userns
1623cde1 go: update github.com/cyphar/filepath-securejoin to v0.3.4
4fdd5616 memfd-bind: more specific doc URL
9e554587 memfd-bind: fixup systemd unit file and README
13a6f560 runc run: fix mount leak
b096459a vendor: update github.com/cyphar/filepath-securejoin to v0.3.3
f55957de build(deps): bump bats-core/bats-action from 2.1.1 to 3.0.0
bb2bd38d change go minimum version in README
faffe1b9 replace strings.SplitN with strings.Cut
1be06760 libcontainer/cgroups/fs: remove todo since strings.Fields performs well
7a449109 libct/README: simplify example, rm inheritable caps
0de19533 runc spec, libct/int: do not add ambient capabilities
3e3f9603 runc exec --cap: do not add capabilities to ambient
5b161e04 update bats-action to 2.1.1
35f999dd remove installation of unused bats support libs
10c951e3 add ErrCgroupNotExist
319e133c go.mod: Use toolchain 1.22.4
8671a7db ci: update to setup bats action from bats-core
30f8f51e runc create/run: warn on rootless + shared pidns + no cgroup
21c61165 tests/int: log when teardown starts
b1449fd5 libct: use Namespaces.IsPrivate more
d8844e29 tests: integration: add setgid mkdirall test
066b109e vendor: update to github.com/cyphar/filepath-securejoin@v0.3.2
646efe70 utils: mkdirall: mask silently ignored mode bits to match os.MkdirAll
457e1ffa tests: add regression test for CVE-2019-19921 / CVE-2023-27561
216175a9 Upgrade Cilium's eBPF library version to 0.16
a31efe70 libct/seccomp/patchbpf: use binary.NativeEndian
429e06a5 libct: Signal: honor RootlessCgroups
dd827f7b utils: switch to securejoin.MkdirAllHandle
1d308c7d vendor: update to github.com/cyphar/filepath-securejoin@v0.3.1
5ab5ef3d deps: update to golang.org/x/sys@v0.22
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping containerd to version v2.0.0-25-g961cac9aa, which comprises the following commits:
34a45cab2 Publish attestation as release artifact
7dec6b460 move rocky 9.4 to almalinux/9 in CI
cf07f28ee *: should align pipe's owner with init process
986088866 fix: set the credentials even if not provided
9081e979f update runc binary to 1.2.2
6399c936f Revert "Disable vagrant strict dependency checking"
a7f2b562f fsverity_linux.go: Fix fsverity.IsEnabled() for big endian systems
389e781ea build(deps): bump github.com/containerd/typeurl/v2 from 2.2.2 to 2.2.3
30b929ece fsverity_test.go: fix major/minor device number resolving
10996a334 fsverity_test.go: fix nil pointer dereference, fix test fail
5b879f30c update to go1.23.3 / go1.22.9
e99c2b55c Avoid arch info in the sed/replace when building cri-cni-containerd.tar.gz
458215f6c ci: enable marking 2.0 releases as latest
03ba4ce1f Update release notes for v2.0.0
f2da3fd68 Update release docs for v2.0.0
ff09b428e Update typeurl to v2.2.2
a43e7c1e2 build(deps): bump softprops/action-gh-release from 2.0.8 to 2.0.9
edf367cab build(deps): bump github.com/containerd/nri from 0.7.0 to 0.8.0
21f636751 build(deps): bump github.com/containerd/typeurl/v2 from 2.2.0 to 2.2.1
1edc2147f build(deps): bump google-github-actions/auth from 2.1.6 to 2.1.7
2d8fec45a go.mod: k8s.io/* v0.31.2
bef201fe6 build(deps): bump google-github-actions/upload-cloud-storage
bd10a6096 Update platforms to v1.0.0-rc.0
ae73e3013 Disable vagrant strict dependency checking
33677d56d Update containerd API to v1.8.0 release
d38911808 Prepare release notes for api/v1.8.0
93f9db2ad Update errdefs tag to v1.0.0
bddeba825 Make TestContainerPids more resilient
edb980ac0 update runc binary to 1.2.1
bf47b6ebc docs/containerd-2.0.md: add more highlights
f5ce859ee docs/containerd-2.0.md: fix the deprecation release of AUFS
bedd85a36 RELEASES.md: k8s: fix CRI v1alpha2 removal release, remove old releases
4594f5cac services/snapshots: include name of snapshotter in debug logs
77d783e2c Update hcsshim to v0.12.9
79089232b build(deps): bump actions/checkout from 4.2.1 to 4.2.2
2789ba30e build(deps): bump actions/cache from 4.1.1 to 4.1.2
6b655d093 build(deps): bump github/codeql-action from 3.26.13 to 3.27.0
9ed6e05b2 config: v1Migrate: support DisabledPlugins and RequiredPlugins
4b2bca00b config: migrate version before merging
700b90618 resolver/docker: fix confusing "trying next host" log
3cc2343de local: avoid writing to content root on readonly store
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The ptest build for cri-o was previously disabled due to issues
introduced with Go 1.11, which borken the build process. With the
current Go version, these issues no longer occur, and the ptest build is
now functional.
