aboutsummaryrefslogtreecommitdiffstats
path: root/recipes-containers/podman
AgeCommit message (Collapse)Author
2022-03-21podman: update to v4.0.1Bruce Ashfield
Podman now installs the systemd service and socket by default, so we can drop our custom installation of those elements, otherwise the build is unchanged. Bumping libpod to version v4.0.1-11-g717edd7b8, which comprises the following commits: 0f626c377 Bump to v4.0.3-dev 342c82593 Bump to v4.0.2 bd5ff1c32 Update release notes for v4.0.2 791c8c347 Revert "use GetRuntimeDir() from c/common" cc4a70c80 Revert "Option --url and --connection should imply --remote." ca980c2e0 Option --url and --connection should imply --remote. cfcc0d639 Bump to v4.0.2-dev c8b9a2e3e Bump to v4.0.1 b1ffa822f Update release notes for v4.0.1 de9f22805 Fix a potential flake in volume plugins tests 697dd2890 Propagate $CONTAINERS_CONF to conmon c559e4e6f tests: Remove inaccurate comment 3718d096b System tests: show one-line config overview e1d5c812d provide better error on invalid flag 2b85f62a2 use GetRuntimeDir() from c/common 82f4760de kube: honor --build=false and make --build=true by default e356dfe06 system tests: cleanup networks on teardown 71b0909f2 Remove the runtime lock ee7cf3cc2 Don't log errors on removing volumes inuse, if container --volumes-from eb9fe52a5 kube: honor mount propagation mode a0c34d64a Load ip_tables modules at boot e8d7e580a Cirrus: Disable F34 aka prior-fedora testing 7b106f5b6 Cirrus: Update VM Images for 4.0 release d59749d64 Bump to v4.0.1-dev 49f8da727 Bump to v4.0.0 84c8870ac Release notes for v4.0.0 final 15cb91855 Fix lint ae9ad416a Fix manifest 4.0 Endpoints Branch forced 4.0 only endpoints 1a8c715f1 Introduce podman machine init --root=t|f and podman machine set --root=t|f f71dfcb5d Initial implementation of mac forwarding using a privileged docker sock claim helper 2128236da ignition: propagate proxy settings from a host into a vm 809da6b0b Update to podman4 copr stream bd8ac0017 Unify ls --filter docs for networks and pods 77e51e188 e2e: merge after/since image-filter tests 8ad29421e podman network: add documentation for netavark f35e03ec8 create: Fix key=value annotation in the flag output 22cfa9860 enable netavark specific tests d77b4f92c Fix checkpoint/restore pod tests a72e22160 Make sure building with relative paths work correctly. 975d79aed Add 409 response to swagger godoc 421b7466c Fix images since/after tests 04badc2c9 Changes of docker descriptions 09708bee9 Fix images since/after tests 35a4f32be Changes of docker descriptions 629d86445 Temporarily pull machine images from side repo a6fbfd47c Cirrus: TODO: netavark/aardvark release branches e5644bbf1 Cirrus: Expand netavark testing to include rootless 1656a2335 Cirrus: Minor - limit release task applicability afb39f2e4 Cirrus: Add [CI:BUILD] magic that only builds 926c3b08a CI: fix nightly builds 1e3115cf4 Cirrus: Log netavark/aardvark binary build info. 66a3be370 Cirrus: Add netavark/aardvark system test task 6b0d4d915 Cirrus: Also download aardvark-dns binary b63f61f5c Cirrus: Add e2e task w/ upstream netavark 6a3de9351 Revert minimum API change 9688a462e netavark e2e tests 92790e98c Bump to v4.0.0-dev d7d79ce81 Bump to v4.0.0-RC5 5356e36b8 Update release notes for v4.0.0-RC5 77ca2498e Modify /etc/resolv.conf when connecting/disconnecting f8cd4df1b Do not set the network config dir to cni plugin dir d0fccbbbb Show API doc for several versions e7998b122 [NO NEW TEST NEEDED] Add schema for ImageCreate 200 response. 6d01b6dd6 fix: Multiplication of durations ed60f8908 move rootless netns slirp4netns process to systemd user.slice 7e37c608f compat: endpoint /build must set header content type as application/json in reponse 9aee36b76 Cleanup: remove obsolete/misleading bug workaround b1b9a0d7a tests: retrofit healthcheck system tests 74cba33c7 healthcheck, libpod: Read healthcheck event output from os pipe 7ec63f092 Fix: Do not print error when parsing journald log fails d62a0204d Bump github.com/buger/goterm from 1.0.1 to 1.0.4 bcd5f5ead append podman dns search domain b1bf91a22 Podman pod create --share-parent vs --share=cgroup 85c0fe7dc System tests: revert emergency skip of checkpoint tests 71d151449 Add version guard to libpod API endpoints 345413540 [v4.0] Bump c/common to v0.47.4 7499496f3 idmap should be able to be specified along with other options e47a3bec9 Vendor in containers/buildah v1.24.1 cad3eb78b Bump to v4.0.0-dev 0c9648136 Bump to v4.0.0-RC4 c1618042f Disable failing E2E test 70623790d Revert "Move each search dns to its own line" 48f10e1d0 Move each search dns to its own line 938d5152c Update release notes for v4.0.0-RC4 99968002f Document `schema` values in the `--url` flag 6d747dca2 podman image scp syntax correction e0cbcdc33 system prune: remove all networks 8f3f0710f Only change network fields if they were actually changed by the user fb6fca806 docs: clarify rootless net stats cad6459b6 Fix size to match Docker selection 06821627f libpod: enforce noexec,nosuid,nodev for /dev/shm 44cd232be Clarify remote client means Mac and Windows 9d3bcb587 libpod: report slirp4netns network stats f65b62c98 Add notes to "--oom-kill-disable" not supported on cgroups V2 178cccbf9 Fix use of infra image to clarify default 97c8bdfeb Adapt podman images ls filters docs to be aligned with prune filters docs 49076ba87 ignition, machine: delegate cpu,io cgroup controllers to machine's default users 0c9a8ac07 pkg/bindings/images.Build(): slashify "dockerfile" values, too 3b565bacf Remove mention of IPv6 portfwd from release notes 10a966a2a Bump to v4.0.0-dev 9b441c0dd Bump to v4.0.0-RC3 f5dfe026d Update release notes for v4.0.0-RC3 ebf5ad50e Fix Cirrus destination branch e64e6500d volume: add support for non-volatile upperdir,workdir for overlay volumes a928d39d0 github: label issues based on os fix regex 525bdc377 github: label issues based on os 4c26a3a5c Cirrus: Fix get_ci_vm.sh initial setup d455bb879 System tests: emergency skip of checkpoint tests 6961d9120 network create: allow multiple subnets 86547cc24 Update troubleshooting.md 24dc02064 Fix sort ordering of filters 63b1557a2 Unify podman prune filter description: volumes, networks, system 4a4d86d40 Bump Buildah to v1.24.0 6336e1ff1 rootless: drop permission check for devices 77cd38d40 switch podman image scp from depending on machinectl to just os/exec ab22a688d Bump github.com/containers/image/v5 from 5.18.0 to 5.19.0 991652988 Bump github.com/containers/storage from 1.38.0 to 1.38.1 9073b56a3 change location of where make outputs podman binary on osx 72ddacdbe Github workflow: Fix parsing of GraphQL response JSON 6df245c6e Github-workflow: Fix YAML syntax 44a87229b Update godoc, swagger using wrong struct e4636ebdc Makefile: install targets independent of build 42e1c2981 [CI:DOCS] Fix typos and improve language 7cdb00a45 CI: enable rootless-remote system tests 98739237e pkg/specgen/generate/security: fix error message 29e89da1a Github workflow: Send e-mail on job error 0d42d9f8d Github workflow: Update Cirrus-cron GraphQL query dbfe79757 remote build: set rootless oci isolation correctly 8099a61b6 [CI:DOCS] Fix typos and improve language 80a5295d4 Fix handling of duplicate matches on id expansion 1cddd6397 Show correct default values or show none e252b3b4f exec: retry rm -rf on ENOTEMPTY and EBUSY 2f371cb12 container create: do not check for network dns support 75e6994d4 libpod: fix leaking fd f6e36a649 libpod: fix connection leak e68d188f6 [CI:DOCS] fix typo subpordinate aff6a5af8 Fix filter description and unify filters docs for containers/images prune 7938f32c5 Remove unused param and clean API handlers e834297b3 Restore machine start logic that was hanging c81a616ca Bump to v4.0.0-dev 71238d3cc Bump to v4.0.0-RC2 b29640c78 Final release notes for v4.0.0-rc2 5736649eb Run codespell on code f6bb60087 Update release notes for Podman v4.0.0 653da8fe8 Fix #2 for compat commit handling of --changes 9d815707e Fix nil pointer dereference for configmap optional 0b5136c7c Make error message matching in 030-run.bats less fragile 9241b4e34 Don't explicitly check for crun|runc in package information 2947ded7a Don't segfault if an image layer has no creation timestamp 1c0fdba4f compat: remove hardcoded index from load images output report 9df31cfb7 compat: images/load must be