summaryrefslogtreecommitdiffstats
path: root/recipes-containers
Commit message (Collapse)AuthorAgeFilesLines
...
* podman: update to 4.3Bruce Ashfield2022-12-011-3/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We add ${datadir}/user-tmpfiles.d/* to package some newly added systemd files, but otherwise, the recipe is unchanged. Bumping libpod to version v4.3.0-7-g9ce592fcb, which comprises the following commits: 83b02f8fd Update c/image from release-5.23 branch 14563ef13 system tests: fix broken bashisms 34ebb9af2 Release notes fixes d5a0dfc1e Bump to v4.3.1-dev ad42af949 Bump to v4.3.0 9496a3836 Final release notes for v4.3.0 ac7fa8437 libpod: Add support for 'podman top' on FreeBSD f8a79409c libpod: Factor out jail name construction from stats_freebsd.go e33306683 pkg/util: Add pid information descriptors for FreeBSD 3810a9dac [CI:BUILD] copr: podman rpm should depend on containers-common-extra 94499aa47 Podman image: Set default_sysctls to empty for rootless containers 8a28b896b Allow volume mount dups, iff source and dest dirs 295d0d1d9 libpod: Factor out the call to PidFdOpen from (*Container).WaitForExit c9c683a58 markdown-preprocess: add generic include mechanism 42a221874 markdown-preprocess: almost complete OO rewrite ca9eaec5e bump golangci-lint to v1.49.0 6972d47ff rootless: fix return value handling 5a214f6e5 generate systemd: set --stop-timeout for stopping containers c6ad786ca Change to correct break statements 1a5506459 Add swagger install + allow version updates in CI 78d4af894 Cirrus: Fix windows clone race fc43751e7 kill: wait for the container 9c01425ad hack/tree_status.sh: print diff at the end 682dd8e45 Man pages: refactor common options (misc) b98f6b52f Man pages: Refactor common options: --detach-keys c7e946482 Man pages: refactor common options: --attach 83b5fcf38 build(deps): bump github.com/fsnotify/fsnotify from 1.5.4 to 1.6.0 6d5d84a05 Man pages: refactor common options: --annotation (manifest) 7f88deff1 KillContainer: improve error message b805a068c build(deps): bump github.com/containers/ocicrypt from 1.1.5 to 1.1.6 42b642509 docs: add missing options f2a2ab557 build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0 095aa5c3a play kube: notifyproxy: listen before starting the pod b7514ee40 build(deps): bump golang.org/x/text from 0.3.7 to 0.3.8 f7732ae52 Man pages: refactor common options: --os-version 298a2432e play kube: add support for configmap binaryData 2efdff528 build(deps): bump github.com/onsi/gomega from 1.20.2 to 1.22.1 802118ad1 Revert "Add checkpoint image tests" dfa55ff6a Revert "cmd/podman: add support for checkpoint images" eb43d175c system tests: health-on-failure: fix broken logic ee5bd1e0c Man pages: Add mention of behavior due to XDG_CONFIG_HOME c88dfbb98 Add and use libpod/Container.Terminal() helper cbde35e32 Avoid unnecessary timeout of 250msec when waiting on container shutdown d15b4af92 healthcheck: fix --on-failure=stop 81c645f2f libpod: Add support for 'podman pod' on FreeBSD 546e9445e libpod: Factor out cgroup validation from (*Runtime).NewPod 26df7d97c libpod: Move runtime_pod_linux.go to runtime_pod_common.go 70e0cb509 specgen/generate: Avoid a nil dereference in MakePod f92360283 libpod: Factor out cgroups handling from (*Pod).refresh b9d479b72 health checks: make on-failure action retry aware ead78d8ba libpod: Remove 100msec delay during shutdown 640eac465 Clean up when stopping pods d31a06ce8 Create full path to a directory when DirectoryOrCreate is used with play kube 9ce61988d Return error in podman system service if URI scheme is not unix/tcp 8041df3b6 Update vendor of containers/buildah v1.28.0 d13509f27 Man pages: refactor common options: --time c16078f2d Release notes for all content before cherry-picks 3451aac35 Man pages: refactor common options: --pod aaa9f4ea9 Prevent nil pointer deref in GetImage f250560a8 Add pods created by kube play to a default network 26468c227 Man pages: refactor common options: --features 2f6c911d6 build(deps): bump github.com/opencontainers/image-spec 62bc8e3a1 Cirrus: Fix tag & branch go checks failing eaa389262 Man pages: refactor common options: --variant 9bafd9c46 Man pages: refactor common options: --compression-format eb7f54ef6 cleanup: always delete netns mount a2581abbf Adds brew info podman to issue template. 73c8416c3 Update for https://github.com/klauspost/pgzip/pull/50 02b0f9fc3 container inspect: include image digest fe3c91d58 Update vendor containers/(common,image) f304a1757 Fix typo about e2e tests name 66747351f [CI:DOCS] Add quay-description update reminder 0660f5b7a Cirrus: Combine build and code consistency tasks 6c8a11b74 Cirrus: Combine pre-test checks into build task 0e7d166ee Cirrus: Minor YAML comment/whitespace fix e7328cb97 Man pages: refactor common options: --network fe2b4df38 podman kube play allow --network host e4c0c8994 Man pages: Refactor common options: --sign-passphrase-file 309f4fb54 Man pages: refactor common options: --log-opt 6f821f03d `podman pod logs -l` no longer panics f00ceaabd vendor: bump c/common to v0.49.2-0.20220929111928-2d1b45ae2423 3b5171d0e fix "podman system prune networks" flake ebff193f8 Add test for podman run with checkpoint image 9c3d8bb49 cmd/podman: add support for checkpoint images b17d8ff46 restore: make IsCheckpointImage reusable e2fe9eaba Revert "remote: fix manifest add --annotation" 32f54a81e remote: fix manifest add --annotation 496d4c753 System tests: stop deep-checking log-level ba70dd5ec build(deps): bump github.com/container-orchestrated-devices/container-device-interface 66517d86a fix: kube play liveness probe http path f5fc0960e Default missing hostPort to containerPort is defined in kube.yaml 359e39744 libpod: Add volume support for FreeBSD abe8dad34 libpod: Factor out usage of unix.MNT_DETACH from (*Volume).unmount 9de2a5ff7 libpod: Move volume_internal_linux.go to volume_internal_common.go 065474755 libpod: Move runtime_volume_linux.go to runtime_volume_common.go 95cb14aff fix: liveness check with http probe 3e8093152 System tests: light cleanup 0fb95f95d CI: only make install.tools when needed 2e4e1bb97 podman machine ssh handling 53d604182 Cirrus: Build pkginstaller in CI c1ae7f193 Add SELinux information about boolean for using random devices f32b02c7b Bump to v4.3.0-dev f818eb4a5 Bump to v4.3.0-RC1 527fc409e Cirrus: Add golang code consistency check script f6724116a Man pages: refactor common options: --env-file 7bc36602f auto-update: validate container image fa18d35e8 Man pages: refactor common options: --env 911ceb823 Man pages: Refactor common options: --sig-proxy fde4d21be man page xref: verify page title 8c627dfb5 Contrib: Add containerfile to create podman-remote binary image 9261a5469 Remove redundant log message 52656887e compat API: network inspect do not show isolate option 337f1f586 [CI:DOCS] man pages: fix incorrect title f5e83f684 Fixup Buildah merge 54653ceeb Update vendor or containers/buildah 3a5b5d04b Fix machine starting state 69ac1e36c Cirrus: Catch use of deprecated io/ioutil package 8ff54cbe8 Fix libsubid detection 326d386ee [CI:BUILD] Copr: also define _user_tmpfilesdir for f35 2478e32ca fix restore API endpoint 6ee582315 Events for containers in pods now include the pod's ID dc05d1212 Add --pretty to podman secret inspect fc6dcd12b Add support for 'image' volume driver 5a2405ae1 Don't mount /dev/tty* inside privileged containers running systemd d5f044ee7 System tests: reenable some skipped aarch64 tests 33c31112f cli: Add signature-policy flag to podman save ba6f84666 Fix a few missed io/ioutil -> os updates fb3d55006 Improve generate systemd format 9bb51e8e9 Add labels to secrets 7cfe0328f Add support to sig-proxy for podman-remote 377773ab5 Fix podman-remote run --attach stdin to show container ID d968f3fe0 Replace deprecated ioutil bb160be12 libpod: Implement 'podman cp' for FreeBSD 88f82ceab libpod: Move jointMountAndExec to container_copy_linux.go 75d6e7bae libpod: Move part of (*Container).stat to container_stat_linux.go 0b02d4cee libpod: Move container_copy_linux.go to container_copy_common.go 24d129071 libpod: Move container_stat_linux.go to container_stat_common.go 6790deb1b man pages: document some --format options 23195646d pkginstaller: use path_helper to add podman and helpers to path dc8fdb46c label.Relabel third option is shared not recurse 049b10884 podman container clone env patch 903f551ae build(deps): bump github.com/coreos/go-systemd/v22 from 22.3.2 to 22.4.0 4a053a821 notifyproxy: don't set a read deadline 1071098ee kube play: sdnotify proxy: use a wait group 21841dc38 Default to --dns-option to match Docker and Buildah d63e49a26 remote: checkpoint --export prints a rawInput or an error on remote cfbc4aaeb Cleanup: fix problems reported by shell lint e2573b734 Fix broken titles on readthedocs 62d1c487d Man pages: Refactor common options: --dns 7d1f688ff [CI:DOCS] man pages: document some --format options 884fd4575 Revert "generate systemd: drop ExecStop" 3508bd22f Add support for podman context as alias to podman system connection 9ba034293 Man pages: refactor common options: 2 stats opts c20abf12c generate systemd: drop ExecStop 45d09e65b libpod: Make getContainerInspectData work on FreeBSD 2e4db139a libpod: Factor out platform-specfic code from generateInspectContainerHostConfig 60ef4ad1c stats: cap memory limit to the available memory cf2118eab stats: map MaxUsage to the correct value 3f8591c2f Man pages: refactor common options: --shm-size f76390d5e Man pages: refactor common options: --user e19e0de5f Introduce graph-based pod container removal 51a8635c7 Cirrus: Fix win_installer task clone failure cb6ad7631 Cirrus: Only run unit-testing on Fedora. 815655b9d Cirrus: Move gitlab test to cirrus-cron "main" 88879d588 System tests: cleanup in --format test d4a62ff93 System tests: fix three races 14e5d1c15 libpod: fix lookup for subpath in volumes 92dc61d5e libpod: rename function 42937cd9a Ensure that a broken OCI spec does not break inspect b6c75a3cc Man pages: refactor common options: --preserve-fds, -it dd53ee599 fix ci: update systemd generate unit test 4df460836 Man pages: refactor common options: --ip6 47fff4b00 improve slirp4netns allow_host_loopback docs 0aedddd3b [systemd] Ensure that podCreateArgs appear last in ExecStartPre= b47ce9a6e libpod: Add support for 'podman stats' on FreeBSD b3e978e43 libpod: Split out the common code from GetContainerStats 47bd9e811 libpod: Move stats.go to stats_linux.go for consistency 1e6da1115 pkg/rctl: Add a simple FreeBSD RCTL library 75740be39 all: stop using deprecated GenerateNonCryptoID 76eb06330 Man pages: refactor common options: --tls-verify fe04c86a2 generate systemd: fix pod dependencies d4a000312 Man pages: Refactor common options: --publish 9d41b95d7 rework --format system test dacd59424 Man pages: refactor common options: --publish-all 885bc4742 Enable github labeler, use for api-change 74e0511c9 Man pages: refactor common options: --os (pull) f30d4852e Man pages: refactor common options: --ip 0ea5080c9 generate systemd: warn on --restart without --new c8c2aab50 health checks: restart timers 908458d06 enable podman pod inspect --format test 7f8e99ded podman version: use report.Formatter over Template 0c21dcf70 podman machine info: use report.Formatter over Template e5389e98f podman info: use report.Formatter over Template 1acebdda3 tests for 15673 43f7bdf82 podman inspect return exit code > 0 on print error 00240a0e2 podman inspect: use report.Formatter over Template 377599f1f podman secret inspect: use report.Formatter over Template f5e13ded9 podman secret ls: use report.Formatter over Template 1463898b0 podman network ls: use report.Formatter over Template 90634d5ee podman volume ls: use report.Formatter over Template 20eccfc9d podman machine inspect: use report.Formatter over Template a687949db podman machine ls: use report.Formatter over Template 65e78d92c podman auto-update: use report.Formatter over Template 70e6b19d4 events: Fix spelling of newNullEventer 9457549ff build(deps): bump github.com/vbauerster/mpb/v7 from 7.5.2 to 7.5.3 09ba2e0b9 Man pages: refactor common options: --rootfs 07a8eb829 Ensure that the DF endpoint updated volume refcount e24c2f009 system tests: periodic cleanup and fixes a63a40c3e podman events --format: fix duplicated newline 2ae4ce799 fix race where podman events exits to early b3212a680 set default EventsLogFilePath on first run 12a1483e7 Improve --tmpdir and --events-backend docs 72e715a11 Use new secret store API cd32b929e libpod: runtime newEventer() cleanup 76980a222 event backend journald: fix problem with empty journal 138b09c7e event backend none: return an error when reading events c5bdb6afe fix hang with podman events file logger 56c880a7e libpod: Move ocicniPortsToNetTypesPorts and compareOCICNIPorts to networking_common.go 221c4d5f0 libpod: Move NetworkDisconnect and NetworkConnect to networking_common.go f939f3fdf libpod: Move resultToBasicNetworkConfig to networking_common.go c9de84080 libpod: Add support for getContainerNetworkInfo on FreeBSD 51c70e588 libpod: Move getContainerNetworkInfo to networking_common.go d014dca81 libpod: Move isBridgeNetMode and reloadContainerNetwork to networking_common.go 1dd0eb467 libpod: Move teardownNetwork and teardownCNI to networking_common.go 2bf050f1d libpod: Move setUpNetwork and getCNIPodName to networking_common.go 3d7f9f67a libpod: Move convertPortMappings and getNetworkOptions to networking_common.go d1414adbb libpod: Add FreeBSD implementation of container networking c5f64d9f5 libpod: Re-work the container's network state to help code sharing 36cfd05a7 libpod: Move platform-specific bind mounts to a per-platform method 369d86040 libpod: Avoid a nil dereference when generating resolv.conf on FreeBSD a1fa9faa4 Buildah treadmill script: various fixes 43da39d31 Man pages: refactor common options: --volumes-from 050ae6181 [CI:DOCS] --volume: consistent wording d935e9799 update c/storage to latest 6091ff42d Include more environment variables in conmon env. 118546c6a refactor: use `os.ReadDir` for lightweight directory reading 2c63b8439 Fix stutters b8108d06b Fix CPU usage limitation in play kube for non integer values 8466c4a19 Cirrus: Don't run win_installer in multiarch cron 6210c6723 TEMPORARY: instrumenting for 15488 3a9a7dcdc Man pages: refactor common options: --volume a82672047 build(deps): bump github.com/docker/docker 6bf8670b6 stop: fix error handling aad29e759 health check: add on-failure actions 8e1aa7af3 Fixes for vendoring Buildah eb28a1c08 update buildah and c/common to latest c7411af9e Ignore cpu realtime options on cgroups V2 systems 27be5eaaf Fix swagger documentation 9a286f712 generate, kube: plug HostUsers 1994f3823 Add --config for Docker compatibility ad63aa20d kube: plug HostUsers in the pod spec 626ee118c e2e: fix run_staticip_test in proxy environment d10e77e1b fix podman pod inspect to support multiple pods 911e4a138 specgen/generate: Factor out setting resource limits from CompleteSpec db33f06a9 fixes data race in system.Events and nil error logging f75c3181b podman: skip /sys/fs/cgroup/systemd if not present 3f0b5cd40 Man pages: refactor common options: --userns (pod) 8d40bf3f1 proper --debug/-D flag support 4fbc4b8f7 Man pages: refactor common options: --privileged f85fa9806 libpod: Filter out ENOTCONN errors when trying to close unix domain sockets 6668ac93b libpod: Factor out capabilites code from prepareProcessExec f6e3cfa53 system tests: fix systemd tests in proxy environment 744878a71 Add win-installer build/verify workflows to CI ecb9f99b8 Add new windows installer and build d759576ab emit container labels also for container exited and exec died events 9585147e1 fix Pod removal after OS hard shutdown e0d5b4e3f Change pipe wait to 20 seconds 63c779a85 Fix manpage headers 4675103c2 Man pages: refactor common options: --sysctl eb39d56df Bump github.com/docker/go-units from 0.4.0 to 0.5.0 f4c39df25 Add win-sshproxy.exe to windows client zips 40cd1c0ff Man pages: refactor common options: --device 4462305fe Update the displayed warning in documentation regarding the system reset 092690297 