This commit enables ptest support and resolves the "TMPDIR
[buildpaths]" issue encountered during the ptest build process.
A total of 382 test cases were executed, with the following results:
PASS: 317
FAIL: 33
SKIP: 32
Signed-off-by: Zhang Peng <peng.zhang1.cn@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
Since we are intalling packagemanagement to this reference container,
it makes sense that our install include common utilities that post
install scriptlets will need.
We also add an editor by default.
Finally, we configure a reference rpm package feed to illustrate
how a container can be hooked to a packagefeed.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
| |
The existing workaround to populate /var/volatile was broken
since oe-core has a rootfs postprocess command that ensures
that /var/volatile is empty .. which undoes our creation of
the log and tmp directories.
We :remove that routine to get our /var/volatile as we like
it.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Parsing xen.inc with a host distro that provides python 3.12 (such as Ubuntu
24.04) generates the following deprecation warning:
DeprecationWarning: datetime.datetime.utcfromtimestamp() is deprecated and scheduled for removal in a future version.
Use timezone-aware objects to represent datetimes in UTC: datetime.datetime.fromtimestamp(timestamp, datetime.UTC)
This warning comes from the use of datetime.datetime.utcfromtimestamp()
in get_build_time_vars.
datetime.UTC seems to be a getter wrapper for datetime.timezone.utc,
which is already available on older host distro python versions
(I have tested only with python 3.10 provided by Ubuntu 22.04)
so, opt to use that instead to prevent a breaking change.
Signed-off-by: Stanley Stanton <stanley.stanton@taitcommunications.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* fix f53b101d455d7e7447fa83f2faecb5e05d595b3e
* you might want to skip whole packagegroup-netavark without
seccomp, but without this parsing world in DISTRO without
seccomp fails with:
ERROR: Nothing RPROVIDES 'netavark' (but meta-virtualization/recipes-core/packagegroups/packagegroup-container.bb RDEPENDS on or otherwise requires it)
netavark was skipped: missing required distro feature 'seccomp' (not in DISTRO_FEATURES)
NOTE: Runtime target 'netavark' is unbuildable, removing...
Missing or unbuildable dependency chain was: ['netavark']
ERROR: Nothing RPROVIDES 'packagegroup-docker' (but meta-virtualization/recipes-core/packagegroups/packagegroup-container.bb RDEPENDS on or otherwise requires it)
No eligible RPROVIDERs exist for 'packagegroup-docker'
NOTE: Runtime target 'packagegroup-docker' is unbuildable, removing...
Missing or unbuildable dependency chain was: ['packagegroup-docker']
ERROR: Nothing RPROVIDES 'packagegroup-oci' (but meta-virtualization/recipes-core/packagegroups/packagegroup-container.bb RDEPENDS on or otherwise requires it)
No eligible RPROVIDERs exist for 'packagegroup-oci'
NOTE: Runtime target 'packagegroup-oci' is unbuildable, removing...
