| Commit message (Collapse) | Author | Age | Files | Lines |
|---|
| ... | |
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping moby to version v27.0.3-4-g7fa33a539a, which comprises the following commits:
7d99ebe418 rootless: add `Requires=dbus.socket`
540b29c0c6 update to go1.21.12
276a648ec3 Fix incorrect validation of port mapping
23b8b023dd Fix duplicate subnet allocations
bf222d635b fix some gofmt issues reported by goreportcard
f8231b52d3 daemon/graphdriver/overlay2: set TarOptions.InUserNS for native differ
b951474404 pkg/archive: createTarFile: consistently use the same value for userns
c5794e23ec pkg/archive: handleTarTypeBlockCharFifo: don't discard EPERM errors
02e24483be pkg/archive: getWhiteoutConverter: don't error with userns enabled
838330bac3 Dockerfile: update docker CLI to v27.0.2
e419e22f29 Dockerfile: update compose to v2.28.1
3557077867 update golangci-lint to v1.59.1
c95b917167 pkg/archive: reformat code to make #nosec comment work again
c0ff08acbd builder/remotecontext: reformat code to make #nosec comment work again
4587688258 api/types: deprecate ContainerJSONBase.Node, ContainerNode
6da604aa6a deprecate experimental Graphdriver plugins, and disable by default
ce5571f343 api: swagger: fix definition of TmpFsOptions (API v1.46)
a9ab04603e cmd/dockerd: initMiddlewares: use containerd/logs
e355e10011 vendor: github.com/containerd/ttrpc v1.2.5
f8c088be05 Lookup docker-proxy in libexec paths
d22d8a78f1 runconfig: deprecate IsPreDefinedNetwork
0a4277abf4 api/types: move stats-types to api/types/container
91a2a574d7 api/types: rename container.StatsResponse to StatsResponseReader
6fafc8762f api/types: fix typo in GoDoc
42cb29f6ea registry: Search.searchUnfiltered: inline variable
43d4a4c63e registry: v2AuthHTTPClient: inline some vars and slight refactor
bf35f3d8c8 update one more entry in mailmap and AUTHORS
b4c20da143 volume: use AtomicWriteFile to save volume options
39b4448e12 docs/api: update some example values to be more accurate (API v1.46)
37b57c2ae0 api: swagger: update some example values to be more accurate
2a7bb2a7bd update .mailmap and AUTHORS
68b8e97849 vendor: github.com/spf13/cobra v1.8.1
b5cc61a243 Dockerfile: update buildx to v0.15.1
f741ca857c libnetwork/drivers/macvlan: getDummyName don't use stringid.TruncateID
d241862f36 libnetwork/drivers/macvlan: move truncating ID to getDummyName
dab918b2b0 libnetwork/drivers/ipvlan: getDummyName don't use stringid.TruncateID
b8c80b19de libnetwork/drivers/ipvlan: move truncating ID to getDummyName
8599213b52 vendor: update buildkit to v0.14.1
2df4391473 Fix hairpin between networks with mapped port
b06b6b3648 docs: add API documentation for API v1.46
517fb0991e api/types/container: provide alias for github.com/docker/go-units.Ulimit
ad716b223b integration/container: use consistent alias for import
25f44885ed daemon/cluster/executor/container: use consistent alias for import
084219a5f9 update AUTHORS
f09f756851 daemon/cluster: minor linting issues and cleanup
74d77d8811 Revert "Internal resolver for default bridge network"
6d35673504 Revert "No default nameservers for internal resolver"
01efb9a5ab daemon/cluster/executor/container: fix error-handling
b640582436 Add OomScoreAdj options
8e91b64e07 runconfig: deprecate DefaultDaemonNetworkMode, move to daemon/network
437e1ae15e runconfig/opts: deprecate ConvertKVStringsToMap and move internal
b3e236d3b5 daemon: rename some inconsistent import aliases
2851ddc44c Add containerd image ref to created containers
812f319a57 Add containerd connection info to info endpoint (API v1.46)
1327342b14 hack: Ignore deprecate-integration-cli validation
7b8f4922a5 daemon: Emit Image Create event when image is built
09eb6ec4f1 builder/exporter: Wrap exporter to hook the image export
0e84482ef5 builder-next: Move exporter wrapper to exporter package
48ff86ec64 pkg/longpath: AddPrefix: use early returns
424c22390e pkg/longpath: deprecate Prefix const
2f45cbf69f api/types/container: NetworkMode align code between Windows and Linux
7b56fa8dc0 api/types/container: NetworkMode.NetworkName: use switch
7b438c5c31 daemon: rename variables that shadowed imports
4c7228663c api/server/router/container.postCommit: add TODO about use of CreateRequest
c692af36c3 runconfig: deprecate ContainerConfigWrapper, move to api/types/container
afdfe4ff86 runconfig: deprecate SetDefaultNetModeIfBlank
4af9f418a3 runconfig: remove ContainerConfigWrapper.getHostConfig() utility
98bd08c534 runconfig: remove redundant import-alias
e42503213d runconfig: ContainerConfigWrapper: unify Linux and Windows implementations
2954b05b03 runconfig: remove conversion code for API < v1.18
37f4616751 integration-cli: fix TestCreateWithTooLowMemoryLimit: using deprecated API fields
964aba696c libnetwork: windows/overlay: remove endpointRequest wrapper
c316ed0c22 libnetwork: remove special handling for Windows 14393 (RS1, V1607, LTSC2016)
3108165c94 pkg/archive: TestChangesDirsEmpty, TestChangesDirsMutated: no kernel-version check
17ca8b62bd pkg/archive: remove uses of iota
94caeeb401 pkg/archive: don't call system.Lgetxattr on unsupported platforms
c565a3a1fe pkg/archive: collectFileInfo: don't create FileInfo if unused
7ce1edd7c6 pkg/archive: deprecate NewTempArchive, TempArchive
92b8d93f47 pkg/archive: deprecate CanonicalTarNameForPath
0ffc0c95e6 pkg/tarsum: format #nosec comments to standard format
cb19b59b65 pkg/archive: format #nosec comments to standard format
805ccd2365 pkg/dmesg: deprecate, and use internal utility instead
c7f4abc14a pkg/dmesg: use unix.SYSLOG_ACTION_READ_ALL instead of local variable
528ffa9cae Allow multiple macvlan networks to share a parent
9389f76f6d pkg/chrootarchive: remove dependency on pkg/longpath
f657a75bf6 pkg/archive: remove dependency on pkg/longpath
2100a70741 pkg/stringid: deprecate IsShortID
e19e6cf7f4 pkg/stringid: deprecate ValidateID
0fb6360fa7 builder/dockerfile: createDestInfo: remove platform arg (LCOW left-over)
c5d95fdb04 builder/dockerfile: fix some minor linting issues
6fa6812c51 builder/dockerfile: rename vars that shadowed types and builtins
074932966d builder/dockerfile: remove endsInSlash utility
c8e7fcf91a api: adjust health start interval on swarm update
dd1ca95ef9 Add exec option to API TmpfsOptions
07053a0991 testutil/daemon: Wait() until the daemon is Kill()'ed
955b923352 daemon: releaseNetwork: clear SandboxID, SandboxKey
e3c5665d21 daemon: restore: clear net state for stopped containers
17a59a7506 Don't log an error about route-add for IPv6 bridge
57c6a5e691 libnet: SetKey: propagate traces from API to SetKey reexec
b7186bdfc8 libnet: Sandbox: add ctx to SetKey
6c71ebd82c libcontainerd: Start: add ctx
2d8c4265c7 libcontainerd: NewTask: add ctx
19f72d6fc4 libnet: add more OTel spans
224d7291df container: add a span to CheckpointTo
642242a26b builder/mobyexporter: Add missing nil check
44f19518f9 move the cli/debug package to cmd/dockerd/debug
e4e40558ba builder/builder-next: gofmt
88e5e4cfb4 Prevent data race during version negotiation
9101392309 update runc binary to v1.1.13
ec24e19d69 vendor: github.com/opencontainers/runc v1.1.13
d20739b6fe vendor: golang.org/x/net v0.24.0
535898dd9a vendor: golang.org/x/crypto v0.22.0
4b2aa9f875 vendor: golang.org/x/sys v0.19.0
cec0d50361 libnet: add ctx to Sandbox.Destroy()
af23a024a1 libnet: Endpoint: add ctx to Join and Leave
566026af8f libnet: Controller: add ctx to store methods
9391052700 libnet: Add ctx to NewSandbox
4924f56e7b libnet/driverapi: Add ctx to ProgramExternalConnectivity
c5c1d133ef libnet/driverapi: Add ctx to Join
8dcded102e libnet: add OTel spans to CreateEndpoint
cf376170ed Add more go:build statements to prevent downgrading Go language version
b7d5a42168 Update go:build comments to go1.21
5343c7b451 remove internal/compatcontext and use context instead
13c3384303 hack/vendor.sh: remove redundant -compat 1.18
f20fd3c8a0 golangci-lint: ignore ineffassign & staticcheck on ctx shadowing
d0790fd03e Trivial tidying in osl.setIPv6()
b7f1036cd9 Remove the option to ignore failure to disable ipv6
44d00e3b9b Dev container: try to load kernel module ip6_tables
d0a135772e Dockerfile: update buildx to v0.15.0
215410316f daemon: cleanup getDefaultNetworkSettings
01eecb6cdf Validate port bindings for gateway_mode=routed
2a291c1855 Improve PortBinding.String()
a1f8bbeeef Remove unused bridge.driver.portAllocator
043db3be68 Bind the same port for multiple addresses
20c99e4156 Option to disable NAT for IPv4/IPv6 for a bridge network.
18ff5ef537 vendor: update buildkit to v0.14.0
e05848c002 Set up bridge-specific iptables rules in the bridge driver
4f09af6267 Allocate same port for IPv4/IPv6 for 'any interface' mappings.
03577884d9 Retry port mapping for a range if ports are in-use
931eea20ff Add portallocator.RequestPortsInRange()
e0b762ed1b daemon/containerd: fix duplicate import
7f2ed139fe remove uses of platforms.Platform alias
896de6d426 seccomp: allow specifying a custom profile with `--privileged`
2ccce36d10 c8d/progress: Allow updating "Unavailable" ids
e2326c27b5 c8d/push: Fix wrong Originalindex descriptor in aux error
af0cdc36c7 api: deprecate erroneous Config fields in `GET /images/{name}/json` response
58641c7b5c docs: api: use separate definition for Image.Config (api v1.39 - v1.45)
5e0e34fafd api: swagger: use separate definition for Image.Config
8d96d759bb c8d/image_manifest: IsPseudoImage return true for unknown/unknown platform
b4d2283c89 api/push: Ignore Platform on older APIs
68a63d0611 c8d/push: Extract missing content note to an Aux progress
0a31437208 c8d/push: Support platform selection
999f1c63db testutils/specialimage: Add MultiPlatform
c16d676266 c8d/blobsDirContentStore: Return ErrNotExists
85249a8401 c8d/image_manifest: Add helper functions
c514952774 Changed default value of the startInterval to 5s
6c2934f373 api/types: move ImageLoadResponse to api/types/image
eb675cce71 api/types: move ImageImportSource to api/types/image
f6cc76ceb9 api/types: move ImageSearchOptions to api/types/registry
b5f15bc0aa api/types: move EventsOptions to api/types/events
ecb24afaaf api/types: move ImagesPruneReport to api/types/image
162ef4f8d1 api/types: move VolumesPruneReport to api/types/volume
17c3269a37 api/types: move ContainerStats to api/types/container
fd1d8f323b api/types: move CopyToContainerOptions to api/types/container
47d7c9e31d api/types: move ContainerPathStat to api/types/container
db2f1acd5d api/types: move ContainersPruneReport to api/types/container
5b27e71521 api/types: move ContainerExecInspect to api/types/container
d91638e295 api/types: move ExecStartCheck to api/types/container
452e134001 api/types: move ExecStartOptions to api/types/backend
cd76e3e7f8 api/types: move ExecConfig to api/types/container
ac27a5379b docs: api: image inspect: remove Container and ContainerConfig
52580b2673 vendor: github.com/creack/pty v1.1.21
fa95f8a070 client: fix typos in test-names and godoc
08939f21ad integration-cli: remove DockerAPISuite.TestContainerAPICopyNotExistsAnyMore
75843620a6 api/server/router/container: minor nits in exec router
18e1afd1a1 vendor: github.com/distribution/reference v0.6.0
7501b90a22 vendor: go.etcd.io/bbolt v1.3.10
cf796aa56a pkg/reexec: touch-up GoDoc, and remove "import" comments
d20a074f33 pkg/reexec: remove gotest.tools from tests
defd5a08f4 pkg/reexec: unify non-Linux implementation of Command
004451c812 pkg/reexec: unify implementation of Self() and remove stub
79bff9461c pkg/reexec: don't mix syscall and golang.org/x/sys package
a445f7fa8a daemon/graphdriver: fix GoDoc for ProtoDriver.GetMetadata
a76b768fea daemon/graphdriver: remove redundant Mounted function
837b3f9576 Allow startup with no kernel support for ip6_tables
fd3fa4b28a Add Rob Murray (@robmry) as maintainer
854130eee0 deps: remove `grpc-ecosystem/go-grpc-middleware`
49ca0d0d03 otel: remove deprecated usages of `otelgrpc`
1243f9da6d Revert "libnet/i/defaultipam: Disambiguate PoolID string format"
6af0646236 Revert "libnet/i/defaultipam: Use InternalErrorf instead of InvalidParameterErrof"
4aa85cd159 ci: enable debug for buildkit container builder
fc9dd6acb4 api/types/network: make CheckDuplicate optional
e5f9484ab6 api/types: move NetworksPruneReport to api/types/network
ad6edc139f api/types: move NetworkCreate, NetworkCreateRequest to api/types/network
4f61fa21cb vendor: update buildkit to v0.14.0-rc2
ca0529f984 api/server: ContainerList returns container annotations
b3c8216873 vendor: google.golang.org/appengine v1.6.8
0b5f7b9ff8 builder-next: Adjust NewGatewayFrontend invocation
fa03db1b82 builder: Update detect usage for new detect API from buildkit
995604236e builder: Adjust usage of shlex.ProcessWord
438371e1fe builder: Pass nil linter to instructions.Parse
3bcbb561ad vendor: update github.com/moby/buildkit to v0.14.0-rc2-dev
d365702dbd No default nameservers for internal resolver
18f4f775ed Internal resolver for default bridge network
5318c38eae update containerd binary to v1.7.18
86f7762d48 vendor: github.com/containerd/containerd v1.7.18
91e2c29865 update to go1.21.11
163c6ca9ad api: Make EnableIPv6 optional
83c532c9b7 daemon/cluster: remove Cluster.getRequestContext()
69b2a05d27 api/types: migrate NetworkResource to api/types/network
3306034c64 api/types: remove aliases for deprecated Image types
70bac42113 integration/network: remove used of deprecated NetworkInspectOptions
1ec92ea60b opts: remove alias for ipamutils
e6f41e22a7 client: Client.doRequest: fix closing filehandle and reversed errors
9110ef1eec client: ensureReaderClosed: make linters happier
57f597b866 client: Client.NetworkInspectWithRaw: minor cleanup
42f4db26c7 api/server/httpstatus: FromError: remove redundant checks and cleanup
f78dac35e5 api/types: migrate NetworkListOptions to api/types/network
d18b88fd32 daemon: add ULA prefix by default
68bf0e7625 api/types: migrate EndpointResource to api/types/network
5bea0c38bc api/types: migrate NetworkInspectOptions to api/types/network
245d12175f api/types: migrate NetworkConnect, NetworkDisconnect to api/types/network
89624e09e6 api/types: migrate NetworkCreateResponse to network.CreateResponse
32418e9753 daemon: set the default local addr pool if none configured
0071832226 Add per-endpoint sysctls to DriverOpts
347bb4122a update docker-py to 7.1.0
69f1e2a923 docs/api: add Scope, ConfigOnly, ConfigFrom, Peers (v1.41 - v1.45)
53542fefd5 api: swagger: Network: add Peers
44125530bf api: swagger: POST /networks/create: document Scope, ConfigOnly, ConfigFrom
8b7a54f622 api: swagger: Network: inline examples, and add ConfigOnly, ConfigFrom
6cab6d0302 docs/api: POST /networks/create: inline examples per-field (v1.41 - v1.45)
51885166b9 api: swagger: POST /networks/create: inline examples per-field
d64e220afb api/types: NetworkCreate: add GoDoc
cd1ed46d73 don't depend on containerd platform.Parse to return a typed error
56086c9952 integration/container: remove redundant type-conversion, and minor cleanup
070e90a94c integration/system: remove redundant type-conversion, and minor cleanup
667094924d testutil/fakestorage: fix minor (linting) issues
4a074c809e integration/internal/swarm: remove unused ContainerPoll
fe78d6d9da integration/internal/swarm: rename vars that collided with imports
4619b14403 refactor: rename attach config var
2d134c5abd Fix goroutine/fd leak when client disconnects
8361baf8d9 Dockerfile: update compose to v2.27.1
387be6ec91 Dockerfile: update buildx to v0.14.1
500eff0ae9 libnet/i/defaultipam: improve address pools validation
0c022307e9 libnet/i/defaultipam: Unmap IPv4-mapped IPv6 addrs
9d288b5b43 libnet/i/defaultipam: introduce a linear allocator
a9ebb0c267 Replace dead RFC8878 go doc hyperlink
16e5c41591 Fix issue where node promotion could fail
5a2fa59688 libnet/i/defaultipam: Use InternalErrorf instead of InvalidParameterErrof
9369132879 libnet/i/defaultipam: Disambiguate PoolID string format
6d21574535 libnet: Controller: drop getStore()
49888559cc libnet: Controller: drop closeStores
2336363e28 libnet: init datastore in ctrler constructor
3847da374b integration/TestDiskUsage: Make 4096 also a 'empty' value
1e29f9b12f Move EndpointSettings.DriverOpts from op-state to config
a35716f5b9 Factor out selection of endpoint for config migration
4f0cb7d964 Dockerfile: update containerd binary to v1.7.17 (static binaries and CI only)
e459487feb Update containerd to v1.7.17
707ab48cbb Explicity write http headers on streaming endpoints
50d3028464 Fix fd leak/goroutine when attaching stdin only
ad0f263eb5 tarexport: Plumb ctx, add OTEL spans, handle cancellation
33f9a5329a Default to "windows-dns-proxy":true
77a47dba3b Forward DNS requests into --internal networks
6fbae5ff26 libnet/d/bridge: don't parse the MacAddress netlabel
41ddc47bbf Don't explicitly enable ip6tables in tests
07ccaf028d Enable 'ip6tables' by default, don't require 'experimental'.
5705cbf6e3 Make it an error to set up filtering on an unnamed bridge
d6b6a5122f Enable filtering on IPv6 bridges with no IPv6 address
4df97f2e1e Gate setting of bridge-nf-call-ip6tables on "--ip6tables=true".
8751562d3f Set up IPv6 n/w isolation rules when --ip6tables=true
23fd15985b Allow "--ip6tables=true" when "--iptables=false"
9a8ffe38fc Disable ip6tables in tests that disable iptables
5952920380 libnet/d/remote: replace errorWithRollback
7216541b17 libnet: don't check if ctrler store is nil
7ea9acc97f cmd/dockerd: deprecate `api-cors-header`
6c97e0e0b5 update to go1.21.10
72eb615490 Makefile: bundles is not PHONY
fda708f55d Delete broken/unused test requirement helper "IPv6"
4aff2fbc98 Remove integration-cli TestDaemonSuite/TestDaemonIPv6Enabled
346a7c07a0 Fix TestDockerSwarmSuite/TestSwarmInitIPv6
b11e95f5bc Don't delete IPv6 multicast addresses from a bridge
a5f82ba4bf Disallow IPv6 multicast as bridge n/w subnet
aa3a86c038 Refactor IPv6 subnet validation
f46473b29c Do not remove kernel-ll addresses from bridges
01ea18f1e3 Allow for a read-only "/proc/sys/net".
57ada4b848 Option to avoid deleting the kernel_ll address from bridges.
c5376e534c libnet/ipams/null: move driver name to its pkg
f2387f3632 libnet/ipams/defaultipam: move driver name to its pkg
0db56de78e libnet/ipamutils: no more global state
3c9718144f libnet/ipams: register all drivers
eda47500fc libnet/ipams: Unconditionally call windowsipam.Register
ae9e4319b0 libnet/ipams/windowsipam: that driver knows its name
8cec9f0dca libnet/ipams/defaultipam: add a Register fn
218394cada libnet/ipams/builtin: move to libnet/ipams
29f2ca04e0 libnet: move ipam pkg to ipam/defaultipam
e8644c3e0e libnet/ipam: default-address-pools as Register arg
1d5a12dfb1 integration-cli: createNetwork: add t.Helper()
115de5ff3d libnet/ipamapi: add in/out structs for RequestPool
82aae0fe50 libnet/netutils: remove dead util NetworkRange
37a81cd04d libnet/ipam: split v4/v6 address spaces
199c72cb5d libnet/ipam: remove dead DumpDatabase()
df88857e6c libnet/ipam: put `addrSpace` into a separate file
a047d4b1df libnet/ipam: un-embed mutex from `addrSpace`
eeec716e33 Update containerd to v1.7.16
efca9303a4 refactor: updated native diff error message
ff8de5e156 Add firewalld policy "docker-forwarding".
5ebe2c0d6b apparmor: Allow confined runc to kill containers
87506142d8 Do not forward DNS requests to self.