build(deps): bump github.com/container-orchestrated-devices/container-device-interface 77ab6125f remove SkipIfNotFedora() from events test d22aeeec2 fix podman events with custom format a9a411f8a Add generate systemd -e/--env option 274d34a25 kube play: support auto updates and rollbacks 04f0ac2aa system tests: fix some tests in proxy environment 6a3c28968 Drop stale config value resulting in asymmetric config c2c910736 CI: Cirrus setup: retry failed curls fb38838fe Man pages: refactor common options: --memory* 0df291d3b Update system reset warning message to warn against deletion of all volumes bdfc4df1f pkg/autoupdate: allow updating multiple tasks per unit cbaa78cd8 Fix list of default capabilities a3aecf0f2 libpod: Factor out setting volume atime to container_internal_linux.go 7a1abd03c libpod: Move miscellaneous file handlling to container_internal_common.go d162285f3 libpod: Don't mount /dev/shm in containers on FreeBSD 212b11c34 libpod: Factor out handling of slirp4netns and net=none eab4291d9 libpod: Move functions related to /etc bind mounts to container_internal_common.go b3989be76 libpod: Move getRootNetNsDepCtr to container_internal_common.go a148c1622 libpod: Use (*Container).addNetworkNamespace to restore checkpoint network 7518a9136 libpod: Move functions related to checkpoints to container_internal_common.go be5d1261b libpod: Move mountNotifySocket to container_internal_common.go 71e2074e8 libpod: Move getUserOverrides, lookupHostUser to container_internal_common.go 232eea5a0 libpod: Move isWorkDirSymlink, resolveWorkDir to container_internal_common.go a5ee3cb79 pkg/util: Add no-op implementation of AddPrivilegedDevices on FreeBSD 0889215d8 libpod: Use platform-specific mount type for volume mounts c1a86a8c4 libpod: Factor out platform-specific sections from generateSpec e101f4350 libpod: Move getOverlayUpperAndWorkDir and generateSpec to container_internal_common.go 6e4b5b007 libpod: Add FreeBSD implementation of container internals 8ade76e79 libpod: Move networkDisable to container_linux.go 71978b0a0 Fix #15243 Set AutomountServiceAccountToken to false b9df3a6a9 Man pages: refactor common options: --label d82a41687 Add container GID to additional groups 3e1dde10b [CI:BUILD] Copr: Define _user_tmpfilesdir for rhel 875fd4858 Fix swagger documentation 070dfa3b3 Man pages: refactor common options: --digestfile 3e744e52b System tests for podman-update c05b6e5d3 Update test per comment in #15555 3d09d47a2 Man pages: refactor common options: --device-X-Y 050f3291b implement podman update c63830166 Man pages: refactor common options: --name 4a1acccf9 Fix bind-mount-option annotation in gen/play kube 64eb07941 CI: disable flaking test on ubuntu b667d7340 libpod: Ensure that generated container names are random 5faf4eff1 Cirrus: pick UIDs/GIDs starting at 1500, not 1000 b25d62a4d [CI:BUILD] Packit: Disable until proved in other repos 84352a81c Set enableServiceLinks to false in generated yaml fed4ce0ea Inhibit SIGTERM during Conmon startup 70a599b57 Man pages: refactor common options: --signal da57065ab specgen: Use platform-specific mount type for volume mounts 0300271bf libpod/define: Make TypeBind a platform-specific constant 1ed9a4740 Man pages: refactor common options: --restart 98169c20d Add emptyDir volume support to kube play 8637548a3 docs: move userns options to separate file e015c9e3f podman: add uid and gid options to keep-id cd6260604 infra: remove dead code 62d87aa9b Man pages: refactor common options: --subXidname 08a2851ba Allow to override default username via command line 4781bc7fe specgen/generate: Add support for FreeBSD 68f4dcf00 specgen/generate: Move specConfigNamespaces to namespace_linux.go and add stubs 39880670c specgen/generate: Move SpecGenToOCI, WeightDevices to oci_linux.go and add stubs. a240146a2 e2e tests: try to deflake 5000 08af95f63 updated apiv2 tests to reflect hash compat fix c1480b39a Improved Windows compatibility for machine command 4e18c8100 Man pages: refactor common options: --http-proxy 0166feef2 specgen/generate: Move security.go to security_linux.go and add stubs a7d791202 libpod: Make sure writeConmonPipeData is called on FreeBSD d19438fa6 Man pages: refactor common options: --dns-* dcb4d4357 [makefile] disable security labeling instead of using --privileged 78aec2130 Fix #15499 already connected network b4f5a246a remove github.com/docker/libnetwork dependency 0ee9a3129 podman rmi: emit untag events 0b3184a5a pkg/domain: Add terminal support for FreeBSD 11de12097 Fix example sections to follow the same format e4f816fdb [CI:DOCS] Cirrus: Update meta-task for EC2 image e448122fe service: make move to sub-cgroup non fatal 167b026e7 [CI:BUILD] Packit: Re-introduce packit with fix-spec-file action 61d842a18 Fix template name inconsistency 39d809d3c Bump github.com/vbauerster/mpb/v7 from 7.4.2 to 7.5.2 e00272cd9 remote: fix implementation of build with --userns=auto for API 15aeccb83 libpod: UpdateContainerStatus: do not wait for container 61fc1870a cmd/podman: Enable --syslog on FreeBSD cfdca8293 Mark some of the option fields as ignored in pkg/bindings c7fda06f6 Compat API image remove events now have 'delete' status 9553f3baf Run codespell b27bfbc71 [CI:DOCS] Automatically set podman version in pkginstaller e634470fa APIv2 test cleanup, part 2 of 2 42fdc72aa Man pages: refactor common options: --systemd a5a5c6b3f Temporarily Revert "Packit: Enable scratch build testing for Fedora 36, 37 and Rawhide" 10b460512 Remove duplicate annotations in generated service yaml 61fe95bb4 Preserve all unknown PolicyRequirement fields on (podman image trust set) ad0c785f8 Reorganize the types in policy.go a bit a7e88c8da Add support for showing keyPaths in (podman image trust show) 752eceaec Support (image trust show) for sigstoreSigned entries b36a1d1b7 BREAKING CHANGE: Change how (podman image trust show) represents multiple requirements bba306788 Reorganize descriptionsOfPolicyRequirements a bit 2f6c145e8 Use the full descriptionsOfPolicyRequirements for the default scope b15afce55 Rename haveMatchRegistry to registriesDConfigurationForScope 1a97c4d9f Rename tempTrustShowOutput to entry 51064acc4 Split descriptionsOfPolicyRequirements out of getPolicyShowOutput d4c521728 Recognize the new lookaside names for simple signing sigstore 4df1e2524 Add a unit test for trust.PolicyDescription 4b2bd1036 Make the output of (podman image trust show) deterministic 35fa8c16a Make most of pkg/trust package-private 7723a1ea6 Move most of ImageEngine.ShowTrust into pkg/trust.PolicyDescription ff3f574fc Add support for sigstoreSigned in (podman image trust set) 9828bc445 Create new policy entries together with validating input e2d1bdd1d Improve validation of data in ImageEngine.SetTrust cbdbb025a Move most of imageEngine.SetTrust to pkg/trust.AddPolicyEntries 0ff0fde49 Man pages: refactor common options: log-related options 4f6807530 Add a variable for scope 4c5366ee0 Make trust.CreateTempFile private 5be00f227 Reorganize pkg/trust 1d2def8d0 Remove an unused trust.ShowOutput type df1d8d0e9 Remove commented out code 010d495a3 APIv2 test cleanup a933269ba System test cleanup 35b4f26c7 test: use private instead of slave for the mount 2fed2a282 Man pages: refactor common options: --pid ea67d84f5 test: fix comment 19a617eaa Allow colons in windows file paths 1788b26c4 Fixes isRootfull check using qemu machine on Windows 88e4e4c82 vendor containers/psgo@v1.7.3 33ab7e846 Man pages: refactor common options: --ipc ef6285a6f Man pages: refactor common options: --gidmap c64a6ba07 Man pages: Refactor common options: --workdir b0700aa48 libpod: Enable 'podman info' for FreeBSD ff20c74e9 libpod: Move getCPUUtilization to info_linux.go 694cbaca3 libpod: Read kernel version and uptime using buildah/pkg/util 877e67399 libpod: Split out platform-specific code from hostInfo e1c206d98 e2e: Add run --memory-swap test c3dc92a50 Fix rpm packaging error b4584ea85 run,create: add support for --env-merge for preprocessing vars b47c54ab6 Install podman-docker.conf on user-tmpfiles.d too 0e6a421ca Use tmpfiles.d specifiers instead of fixed path 9dca68bdd Man pages: refactor common options: --ignore d45a5d4aa Packit: Enable scratch build testing for Fedora 36, 37 and Rawhide 8b1e88bf8 Fix documentation of use of tcp connections 0f7393556 Add support for containers.conf volume timeouts 7d7aead51 Man pages: refactor common options: --device-cgroup-rule 65efcdf70 Allow podman to run in an environment with keys containing spaces 2c03681b2 Man pages: refactor common options: --disable-content-trust 8f797ab66 libpod: Add definition of containerPlatformState for FreeBSD 5c9bac141 Man pages: refactor common options: --cpus 5f719b533 podman kube play/down --read from URL 5b06b2e77 Document restrictions on transport in FROM 70e103c04 inspect, image: alias .Config.HealthCheck to .HealthCheck for compatibility f87f6d2fc Improved Windows compatibility 64339d47c Warning messages are printed and ignored if we use an unsupported option 716ac1c86 Refactor: About the RawInput process 74388fe75 Man pages: refactor common options: --pod-id-file 0f768cef3 [CI:DOCS] Update Troubleshooting.md c6488fe4a Man pages: fix sloppiness 53369aaa1 pass environment variables to container clone 46f31361f Man pages: refactor common options: --cidfile bd90818b0 Man pages: refactor common options: --creds fbe2bd87b [CI:DOCS] elaborate on image lookups of foreign platforms eee0ec97e Add quiet/q flag to podman secret ls d5f83135b version bump to 4.3.0-dev be1455ead Update "CONTRIBUTING" file with Debian/Ubuntu dependencies" f8e73eadd [CI:DOCS] Update how to enable resource limit delegation a0560eefa Man pages: refactor common options: cert-dir 8ffeb626c events: Add freebsd support for libpod/event 8aa29fd54 cmd/podman: Enable ABI and Tunnel mode for freebsd 1f76ad40a fix CI: remove hardcodeded alpine version 3bf52aa33 Add ProgressWriter to PullOptions ec9508ea1 Pass io.Writer when pushing images/manifests from command line e48681e60 Use request Context() in API handlers b9fb60c68 Simplify ImagesPull for when Quiet flag is on 09ef6fc66 podman generate kube - add actual tests 976ce76eb podman save: update --compress validation 054d64710 libpod: Build oci_conmon_common.go and oci_conmon_attach_common on FreeBSD cb4158889 libpod: Move openUnixSocket to oci_conmon_attach_linux.go d43fac20f libpod: Move moveConmonToCgroupAndSignal and GetLimits to oci_conmon_linux.go 93bad9048 libpod: Move socket label handling from oci_conmon_common.go to oci_conmon_linux.go 6791cdbdf libpod: Move rootless handling from oci_conmon_common.go to oci_conmon_linux.go 68b2450d3 libpod: Move oci_conmon_exec_linux.go to oci_conmon_exec_common.go 8d229c6cd libpod: Move oci_conmon_attach_linux.go to oci_conmon_attach_common.go bebf55c0f libpod: Move oci_conmon_linux.go to oci_conmon_common.go 20ad12274 runtime: use FindCommon from c/common 86f665a1d vendor: update containers/common 0dd2fcf71 Add podman manifest create -a. Alias for --amend:Docker compatibility aa197a65f sort hc.Binds returned from compat api 546bb3548 Add podman stats --no-trunc option f6e7b0b59 Add podman secret inspect -f alias for --format: Docker compatibility d50ff4f51 Add podman secret create -d as alias for --driver for Docker compatibility 6411f57e7 api: return imageID instead of imageName, for "Image" when Podman API is queried 2a6daa1e3 Cirrus: add podman_machine_aarch64 1572420c3 libpod: Move uses of unix.O_PATH to container_internal_linux.go 5d7778411 libpod: Move rootless network setup details to container_internal_linux.go 1b88927c2 libpod: Add stubs for non-linux builds 7e7a79b07 podman manifest create: accept --amend and --insecure flags 5f09d9b60 Fix podman kube generate --help to show correct help message 06b3a4c1c system tests: fix broken runc test f0e864075 Man pages: refactor common options: authfile a78b67a47 Man pages: refactor common options: --annotation a68e6ddbb utils: Add missing symbols for FreeBSD a6af67ca9 Cirrus: Update podman-machine comment 22f3dd4c2 Man pages: refactor common options: arch f14bf91c4 podman images and friends can take one image as argument 7e490e195 [CI:DOCS] Add .DS_Store to gitignore ab72a371b Don't warn on '/' not being shared while in a container 2d30b4dee Add compatibility support for --debug -D flag from docker bfae6bca9 build(deps): bump github.com/mattn/go-isatty from 0.0.14 to 0.0.16 b9c094a5d Add Docker compatibility for --dns-option to --dns-opt 1393038c8 pkg/domain: Add stubs for non-linux builds 65641ba8d pkg/specgen: Add stubs for non-linux builds 056917c22 Reword --exit-policy option d7f6d355b podman-kube@.service.in: Remove Restart=never option with typo bd0a8c146 added docs for installing certficate authority 5ee3522f5 pkg: Build pkg/machine on FreeBSD b806e9f36 pkg: Build pkg/util on FreeBSD 6df0ceb9a Add default value for $RM bc56ee158 Update cmd/podman/containers/restart.go f26a5246e Fix updated link to install instructions 0dbbb1cb3 Add restart --cidfile, --filter d856fb43e Add "podman kube generate" command e2a3f9592 docs: specify git protocol is not supported for github hosted repo 2935c38fd Update release notes for v4.2.0 a4efd401c remote manifest push: show copy progress 79e21b5b1 kube play: sd-notify integration 3fc126e15 libpod: allow the notify socket to be passed programatically 67a2e7351 add `pkg/systemd/notifyproxy` 245be9b39 Document behavior of --timestamp when only FROM is used e3f029cb8 build(deps): bump github.com/container-orchestrated-devices/container-device-interface 658960c97 build(deps) bump CDI dependency from 0.4.0 to 0.5.0 2bcee9f62 Man pages: refactor common options 25f6fc9c6 I believe that these tests will now run with crun. a561b7dac check memory test based on range 280f5d8cb podman ssh work, using new c/common interface d2d7898b8 Cirrus: Improve CI VM image updates for EC2 d7f134d68 Refactor common man page options, phase 2 3738221c5 test: update apply-podman-deltas for new tests 59cb410fe build: implement --cache-to,--cache-from and --cache-ttl 7bd886480 Bump to Buildah v1.27.0 1045647a4 Add interface for apple hypervisor 62e889e2b fix LogConfig type for libpod API 2e3a192bb cmd: refuse --userns if a mapping is specified 696ea7905 specgen: use sandbox id instead of name for annotation 771a35e4b pkginstaller: use correct GOARCH value in case of arm build b1d1248a1 pkg/bindings: Support writing image push progress to specified io.Writer f4c53a41c docs: update the podman logo 7ebaabb93 [CI:COPR] podman.spec.rpkg: add python3 dependency for el8 d4c6e056d Fixes #15154 Change order when config and connections are written 83bd7a5c2 e2e: Add rootless mount cleanup test cc8e4d5fe remove image podman no prune 842c6c7c6 podman generate spec 4cea8adb9 Cirrus: Run Cross builds in [CI:DOCS] mode 3102194f0 podman rmi: improve error message for build containers 5ea4ebb16 markdown-preprocess: force extra newline on comments 9964366f6 start filter flag changes e67e60226 podman info: hide `--debug` 623b0c57f pkginstaller: use correct GOARCH while building podman binaries bcfbee986 ISSUE TEMPLATE: remove `--debug` from `podman info` 81a1ea18c pkg/autoupdate: "image" policy: add deprecation comment 43cca5d97 pkg/autoupdate: decompose the update logic 0df51bb6b pkg/autoupdate: move status into `task` af3ce7084 pkg/autoupdate: document fields of `updater` 3fdd3b1ae pkg/autoupdate: remove image map from updater 82d18a86f pkg/autoupdate: use policy consts were possible 1cc933c6b pkg/autoupdate: introduce status constants 42c4c17c0 pkg/autoupdate: move authfile into `tasks` 3f1928d76 pkg/autoupdate: move more logic under `task` cfa089c36 pkg/autoupdate: s/updateImage/pullImage/ 13a8ebd09 pkg/autoupdate: repull image if other containers failed 2c999f1ec pkg/autoupdate: update unit-by-unit f8b6a81ae test/system/255-auto-update.bats: add an SELinux comment 87c0c760e pkg/autoupdate: introduce the notion of a `task` 033cc059f pkg/autoupdate: remove redundant branch 328c8ba7b pkg/autoupdate: move policy map into updater d47609773 pkg/autoupdate: introduce `updater` for shared state 79b10a7c6 readthedocs(sphinx): run the markdown preprocessor 65fb90165 hack/markdown-preprocess: allow to be executed from any dir 031b7dec7 fix hack/markdown-preprocess to support older python versions 7df8d8050 add omitempty to Secret in k8s VolumeSource 328eb2b4c Cirrus: Remove disused env. var. 1e4a141d8 Cirrus: Support EC2 instances in hack/get_ci_vm.sh 44212b90b pkginstaller: makefile improvements to avoid redownloading e6670cd29 pkginstaller: add makefile target to notarize the built pkg c5029d2ee pkginstaller: sign qemu-system-* binary for the pkg 56039cffd Refactor common options in man pages 50981cb84 skip pod resource limits test on aarch64 1dbd61653 Cirrus: Fix e2e tests for "mount_rootless_test" 3a7a275c3 Cirrus: use dnf instead of rpm to install packages 1249cbb75 add "podman kube down" command c5150a571 Add support, and default to rootless w/WSL prompt bce16a58d Disable F36 service that is incompat with WSL kern 69d7407af switch from "kube/play" endpoint to "play/kube" endpoint. 