Missing or unbuildable dependency chain was: ['packagegroup-oci']
ERROR: Nothing RPROVIDES 'packagegroup-container' (but meta-virtualization/recipes-core/packagegroups/packagegroup-container.bb RDEPENDS on or otherwise requires it)
No eligible RPROVIDERs exist for 'packagegroup-container'
NOTE: Runtime target 'packagegroup-container' is unbuildable, removing...
Missing or unbuildable dependency chain was: ['packagegroup-container']
ERROR: Nothing RPROVIDES 'packagegroup-lxc' (but meta-virtualization/recipes-core/packagegroups/packagegroup-container.bb RDEPENDS on or otherwise requires it)
No eligible RPROVIDERs exist for 'packagegroup-lxc'
NOTE: Runtime target 'packagegroup-lxc' is unbuildable, removing...
Missing or unbuildable dependency chain was: ['packagegroup-lxc']
ERROR: Nothing RPROVIDES 'packagegroup-cni' (but meta-virtualization/recipes-core/packagegroups/packagegroup-container.bb RDEPENDS on or otherwise requires it)
No eligible RPROVIDERs exist for 'packagegroup-cni'
NOTE: Runtime target 'packagegroup-cni' is unbuildable, removing...
Missing or unbuildable dependency chain was: ['packagegroup-cni']
ERROR: Nothing RPROVIDES 'aardvark-dns' (but meta-virtualization/recipes-core/packagegroups/packagegroup-container.bb RDEPENDS on or otherwise requires it)
aardvark-dns was skipped: missing required distro feature 'seccomp' (not in DISTRO_FEATURES)
NOTE: Runtime target 'aardvark-dns' is unbuildable, removing...
Missing or unbuildable dependency chain was: ['aardvark-dns']
ERROR: Nothing RPROVIDES 'conmon' (but meta-virtualization/recipes-core/packagegroups/packagegroup-container.bb RDEPENDS on or otherwise requires it)
conmon was skipped: missing required distro feature 'seccomp' (not in DISTRO_FEATURES)
NOTE: Runtime target 'conmon' is unbuildable, removing...
Missing or unbuildable dependency chain was: ['conmon']
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
Only when vmsep is enabled is qemu-firmware separated out from
the main qemu package. So we should make our dependency conditional
on that feature.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
| |
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
| |
Having cnitool available on the path helps usability.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping containerd to version v2.0.0-rc.6-23-g1e6fdb531, which comprises the following commits:
0208cb58c go.mod: github.com/containerd/imgcrypt v2.0.0-rc-1
588b7a100 testutil: avoid conflict with continuity/testutil
181491032 build(deps): bump github.com/containerd/continuity from 0.4.3 to 0.4.4
497dc7bf3 build(deps): bump github.com/checkpoint-restore/checkpointctl
fddeb6f3c pkg/protobuf: fix typo in godoc
96a1e498f Update containerd plugin to v1.0.0
3b45a44cc Update to ttrpc v1.2.6 tag
3cc2343de local: avoid writing to content root on readonly store
778defa31 Add back ZFS snapshotter
d3ff3e2ff CI: move crun from Ubuntu to Fedora
5c65a3d7b Update version to v2.0.0-rc.6
9aa637b22 Update api vendor to latest
4b9d6c014 deps: bump github.com/containerd/nri
2535b187a Scope writer locks to each writer.
bc819bc97 docs: add command for finding schema 1 images
c86b2772c docs: update min version for deprecation warnings
a1ce18816 CI: bump up crun to 1.17
021895985 Update hcsshim version to v0.12.8
373311a84 build(deps): bump github.com/opencontainers/selinux
cf9cf8b5a build(deps): bump github.com/prometheus/client_golang
03860c208 build(deps): bump azure/CLI from 1.0.9 to 2.1.0
cf7218fb0 build(deps): bump actions/checkout from 4.1.1 to 4.2.1
78ec6ef02 build(deps): bump actions/upload-artifact from 4.1.0 to 4.4.3
bfe8fa330 build(deps): bump github/codeql-action from 3.24.0 to 3.26.13
38ba7f2f7 dedup BuildLabels
a5cd0d0a5 dedup GetPassthroughAnnotations
269997ac5 dedup GetRepoDigestAndTag
f61dbc2d0 dedup ParseImageReferences
530db2e8d Introduce two additional unit tests for two runtimes and pod annotations.
a21e379b6 Allow sections of Plugins to be merged, and not overwritten as entire sections.