147f701bd1 chore: fix function names in comment
e3c59640d5 vendor: github.com/Microsoft/go-winio v0.6.2
2140e7e0f5 vendor: golang.org/x/tools v0.16.0
85c9900377 vendor: golang.org/x/mod v0.17.0
e314113ad7 Dockerfile: update docker CLI to v26.1.0
df831c943f vendor: github.com/cilium/ebpf v0.12.3
194cbd6e7d Makefile: refactoring .PHONY
57a12a372f Update GoDoc for ioutils on atomic writers
98d51b510d chore: remove repetitive words
8bbba6315f API: bump version to 1.46
80d92fd450 feat: ctx to client API
838047a1f5 archive: fix ConvertRead/ConvertWrite functions for rootless docker & native diff overlay
aef6905e01 overlay2: better documentation of user namespace behavior when checking native diff support
f6b80253b8 overlay2: get rid of unnecessary kernel version check
b2fd67de77 overlay2: support rootless native overlay diff in kernel 5.11 and above
d4f61f92fd Move StartedAt time to before starting the container
Bumping docker-cli to version v27.0.3-15-gd41cb083c, which comprises the following commits:
0a8bb6e5b chore: regenerate docs
c777dd16d docs: update cli-docs-tool (v0.8.0)
eea26c50d docs: update links to docker cli reference
1cf2c4efb docs: regenerate base command
c2b9c1474 docs: align heading structure for base command
598442d37 docs: remove frontmatter for base command
c964b80e5 docs: rename cli.md to docker.md (base command)
0ca7be015 docs: remove empty docker base command reference
27bf78d33 docs: make buildx build the canonical reference doc
5ed8f858c update to go1.21.12
6b99e0370 vendor: github.com/docker/docker v27.0.3
3134d5582 vendor: github.com/docker/docker v27.0.2
c97e8091a vendor: github.com/docker/docker v27.0.2-dev (e953d76450b6)
894584802 vendor: github.com/docker/docker v27.0.2-dev (861fde8cc974)
cd560916f gha/e2e: Update latest version to 27.0
50fae2074 cli/config/credentials: ConvertToHostname: handle IP-addresses
217971d48 re-introduced support for port numbers in docker registry URL
6e35a78fd update golangci-lint to v1.59.1
bf1a70182 vendor: github.com/docker/docker v27.0.1
617eb5271 cli: make initializing the global meter- and tracing providers optional
9f8bda1df cli/config: replace pkg/homedir dependency with local copy
ad583961b vendor: github.com/docker/docker v27.0-dev (ff1e2c0de72a, master)
c8c13bdca docs/deprecated: update status for graphdriver-plugins
1f7561ecb Dockerfile: update compose to v2.28.0
1a0481007 vendor: github.com/docker/docker v27.0.1-rc.1
faf7647dc refactor: remove test
d1cb7d41c cli/command: Don't copy fakeClient
1322f585f test: cli force exit signal handler
34d42bdf0 vendor: github.com/docker/docker v27.0-dev (018d93decfb5)
443617c0f update mailmap and AUTHORS
2088c5963 vendor: github.com/docker/docker 1a1f3cff45ec (master, v27.0-dev)
64c20f301 Additional typo corrections
a84536eb4 Fix RFC3339 typo in docs
e5d26a8d4 build: allow BuildKit to be used on Windows daemons that advertise it
55a1f6eb7 cli-plugins/manager: add GoDoc for getPluginDirs, defaultSystemPluginDirs
4f00eee52 vendor: github.com/spf13/cobra v1.8.1
00b0eb778 update go-md2man to v2.0.4
b0793613a Dockerfile: update buildx to v0.15.1
0bc092496 deprecate experimental graphdriver plugins
1f1b70dfd docs: add deprecation warning to experimental grapdriver plugins
a4bfd8c74 feat: add a global sigint/sigterm handler as a fallback to ctx cancellation
eae63069e vendor: github.com/moby/swarmkit/v2 v2.0.0-20240611172349-ea1a7cec35cb
3d017f30d vendor: github.com/docker/docker v27.0.0-rc.2
e0972e94b gha: e2e: test against v27.0 release candidates
43210216f bump version to v27.0.1-dev
c07cee05e Update go:build comments to go1.21
1fd8e2434 cli/command/image: add go:build tag to prevent downgrading go version
c8f5d4cc6 build(deps): bump docker/bake-action from 4 to 5
3b0d297aa vendor: github.com/docker/docker caf502a0bc44 (v27.0.0-dev)
11a3d8728 vendor: github.com/docker/docker ec4bac431c88 (v27.0.0-dev)
1bfec63b9 vendor: github.com/docker/docker ba69bd9c1e48 (v27.0.0-rc.2-dev)
8376b3e42 use local ConvertToHostname() implementation
4ea91a73e vendor: golang.org/x/net v0.24.0
91b63ac45 vendor: golang.org/x/crypto v0.22.0
a2ccd3eb0 vendor: golang.org/x/term v0.19.0
634b19f5e vendor: golang.org/x/sys v0.19.0
872935f1c vendor: github.com/docker/docker v27.0.0-rc.1
1fc73b470 vendor: github.com/docker/docker v27.0.0-dev (bcd280a3ed2d)
e9c0fc330 docs: extend deprecation target for non-TLS API
3dcc65353 plugins: cleanup sockets when done
f80d7182c cli/command: remove deprecated EventHandler, InitEventHandler
ad62b6869 vendor: github.com/containerd/platforms v0.2.1
6e7266a72 cli/command/registry: fix link to credential stores
6b93cf221 cli: Wrap Err stream
b79d68465 Deprecate non-standard (config) fields in image inspect output
e06ef800f Removed all mentions of "please" from docs and messages
32ac7a08f cli/push: Print aux notes
966fa7c47 cli/push: Add `platform` switch
892784dee vendor: github.com/docker/docker v27.0.0-dev (9d9488468fe2)
3ce317747 gha: switch to Ubuntu 24.04
43b97e888 update golangci-lint to .v1.59.0
df474d517 cli/command/image/build: fix nosec comment
0ba14fde4 linting: fmt.Sprintf can be replaced with string concatenation (perfsprint)
7db922cf9 cli/command: TestGetDefaultAuthConfig: remove unused expectedErr
dfec976e8 linting: fmt.Errorf can be replaced with errors.New (perfsprint)
e93abde7a cli/command/network: fix linting issue and pass client instead of cli
43b840ed9 vendor: github.com/docker/docker a736d0701c41 (master, v27.0.0-dev)
c481c6492 cli/command: remove some import aliases
851277f96 cli/command/container: rename some variables
1a83595c7 cli/command/container: legacyWaitExitOrRemoved rm intermediate var
0d4de2392 cli/command/container: inline some variables to prevent shadowing
d11fbda36 vendor: github.com/distribution/reference v0.6.0
d0057db3a cli/command: more go1.19 ("predeclared any")
3f0d90a2a feat: global signal handling with context cancellation
97b7746df vendor: github.com/docker/docker 59996a493cfc (v27.0.0-dev)
94f9de592 Handle networks.driver_opts for a service
a73172265 cli/compose: add schema 3.13 (no changes from 3.12 yet)
0502189e2 cli/command/network: add minimal test for --ipv6 option
db2672e68 network create: make --ipv6 optional
0ed8a7e31 vendor: github.com/docker/docker 00f18ef7a455 (master / v27.0.0-dev)
9acfbbd74 Correct typos in docs/ and man/
bc2e27478 vendor: migrate to github.com/go-viper/mapstructure/v2 v2.0.0
23148220e vendor: github.com/docker/docker c6aaabc9fc82 (master / v27.0.0-dev)
a9ea03481 vendor: github.com/containerd/containerd v1.7.18
630e1d3e9 update to go1.21.11
558a910b8 vendor: github.com/containerd/containerd v1.7.17
be2c284ee vendor: tags.cncf.io/container-device-interface v0.7.2
20d1b661b cli/command: use shallower interface for completions
b6a3ce416 vendor: github.com/docker/docker cd3804655a25 (master / v27.0.0-dev)
d4491fc09 Correct typos in the cli/ folder
b9cd72259 gha: update to actions/upload-artifact@v4
2ef6bc1c1 Update CODEOWNERS
e2fc6bd77 vendor: github.com/docker/docker e622cea55698 (master / v27.0.0-dev)
16c8f4942 vendor: github.com/Microsoft/hcsshim v0.11.5
b7548ba7f vendor: github.com/opencontainers/image-spec v1.1.0
12aaeae21 vendor: github.com/Microsoft/go-winio v0.6.2
fed9fa0f7 context list: temporarily add ContextType to JSON output
40a1da8b4 cli/command/context: list: add test for JSON output
2e9eff235 cli/command/context: test inspecting context with custom metadata
54291dd47 cli/command/context: add test-utility to create multiple contexts
9d9bb19f0 docs: deprecate daemon's api-cors-header flag
7dc271a8b migrate to new github.com/containerd/platforms package
d5d94e46f Explain how to use "network connect --driver-opt" to set sysctls
7f9dba60e Test quoted fields in --driver-opt
b7583a2c2 Explain how to use "--network driver-opt" to set sysctls
068f118f8 Test quoted field in --network
82ed39e31 docs: use --quiet in example to simplify output
e70f68595 Dockerfile: update ALPINE_VERSION to 3.20
0b7aff333 Dockerfile: update compose to v2.27.1
f0e7e07b8 Dockerfile: update buildx to v0.14.1
05905bd92 vendor: github.com/docker/docker-credential-helpers v0.8.2
dc75e9ed6 cli/config: do not discard permission errors when loading config-file
c80adf4e8 cli/config: TestLoadDefaultConfigFile: check that no warnings are printed
de91207b8 cli/config: add test for dangling symlink for config-file
426fb2fd8 cli/config: Load(), LoadDefaultConfigFile(): improve GoDoc
6d21372db run, create: update "--rm" flag description to mention anonymous volumes
296a6f587 plugins/hooks: Don't show empty hooks
1527d625f Plumb context to API callbacks
3fdf377b6 vendor: github.com/docker/docker master (06e3a49d66fa)
6a4d38c7f docs: fix json syntax error
ffd57fac1 Updated engine versions in e2e text matrix
dbf844366 vendor: github.com/moby/swarmkit/v2 master (c1c857e2dca1)
5f4f4f64d OTel: implement missing MeterProvider `ForceFlush`
f07834d18 OTel: add `command.time` metric to plugin commands
02537eac5 Use funcs on DockerCli to return Meter/TracerProviders, not initialize them. Initialize them during DockerCli struct init
4758ed0b0 Document the extended '--network' syntax
e8bfedd26 Fix TestNetworkConnectWithFlags
eb99994c7 update to go1.21.10
8d6e571c0 Add e2e tests for run w/ bad entrypoint
31644d5ea Fix hang when container fails to start
b7e25a4b4 docstring: typo: settings -> setting
e3216ca64 go.mod: use SemVer format for go version to assist CodeQL AutoBuild
692c7ee7e gha: CodeQL: move go.mod/go.sum symlink earlier to help caching
e1dcc194e OTEL collector/prometheus/aspire-dashboard stack for testing purposes
1d666b410 feat: wire ctx into plugin hooks
5ccb48459 cli-plugins: PluginRunCommand: use cmd.Environ instead of os.Environ
86162f781 feat: use main func ctx for cobra and use ctx in tests
e73fde8ca vendor: update github.com/docker/docker to v26.1.0
dccfd6e4d chore: fix function names in comment
116db4fc8 docs: tidy up CDI docs
73959eef7 chore: remove deprecated DualStack field
1433df8fe bake/bin-image-cross: Add darwin
0c2697d77 Dockerfile: Remove xx-sdk-extras
094af6ea0 darwin/build: Disallow CGO_ENABLED=1 when cross-compiling
faf096b25 docs: clarify that --data-path-addr doesn't restrict access
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping crun to version 1.15-51-g6c158dd, which comprises the following commits:
e6eab76 wasmedge: access container environment variables for WasmEdge configuration
0475016 restore: update console-socket option description
9861254 tests: bump wasmedge to 0.14
fd6b748 cgroup: use MemoryMax instead of MemoryLimit
3980447 nix: upgrade dependencies
526f959 test: pass volume for /var/lib/containers
adb5cb3 linux: improve error message on EACCES
474bc17 remove duplicate initialization cgroup manager in the cgroup args
cb947d0 tests: use vault.centos.org
61fdfc6 tests: skip push tests with podman
42b9fd1 [crun run] Avoid setting crun_context.handler redundantly
976029a libcrun: fix error message argument
ca42c18 RPM: Remove wasmtime support
6879c4c Packit: enable epel9 on c9s targets to fetch wasmedge
315f732 RPM: no separate krun symlink creation
0b33840 Downstream: Add rpm/gating.yaml to handle downstream gating tests
c017ce5 Packit: sync downstream gating test files on every upstream release
e452395 TMT: rewrite podman revdep tests to be usable without CI
163037a tests: fix issues reported by shellcheck
4cbab15 RPM: Fix epoch value for copr builds
fd745e0 dist: install symlinks as part of make install
9533613 ci: Cancel in progress tests on updates
c6c1c7f crun run --help: say --no-subreaper is ignored
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping cri-tools to version v1.26.0-676-g767879cc, which comprises the following commits:
c81525da userns: Fix running tests inside a userns
316d6d3c userns: Call runtime only once
934f1ccb userns: Skip tests if the host doesn't support idmap mounts
6b2eef6d Bump golang.org/x/net from 0.26.0 to 0.27.0
5a43b750 Bump golang.org/x/term from 0.21.0 to 0.22.0
09fce9cf Bump k8s.io/cri-client from 0.31.0-alpha.2 to 0.31.0-alpha.3
4dc80b8e Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
d18ca301 Bump google.golang.org/grpc from 1.64.0 to 1.65.0
8c8981cb Bump k8s.io/client-go from 0.31.0-alpha.2 to 0.31.0-alpha.3
c62b1c28 Bump go.opentelemetry.io/otel/sdk from 1.27.0 to 1.28.0
6e074fd8 Bump github.com/docker/docker
9ab98677 Bump k8s.io/cri-api from 0.31.0-alpha.2 to 0.31.0-alpha.3
19f8f74f Fix invalid context on `Status` RPC
d898927a Sort commands by their name
77f866ad Bump go.opentelemetry.io/otel/trace from 1.27.0 to 1.28.0
4fcec096 Switch to macOS 12
cd111361 Add `crictl [create,runp,run,pull] jsonschema` subcommands
35c97282 Add support to reopen container logs
34b940cd Make all RPC's interruptable
31af2ddb Pin `k8s.io/cri-{api,client}` repos
d5af0dd4 Bump github.com/docker/docker
6bde37b2 Bump github.com/docker/docker
c6918dee Make image RPCs interruptable using Ctrl-C
d19c808b Bump k8s.io/klog/v2 from 2.130.0 to 2.130.1
689447c6 Bump k8s.io/klog/v2 from 2.120.1 to 2.130.0
23d9ff4e Bump github.com/opencontainers/runc from 1.1.12 to 1.1.13
33976da3 `crictl run`: Rename `--timeout`/`-t` to `--cancel-timeout`/`-T`
3689ac17 Fix `pull-timeout` flag for `crictl pull`
f45fe651 Bump k8s.io/kubelet from 0.30.1 to 0.30.2
991c4b55 Bump k8s.io/kubectl from 0.30.1 to 0.30.2
146cc612 Bump github.com/docker/docker
6d5008c4 Revert "Fixes invalid JSON in crictl info"
780d0449 Add `--pull-timeout` flag to `crictl` `create`, `run` and `pull` commands
88df400d Fixes invalid JSON in crictl info
65f9232a Bump github.com/docker/docker
37e0b57a Update e2e tests
2194b4bd Bump golang.org/x/net from 0.25.0 to 0.26.0
09c81cff Bump golang.org/x/term from 0.20.0 to 0.21.0
bc128afb Revert "Fixes invalid JSON in crictl info"
39a77d4d Fixes invalid JSON in crictl info
3329bbea Make cri-tools independent from k/k
631f1c27 --- updated-dependencies: - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc dependency-type: direct:production update-type: version-update:semver-minor ...
1eeda666 Bump github.com/onsi/ginkgo/v2 from 2.17.3 to 2.19.0
10ad3a15 Regenerate docs
869863ba Use versioned tools for supply chain provenance
aa92e358 --- updated-dependencies: - dependency-name: go.opentelemetry.io/otel/sdk dependency-type: direct:production update-type: version-update:semver-minor ...
fd01c401 Bump github.com/docker/docker
d4d80f43 Bump golang to v1.22 in CI
e1edc9fc Bump github.com/docker/docker
5409233e Bump github.com/onsi/ginkgo/v2 from 2.17.2 to 2.17.3
3f6ce817 Move project under `sigs.k8s.io` namespace
5c9de8f7 Bump golang.org/x/net from 0.24.0 to 0.25.0
ef2f92a0 Bump golang.org/x/term from 0.19.0 to 0.20.0
756d4a82 Bump golang.org/x/sys from 0.19.0 to 0.20.0
4a0ef9a0 Bump golang.org/x/text from 0.14.0 to 0.15.0
9b0d496e Fix latest version in README.md
f152cc06 Bump github.com/onsi/gomega from 1.33.0 to 1.33.1
57ba23dd Bump github.com/docker/docker
ee2e56ed Enable and fix `perfsprint` linter
d14448a6 Bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.2
556eb46e Bump github.com/urfave/cli/v2 from 2.27.1 to 2.27.2
6362c63c LinuxContainerSecurityContext field apparmor_profile has been deprecated in favor of the newer structured apparmor field.
79b255b6 Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
84c0104b Bump go.opentelemetry.io/otel/sdk from 1.25.0 to 1.26.0
1d447cf4 Bump github.com/docker/docker
b243d7e3 Bump github.com/onsi/gomega from 1.32.0 to 1.33.0
1ead2d65 Bump github.com/docker/docker
a2247b1b Added changes for fixing a vulnerability - CVE-2023-47108
d87857f9 Update `release-notes` to v0.16.8
ce92f0d3 Vendor Kubernetes v1.30.0
543d65fa Bump github.com/docker/docker
ac2b2f6a Add criu binary to CRI-O tests
8ab45a03 Bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc
03d73acb Bump go.opentelemetry.io/otel/sdk from 1.24.0 to 1.25.0
3e39574b Bump golang.org/x/net from 0.23.0 to 0.24.0
e49c1cff Bump golang.org/x/term from 0.18.0 to 0.19.0
8370833d Bump golang.org/x/sys from 0.18.0 to 0.19.0
9985ba3a Bump golang.org/x/net from 0.22.0 to 0.23.0
89a95677 Bump github.com/distribution/reference from 0.5.0 to 0.6.0
175bbd58 Add `--transport` option to port-forward
14291ae9 Bump github.com/onsi/ginkgo/v2 from 2.17.0 to 2.17.1
85bcb15c Support websocket transport for exec and attach
3ee504ac Bump github.com/docker/docker
0e0044e1 Bump github.com/docker/docker
316e0e9c Bump github.com/onsi/gomega from 1.31.1 to 1.32.0
bf53cf5a Bump github.com/onsi/ginkgo/v2 from 2.16.0 to 2.17.0
8d7da814 Bump github.com/docker/docker
6d8d5847 Bump github.com/golang/protobuf from 1.5.3 to 1.5.4
97f12268 Bump golang.org/x/net from 0.21.0 to 0.22.0
fe3c6d64 Bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.16.0
80254e6d Bump golang.org/x/term from 0.17.0 to 0.18.0
94ca2fc9 KEP-3857: Recursive Read-only (RRO) mounts
07b21d85 Do not auto find runtime handler for user namespaces tests
4d1e3040 Add user namespaces tests
70ccffb9 Vendor Kubernetes v1.30.0-alpha.3
949545e1 Readd the logPath to the list
5afb4c73 Matching kubelet's containerLogManager.rotateLog() glob pattern
09b9303e Applying comment
64e373b2 Changing option to keep-logs and inverting default
67679ee3 1197: adding rm --dl (--deletelog) option
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping cri-o to version v1.30.0-230-g04500243e, which comprises the following commits:
6d6149a0b build(deps): bump the actions group with 2 updates
922718c3f Fix typo
199f018fc build(deps): bump crate-ci/typos in the actions group
2389743df build(deps): bump k8s.io/kubelet from 0.31.0-alpha.2 to 0.31.0-alpha.3
58a9d7ed8 Enable `gci`, `godot`, `nolintlint` and `protogetter` linters
e2f93c800 Add `kubernetes` group in dependabot
c9844d98d Allow setting `CRICTL_BINARY` externally
6d00aaacc build(deps): bump k8s.io/client-go from 0.31.0-alpha.2 to 0.31.0-alpha.3
3789c2181 build(deps): bump the gomod group with 7 updates
49890645a Sort `crio` subcommands by name
a7f937588 Fix version output in help
4148aca47 test: ensure correct parsing of supplemental groups policy in JSON
ecf2c1770 build(deps): bump the gomod group across 1 directory with 3 updates
7d460145f changed the scorecard badge link to the standard format
fd967972a Update nixpkgs
506badaa2 Reload config should remove pinned images when an empty list is provided
2f16f8bae Update go dependencies
11562fd1c Add space to the error message
f8b860970 test: add coverage for fine-grained supplemental groups
c931b90a3 server/*: add fine-grained SupplementalGroups control for enhanced security
52f3004c5 Mark v1.27 as EOL
efd4385b4 server/*: Fix bug to add gid in /etc/group
ffd15afda build(deps): bump crate-ci/typos in the actions group
6cb3925d9 OWNERS: adding littlejawa to the list of reviewers
486d768dc Update nixpkgs
1705f891c Update nix to v2.22.1
1494f809a Update shfmt to v3.8.0
7ad9c74e4 Update zeitgeist to v0.5.3
9cd0a9ed0 Update cni-plugins to v1.5.1
d27a9a8e3 Update shellcheck to v0.10.0
ccc030003 build(deps): bump actions/upload-artifact from 3.pre.node20 to 4.3.3
07ac2d0a7 build(deps): bump ossf/scorecard-action in the actions group
02574a396 build(deps): bump peter-evans/create-pull-request in the actions group
6d2ff549e build(deps): bump github.com/go-chi/chi/v5 in the gomod group
293359157 Fix container volume restore
cf1875acc Added the scorecard github action and its badge
f62cf94cd build(deps): bump the gomod group across 1 directory with 3 updates
eccab8ac5 Restore container logs from checkpoint
20eba5edf server: remove container after failed start
8efa17c6a high perf hooks: short circut when writing cpuset values
80fcdafa9 build(deps): bump the gomod group across 1 directory with 14 updates
6af15ae30 Skip `[sig-network] KubeProxy should update metric…` test
d85efd773 build(deps): bump the actions group with 2 updates
e543c4d8e release-notes: Skip first commit
935579087 build(deps): bump crate-ci/typos in the actions group
8a08f2233 Add `conntrack-tools` to CI system packages
25e2e3566 build(deps): bump crate-ci/typos in the actions group
a12fa31f2 .packit.yaml: Fix `%global commit0 <sha>` generation
4572f79b5 build(deps): bump crate-ci/typos in the actions group across 1 directory
3da7b0699 Update scripts/automated-patch-releases.md
c84c357d5 Allow pull timeout set by RPC context
0a673b9ac Make unit tests work rootless
00ecf9532 Update cni-plugins to v1.5.0
4d6b85942 build(deps): bump crate-ci/typos in the actions group
b9487a0b0 Fix container stats label filter
ef7880da4 Don't fail CI on GitHub pages push
07ffbd248 Rebase to correct branch on patch release creation
594295d94 Update nixpkgs
7e778525a Update scripts/automated-patch-releases.md
af5358508 Update scripts/automated-patch-releases.md
e316beb95 Update scripts/automated-patch-releases.md
ab6739e2d Update scripts/automated-patch-releases.md
b48aa8ec9 Update scripts/automated-patch-releases.md
1ed84cd13 golangci-lint: bump cyclomatic complexity again
3e862ecbe server: warn about container /etc not being a regular directory
37c76ad52 server: use SecureJoin when setting container /etc directory
1c457dfe1 add mermaid flow diagram for patch releases
bcea85b46 build(deps): bump the gomod group across 1 directory with 10 updates
af597f05f Readd GOARCH in `Makefile`
c491001e9 Switch to `containers/common/pkg/crutils`
ef3d4eea6 Update conmon to v2.1.12
a9d80aa26 Update nixpkgs
dde54fcad build(deps): bump the actions group with 2 updates
148cacab0 fix memory leakage
7fec7bf61 Keep the monitor exits from stopping when the watcher gets error
1e12bed7d Add small tutorial how to run CRI-O in KIND
82af00dd2 delete deprecated registries config
2da2e6830 Fix tag reconciler permissions
63f443b1f build(deps): bump cachix/install-nix-action in the actions group
a5b126c0a Run workflow after tag push
5a306d4c5 Allow workflow dispatch for `integration`, `test` and `verify` actions
0a76ebe5d Create tag on reconciler
8d66907f5 Fix lint
0df965310 server: use max function instead of manually calculating max
ca3c711a3 build(deps): bump the actions group with 2 updates
0540a8e90 build(deps): bump the gomod group across 1 directory with 11 updates
b1b3c92ae Update a typo in the code comment
55cc11975 test: reenable crun-wasm test
64b991b1f server: support ping_group_range if in a userns
474a2ce87 contrib/test/ci: cleanup archived package for Fedora and ansible code
d1db27fb2 Add parser tag for DisallowedAnnotations
8b1ce9235 Update scripts/release/release.go
3914eeb59 fix rebase branch error on patch release
8ac0907f2 Enable `revive` linter
e7e37c567 build(deps): bump ossf/scorecard-action in the actions group
cbe71afae Show runtime configuration
f03faf99a Kill exec PIDs after main container exited
8b867c6ed build(deps): bump the gomod group across 1 directory with 4 updates
137f8a5a9 build(deps): bump golangci/golangci-lint-action in the actions group
794ce67db Remove surplus newline from the log message
0a9110393 pinns: write sysctls in correct process when userns
ee49fad01 Check for nil values when importing container definition
e07608b4e Fix mocks
8f4b32a53 build(deps): bump the gomod group across 1 directory with 25 updates
64c510043 Set an integration test timeout
62fede365 build(deps): bump the actions group with 2 updates
e01608257 Enhance tag reconciler logging
6657190b7 build(deps): bump github.com/containers/podman/v5 from 5.0.0 to 5.0.1
5327c246b build(deps): bump github.com/docker/docker
52f185309 Fix tag-reconciler job by using `GITHUB_TOKEN`
ead3cca6e Dependency update for podman 5
5f54ca9c5 build(deps): bump golangci/golangci-lint-action in the actions group
e783e930e Update internal/version/version.go
481baea60 Update golangci-lint to v1.58.0 and fix lints
8132c7d15 Remove archived `containerd-cri` repo
aefd7ac37 Use `codecov/codecov-action` to fix coverage report
907685a82 add tag-reconciler for patch releases
c3bfcd3b4 wait for reload completion for stable e2e
7371d2170 dashboard: switch to non-deprecated metrics
f0cd27e15 Replace go env GOARCH to ARCH
dea6c628e Drop GOPROXY/GOSUMDB from Makefile and fix unary operator error while building crio
1585cb921 version: bump to 1.31
1beecbe27 Pin crate-ci/typos GitHub action
980db0610 test:add coverage for automatic reloading of mirror registries
01450abb7 server: implement automatic reloading of mirror registries configuration
882ce4afc Fix kubelet image GC by using new `image_id` CRI field
d91496190 Fix AppArmour profile Apply() function to correctly handle an "Unconfined" mode.