2685c8dc4 Output messages display rawInput 4dfef202c podman generate systemd --new: allow -h hostname 5ab98f2c0 test: verify manifest inspect must contain OCI annotations 3a05ddfb7 fix e2e sign tests 6c69a2ea1 podman-volume-import: Reword "precendence" c21306f06 man podman-volume-import: Clarify that merge happens d462da676 Add support for creating sigstore signatures, and providing passphrases 7075e2e1d Hide podman manifest push --sign-by on remote 68cf11611 Use signByFlagName instead of copy&pasting the string 02f570e4b Remove libpod/common 63d77da5b Update c/common to an unreleased version 5a5624f81 Update the registry server we test against from 2.6 to 2.8 7599fde73 Use existing REGISTRY_IMAGE variables in more places 24a599fe1 Add flag "--compression-format" to "podman manifest push" both in local/remote mode. 53ec47968 Add rm --filter option 68463278e Use httpasswd from the surrouding OS instead of the registry image 49bcb7eaa Bump google.golang.org/protobuf from 1.28.0 to 1.28.1 7a909a3e2 Use 8k buffer to help clients w/ broken parsing a53a0fca9 Cirrus: Minor YAML cleanup a24cc463a Remove bats installation script and make target 6764fe03d CI: new check for leftover skips/fixmes 17e3680fb Bump golang.org/x/tools from 0.1.11 to 0.1.12 in /test/tools 379bf1080 Bump github.com/containernetworking/cni from 1.1.1 to 1.1.2 de04d9d75 docs: resolve typo in create,run manpages de13dea86 With --rm option remove container if podman run fails da98c8877 Cirrus: enable Fedora 36 aarch64 tasks on EC2 389a4a6cc syncContainer: transition from `stopping` to `exited` 7fab449e3 [CI:DOCS] socket_activation.md: Add start/stop sections 8628c01f5 Fix: manifest push --rm removes a correct manifest list e4992fb81 Fix: Restore a container which name is equal to a image name 75419c5d8 When removing objects specifying --force,podman should exit with 0 56578c413 Cirrus: Use the latest imgts container c35ae7640 Add support for building macOS pkg installer 8e56a5605 machine: Fix check which is always true 1b099eec8 [CI:DOCS] podman-generate-systemd.1.md: document --sdnotify 52a4642ed Set TLSVerify=true by default for API endpoints 94e0a364a Semiperiodoc cleanup of obsolete FIXMEs 27679d80b pod create --share none should not create infra 4d18a98ec benchmarks: fix create test 4724a0000 prune filter handling 6a9338ad6 podman generate systemd: handle --sdnotify correctly ad8940cec fix container create/run throttle devices 290116bf8 integration test: fix network backend option with remote 5a80770e8 API: libpod/create use correct default umask 35035d281 container wait: improve error message cbdda4e56 docs: remove CNI word where it is not applicable 0a160fed7 Bump VMs, to Ubuntu 2204 with cgroups v1 c00ea686f resource limits for pods bc6a48eeb [CI:DOCS] Cirrus: Add prominent gitlab warning 88b57dd9f fix broken machine test 19f4a463e pkg/machine/e2e: do not import from cmd/podman 604920dd1 fix some pkg/machine/e2e test to read stderr ee35ce86d enable linter for pkg/machine/e2e dd2b79406 libpod: create /etc/passwd if missing b79ac0aca remote push: show copy progress afbfbe18a compose test: remove cni config copy 56093a3b4 compat api: always turn on network isolation for networks 80ad0cfd0 compat api: allow default bridge name for networks 3a016c6e4 e2e: show command and output when a timeout happens 138d185cc Bump github.com/BurntSushi/toml from 1.1.0 to 1.2.0 ab4c58bd3 Compat API: unify pull/push and add missing progress info c1f04a024 podman-remote pull: fix duplicate progress outputs af118f7c6 libpod: do not lock all containers on pod rm 139d65be8 Fix machine test 438fef1ca kube secret handling for podman play kube 8d190fc48 vendor: remove unused deps 013300a7c Makefile: remove building pages for man5 19495b9fc makefile: remove processing of pkg/docs f64985135 rpkg: remove usage of pkg/hooks ffe5da20a pkg,libpod: remove pkg/hooks and use hooks from c/common da33f1005 Update init ctr default for play kube 4e72aa586 fix goroutine leaks in events and logs backend 9b152ef20 Add pause/unpause --latest, --cidfile, --filter a65265942 Fix potential leak on mid-stream read error 10d6586cb Makefile: use order-only prereq for podman-remote 0a2ddc9bd [CI:DOCS] Fix typo in manifest manpage 26ae055a2 Remove return error from "containers.pause" eef39b69e "pod pause/unpause/stop" append "report.Errs" to "reports" aa1711e3d Cirrus: comment out f35 for podman4 1f0116817 system tests: new system-service bats file fdba0d790 Vendor in latests containers/storage and opencontainers/runtime-tools 82b1d85eb Print rootfs download as a specific version on Win 576321729 document isolate option for network create 1aafb01a9 buildah vendor treadmill f67ab1eb2 Vendor in containers/(storage,image, common, buildah) 5f848d89e Run codespell 18c0c19aa Add --host and -H as equivalent options to --url c9722c0b1 [CI:DOCS] socket_activation.md: fix typo and layout 5f04f9961 Machine init: create .ssh dir if not exist 56cfdffe4 [CI:DOCS] Tutorials.rst: add socket activation b513dc4c1 Clean up cached machine images d95e79ebe GHA: Fix dumb error check d385914cd Cirrus: Trigger podman-machine task by label a2f6cc74e Podman stop --filter flag 90607a6d0 Podman pull --all-tags shorthand option 3b5034e91 fix tests for "podman kube play" 8e2add770 [CI:DOCS] Update docs/tutorials/socket_activation.md 2270bc5f9 [CI:DOCS] Add socket activation tutorial ad7c54e13 man page checker: enforce stricter options format 66cb856f9 Switch to `github.com/blang/semver/v4` 0f53abd09 Fixes #14698 Use prepared image for WSL2 machine init cc2cfe060 Add podman events -f to be alias for --filter e08a77ce6 Add "podman kube play" cmd 1392922d4 [CI:DOCS] man pages: replace -c with --cpu-shares e3419c032 abi: create new cgroup when running in a container 7b4afbf62 podman: always call into SetupRootless 16b8d77f9 utils: call MaybeMoveToSubCgroup once 4b547a72a podman: move MaybeMoveToSubCgroup to utils/ 445089421 Fix last machine test bb8ff86bf Use SafeChown rather then chown for volumes on NFS c9a82d72a Docker uses "-c" to mean "--cpu-shares" in create and run e83ff8e5e [CI:DOCS] podman-create.md: replace -c with --cpu-shares da8c6a8ea CI: sanity check for desired runtime b8a7e275d [CI:DOCS] rootless_tutorial: Remove incorrect advice regarding volumes and mount points f6ed7a8c9 [CI:DOCS] man pages: remove non-existent option builtin-volume 27e12aa07 test,manifest-run: declare TARGETPLATFORM before using it ffbc2adf7 fix wrong log message on Trace level 377057b40 [CI:DOCS] Improve language. Fix spelling and typos. 3ed323e1b logformatter: link by *task ID*, not build ID 3ce0709f3 podman machine: do not commit proxies into config file Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* nerdctl: renamed upstream branch master to mainGuenther Meyer2022-12-011-1/+1
| | | | | Signed-off-by: Guenther Meyer <g.meyer@signum-media.de> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* conmon: avoid host contamination by GOCACHEChangqing Li2022-12-011-0/+2
| | | | | | | | | | | By default GOCACHE is set to $HOME/.cache. Fix: make[1]: Entering directory '/mnt/tmp-glibc/work/core2-64-wrs-linux/conmon/2.1.3+gitAUTOINC+19110c9746-r0/git/tools' | failed to initialize build cache at /home/build/.cache/go-build: mkdir /home/build: permission denied Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-distribution: do not build for riscv64Chen Qi2022-11-221-0/+2
| | | | | | | | | | | | | Currently docker-distribution has a do_compile error for riscv64. The problem could be reproduced by: MACHINE=qemuriscv64 bitbake docker-distribution So explicitly set COMPATIBLE_HOST here to avoid it building for riscv64. When someone interested in using this recipe for riscv64 fixes the compile issue, this setting could be removed. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: update to v1.24.7Bruce Ashfield2022-10-254-768/+788
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping k3s to version v1.24.7-rc4+k3s1, which comprises the following commits: e3c9d859e8 Return ProviderID in URI format e44d22ca61 Add ServiceAccount for svclb pods 2ca51a3d59 Update to v1.24.7-k3s1 (#6270) 0751b6052e Fix dualStack test 519f13e34d [Release-1.24] Replace deprecated ioutil package (#6235) c1c7b95dc0 Fix flakey etcd test 6ed1e1423f Fix helm job failure on multi-server tests 87bfc8883b Bump traefik to 2.9.1 / chart 12.0.0 06eb948c23 Fix the typo in the test 3a829ae860 Handle custom kubelet port in agent tunnel 3f5c88e4a3 Fix occasional "TLS handshake error" in apiserver network proxy. cb0f4bd49c Use structured logging instead of logrus for event recorders 44ae7aa4db Dump info on coredns when deployment rollout fails a75bbf5f4e Add ADR for ServiceLB move to CCM 69dd30433b Disable cloud-node and cloud-node-lifecycle if CCM is disabled 76f13d3558 Move servicelb into cloudprovider LoadBalancer interface 23c302dccc Move DisableServiceLB/Rootless/ServiceLBNamespace into config.Control 307e45e739 Implement InstancesV2 instead of Instances 7198eb2f74 Bump metrics-server to v0.6.1 0be4ef9213 Add flannel-external-ip when there is a k3s node-external-ip a8e0c66d1a updating to v1.24.6-k3s1 (#6164) fb823c8a5f Update to v1.24.5 (#6143) ae7d6285b6 Fix gofmt warnings 1b806f5fee Bump golang to correct version ee859f7f5a Add validation check to confirm correct golang version for Kubernetes cf684c74a3 [Release-1.24] Bulk Backport of Testing Changes b8f05e4904 Bump containerd to v1.6.8-k3s1 35e488c9c7 Bump runc to v1.1.4 e1884e4d60 Update Flannel to v0.19.2 to fix older iptables issue 79bb7bccd9 Fix e2e tests (#6018) 4c9ad2546c Fix dualStack test and change ipv6 network (#6023) 654d2b9567 CI: update Fedora 34 -> 35 (#5996) 2b35f89664 Convert install tests to run PR build of k3s (#6003) f81138402e E2E: Add support for CentOS 7 and Rocky 8 (#6015) ab2638a247 mark v1.24.4+k3s1 as stable (#6036) 7d6982d1fa Export agent.NetworkName for Windows 3e394f8ec5 The Windows kubelet does not accept cadvisor flags c3f830e9b9 Update to v1.24.4 (#6014) 035c03cfaa Remove codespell from Drone, add to GH Actions (#6004) b14cabc107 Add nightly install github action (#5998) 75f8cfb6ea E2E: Local cluster testing (#5977) 116c977fbf Convert vagrant tests to yaml based config (#5992) 30fc909581 Update run scripts (#5979) a30971efaa Updated flannel to v0.19.1 6b7b9c5aa9 Add scripts to run e2e test using ansible (#5134) 18cb7ef650 fix checkError in terraform/testutils (#5893) 77fa7fb490 Removing checkbox indicating backports since the policy is to backport everything (#5947) b7f7379157 Update MAINTAINERS with new folks and departures (#5948) db3c569b7f Add docker e2e test aadab55145 Add ADR for inclusion of cri-dockerd 4aca21a1f1 Add cri-dockerd support as backend for --docker flag b1fa63dfb7 Revert "Remove --docker/dockershim support" cf66559940 Print stack on panic abdf0c7319 Fix comments and add check in case of IPv6 only node d90ba30353 Added NodeIP autodect in case of dualstack connection 82e5da35a9 Upgrade macos-10.15 to macos-12 (#5953) 43508341c1 Bump minio to v7.0.33 1c17f05b8e Fix secrets reencryption for 8K+ secrets (#5936) 118a68c913 Updates to CLI flag grouping + deprecated flag warnings. (#5937) 13af0b1d88 Save agent token to /var/lib/rancher/k3s/server/agent-token 4c0bc8c046 Update etcd error to match correct url (#5909) db2ba7b61d Don't enable unprivileged ports and icmp on old kernels 90016c208d ADR: Depreciating and Removing Old Flags (#5890) 24da6adfa9 Move v1.24.3+k3s1 to stable (#5889) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-compose2: introduce go version of docker-composeBruce Ashfield2022-10-254-0/+1169
| | | | | | | | | | Introducing a recipe to build (and create a vendor directory) for the docker-compose2 command, which is a go implementation of he formely python3 docker-compose. This co-exists (for now) with the python version. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* tini: fix function declaration without a prototypeJose Quaresma2022-10-042-0/+75
| | | | | | | This also fix building with clang 1.15 Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* criu: 3.17 -> 3.17.1Kai Kang2022-10-044-5/+411
| | | | | | | | | | | Update criu from 3.17 to 3.17.1: * update file path and remove __pycache__ directory in do_install * rebase 0002-criu-Change-libraries-install-directory.patch * backport patches to fix build errors with glibc 2.36. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: update to 1.27.2Bruce Ashfield2022-09-281-1/+1
| | | | | | | | | | | | | Bumping buildah to version v1.25.0-420-g13622b14, which comprises the following commits: 9c640b00 tag v1.27.2 264c825f Fix broken command completion be919817 build: support --skip-unused-stages for multi-stage builds 40cd1053 release: bump to v1.27.1 4a8bf740 run: add container gid to additional groups db8d5921 release: tag v1.27.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kubernetes: fixed typosGuenther Meyer2022-09-201-2/+2
| | | | | | | | | | After upgrading from honister to kirkstone the build always failed during the package_write_ipk step, because the package name has been overwritten because of the typo in FILES. While investigating, I discovered another typo in class-devupstream. Signed-off-by: Guenther Meyer <g.meyer@signum-media.de> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker/proxy: don't use -linkshared unconditionallyJose Quaresma2022-09-202-2/+5
| | | | | | | | | | | | The linkshared is not supported in some machines like riscv64 and when supported we can use the GO_LINKSHARED instaed. So export GO_LINKSHARED on the recipe to be available for Makefile. This is currently only used in libnetwork for the proxy build, but could be used in additional locations in the future. Signed-off-by: Jose Quaresma <jose.quaresma@foundries.io> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: Add ptest support for system testsAndrei Gherzan2022-09-162-1/+39
| | | | | Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* catatonit: Integrate version 0.1.7Andrei Gherzan2022-09-161-0/+16
| | | | | | | This is useful for podman system tests. Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kubernetes: fix more TMPDIR referencesBruce Ashfield2022-09-154-19/+16
| | | | | | | | | | | | | | | | | | | | | | Changing the clone location of kubernetes allows us to remove the vendor symlink "fix". This reduces the number of TMPDIR references in the binaries. kubernetes takes care of most of the rest via using asmflags and gcflags interally which specify -trimpath, but unfortunately these flags are being recorded into the binaries and leave us with 4 references to the TMDIR: -asmflags=all=-trimpath=/opt/poky/build/tmp/work/core2-64-poky-linux/kubernetes/1_v1.24.0+git8b1b4db3834ddf7cf1b97137180f413cb9e2186f-r0/git/src/github.com/kubernetes/kubernetes/_output/local/go/src/k8s.io/kubernetes -gcflags="all=-trimpath=/opt/poky/build/tmp/work/core2-64-poky-linux/kubernetes/1_v1.24.0+git8b1b4db3834ddf7cf1b97137180f413cb9e2186f-r0/git/src/github.com/kubernetes/kubernetes/_output/local/go/src/k8s.io/kubernetes -asmflags=all=-trimpath=/opt/poky/build/tmp/work/core2-64-poky-linux/kubernetes/1_v1.24.0+git8b1b4db3834ddf7cf1b97137180f413cb9e2186f-r0/git/src/github.com/kubernetes/kubernetes/_output/local/go/src/k8s.io/kubernetes -gcflags="all=-trimpath=/opt/poky/build/tmp/work/core2-64-poky-linux/kubernetes/1_v1.24.0+git8b1b4db3834ddf7cf1b97137180f413cb9e2186f-r0/git/src/github.com/kubernetes/kubernetes/_output/local/go/src/k8s.io/kubernetes We leave these for now, as attempts to remove them have broken the build, and kubernetes uses 'go install' versus 'go build' to construct the binaries .. making our normal solutions non functional. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: fix final TMDIR referencesBruce Ashfield2022-09-154-47/+21