able to load tar with multiple images 47df14af5 System tests: fix for new systemd on rawhide ee039b740 Remove rootless_networking option from containers.conf e22b9889d vendor c/psgo@v1.7.2 1f85244ab Engine.Remote from containers.conf 2c492be00 vendor: bump c/common and other vendors 7046e7804 rootless: report correctly the error 2d0b5ebb5 Implement API forwarding for podman machine on Windows 4693fc6db Implement env parsing on Windows c674d3cc7 Handle changes in docker compat mode dbaaef5c4 Show package version when running on alpine b9a2d8698 Handlers for `generate systemd` with custom dependencies abcd29239 APIv2 tests: followup to recent log test 4b384e08a Add IndexConfigs to compat /info endpoint a0165a64b Bump github.com/opencontainers/runc from 1.0.3 to 1.1.0 af6a43fa4 apiv2 test: add regression test for #12904 4d1c327ed SECURITY.md: fix the project name c0e072346 rename --cni-config-dir to --network-config-dir 7e30531f2 compat attach: fix write on closed channel 774271c38 upgrade all dependencies 38fbc8af1 Revert "Cirrus: Temporarily disable OSX Cross task" 4adf457ff Bump github.com/opencontainers/runc from 1.0.3 to 1.1.0 bd09b7aa7 bump go module to version 4 f23e8ca67 [NO NEW TESTS NEEDED] add builddeps to copr template 471a4356b CI: rootless user: also create in some root tests c8124b88a [WIP] Tests for podman image scp (the sudo form) 141de8686 Revamp Libpod state strings for Docker compat 860463d97 Cirrus: Temporarily disable OSX Cross task 06ad51c83 update c/common to latest 10d969ff1 Use PODMAN_USERNS environment variable when running as a service 6bca61e0f Unify the method of parsing filters in cmd 3c2a5947c fix default branch links d6e55577c [CI:DOCS] fix default branch links bb3097cd0 [CI:DOCS] Unprivileged native overlayfs is now supported ab8a50848 [CI:DOCS] Fix typo in --env 420303b94 Recursively copy cert files. 8a7e70919 Refactor manifest list operations 350765e79 Add rpkg template for COPR autobuild 607cb80bf Fix cgroup mode handling in api server a15dfb364 Standardize on capatalized Cgroups 13917dfab test/system: podman run update /etc/hosts 14940a067 Remove two GetImages functions from API 72ab66d88 Use fully-qualified device name in CDI test 968deb7c2 Use new CDI API 96be2bb3d troubleshooting links to main branch bf3734ad5 Podman Build use absolute filepath 699683010 Prohibit --uid/gid map and --pod for container create/run a4cef5435 podman container rm: remove pod ece768ff9 Manual fixes for PR #12642: 92e787521 podman build enable --all-platforms and --unsetenv fa6405c3c use events_logfile_path from containers.conf for events log. f257d9839 Podman Pod Create --sysctl support b7fe25dc2 Wait for podman stop to complete 194d14ca2 libpod: fix check for systemd session 8dc2464b0 libpod: refine check for empty pod cgroup b24063582 fix buildah-bud test diff 85f9cf390 upgrade test: check that network backend is cni 918890a4d use netns package from c/common 0151e10b6 update buildah to latest and use new network stack 858b21064 podman image scp: implement --quiet 495884b31 use libnetwork from c/common fde6ad637 Add --noout option to prevent the output of ids 5aedcb364 remote events: convert TimeNano properly 47374aac8 Bump github.com/BurntSushi/toml from 0.4.1 to 1.0.0 485305a5f vendor latest c/common 6e208c222 add additional fields to podman machine ls --json 6fa077750 buildah bud tests: skip failing tests 83b0fb469 Fix permission on secrets directory 8f2358eea Add podman rm --depend f04465bfe fix host.containers.internal entry for macvlan networks 6d5ad9c11 It takes some time to start a VM c085fb3c9 Pretty Print output of podman machine ls --format json 19a475906 Use the InfraImage defined in containers.conf 799078216 Cirrus: Freshen VM images 0e4e5cf99 Revert "Cirrus: Temp. ignore gitlab task failures" a95c01e0e pkg: use PROXY_VARS from c/common a8b02cf4b ignition: add support from setting SSL_CERT_FILE 5c363ff27 ignition: propogate HTTP proxy variables from host to remote 18785450e Bump to v4.0.0-dev 9d26c1abb Bump to v4.0.0-RC1 508f9b76e System tests: fix RHEL8 gating tests b7380a7c3 vendor c/common 01ba2531b Remove dead RuntimeOption functions 0933f6c0b Update