97384f9a9 test/cri-metrics.bats: skip test for kata VMs
1955ce5d7 internal/criocli: Update criocli with new added metrics flags
820522dcf - internal/stats: Pass the container_server context down to statsserver
33d2f4785 - Better naming for ContainerStats struct
2ba4de466 New slice for each metric collection
b4ac9a966 Add metrics integration tests
d7fe9a3bb - Add missing fields and functions to unsupported stats
274a509eb - Implement ListPodSandboxMetrics
e851caffb Replace libcontainer.Stats with cgmgr.CgroupStats
352afeddd Add file_mapped and failcnt fields to memory stats
40ea8516a Add metrics decscriptors list
38e296b15 - Add cri-metrics implementations
4d93b7ec4 build(deps): bump the actions group across 1 directory with 3 updates
e66cd346d drop loop variable, which is no longer needed in go 1.22
8b966a886 Re-add `GITHUB_TOKEN` for GitHub actions jobs
4b4e66c63 Remove `GH_TOKEN` usage from repo
e0c06c4b5 golangcilint: potentially fix lint from broken linter
8d3a11eef hack/build-rpms.sh: Update for new builder image
c2d743dc6 Add debug log line to track newly started exec PIDs
614eb160e Add debug log to expose details of an exec PID being killed
6470daf8c Vendor Kubernetes v1.30.0
8c78850c1 Install `cri-tools` from `master`
b7e687853 fix typo and lints of CVE-2024-3154 fix
976ab1f4c annotations: add OCI runtime specific annotations to the AllowedAnnotations
b40648e43 Pin golangci-lint action
b20fce0b8 build(deps): bump golangci/golangci-lint-action in the actions group
9af6c1717 Fix verify.yml for GitHub actions
2e81eedc8 contrib/test: skip fips test for kata containers
81a98deb9 test: add coverage for disabling crypto.fips_enabled when FIPS_DISABLE is set
9977160f7 server: allow containers within a cluster to opt out of FIPS mode when necessary
316c23534 Pin GitHub actions commits
0c284bea2 replace patch-release.go with release.go
e34ea18ae Updates pinned images list on config reload
f326ace51 oci: keep track of exec PIDs and stop them on container stop
04be0b7cc build(deps): bump crate-ci/typos in the actions group
2edec2888 Build s390x binaries using musl libc
f98b96534 stop using BytesSize when merging the config
49b4a5fa4 bump ocicrypt to v1.1.10
13efa1ae1 Run patch release and nixpkgs jobs only on cri-o/cri-o
46d815d17 Distinguish conmon version parse from execution error
9e8848281 Remove duplicate comment in crio.conf
87cea5626 Rename `cron` workflow to `release-branch-forward`
d5b4ae531 drop hooks from kata integration tests
cd8333627 Use release-note block instead of label
b01cb1886 Update cri-tools to v1.30.0
3099a8fa7 patch-release: configure the default git user and fix file update
ddbd81955 Use default `cri-o` org for patch releases
da1999a6a Add missing kernel version check to the RRO mounts integration tests
dfc851483 Update `release-notes` to v0.16.8
851c13a05 build(deps): bump crate-ci/typos in the actions group
e3873837d sasha comments
cf44dd802 drop version
43f7ae0d1 Update golangci-lint to v1.57.2 and config
99aad640c Fix patch release workflow restriction
09a529bdf config,factory: use updated CDI interface.
fd9aa7625 go.{mod,sum}: update CDI dependency past 0.7.1.
283ac9cb1 add imagefs integration tests
8cffb6590 Move test volume creation to a local helper function
36d5b2359 Lower verbosity of `Allowed annotations are specified for workload` message
c69b09563 Enable and fix errorlint
7a098653b feat: add release versions for manual workflow run
5c4fb9a0e Use debug log level for CRI-O prow tests
25d397f98 Remove device mapper support
55857d8dd hack/govulncheck.sh: nit
0302c4150 Move to use new SELinux test helpers over the opencoded checks
9331b8628 Add test helpers to check for current SELinux status and mode
1234e86f2 Add test helpers to check for kernel and crictl versions
39be41ef9 Add support for Recursive Read-only (RRO) mounts
e1b983ac7 Makefile: rm $(PROJECT) use from paths
0e20dcddb Makefile: rm i386 hack
9e2727a9b build(deps): bump crate-ci/typos in the actions group
c848ba727 Print runtime version info on CRI-O startup
9bac613f5 Implement configurable container minimum memory limit per OCI runtime.
f7c3a7fff server: do not chmod bind mounts
bb8d956d5 server: chown secrets to root in the container
57a29faf1 add powertools repo for gpgme-devel
083656490 contrib/test/ci: use force_clone for crun to avoid outdated codebase
4fe7bc348 drop rootless dependency from podman
9231bcfa8 Add docs about the prow CI images
27982a07a update runtime spec to 1.2
0484ce3dd Fix Actuated badge in README.md
e480e5b28 Cherry-pick changes from containers/image/pull#2363
4ebe38670 Remove pinned conmon-rs version
74145d0b3 contrib/test/ci: use the main branch for building crun
46feeca20 build(deps): bump crate-ci/typos in the actions group
9d0acb9c1 Disable cron workflow for forks
0490e18b3 skip crun-wasm test in image bats
e3e629a5f build(deps): bump crate-ci/typos in the actions group
6718d4708 *: address issues with the latest typos update
31a0e9c12 build(deps): bump the actions group with 2 updates
a3496374e contrib/test/ci: fix ansible code for building runc
618a4cf1f Do not abort startup if CRIU binary not found
03839cb0a Don't fail-fast integration test matrix
ce21e6ae5 test: fix potential flake in timezone tests.
b5319fd54 Allow runc to build with go 1.21 and revert wasmedge changes Signed-off-by: Kevin Hannon <kehannon@redhat.com>
12a281f4c create go1.21.9 directory
33db97543 setup golang to 1.22
0f887e69e build golang 1.29 in runc
4e1bb0ba9 ci at 1.22
f407aa06b use golang 1.21 until runc works with 1.22
aedcfd1ac Run seccomp notifier tests on arm
dc44631dc add x to set for traceability
0a4272d03 test: remove references to crioctl
3c6b0e089 use wasmedge and drop crun-wasm
a63bc4d7a WIP: patch release workflow and script
ecd7c6ab5 Change `progressGoRoutine` to `consumeImagePullProgress`
b3b0089f0 fix: validation check should handle zero values
9d1cff8f3 oci: AttachContainer: always read attach socket
6ec4e5f38 refactor: moved cpulimit to crio config
3c1fc985b test: added test to cover parsing annotations
34223ab23 upkeep: small wording changes
2c666e7cc feat: add support for cpu limits for workloads
1a377ccd8 Add dynamic pull timeout
7084db255 packit: Update config and sync to Fedora
d6d21a12d In some cases the seccomp_notifier does not have time to stop the workload, in that cases exit code of container is 0.
39b3003e2 Update install.md
9b0e2b9b1 Update bats to v1.11.0
bea30a002 add a more clear pointer to what is supported for packaging
ba25bb584 Migrate off deprecated AppArmorProfile CRI API
b8e947a08 Add exponential backoff to the container stop loop
8460c2c1b add selinux package to crio Signed-off-by: Kevin Hannon <kehannon@redhat.com>
5bd10e270 Update OCI CNI to v0.4.2
d6ebb48a1 Use CRIU version check go-criu; not from Podman
ab7961676 drop specgen from crio
a6abdb326 Remove Podman `lookup` dependency
bcd879fe8 Change duplicated string values into constants
511572c5a Enable and fix `ginkgolinter` reports
7de6d9882 Remove Podman `annotations` package dependency
65ffd1737 Use upcoming version as release notes `endRev`
5677831ca Update cni-plugins to v1.4.1
8c41a868f Deflake `pod annotations capability for chained cni plugins` test
169c5f0c6 Use contextual logs in `server/container_restore.go`
3b29ce532 Remove Podman `errorhandling` package dependency
7824651ac Update google.golang.org/protobuf package to version v1.33.0
6649d97af Update the CNI plugins instructions
9b9318132 Update golangci-lint to v1.56.2 and fix lints
3372a225d build(deps): bump the actions group with 1 update
3f046d1df build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3
7afcf3f46 build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
863e51424 Add OCI artifact layer cache
c434ea8ad Change CRIU support from default off to default on
a9ba094a1 deps: update otelttrpc to @latest and re-vendor.
365eaff17 Update zeitgeist to v0.4.4
5b246ba0a build(deps): bump the actions group with 1 update
624564010 Sync changes of PR#7719 & other defaults
791ce8045 Change process metrics collector log levels
03c4bcacc Remove `--seccomp-use-default-when-empty` option
ae00cdf9b fix a minor typo in the comment of pullImageImplementation
115e11d09 Disable Recursive Read-only (RRO) mounts feature
0b7cd2f34 Do not overwrite stored latency/governor on container restart
097fe3bf0 Add s390x architecture support
a1b8cb9c9 Add OCI artifact pull unit tests
ed7963f03 Keep versions file simple to source only
338ea986f In-memory OCI artifact pull
b302bc1a0 server: report the runtime handlers features
66ac43688 config: make error message clearer
0fa57582a vendor: bump kubernetes dependencies
08c393d17 Update release-notes to v0.16.5
b826a7f8c Remove `crun` from `dependencies.yaml`
3193916ac build(deps): bump github.com/opencontainers/image-spec
c692bec92 Fix markdown lint
6bd4f6855 Allow plain annotation `seccomp-profile.kubernetes.cri-o.io` for images
7b610e32c build(deps): bump the actions group with 6 updates
474fc7780 test: always override NRI socket location.
d3808e4ca Add all update types to dependabot groups
9241d7492 build(deps): bump the gomod group with 8 updates
8cc853085 build(deps): bump the actions group with 1 update
4c682eb0d Group all dependabot updates
bf5cc00bc config, docs, completions: enable NRI by default.
031ba9b11 Run checkpoint restore tests on arm
f1408edbe Update nixpkgs
e4a4024e5 Rename seccomp profile annotation to `seccomp-profile.kubernetes.cri-o.io`
fe8ec1940 Run integration tests with JOBS=2
14ef21bd2 Reduce amount of parallel jobs in integration tests
6f28ea99a Remove deprecated metrics
edebdd00f Revert "Fix ImageRef field for containers to default to an image ID"
91f888a3d Filter image annotations before used
ea8f1054e Don't fail-fast matrix
d43d8fd92 Don't use CRLF when generating CRI-O documentation
abf38859c CRI: An empty DNSConfig != unspecified
567eed921 Switch to go 1.22 and update deps
162594e9b Update openSUSE's OBS URL in install-distro.md file
a38b9b956 .golangci: Bump gocyclo to enforce code complexity checks
aff565f82 test: add test for timezone support
66c2aeb83 *: add support for specifying timezone for pod/container
05f4cbb19 release-notes: fix startTag calculation
b20d06cc7 Add support for OCI artifact seccomp profiles
ff60ac14a When crio restarts, restore the infraContainer
d955623e6 go.{mod,sum}: update NRI dependency, re-vendor.
4619ca724 server,nri: enable otel tracing over ttrpc.
9613e6075 Fix ctr log max test on arm64
e84b65477 oci: handle early exited container faster in stop loop
d8d3670be Update runc to 1.1.12
aedf47129 build(deps): bump github.com/opencontainers/runc from 1.1.10 to 1.1.12
511877186 report memory Swap-only values
601d85941 clean up the Populate* functions with their helpers
3bd73f662 libcontainer-based stats server for linux
5a2bbb90f Run integration tests on arm64
6fb83141a higeperfhooks: mixedcpus: set only exclusive cpus in child cgroup
63ff1eee8 Add integration tests
ea75b9bef Move metrics endpoint listener to use 127.0.0.1 as default
fbe8bbbee highperfhooks: add precreate hook for injecting envs
5e83e9697 Update nixpkgs
7e94aa19a server: implement stopPodSandbox for FreeBSD
f70aa434c server: implement runPodSandbox for FreeBSD
c13044276 internal/sandbox/infra: make this build on FreeBSD
bdaa98b66 internal/node/config: implement ValidateConfig for FreeBSD
2eb3db455 internal/config/nsmgr: implement nsmgr for FreeBSD
479e316db internal/oci: Implement getPidStartTime for FreeBSD
19e407c2e server: make configureMaxThreads platform-specific...
887c4421d internal/lib/sandbox: make NeedsInfra plaform-specific
5cb9fa77a internal/factory/containers: allow non-linux containers
5d3d7260d pkg/config: only validate the pinns path on Linux
c9975a3c4 build(deps): bump ocicni to latest master
3333f2fa7 build(deps): bump the opentelemetry group with 2 updates
1b9754486 fix missing line ending on crio.8.md
3cbaa5294 fix grep for whitespace
8dea35388 add metrics_host to config
8cffd22e3 fix typo for time out
e510f3854 metrics: remove deleted containers from OOM count metrics
56e46815d build(deps): bump github.com/go-git/go-git/v5 from 5.10.0 to 5.11.0
0c67d8b5a version: bump to 1.30.0
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping containerd to version v2.0.0-rc.3-82-g1b24e53d0, which comprises the following commits:
63b55e6df build(deps): bump the golang-x group with 2 updates
51f34ff49 CI: update Fedora to 40
56495b404 update go version to 1.22.5
23170e20d Move fsverity package to internal
f6e731c80 cri: get pid count from container metrics
96352ad22 update runhcs binary to v0.12.4
10aec359a cri: ensure NRI API never has nil CRI
a723c0c6e pkg/reference: remove deprecated SplitObject
ef98c7198 Implement fsverity functionality
fec33aa73 pkg/reference: deprecate SplitObject
a5fce38f3 pkg/reference: Spec.Digest(): inline SplitObject code
42145950b pkg/reference: SplitObject: add proper GoDoc
74a6156ac pkg/reference: SplitObject: zero allocations
799bca97f pkg/reference: Spec.String(): use string-concatenation instead of sprintf
c097022a5 build(deps): bump github.com/containernetworking/cni from 1.2.1 to 1.2.2
14b053fb4 build(deps): bump github.com/containerd/go-cni from 1.1.9 to 1.1.10
8f9607eed Use the transactor interface in metadata
2cf8237a1 build(deps): bump k8s.io/klog/v2 in the k8s group
a2f9101aa build(deps): bump github.com/containernetworking/plugins
2304cd9d5 build(deps): bump google.golang.org/protobuf from 1.34.1 to 1.34.2
469f95026 build(deps): bump github.com/containernetworking/cni from 1.2.0 to 1.2.1
243b803a1 Add pprof to runc-shim
b323e9eec vendor: github.com/containerd/ttrpc v1.2.5
cb38b1e2b api: update github.com/containerd/ttrpc v1.2.5
2f1bf791b Cleanup metadata godoc
907796811 update release runners to ubuntu 24.04
dd0542f7c cmd: don't alias context package, and use cliContext for cli.Context
c25183ff1 use older version of OVMF package
1bfdccee0 use vagrant from jammy in noble
769e0c8c1 add debian sources for ubuntu-24
624aa49d4 increase xfs base image size to 300Mb
027414ee5 enable ubuntu 24 runners
9edde8106 build(deps): bump github.com/klauspost/compress from 1.17.8 to 1.17.9
becb2b2d3 build(deps): bump github.com/checkpoint-restore/checkpointctl
f6f655ccf build(deps): bump k8s.io/klog/v2 in the k8s group
531da9960 Reduce scope of permissions in stale workflow
15887d7ef sandbox: add update api for controller
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping conmon to version v2.1.3-147-ga500cbd, which comprises the following commits:
a500cbd logging: remove unuseful fsync
1578849 fix(deps): update module golang.org/x/sys to v0.20.0
c7a88f8 Remove CI VM OS names
be3e546 chore(deps): update dependency containers/automation_images to v20240513
e889663 Bump version to 2.1.12
ff8794c Make 'docs' target not depend on 'install.tools' if GOMD2MAN is set
10f7826 Packit: enable downstream sync to CentOS Stream 10
e21e7c8 Build s390x binaries using musl libc
9ce7b1a Add support for s390x
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
| |
Bumping buildah to version v1.36.0-2-g0d08edeed, which comprises the following commits:
34518c5fa Packit: enable c10s downstream sync
6ceba8838 Bump to v1.36.0
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping aardvark-dns to version v1.11.0-10-g5ad6420, which comprises the following commits:
2873fe5 Be sure to have at least Epoch 2 to preserve upgrade path in c10s.
db1afc8 fix(deps): update rust crate log to 0.4.22
43ea35b [CI:BUILD] rpm: Update Rust macro usage
03d1c0a fix(deps): update rust crate tokio to 1.38.0
cbdc655 Bump to 1.12.0-dev
666d7b1 Release v1.11.0
802a5de v1.11.0 release notes
882c7b0 run cargo update
ed6c573 chore(deps): update dependency containers/automation_images to v20240529
011f352 Internal networks cannot make external DNS requests
9db7996 fix(deps): update rust crate anyhow to 1.0.86
e30a92e fix(deps): update rust crate nix to 0.29.0
dc946ea [skip-ci] RPM: use default __cargo macro across all envs
9ebb8f2 chore(deps): update dependency containers/automation_images to v20240513
db186b4 fix(deps): update rust crate anyhow to 1.0.83
d591c8a [skip-ci] Packit: separate `packages` key for rhel jobs
ae9ff92 fix(deps): update rust crate libc to 0.2.154
abba8d0 [skip-ci] Packit: enable rhel10, c10s tests and c10s downstream sync
ed98d62 [skip-ci] Packit: Remove EL8 jobs
fb414d9 fix(deps): update rust crate syslog to ^6.1.1
591a636 fix reverse ipv6 lookup test flake
40f76b6 fix(deps): update hickory-dns monorepo to 0.24.1
4646a22 chore(deps): update rust crate chrono to 0.4.38
1f96f76 Don't tear down all server threads on SIGHUP
f244f33 fix(deps): update rust crate anyhow to 1.0.82
dfa66f6 fix(deps): update rust crate tokio to 1.37.0
f8a2e2c Update to nix-0.28.0
12a8e25 update chrono package
25dee15 chore(deps): update dependency containers/automation_images to v20240320
f3f615e fix(deps): update rust crate anyhow to 1.0.81
99d3d62 tests: check queried domain name in reverse lookup tests
a256241 fix: set name for answers in reverse lookups
13055be chore: fix typo in runner script
593e007 chore: fix log message when doing reverse lookup
33817d2 fix(deps): update rust crate log to 0.4.21
7656598 fix(deps): update rust crate anyhow to 1.0.80
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping podman-compose to version v1.2.0-27-gdaab93b, which comprises the following commits:
9fe3038 tests/integration: Automate 'build_fail' manual test
0f8348b tests/integration: Automate 'build' manual test
2091ade Add newsfragment
ca58d7c Pass build description labels to podman build
5bf4c0f Add a way to remove dashes in default network names
67c5352 Extract default_network_name_for_project()
5040a37 tests: Add integration tests for up -d with single container at a time
29195be github: Install requirements unconditionally
9a4af0c Discover tests instead of passing a list of files to unittest
24038da Check whether pod exists before trying to create one
2056e70 tests/integration: Reduce base path calculation duplication
4ec57c1 unittests: Added unit tests for podman-compose secrets
fa3e0a7 Alt Dockerfile names fix
18472b5 Move all tests to single directory "tests"
d38b26b Release 1.2.0
37e2cb2 Add release notes for v1.2.0
6ef759c Use newsfragments pattern for the release notes
67ce900 Commit .env in tests/env-file-tests, bypassing root .gitignore
4e9f767 Load .env from Compose file's directory and cwd
405001b Fix comment
6b1aeff Add unittests for type=env secret
f06975b Update tests for type=env secret
546cad5 Add type=env secret support
935029d Fix environment variable precedents
360b85b Allow providing custom in_pod argument as a global compose file variable
82740cc Add ability to input docker-compose.yaml via stdin
0f645e4 Add ability to input docker-compose.yaml via stdin
3b15170 Changed the global parser help message for file input, to reflect changes for reading from stdin
3359380 Add ability to input docker-compose.yaml via stdin
e799a0b Fix x-podman.gidmap typo
65d1fde github: Add verbose option to integration tests
2e8ed2f pytests: Add test for object required but path non existent
040b73a pytests: Add tests for several multi-line environment files
f3e9a96 Fixes #908: Add support for multi-line environment files
2c5d00d github/workflows: Add codespellignore file to address false positives
b513f50 test: add missing unit tests for selinux in verbose mount
cac836b Support additional_contexts
09034a0 test: Split test_gpu test
0065082 refine the test_include for multi subcomposes
4f73f2b fix: add include test file, edit the assertion
1d64f2c Update podman_compose.py
4e22fae Fix logging build error message
79865c2 Add support for enabling GPU access
c23a8b2 Do not pass --ipam-driver option when value set to default
b202a09 Add support for `env_file` as objects
5c4aa40 add await for create_pods call
cef1785 Add instructions on install from Homebrew
b761050 tests: Merge multiple compose merging tests into single test class
e1d0ea7 tests: Move normalize_service tests to a separate test class
1430578 tests: Simplify command and entrypoint normalization tests
d31a8b1 Don't create pods/container when registering systemd unit
5df4e78 README: explain that netavark is an alternative to the dnsname plugin
70a0e2d Fix handling of --in-pod argument
eea8bac Add images command
a6c4263 Add tests for x-podman.uidmaps and x-podman.gidmaps
9599cc0 Migrate x-podman dictionary to x-podman.* fields in container root
2b4ecee Add docs for podman specific compose file extensions
77f2e8e Support podman's external rootfs management
72a94d5 implement --publish in docker-compose run
2681566 Release 1.1.0
c97f003 Add release notes for v1.1.0
131010b Use x- prefix for x-podman.mac_address
cdcedeb Use "service.build.ulimits" when present instead of "service.ulimits"
3e1f7d5 add tests for selinux with verbose bind mount
d7cf096 add support for selinux in verbose mount
1f35c00 Add unit test for depends_on normalization as a dict
6c09ce7 FIX issue https://github.com/containers/podman-compose/issues/704 - Windows fix sock not working.