| | | | | | | restructure the containerd source layout to avoid symlinking vendor dependencies. This avoid go recording paths in the final binaries. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* riddler: remove TMPDIR referencesBruce Ashfield2022-09-152-21/+11
| | | | | | | | convert the riddler recipe to a structure that doesn't need a symlinked vendor directory. go records these links in the binary, making our output non-reproducible. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* oci-image-tools: fix TMPDIR referencesBruce Ashfield2022-09-143-22/+13
| | | | | | | | | | | | | | | | | The structure of the source code layout that was used by this recipe required symlinking subirectories of the source into a location that would be searched by go. While this fixes the build, and produces a working binary, go stores the location into the binary itself. Those stored paths reference the build directory, making the result not reproducible. With this change, we create an alternate structure that doesn't require symlinking and allows go to find the components during build. This results in a simpler recipe and binaries without TMPDIR references. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* oci-runtime-tools: fix TMPDIR referencesBruce Ashfield2022-09-142-22/+13
| | | | | | | | | | | | | | | | | The structure of the source code layout that was used by this recipe required symlinking subirectories of the source into a location that would be searched by go. While this fixes the build, and produces a working binary, go stores the location into the binary itself. Those stored paths reference the build directory, making the result not reproducible. With this change, we create an alternate structure that doesn't require symlinking and allows go to find the components during build. This results in a simpler recipe and binaries without TMPDIR references. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* oci-image-tools: remove TMPDIR referencesBruce Ashfield2022-09-141-0/+2
| | | | | | | Pass -trimpath to the build to remove most (but not all) TMDIR references. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* oci-runtme-tools: fix TMPDIR referencesBruce Ashfield2022-09-141-0/+1
| | | | | | pass -trimpath to remove most TMPDIR referneces. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* umoci: fix reproducibilityBruce Ashfield2022-09-131-0/+2
| | | | | | | pass -trimpath to the umoci build to remove TMPDIR references in the binaries. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* riddler: pass -trimpath to buildBruce Ashfield2022-09-132-2/+3
| | | | | | | | | | To fix most of the TMPDIR references, we pass -trimpath to the build via a new variagle GOBUILDFLAGS. There are still some debug references to TMDIR, that will be fixed at a later time. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman-tui: reproducibility, pass -trimpath to fix QA warningsBruce Ashfield2022-09-131-1/+1
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-distribution: pass -trimpath to fix reproducibility warningsBruce Ashfield2022-09-131-0/+1
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* skopeo: reprodicibility enable trimpath and stripBruce Ashfield2022-09-132-1/+33
| | | | | | | | | Skopeo is throwing TMPDIR QA warnings due to paths being built into the binaries. We fix this by creating a new variable to pass -trimpath into the build, and also by defining the linker flags -w -s to strip source/path information from the binaries. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: reproducibility add -trimpath to go -> $GO patchesBruce Ashfield2022-09-133-7/+7
| | | | | | | With this, we build and package docker without QA warnings due to references to TMPDIR. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: pass -trimpath to improve reproducibilityBruce Ashfield2022-09-121-1/+1
|
* podman-tui: add README with rendering tipsBruce Ashfield2022-09-121-0/+6
| | | | Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: improve reproducibilityBruce Ashfield2022-09-123-35/+33
| | | | | | | | | | | | | | | | | | | | | We get the following QA warning on build: WARNING: containerd-opencontainers-v1.6.8+gitAUTOINC+579a6380ec-r0 do_package_qa: QA Issue: File /usr/bin/containerd-shim-runc-v2 in package containerd-opencontainers contains reference to TMPDIR File /usr/bin/containerd-ctr in package containerd-opencontainers contains reference to TMPDIR File /usr/bin/containerd-shim-runc-v1 in package containerd-opencontainers contains reference to TMPDIR File /usr/bin/containerd in package containerd-opencontainers contains reference to TMPDIR File /usr/bin/containerd-shim in package containerd-opencontainers contains reference to TMPDIR [buildpaths] This is the first step in fixing the QA warning, by dropping our debug patch, passing -trimpath and not defining GO_DEBUG. This leaves a final reference similar to: path _/opt/poky/build/tmp/work/core2-64-poky-linux/containerd-opencontainers/v1.6.8+gitAUTOINC+579a6380ec-r0/git/src/import/cmd/ctr That is being stored in the .rodata of the binaries. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* nerdctl: reproducibility, path -trmpath to buildBruce Ashfield2022-09-121-1/+1
| | | | | | | To avoid go embedding references to the build dir into binaries, we pass -trimpath to the build. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: fix the version of k3sVasileios Anagnostopoulos2022-08-311-2/+2
| | | | | | | | | | When executing `k3s --version` the mentioned version `k3s version dev (HEAD)`. The root cause is, that the BUILD_FLAGS were not the expected ones. After that patch, the k3s is reporting the correct version. Signed-off-by: Vasileios Anagnostopoulos <vasileios.anagnostopoulos@siemens.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: fix compilation error for ARM/ARM64Chen Qi2022-08-252-0/+50
| | | | | | | | | | | | | | | | | There's compilation error when building lxc for ARM/ARM64 BSPs. The error message is as below: | ../git/src/lxc/cgroups/cgfsng.c:1234:111: error: incompatible type for argument 10 of 'sd_bus_call_method_asyncv' The 10th argument is of type va_list but NULL is supplied, thus causing compilation error. So we use sd_bus_call_method_async to replace the asyncv one to solve this issue. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: replace GOBUILDFLAGS patchPascal Bach2022-08-252-110/+3
| | | | | | | | The GOBUILDFLAGS patch is replaced by explicitly setting BUILDFLAGS="${GOBUILDFLAGS}" in the recipe. Signed-off-by: Pascal Bach <pascal.bach@siemens.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman-tui: update to v0.5.0Bruce Ashfield2022-08-251-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping podman-tui to version v0.5.0-40-g8f2b80f, which comprises the following commits: 95abf3a Bump github.com/containers/podman/v4 from 4.1.1 to 4.2.0 868a762 Bump github.com/containers/buildah from 1.26.4 to 1.27.0 7b02fb5 Bump github.com/containers/buildah from 1.26.2 to 1.26.4 0932c65 Bump github.com/containers/common from 0.48.0 to 0.49.0 7fff27e Fix flaky tests 87589d6 Fix typos 24a3fff Bump github.com/containers/storage from 1.41.0 to 1.42.0 6795a8f Bump github.com/BurntSushi/toml from 1.1.0 to 1.2.0 e4f465b Bump github.com/onsi/gomega from 1.19.0 to 1.20.0 85a603b Bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 8829267 Running golangci-lint on pdcs/pods, pcs/containers d027158 running golangci-lint on pdcs/images 431dbd7 Makefile target to run codespell 2408394 running golangci-lint on pdcs/sysinfo a4f7c62 running golangci-lint on pdcs/networks 7b35f80 running golangci-lint on pdcs/volumes 9f0fdd5 Bump github.com/containers/buildah from 1.26.1 to 1.26.2 08f96d0 Bump github.com/navidys/tvxwidgets from 0.1.0 to 0.1.1 9a4dfd5 running golangci-lint on pdcs/registry and pdcs/utils a158603 Makefile - install golangci-lint and codespell tools 843dee3 Bump to v0.6.0-dev e0db08b Bump to v0.5.0 117087b Bump github.com/spf13/cobra from 1.4.0 to 1.5.0 3e4d6c3 code coverage for network and volume create dialogs ac570c3 github workflow: adding templates for bug report and features 082cf8e docs: adding security policy 1339a05 Bump github.com/containers/podman/v4 from 4.1.0 to 4.1.1 9f92e1c new feature - image push 666026d Bump github.com/docker/docker 6e50e26 show confirmation dialog in the center of different views a55466b disk usage dialog table headers color update 8f21399 docs update - Mac build 0d13526 Esc key shall not close dialogs if its dropdown widgets has focus a957454 docs update - Mac build d6d81f6 Bump github.com/rs/zerolog from 1.26.1 to 1.27.0 95187ec infobar + help color update for headers c25c20e using images.GetImage function for image inspect 83b1ac5 new feature - container commit 509532b image history dialog update a4488bf update button labels based on their function c15c697 makefile update - darwin build ce6a55f Bump to v0.5.0-dev fafb1dc Bump to v0.4.0 bc9c56d running codespell a23b601 code coverage for ui/utils 36230ca CI setup Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crun: update to v1.5Bruce Ashfield2022-08-251-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping crun to version 1.5-41-gce7533a, which comprises the following commits: ad9008b copr: depend on wasmtime-c-api for shared lib 972d595 krun: add support for krun-sev e539aae tests: fix fedora rawhide mockbuild 559902d autobuild copr rpms with wasmtime support d39f45d wasmtime: always grant filesystem capability for wrkdir inside container b937322 wasmtime: inherit argv from handler argument instead of process 477ecc8 crun: restore will work on realpath 1083f9d tests,podman: skip push to local registry with authorization 29599a5 tests: disable login/logout tests 8ff3eba rpm/Makefile: Fix copr build (follow-up on #979) f5244c7 rpm/Makefile: install all dependencies on mock environments a37b06a rpm/Makefile: install git-core in tarball-prep ab18c71 cgroup: change delegate cgroup after cgroupns creation 4716692 cgroup: add new function libcrun_cgroup_enter_finalize 9139896 tests: disable broken test a45faa2 rpm/Makefile: autobuild rpms on podman-next copr 7ea284f src: make some error messages lower case 43f420a syntax-check: enable prohibit atoi and atof 9920e7b wasmer: move definitions earlier 54e2519 wasmer: drop not needed indentation 54fe445 wasmer: fix errors return code 86f9a5c syntax-check: enable prohibit always true header tests a07112c syntax-check: enable no period at end of message check 2656de5 maint.mk: update from upstream gnulib 3df1458 linux: fix build with glibc 2.36 14b2102 pidfd: fallback on ENOSYS fd01ef4 nix: allow to pass extra args to the runtime a91e905 NEWS: tag 1.5 2c94290 nix: update nix dependencies 76ead7b wasm: add support for running containers using wasmtime 88e8710 python: unset LIBCRUN_RUN_OPTIONS_PREFORK for run 9ceba95 crun: move config_file* to container 639c98f cgroup: add fallback to io.weight c75b58d wasm,wasmedge: drop support for experimental WasmEdgeProcess Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-tools: update to v1.24.2Bruce Ashfield2022-08-252-13/+16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping cri-tools to version v1.24.2-35-g77d02a03, which comprises the following commits: a685ed61 No truncate PodID in ps command if --no-trunc exists 90214b0c Bump version in install section to 1.24.2 on README acf387b3 Update crictl pods to show pod name e7c20ee1 Switch to golang native error wrapping cee70655 Bump github.com/urfave/cli/v2 from 2.11.0 to 2.11.1 e8133ffb Bump github.com/onsi/gomega from 1.19.0 to 1.20.0 b8543347 Bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 57da46e7 Add documentation about 'statsp' command 6182e3ce Implement checkpoint command 8152f295 Bump github.com/urfave/cli/v2 from 2.10.3 to 2.11.0 a0a19a36 Bump github.com/urfave/cli/v2 from 2.10.2 to 2.10.3 4bb67144 Validate container status in volume mount tests 4da8fc8d Switch to go 1.18 for GitHub actions 1f6b4299 Bump github.com/urfave/cli/v2 from 2.10.1 to 2.10.2 99b030fe Switch to go 1.18 as requirement 55020abc Bump github.com/urfave/cli/v2 from 2.8.1 to 2.10.1 1e69ea9c Bump github.com/opencontainers/runc from 1.1.2 to 1.1.3 b9de22b0 Bump github.com/docker/docker d7fb1f5b Fix timeout for exec sync ecb5c7f8 Fix cri-dockerd build d2da6561 Bump github.com/urfave/cli/v2 from 2.8.0 to 2.8.1 ce68c70c skip tests for dockershim 4f533d58 add-list-stat-test: add tests for list stats db554dad Bump github.com/urfave/cli/v2 from 2.6.0 to 2.8.0 d000ae7a docs: update the version to the latest acf82056 Bump github.com/docker/docker a7df3acb Bump github.com/onsi/ginkgo/v2 from 2.1.3 to 2.1.4 603495f3 Bump github.com/opencontainers/runc from 1.1.1 to 1.1.2 8c659770 Remove selinux build tag d4fe3e7a cmd/critest: fix empty ginkgo flag's value issue 4ee0c367 Add lifecycle index in benchmark update messages. 8ba9205d Skip benchmarks if associated resource number is not set. 2ba1d0e3 Standardize image lifecycle and listing benchmarks. 64263891 Parametrize benchmarking-related timeouts. 4355d842 Pass verbose flag when querying Container/Pod statuses. b40d492e Formalize mechanism for recording/managing benchmark results. 2dd37ab8 Parametrize benchmark settings. 