2f24aa00a Update errdefs to 0.3.0
92d327af1 Update tracing docs for containerd 2.0
943b196ad Update NRI documentation for containerd 2.0
a6ceb4be0 containerd 2.0 guide: add image verifier plugins
347423a11 Request 'allow' setgroups when spawning new userns
249dd7474 Format link text in containerd 2.0 doc for readability
18e4ea9a6 Add After=dbus.service to containerd.service
3eea3536f docs/containerd-2.0.md: mention the removal of `cri-containerd-*.tar.gz`
f8d50f6e8 README.md: put a link to docs/containerd-2.0.md
b724b9f23 Add containerd 2.0 doc
fc5086a74 cri: remove sandbox controller from client
e4df672ab sandbox: add sandbox controller v2
4f2bc1580 build(deps): bump lycheeverse/lychee-action from 1.10.0 to 2.0.2
4bd3a71dd go.{mod,sum}: update NRI deps and re-vendor.
bff82e196 [StepSecurity] ci: Harden GitHub Actions
5eb0be994 build(deps): bump github.com/urfave/cli/v2 from 2.27.4 to 2.27.5
0742238cd Handle teardown failure to avoid blocking cleanup
c3d84a87f build(deps): bump the otel group with 8 updates
bfe59daae build(deps): bump github.com/klauspost/compress from 1.17.10 to 1.17.11
b7c333ce2 Revert "update runc binary to 1.1.15"
c6d089090 metrics: Use UnmarshalTo instead of UnmarshalAny
1db0064c6 CI: install OVMF for Vagrant
4d02217b5 CI: fix "Unable to find a source package for vagrant" error
38beeb359 Revert "use vagrant from jammy in noble"
e2daa20ed Revert "use older version of OVMF package"
ee921689f Switch from actuated.dev to GH Action runners for arm64
f89ed3c62 build(deps): bump golang.org/x/sys in the golang-x group
428df99db build(deps): bump google.golang.org/grpc from 1.67.0 to 1.67.1
72126a984 update sample go test commands
9c42dd959 build(deps): bump google.golang.org/protobuf from 1.34.2 to 1.35.1
f0f1bfca0 update runc binary to 1.1.15
46f5a0d93 update to go1.23.2,go1.22.8
7b1809851 Update runner images to macOS13
e479431e0 core/runtime: Fix a typo in error message
b85909cd4 shim: Move pprof server to plugin
b2681dfbd shim: Move ttrpc interceptors to plugins
d7f83034c Fix the race condition during GC of snapshots when client retries
24fe444eb script/setup/install-runc: Add trap statement to clean up tmp files
6ffdabf72 Makefile: fix shim tags overwritten
095131abf add use systemd cgroup e2e
2123855ee Add build tag to omit grpc
64d29ebe5 snapshots: core: Remove dependency on api types
11ffba3dc shim: Do not depend on pkg/oci
0d4e606bb Update hcsshim to v0.12.7
78e39f7c5 build(deps): bump github.com/intel/goresctrl from 0.7.0 to 0.8.0
17d4a1357 Propagate trace contexts to shims
bc4646067 Prepare release notes for v2.0.0-rc.5
ccb2a8d74 [cri] use 'UserSpecifiedImage' to set the image-name annotation
b7b6b324b Add check for CNI plugins before tearing down pod network
b5290726d Add timestamp to PodSandboxStatusResponse for kubernetes Evented PLEG
146a977f9 Move features section to a separate file
30f289335 core/mount: Only remove dirs if unmount succeeded
f8d84ecf9 core/mount: Prevent accidental removal of rootfs files
004f3951d core/mount: Use MNT_DETACH for umount of tmp layers
f7ca91fa3 build(deps): bump github.com/prometheus/client_golang
c75178d93 build(deps): bump google.golang.org/grpc from 1.66.2 to 1.67.0
519cbda1d build(deps): bump github.com/klauspost/compress from 1.17.9 to 1.17.10
d72051036 Enable the selinux on cri test
b03a3c5a2 build(deps): bump the k8s group with 4 updates
017efe05a build(deps): bump the otel group with 8 updates
7c89148a1 build(deps): bump google.golang.org/grpc from 1.65.0 to 1.66.2
6e2c4d00d build(deps): bump golang.org/x/mod
ee0ed75d6 internal/cri: simplify netns setup with pinned userns
fd3f3d5a1 pkg/sys: add GetUsernsForNamespace interface