953534a Support and document all podman-specific network_modes
6feff24 slirp4netns can be used without options
9fd4cf4 Add unit tests for network_mode
65849c9 add comment about per-network aliases
9baea70 use preferred format of podman command line options
bdff78d Ignore files generated by tests
45ca1f9 Support podman-specific per-network mac_address specifiation
91fbea3 Add unit tests for get_net_args()
2743d69 Fix support for multiple networks with explicitly specified ipv4/ipv6 addresses
dd34a90 Add testcase for failing network config
f0bae1e Don't resolve links to compose file
81d81fb Formats CONTRIBUTING.md
b263dc1 Fixes typos and enhances CONTRIBUTING.md
078ee7b Updates Signed-off-by link in CONTRIBUTING.md
a6e3ae7 Fixes invalid name of test package in setup.py
1e9cf1d Pass file secrets to "podman build" via parameter "--secret"
bbfff78 Bump actions/checkout from 3 to 4
c351f99 Add coverage to Github Action summary
829cde0 Rename test classes to match filenames
da63048 Don't spellcheck requirementfiles
5e55df8 fix python < 3.9 compatibility
fde7995 Fix python < 3.11 compatibility
c592596 Split out the different tests into separate CI steps
688ee9a Fix pylint issues
c3a152e Enable pylint, because it catches stuff that ruff misses
bd60bc9 Run tests on all supported python versions
9d8b0b8 add editorconfig
f2f5483 Extract compose_run args parsing and add unit tests
c4fa8f7 Split exec args parsing into new function and add unit tests for it
4c270b9 Allow run/exec -e with equals sign in value
c5f7f55 Remove implemented commands from Missing Commands
c98cbaa Fix #782: add support for http_proxy
91d316f Added handling `pid` option
969edb8 Add support for enable_ipv6
bba1f33 Factor out arg creation for "network create". Add unit tests.
a9c335b Handle sysctls maps
e67c52f test_container_to_args: handle async tests
2cdfb3e Fix stop/restart args stacking
8ec5e03 github: Add PR template
da520e2 switch to % string lazy formatting * fix black and pylint issues
1e9e2ee Output: use logging, remove garbage output by default
0f693ee Replaces asyncio timeout with bespoke timeout function
cf90ab2 Run codespell throughout fixing typos automagically
d2fa801 ignore poped (not sure why not to make it popped)
2477748 Add pre-commit definition for codespell
6e65a73 Add rudimentary codespell config
f95ca7a Add github action to codespell devel on push and PRs
0c0e77c Bump actions/checkout from 3 to 4
bb2338e Fix unsorted imports
15ae214 Add support for runtime service configuration key
ed39523 github: Enable ruff check
4e43606 Shorten too long lines
91052cb Fix ambiguous variable name
a6e0092 Remove unused variable
59a1fa3 Use 'not in' for membership test
36139fb Remove unused f-string
b0da6f8 Fix import formatting
94df95a README: Fix link to tests badge
3a5a283 README: Remove link to pylint test badge
7c81044 github: Run actions on python:3.11-bookworm
1a24cde tests: Properly tear down containers in extends_w_file_subdir test
a90da4d github: Fix test names
27c8ceb tests: Add verbose debug option via env variable
0614687 tests: Print decoded subprocess output in case of failure
6af7a2d tests: Optimize speed by using dumb-init to handle SIGTERM signal
f4dc5f3 tests: Print output in case subprocess returns unexpected code
b34f699 Add SPDX license identifiers to each source file
2c6c1be github: Run tests on all branches
91737ee Bump actions/setup-python from 4 to 5
b65d4a3 github: Fix ruff job setup
23fe9e7 Migrate tests to unittest
7539257 requirements: Install . for tests
a967cab Format codebase with ruff
a5c354d Replace flake8, black, pylint with ruff
e4e5b7d Make test requirements reproducible
e0edd5d Fix package installation
831caa6 remove recursion
9ac3339 Fix issue #831
c5be5ba Fixup tests
c6a1c4c Add tests to make sure all async paths are covered
3c9628b Fix a couple issues and update docs
38b13a3 Use asyncio for subprocess calls
bce40c2 Change "an key-value" to "a key-value"
78f8cad Fix typos
7942a54 fix styling errors
cb9cf60 add stats command
06587c1 rm redundant tests
bc9168b add no-normalize flag
57c527c add edits from review
d1f5ac9 convert build context path to absolute during final normalisation
0164c1d Simplify the fix using `or`.
e5cdce4 default to an empty dict for the from service if the service is None
280f177 Add a test to extend using an empty service (placeholder)
f75d12a broken in py 3.7
5454c3a Add 'links' aliases to container aliases
901adf4 Use defined environment variables in the image build process
bf07e91 Implement `include` from `compose-spec`
c31b4e2 Fixes #723: merge short & long syntax of depends_on dependencies
79bfad1 move logic from rec_merge to normalize_service
d150946 allow empty list to be a command/entrypoint
9011e9f add tests, dry up code, use shlex.split instead of str.split
517aeba Allow config to merge strings and lists in command and entrypoint
85d5d5d move logic from rec_merge to normalize_service
1ffd24d Python version support: sync verified and advertised versions
8c66b1c add test case for when build is a complex dictionary
a0005db add code implementing build value merge
221cf14 add tests for build value merge
a61945b fix format
6b6330c add build subcommand and --build arg to compose_run
5d279c4 Build-fail test example
5a3bdbf Exit code managed at PodmanCompose.run()
1eb1664 Linting fixes
82182b7 Finish execution in compose_build only on command=build calls
3f46188 Update project-1.env
91bc6eb Keep chdir after loading env file
59a59c1 Fixes #636: env-file shall be resolved relative to the CWD
620f5d7 pre-commit black config: run in check only mode
6f902fa Fix linting issues
ccdf01e Revert "Use SELinux mount flag for secrets"
e6b1eab Revert "Use more lenient SELinux mount flag for secrets"
75de39c Use more lenient SELinux mount flag for secrets
8741925 Use SELinux mount flag for secrets
0b853f2 Ignore access mode when merging volumes short syntax
847f01a Add a docker-compose test file for uidmaps/gidmaps
e511e64 FIXES #228: Add support for uidmap and gidmap
a9723ec Added a way to start containers with multiple ips and nets
1cb608d allow project name to be fetched from dotenv
252f1d5 updating black formatting for podman-compose.py
13856d2 updating black formatting
8d8df0b Adding basic support for --profile argument
bc5f012 add option to start podman in existing network namespace
9a08f85 FIXES #586: preserve exit code for podman-compose build
8625d7a add ipam-driver support
016c97f Fixes #663 - Fixes linting/pylint errors
2df1167 Fixes #661 - Fixes linting/flake8 errors
5eff38e Fixes #659: fix permissions when installing OS packages for linting/black
7f5ce26 start version 1.0.7 and default with pod enabled by default
f6dbce3 version 1.0.6
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Update RDEPENDS to fix following errors when run virt-manager:
| File "/usr/share/virt-manager/virtManager/virtmanager.py", line 13, in <module>
| import gi
| ModuleNotFoundError: No module named 'gi'
| File "/usr/lib/python3.12/site-packages/gi/__init__.py", line 122, in require_version
| raise ValueError('Namespace %s not available' % namespace)
| ValueError: Namespace LibvirtGLib not available
| File "/usr/share/virt-manager/virtinst/xmlapi.py", line 7, in <module>
| import libxml2
| ModuleNotFoundError: No module named 'libxml2'
| File "/usr/share/virt-manager/virtinst/install/urlfetcher.py", line 16, in <module>
| import requests
| ModuleNotFoundError: No module named 'requests'
Signed-off-by: Kai Kang <kai.kang@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
The previous ptest result show as ✓ or ✗ , improve the result to
PASS or FAIL.
# ./run-ptest
[snip]
PASS: 6 basic container - dns itself with long network name
PASS: 7 two containers on the same network
PASS: 8 two containers on different networks
[snip]
Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Rather than waiting for release tarballs for the main libvirt
release, we can just use the git repository directory and
avoid patch backporting for CVEs, etc.
As part of this change, we adjust to git, refresh our
meson build patch, and add a new meson patch for the
tests.
We also split out LIBVIRT_VERSION, so that nested builds
can use it to locate tarballs.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
| |
* The previous ptest result show as ✓ or ✗ , improve the result to
PASS or FAIL.
* Skip some cases related to sit0 device(sit kernel module) and
firewalld.
* Add nftables to RDEPENDS for netavark-ptest as 250-bridge-nftables.bats
needs it.
Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Released lxc-test-shutdowntest and lxc-test-state-server due to
those back to normal since lxc upgraded to 6.0.0.
lxc-test-no-new-privs and lxc-test-checkpoint-restore are broken test,
already reported to upstream[1][2], move them to blacklist until
upstream fix them.
lxc-test-usernic always fails when use ptest-runner, but normal with
run-ptest by manual.
Ref:
[1] https://github.com/lxc/lxc/issues/4296
[2] https://github.com/lxc/lxc/issues/4435
Signed-off-by: Xiangyu Chen <xiangyu.chen@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Fixed a do_patch error use git shallow tarball (BB_GIT_SHALLOW = "1"):
$ bitbake yp -cpatch
ERROR: do_patch: Importing patch 'github.com.pkg.diff' with striplevel '1'
The github.com.pkg.diff is ud.clonedir of git://github.com/pkg/diff:
* When use regular git repo as source, oe.patch.patch_path() will NOT
handle it as a patch since the directory github.com.pkg.diff exists,
and nothing is wrong.
* When use git shallow tarball, the github.com.pkg.diff doesn't exist since
it is fetched as a tarball, then oe.patch.patch_path() will handle it
as a patch, then the error happens.
Signed-off-by: Robert Yang <liezhi.yang@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping moby to version v26.1.4-4-gf5334644ec, which comprises the following commits:
c1d4587d76 builder/mobyexporter: Add missing nil check
daba2462f5 docs: api: image inspect: remove Container and ContainerConfig
17315a20ee vendor: github.com/containerd/containerd v1.7.18
cbd94183ab update containerd binary to v1.7.18
3115daaa91 update to go1.21.11
12072173df Update containerd to v1.7.17
92f00d41ba vendor: github.com/Microsoft/go-winio v0.6.2
a046857fbf vendor: golang.org/x/tools v0.16.0
476d9314d0 vendor: golang.org/x/mod v0.17.0
4021fa775e update docker-py to 7.1.0
0fd5efe64a docs/api: add Scope, ConfigOnly, ConfigFrom, Peers (v1.41 - v1.45)
1017246d24 api: swagger: Network: add Peers
fbfa1bcc96 api: swagger: POST /networks/create: document Scope, ConfigOnly, ConfigFrom
e12db89eef api: swagger: Network: inline examples, and add ConfigOnly, ConfigFrom
5838467405 docs/api: POST /networks/create: inline examples per-field (v1.41 - v1.45)
1033f561af api: swagger: POST /networks/create: inline examples per-field
0fa6816991 api/types: NetworkCreate: add GoDoc
eaad6f503d don't depend on containerd platform.Parse to return a typed error
fda7b48363 Fix issue where node promotion could fail
dbec963cee integration/TestDiskUsage: Make 4096 also a 'empty' value
e35c6f5625 Dockerfile: update containerd binary to v1.7.17 (static binaries and CI only)
06e19ec444 Explicity write http headers on streaming endpoints
c21fe3efa3 Forward DNS requests into --internal networks
9326cda7bf Do not forward DNS requests to self.
76fcf9a8e0 apparmor: Allow confined runc to kill containers
10739af81a update to go1.21.10
2f5bbbe16b Option to avoid deleting the kernel_ll address from bridges.
40618081f1 Allow for a read-only "/proc/sys/net".
2c91196921 Update containerd to v1.7.16
c9689eccf5 vendor: update buildkit to v0.13.2
7d95fe8db5 c8d/list: Ignore unexpected image target
6667e96dad Include more details in errnotManifestOrIndex
ab570ab3d6 nil dereference fix on image history Created value
7532420f3b container/SetupWorkingDirectory: Don't mutate config
a4d5b6b4d0 builder/normalizeWorkdir: Always return cleaned path
6c68be24a2 Windows DNS resolver forwarding
745e2356ab Update tags.cncf.io/container-device-interface to v0.7.1
0d6a1a212b vendor: github.com/opencontainers/runtime-spec v1.2.0
f5209d23a8 daemon: add nolint-comments for deprecated kernel-memory options, hooks
f07644e17e Add netiputil.AddrPortFromNet()
d3c051318f daemon/cluster/executor: Add volume `Subpath`
5368c3a04f vendor: github.com/moby/swarmkit/v2 master (f3ffc0881d0e)
f51e18f58e Fix typo
57dd56726a Disable IPv6 for endpoints in '--ipv6=false' networks.
9954d7c6bd Run ipvlan tests even if 'modprobe ipvlan' fails
cd7240f6d9 Stop macvlan with no parent from using ext-dns
17b8631545 Enable DNS proxying for ipvlan-l3
5ae5969739 vendor: github.com/containerd/containerd v1.7.15
3485cfbb1e update containerd binary to v1.7.15
fb92caf2aa ci/validate-pr: Use `::error::` command to print errors
61269e718f github/ci: Check if backport is opened against the expected branch
d8b768149b Move dummy DNS server to integration/internal/network
329d403e20 update to go1.21.9
d66589496e vendor: golang.org/x/net v0.23.0
e1ca74361b vendor: golang.org/x/net v0.22.0, golang.org/x/crypto v0.21.0
cf933115b6 Minor fix for illumos support
9160b9fda6 save: Remove platform from config descriptor
0a48d26fbc Fix cases where we are wrapping a nil error
c4689034fd daemon: don't call NetworkMode.IsDefault()
4eed3dcdfe api: normalize the default NetworkMode
c187f95fe1 CONTRIBUTING.md: update Slack link
aff003139c ci: update workflow artifacts retention
1014f481de Restore the SetKey prestart hook.
fde80fe2e7 Restore the SetKey prestart hook.
14a8fac092 chore: fix mismatched function names in godoc
61e2199b78 AUTHORS,.mailmap: update with recent contributors
ea72f9f72c Dockerfile: update docker CLI to v26.0.0
22726fb63b api: document changed behavior of the `Aliases` field in v1.45
3312b82515 c8d/list: Add a test case for images sharing a top layer
ad8a5a5732 c8d/list: Fix diffIDs being outputted instead of chainIDs
0c2d83b5fb c8d/list: Handle unpacked layers when calculating shared size
f696e0d2a7 Dockerfile: avoid hardcoding arch combinations for delve
3d2a56e7cf docs/api: add documentation for API v1.45
731a64069f c8d/list: Generate image summary concurrently
dade279565 c8d/list: Add `Images` benchmark
e7c60a30e6 vendor: github.com/moby/buildkit v0.13.1
2e4ebf032a c8d/list: Pass ctx to setupLabelFilter
153de36b3f c8d/list: Add empty index test case
4ff655f4b8 resolvconf: add //go:build directives to prevent downgrading to go1.16 language
1c03312378 integration: Remove Parallel from TestDiskUsage
f512dba037 c8d/list: Fix premature `Images` return
89dc2860ba c8d/list: Handle missing configs in label filter
6f3892dc99 c8d/list: Don't setup label filter if it's not specified
fe8fb9b9a1 Dockerfile: update mvdan/shfmt to v3.8.0
4bd30829d1 Dockerfile: update docker compose to v2.25.0
971562b005 Dockerfile: update docker CLI to v26.0.0-rc2
d742659877 rootless: fix `open /etc/docker/plugins: permission denied`
4f46c44725 Dockerfile: update xx to v1.4.0
25c9e6e8df Makefile: generate-files: fix check for empty TMP_OUT
762ec4b60c plugin: fix mounting /etc/hosts when running in UserNS
7b414f5703 daemon: move getUnprivilegedMountFlags to internal package
790c3039d0 libnet: Don't forward to upstream resolvers on internal nw
10bdc7136c builder-next: Add env-var to override runc used by buildkit
1ca89d7eae vendor: google.golang.org/protobuf v1.33.0, github.com/golang/protobuf v1.5.4
f40bdf5f63 Dockerfile: update compose to v2.24.7
3f73d23ea0 Dockerfile: update buildx to v0.13.1
388ecf65bc c8d: Send push metrics to prom
bb3ab1edb7 c8d: Send pull metrics to prom
da245cab15 c8d: Send history metrics to prometheus
1cfd763214 c8d: Send image delete metrics to prometheus
0ce714a085 images: Export the image actions prometheus counter
bcb4794eea Be more explicit about non-TLS TCP access deprecation
0d5ef431a1 docker-py: Temporarily skip `test_commit` and `test_commit_with_changes`
03cddc62f4 api/image-inspect: Remove Container and ContainerConfig
ec19fd6fed vendor: github.com/containerd/containerd v1.7.14
d19f6d4b6d vendor: github.com/containerd/ttrpc v1.2.3
a6a445d86b set-up-git.md: clarify URL in git clone command
294fc9762e volume: Don't decrement refcount below 0
eef352b565 devcontainer: Use a separate devcontainer target
5a009cdd5b inte/networking: add isIPv6 flag
2f1a32e3e5 c8d/list: Skip images with non matching platform
72f1f82f28 c8d/list: Remove outdated TODO
52a80b40e2 c8d/list: Extract imageSummary function
288a14e264 c8d/list: Simplify "best" image selection
b37ced2551 c8d/list: Count containers by their manifest
a535a65c4b c8d/list: Combine size
582de4bc3c c8d/list: Add TestImageList
a6e7e67d3a specialimage: Return optional ocispec.Index
1b108bdfeb daemon/c8d: Cache SnapshotService
74e2f23e1a daemon/c8d: Use i.images and i.content
e8496b1ee4 imageService: Extract common code from `MakeImageCache`
d66177591e c8d/cache: Use the same cache logic as graphdrivers
bf30fee58a image/cache: Refactor backend specific code
f5a5e3f203 golangci-lint: enable dupword linter
4adc40ac40 fix duplicate words (dupwords)
8921897e3b Ignore bad ndots in host resolv.conf
37545cc644 builder-next: fix missing lock in ensurelayer
ef5295cda4 Don't configure IPv6 addr/gw when IPv6 disabled.
49b77753cb builder-next/export: Use leaseutil for descref lease
c4fc6c3371 builder-next/executor: Replace removed network.Sample
0f30791a0d vendor: github.com/moby/buildkit v0.13.0
4e8d9a4522 Add IPv6 nameserver to the internal DNS's upstreams.
06628e383a remove repetitive words
21835a5696 inte/networking: rename linkLocal flag into isLinkLocal
b32cfc3b3a dockerd-rootless-setuptool.sh: check RootlessKit functionality
49fd8df9b9 Dockerfile: update RootlessKit to v2.0.2
72ec187dfe go.mod: github.com/rootless-containers/rootlesskit/v2 v2.0.2
83cda67f73 go.mod: golang.org/x/sys v0.18.0
57b7ffa7f6 update to go1.21.8
cadb124ab6 daemon: overlay2: remove world writable permission from the lower file
b2921509e5 api/search: Reset `is_automated` field to `false`
f04f69e366 Accumulate resolv.conf options
7f69142aa0 resolv.conf comments have '#' or ';' in the first column
91d9307738 Replace uses of slices.Clone()
12dea3fa9e devcontainer: Add Golang extension automatically
9f4e824a6e vendor: github.com/miekg/dns v1.1.57
ef681124ca fix typo in error message
7ebd88d2d9 hack: block imports of vendored testify packages
4f30a930ad libn/cnmallocator: migrate tests to gotest.tools/v3
a580544d82 Don't create endpoint config for MAC addr config migration
ebf3f8c7fe distribution/xfer: fix pull progress message
2af2496c8c Dockerfile: Update dev cli to v26.0.0-rc1
fc0e5401f2 ci: Update `teststat` to v0.1.25
7b0ab1011c Vendor dependency cycle-free swarmkit
62b33a2604 disable pulling legacy image formats by default
5fe96e234d integration: Reset `OTEL_EXPORTER_OTLP_ENDPOINT` for sub-daemons
84eecc4a30 Revert "integration/TestDaemonProxy: Remove OTEL span"
261dccc98a builder-next: Add `Info` to `emptyProvider`
2c9c5e1c03 vendor: github.com/moby/buildkit v0.13.0-rc3
b649e272bb Allow to enable host loopback and use 10.0.2.2 to connect to the host (OPTIONALLY)
e4de4dea5c ci: Make `find` for test reports more specific
9be820d8ca vendor: go.etcd.io/bbolt v1.3.9
da643c0b8a libcontainerd: change the digest used when restoring
9083c2f10d Test DNS on Windows 'nat' networks
44167988c3 c8d/windows: Temporarily skip two failing tests
2d31532a00 otel: Default metrics protocol to http/protobuf
60358bfcab ci(buildkit): dedicated step to build test image
f5722da5e0 mobyexporter: Store temporary config descriptor
951e42cd60 builder-next: Replace ResolveImageConfig with ResolveSourceMetadata
e01a1c5d09 builder/mobyexporter: Set `image.name` response key
fa467caf4d builder-next/mobyexporter: Use OptKeyName const
59ad1690f7 builder-next: Adjust to source changes
b04a2dad6b builder/controller: Adjust NewWorkerOpt call
bc6d88c09a cmd/dockerd: Fix overriding OTEL resource
a79bb1e832 builder-next/exporter: Sync with new signature
e68f71259a integration/build: Use fsutil.NewFS
dd6992617e integration/build: Use new buildkit progressui
31545c3b67 vendor: github.com/moby/buildkit v0.13.0-rc2
f90b03ee5d go.mod: bump to go 1.21 and use local toolchain when vendoring
16aa7dd67f c8d/pull: Output truncated id for `Pulling fs layer`
881260148f api: omit missing Created field from ImageInspect response
432390320e api/pre-1.44: Default `ReadOnlyNonRecursive` to true
6aea26b431 client: fix connection-errors being shadowed by API version mismatch errors
913478b428 client: doRequest: make sure we return a connection-error
901b90593d client: NegotiateAPIVersion: do not ignore (connection) errors from Ping
349abc64ed client: fix TestPingWithError
05b883bdc8 mounts/validate: Don't check source exists with CreateMountpoint
c516804d6f vendor: OTEL v0.46.1 / v1.21.0
83c02f7a11 libnet/ds: remove extra space in error msg
14df52b709 c8d/pull: Don't emit `Downloading` with 0 progress
ff5f780f2b c8d/pull: Emit `Pulling fs layer`
5689dabfb3 pkg/streamformatter: Make `progressOutput` concurrency safe
1d473549e8 ci: Require changelog description
b2aaf5c2b0 vendor: github.com/containerd/continuity v0.4.3
cbd45e83cf libnet: Replace DeleteAtomic in retry loops with DeleteIdempotent
d9e082ff54 libnetwork: resolve: use structured logs for DNS error
8761bffcaf Makefile: Pass PAGER/GIT_PAGER variable
56aeb548b2 integration/TestDaemonProxy: Remove OTEL span
38827ba290 ci: set codecov token
bddd892e91 c8d: Adjust "image list" to return only a single item for each image store entry
2aa13e950d awslogs: Replace depreacted WithEndpointResolver usage
70a4a9c969 vendor: bump github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs to v1.32.0
9faf4855d5 Simplify macvlan/ipvlan integration test structure
4eb95d01bc Run the macvlan/ipvlan integration tests
7c2975d2df update to go1.21.7
903412d0fc api/history: Mention empty `Created`
443f56efb0 Set up DNS names for Windows default network
b4fbe226e8 Set `Created` to `0001-01-01T00:00:00Z` on older API versions
5bcd2f6860 builder/dockerfile: ADD with best-effort xattrs
999f90ac1c vendor: bump github.com/aws/aws-sdk-go-v2 to v1.24.1
ef7766304c vendor: github.com/containerd/nydus-snapshotter v0.13.7
6932939326 vendor: google.golang.org/genproto/googleapis/rpc 49dd2c1f3d0b
10a72f2504 vendor: cloud.google.com/go/logging v1.8.1
a60fef0c41 vendor: golang.org/x/exp v0.0.0-20231006140011-7918f672742d
03a17a2887 migrate image spec to github.com/moby/docker-image-spec
a26c953b94 Add comment explaining network-create flow for Swarm
571af915d5 Don't enforce new validation rules for existing networks
b71c2792d2 image/spec: remove link to docs.docker.com "registry" specification
4ab11a1148 vendor: github.com/containerd/containerd v1.7.13
419f5a6372 Make 'internal' bridge networks accessible from host
475019d70a vendor: github.com/prometheus/procfs v0.12.0
63c354aae2 vendor: github.com/prometheus/client_golang v1.17.0
beb97f7fdf Refactor 'resolv.conf' generation.