52e0c3dc Rewrite pod.go f0f71212 Vendor onsi/gomega/gmeasure 21aebcad Bump github.com/docker/docker 81036863 Bump github.com/urfave/cli/v2 from 2.5.1 to 2.6.0 f9710f79 Vendor Kubernetes v1.24.0 3ceb4eee Fixes the incubator project reference 1a168cb6 update containerd socket in windows 54148d3d Bump github.com/opencontainers/runc from 1.1.0 to 1.1.1 ce9a5aec Switch to ginkgo/v2 9e9d83d6 Bump github.com/urfave/cli/v2 from 2.4.0 to 2.5.1 a156899c Bump github.com/opencontainers/selinux from 1.10.0 to 1.10.1 4291d65c Bump github.com/docker/docker 5fe1f012 Bump github.com/onsi/gomega from 1.18.1 to 1.19.0 dd6467a3 install CNI on linux abeab06b Fix setup-gcloud action by referencing `v0` 69579189 Fix CRI-O tests 511767e5 Add CRICTL_AUTH env var option to crictl pull 1616f258 Make RPCs CRI v1 and v1alpha2 compatible 769acd39 Bump github.com/urfave/cli/v2 from 2.3.0 to 2.4.0 e5877df5 Bump github.com/docker/docker 6a2a5284 Bump google.golang.org/grpc from 1.44.0 to 1.45.0 e27bb02f Bump github.com/docker/distribution 3e01b9f2 fix seccomp test case for arm64 c6d3e52e Add `crictl statsp` command Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o: update to 1.25-tipBruce Ashfield2022-08-251-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping cri-o to version v1.24.0-292-gda7b5b1d9, which comprises the following commits: 4b6936f8f bump cri-api to k8s 1.25 rc0 1988e00f0 server: handle exit files asynchronously 45a55ed20 server: remove exit file in exit monitor ced6fdaca server: cleanup exit monitor function 1e27ac3eb server: allow for kubelet to specify -1 for swap 3e7fd1de9 Add packit configuration 66b2ccc34 fix lint errors from 1.19 bump 9b49723de golangci: drop nolintlint 1e2f0055f bump golangci-lint to 1.48.0 7fe1f1b9e dependencies: update with new ci c42d0d464 bump golang to 1.19 2426f669f fix documentation issue in contrib/cni/README.md: build-output changed cc933c7a8 build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc 30bb89319 utils/RunUnderSystemdScope: fix 3e0aa19bd oci: take opLock for UpdateContainer a560c8d8f node_e2e_installer: use runc/crun from PATH 1c4d63c41 build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc 3d0fc3630 fix documentation issues in contrib/cni/README.md 33fbbcde1 Fix possible panic in pod runtime attach 784245033 Pin containers/* dependencies e82c16b16 migrate image_list to quay.io f7d02e2c4 add critest-images mirror dc5769f4f add GCP vagrant environment 76c96ce83 build(deps): bump github.com/containernetworking/cni from 1.1.1 to 1.1.2 2e8612255 Add bundle e2e and integration tests using conmonrs d4530cb40 Fix nginx based integration tests 45badb2a0 add vagrantfile to test CI and fixes 7f4ddeca6 build(deps): bump sigs.k8s.io/release-utils from 0.7.2 to 0.7.3 19ae364e0 Enter mount namespace if set in $KUBENSMNT environment 483fd0cf0 bats: Alter cleanup_testdir to handle nested mountpoints 65b52fb80 highperfhooks: avoid unbound growth of irqbalance e09fe0efa Add support for max log size in runtime pod d3cd7a07b unzips cri-o to the go dir c60fd9473 Bump crun: 1.4.5 -> 1.5 c2984518d build(deps): bump github.com/urfave/cli/v2 from 2.11.0 to 2.11.1 c42240355 build(deps): bump github.com/BurntSushi/toml from 1.1.0 to 1.2.0 9d5abc2ad Add Lyft to adopters eff3a3191 build(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 74fa8341f Re-enable conmon-rs attach test ad5f650bd Remove etcd dependency replacement f6d6ba4c7 updates ansible for use with prow instead of jenkins d8e76f15e copies test/integration to test/ci 35f4900ba Pin sigs.k8s.io/bom to v0.3.0 edb06fbf9 Switch to `github.com/blang/semver/v4` 6a1b6b581 Fallback to default seccomp profile if not found on disk 639843795 build(deps): bump google.golang.org/grpc from 1.47.0 to 1.48.0 7dc5333c6 build(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc 222051ffb build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc 45304727c build(deps): bump github.com/urfave/cli/v2 from 2.10.3 to 2.11.0 084dbcf4d build(deps): bump github.com/emicklei/go-restful 8c66b2aa3 remove succinct option to fix jenkins 4f75284ff build(deps): bump k8s.io/klog/v2 from 2.70.0 to 2.70.1 4ca27d0b0 Remove enable_custom_shm_size f71d92ed8 Retry dependency report push if failed 410258613 Fix Unmasked ProcMountType 8e6895172 Add a unit test around configuring taskset on InfraCtrCPUSet 5a59d9f58 Add test for "Canonize selinux label" Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to 1.6.8Bruce Ashfield2022-08-251-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping containerd to version v1.6.8-8-g579a6380e, which comprises the following commits: 1efd8b947 ci: remove GOPROXY environment variable due to https://github.com/go-yaml/yaml/issues/887 0448673af Do not append []string{""} to command to preserve Docker compatibility 5c230ece0 Fix cleanup in critest ed9d3dc37 oci: WithDefaultUnixDevices(): remove tun/tap from the default devices 3364f411e Prepare release notes for v1.6.8 390920429 release workflow: remove Go setup action cf48ba6e8 release workflow: increase timeout to 30 minutes 57873e652 release: rollback Ubuntu to 18.04 (except for riscv64) eccb82f6d Update release build timeout to 20 minutes 6a854d4b5 Update mailmap 61612e1a2 Prepare release notes for 1.6.7 d199ee462 Update golang to 1.17.13 0578d20c5 Change os.Stderr reassign for Windows service 12cae4961 Update Vagrant CI to macos-12 bc4091aae chore: bump macos runner version cb73bd050 Windows HostProcess container CRI stats test ac388525a Add validations for Windows HostProcess CRI configs 0007f40fe [release/1.6] go.mod: Bump hcsshim to v0.9.4 c9607e78c Update Fedora version to 36 2952b66c0 CI: add riscv64 builds 6b2dc9a37 release/Dockerfile: update Ubuntu to 22.04 for supporting riscv64 745dc07c4 seccomp: support riscv64 c2f841f21 Create ppc64le release 86b55bd8d seccomp: allow clock_settime64 when CAP_SYS_TIME is added f3da3e51f allow ptrace(2) by default for kernel >= 4.8 aa1101068 [release/1.6] update golang to 1.17.12 37dfc5c9d [release/1.6] Fix WWW-Authenticate parsing Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* conmon: update to 2.1.3Bruce Ashfield2022-08-251-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | Bumping conmon to version v2.1.3-5-g19110c9, which comprises the following commits: 636e239 Use /usr/bin/env to locate bash d7625dc Cirrus: Add meta task to keep CI VM images alive ab52a59 VERSION: bump to 2.1.3 a627951 meson: build with seccomp if available 1750b2d Fix build on FreeBSD-13.0 0a2e0db Reduce the amount of duplicated code between Linux and FreeBSD 32816bd Port conmon to FreeBSD b1ca51f gh actions: bump versions 05163fd bump golang in gh action to 1.18 d91cc43 Stop using g_unix_signal_add() to avoid threads 2bc95ee [Fixup #342] `log-size-global-max` Should Be`log-global-size-max` 99eac3e bump to v2.1.2 143121b log_global_max: ignore if negative 98058b1 add log-global-size-max option to limit the total output conmon processes 65b6eaa bump to v2.1.1 81086b7 journald: print tag and name if both are specified c61367c logging: add missing static keyword 0c3412a drop some logs to debug level 4c41ec2 meson: Handle journald Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: update to 1.27Bruce Ashfield2022-08-251-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping buildah to version v1.25.0-411-gdb8d5921, which comprises the following commits: db8d5921 release: tag v1.27.0 50a4acb0 make,cross: ignore loong64 from target list 15b0a250 Allow chflags operations inside the container fb6da991 Don't try to call runLabelStdioPipes if spec.Linux is not set e8c7e3fe build(deps): bump github.com/golangci/golangci-lint in /tests/tools b7f51ea3 build: support filtering cache by duration using --cache-ttl b218fdf3 build: support building from commit when using git repo as build context 99488b06 build: clean up git repos correctly when using subdirs 8bbeed70 integration tests: quote "?" in shell scripts 5f34c5e2 Fix a copy/paste error f96bf7c5 build(deps): bump github.com/golangci/golangci-lint in /tests/tools 50183aa0 vendor c/common@v0.49.1 dfba70e9 test: manifest inspect should have OCIv1 annotation 873a9e1f vendor: bump to c/common@87fab4b7019a 81b4edfa Failure to determine a file or directory should print an error 5e3f7cea build(deps): bump github.com/containernetworking/cni from 1.1.1 to 1.1.2 ad4976d0 refactor: remove unused CommitOptions from generateBuildOutput dbd22863 stage_executor: generate output for cases with no commit adbd7ef5 stage_executor, commit: output only if last stage in build bb149ea6 Use errors.Is() instead of os.Is{Not,}Exist ac5d37c0 Minor test tweak for podman-remote compatibility a47dee2c Cirrus: Use the latest imgts container 239c06cf imagebuildah: complain about the right Dockerfile bef61d79 tests: don't try to wrap `nil` errors c9407334 cmd/buildah.commitCmd: don't shadow "err" 36006c9a cmd/buildah.pullCmd: complain about DecryptConfig/EncryptConfig 0ded0dca Fix a copy/paste error message aed3fdc7 Fix a typo in an error message 6f660bde build,cache: support pulling/pushing cache layers to/from remote sources 6c96dd95 Update vendor of containers/(common, storage, image) ac4b39a2 Rename chroot/run.go to chroot/run_linux.go 79bc4a38 Don't bother telling codespell to skip files that don't exist 62954c89 Set user namespace defaults correctly for the library c79f7272 imagebuildah: optimize cache hits for COPY and ADD instructions 6841f92e Cirrus: Update VM images w/ updated bats 6243a938 build(deps): bump github.com/onsi/gomega from 1.19.0 to 1.20.0 eb4ec4a9 docs, run: show SELinux label flag for cache and bind mounts a51011f4 build(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 05d48980 imagebuildah, build: remove undefined concurrent writes d0a675ed bump github.com/opencontainers/runtime-tools dc1bc10d Add FreeBSD support for 'buildah info' 80870d50 Vendor in latest containers/(storage, common, image) 4387e7e3 Add freebsd cross build targets d0ef62ae Make the jail package build on 32bit platforms 36d95b05 Cirrus: Ensure the build-push VM image is labeled e1f3468a GHA: Fix dynamic script filename 7c0f2253 Vendor in containers/(common, storage, image) 6fb7bb4b Run codespell 2c8436a7 Remove import of github.com/pkg/errors 34026835 Avoid using cgo in pkg/jail ad389b19 Rename footypes to fooTypes for naming consistency cdac8e1b Move cleanupTempVolumes and cleanupRunMounts to run_common.go 4b7c61d5 Make the various run mounts work for FreeBSD 57a73847 Move get{Bind,Tmpfs,Secret,SSH}Mount to run_common.go 0832ea2f Move runSetupRunMounts to run_common.go 9c808c76 Move cleanableDestinationListFromMounts to run_common.go c21f4bd2 Make setupMounts and runSetupBuiltinVolumes work on FreeBSD cf079d01 Move setupMounts and runSetupBuiltinVolumes to run_common.go 417c6018 Tidy up - runMakeStdioPipe can't be shared with linux 95a18737 Move runAcceptTerminal to run_common.go 1ab56715 Move stdio copying utilities to run_common.go ba5ff64d Move runUsingRuntime and runCollectOutput to run_common.go b290c861 Move fileCloser, waitForSync and contains to run_common.go bff1c193 Move checkAndOverrideIsolationOptions to run_common.go 75ae8040 Move DefaultNamespaceOptions to run_common.go acdf4777 Move getNetworkInterface to run_common.go 8e36f5fc Move configureEnvironment to run_common.go f68f1092 Don't crash in configureUIDGID if Process.Capabilities is nil 7ea97716 Move configureUIDGID to run_common.go a405d62c Move runLookupPath to run_common.go 4d9a035e Move setupTerminal to run_common.go 42010799 Move etc file generation utilities to run_common.go 1c0a08e3 Add run support for FreeBSD 3faa6984 Add a simple FreeBSD jail library 6bb4efdb Add FreeBSD support to pkg/chrootuser 76a0c821 Sync call signature for RunUsingChroot with chroot/run.go 8dca0a65 test: verify feature to resolve basename with args f146c718 vendor: bump openshift/imagebuilder to master@4151e43 d300c614 GHA: Remove required reserved-name use 35bfc66a buildah: set XDG_RUNTIME_DIR before setting default runroot 9d7ac758 imagebuildah: honor build output even if build container is not commited 9445aa12 chroot: honor DefaultErrnoRet 48c888a6 [CI:DOCS] improve pull-policy documentation 0e745d15 tests: retrofit test since --file does not supports dir ce384684 Switch to golang native error wrapping 825561b2 BuildDockerfiles: error out if path to containerfile is a directory 066b5448 define.downloadToDirectory: fail early if bad HTTP response fc9255f5 GHA: Allow re-use of Cirrus-Cron fail-mail workflow 7a22c40e add: fail on bad http response instead of writing to container dab6d12e build(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0 263f5adc [CI:DOCS] Update buildahimage comment 252bf17b lint: inspectable is never nil 869c705d vendor: c/common to common@7e1563b 5686018e build: support OCI hooks for ephemeral build containers c0be04e6 [CI:BUILD] Install latest buildah instead of compiling 1fd5d73f Add subid support with BuildRequires and BUILDTAG [NO NEW TESTS NEEDED] d6340b6c build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.7.5 ffce8b36 Make sure cpp is installed in buildah images 404852be demo: use unshare for rootless invocations 198b4c36 buildah.spec.rpkg: initial addition 74f2c9bd build: fix test for subid 4 d3eeea37 build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0 20c5c5c6 build, userns: add support for --userns=auto ecae0e2f Fix building upstream buildah image e54c9efa Remove redundant buildahimages-are-sane validation cf6b1bcf Docs: Update multi-arch buildah images readme 0a1d828d Cirrus: Migrate multiarch build off github actions 0d3246ff retrofit-tests: we skip unused stages so use stages 08bc5d91 stage_executor: dont rely on stage while looking for additional-context 25f9ff84 buildkit, multistage: skip computing unwanted stages dc07d9ff More test cleanup b23a20ee copier: work around freebsd bug for "mkdir /" f577fc4f Replace $BUILDAH_BINARY with buildah() function 0b7c5002 Fix up buildah images be3b9c36 Make util and copier build on FreeBSD 9042b86b Vendor in latest github.com/sirupsen/logrus 8bbe7a60 build(deps): bump github.com/opencontainers/runc from 1.1.2 to 1.1.3 8d9e9d6f Makefile: allow building without .git 2d4d2824 run_unix: don't return an error from getNetworkInterface 79bab77a run_unix: return a valid DefaultNamespaceOptions 39880517 Update vendor of containers/storage c06c6dbb chroot: use ActKillThread instead of ActKill ed4412b9 use resolvconf package from c/common/libnetwork ee3d131d update c/common to latest main 7cc5f198 copier: add `NoOverwriteNonDirDir` option 3aea4093 Sort buildoptions and move cli/build functions to internal d452494d build(deps): bump github.com/fsouza/go-dockerclient from 1.8.0 to 1.8.1 9c7ce03f build(deps): bump github.com/docker/docker f2dae989 build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2 2182e0af build(deps): bump github.com/containerd/containerd from 1.6.5 to 1.6.6 236c0bab Fix TODO: de-spaghettify run mounts 6225b23d Move options parsing out of build.go and into pkg/cli 7cf6dbd4 [CI:DOCS] Tutorial 04 - Include Debian/Ubuntu deps 495add93 build, multiarch: support splitting build logs for --platform 1ac1f035 build(deps): bump github.com/containerd/containerd from 1.6.4 to 1.6.5 be9ef3b6 [CI:BUILD] WIP Cleanup Image Dockerfiles 0bcc7c5e build(deps): bump github.com/fsouza/go-dockerclient from 1.7.11 to 1.8.0 60b625ce cli remove stutter e80fed06 docker-parity: ignore sanity check if baseImage history is null c61ecc69 build, commit: allow disabling image history with --omit-history 4cf93e3e Fix use generic/ambiguous DEBUG name 73a5ec42 build(deps): bump github.com/containernetworking/cni from 1.1.0 to 1.1.1 1a79fbed Cirrus: use Ubuntu 22.04 LTS 0986de40 Fix codespell errors 00d46292 Remove util.StringInSlice because it is defined in containers/common b3fbb598 buildah: add support for renaming a device in rootless setups 149880a1 squash: never use build cache when computing last step of last stage 7cc18838 Update vendor of containers/(common, storage, image) f7ea2d84 build(deps): bump github.com/golangci/golangci-lint in /tests/tools c2adbade buildkit: supports additionalBuildContext in builds via --build-context f4ad4faa test cleanup 73e0ad71 buildah source pull/push: show progress bar 45bd47b4 run: allow resuing secret twice in different RUN steps 7dbc5ce8 test helpers: default to being rootless-aware c80e6a31 Add --cpp-flag flag to buildah build e4d25d53 build(deps): bump github.com/golangci/golangci-lint in /tests/tools 784a8c4c build: accept branch and subdirectory when context is git repo 177141d4 build(deps): bump github.com/docker/docker 82e9c841 Vendor in latest containers/common 714fbed4 build(deps): bump github.com/opencontainers/runc from 1.1.1 to 1.1.2 8d57bff9 vendor: update c/storage and c/image 1c1ba51c build(deps): bump github.com/golangci/golangci-lint in /tests/tools 5e338aad Fix gentoo install docs f45fbf77 build(deps): bump github.com/docker/docker cf2bb5a1 copier: move NSS load to new process 063abf6f Add test for prevention of reusing encrypted layers fccc7895 Make `buildah build --label foo` create an empty "foo" label again 6750810f Bump to v1.27.0-dev 0a9d6e6e Bump to v1.26.