490e45a08 pkg/sys: Add UnshareAfterEnterUserns function
83aaa89b6 update ctr run to support multiple uid/gid mappings
1dedcb784 build(deps): bump github.com/checkpoint-restore/go-criu/v7
7599d4df2 build(deps): bump github.com/prometheus/client_golang
9037069da update to go1.23.1, go1.22.7
6f43197c2 Remove cri SandboxInfo RuntimeHandler
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping libpod to version v5.2.3-4-g18e0d84c6c, which comprises the following commits:
daae27b7b0 vendor: update c/common to v0.60.4
f6a31e013d Bump to v5.2.4-dev
c5366a308e Bump to v5.2.3
b5ededbce5 Update release notes for v5.2.3
35d2fc8de6 [v5.2] Bump Buildah to v1.37.3
f0ddea707a pkg/specgen: allow pasta when running inside userns
aaf15f81c4 libpod: convert owner IDs only with :idmap
ec4ac087b4 docs: update read the docs changes
c60961839a allow exposed sctp ports
a995b6db5d libpod: setupNetNS() correctly mount netns
d2c2539ee0 vendor: update c/common to v0.60.3
a17fd8c0aa [skip-ci] Packit: split out ELN jobs and reuse fedora downstream targets
b9691547ca [skip-ci] Packit: Enable sidetags for bodhi updates
02d400e7b7 build: Update gvisor-tap-vsock to 0.7.5
5c856c81b0 CI: podman-machine: do not use cache registry
2f7011ab43 [CI:DOCS] Add v5.2.2 lib updates to RELEASE_NOTES.md
602f71991c Bump to v5.2.3-dev
fcee48106a Bump to v5.2.2
37af07836a Update RELEASE_NOTES for v5.2.2
570fbc49aa [v5.2] Bump Buildah to v1.37.2, c/common v0.60.2, c/image v5.32.2
458d15cf5d [v5.2] golangci-lint: make darwin linting happy
faf3edb5f4 [v5.2] golangci-lint: make windows linting happy
b96312af0f [v5.2] test/e2e: remove kernel version check
462c1c6d8e [v5.2] golangci-lint: remove most skip dirs
35290c9b32 [v5.2] set !remote build tags where needed
3ca3c1d456 [v5.2] update golangci-lint to 1.60.1
d61b5d9409 Packit: update targets for propose-downstream
dbdff97042 Create volume path before state initialization
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
| |
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The xen host image reference needed signifant work to be
functional for launching and testing Xen domu guests.
Here we add additional tools to the host image, and allow
it to automatically bundle guests if the configuration
is enabled.
We also add systemd networking configuration to create
a xenbr0 which offeres connectivity to the entire reference
system.
See the recipes and the README for details on testing
and bundling.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
| |
The previous 40G size was far too large.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
| |
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
| |
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
| |
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
| |
parsing errors occur if this fragment ends with .conf,
so we renamed it to make sure it is processed as a
conflist.
Tested with containerd + nerdctl
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
| |
This aren't needed for all plugins, but are required
for others. So we make them a rrecommends to ensure
they are more often than not installed with the main
package.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
| |
As it turns out CNI needs iptables to configure some plugins,
and without it we get a silent fail. It will also be added
to the recipe as a RRECOMMENDS, but we also put it in the
packagegroup for more visibility.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
| |
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Extends container-base to create a systemd enabled container that is
an appropriate starting point if a systemd applciation is being run
or a mulit-user style environment is required.