14503ccebd api/server/middleware: NewVersionMiddleware: add validation
e1897cbde4 api/server/middleware:use API-consts in tests
0fef6e1c99 api/server/middleware: VersionMiddleware: improve docs
6b01719ffb api: add MinSupportedAPIVersion const
19a04efa2f api: remove API < v1.24
8758d08bb4 api: remove handling of HostConfig on POST /containers/{id}/start (api < v1.24)
ffd877f948 api: remove plain-text error-responses (api < v1.24)
b3a0ff9944 api: remove POST /containers/{id}/copy endpoint (api < v1.23)
83f790cccc api: POST /exec/{id}/start: remove support for API < v1.21
d1974aa492 api: remove code for container stats on api < v1.21
ed93110e11 api: update test to reflect reality on Windows
570d5a9645 api: remove code for ContainerInspect on api v1.20
f0dd554e3c api: remove code for ContainerInspect on api < v1.20
dfdf2adf0c api: POST /containers/{id}/kill: remove handling for api < 1.20
2970b320aa api: remove code for adjusting CPU shares (api < v1.19)
ef25f0aa52 api: POST /build: remove version-gate for "pull" (api < v1.16)
7fa116830b api: POST /build: remove version-gate for "rm", "force-rm" (api < v1.16)
1b1147e46b api: POST /commit: remove version-gate for "pause" (api < v1.16)
d26bdfe226 runconfig: remove fixtures for api < v1.19
f1e6958295 c8d: Use the same logic to get the present images
2c01d53d96 image/cache: Use Platform from ocispec
d69729e053 seccomp: add futex_wake syscall (kernel v6.7, libseccomp v2.5.5)
10d344d176 seccomp: add futex_wait syscall (kernel v6.7, libseccomp v2.5.5)
df57a080b6 seccomp: add futex_requeue syscall (kernel v6.7, libseccomp v2.5.5)
8826f402f9 seccomp: add map_shadow_stack syscall (kernel v6.6, libseccomp v2.5.5)
6f242f1a28 seccomp: add fchmodat2 syscall (kernel v6.6, libseccomp v2.5.5)
4d0d5ee10d seccomp: add cachestat syscall (kernel v6.5, libseccomp v2.5.5)
1251982cf7 seccomp: add set_mempolicy_home_node syscall (kernel v5.17, libseccomp v2.5.4)
7f1b700227 Dockerfile: update RootlessKit to v2.0.1
f1730a6512 go.mod: github.com/rootless-containers/rootlesskit/v2 v2.0.1
f7192bb0b4 vendor.mod: github.com/google/uuid v1.6.0
91ea04089b image/cache: Ignore Build and Revision on Windows
2ef0b53e51 integration/save: Add tests checking OCI archive output
74d51e8553 plugins: fix panic installing from repo w/ digest
e910a79e2b Remove 'VERSION' from the text
9fcea5b933 Fix broken links in project/README.md
10d6f5213a Dockerfile: update docker compose to v2.24.5
9c92c07acf Dockerfile: update dev-shell version of the cli to v25.0.2
89470a7114 libnet: bridge: ignore EINVAL when configuring bridge MTU
e37172c613 api/t/network: ValidateIPAM: ignore v6 subnet when IPv6 is disabled
c59e93a67b Revert "daemon: automatically set network EnableIPv6 if needed"
83af50aee3 libnet: boltdb: inline getDBhandle()
4d7c11c208 libnet: boltdb: remove PersistConnection
8070a9aa66 libnet: drop TestMultipleControllersWithSameStore
82dda18898 tests: add plugin install test w/ digest
dd20bf4862 libcontainerd/supervisor: fix data race
0c3b8ccda7 api: Document `version` in `/build`
2cc627932a Add internal n/w bridge to firewalld docker zone
8c64b85fb9 No inspect 'Config.MacAddress' unless configured.
dae33031e0 Only restore a configured MAC addr on restart.
a2026ee442 ci: update to docker/bake-action@v4
5a3c463a37 ci: update to codecov/codecov-action@v4
9babc02283 ci: update to actions/download-artifact@v4 and actions/upload-artifact@v4
a83557d747 ci: update to actions/cache@v3
2200c0137f libnetwork/datastore: don't parse file path
d21d0884ae libnetwork: share a single datastore with drivers
835cdcac95 update containerd binary to v1.7.13
f4a93b6993 vendor: github.com/moby/buildkit v0.12.5
b20dccba5e vendor: github.com/opencontainers/runc v1.1.12
44bf407d4d update runc binary to v1.1.12
ecb217cf69 hack/make.ps1: Fix go list pattern
3a8191225a gha: update to crazy-max/ghaction-github-runtime@v3
08251978a8 gha: update to docker/login-action@v3
5d396e0533 gha: update to docker/setup-qemu-action@v3
4a1839ef1d gha: update to docker/bake-action@v4
b7fd571b0a gha: update to docker/setup-buildx-action@v3
00a2626b56 gha: update to docker/metadata-action@v5
e27a785f43 gha: update to actions/setup-go@v5
fb53ee6ba3 gha: update to actions/github-script@v7
0ffddc6bb8 gha: update to actions/checkout@v4
987fe37ed1 d/logger/journald: quit waiting when logger closes
d53b7d7e46 d/logger/journald: sync logger on close in tests
39c5c16521 d/logger/loggertest: improve TestConcurrent
5792bf7ab3 d/logger/journald: log journal-remote cmd output
982e777d49 d/logger/journald: fix data race in test harness
ca40ac030c vendor: google.golang.org/grpc v1.59.0
0818a476e5 vendor: github.com/go-logr/logr v1.3.0
a0b53f6fd2 vendor: golang.org/x/net v0.18.0
2ddec74d59 Remove unused params from etchosts.Build()
5e13f54f57 c8d/save: Handle digested reference same as ID
d131f00fff image/save: Fix untagged images not present in index.json
21136865ac libnet: remove arg `options` from (*Endpoint).Leave()
a8e8a4cdad libn/d/overlay: drop miss flags from peerAddOp
6ee58c2d29 libnetwork/d/overlay: drop miss flags from peerAdd
905477c8ae logger/journald: drop errDrainDone sentinel
d70fe8803c logger/journald: wait no longer than the deadline
e94ec8068d logger/journald: use deadline for drain timeout
71bfffdad1 l/journald: make tests compatible with systemd 255
931568032a daemon/logger/loggertest: expand log-follow tests
388ba9a69c Dockerfile: update docker compose to v2.24.3
3eb1527fdb Dockerfile: update dev-shell version of the cli to v25.0.1
7f94acb6ab docs: remove dead links from api verison history
5c2eda6f71 vendor swarmkit v2.0.0-20240125134710-dcda100a8261
96d461d27e builder/windows: Don't set ArgsEscaped for RUN cache probe
877ebbe038 image/cache: Check image platform
96ac22768a image/cache: Restrict cache candidates to locally built images
c6156dc51b daemon/imageStore: Mark images built locally
537348763f image/cache: Compare all config fields
bd4ff31775 add more //go:build directives to prevent downgrading to go1.16 language
e245fb76de internal/sliceutil: add utilities to map values
3147a013fb libnet/ds: remove unused param `key` from List
f7ef0e9fc7 libnet/ds: remove unused param `key` from GetObject
3a617e5463 c8d: Use a specific containerd namespace when userns are remapped
f7e2357745 image: remove deprecated IDFromDigest
13f46948dd api/types: remove deprecated container-types
4b09bc2145 api/types: remove deprecated service-types
49637d0206 api/types: remove deprecated image-types
eccb1a3eb8 api/types: remove deprecated checkpoint-types
0b1921649f api/types: remove deprecated system info types and functions
6f44138269 libnetwork: fix tiny grammar mistake on design.md
9a41cc58d9 libnetwork: fix typo in iptables.go
ac2a028dcc api/types: move image options to api/types/image
80c44b4b2e daemon: rename: don't reload endpoint from datastore
250886741b volume/local: Fix cifs url containing spaces
f4beb130b0 volume/local: Add tests for parsing nfs/cifs mounts
df43311f3d volume/local: Break early if `addr` was specified
9f37672ca8 daemon: only add short cid to aliases for custom networks
c25773ecbf cmd/dockerd: newRouterOptions: pass cluster as argument, and slight cleanup
00c9785e2e fix "host-gateway-ip" label not set for builder workers
0d51cf9db8 volume/local: Make host resolution backwards compatible
05d952b246 Dockerfile: update docker compose to v2.24.2
20bd690844 integration-cli: simplify test-file creation
34668a5945 pkg/archive: fixe some unclosed file-handles in tests
1090aaaedd libnetwork: fix some unclosed file-handles in tests
c482383458 fix some leaking mounts in tests
43bf65c174 pkg/system: return even richer xattr errors
a3a42c459e api/types/image: move GetImageOpts to api/types/backend
cd53b7380c Remove generated MAC addresses on restart.
fb19f1fc20 c8d/snapshot: Create any platform if not specified
6100190e5c daemon/cluster/executer: Add missing `StartInterval`
17fd6562bf image/save: Fix layers order in OCI manifest
4979605212 image/save: Change layers type to DiffID
fcc651972e daemon: return an InvalidParameter error when ep settings are wrong
a0466ca8e1 integration-cli: TestInspectAPIMultipleNetworks: use current version
13a384a6fa integration-cli: TestInspectAPIBridgeNetworkSettings121: use current version
52e3fff828 integration-cli: TestPutContainerArchiveErrSymlinkInVolumeToReadOnlyRootfs: use current API
521123944a docs/api: remove version matrices from swagger files
d54be2ee6d docs: remove documentation for deprecated API versions < v1.23
64a6cc3afd integration/build: improve some asserts, and add asserts for unhandled errs
a88cd68d3e integration/images: improve some asserts, and add asserts for unhandled errs
a404017a86 vendor: golang.org/x/tools v0.14.0
41a2aa2ee2 vendor: golang.org/x/oauth2 v0.11.0
2799417da1 vendor: golang.org/x/mod v0.13.0, golang.org/x/tools v0.13.0
407ad89ff0 vendor: golang.org/x/sync v0.5.0
94b4765363 pkg/platforms: internalize in daemon/containerd
0a9bc3b507 libnetwork: Sandbox.ResolveName: refactor ordering of endpoints
058b30023f libnetwork: loosen container IPAM validation
844ca49743 pkg/containerfs: remove deprecated ResolveScopedPath
2767d9ba05 pkg/homedir: remove deprecated Key() and GetShortcutString()
f16a2179a6 pkg/system: remove deprecated ErrNotSupportedOperatingSystem, IsOSSupported
e2086b941f remove deprecated pkg/loopback (utility package for devicemapper)
f07c45e4f2 daemon: remove --oom-score-adjust flag
307fe9c716 Dockerfile: update docker compose to v2.24.1
dfced4b557 Dockerfile: update dev-shell version of the cli to v25.0.0
c655b7dc78 Assert temp output directory is not an empty string
a8f7c5ee48 Detect IPv6 support in containers.
0046b16d87 daemon: set libnetwork sandbox key w/o OCI hook
5bbcc41c20 volumes/subpath: Plumb context
cb1af229f2 daemon/populateVolumes: Support volume subpath
349a52b279 container: Change comment into debug log
42afac91d7 internal/safepath: Add windows implementation
5841ed4e5e internal/safepath: Adapt k8s openat2 fallback
56bb143a4d internal/safepath: Import k8s safeopen function
3784316d46 internal/safepath: Handle EINTR in unix syscalls
9a0cde66ba internal/safepath: Add linux implementation
bfb810445c volumes: Implement subpath mount
f2e1105056 Introduce a helper that collects cleanup functions
f07387466a daemon/oci: Extract side effects from withMounts
9c8752505f volume/mounts: Rename errors in defer block
5bcbedb7ee API: bump version to 1.45
35789fce99 daemon.images: ImageService.getImage: use named fields in struct literals
7c1914411f daemon/images: ImageService.manifestMatchesPlatform: optimize logger
5581efe7cd rename "ociimage" var to be proper camelCase
66cf6e3a7a rename "image" vars to prevent conflicts with imports
c72e458a72 Fix libnetwork/osl test TestAddRemoveInterface
768146b1b0 Fix isGitURL regular expression
585d74bad1 pkg/ioutils: Make subsequent Close attempts noop
fbdc02534a De-flake TestSwarmClusterRotateUnlockKey... again... maybe?
Bumping docker-cli to version v26.1.4-2-g6eb67bf57, which comprises the following commits:
5bab750c2 cli/command: more go1.19 ("predeclared any")
e8bc27d4c vendor: github.com/docker/docker de5c9cf0b96e (v26.1.4-dev)
2acb9c2e8 vendor: github.com/containerd/containerd v1.7.18
230d4d0ba vendor: github.com/containerd/containerd v1.7.17
6d47c06b0 vendor: tags.cncf.io/container-device-interface v0.7.2
a6d757c0e vendor: github.com/Microsoft/hcsshim v0.11.5
c463d968f vendor: github.com/opencontainers/image-spec v1.1.0
0576b3dad update to go1.21.11
60b13f1f8 Dockerfile: update ALPINE_VERSION to 3.20
b600054c5 migrate to new github.com/containerd/platforms package
dafe63b08 gha: update to actions/upload-artifact@v4
079107e1b [26.1] vendor: github.com/docker/docker v26.1.3
14d7485d9 vendor: github.com/Microsoft/go-winio v0.6.2
50bb59277 docs: tidy up CDI docs
c4767b314 docs: fix json syntax error
258e27438 context list: temporarily add ContextType to JSON output
29cd8591e cli/command/context: list: add test for JSON output
e23a63eb4 cli/command/context: test inspecting context with custom metadata
1e52a86d4 cli/command/context: add test-utility to create multiple contexts
e382a5f22 plugins/hooks: Don't show empty hooks
26e9ff49c vendor: github.com/docker/docker v26.1.3-dev (8e96db1c328d)
326c7138b OTel: implement missing MeterProvider `ForceFlush`
ee359a394 OTel: add `command.time` metric to plugin commands
669108501 Use funcs on DockerCli to return Meter/TracerProviders, not initialize them. Initialize them during DockerCli struct init
81b482ea5 docs: clarify that --data-path-addr doesn't restrict access
e64914c89 vendor: github.com/docker/docker v26.1.2-dev (ef1912d8b6ae)
c1d70d1fb update to go1.21.10
4add46d68 Add e2e tests for run w/ bad entrypoint
ccea7d8a3 Fix hang when container fails to start
1c6a8ecf2 cli-plugins: PluginRunCommand: use cmd.Environ instead of os.Environ
6d1c387af vendor: github.com/docker/docker ac2de55998d4 (v26.1.1)
840016ea0 waitExitOrRemoved: Handle context cancellation
aec1d364b vendor: github.com/docker/docker v26.1.0-dev (c8af8ebe4a89)
43cb06e1a hooks: pass command execution error to plugins
9d8320de9 hooks: include full configured command
6ad512068 vendor: github.com/docker/docker v26.1.0-dev (ee8b788538ea)
c3243a8cc ci/validate-pr: Use `::error::` command to print errors
f92fcdef1 github/ci: Check if backport is opened against the expected branch
745704d7b ci: Require changelog description
762a85a10 Warn about deprecation of windows-dns-proxy flag
501175905 hooks: set expected environment when executing
d6796c002 Fix OTLP env var overriding
c449c1a49 plugins/hooks: run hooks when exit code != 0
287f482e3 Feature option 'windows-dns-proxy'
867061b00 plugins/templates: break on newlines when printing hooks
718203d50 cli-bin/windows: Add .exe extension
5515b8651 vendor: github.com/docker/docker v26.0.1-0.20240410103514-f9dfd139ec0d+incompatible (master)
c1053bf9d vendor: github.com/moby/swarmkit/v2 v2.0.0-20240227173239-911c97650f2e
8a3a7b945 vendor: github.com/containerd/containerd v1.7.15
458580984 docs: add systempaths=unconfined security-opt
5fcbbde4b vendor: golang.org/x/net v0.23.0
4745b957d vendor: golang.org/x/net v0.22.0, golang.org/x/crypto v0.21.0
c7a50ebb9 vendor: golang.org/x/term v0.18.0
9a2133f2d vendor: golang.org/x/sys v0.18.0
0a5bd6c75 update to go1.21.9
cefcba987 otel: capture exit code as int64
ee1b2836a otel: capture whether process was invoked from a terminal
8f45f1495 command: include default otel error handler for the cli
910d5d024 chore: remove backticks and resolve linting issues
2a3b6c03f cli: add go:build tag to the docker telemetry
efd82e1e3 Initial otel impl using our utils
b6e2eca4b Enable overriding of the otel exporter otlp endpoint via env var for testing purposes
160f65d9d Added some telemetry utils
9a1b0f8bb CONTRIBUTING.md: update Slack link
7c722c08d feat: standardize error for prompt
7ea10d5ce refactor: prompt tests
89db01ef9 cli: add otel sdk tracing and metric providers to the core cli
c5016c6d5 cli-plugins: Introduce support for hooks
509123f93 plugin: drop explicit unlink
fdb48a066 vendor: github.com/docker/docker v26.0.0
542e82cae plugin: update/improve process lifecycle documentation
d68cc0e8d plugin: closer-based plugin notification socket
d2ea5adfe fix: flaky prompt termination on reader close test
ccfd0b2cc test/ Improve test coverage in volume.go
69575f617 vendor: github.com/docker/docker 8b79278316b5 (master)
b70a26dea vendor: github.com/docker/docker 330d777c53fb (v26.0.0-rc3-dev)
f96d8e78c docs/deprecated: update status of short cid alias deprecation
b120b96ac ci: set DISABLE_WARN_OUTSIDE_CONTAINER=1 for CodeQL action
24186d800 ci: fix CodeQL 2.16.4 autobuild
48b5efee0 Dockerfile: update mvdan/gofumpt to v0.6.0
38c3ff67a vendor: github.com/docker/docker 70e46f2c7c2d (v26.0.0-rc3-dev)
f8fc5b6bc scripts/vendor: remove -compat=1.19
a4a79d75c vendor: google.golang.org/protobuf v1.33.0, github.com/golang/protobuf v1.5.4
115c8d56e vendor: github.com/containerd/containerd v1.7.14
939283181 builder: correct the command path for docker build
dc4163fb1 docs/deprecated: Deprecate Container fields in image inspect
3da26a5e7 docs: add description and link for --userns flag
4bb2abaa5 docs: typo fixes and other corrections
90c33dbfd deprecate legacy image formats
800a51d6c Set CGO_ENABLED=1 on riscv64
9349f58b8 docs: clarify what the --privileged flag does
adb018084 Dockerfile: update to xx 1.4.0
46afd26c4 cli/command: deprecate EventHandler and InitEventHandler
5c54f75f2 cli/command/container: use ping-result for OS-version
617377c04 Describe an 'internal' network.