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: update to 4.2Bruce Ashfield2022-08-253-131/+26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We refresh one patch, and drop another that is already part of the 4.2.x release series. Bumping libpod to version v4.2.0-8-g754ec89a8, which comprises the following commits: eb2496a77 Skip / update some tests under runc eba1f7749 Bump to v4.2.1-dev 7fe5a419c Bump to v4.2.0 754e32056 Final release notes for v4.2.0 4900394c8 Document behavior of --timestamp when only FROM is used b619c7a72 check memory test based on range a3778b051 specgen: use sandbox id instead of name for annotation fa1085ed0 cmd: refuse --userns if a mapping is specified 91a1f3022 e2e: Add rootless mount cleanup test 297c72238 [CI:COPR] podman.spec.rpkg: add python3 dependency for el8 a6ea3325a start filter flag changes a19c5a252 Cirrus: Run Cross builds in [CI:DOCS] mode e776425e5 podman info: hide `--debug` 53a631ca2 ISSUE TEMPLATE: remove `--debug` from `podman info` a7d932422 Cirrus: use dnf instead of rpm to install packages 8c36b8c52 Cirrus: Fix e2e tests for "mount_rootless_test" bd3e36040 podman generate systemd --new: allow -h hostname 5c17d1b14 test: verify manifest inspect must contain OCI annotations 6b2bbd2d1 podman-volume-import: Reword "precendence" 54ee42331 man podman-volume-import: Clarify that merge happens c5c0efc95 podman generate systemd: handle --sdnotify correctly 7e7951145 Bump google.golang.org/protobuf from 1.28.0 to 1.28.1 8b9e5fb08 Use 8k buffer to help clients w/ broken parsing 7efd81cb8 With --rm option remove container if podman run fails 346b22f07 Bump golang.org/x/tools from 0.1.11 to 0.1.12 in /test/tools 5b5e53d70 syncContainer: transition from `stopping` to `exited` b7feafcb0 Fix: manifest push --rm removes a correct manifest list 24f219efb Fix: Restore a container which name is equal to a image name 32848b95f When removing objects specifying --force,podman should exit with 0 312bef288 test: update apply-podman-deltas for new tests 9b0a1fa75 build: implement --cache-to,--cache-from and --cache-ttl a382bd329 vendor: bump buildah to v1.27.0 916d51bd0 test: update apply-podman-deltas for new tests 3a239947a build: implement --cache-to,--cache-from and --cache-ttl 6b2512f67 vendor: bump buildah to v1.27.0 6beb3f208 Fixes #15154 Change order when config and connections are written eab03100f Add support, and default to rootless w/WSL prompt f826ed584 Disable F36 service that is incompat with WSL kern d16b42f26 pkginstaller: use correct GOARCH value in case of arm build 0593ceb01 Cirrus: Update DEST_BRANCH to v4.2 fb8584332 Cirrus: Improve CI VM image updates for EC2 d5793db28 Bump back to v4.2.0-dev 7e1f3106f Bump to v4.2.0-rc3 1b7e16654 v4.2.0-rc3 release notes bf2a53a2e pkginstaller: use correct GOARCH while building podman binaries d4481a317 pkginstaller: makefile improvements to avoid redownloading 1b3844f65 pkginstaller: add makefile target to notarize the built pkg 64db955e0 pkginstaller: sign qemu-system-* binary for the pkg 9a820b480 Add support for building macOS pkg installer 5c95c0920 Add support for creating sigstore signatures, and providing passphrases 0aebdb687 Hide podman manifest push --sign-by on remote b2b3edaca Use signByFlagName instead of copy&pasting the string 49d40293b Remove libpod/common eacee60c8 Update c/common to an unreleased version 62cc871c6 Update the registry server we test against from 2.6 to 2.8 52db76373 Use existing REGISTRY_IMAGE variables in more places 230363225 Use httpasswd from the surrouding OS instead of the registry image 74155705e fix e2e sign tests 983cfb90e Final v4.2.0-RC2 release notes bf6f79630 Skip one failing test on Ubuntu 25efc9b2e Fix incorrect release note about regexp 4acc14b4e Bump to v4.2.0-dev 81005b8d8 Bump to v4.2.0-RC2 6fafe120c Final release notes for v4.2.0-RC2 990ef3cf6 [CI:DOCS] podman-generate-systemd.1.md: document --sdnotify c85722eb9 pod create --share none should not create infra c3e0f8ebe machine: Fix check which is always true e6ebfbd1e Set TLSVerify=true by default for API endpoints 64bc2ee97 Semiperiodoc cleanup of obsolete FIXMEs b339045db benchmarks: fix create test fd1f5f55a integration test: fix network backend option with remote c7fef7316 docs: remove CNI word where it is not applicable 976f818f1 libpod: do not lock all containers on pod rm 772e883f8 container wait: improve error message 206f11d4f Makefile: use order-only prereq for podman-remote c4616510a API: libpod/create use correct default umask ce8b6cebd compose test: remove cni config copy 553a70096 compat api: always turn on network isolation for networks aef8039d3 compat api: allow default bridge name for networks fa7e9f0f8 Compat API: unify pull/push and add missing progress info fde39edb9 remote push: show copy progress 1f48980af fix broken machine test cbcbde587 pkg/machine/e2e: do not import from cmd/podman 69fcf04c6 fix some pkg/machine/e2e test to read stderr ce790e61b enable linter for pkg/machine/e2e ff7259567 [CI:DOCS] Cirrus: Add prominent gitlab warning 3edaa174e libpod: create /etc/passwd if missing e41113dca e2e: show command and output when a timeout happens f6d18ed41 fix goroutine leaks in events and logs backend dc1dc4600 podman-remote pull: fix duplicate progress outputs 2350ef9dd Fix potential leak on mid-stream read error 7b28a1b7c vendor: remove unused deps 3aec669e9 Makefile: remove building pages for man5 ed49f9411 makefile: remove processing of pkg/docs 24bbd40ce rpkg: remove usage of pkg/hooks 73ecc5a4b pkg,libpod: remove pkg/hooks and use hooks from c/common d151edeea Fix machine test 86159e39b document isolate option for network create c3c07ed09 Update init ctr default for play kube 6057db75d Remove return error from "containers.pause" de8d2cc94 "pod pause/unpause/stop" append "report.Errs" to "reports" 409fbeaab system tests: new system-service bats file d2e2756a4 Print rootfs download as a specific version on Win 244055030 [CI:DOCS] Fix typo in manifest manpage 76fa80447 Vendor in latests containers/storage and opencontainers/runtime-tools e89550bcd buildah vendor treadmill 9c1de040b Vendor in containers/(storage,image, common, buildah) 03eaea8bb Run codespell e4b82c77f Add --host and -H as equivalent options to --url 183fdea5f Use SafeChown rather then chown for volumes on NFS 17dbce2fb Clean up cached machine images e473c5e4b Machine init: create .ssh dir if not exist 53edd9b65 Podman pull --all-tags shorthand option f07d2bac4 Cirrus: Trigger podman-machine task by label 3bd248ae7 GHA: Fix dumb error check 6d84a9952 Podman stop --filter flag a78be890e Switch to `github.com/blang/semver/v4` 52850ce70 man page checker: enforce stricter options format a5827e13c Fixes #14698 Use prepared image for WSL2 machine init a4bae330a Add podman events -f to be alias for --filter d560c7897 [CI:DOCS] man pages: replace -c with --cpu-shares 5f5379deb [CI:DOCS] podman-create.md: replace -c with --cpu-shares f7707c81a Fix last machine test 35dc17bfe abi: create new cgroup when running in a container 7b4ebfa65 podman: always call into SetupRootless 3b37095b2 utils: call MaybeMoveToSubCgroup once edfe80027 podman: move MaybeMoveToSubCgroup to utils/ b29a52a48 Docker uses "-c" to mean "--cpu-shares" in create and run ffd2e6df9 test,manifest-run: declare TARGETPLATFORM before using it ca4630ede CI: sanity check for desired runtime bf269e634 podman machine: do not commit proxies into config file b2f3b28c6 logformatter: link by *task ID*, not build ID cfb768a36 fix wrong log message on Trace level 557b65e09 [CI:DOCS] Improve language. Fix spelling and typos. a363b3a65 Initial release notes for v4.2.0-RC1 f22af2bf8 Bump to v4.2.0-dev 74aa681e5 Bump to v4.2.0-rc1 aa29bd6de Update CI base branch 87793b633 [CI:DOCS] Rewrite the --gidmap option docs 3bb4cf8ee libpod: read exit code when cleaning up the runtime 62cdc387d podman wait: return 0 if container never ran 25d74db45 [CI:DOCS] podman-info.1.md: Update examples b41e42f42 test/system/130-kill.bats: use $IMAGE 81a19a568 Add ports and hostname correctly in kube yaml 6b9abe69d improve pull-policy documentation 76d887c77 Fix machine tests 1e7686df6 Manifest test cleanup: use defer() 96dd57ca5 podman wait can take multiple conditions a46f79883 pkg: switch to golang native error wrapping d1754bdd4 Refactored networkPrune function 1161e8bd5 manifest_test: safer registry setup and teardown 61a67a07b pkg/machine/qemu: start VM check if qemu is alive a26cf638e machine: qemu fix chardev id starting with letter 4374038cc pkg/machine/e2e: do not import from cmd/podman 4cfa8ccb2 machine test: fix endless loop in test 3adda62d2 [minor] fix duplicate test name e8d2d70ee port forward range test: fix many oopses 0424084b3 fix namespace reporting 03ee8204d podman machine: make 9p security model configurable; adjust docs 44bd166b3 test-apiv2: streamed response testing based on response duration a5898129c Fix qemu machine startHostNetworking always failing cc6faddfa use c/common code for resize and CopyDetachable 1267515e1 Update play kube docs 791dbf823 golangci install: explicitly set BINDIR 4fd5fb97a e2e tests: cleanup: capitalize CONSTANTS 72aa00aca Fix streaming for libpod/pods/stats endpoint ee05bc031 Fix network inspect compat API discrepancy 9d6efb344 Podman machine info 65d511c6d Fix podman pod unpaue TODO 251d91699 libpod: switch to golang native error wrapping 8f2d9e7a7 podman pod create --uts support 5633ef1d1 Docker-compose disable healthcheck properly handled 488eb3b74 (rootful) docker-compose now updates network MTU 4fe7b8baf Podman system df JSON format outputs `Size` and `Reclaimable` b9aa47555 Sync: handle exit file 49cb288df hack/test/utils: switch to golang native error wrapping 2da731a7e test: reduce sleep interval c02f793ba test: return immediately on connect efe1176dd specgen,run: support running container from valid manifest list 8601ab6b0 Silence setlocale warnings from `podman machine ssh` 33a474286 pkg/machine: add missing build tags to tests 5b1867923 TestEnvVarValue: fix assertion 3fbe93371 envVarValueResourceFieldRef: use int64 for value 4c5b058e8 fix flake in aardvark tests 597de7a08 libpod/runtime: switch to golang native error wrapping 8106568ca test: drop pod-create --device-read-bps test 5491123c2 [CI:DOCS] troubleshooting: document --tty and CR fe559287c docs: Remove -s from systemctl enable --now sshd 24fcfb5d9 Fix spelling "read only" -> "read-only" 2f1075dfb Implement proxy support for Windows b92149e2a podman pod create --memory 8cff1c2bf Cirrus: Add podman-machine integration test f58d7dbda Cirrus: Fix elevator workaround multi-cloud support 7131c8472 fix build d6678adc9 overlay,mount: convert lowerdir to absolute path for overlay mounts of path 891dfd3a8 specgen: fix parsing of cgroup devices rule 5262f7e01 Fix podman machine on Windows 9c658f490 docs: mention the podman-kube template c6fb533ca podman-play-kube template: rename to podman-kube bd51410b8 service: do not run under the root cgroup 5c3979762 utils: move the cgroup if root on cgroupv2 e8adec5f4 cmd/podman: switch to golang native error wrapping 7bbfb3eb0 api,images: add support for LookupManifest to Image remove API 64ec894c5 [CI:DOCS] Update podmanimage comment. d9ff0fd15 Only allow Rootless runs of Podman Machine 6904b1a61 build(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0 5790caaef bindings: Add support for Delete in pkg/bingings/manifest 1affceb29 runtime: unpause the container before killing it 7f994a80d only create crgoup when not rootless if using cgroupfs 59a7ac210 Make `podman machine stop` wait for qemu to exit 2ee9fe4cb vendor containers/common 79a38a2c6 Add test for restore runtime verification using non-default runtime 8e3a46a87 Fix runtime check during restore 6c4c050d3 fix volume reporting in system df cc4914633 Docker compat returning unknown "initialized" for `status.status` 6d3520e8b podman image scp remote support & podman image scp tagging dc58a7306 Makefile: don't try to build rootlessport on FreeBSD c55feb7bf Makefile: don't use '-t' to specify the directory to install manpages af16edf49 Makefile: use GNU sed to convert manpages on FreeBSD 94a634fcf Makefile: use bash to evaluate tool paths 0e03a64f9 pod: ps does not race with rm 0cabd8006 pods: move code to a new function 3b10c1b78 Use Regexp in volume ls --filter name aada13f24 volume: new options [no]copy a4094530b volume: drop TODO comment 443a2afdb volumes: switch order of checks 28e2a604b vendor: update containers/common 99f68898c reveal machine error, ignore false state 9cb93c6f9 go.sum: run make vendor 0c1a3b70f Show Health Status events 386ea49cf Show starting state when machine is starting 66c62eb96 Implement CatchAll and StopCatch in signal_common.go 345778ece Fix "podman run port forward range" flake 4c5788bac Fix spelling of GetCriuVersion 590290597 Add missing criu symbols to criu_unsupported.go 2792e598c podman cgroup enhancement 09754d21d [CI:DOCS] Minor update to podmanimage upstream docs 041947b11 Bump github.com/stretchr/testify from 1.7.4 to 1.7.5 3619f0be9 Fix: Prevent OCI runtime directory remain a4ae22df8 Workaround for bug 14653 (checkpoint flake) 491857a88 Use HaveLen instead of len in podman machine list e2e tests f0b9e56e9 Fix machine list: --format implies --noheading 2fab7d169 add podman volume reload to sync volume plugins 6e8953abf test/testvol: rework testvol binary fcc25afa5 test/testvol: update container image golang to 1.18 472f79f08 test/testvol: move Containerfile into testvol dir 0d3aa61be libpod: volume plugin sendRequest remove body bool ad78d239d fix system connection and scp testing 3a810b8d2 Two fixes for DB exit code handling 30e7cbccc libpod: fix wait and exit-code logic 15188dce0 conmon: silence json-file error 2eda547dc podman run/create -v relative filepath support ef563c5a1 logformatter: link to logs using Cirrus API aa4279ae1 Fix spelling "setup" -> "set up" and similar 0320ce37d Fix system prune output message 7ef282d64 Remove lorgus.Infof on bindings start and attach 132393d15 Update basic_networking.md 4a981c490 allow filter networks by dangling status 050693b2e bump github.com/spf13/cobra from 1.4.0 to 1.5.0 ecf225019 rootless: attempt to join all specified paths 9afd5e31c rootless: improve error messages 99258703a rootless: do not ignore reexec_in_user_namespace_wait errors cfba09f68 Bump github.com/stretchr/testify from 1.7.2 to 1.7.4 1f539a264 api: show the memory limit specified for the container 7f82c4323 Fix typos f451b68df podman pod create --shm-size 46da7bc78 podman machine init --now: respect proxy envs bb5bd09ea API: containers/json always set application/json content type 282714090 [CI:DOCS] "setup" -> "set up" in source code comments dda68201a [CI:DOCS] Rewrite --env docs 948866e8a Update to use gopkg.in/yaml.v3 075c9ac45 .cirrus.yml: fix matrix expansion by properly merging YAML mappings 809044576 vendor in latests containers/image ce3d0954a Open Windows tutorial after MSI installation a3b3f1723 linter fix from #14299 065302bd5 Cirrus: Fix build. dep. missed in #14521 3af047b63 Vendor in latest containers/storage 09c462d73 fix "podman -h" help output 6c5e1420e Make it clear the REST API could be a security issue 28a38617e [CI:DOCS] fix typos in prerequisites for Fedora and make binaries sections b3f094a61 test/system/410-selinux: fix for newer runc e69691c27 Fix interrupting machine start leaves the machine unstartable 0a202a9f0 system test image: bump to 20220615 21819254d golangci-lint: update to v1.46.2 c6b9baa6c system tests: avoid rmi -a ... plus cleanup 693d439ac Update release notes and README on Main for v4.1.1 751ba07a7 libpod: improve check to create conmon cgroup 90a669594 fix CI: golangci-lint is broken on main 20b3fbe6d systemd socker activation: check listener to prevent panic 43e12c135 Fix #14416: Use absolute path to WSL binary to create ssh keys for `machine init` bfc446eea buildah-bud tests: reenable skipped 'bud' tests 455f4c782 CI: APIv2 tests: add rootless 232b3e342 buildah-bud tests: add arg sanity check 41528739c golangci-lint: enable nolintlint 1b62e4543 golangci-lint: add systemd build tag fcfcd4cdb container: do not create .containerenv with -v SRC:/run 4811cb110 podman system prune support prune unused networks 5e9d20448 Update vendor of containers/buildah 608ad7d11 Non-running containers now report statistics via the `podman stats` command 958759a71 podman pod clone 8d3e6577a Fix M1 QEMU flags b7c283759 Bump golang.org/x/tools from 0.1.10 to 0.1.11 in /test/tools 48cf1d258 podman-remote push --remove-signatures support d4272bed5 podman cp: do not overwrite non-dirs with dirs and vice versa 46c8da7d9 vendor buildah@main 7b3e43c1f podman volume create --opt=o=timeout... 