The application specified in SYSTEMD_CONTAINER_APP will be installed
and be available to be executed.
The rootfs of this container type is post processed to enable and
disable services as specified by the containeer definition. This allows
service that are not appropriate in a containerized environemnt to
be disabled (i.e. getty login)
The list of services can be found in the recipes themselves.
This container enables ssh by default, so that it can be executed
in the background and then accessed as a full environment.
Note: this is currently a priviledged container if run under docker.
There are multiple ways to add/remove permissions from the container,
and most are configurable during launch:
% root@qemuarm64-54:~# docker run -d --rm --name systemd_test --privileged --cap-add SYS_ADMIN \
--security-opt seccomp=unconfined --cgroup-parent=docker.slice --cgroupns private \
--tmpfs /tmp --tmpfs /run --tmpfs /run/lock zeddii/systemd-container-base
or
% docker run -d --rm --name systemd_test --privileged --cgroup-parent=docker.slice \
--cgroupns private zeddii/c3-systemd-container
% root@qemuarm64-54:~# docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
4b07cc907e26 zeddii/c3-systemd-container "/sbin/init" 5 minutes ago Up 5 minutes systemd_test
% podman run -d --name systemd_test --privileged --cgroupns=host --tmpfs /tmp --tmpfs /run --tmpfs /run/lock \
-v /sys/fs/cgroup:/sys/fs/cgroup:ro zeddii/systemd-container-base
% ctr container create --privileged --runtime="io.containerd.runc.v2" \
--mount type=bind,src=/sys/fs/cgroup,dst=/sys/fs/cgroup,options=rbind:rw \
docker.io/zeddii/systemd-container-base:latest my_systemd_container /sbin/init
% ctr task start --detach my_systemd_container
% ctr task ls
TASK PID STATUS
my_systemd_container 690 RUNNING
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Includes container-base.
Provides an application container that installs a package (or packages) to
the container and make the specified command the OCI_IMAGE_ENTRYPOINT.
CONTAINER_APP_CMD : the binary to run via the OCI_IMAGE_ENTRYPOINT
CONATINER_APP: packages to install to the container
The default entry point is the "date" command.
% root@qemuarm64-54:~# docker run zeddii/container-app-base
Mon Oct 28 18:41:23 UTC 2024
% root@qemuarm64-54:~# docker run --entrypoint "du" zeddii/container-app-base -sh
2.6M .
% podman run docker.io/zeddii/container-app-base
Mon Oct 28 18:41:23 UTC 2024
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
includes container-base, and adds image features to make development
tools/headers available.
Anything added to CORE_DEV_IMAGE_EXTRA_INSTALL will be installed into
the image in it's development variant.
The container shell is changed to bash from busybox.
package-management is added to this image type, but by default there
is no package feed configured (since it must be pointed at a build)
% root@qemuarm64-54:~# docker run -it zeddii/container-devtools bash
bash-5.2# du -sh .
399M . bash-5.2# rpm -qa | wc -l
308
bash-5.2# gcc --version
gcc (GCC) 14.2.0
Copyright (C) 2024 Free Software Foundation, Inc.
This is free software; see the source for copying conditions. There is NO
warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
| |
Add some conditional distro feature checks for kubernetes flavours
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
| |
When debugging or configuration networking for CNI and
containerd we should ensure that support utilties are present.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
When integrating into some container stacks (such as containerd),
the detailed configuration toml changes to change the container
runtime from runc to crun is not always trivial.
To avoid (for now) carrying configuration snippets as part of
the recipes, we can symlink runc to crun as crun is fully
compatible with runc.
Note: this means you can't have runc and crun installed on the
same image if the symlinking is done. Hence why this symlinking
is conditional.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
When running a containerd-only stack, we need a CNI configuration
to be available.
When running containerd as part of something like K3S, we expect
the orchestration package will provide that configuration.
This commit makes a containerd-cni package available that contains
a starting point configuration.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
| |
containerd doesn't do native networking confguration, it relies
on CNI.