860b4f3a7 'docker daemon' flags refer to the default bridge
645b97352 vendor: github.com/docker/docker v26.0.0-rc2
3cf2fe0ff docs: deprecate TCP connection without TLS
a8379092a vendor: github.com/docker/docker f4c696eef17d62a42
ab9d56057 bake: Add `windows/arm64` target to bin-image-cross
3b7747794 update to go1.21.8
10bf91a02 fix: cli prompt termination exit code
238d659ff Add support for --detach/-d flag in stack rm
b086d7276 Add support for --detach flag in stack deploy
5e8023239 vendor: github.com/docker/docker v26.0.0-rc1
d51ba4179 docs: prefer -it over -ti
a5b82e9f8 docs: fix typo in tty example
abe78b79d chore: `docker help` should not show plugin vendor and version
5786f2068 plugins: fix encoding for OTEL env var passed to plugin
85dcacd78 plugins: set OTEL_RESOURCE_ATTRIBUTES when invoking a plugin
acc675014 vendor: github.com/docker/docker c70d7905fbd9 (v26.0.0-dev)
79541b7e2 vendor: google.golang.org/grpc v1.59.0
096ced089 vendor: OTEL v0.46.1 / v1.21.0
f3c77df31 vendor: github.com/prometheus/client_golang v1.17.0
1b42d04d6 vendor: github.com/go-logr/logr v1.3.0
f5a29ff8e vendor: github.com/containerd/containerd v1.7.13
2663c1057 ci: set codecov token
48a670f26 docs: fix invalid daemon.json examples
f2e98f9a9 docs: regenerate markdown
caf72655f docs: update url scheme for reference docs
e24404494 deps: update cli-docs-tool version (v0.7.0)
20b9d489e update to go1.21.7
c514003e6 Fixed typo in bash completion functions
ff5b0d18f man/docker-build.1: typo in parameter variable: CID => IID
3b5e81424 cli-plugins/socket: remove use of deprecated distribution uuid package
69ed6588a Cleanup of dockerfiles, compose files and env vars
6b67b9549 Update gha runners and engines used in e2e tests
edc09e603 mount: Add `volume-subpath` option
9831fea4d testenv: Add DaemonAPIVersion helper
8bae66271 cli/connhelper/commandconn: inline variables
df6220d43 vendor: github.com/docker/docker 86b86412a1b7 (v26.0-dev)
30dd7c131 Minor test fixes necessary for eventually upgrading ci runners and engine version
2c214241f Avoid keeping @docker_cli_[UUID] files
c986d09bc docker stack: allow '=' separator in extra_hosts
324309b08 vendor: github.com/docker/docker 9e075f3808a5 (master, v26.0.0-dev)
93ad9fbdf vendor: github.com/moby/swarmkit/v2 v2.0.0-20240125134710-dcda100a8261
69e0f53a0 Uniform volume prune output msg with other prune commands
809eb8cde images: print hint when invoking "docker images" with ambiguous argument
b158181a1 cli/command/images: runImages: use proper camel-case for dockerCLI
1328bb338 cli/command/images: runImages: inline intermediate var
b123ce652 build(deps): Bump codecov/codecov-action from 3 to 4
1587b70ee Remove dummy circleci config
cfa9fef77 tests: add plugin-socket-compatibility tests
dfdff11a2 cli/command: don't use pflags.XXXVarP for flags without shorthand
690f63e6d cli/command/container: minor cleanup in attach
53e2e54c2 Dockerfile: update docker compose to v2.24.3
1c4d6d85d scripts: don't hardcode architecture in e2e script
4fa2fe9b9 Replace deprecated types.Image* usage
68dac842a vendor: github.com/docker/docker 43ffb1ee9d5a (v26.0.0-dev)
4b1ed1f44 vendor: github.com/docker/docker v25.0.1
d9294f06b info: remove printSecurityOptionsWarnings, printServerWarnings
ec0a62436 docs: update host-gateway-ip to use daemon.json instead of cli flag
469bfc05e tests: add tests for `cli-plugins/socket`
091af560c Dockerfile: update docker compose to v2.24.2
2402dac81 cli/command/container: remove deprecated NewStartOptions
b43377a38 cli/command: remove deprecated DockerCliOption, InitializeOpt
a71d39bca info: remove printServerWarningsLegacy
8cd3b0042 socket: return from loop after EOF
337dd82d8 vendor: github.com/docker/docker v25.0.0
d633890f9 docs: move base command to docker.md
aff4649cb docs: fix broken links to alias pages
852d198bb docs: add documentation for CDI
1f9573bb0 Add Linode docker volume plugin
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping podman-tui to version v0.9.0-336-g6bcf5993, which comprises the following commits:
6bcf5993 Bump to v1.1.0
d4bee0e9 Bump github.com/containers/podman to v5.1.0
4bd183c1 Bump github.com/BurntSushi/toml from 1.3.2 to 1.4.0
e31f2ee6 Bump github.com/rs/zerolog from 1.32.0 to 1.33.0
b404db37 Bump to v1.1.0-dev
35fb1650 Bump to v1.0.1
834150f0 Bump github.com/containers/podman/v5 from 5.0.2 to 5.0.3
372cedf6 Bump golang.org/x/crypto from 0.22.0 to 0.23.0
f9752fa9 Bump golang.org/x/net from 0.22.0 to 0.23.0
4da6d71f Bump github.com/containers/podman/v5 from 5.0.1 to 5.0.2
a41cf8b3 Bump github.com/containers/common from 0.58.1 to 0.58.2
2aad7a8e Bump golang.org/x/crypto from 0.21.0 to 0.22.0
9fa703c8 Bump github.com/distribution/reference from 0.5.0 to 0.6.0
46ed43e6 Bump github.com/containers/podman/v5 from 5.0.0 to 5.0.1
775d389e Bump github.com/containers/common from 0.58.0 to 0.58.1
ac74c549 Bump github.com/containers/buildah from 1.35.1 to 1.35.2
c3440609 Bump to v1.1.0-dev
47c47d46 Bump to v1.0.0
45253e1e Bump github.com/docker/docker
f39102a5 podman v5
b5297884 Bump to v0.19.0-dev
64ea1b82 Bump to v0.18.0
bee2b067 README.md update
445fc4d5 Bump google.golang.org/protobuf from 1.31.0 to 1.33.0
da408b5d Bump github.com/go-jose/go-jose/v3 from 3.0.1 to 3.0.3
b138f049 Bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3
ff1f99ca install.md update - ArchLinux (AUR)
52a56ac0 install.md update - Alpine Linux, AlmaLinux and Rocky Linux
34bd6420 golangci-lint update 1.56.2
2afefdd3 Bump github.com/gdamore/tcell/v2 from 2.7.1 to 2.7.4
aba7af2c Bump golang.org/x/crypto from 0.19.0 to 0.21.0
7c81b05b Vagrantfile update (fedora 39)
feafd1a9 ghaction update
26620476 Bump tim-actions/get-pr-commits from 1.3.0 to 1.3.1
b793ec2c Bump codecov/codecov-action from 3 to 4
61b81c38 unit test
31fa7523 unit tests
0ec32f51 resolves #438 Substitute env variables in config file
8eb6b865 Bump github.com/gdamore/tcell/v2 from 2.7.0 to 2.7.1
b3cfedb2 README update
341f1b2c unit test coverage
75c926a5 podman-tui installation via homebrew for Mac
6d5c1a0a Bump github.com/containers/podman/v4 from 4.9.2 to 4.9.3
6023f58d Bump golang.org/x/crypto from 0.18.0 to 0.19.0
b8b3cc3d Bump pre-commit/action from 3.0.0 to 3.0.1
1b393f33 Bump github.com/rs/zerolog from 1.31.0 to 1.32.0
20985d53 Bump to v0.18.0-dev
b4350927 Bump to v0.17.0
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping libpod to version v5.1.1-2-gef359624cb, which comprises the following commits:
7a1f39dc4d Bump to v5.1.2-dev
bda6eb03dc Bump to v5.1.1
cd0a0d7d6d Update release notes for v5.1.1
aa031ad1ba libpod: do not leak systemd hc startup unit timer
d79b94c82b Check AppleHypervisor before accessing it
a9377a8ec3 [v5.1] Bump c/common to v0.59.1
4dc75c67f9 [v5.1] pkg/rootless: set _CONTAINERS_USERNS_CONFIGURED ... correctly
d5cc37f78a test/e2e: use local skopeo not image
2906582149 [v5.1] Mac PM test: Require pre-installed rosetta
7ad138c3db Fix typo in release notes
515e44be74 Bump to v5.1.1-dev
4e9486dbc6 Bump to v5.1.0
2f343ce778 Release notes for v5.1
8ba3626c94 Add configuration for podmansh
8eff425410 [v5.1] Bump c/* for vendor dance
178600e531 test/e2e: fix new error message
7df3715430 Add Hyper-V option in windows installer
6ad6132987 Only stop chowning volumes once they're not empty
65d26b0cde remote API: restore v4 payload in container inspect
3949bf8af1 Fix windows action trigger
acf137b342 Update podman network docs
7207461196 Add Rosetta support for Apple Silicon mac
d1a86a4b61 fix incorrect host.containers.internal entry for rootless bridge mode
c837ebc44e vendor latest c/common main
97251d0ee6 Bump to v5.1.0-dev
6a8f2e7f29 Bump to v5.1.0-rc1
bd4e4a1d8f Add release notes for v5.1.0 (preliminary)
c46884aa93 `podman events`: check for an error after we finish reading events
277312d282 Fix updating connection when SSH port conflict happens
2a609b0f74 rootless: fix reexec to use /proc/self/exe
d4e40fedaf ExitWithError() - enforce required exit status & stderr
82f9811a8d ExitWithError() - a few that I missed
44825ab428 [skip-ci] Packit: use only one value for `packages` key for `trigger: commit` copr builds
92338642d1 Revert "Temporarily disable rootless debian e2e testing"
5901bf52b9 CI tests: enforce TMPDIR on tmpfs
6e655c7fd2 use new CI images with tmpfs /tmp
e771618531 run e2e test on tmpfs
3122549d6b Update module github.com/crc-org/crc/v2 to v2.36.0
6830d0e3c8 Address CVE-2024-3727
07ed2ddb93 [CI:DOCS] Use checkout@v4 in GH Actions
755fc021f9 ExitWithError() - rmi_test
5e240ab1f5 ExitWithError() - more r files
0c22de7811 ExitWithError() - s files
03f036b515 ExitWithError() - more run_xxx tests
3b1c735b67 Fix podman-remote support for `podman farm build`
71473976ac [CI:DOCS] Trigger windows installer action properly
8433a01aa2 Revert "container stop: kill conmon"
3fa8e98a31 Ensure that containers do not get stuck in stopping
279e2d0cb2 [CI:DOCS] Improvements to make validatepr
9e43e586c9 ExitWithError() - rest of the p files
dfbb6ea9ff [CI:DOCS] Update dependency golangci/golangci-lint to v1.58.1
a2cf948f90 Graceful shutdown during podman kube down
521bbab864 test/system: fix broken "podman volume globs" test
6d1098f823 Quadlet/Container: Add GroupAdd option
7bfac4f349 Don't panic if a runtime was configured without paths
d4c7ca39fd update c/{buildah,common,image,storage} to latest main
6bdebea8ae update golangci-lint to 1.58
ee5153c545 machine: Add LibKrun provider detection
641cd7c5a2 ExitWithError() - continue tightening
b59edad58b fix(deps): update module google.golang.org/protobuf to v1.34.1
303d0b398e test: improve test for powercap presence
9865511d00 fix(deps): update module go.etcd.io/bbolt to v1.3.10
be5cbc443e fix(deps): update module golang.org/x/tools to v0.21.0
36c05b5c6a [skip-ci] RPM: `bats` required only on Fedora
42cc712485 fix(deps): update module golang.org/x/exp to v0.0.0-20240506185415-9bf2ced13842
e3b0e58d2e gpdate and remove parameter settings in `.golangci.yml`
7d12ae0973 ExitWithError() - play_kube_test.go
02b8fd7156 Temporarily disable rootless debian e2e testing
7745854155 fix(deps): update module golang.org/x/crypto to v0.23.0
b520e909e0 CI Docs: Clarify passthrough_envars() comments
87747ca820 Skip machine tests if they don't need to be run
e8ef36e26e Update CI VMs to F40, F39, D13
83ee16b9ba ExitWithError() - v files
22eff26916 Update module golang.org/x/term to v0.20.0
431cbffab6 machine: Add provider detection API
419efb9eb5 util: specify a not empty pause dir for root too
1d1dba3843 Add missing option 'healthy' to output of `podman run --help`
b09f764ef5 [CI:DOCS] Add info on the quay.io images to the README.md
4fd84190b8 Add a random suffix to healthcheck unit names
7a43c2ed1b test/e2e: remove toolbox image
46f247d880 Also substitute $HOME in runlabel with user's homedir
7f6108233f Update module github.com/cyphar/filepath-securejoin to v0.2.5
275c068df7 ExitWithError() - pod_xxx tests
c378f2d03a ExitWithError() -- run_test.go
f8115d203c Update module golang.org/x/exp to v0.0.0-20240416160154-fe59bbe5cc7f
a96326f608 Update module github.com/shirou/gopsutil/v3 to v3.24.4
61b09333a8 Update module github.com/docker/docker to v26.1.1+incompatible
8942e2dbda GHA: Attempt fix exceeded a secondary rate limit
1bc6f16bd0 vendor ginkgo 2.17.2 into test/tools
a140c74ba4 Fix machine volumes with long path and paths with dashes
d1f8933a93 Update module google.golang.org/protobuf to v1.34.0
d886d87edf Update module github.com/crc-org/crc/v2 to v2.35.0
c17f7af6b4 Update module github.com/onsi/gomega to v1.33.1
88b80c1df6 test/e2e: podman unshare image mount fix tmpdir leak
0faded53b8 test/e2e: do not leak /tmp/private_file
88a625d319 test/e2e: "persistentVolumeClaim with source" do not leak file
eaf60c7fe7 e2e tests: use /var/tmp, not $TMPDIR, as workdirs
60b5488308 Update dependency pytest to v8.1.2
cd6ff71cc3 Remove unncessary lines at the end of specfile summary
e412eff33f Clean machine pull cache
d2c1de5993 Add krun support to podman machine
ca23774b5b Use custom image for make validatepr
9a0ed6929a test/e2e: force systemd cgroup manager
d1bfdc7900 e2e and bindings tests: fix $PATH setup
5040c6e390 Makefile: remove useless HACK variable in e2e test
537c21a49a test/e2e: fix volumes and suid/dev/exec options
31034a1b6f test/e2e: volumes and suid/dev/exec options works remote
cc6e999f2a test/e2e: fix limits test
c2d7b5415f Update module github.com/rootless-containers/rootlesskit/v2 to v2.1.0
3c1c6a44ef Correct option name `ip` -> `ip6`
30e2c923d6 Add the ability to automount images as volumes via play
693ae0ebc6 Add support for image volume subpaths
5f57571d65 Bump Buildah to latest main
e8a9c58125 Update Makefile to Go 1.22 for in-container
e4c9910aec ExitWithError() - yet more low-hanging fruit
80c3a22440 ExitWithError() - more low-hanging fruit
4da5c5d3aa ExitWithError() - low-hanging fruit
c681df35c0 chore: fix function names in comment
3f78c39c50 Remove redundant Prerequisite before build section
fa1fd1646e Remove PKG_CONFIG_PATH
3b28cdfb20 Add installation instructions for openSUSE
83dbbc3a51 Replace golang.org/x/exp/slices with slices from std
c04d03ef8c Update to go 1.21
c31728ca57 fix(deps): update module github.com/docker/docker to v26.1.0+incompatible
c22eefb939 [CI:DOCS] Fix artifact action
333682132a [skip-ci] Packit/rpm: remove el8 jobs and spec conditionals
ac04cb4ac5 e2e tests: stop littering
27174ff3fb [CI:DOCS] format podman-pull example as code
e7f0c1947e [CI:DOCS] Build & upload release artifacts with GitHub Actions
2681ab23d1 libpod: getHealthCheckLog() remove unessesary check
2ae6d0d4dd add containers.conf healthcheck_events support
33def2eea7 vendor latest c/common
b026e1d635 libpod: make healthcheck events more efficient
ce9054ff45 libpod: wrap store setup error message
e83b2cce82 [skip-ci] Packit: enable CentOS 10 Stream build jobs
e58972cd1d pkg/systemd: use fileutils.(Le|E)xists
acc78af0c3 pkg/bindings: use fileutils.(Le|E)xists
94c699192f pkg/util: use fileutils.(Le|E)xists
0e8d1ad811 pkg/trust: use fileutils.(Le|E)xists
1991990d5a pkg/specgen: use fileutils.(Le|E)xists
aab06ac445 pkg/rootless: use fileutils.(Le|E)xists
af24326133 pkg/machine: use fileutils.(Le|E)xists
cbffddc72e pkg/domain: use fileutils.(Le|E)xists
bd00c6fef9 pkg/api: use fileutils.(Le|E)xists
5656ad40b1 libpod: use fileutils.(Le|E)xists
90304dd507 cmd: use fileutils.(Le|E)xists
598fc516a6 vendor: update containers/{buildah,common,image,storage}
a169c4ec5c fix(deps): update module github.com/docker/docker to v26.0.2+incompatible [security]
dc68a47d7a fix podman-pod-restart.1.md typo
eacc3f07e5 [skip-ci] Packit: switch to EPEL instead of centos-stream+epel-next
af78b69208 fix(deps): update module github.com/onsi/gomega to v1.33.0
422eb0e58a Add more annnotation information to podman kupe play man page
b1736c472a test/compose: remove compose v1 code
2c61ee9a31 CI: remove compose v1 tests
713c026b4d [CI:DOCS] Fix windows installer action
d6b68ecfad fix(deps): update module tags.cncf.io/container-device-interface to v0.7.2
7b3456b5d9 add `list` as an alias to list networks
482ef7bfcf Add support for updating restart policy
ddea30e40e Add Compat API for Update
be3f075402 Make `podman update` changes persistent
7ef0290a1d Emergency fix (well, skip) for failing bud tests
7c4f2c79ea fix swagger doc for manifest create
d4ecae59bd [CI:DOCS] options/network: fix markdown lists
714920512e Makefile: do not hardcode `GOOS` in `podman-remote-static` target
3dc69a01e3 chore(deps): update module golang.org/x/crypto to v0.17.0 [security]
0e291ce760 chore(deps): update dependency setuptools to ~=69.5.0
1600cfffa5 Fix some comments
e8055904e1 swagger fix infinitive recursion on some types
5e9725983d install swagger from source
f95b9d4e37 Revert "Swap out javascript engine"
5e68fbd132 podman exec CID without command should exit 125
df69b36ee5 (minor) prefetch systemd image before use
49729c82a9 Update go-swagger version
1b6e8d73aa Swap out javascript engine
3418405351 fix(deps): update module github.com/docker/docker to v26.0.1+incompatible
08a49389c8 Add os, arch, and ismanifest to libpod image list
e773ed42b3 [CI:DOCS]Initial PR validation
4a07131f83 fix(deps): update github.com/containers/gvisor-tap-vsock digest to d744d71
67c6d7ec80 vendor ginkgo 2.17.1 into test/tools
999d6c0750 fix "concurrent map writes" in network ls compat endpoint
26f866b5df chore(deps): update dependency pytest to v8
2d9159821a e2e: redefine ExitWithError() to require exit code
8de92ec912 docs: fix missleading run/create --expose description
0bedf7f1d2 podman ps: show exposed ports under PORTS as well
aee1e1408d rootless: drop function ReadMappingsProc
9d18a48803 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.7.3
0313693d48 New CI VMs, to give us pasta 2024-04-05
394820c4f0 Add big warning to GHA workflow
7f0268a2e7 GHA: Fix intermittent workflow error
266801bf2d fix(deps): update module golang.org/x/tools to v0.20.0
847ca1f9ea e2e tests: remove requirement for fuse-overlayfs
36e4d512b3 docs: update Quadlet volume Options desc
b8670a3834 fix(deps): update module golang.org/x/sync to v0.7.0
0b36126e92 Fix relabeling failures with Z/z volumes on Mac
f8533c71c4 fix(deps): update module golang.org/x/net to v0.24.0
b9a8a2c61c Makefile: fix annoying errors in docs generation
59ee130048 chore: fix function names in comment
a40cf3195a Bump tags.cncf.io/container-device-interface to v0.7.1
3f83164526 fix(deps): update module golang.org/x/crypto to v0.22.0
3560ccd5df Detect unhandled reboots and require user intervention
fcf9327773 podman --runroot: remove 50 char length restriction
10995192f8 update github.com/rootless-containers/rootlesskit to v2
156ae500f2 Update module github.com/gorilla/schema to v1.3.0
beb4fd1b4a Update dependency requests-mock to ~=1.12.1
e8f26699df Update module github.com/crc-org/crc/v2 to v2.34.1
f2c365c6f6 rm --force work for more than one arg
71f6f50ee1 [CI:DOCS] Update kube docs
81d2ef889b fix(deps): update module github.com/shirou/gopsutil/v3 to v3.24.3
0f949d884c [CI:DOCS] Add GitHub action to update version on Podman.io
ccb71f9ffa [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.2
ff133a544d Windows: clean up temporary perl install
498445871c pkg/util: FindDeviceNodes() ignore ENOENT errors
549dbf8327 [CI:DOCS] build deps: make-validate needs docs
a61ae8c0a9 test/system: add rootless-netns test for setup errors
ce04fbc16a vendor latest c/common main
519a66c6a9 container: do not chown to dest target with U
fbd6df92d4 [CI:DOCS] golangci-lint: update deprecated flags
d27313ad10 systests: conditionalize slirp4netns tests
e697631af9 CI: systests: instrument flaky tests
d2143fac59 s3fs docs
7d68362cf5 test: do not skip tests under rootless
d3927f9076 Add note about host networking to Kube PublishPort option
1a99d87746 Inject additional build tags from the environment
d81319eb71 libpod: use original IDs if idmap is provided
f3434298df Switch back to checking out the same branch the action script runs in
f7b9168649 docs/podman-login: Give an example of writing the persistent path
aab4674feb CI: Bump VMs to 2024-03-28
4c2a44ef9b [skip-ci] Update dawidd6/action-send-mail action to v3.12.0
fc18dbad70 fix(deps): update module github.com/openshift/imagebuilder to v1.2.7
ffb8b2dc36 Fix reference to deprecated types.Info
c0e32e93c0 Use logformatter for podman_machine_windows_task
d305e70af8 applehv: Print vfkit logs in --log-level debug
23bf357fc3 [CI:DOCS]Add Mario to reviewers list
c8e1e0034a [CI:DOCS] Document CI-maintenance job addition
48b8d7f8be Add golang 1.21 update warning
b56331cd2f Add rootless network command to `podman info`
80e2bc6966 libpod: don't warn about cgroupsv1 on FreeBSD
c62c74970f hyperv: error if not admin
83671f95d8 Properly parse stderr when updating container status
492f0b7c5f [skip-ci] Packit: specify fedora-latest in propose-downstream
11415b3e74 Use built-in ssh impl for all non-pty operations
83fe867c14 Add support for annotations
a6ffb5656f hyperv: fix machine rm -r
f632663f26 [skip-ci] Packit: Enable CentOS Stream 10 update job
3c611c47e4 5.0 release note fix typo in cgroupv1 env var
3a9968ef81 fix remote build isolation on client side
17aa152459 chore: remove repetitive words
b2d0b92db2 Dont save remote context in temp file but stream and extract
493179be45 fix remote build isolation when server runs as root
4740367330 util: use private propagation with bind
9a13b8f17d util: add some tests for ProcessOptions
50d764b0e6 util: refactor ProcessOptions into an internal function
49ab250cf9 util: rename files to snake case
c03256e23c Add LoongArch support for libpod
f2073ca397 fix(deps): update github.com/containers/common digest to bc5f97c
5e017a87a0 [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.1
5fe1945e41 fix(deps): update module github.com/docker/docker to v25.0.5+incompatible [security]
77c4cb5721 fix(deps): update module github.com/onsi/gomega to v1.32.0
c66400f624 [CI:DOCS] Update dependency golangci/golangci-lint to v1.57.0
a872003a2a Update module github.com/cpuguy83/go-md2man/v2 to v2.0.4
b1fd03f9f5 Fix type-o
3f2b8bb314 Use correct extension in suite
aa5c4879b4 minikube: instrument tests, to allow debugging failures
15b8bb72a8 libpod: restart always reconfigure the netns
dc1795b4b2 use new c/common pasta2 setup logic to fix dns
2566ee2f38 utils: drop conversion float->string->float
816c7279e1 utils: do not generate duplicate range
f16ab115ed logformatter: handle Windows logs
0e38815387 utils: add test for the new function
cda3dc83d8 utils: move rootless code to a new function
079bfb085a CVE-2024-1753 fix for main
1141962e2a xref-helpmsgs-manpages: cross-check Commands.rst
23433ec7bd test/system: Add support for multipath routes in pasta networking tests
73a12b0c07 [skip-ci] rpm: use macro supported vendoring
7fbdd9e6e2 Adjust to the standard location of gvforwarder used in new images
7711833827 Makefile: add target `podman-remote-static`
fdad9ab1ff Switch to 5.x WSL machine os stream using new automation
3a9eef4bee Cleanup build scratch dir if remote end disconnects while passing the context
ee4b1efb24 bump main to 5.1.0-dev
3f068d1973 Use faster gzip for compression for 3x speedup for sending large contexts to remote
e82d196269 pkg/machine: make checkExclusiveActiveVM race free
b238303a40 pkg/machine/wsl: remove unused CheckExclusiveActiveVM()
c9a5c4b943 pkg/machine: CheckExclusiveActiveVM should also check for starting
1dfd3d3d12 pkg/machine: refresh config after we hold lock
d5e0ecc619 Update dependency setuptools to ~=69.2.0
60a3eb8491 [skip-ci] rpm: update containers-common dep on f40+
2ff5716b7e fix invalid HTTP header values when hijacking a connection
c6ae7fd145 Add doc to build podman on windows without MSYS
1901403eda Removing CRI-O related annotations
83e671a2c5 fix(deps): update module github.com/containers/ocicrypt to v1.1.10
d7fa0aa351 Pass the restart policy to the individual containers
cb81da9bee kube play: always pull when both imagePullPolicy and tag are missing
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping containerd to version v2.0.0-rc.3-19-g741c4bde5, which comprises the following commits:
531da9960 Reduce scope of permissions in stale workflow
ed64e6503 core/mount: remove logrus import
ea8265fb1 core/transfer/local: remove logrus import
75fd7a5a7 pkg/shim: remove logrus imports
38e2f0038 Adds a mutex to protect fallback host
587ee80f6 pkg/tracing: LogrusHook.Fire: micro-optimisation
ccf793812 pkg/tracing: remove direct use of github.com/sirupsen/logrus
4203e2de8 pkg/tracing/plugin: rename var that collided with import
e2e09b384 pkg/tracing: rename func that shadowed builtin, rm makeSpanName
e69ad9442 build(deps): bump the k8s group across 1 directory with 4 updates
5b8dfbd11 Allow proxy plugins to have capabilities
cc2cedae0 Revert "install-runc: pin Go to 1.21"
3c097352a update runc binary to v1.1.13
8c13ed1b8 Prepare v2.0.0-rc.3 release
86b8a8824 Remove pkg/seed
09d3e20d3 Allow running test in usernamespace
8bcffa944 KEP-3619: Fine grained SupplementalGroups control
87dd4309d vendor: github.com/containerd/platforms v0.2.1
939135ae3 CI: golangci-lint v1.59.1
df7f6ba5b ctr: return explicit errors for flags unsupported by transfer service
686a610ee build(deps): bump github.com/checkpoint-restore/checkpointctl
156458e54 build(deps): bump the golang-x group with 2 updates
08c1e12e9 CI: add back EL 8
149ca6880 Update hcsshim tag to 0.12.4
b1a23c495 Fail integration test early when a plugin load fails
d23c4b8b5 Use unix and windows specific connection error checks
02b6c6939 Allow fallback across default ports
80ce8bd61 build(deps): bump github.com/containerd/containerd/api
cde2527fc ctr: pull: Do not ignore labels when transfer service is used
1c123efb4 Update Go version to 1.22.4
e1e793e4a Update rockylinux vagrant build
5611fdd4a Transfer: Push: Enable to specify platforms
0e8cc9146 Transfer: Push: fix failure on pushing duplicated blobs
4123170a3 *: export RemoveVolatileOption for CRI image volumes
3e71ccafc Add type alias for event Envelope
da1d9672f Enable imgcrypt in cri pull
9857afda4 Add vendor for github.com/containerd/imgcrypt
359d84351 Update api minimum go version to 1.21
2d73340c2 Explicitly set release latest to false
ca59fb0b4 Cleanup shim manager configuration
9831a62d7 auth: add span to FetchToken helpers
58be88189 sandbox: do retry for wait to remote sandbox controller
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
The upstream project has made the "interesting" decision to
delete the stable branch and move to "main" for recent
releases. So rather than being able to simply switch for our
updates, we have to switch to main on all releases that had
podman-compose recipes using the stable branch.