80d5a00bb Fix Remote filtering embedded directory test 2b97795c1 APIv2 tests: (try to) fix flaky registry panic 81153ffa2 Introduce 'Starting' status for machines b13fc1bf9 patch for pod host networking & other host namespace handling 5614c29ce compat api: fix regressions from "Swagger refactor/cleanup" eed0e6671 Pass '--file-locks' to OCI runtime at restoring c77691f06 Do not error on signalling a just-stopped container 7e9767502 Bump github.com/opencontainers/runc from 1.1.2 to 1.1.3 549bffe58 shell completion: fix problems with container path completion bce97a3b5 apiv2 tests: clean up 700248bfe Update remote_client.md 254048e17 Cirrus: Fix artifact passing when dep. skipped f0516a014 --userns=keep-id,nomap are not allowed in rootful mode 126686f3d Podman images generated with empty /etc/containers/storage.conf 20aaaa382 Minor: Fix podmanimage README links dc4a01ec6 Add docs of changing default netavark networks ed1e4f94f Infra Inheritance patch 5fc3d871a Cirrus: Simplify only_if/skip + optimize multiarch a69a48b0d test/e2e: network dis-/connect test remove unhelpful assertions 90d80cf81 use resolvconf package from c/common/libnetwork ddf1d2cb3 update c/common to latest 811cce5a8 libpod: store network status when userns is used 0f424e90d Bump github.com/docker/docker e41d4a247 Add missing tests for manifests API 2a0d896b3 runtime: make error clearer 2c12f7bd1 Add some Readme updates around machine 8533ea000 Privileged containers can now restart if the host devices change 335925f47 Minor: Remove useless addition of storage.conf aadae49ad overlay-volumes: add support for non-volatile upperdir,workdir for anonymous volumes 5c508cb4e Bump github.com/stretchr/testify from 1.7.1 to 1.7.2 67ea5fdad Cleanup the leftovers used with ginkgo focus option 1fc5a107a [CI:DOCS] PodmanImage Readme touchup 22e442ee2 tests: buildah-bud fix reason for skip 9de092ec0 Fix secret-verify-leak flake: set build context to subdir 259c79963 Improve robustness of `podman system reset` 87b05b6a6 Prevent simultaneous machine starts 3c9b75c21 Using logDriver instead of query.LogDriver for podman play kube 241458666 podman logs k8s-file: do not reassemble partial log lines 2b0cb3002 test/e2e/save_test.go: fix flake b8de285a4 Stop machine before force removing files 1b6505d74 Update test output expectation 9a34b88c9 changed megabyte to mebibyte 831d6534f fix pod network handling with a host network 5023ce585 Align docker load and podman load output f2bbbd20d shell completion for paths inside the image/container 69e44bbcc bindings: add manifest should follow es_model while marshalling OSVersion and OSFeatures 5b9729c47 Document protocol usage for --publish 6dffa453a Bump github.com/containernetworking/cni from 1.1.0 to 1.1.1 44f11ec2c podman-remote: enable support for additional build-context on macOS, remote 3fa09e9db Makefile: Handle unexpected empty var. values fc95f832a Podman image: Mass cleanup + fix missing storage.conf f728b7b5a podman pod create --uidmap patch 8291b51ce expose podman.sock in machine inspect dbdc26a4c Removed `imageStream` hardcoded value 2805c7353 pkg/specgen: parse default network mode on server 78d1f5d7d fix "tail 800 lines: journald" flake 193397290 Add ExecStop and dependencies to fix shutdown f91c852fa Makefile: force podman-remote-static to linux cef044d85 Bump gopkg.in/yaml.v3 to v3.0.1 205c8c071 fix podman container restore without CreateNetNS 16e8b2f32 podman stats: work with network connect/disconnect ec576a549 podman volume export/import: give better error 4a8346551 podman machine ssh: do not print warning everytime 7e69e2b53 Podman no-new-privileges format 0e58636c3 podman machine ssh: set correct exit code a6f8cad54 fix bad import path for cmd/podman/utils c0ad9a43e Mount propagation works with named volumes f23ae4d66 healthcheck: wait for systemd operations 8efdbf5c4 Add API support for NoOverwriteDirNonDir e13c5f3a9 Refactor populating uptime 3a32d60e5 [CI:DOCS] Quick typo for troubleshooting ea1a8e243 Move Attach under the OCI Runtime interface fb163976f Support setting image_volume_mode in containers.conf d730f2b25 Add Authorixation field to Plugins for Info ab0728421 docs: note regarding version compatablity between server and client for bug fixes 87ad46060 Remove TODO comment 66a56ce05 vendor: bump buildah to v1.26.1-0.20220524184833-5500333c2e06 6124b5199 build: allow using cache explicitly with --squash-all using --layers 8c1128db4 Cirrus: Fix several TODOs 426a07e70 Combine the CheckAllLatest CID and PodID functions c9f6639ec Fix TODO in parse/net.go 32aa12a28 Remove TODO from pods/ps.go 8c781416b Fix swagger model of `InspectPodResponse` de54d33d2 Fix test block bypass instructions b730e7328 cmd, build: remove redundant squash processing logic 66c846616 Support remote deadlock errors in rm badf76e17 Remove more FIXMEs 9fcfea764 First batch of resolutions to FIXMEs 02c437405 [CI:DOCS] Add play kube support docs 338f01237 Remove unused archive flag from diff commands cb76d1523 fix f35 integration test network flake c3677f515 test/system/250-systemd.bats: clean up outdated TODO c9279d4d9 pkg/bindings/play/play.go: drop TODO message 462cb3370 pkg/bindings/containers/archive.go: drop TODO 60e31d87d pkg/auth: drop the TODO 09ae060a7 pkg/api/handlers/compat/images.go: drop TODO message c04ec104d libpod/pod_top_linux.go: s/TODO/NOTE/ b19e2d6f8 events: drop TODO comment 429b1f768 Fix codespell errors 4a447a213 work queue: simplify and use a wait group 2ce475576 Allow podman pod create --share +pid df394b521 Allow podman pod create to accept name argument 70f147d01 cmd/podman/common/completion.go: fix FIXMEs 2be4589b5 Remove TODO re: storage-driver 8de3e9102 help-message system test: catch more cases 33628003c Put current product first and historical product second 2400d1d52 go format previosly touched files b3e2324f5 test/e2e/search_test.go: re-enable registry.redhat.io test 956e2e1b8 pkg/domain/infra/abi/images_test.go: remove commented code fbeef1d70 image list: remove unused ConfigDigest 90a6f39d0 pkg/inspect: remove unused ImageResult type 5268314e5 podman image mount: print pretty table d3d3a207d pkg/bindings/images/rm.go: remove redundant FIXME 6c6e97018 pkg/bindings/images: remove TODOs re: system context d924c46da autocomplete `podman search --filter` f98a7d140 build(deps): bump github.com/vbauerster/mpb/v7 from 7.4.1 to 7.4.2 8af98b342 contain_top_linux.go: s/TODO/NOTE/ f5450b1e8 system tests: fix flake waiting for container to run 2133edb2c compat, build: suppress step errors when quiet is set 8fbb933f5 look for firmware based on the path of qemu binary 5d37d80ff Use containers/common/pkg/util.StringToSlice d29dec967 Cirrus: Fix building multiarch images dde428642 Bump Compat API maximum version to v1.41 b7dbc505b Instead of erroring, clean up after dangling IDs in DB e22611baf fix typo ac154425d Update _play kube_ doc following PR #14266 merged c984956f9 fix compat image resolution d66288315 auto update: create an event 633d5f1f8 fix --init with /dev bind mount 4960a17a5 fix tests by randomize the device folder name 94e82121b Support running podman under a root v2 cgroup a0d0207a2 fix podman-for-windows.md 5b79cf15a Swagger refactor/cleanup fb219a809 Update c/image 9c9fc96d2 shell completion: use more constants instead of duplicating strings 337f8b9d9 shell completion: podman save --format use all valid values 74f70315b shell completion: update podman inspect --type options 318e95fd2 shell completion: fix podman event --filter values b22143267 linter: enable unconvert linter 3b0844f99 shell completion --format: add help to function with args 3d8a1f917 shell completion --format: support maps and functions ecd6edb19 shell completion --format: fix embedded struct handling 11ff5ffd3 shell completion --format: only show usable methods eeeb88a66 shell completion --format: only show exported fields f5c8c0911 add tests and fix bug when char device pass the test as block device 653117087 ci: pr-should-include-tests: add more exceptions 40a1cd4ef Remove GO111MODULES use d49efde27 Makefile: rm gofmt target 9bf81814a Makefile: rm CHANGELOG_* and ISODATE vars d2070a39e Makefile: rm -mod=vendor 2b54bf3e6 Move GOPROXY from Makefile to cirrus.yml 11d3cf269 Makefile, podman.spec.rpkg: rm GOBIN and GOPATH c63bb6b9a Makefile,.gitignore: rm .install.goimports e2d2b537a Makefile: rm .gopathok d8c42de41 Makefile: rm .install.libseccomp.sudo target c632a2efc dependabot: add release-note-none label 0c9b0e2aa expose block and char devices with play kube 8684d41e3 k8systemd: run k8s workloads in systemd 6f9155cbb api: make no-op remote functional in /libpod/build 21a5ef859 Don't complain about XDG_RUNTIME_DIR, Closes #1424 dc435ecb2 Make errors on removing exec sessions nonfatal ee782fcb7 Deleting an n use image should return conflict not system error 977cd9bd1 Update WSL machine OS to enable user lingering 0961002d9 Update tutorial list to include Podman for Windows 5b2d5c365 Robust whitespace split of cpu utilization line from /proc/stat de4f76e7e Fix strange buildtag edit c45d51899 [BZ #2083997] pod: build pause image in custom user NS c058b828c Changed permission to 755 25f80941a build(deps): bump github.com/docker/docker 2b03a1088 Vendor in latest containers/common b8103640a Make sure tests are cleaned up when they complete 7804f4d29 Add support for machine events on Windows a4aa07a07 [CI:DOCS] Treadmill script: add --reset option b7ce98619 Fix broken pwd 1094d7553 build(deps): bump github.com/opencontainers/runc from 1.1.1 to 1.1.2 9df390655 shell completion --format: work with pointer functions 03af8213c sdnotify: send MAINPID only once 840c120c2 play kube: service container ecf0177a0 vendor c/common@main 16e22dbbe vendor: update c/storage and c/image 37e30bcb2 Fix hang in build-each-commit test e76a07087 [CI:DOCS] man pages: fix inconsistencies 60258925a test: update fedora toolbox image 1834afd3e [CI:DOCS] Benchmarks: new tool for parsing results 813f6a68f [CI:DOCS] fix `make localbenchmarks` 876b05cdb Add initial Windows guide c7c00ce55 Add more machine tests d0ca90b3e test: simplify cleanup code 0774a4ce1 kube: add support for --userns= 2b5778d41 Cirrus: Update images + new automation library 9ffc2a6ac Cirrus: Fix Makefile including 'hack' in $PATH abf4f77bc Cirrus: Simplify use of cache in automation 237f76126 Cirrus: Simplify rootless ssh setup c1656e2ee Cirrus: Guarantee $DEST_BRANCH is passed through 82f2b3edb bloat check: make more robust 9e1ee081f kube: honor pod security context IDs 82a4b8f01 kube: refactor setupSecurityContext to accept directly the security ctx be5abf03a fix: Container.cGroupPath() skip empty line to avoid false error logging c48657671 test skipper: check for $DEST_BRANCH 8ecd0b5bc fix broken CI test bb8f53a72 test: fix "podman search format json" b58e7e7f1 play kube log tag handling a1a299797 Update version to v4.2.0-dev bce014e19 Update release notes for Podman v4.1.0 9cd74a13c update podman version in readme 0dbfd376f Add 4.1 branch to API documentation 2a401b3ff Bump github.com/docker/docker ed8c1dfb4 libpod: add c.ConfigWithNetworks() d7f43e677 test: fix failing TestPostDeleteHooks cf35168f0 test: use `T.TempDir` to create temporary test directory 6ddccd94f e2e: pull_test: speed up --all-tags c38e7e5f6 build: disable --output for podman-remote clients 140fb3ae1 e2e: pull_test: squash --quiet test 669401c31 e2e: pull_test: move tests around 2fa906cca e2e: pull_test: remove redundant tests 6eaa9ca26 e2e: manifest_test: use cached registry ed159f864 Vendor in containers/buildah@v1.26.1 ebde52583 update rootless_tutorial.md 7c59f1d07 Fix usermod call in rootless_tutorial.md 5fa6f686d Report correct RemoteURI 386614367 exclude new tools vendor dir from validate f6b397bf1 add dependabot config for test/tools go.mod 3b9177995 vendor test tools in submodule 80744c644 podman system reset removed machines incorrectly 9974c90cc libpod: treat ECONNRESET as EOF 245151e62 Add more unit tests a5800c78f machine events: only open sockets when needed 36c5e6e0c Bump github.com/containers/storage from 1.40.0 to 1.40.2 ccd576504 play kube default log driver 8781a3635 benchmarks: push/pull 1585b175d pass networks to container clone 88015cf0d Implement --format for machine inspect 8da5f3f73 Add podman machine events 9166894c6 vendor test dependencies instead of installing via network 6e2e3a78e generate systemd: pods: set exit policy 5fac879ea vendor treadmill script: run 'git add vendor' 0bb484937 Additional stats for podman info e247f02a4 Vendor in containers/(common, storage, image) e74717f34 Treadmill script: revamp e17b56e0c CI: emergency fix for broken go get 4e44e5b5d Bump github.com/rootless-containers/rootlesskit from 1.0.0 to 1.0.1 4eff0c8cf pod: add exit policies cfca85356 libpod: unset networks before storing container conf 77d872ea3 vendor c/common@main 5b78f9576 Implement machine inspect for WSL 772ead253 Use simulated dual-stack binds when using WSL 23de3801d buildah-vendor-treadmill script: yet more checks 01acc2565 libpod: host netns keep same /etc/resolv.conf 519820926 fix incorrect permissions for /etc/resolv.conf in userns e6557bf0a pkg/api: do not register decoder in endpoint handler a48c37df3 fix broken hooks-dir test 69c479b16 enable errcheck linter 384c2359b libpod: unlock containers when removing pod 2902d32c4 Refactor machine inspect 64a368ba2 remove unused codepath for creating/running ctr in a pod 6b7fd318b image search --format: add completion for go template 0d9f19028 shell completion --format: use structs by reference cac2b7800 image --format: fix add completion for go template 7f28fd938 Report properly whether pod shares host network cb9a45630 shell completion --format: use anonymous struct field once 8be978158 network inspect --format: add completion for go template f93ba587c shell completion --format: work with nil structs 589e42c99 Bump github.com/containernetworking/cni from 1.0.1 to 1.1.0 a5aea8e50 Three manual fixes b3f38c31b Ginkgo: use HaveField() for better error checking 91ead1528 volume: add new option -o o=noquota ea1fcd7bc podman search: truncate by default c721acf08 podman machine starting test 3b8fa515f Emergency fix for new CI linter 83a75d2a3 Produce better test error messages 461b73f56 Github PR template: add release-note block 22b421dd7 Add CreatedSince & CreatedAt format fields to podman image history e7390f30b Allow changing of CPUs, Memory, and Disk Size 9c0c29f08 Cirrus: Fix ownership of repos. to keep git happy d4e30b33a Temporarily skip netavark/aardvark e2e test cf449e81a Cirrus: Temporarily update netavark/aardvark-dns cd7cff6bb Cirrus: Test w/ netavark/aardvark-dns in F36+ 3a07fc446 Cirrus: Update to F36 CI VM Images a73425a0b Revert "Cirrus: Disable F34 aka prior-fedora testing" Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: ensure that sysvinit and systemd are exclusiveBruce Ashfield2022-08-252-4/+12
| | | | | | | | | | The sysvinit functionality conflicts with the docker daemon settings required for the systemd docker.socket. Ensure that the sysvinit capabilities are only enabled if systemd is not present. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: update to 5.x and mesonBruce Ashfield2022-08-257-173/+127
| | | | | | | | | | | | | | | | | This is a significant update to lxc as autotools has been replaced with meson. Not all existing autotools options have meson equivalents, so there may be differences in functionallity. As part of this update, and unused features have been dropped, mainly when the meson equivalent was not available. Basic / core functionality has been tested with systemd, sysvinit requires more work, and patches will be accepted to restore that capability. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* skopeo: Mark CVE-2019-10214 as fixedAndrei Gherzan2022-08-251-0/+6
| | | | | | | | | | | | | | | This CVE was fixed[1] in the container image go library skopeo is using (vendoring). The current version of the image go module is v5.20.0 while the fix landed since v3.0.0[2]. See RedHat's resolution[3] for more details. [1] https://github.com/containers/image/issues/654 [2] https://github.com/containers/image/pull/669/commits/a3d69a4a89244803d2f5350aca6dd0fcbe444551 [3] https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10214 Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: Rename podman-rootless.conf sysctl file to aid overridesAndrei Gherzan2022-08-232-2/+2
| | | | | | | | | | Files are sorted in lexicographic order. Moving podman-rootless.conf to something greater then '00' would help with systems providing default values in other configuration files that can be overridden by podman-rootless.conf. Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* singularity: Drop explicit runtime dep glibcAndrei Gherzan2022-08-201-1/+1