So ensure that CNI is specified in the containerd profile.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
| |
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
| |
Adapt the demonstration helloworld appliication to fix a warning
about UNPACKDIR not being correct.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
| |
These definitions are selected by setting: CONTAINER_PROFILE
Once selected the VIRTUAL_RUNTIME and other considerations for
the profile are configured and used by the images in meta-virt.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This image is a reference implementation to create a target platform
capable of running containers. This includes kernel configuration,
container runtimes, tools and other support applications.
The packages to install are largely described in the packagegroups
that are part of this layer. packagegroups are preferred as they can
easily be used to create similar images of different composition.
The recipes for the packages have their list of build and runtime
dependencies, as such, those dependencies are not part of the image
install or listed explicitly in the packgroups.
CNCF areas that have choices are described by VIRTUAL-RUNTIME
variables. These variables can be set individually (in a distro,
layer or local configuration file), or can be set by the setting of
a "CONTAINER_PROFILE". It is possible to select incompatible
packages if setting the VIRTUAL-RUNTIME variables individually.
container profiles have been created as valid / tested stacks of the
components in meta-virtualization.
The contents of the image are selected by testing the VIRTUAL-RUNTIME
values and mapping them to packagegroups.
The possible VIRTUAL-RUNTIME variables (and their values) are
currently:
engines: docker/docker-moby, virtual-containerd, cri-o, podman, lxc
VIRTUAL-RUNTIME_container_engine ??= "podman"
runtime: runc, crun, runv, runx
VIRTUAL-RUNTIME_container_runtime ??= "virtual-runc"
networking: cni, netavark
VIRTUAL-RUNTIME_container_networking ??= "cni"
dns: cni, aardvark-dns
VIRTUAL-RUNTIME_container_dns ??= "cni"
orchestration: k8s, k3s
VIRTUAL-RUNTIME_container_orchestration ??= "k3s"
Kubernetes terminology "components"
VIRTUAL-RUNTIME_cri ??= "virtual-containerd"
VIRTUAL-RUNTIME_cni ??= "cni"
To select a CONTAINER_PROFILE, set the variable in your local,
distro or layer configuration:
CONTAINER_PROFILE="<your value>"
The possible values for CONTAINER_PROFILE can be found in
conf/distro/include in the format of: meta-virt-container-<profile>.inc
default (docker)
containerd
podman
docker
k3s-host
k3s-node
This image will eventually be modified more as something that
can easily be inherited and re-used, but for now, it is a capture
of the best practices in a container host image.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
This .inc file is no longer the active one by default, so we
will use it a reference for the possible values. To make that
more obvious, we comment out the current values.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
| |
nmap is not currently buidling for aarch64, so we disable it
as a ptest rdepends when that is our target arch. Some tests
may not work, but having a buildable stack is more important
than all tests working.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
These are used to set configuration for container and virtualization
stacks. We set a default to ensure that sane values are always
present.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
| |
Allow aardvark-dns to be specified as a rdepends for podman
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
| |
Adding the following new pacakge groups:
packagegroup-cni
packagegroup-netavark
packagegroup-container-tools
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
| |
cri-tools aims to provide a series of debugging and validation
tools for Kubelet CRI, which includes:
crictl: CLI for kubelet CRI.
critest: validation test suites for kubelet CRI.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
| |
Bumping the SRCREV to pick up the following commits:
8650ed99 docker: enable ipvlan and build BRIDGE_VLAN_FILTERING into kernel
38e7c7aa docker: inherit base container and BPF configs
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
We are showing one warning on check-config that isn't valid,
as the option has been changed in kernels 6.1+. We tweak
the check-config script to make that conditional
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
| |
qemu-system-i386 / firmware were added as RDEPENDS to xen.
While this is typically the right choice, we can make those
values defined by a variable in case other layers want to
override the default choice.
While we are at it, we change other references to qemu-system-i386
to allow a complete switch if the variable is changed.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
The current RRRECOMMENDS can work, but isn't strong enough
since we explicitly configure system-i386 into 'xl' and
-system requires the bios files.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
| |
* master was renamed to main long time ago
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