Luckily, the commit hashes haven't changed, so we only have
to modify the branch in the SRC_URI.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
see: https://github.com/rootless-containers/rootlesskit
---------
RootlessKit: Linux-native fakeroot using user namespaces
RootlessKit is a Linux-native implementation of 'fake root' using user_namespaces(7).
The purpose of RootlessKit is to run Docker and Kubernetes as an unprivileged user
(known as 'Rootless mode'), so as to protect the real root on the host from potential
container-breakout attacks.
---------
This is a building block for cross installation of containers and
rootless on-target execution.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
| |
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Introducing the pasta package as an alternative for non-priviledged
container networking:
https://passt.top/passt/about/
passt: Plug A Simple Socket Transport
passt implements a translation layer between a Layer-2 network interface and native
Layer-4 sockets (TCP, UDP, ICMP/ICMPv6 echo) on a host. It doesn't require any
capabilities or privileges, and it can be used as a simple replacement for Slirp.
pasta: Pack A Subtle Tap Abstraction
pasta (same binary as passt, different command) offers equivalent functionality,
for network namespaces: traffic is forwarded using a tap interface inside the
namespace, without the need to create further interfaces on the host, hence not
requiring any capabilities or privileges.
It also implements a tap bypass path for local connections: packets with a local
destination address are moved directly between Layer-4 sockets, avoiding Layer-2
translations, using the splice(2) and recvmmsg(2)/sendmmsg(2) system calls for
TCP and UDP, respectively.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
| |
podman uses pasta as the default rootless network command since 5.0.0,
but only slirp4netns is available when building for Yocto.
This commit adds a containers.conf file setting slirp4netns as default
rootless command if 'rootless' is set in PACKAGECONFIG
Signed-off-by: Marcus Flyckt <mafl@kvaser.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
unpacked source files are now in UNPACKDIR, so we adjust our
operations to match.
Some references were missed in previous commit as they
are behind conditional.
Use BP subdir for python, to build it inside ${S}.
Need cd - to go back to $${B} so that gnutls-helper.py
is executed there instead of python subdirectory.
Use mix of tabs and spaces for indentation like other lines
around :).
Signed-off-by: Hieu Van Nguyen <hieu2.nguyen@lge.com>
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
gcc14 isn't properly tracking if the irq array index is
greater than zero, and hence generates a warning that
chains to a build error.
This is a temporary patch to ensure that the variable
is greater than zero and hence keeps the warning from
happening. If it was less than zero, a different way
of dealing with it "officially" would be better, but we
lack the insight to know what to do in this case (plus,
it really isn't less than zero as it has never caused
an issue before)
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
The xen preferred version fails to match when we add -stable
dot releases. We move the wildcard back in the preferred
version to pick them up.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping xen to version RELEASE-4.18.2-19-g01f7a3c792, which comprises the following commits:
01f7a3c792 update Xen version to 4.18.3-pre
7cdb1fa2ab x86/mtrr: avoid system wide rendezvous when setting AP MTRRs
f3d20dd317 tools/xentop: Fix cpu% sort order
dfabab2cd9 x86: respect mapcache_domain_init() failing
3999b675ca xen/sched: set all sched_resource data inside locked region for new cpu
8271f0e8f2 libxl: Fix handling XenStore errors in device creation
9966e54131 libxl: fix population of the online vCPU bitmap for PVH
a42c83b202 x86/ucode: Distinguish "ucode already up to date"
0673eae8e5 x86/cpu-policy: Fix migration from Ice Lake to Cascade Lake
2bc52041ca tools/libxs: Open /dev/xen/xenbus fds as O_CLOEXEC
a4c5bbb9db VT-d: correct ATS checking for root complex integrated devices
47cf06c09a xen/x86: Fix Syntax warning in gen-cpuid.py
026542c857 xen/xsm: Wire up get_dom0_console
f0ff1d9cb9 x86/spec: adjust logic that elides lfence
0b0c7dca70 x86/spec: fix reporting of BHB clearing usage from guest entry points
eb7059767c x86/MTRR: correct inadvertently inverted WC check
af0e9ba44a x86/rtc: Avoid UIP flag being set for longer than expected
8bdcb0b98b altcall: fix __alt_call_maybe_initdata so it's safe for livepatch
2d38302c33 x86/entry: Fix build with older toolchains
d152a04246 Update CHANGELOG.md with 4.18.2 line
b2863e468e Update Xen version to 4.18.2
40f2c69ad8 x86/spec-ctrl: Support the "long" BHB loop sequence
9be85b14aa x86/spec-ctrl: Wire up the Native-BHI software sequences
72a357f4fa x86/spec-ctrl: Software BHB-clearing sequences
73a4229807 x86/spec-ctrl: Support BHI_DIS_S in order to mitigate BHI
2be76f2018 x86/tsx: Expose RTM_ALWAYS_ABORT to guests
62844c4415 x86: Drop INDIRECT_JMP
9fd732d18d x86: Use indirect calls in reset-stack infrastructure
40a6795480 x86/spec-ctrl: Widen the {xen,last,default}_spec_ctrl fields
fb12e8d8f7 x86/vmx: Add support for virtualize SPEC_CTRL
a6cefb2686 x86/spec-ctrl: Detail the safety properties in SPEC_CTRL_ENTRY_*
ccc6603b79 x86/spec-ctrl: Simplify DO_COND_IBPB
5b28a4af1f x86/spec_ctrl: Hold SCF in %ebx across SPEC_CTRL_ENTRY_{PV,INTR}
9bc337497c x86/entry: Arrange for %r14 to be STACK_END across SPEC_CTRL_ENTRY_FROM_PV
e382cddcc2 x86/spec-ctrl: Rework conditional safety for SPEC_CTRL_ENTRY_*
57e5cab3de x86/spec-ctrl: Rename spec_ctrl_flags to scf
32cdecf1c3 x86/cpuid: Don't expose {IPRED,RRSBA,BHI}_CTRL to PV guests
a482be9211 x86/alternatives: fix .init section reference in _apply_alternatives()
855e261337 x86/tsx: Cope with RTM_ALWAYS_ABORT vs RTM mismatch
125b1a7808 x86/spec-ctrl: Move __read_mostly data into __ro_after_init
594dd0920f VMX: tertiary execution control infrastructure
4c2208d06c x86/CPU: convert vendor hook invocations to altcall
8a8c626281 x86/guest: finish conversion to altcall
b6fad02a54 x86: arrange for ENDBR zapping from <vendor>_ctxt_switch_masking()
0f6696a780 x86/spec-ctrl: Expose BHI_CTRL to guests
a546399829 x86/spec-ctrl: Expose RRSBA_CTRL to guests
fa7f2f9a86 x86/spec-ctrl: Expose IPRED_CTRL to guests
1fe30f552a IRQ: generalize [gs]et_irq_regs()
f7bd03b608 x86/MCE: switch some callback invocations to altcall
9fdbcd84d3 x86/MCE: separate BSP-only initialization
b06cf0701a x86/PV: avoid indirect call for I/O emulation quirk hook
a2922d8097 x86/MTRR: avoid several indirect calls
5c5d4eeee4 core-parking: use alternative_call()
ba951c5f29 x86/HPET: avoid an indirect call
a44c2c9f89 cpufreq: finish conversion to altcall
6b8ee35088 x86/APIC: finish genapic conversion to altcall
6d4055b9a5 x86/spec-ctrl: Fix BTC/SRSO mitigations
1166467ed3 hypercall_xlat_continuation: Replace BUG_ON with domain_crash
429a125dba x86/HVM: clear upper halves of GPRs upon entry from 32-bit code
17cf285d87 tests/resource: Fix HVM guest in !SHADOW builds
5c4aacab17 x86/boot: Support the watchdog on newer AMD systems
a790c670bb x86/boot: Improve the boot watchdog determination of stuck cpus
d0173bbed1 x86/livepatch: Relax permissions on rodata too
4fc27254de xen/virtual-region: Include rodata pointers
8c13f6c565 xen/virtual-region: Rename the start/end fields
b576e09b66 x86/cpu-policy: Fix visibility of HTT/CMP_LEGACY in max policies
03cc579ae3 x86/cpu-policy: Hide x2APIC from PV guests
0a8b92d0a4 tools/oxenstored: Make Quota.t pure
3f3158fc32 tools/oxenstored: Use Map instead of Hashtbl for quotas
c9ea3b49a5 x86/PoD: tie together P2M update and increment of entry count
cb7b84d3d5 x86/boot: Fix setup_apic_nmi_watchdog() to fail more cleanly
62d9ca19f9 x86/mm: use block_lock_speculation() in _mm_write_lock()
3d67ba0371 update Xen version to 4.18.2-pre
ea82c8cdbf update Xen version to 4.18.1
4da8ca9cb9 x86: protect conditional lock taking from speculative execution
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
hyperstart is in read-only mode, so we drop it from the layer.
A replacement will be provided in the future.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
| |
runv is no longer used, kata containers is the suggested VM
backed container interface.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
| |
To ensure that the go code can be unpacked and the license file
found, we add destsuffix to the SRC_URI.
We still have a gcc14 build issue, but this at least gets us
to that issue.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping lxc to version v6.0.0, which comprises the following commits:
3dee5fb88 Release LXC 6.0.0
17ac6f691 lxc.spec: Align SPDX license id
5fe2de84c Makefile: Align SPDX license id
97f93be72 meson: Align SPDX license id
d4cd3741d COPYING: Clarify licensing of files without SPDX
8e67eb07c doc: Add SPDX headers and remove Author field
cb94edf53 src/include: Add SPDX headers
7bc33ef6e src/tests: Add SPDX headers
007642c89 hooks: Add SPDX headers
1e9e66be3 lxc.spec: Clear default changelog
202d649d1 lxc.spec: Use SPDX
85abd4026 template: Use SPDX
a074b3d27 config/yum: Use SPDX header
7ed43e5e9 COPYING: Remove whitespace
522721216 MAINTAINERS: Remove Dwight from the maintainer list
08bf8b9e2 lxc-checkconfig: Fix shellcheck
0f18db543 lxc-checkconfig: Show namespace limits
f71b8e3f8 lxc-ls: list names with whitespaces in `--active`.
816b8973d lxc/tools: set default log_priority to ERROR
989ea3969 tools/lxc_autostart: don't fail when there are no containers
dc4df2335 lxc/lxccontainer: specify file mode in open() call inside mod_rdep
630b46ed2 lxc/confile: do not print excess space before scale suffix for time.offset.boot
796f2ccb7 lxc/confile: do not print newline symbol in getter for lxc.time.offset.*
dcc4fb929 tests/parse_config_file: fix some typos
6fea67429 tests/parse_config_file: add tests for lxc.time.offset.*
ad8f55445 tree-wide: replace multiply_overflow with check_mul_overflow
4464cee19 lxccontainer: rework copy_file()
9d1aa932d lxccontainer: improve mod_rdep()
81c1bbf45 Revert "lxccontainer: fixes"
82fe01821 src/lxc/syscall_numbers.h: drop define -1
590a95d83 rexec: Avoid invalid free in rexec failure path
f9978b179 README: Correct 'armvl7' to 'armv7l'
046b63cd2 unshare: simplify lookup_name
7452ee8ab lxc-unshare: fix an buffer overflow issue in lxc_unshare
e88883445 lxc-net: Enable IPv6 by default
d78ca00bc tests/meson: attempt to fix ossfuzz builds
d18f993b3 github: master -> main
86799f554 meson: link with liblxc dynamically everywhere if possible
b90fecfda network: use IN_LIBLXC
9eee450d2 storage_utils: move get_fssize to utils
6eb0a73e2 storage_utils: unhide and rename is_valid_storage_type to lxc_is_valid_storage_type
42eeffcb0 confile: unhide lxc_config_parse_arch() helper
9bb318881 conf: reorganize/split code to utils.c
863c59dc3 conf: reorganize/split code to idmap_utils.c
b7591ad49 confile: unhide lxc_config_define*() helpers
f14656ebf meson: introduce IN_LIBLXC preprocessor macro
672b2172d confile: move lxc_fill_elevated_privileges() to tools/lxc_attach
8f9733d75 tests: remove old and broken cgroup handling code from tests
d51ea224e config: apparmor: add AppArmor profile for lxc-copy
627bb9460 tests: lxc-test-usernic: use iproute tool instead of brctl
df0665b6d oci: resolve cross-filesystem blob caching failure
ec85e5ca4 lxc-test-usernic: drop cgroup handling
27ec0b0f6 test-usernic: don't use ifconfig
44e845b3c Add x32 to the list of recognized architectures
07e3a516e lxc-download, lxc-local: preserve xattrs on unpack
9ac7c4895 tree-wide: use container_uses_namespace() in less trivial cases
64341ce7b tree-wide: use container_uses_namespace() helper
6b40e66c1 Fix error message.
c8189ee2a Add verbose output in download template.
84cc3155a Align columns in lxc-download.in template
872db5424 build: add more options for customizing install
df17ac417 Add loongarch64 support
112d5615e build(deps): bump actions/upload-artifact from 3 to 4
789457f1a config: try to create workdir if not exist
86f5c1226 lxc-local: Add --no-dev option to exclude /dev from the fstree
f885a3c56 lxc-local: Re-organize code to use more functions
7c025072e lxc-local: Improve usage info
faa38a197 lxc-local: Change LXC_CONFIG to LXC_METADATA to match args and be more clear
d65fe1b27 Disable IPv6 link-local addresses for bridged veth
8cff8fa1a don't try to delete vlan 0 from veth
0e932812a conf: fix ephemeral copies
abffab441 config/init: Drop upstart files
79a4a3cf8 doc: remove the warning mentionning upstart
7bf1695d0 hooks/ubuntu-cloud-prep: remove upstart handling
fb73c18d2 meson: Remove support for upstart
cc6819c69 reset root_nsuid_map and root_nsgid_map when idmaps is cleared
a87d6fcc9 lxc/checkconfig: use multiline `echo`
f3e01fa80 lxc/checkconfig: replace `echo -n` by printf
ba4f810bc lxc/checkconfig: minor cosmetic change
d52c345c8 lxc/checkconfig: avoid subshell (SC2235)
f84f03d1d lxc/checkconfig: remove superfluous (..) around test command (SC2234)
74b9faa64 lxc/checkconfig: check exit code directly (SC2181)
5cc69e440 lxc/checkconfig: replace `! -z` by `-n` (SC2236)
a4684eb11 lxc/checkconfig: add missing quotes to please shellcheck
8a611c0b2 lxc/checkconfig: remove some unneeded `echo -n`
cb2574319 lxc/checkconfig: replace `type` by `command`
003efe6db lxc/checkconfig: replace `cat | grep` with `grep`
adadfa372 lxc/lxccontainer: fix do_lxcapi_set_timeout retval
c02367e59 containers in the FREEZING state also need to be unfreeze
aca53bcf7 build(deps): bump actions/checkout from 3 to 4
84169158f lxccontainer.h: Move new fields to the end
e2696df93 Remove references to LXD
7cec54455 Update console perms to 0600
3f45443fd Fix start api call to split quoted strings in execute or init command.
fbc31691e github: Update for main branch
69e51b919 CONTRIBUTING: add a note on AI generated code
84cfe9772 get_hierarchy: dont WARN about no usable controller
64167f906 Add libarchive tar support for lxc download
213e2f68d github: Add DCO/target tests
cf2b20209 explicitly convert *mainloop_handler to __u64
8575ffeb7 tests: fix parse_config_file seccomp test
ca25f3bf6 src/tests: Fix container creation errors
539c39772 rename functions which clash with libsystemd's
b670f0e75 commands: support timeout in LXC_CMD_GET_STATE
0fed82b26 lxccontainer: extend lxccontainer API with set_timeout
7fd671dbc mainloop: io_uring: disable IORING_POLL_ADD_MULTI
715fb4eff terminal: make a terminal FDs non-blocking
7eff16cc4 file_utils: add fd_make_nonblocking helper
747c4df31 file_utils: rename fd_make_nonblocking to fd_make_blocking
ebea2b5a9 setproctitle(): Handle potential NULL return from strrchr()
f7f15b20a make setproctitle()'s /proc/pid/stat parsing safe
890de0759 lsm: apparmor: allow to change mount propagation
5894cf310 console-log test: make sure container is stopped before restarting
820d2a2b3 switch from libsystemd's dbus to dbus-1
3c1453a38 tree-wide: convert fcntl(FD_CLOEXEC) to SOCK_CLOEXEC
4ea0b361f Allow fuse mounts in apparmor start-container.
1a2da75b6 Add support for squashfs images in oci via atomfs
db3cbfa75 apparmor: don't try to mmap empty files
304bf58fa initutils: use PRIu64 for uint64_t in setproctitle
4de047f51 lxc-net.in: fix nftables syntax for IPv6 NAT
311bb8c53 Fix strlcat's return value checks
588b53b19 Fix typo: bev_type -> bdev_type
7914c259f drop broken lxc-test-fuzzers
849d80877 Fix build error on sparc64 caused by using the gold linker
43ad7816d lxc-default-cgns apparmor profile: allow overlay mounts
4fa83282b lxc_user_nic: fix get_mtu() error handling
1b0469530 Patching an incoming CVE (CVE-2022-47952)
a8e1070c6 build: force linking against liblxc
c27ea96f7 checkconfig: Fix filesystem capability check
3f361da61 checkconfig: Tweak cgroup handling
3ab04999d checkconfig: Tweak layout
e027ca711 checkconfig: Hide version if no lxc-start
914fec51b checkconfig: Fix mixed tabs/spaces
70b176b0d src/lxc/meson.build: fix build without apparmor
42b22da6d cgroups: fix cgroup layout detection in __initialize_cgroups
0072919dd state: additional check in lxc_wait to prevent OOB
62b94d3ec cgroups: check snprintf retval in unpriv_systemd_create_scope
93d545e37 cgroups: fix buffer out-of-bounds access in enable_controllers_delegation
f8aa61f97 network: always initialize struct nl_handler
6ea4a6c06 apparmor: properly check lxc_strmmap ret value
b37cce95b github: fix coverity (add libpam-dev)
a8dcf88d0 github: fix coverity build
7e7393413 conf: ensure mount tunnel is a dependent mount
01ae6d471 apparmor: allow shared mounts in start-container.in
81d94a4ee conf: create separate peer group for container's root
68020412c cgroups: only allocate user namespace if we have to
27f69d45b cgroups: use userns_exec_full() during cgroup removal
1029c2a06 README: remove lgtm
dcf85308c meson.build: strip newline for variable assignments
8aac58866 meson.build: strip newlines from git output
16c6ff226 tests: lxc-test-reboot: Fix build on ia64
64eb31d02 src/lxc/meson.build: fix the static library path
c6c705bfa build: drop build-time systemd dependency
f321cd610 build: use cc.get_define to detect FS_CONFIG_* symbols
5aff4ea37 build: only build init.lxc.static if libcap is statically linkable
c1f87c811 build: fix handling of dependancies to fix build on openSUSE
bc318926d cgroups: fix -Waddress warning
4deaa28c0 Unroll IN_SET since the max usage is 2 elements check
73fd9bf55 tests: lxc-test-checkpoint-restore: use trap to do cleanup
8480c56a4 tools: lxc-destroy: update help message for --force
3cac3fce4 build: add libsystemd to oss fuzz dependencies
f7cadaa34 lxc/attach: Detect EACCES from execvp and convert to 126 exit status
4ebca5a00 lxc-attach: Fix lost return codes of spawned processes that are killed
09233897b Update README.md
4a66dabf8 conf: allow cross-device links
dc4f1220f build(deps): bump actions/checkout from 2 to 3
2b802090f Update cifuzz.yml
20cc78456 fix error message when use tools with -? option
b0abedf60 use sd_bus_call_method_async to replace the asyncv one
589a930f1 tree-wide: split open helpers into open_utils.h
7b1836bce build: prevent the inclusion of linux/mount.h with a hack
da8c29853 mount_utils: remove conf.h include
74c2f58e1 mount: move mount utilities from syscall_wrappers.h into mount_utils.h
68cf56489 tree-wide: minimize liburing.h inclusion
06f99c259 meson: fix docbook2x detection
133aa416c tree-wide: use struct open_how directly
63468abd3 tree-wide: use struct clone_args directly
4771699fd tree-wide: wipe direct or indirect linux/mount.h inclusion
16ebb29dc meson.build: allow explicit distrosysconfdir
cbabe8abf build: check for FS_CONFIG_* header symbol in sys/mount.h
ef1e0607b build: detect sys/pidfd.h availability
c1115e150 build: detect where struct mount_attr is declared
e452c8945 gitignore: Simplify
32a071519 lxc-usernsexec: allow to select which {g,u}id to switch to
7f6643071 README: update security mails
5e704fe38 meson.build: fix build without stack-protector
7d7235489 meson.build: fix build with -Dcapabilities=false
8ee887908 src/lxc/log.h: fix STRERROR_R_CHAR_P
353f0f992 meson: add remaining still-in-use config checks
3d360cf9d Store mount options in correct variable
df3301046 Fix off-by-one error constructing mount options
8ee615c27 add check for statvfs
07a00b78f start: fix namespace sharing
eae44ce19 conf: fix append_ttyname()
6c50e09f2 start: record inherited namespaces earlier to make it available for idmapped rootfs setup
7317d2a8a start: don't overwrite file descriptors during namespace preservation
fc133a9f3 conf: log file descriptors on error during idmapped mount setup
26de6cbc8 fix for issue 4026: set broadcast to 0.0.0.0 for /31 and /32
c55353f84 use systemd dbus StartTransientUnit for unpriv cgroup2
b203e1a14 Fix uninitialized read in parse_cap when libcap is not used
e73520adf meson: Set DEVEL flag post release
f4d02217e tools: Provide multicall lxc binary
289d6413e meson: Generate compile commands by iterating over an array
132ff8e28 lxccontainer: rework copy_file()
f357cb290 lxccontainer: improve mod_rdep()
b576a47d5 Read list until process exits
We also:
- drop two patches that were backported
- refresh the context of one
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping containerd to version v2.0.0-rc.2-12-g5d2c988a5, which comprises the following commits:
446e63579 remove uses of platforms.Platform alias
22f2af40c update pause image to 3.10
65024e6fd core/image: fix usage of "unknown" platform
8b3060717 Provide runtime options in plugin info
332caf1a1 Provide ability to set lo up without CNI
288f0592e Prepare release notes for v2.0.0-rc.2
f24a95185 build(deps): bump github.com/prometheus/client_golang
8b2a69c19 build(deps): bump golangci/golangci-lint-action from 5 to 6
96ff18d37 build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3
1cae3dc9b update ttrpc to 1.2.4
e2251f948 Update instrumentation fuzzer with new flag
ef76a90e9 Update platforms package to v0.2.0
0b113d78d doc: add the description of sandboxer and io_type
7cead8800 cri: restart created container with correct io type
42f778fc1 modify streaming io url form
25c2f690a Update toolchain to Go 1.22.3
681a083fa Update unpacker to always fetch all
2788604e4 Update ctr image pull all platforms
58be88189 sandbox: do retry for wait to remote sandbox controller
059731775 Preserve CL_UNPRIVILEGED locked flags during remount of bind mounts
9a9a8c46a Don't require vagrant tests in merge queues
d9dc2811a fix: delete sockets on shim exit
41dc94ee1 CI: bump up golangci-lint to v1.58.0
9ecfac7f6 Integration: Change to grpc.NewClient
8c6183d74 Add lease test for metadata snapshotter
c7fb8a925 Update metadata snapshotter to lease on exists
b8dfb4d8f cri: support io by streaming api
3b065cddd CI: skip test in arm64 CI
6c3c5376f critools-version: v1.30.0
b488e76db build(deps): bump google.golang.org/protobuf from 1.33.0 to 1.34.1
a6e417dc6 build(deps): bump go.etcd.io/bbolt from 1.3.9 to 1.3.10
4401c3cb7 build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.1 to 2.2.2
42e02c6c0 build(deps): bump golang.org/x/sys in the golang-x group
88b52119c Update api version to v1.8.0-rc.0
1c9c64f31 Update release procedure to mention api replace
e69efd56d Add go mod replace when proto changes happen
678137199 sandbox: remove PID() in sandbox client
13f2fa1de remove go1.21.9 from CI matrix
f0363a7f6 Chore: Simplify some syscall error checks
99ad11a00 core/metadata: failfast on content.Commit
3fb84403b CI: bump up crun to 1.15
55fcebffc Prepare release notes for api/v1.8.0
b811a8879 Add API release action
b8060d641 Update ctr shim subcommand to task v3
f1e265b13 core/runtime: Check shim PluginInfo to enforce idmap support
05a3171bb Update transfer proxy to support ttrpc
ec04e4f63 Add streaming proxy
fe01cad20 Cleanup local transfer interface
171fc1434 Update release doc to mention API versioning
2ac2b9c90 Make api a Go sub-module
e1b94c0e7 Move protobuf package under pkg
3e9cace72 Move runtimeoptions to api directory
4a4550777 Move runc options to api directory
25a288662 Fix v2 migrate for testutil package
fb1f15d30 docs: correct the typo in the documentation
2df04b403 build(deps): bump the otel group with 8 updates
950db7eb7 build(deps): bump the k8s group across 1 directory with 4 updates
93690baf4 build(deps): bump github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus
4c753d124 go.mod: k8s.io/cri-api v0.30.0
de38490ed sandbox: merge address and protocol to one url
c3b306240 add task api endpoint in task create options
72fe47b2a add task api endpoint in oci proto
b1fefccc7 sandbox: store endpoint in cri sandboxStore
f6e0cf189 sandbox: add address info in Start and Status response
15782881e go.mod: go 1.22
2d5689434 CI: use Go 1.22 by default
fef78c102 install-runc: pin Go to 1.21
11d8beff8 optimize error logs by providing absolute file paths
81a9df625 build(deps): bump github.com/urfave/cli/v2 from 2.27.1 to 2.27.2
c001a7056 build(deps): bump lycheeverse/lychee-action from 1.9.3 to 1.10.0
6df759e24 build(deps): bump golangci/golangci-lint-action from 4 to 5
b7c977414 container.Checkpoint(), WithRestoreImage(): use ocispec.AnnotationRefName
8a8c3e221 pkg/cri/server/base: log CRI config as embedded JSON
f62edda5a pkg/cri/server/base: use structured log for CRI plugin startup
e07b63d84 document usage and design of blockfile snapshotter
b6bd12f13 Add Syself Autopilot to adopters
7bc476001 ADOPTERS.md: Fix Actuated italics
416741675 Perform file sync outside of lock on Commit
c27bcdc56 cri: introspectRuntimeFeatures: fix nil panic
dfdfa206f Update for latest updates to release tool
53c9e6f86 Update release process after 1.7
a12acedfa sandbox: make a independent shim plugin
9ee3bfaba images: tests: Fix typos in the tests
c51463010 docs: update registry config guide
7bd4d348e add info of exited event
218e2cf7c Return correct error if CRIU binary is missing
bb9d923aa content: add a BlobReadSeeker func to allow multipart blob streaming
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping buildah to version v1.36.0, which comprises the following commits:
6ceba8838 Bump to v1.36.0
c09e08b53 build: be more selective about specifying the default OS
3fa5531ca Bump to c/common v0.59.0
4d1690bc3 Fix buildah prune --help showing the same example twice
208b7111e fix(deps): update module github.com/onsi/ginkgo/v2 to v2.18.0
c7937cd1d fix(deps): update module github.com/containers/image/v5 to v5.31.0
183582f03 bud tests: fix breakage when vendoring into podman
de8510c9d Integration tests: fake up a replacement for nixery.dev/shell
d9191e17c copierWithSubprocess(): try to capture stderr on io.ErrClosedPipe
97382f928 Don't expand RUN heredocs ourselves, let the shell do it
864a40cbd Don't leak temp files on failures
97d44ab9c Add release note template to split dependency chores
4a524737f fix CentOS/RHEL build - no BATS there
420949a5a fix(deps): update module github.com/containers/luksy to v0.0.0-20240506205542-84b50f50f3ee
bbab575ff Address CVE-2024-3727
6a48ae700 chore(deps): update module github.com/opencontainers/runtime-spec to v1.2.0
d5b2e3c41 Builder.cdiSetupDevicesInSpecdefConfig(): use configured CDI dirs
da4e2d7ad Setting --arch should set the TARGETARCH build arg
6f1f687c3 fix(deps): update module golang.org/x/exp to v0.0.0-20240416160154-fe59bbe5cc7f
cd1960725 [CI:DOCS] Add link to Buildah image page to README.md
f6d49125a Don't set GOTOOLCHAIN=local
a04741d9f fix(deps): update module github.com/cyphar/filepath-securejoin to v0.2.5
53f2dc231 Makefile: set GOTOOLCHAIN=local
e0077e8c6 Integration tests: switch some base images
fdfd2237d containerImageRef.NewImageSource: merge the tar filters
f2825bf7b fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.2
2c1c73169 fix(deps): update module github.com/containers/luksy to v0.0.0-20240408185936-afd8e7619947
7688d880d Disable packit builds for centos-stream+epel-next-8
7425f6f8f Makefile: add missing files to $(SOURCES)
fbd2b7db4 CI VMs: bump to new versions with tmpfs /tmp
89ee4f4b0 chore(deps): update module golang.org/x/net to v0.23.0 [security]
c01061e47 integration test: handle new labels in "bud and test --unsetlabel"
f86c2748e Switch packit configuration to use epel-9-$arch ...