| | | | | | | | There is no need we can see for this dependency to be provided as such - especially forcing this to using glibc. Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* nerdctl: update to 0.22.2Bruce Ashfield2022-08-094-455/+595
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping nerdctl to version v0.22.2-2-ge084a2d, which comprises the following commits: 013ebdc Bump github.com/containerd/nydus-snapshotter 37cb3fe Fix `can't get final child's PID from pipe` on rootless (v0.22.1 regression) fbbf10e Bump github.com/compose-spec/compose-go from 1.3.0 to 1.4.0 7f94a17 fix(hosts): extra-host params should be 'domain:ip' a4fd8fa go-ipfs (0.13.1) -> Kubo (0.14.0) f3001be doc: readme and help msg about firewall plugin 0e81051 ps_linux_test.go: improve variable names cae0f01 README.md: `nerdctl system prune` is now available 8f57e95 add label display support in ps subcommand 2dfa2a4 Bump github.com/compose-spec/compose-go from 1.2.9 to 1.3.0 d0fe7ab skip reconfig network when missing 83ce9a0 Add extra logging warning for log options 09bd981 Pass https://index.docker.io/v1/ to GetAuthConfig() for Docker Hub 17771d0 Refactor: Abstract the way to handle remote snapshotter 0ff788b Add the ability to inspect volume sizes 3676219 Bump github.com/containernetworking/cni from 1.1.1 to 1.1.2 8b6417c fix stats values bcedaae optimize tests of stop the sleep container 014525f support system prune 81a9a9b add labels in container inspect using dockercompat mode 81095fb fix yaml pkg vulnerability 1bb09dd support network prune bc68696 Add oom-score-adj option while running 3507d0b remove useless args from load d7ba334 rewrite test of run with init flag 1f7ec3f Bump github.com/compose-spec/compose-go from 1.2.8 to 1.2.9 5ecf242 Bump github.com/containerd/go-cni from 1.1.6 to 1.1.7 cccf19e test fluentd log driver without build image 1199ac5 small refactor for rmAction a4b51e2 bridge network use free subnet e027ce4 Bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 0818f7d Bump docker/build-push-action from 3.0.0 to 3.1.0 a78de9a support --network=container:<contaienr> for sharing network namespace df376b8 Remove duplicate host record when update the DNS 685371e TestRunWithJsonFileLogDriver: make log message more specific 357fdfd Fallback to Containerfile when Dockerfile is not present. de3d05a README.md: clean up e06e3a6 ignore force remove container error 4a7f6eb support force remove image f2cc696 fix stats for no-stream a7dd254 fix flaky test TestRunWithJsonFileLogDriver 663541c README.md: clean up ad0e42f infoutil: make runc version output consistent with Docker e016c55 infoutil: relax buildctl version format 2087827 fix found multiple IDs when container walker 0e07104 update buildg (0.3.0) bd78358 update IPFS (0.13.1) ddf5b5a update stargz-snapshotter (0.12.0) 8f5ac28 refactor container restart command 70826c7 update imgcrypt (1.1.6) 08f9f6b Display buildkit and runc version in nerdctl 2c5bd7f Log matches of log paths to understand TestRunWithJsonFileLogDriver flakiness 15decf3 wait for detached container running before exec fa392af Add document about overlaybd 41c63f3 fix json file logging filenames 9c63c61 container exit should terminate tail logs ff6e75f update unimplemented flags for run 28de2e3 support volume prune a74e852 add update flag blkio-weight eb3715a fix dockerfile local dir e20c145 support image prune 79ed9ca TestRunCgroupV1: fix cgroup version check d746ab9 fix broken deps for dbus 5e91753 add flag kernel-memory 9b4287e typo and return error 67e2ded remove failed container state efd3961 adjust ps header b35ae67 cli: implement -s/--size option for nerdctl ps command e8127e6 docs: add nydus snapshotter description f20cb34 Validate formats before ticking 8b5a0ec Bump github.com/containerd/nydus-snapshotter fb3eb33 fix error message 5f41b41 support container prune 4637c99 add TabReader for test 4f9c3ed fix some error 86056b8 Enable staticcheck in golangci-lint 34e3ad8 feat: makes nerdctl available to pull nydus images 76fbdbe Support multiple tags in nerdctl build. e56ac42 Fixed gosimple errors in issue #1134 afb0c57 bind-mounts: add rbind option defaultly 6a382f7 support stop-signal and stop-timeout f9522ae support dns-search and dns-option for compose 486100d volume: set fstype to bind if mount options contains bind or rbind eaf3354 remove invalid debug 50a8eaa show name for images 0b67272 support dns-search and dns-opt 2f79653 fix: using default resolver 2b5a45b add group-add flag for run a5b0d1d go mod tidy b1930a7 1117: specify needsLoading when output flag is specified. abaa167 Bump github.com/compose-spec/compose-go from 1.2.7 to 1.2.8 7954e19 Bump github.com/ipfs/go-ipfs-http-client from 0.3.1 to 0.4.0 12aae30 Bump github.com/multiformats/go-multiaddr from 0.5.0 to 0.6.0 8b34083 Fix typo in instructions on how to run docker compat tests. daea277 Bump github.com/spf13/cobra from 1.4.0 to 1.5.0 b1b226f Bump gotest.tools/v3 from 3.2.0 to 3.3.0 0bcefdc Update golangci-lint version to 1.46.2 063c025 fix stylecheck errors 75ff587 CI: unparallelize TestRunAddHost 1c191a1 add umask 676c5c3 Validation for nerdctl load to fail when stdin is empty. 1192a04 Fixed gosimple errors in issue #1134 02582d0 go.mod: golang.org/x/* master e86deda go.mod: github.com/containerd/containerd v1.6.6 (=> v1.6.1-0.20220616041926-9c6154bff158) c078e20 pkg/logging: refactor 92e3cc2 Initialize the log file to fix `nerdctl compose up` error 5c3aec6 add memory-reservation memory-swappiness 7fbafcb fix swap memory 261da0c Add GitLab Container Registry documentation 4f6b914 MAINTAINERS: add Zheao Li as a REVIEWER 04a8450 update IPFS (0.13.0) 8ac66ef update fuse-overlayfs (1.9) 21edc9d update runc (1.1.3) ffdc0aa fix log-driver name not check error 8717e4f Implement fluentd logging driver a817a8b add flag memory-swap 44c80db Adding tests for start and handling AkihiroSuda feedback db4a505 Adding --attach flag to start 0b9e9cb add flag oom-kill-disable 404c532 [#868] Update moby/sys to fix the FreeBSD build 3b1df0e Bump github.com/docker/cli d50fec4 Bump github.com/docker/docker cfe8ca0 Bump github.com/moby/sys/mount from 0.3.2 to 0.3.3 6386775 update buildg (0.2.0) 26639fd update containerd (1.6.6) 35f60d6 go.mod: github.com/containerd/containerd v1.6.1-0.20220606171923-c1bcabb45419 8a36c0d persist default network config bb3f9ee Bump github.com/vishvananda/netlink from 1.2.0-beta to 1.2.1-beta.2 eae4b2d Bump github.com/containernetworking/cni from 1.1.0 to 1.1.1 3007fc8 Bump github.com/containerd/go-cni from 1.1.5 to 1.1.6 b00fa84 fix squashes --add-host with the same ip dd8a0ff Implement journald logging driver f087279 Bump github.com/compose-spec/compose-go from 1.2.6 to 1.2.7 60b77c1 Bump github.com/containerd/cgroups from 1.0.3 to 1.0.4 96a3276 CI: TestRunCgroupV2: add --memory-swap=-1 for Docker with cgroup v2 5a47349 CI: skip TestRunCgroupConf for Docker e077b38 CI: use GHA ubuntu-22.04 for cgroup2 tests 08924b9 docs/compose.md: update the compatibility information 423600f Bump github.com/compose-spec/compose-go from 1.2.5 to 1.2.6 793a95d enbale entrypoint as stringArray feb1316 Bump github.com/compose-spec/compose-go from 1.2.4 to 1.2.5 193e8d6 Bump up buildg to v0.1.0 04f9b47 update BuildKit (0.10.3) 0aeed30 update runc (1.1.2) fc87586 go.mod: golang.org/x/* master f66b943 refactor TestRunIpcHost b7d9eee create/run: add ipc flag to create and run commands 998f457 Bump github.com/docker/cli 47e7eb7 Bump github.com/docker/docker 773a413 Support interactive debugging of Dockerfile d81dcf3 logging: ensure that MagicArgv1 is always argv1 004f2ff README.md: typo 70c90f1 Bump golangci/golangci-lint-action from 3.1.0 to 3.2.0 7c3fd8f add bind-nonrecursive for mount 47ff895 fix flaky test TestComposeConfigWithComposeFileEnv c5841dd pkg/taskutil: let StdinCloser implement io.Closer c9881fd supporting COMPOSE_FILE environment variable b4f2e5f Support logging in compose file 0fc816a Support for networks in compose files 0b9d48e Bump github.com/docker/docker e031d13 update containerd (1.6.4) abaa4d0 Support riscv64 49f6d78 Bump github.com/docker/cli 7e3dc43 Bump docker/build-push-action from 2.10.0 to 3.0.0 450486a Bump docker/login-action from 1.14.1 to 2.0.0 e11fb20 Bump docker/metadata-action from 3.8.0 to 4.0.1 d3e449a implement log opt with containerd logging driver 97ece6a enhancement restart policy 81528d5 support rename container 56b0f10 update BuildKit (0.10.2) e258cda update RootlessKit (1.0.1) 489a521 update slirp4netns (1.2.0) d73ef7a fix default driver capability for gpus ed10fec Bump docker/metadata-action from 3.7.0 to 3.8.0 f853dc4 Bump github.com/containerd/go-cni from 1.1.4 to 1.1.5 18ea81f Fix `flag -t needs -i to be specified together` restriction b2fa405 Makefile: avoid flattening `nerdctl-X.Y.Z-go-mod-vendor.tar.gz` ff1aec4 info: add --mode=native to show full plugin info a629145 update containerd (1.6.3) 62979d7 Bump gotest.tools/v3 from 3.1.0 to 3.2.0 6d1bfc6 fixes #1004 : Build image only when changes merged to master 10990ad Bump github.com/pelletier/go-toml from 1.9.4 to 1.9.5 dbc0ec5 Bump github.com/ipfs/go-ipfs-http-client from 0.3.0 to 0.3.1 c63982b Bump actions/checkout from 3.0.1 to 3.0.2 85ca787 [Carry 643] cp cmd 90a3a2c Bump github.com/tidwall/gjson from 1.14.0 to 1.14.1 8385be4 add test case for nerdctl inspect to check mounts field a766555 show mounts info for nerdctl inspect Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: update to 1.24.3Bruce Ashfield2022-08-093-737/+1118
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We bumping to 1.24.x, along with the k3s changes, we update our dependencies to allow a vendored build. Dependencies were gathered via: go list -m all | sort | uniq > mod.all And then processed to generate the SRC_URI fetches and relocations into the build. We also change our TAGS to avoid two different errors. btrfs build restrictions: package command-line-arguments imports github.com/k3s-io/k3s/pkg/cli/agent imports github.com/k3s-io/k3s/pkg/agent imports github.com/k3s-io/k3s/pkg/agent/config imports github.com/k3s-io/k3s/pkg/containerd imports github.com/containerd/containerd/snapshots/btrfs/plugin: build constraints exclude all Go files in github.com/k3s-io/containerd@v1.5.13-k3s1/snapshots/btrfs/plugin And ctrd, which leads to the following (which is also found on non Yocto / non-cross build k3s builds): # github.com/containerd/containerd/pkg/cri/server ../../go/pkg/mod/github.com/k3s-io/containerd@v1.5.13-k3s1/pkg/cri/server/instrumented_service.go:36:9: cannot use &instrumentedService{?} (value of type *instrumentedService) as type grpcServices in return statement: *instrumentedService does not implement grpcServices (missing ListPodSandboxStats method) ../../go/pkg/mod/github.com/k3s-io/containerd@v1.5.13-k3s1/pkg/cri/server/service.go:156:9: cannot use c (variable of type *criService) as type CRIService in return statement: *criService does not implement CRIService (missing ListPodSandboxStats method) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crun: update to 1.4.5Bruce Ashfield2022-08-091-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping crun to version 1.4.5-74-gba3cb60, which comprises the following commits: 5af21e2 linux: fix idmap annotation c75b58d wasm,wasmedge: drop support for experimental WasmEdgeProcess 22c6181 linux: fix creating devices in the rootfs 6f46ad5 chore(wasmedge): remove legacy option 0de6bb2 fix unknown type name 'uint64_t' 3a16555 linux: fallback to netlink to setup lo device 1a3f8f1 linux: use $PATH for newgidmap and newguidmap 74679c6 krun: use library soname in dlopen 0130f08 krun: limit the number of vCPUs to 8 2a4458d linux: fallback to tmpfs mount if umount fails fd33331 artifacts, centos9-build: add libprotobuf-c-dev for protobuf headers 77f5c99 linux: devices mounts should have NOEXEC and NOSUID c923cec tests: add wasmedge build test 33f900c fix(wasmedge): breaking changes in wasmedge c api 699757b test, podman: skip podman pod create --share-parent test eb4ff94 handler: move notifer for phase HANDLER_CONFIGURE_AFTER_MOUNTS just after finalizing mounts b02a68d linux: honor mount mappings 8d774c5 libocispec: sync from upstream 38f60b1 ci: re-enable and fix clang-format d21594a *.c: clang-format 9ed3c1b mono: remove incorrect wasm headings from mono docs c44937b tests: disable "podman kill paused container" 965129b test/check: fix wrong argument 17d1c16 cgroup: make target cgroup threaded if needed 77d2ac5 readme: show crun logo 2ebd7fc Adding crun logo SVG file ec9ab49 container, exec: honor process user's uid while setting HOME env d8a0c7f tests/podman/Dockerfile: build on fedora:35 and fedora:36 21de997 copy_recursive_fd_to_fd(): copy the whole file 3445f0f tests: add tests for covering '--pid-file' and '--no-new-privs' options e48db34 mono: add documentation and tryout example f8b85e8 windows/mono: bind mount windows dlls and runtime config from host 0df040d handler: add support for HANDLER_CONFIGURE_MOUNTS for handlers 6b3b4dc linux: add public api libcrun_container_do_bind_mount for adding ctr mounts 009430c windows: add mono based native dotnet handler eb48a65 cri-o: bump golang to 1.18.1 for capnproto.org/go/capnp 6cc7b03 test: set /crun as safe directory on containers running the tests 2f13875 linux: create missing cwd 1e30424 cgroup: remove tun/tap from the default allow list 6904cf4 cgroup: add support for cpu.idle 2824e92 libocispec: sync from upstream 70deaf0 podman-tests: change default log-driver to k8s-file instead of journald c381048 NEWS: tag 1.4.5 359e26d crun.1: regenerate f0cd1a7 .github: fix CI 9998f00 linux: hooks inherit env if not specified 9e361c8 tests: specify the user in the form UID[:GID] 4a61eb1 github: fix CI db77ef2 libcrun: fix typo 69289ce tests: add an environment variable 81ccd00 criu: add support for different manage cgroups modes 27b7fe5 tests: specify an additional capability to add to the process cdbc357 tests: delete multiple containers a39b07d podman: skip authenticated push 0ce2f2d exec: fix double free 5a528f4 docs: fix dependencies on RHEL/CentOS 8 section cd93941 git-version-gen: fix version comparison 38256da tests: disable failing CRI-O tests 6521fcc NEWS: tag 1.4.4 1aeeed2 exec: --cap do not set inheritable capabilities b847d14 spec: do not set inheritable capabilities ca75d1f feat(terminal-receiver): make terminal interactive ed6e424 remove duplicate "libtool" from install commands d10fe74 linux: resolve symlinks in bind mounts ba17004 tests, clang-check: install git 1a4fae9 rhcontainerbot/podman-next COPR autobuild 77df89b docs: update known issues with CRI and side-cars 164d753 wasm, kubernetes: support wasm for kubernetes infrastructure with side-cars Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> crun: update runtimespec Bumping runtime-spec to version v1.0.2-100-g8d0d6d4, which comprises the following commits: 0da1600 fix rfc link 9d1130d IDMapping field for mount point fc985aa config-linux: update type of LinuxCPU.Idle to *int64 bc545ec schema: add cpu idle 1fef707 Update Windows CPU comments 600a8bd cgroup ownership: clarify that some files may not exist b8dbce9 update idle type of LinuxCPU from *int64 to int64 9d363b3 config-linux: add idle option for container cgroup b05eb53 typo: seccompFD -> seccompFd 0608c1f Switch to GitHub Actions, CODEOWNERS, etc. f4ef391 specify cgroup ownership semantics 104385d config-linux: MAY reject an unfit cgroup 411082c add youki to implementations.md 6641127 alphabetize the implementation list. 84251a4 specs-go: export LinuxBlockIODevice 3f30167 schema: make with golang 1.16 34a7544 schema: update README.md Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* umoci: update to v0.4.7-latestBruce Ashfield2022-08-091-1/+1
| | | | | | | | | | Bumping umoci to version v0.4.7-101-g4270d5b, which comprises the following commits: d8f4f12 build(deps): bump github.com/opencontainers/runc from 1.1.1 to 1.1.2 2163223 *: improve io.Pipe CloseWithError usage aab35e4 *: implement EINTR-retry logic for io.Copy users Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>