14d964d92 Give unit tests a bit more time
8bb87aefa Integration tests: remove a couple of duplicated tests
3e756d507 Integration tests: whitespace tweaks
8ee7bebd7 Integration tests: don't remove images at start or end of test
c7f088142 Integration tests: use cached images more
b213c5e7a Integration tests _prefetch: use registry configs
8bdd6a66d internal: use fileutils.(Le|E)xists
441bdc927 pkg/parse: use fileutils.(Le|E)xists
705338379 buildah: use fileutils.(Le|E)xists
9dcd1cc9a chroot: use fileutils.(Le|E)xists
358814f69 vendor: update containers/(common|storage)
be74b733f Fix issue/pr lock workflow
a99fe1513 [CI:DOCS] Add golang 1.21 update warning
77400c4fc heredoc: honor inline COPY irrespective of ignorefiles
ff13a08c9 Update install.md
5b414ad08 source-push: add support for --digestfile
d9129b463 Fix caching when mounting a cached stage with COPY/ADD
58579ba65 fix(deps): update github.com/containers/luksy digest to 3d2cf0e
2cd31a069 Makefile: softcode `strip`, use it from env var
f812c8949 Man page updates
5198af7d7 Add support for passing CDI specs to --device
14bf3db27 Update comments on some API objects
2a7ff9905 pkg/parse.DeviceFromPath(): dereference src symlinks
c1b43b57b Makefile - instead of calling `as` directly, use it from env var
23b8d9767 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.1
c1119f886 CI: bump VMs
2c47fdccd fix(deps): update module github.com/docker/docker to v25.0.5+incompatible
f95b7a188 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.0
9cf83d8f8 Change RUN to comment in bud.bats
5808b9603 Stop rebasing renovate PRs automatically
37994356f Update renovate validation image
4304d618f CVE-2024-1753 container escape fix
516f9e9a2 correctly configure /etc/hosts and resolv.conf when using network
9db5a16f7 buildah: refactor resolv/hosts setup.
8c1fee7e7 rename the hostFile var to reflect the value better
f8a7841cc vendor latest c/common
26da74d54 [skip-ci] rpm: use go-rpm-macros supported vendoring
547d9bf0e Update docs/buildah-add.1.md
80f9f7cb0 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.16.0
5cf05ac08 fix(deps): update module github.com/docker/docker to v25.0.4+incompatible
c355679d3 fix(deps): update module github.com/containers/ocicrypt to v1.1.10
550139916 chore(deps): update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [security]
1a6d3513f chore(deps): update module github.com/go-jose/go-jose/v3 to v3.0.3 [security]
bf3263ec1 Bump google.golang.org/protobuf to v1.33.0
e635558d2 fix links to containerignore doc
e53e50f7a [skip-ci] Makefile: update rpm target
87ef84d3a pr-should-include-tests: use GitHub label, not commit text
d50122aeb tests: enable pasta tests
1bc5dd692 [CI:DOCS] Migrate buildah container image
7c88bb372 Update .gitignore
da81d2e2b Bump to v1.36.0-dev
fedbd7967 Bump v1.35.0
3164076e2 Bump c/common v0.58.0, c/image v5.30.0, c/storage v1.53.0
b2504c263 conformance tests: don't break on trailing zeroes in layer blobs
a2f0ebef6 Add a conformance test for copying to a mounted prior stage
e504df188 fix(deps): update module github.com/stretchr/testify to v1.9.0
951dccd3f cgroups: reuse version check from c/common
bbea3eb54 Update vendor of containers/(common,image)
6474279ed fix(deps): update github.com/containers/storage digest to eadc620
f9d603608 fix(deps): update github.com/containers/luksy digest to ceb12d4
53f230e2b fix(deps): update github.com/containers/image/v5 digest to cdc6802
8a1bcd51c manifest add: complain if we get artifact flags without --artifact
d0ffb9d37 Use retry logic from containers/common
e9c3c1666 Vendor in containers/(storage,image,common)
5047a3566 Update module golang.org/x/crypto to v0.20.0
26d5b84b1 Add comment re: Total Success task name
4853c0042 tests: skip_if_no_unshare(): check for --setuid
63975b541 Properly handle build --pull=false
836b9384d [skip-ci] Update tim-actions/get-pr-commits action to v1.3.1
5748595ae Update module go.etcd.io/bbolt to v1.3.9
fee705081 Revert "Reduce official image size"
aee02318a Update module github.com/opencontainers/image-spec to v1.1.0
cdb1a4ff8 Reduce official image size
eb6269d8c Build with CNI support on FreeBSD
98f870753 build --all-platforms: skip some base "image" platforms
d73e21120 Bump main to v1.35.0-dev
90c0d9794 Vendor in latest containers/(storage,image,common)
1def7d6de Split up error messages for missing --sbom related flags
aca884a89 `buildah manifest`: add artifact-related options
07057917d cmd/buildah/manifest.go: lock lists before adding/annotating/pushing
a0852e994 cmd/buildah/manifest.go: don't make struct declarations aliases
4f0b619dd Use golang.org/x/exp/slices.Contains
e202d62cc Disable loong64 again
e99960085 Fix a couple of typos in one-line comments
302a798ad egrep is obsolescent; use grep -E
e6d179476 Try Cirrus with a newer VM version
04847f57f Set CONTAINERS_CONF in the chroot-mount-flags integration test
56e6ef854 Update to match dependency API update
5d58b88c7 Update github.com/openshift/imagebuilder and containers/common
a20d5b2a5 docs: correct default authfile path
9d58d1382 fix(deps): update module github.com/containerd/containerd to v1.7.13
533aac2d4 tests: retrofit test for heredoc summary
1bfd3336f build, heredoc: show heredoc summary in build output
811ee6797 manifest, push: add support for --retry and --retry-delay
1a8cbc185 fix(deps): update github.com/openshift/imagebuilder digest to b767bc3
9d516e22e imagebuildah: fix crash with empty RUN
e14f46f2e fix(deps): update github.com/containers/luksy digest to b62d551
a7aec1941 fix(deps): update module github.com/opencontainers/runc to v1.1.12 [security]
f1f0d9d4d fix(deps): update module github.com/moby/buildkit to v0.12.5 [security]
79fb3c213 Make buildah match podman for handling of ulimits
13fd5bd2c docs: move footnotes to where they're applicable
011736e12 Allow users to specify no-dereference
34dff20da Run codespell on code
86afc1ffd Fix FreeBSD version parsing
32b8ceeb6 Fix a build break on FreeBSD
e3d043ebf Remove a bad FROM line
f6f6da8f0 fix(deps): update module github.com/onsi/gomega to v1.31.1
4b5caebd7 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc6
f157be843 docs: use reversed logo for dark theme in README
cf69e8a18 build,commit: add --sbom to scan and produce SBOMs when committing
b3af07dab commit: force omitHistory if the parent has layers but no history
de7c1e1f7 docs: fix a couple of typos
89f50af21 internal/mkcw.Archive(): handle extra image content
4cc811f4f stage_executor,heredoc: honor interpreter in heredoc
339839d4b stage_executor,layers: burst cache if heredoc content is changed
dd186ee0f fix(deps): update module golang.org/x/crypto to v0.18.0
a42bfd019 Replace map[K]bool with map[K]struct{} where it makes sense
905551f51 fix(deps): update module golang.org/x/sync to v0.6.0
efe76552b fix(deps): update module golang.org/x/term to v0.16.0
d371fc7b9 Bump CI VMs
53c65dd36 Replace strings.SplitN with strings.Cut
b5ee4fb34 fix(deps): update github.com/containers/storage digest to ef81e9b
114bb6f0c fix(deps): update github.com/containers/image/v5 digest to 1b221d4
fd0899f1f fix(deps): update module github.com/fsouza/go-dockerclient to v1.10.1
59ea8af1b Document use of containers-transports values in buildah
b2c80f9a3 fix(deps): update module golang.org/x/crypto to v0.17.0 [security]
b283c48db chore(deps): update dependency containers/automation_images to v20231208
4a9dba647 manifest: addCompression use default from containers.conf
041388f87 commit: add a --add-file flag
81435aadc mkcw: populate the rootfs using an overlay
5b9141887 chore(deps): update dependency containers/automation_images to v20230517
de0c3cdaf [skip-ci] Update actions/stale action to v9
2ab21c666 fix(deps): update module github.com/containernetworking/plugins to v1.4.0
29d945f38 fix(deps): update github.com/containers/image/v5 digest to 7a40fee
4276a735b Bump to v1.34.1-dev
471460018 Ignore errors if label.Relabel returns ENOSUP
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
Bumping crun to version 1.15-13-g700e2ed, which comprises the following commits:
c6c1c7f crun run --help: say --no-subreaper is ignored
8801bc4 github: disable CentOS 10 tests
5f0643c github: fix running tests on CentOS 10
d795081 tests: build on CentOS 10 without yajl
f00fa22 libocispec: sync from upstream
dd9428b blake3: initialize chunks_array
8c80ab9 utils: initialize fd
81b8f45 linux: fix mount of special files with rro
e6eacaf NEWS: tag 1.15
08b5e78 Packit: Enable c10s downstream sync, rhel / centos separation in tests
4618d50 status: rmdirfd: try harder to remove mount points
c72bf7f linux: cgroups: cleanup unused mount if move failed
ff321e1 tests: install slirp4netns
a946f04 utils: fix a compiler warning
aa72cc4 Packit/TMT: add centos-stream-10, cleanup tests
f39bc4a tests, oci-validation: use perl tap driver
f5548f2 tests, oci-validation: use tap-18
18e84a1 tests, oci-validation: use git clone
49090f2 Build s390x binaries using musl libc
307d35e Fix clang format test
4b8f7c9 build(deps): bump uraimo/run-on-arch-action from 2.7.1 to 2.7.2
e6a8d51 libocispec: update
1809973 tests: use npm-18
475a3fd features: add support for potentiallyUnsafeConfigAnnotations
4f5479e src/libcrun/handlers: add option to load wasi-nn plugin for wasmedge
631e767 release: use zstd instead of xz
0722689 release.sh: generate .zst release instead of .xz
3ad68ed linux: fixup libcrun_safe_chdir
699564b rpm: remove eln macro
f50da23 Packit: reuse non-RHEL failure message notification on RHEL
0b7fc08 packit: podman reverse dependency tests
820471a libocispec: use runtime-spec v1.2.0
9eea9ff cgroup: make error clearer
59ad70a container: validate option flags
7918dca container: split create and run options
8894495 crun: add option --keep to run
35dccc3 libcrun, run: add option to not delete containers
a220ca6 NEWS: tag 1.14.4
6cd74cb Add support for s390x
5884fd4 linux: fix mount of file with recursive flags
b9e87e7 tests: test bind mounts of files
crun/ocispec: update to latest
2236d50 github: test with the embedded yajl library
bed19ad configure.ac: --enable-embedded-yajl skips check for yajl
b633f89 Makefile.am: distribute the src/yajl symlink
86650dc fix compilation error with clang++17
20d3936 helpers.py: remove __str__()
afed951 generate.py: fix some typos
daeb197 runtime-spec: use version v1.2.0
66f6f71 optimize writefile
e9a99a8 Optimize headers writefile
7a5f2b6 Refresh strings format sources
210f4d3 Refresh strings format headers
b085839 runtime-spec: update
crun/ispec: update to v1.1.0
535d657 Fix a typo in the annotations spec
89fee07 MAINTAINERS: move jonboulle to EMERITUS
f17d647 CODEOWNERS: remove vbatts
818209a MAINTAINERS: move vbatts to EMERITUS
652ec7c Add note about `ImageID` to the `config` section of `manifest.md`
2d95dde Reformat "Platform Variants", especially to add amd64, ppc64le, riscv64
e191267 Update Go versions in release scripts
4da0cfc Update GitHub Actions packages to resolve warnings in CI
a32e6c3 Pin golangci-lint for Go v1.20
8baa69b media-types: Fix broken links
0a41c19 version: bump back to +dev
e7f7c0c version: release v1.1.0
d0f90e6 Clarify that subject references a separate DAG
8b1e951 version: bump back to +dev
6c2b5fa version: release v1.1.0-rc6
53d9855 new section for projects no longer maintained
b391bc0 fix: SPDX licenses URL
dd66b54 Test older versions of Go with toolchain=local
93f6e65 Makefile: remove stray trailing space (#1126)
d881fa8 deps: remove deprecated github.com/pkg/errors (#1125)
072574d add ORAS to implementations.md
9954739 specs-go: group MediaTypes
344b098 fix markdown table formatting
c7a064f Update supported Go range to 1.19 - 1.21
f0ef80e version: bump back to +dev
1e54f01 version: release v1.1.0-rc5
061cba3 Fix golangci-lint install on older versions of Go
a2a5750 Add step to update website after a release
0c1622e Add `riscv64` arch to `check{Architecture|Platform}`
e6a75e6 Provide a decision tree for artifacts
9ac8f92 Quote lint-md wildcard expression
a6af2b4 Add a markdown linter and fix linting issues
af9c838 OCI has a distribution-spec
37bac87 Create artifacts guidance
ddf2dfd chore(descriptor.md): correct canonicalization reference
d36ccf1 MediaType is required in the descriptor
f6c60b5 Clean up the markdown in considerations
da8994a Cleanup broken links and markdown spacing
56877ad Remove deprecated golangci lint checks
b29a06c Hacking markdown and Makefile cleanup
73aca56 Cleanup markdown in governance
fd95ded Fix label schema link
aed07a8 Test subject field in index
8620a49 version: bump HEAD back to +dev
82e8329 version: bump for release of v1.1.0-rc.4
988df0a specs-go: remove artifact prefixed annotations
a845c7a image-index: add artifactType to specs and schema
73f386c Add constants for "index.json" and "blobs"
25fc553 Switch from scratch to empty
749ea9a Add artifactType to image index
32036d8 Apply version change from #1050
e13840d Add language from artifacttype field to forbid allowlists of media types
77efc6e spec: clarify descriptor, align with de facto artifact usage
c6854a6 image-index: add the `subject` field
crun/rspec: update to v1.2.0
b983fbf CODEOWNERS: remove vbatts
bf698d0 MAINTAINERS: move vbatts to EMERITUS
12b653d Update golangci-lint to v1.56.1 in CI
8547911 Add Go v1.21 and v1.22 to GitHub Actions CI matrix
1a729af Update GitHub Actions packages to resolve warnings in CI
65cd1f8 Back to +dev
36852b0 version: release v1.2.0
021ba94 config.md: allow empty mappings for [r]idmap
5e98fec features: add potentiallyUnsafeConfigAnnotations
cabeea7 specs-go: mark LinuxMemory.Kernel as deprecated
4005c81 specs-go: add missing deprecation comment for Hooks.Prestart
2f6b090 config: improve bind mount and propagation doc
0ec4e6b fix link to hooks in features
6ffddf6 mount: Allow relative mount destinations on Linux
f329913 features-linux: Expose idmap information
7b8eb69 config: add reference to mount_setattr(2) for idmapped mounts
2547bb0 config: add idmap and ridmap mount options
3f552ce version: release v1.1.0+dev
0625254 version: release v1.1.0
d56ba70 ChangeLog: squash v1.1.0-rc.1...v1.1.0
5430e36 ChangeLog: Document changes since v1.1.0-rc.3
2bd22fa features.md: add a note to avoid confusion about annotations
5612d21 Remove outdated meeting.ics
085728a README.md: update chat information
8b4cadd version: v1.1.0-rc.3+dev
ae35e39 version: release v1.1.0-rc.3
d8be1e3 ChangeLog: Document changes since v1.1.0-rc.2
1beaf68 CODEOWNER: Add Toru Komatsu(@utam0) to sync with MAINTAINERS
fccfb09 config: add support for org.opencontainers.image annotations
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
Fixes:
# ./run-ptest
/tmp/bats-run-ELGGaA/bats.18820.src: line 5: To: command not found
1..1
not ok 1 bats-gather-tests
# (in test file test/README.md, line 5)
# `To run the tests locally in your sandbox, you can use one of these methods:' failed with status 127
Signed-off-by: Mingli Yu <mingli.yu@windriver.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
| |
fetched files should be referenced via UNPACKDIR instead of
WORKDIR.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
| |
While the WORKDIR references seem to work, they may not continue
to work. We switch to using UNPACKDIR which is where the SRC_URI
referenced elements / files will be placed by the fetcher.
Note: gcc-14 issues remain even with this fix.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
| |
Converting WORDIR references to UNPACKDIR.
Our generated keys and other references to WORKDIR continue
to be fine.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
| |
Converting WORDIR references to UNPACKDIR.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
| |
work arounds for:
meta-virtualization/recipes-extended/dev86/dev86_git.bb:do_install
http://errors.yoctoproject.org/Errors/Build/183127/
Signed-off-by: Martin Jansa <martin.jansa@gmail.com>
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
| |
unpacked source files are now in UNPACKDIR, so we adjust our
operations to match.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
While the WORKDIR references seem to work, they may not continue
to work. We switch to using UNPACKDIR which is where the SRC_URI
referenced elements / files will be placed by the fetcher.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
While the WORKDIR references seem to work, they may not continue
to work. We switch to using UNPACKDIR which is where the SRC_URI
referenced elements / files will be placed by the fetcher.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
| |
While the WORKDIR references seem to work, they may not continue
to work. We switch to using UNPACKDIR which is where the SRC_URI
referenced elements / files will be placed by the fetcher.
The remaining WORDIR references are to a secondary git repository
with artifacts and should be safe.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
While the WORKDIR references seem to work, they may not continue
to work. We switch to using UNPACKDIR which is where the SRC_URI
referenced elements / files will be placed by the fetcher.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
| |
While the WORKDIR references seem to work, they may not continue
to work. We switch to using UNPACKDIR which is where the SRC_URI
referenced elements / files will be placed by the fetcher.
We also explicitly set S to point to the UNPACKDIR to avoid a
build warning.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
While the WORKDIR references seem to work, they may not continue
to work. We switch to using UNPACKDIR which is where the SRC_URI
referenced elements / files will be placed by the fetcher.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
| |
While the WORKDIR references seem to work, they may not continue
to work. We switch to using UNPACKDIR which is where the SRC_URI
referenced elements / files will be placed by the fetcher.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
| |
|
|
|
|
|
|
|
|
|
| |
As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork
of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this
variable in our go recipes.
We also symlink our unpacked vendor clones into the build directory
since they are no longer directly placed in WORKDIR.
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
|