docker cli message for case where user creates directory 4dc5a5b15 Don't add env if optional and not found a8a3e8bc9 Fix type-o in podman.wxs 37c0b27b6 [CI:DOCS] fixes indentation of example pod yaml 7dada6d49 Prevent double decoding of storage options f68890815 Emergency system-test fixes 1941d45e3 add OCI Runtime name to errors 2a524fcae fix healthcheck timeouts and ut8 coercion 4191616cc Don't rename pod if container has the same name 13f3fd255 Set volume NeedsCopyUp to false iff data was copied up 7a24be6ad Fix CI 680923743 correct typo words in docs 64df41755 Change Tests to ignore missing containers when removing --all 79c5b73ed test/e2e/pod_initcontainers: fix a flake cf7fc3695 test/e2e/run: don't use date +%N on Alpine 2e0d3e9ea Support all volume mounts for rootless containers 32e845028 Fix wrong 'podman search --format' placeholder 0c6ae3ab2 Fix Container List API call to return mount info 76a944b14 fix misleading comment regarding default value of cpu period [NO NEW TESTS NEEDED] c496001d0 add --ip6 flag to podman create/run 116a276e8 legacy events: also set exitCode f6a3eddd2 Don't initialize the global RNG with GinkgoRandomSeed() in e2e tests 90e74e794 Avoid collisions on RemoteSocket paths ee146a9ab Refactor remote socket path determination in tests a8e223faf fix doc 2ff5644bf test/system: podman run image with filesystem permission fc65b0f73 test/system: podman run with log-opt option 1e3434d11 Update swagger documentation 6630e5cf6 Make it possible to select the volume driver a3326e23d Check the mount type for future compatibility 8e7eeaa4d Implement virtfs volumes for podman machine ec32430a0 [CI:DOCS] Add example of cpus to init command a2687783d prefix imageId with sha256: in containers list test for compat API ImageId 289270375 Pod Security Option support f21744939 ignition: add certs from current user into the machine while init 410082f25 docs: sort swagger operations alpabetically 7117d5605 .service file removal on failure 803defbe5 Introduce Windows WSL implementation of podman machine f6d00ea6e podman image scp never enter podman user NS e8c06fac9 Allow users to add host user accounts to /etc/passwd 1aa4e4d4d container creation: don't apply reserved annotations from image cbcab4342 [CI:DOCS] clarify `io.podman.annotations.seccomp` d669dbfb9 Error out early if system does not support pre-copy checkpointing b746b2256 Update go-criu to v5.3.0 cb4f498e4 [CI:DOCS] docs: document rootless userns mappings 3ac5999f8 Switch to a new installer approach using a path manipulation helper 207823eb0 e2e: Add dev/shm checkpoint/restore test f3d485d4d Enable checkpoint/restore for /dev/shm 2d7dbda41 Update github.com/checkpoint-restore/checkpointctl af1dbbfb7 Always run passwd management code when DB value is nil a5e49d966 Warn on use of --kernel-memory 04dbbd96b support hosts without /etc/hosts 20ce6e5c6 Podman run --passwd fca66b6cb ci: force scratch build for crun 64ce6949f Use hosts public ip address in rootless containers b1f5e861b compat: image normalization: handle sha256 prefix 89ee302a9 specgen: honor userns=auto from containers.conf bb096c3bf [CI:DOCS] Small checkpoint/restore man page fixes 1ddb49c66 [CI:DOCS] Explicitly mention that checkpointing systemd containers might fail 3570c38ff vendor: update containers/storage 48cb44651 build: fix test for subid 4 46a094a7a test: add --rm to podman run commands af6bcd086 fix(generate): fix up podman generate kube missing env field bug a1ebde118 legacy events: also set Action="die" a837984c4 rootless: include the args in the debug message 5cbc6b62d apiv2 tests: use quay.io/libpod/testimage:20210610 for platform tests 12d762f8e image rm: allow for force-remove infra images 6423174c6 tests: adjust old build test to expect exit code 28018ce60 Test for checkpoint specific inspect fields bc3389e21 Add more checkpoint/restore information to 'inspect' f566d8b8e build: relay exitcode from imagebuildah to registry e88c21366 Removed .service file for healthchecks a86495ea6 Set machine timezone 459e78414 MovePauseProcessToScope do not seed everytime f241efb17 bindings rmi test: clarify behavior 03a3fc37f bump cobra to 1.3.0 6cde9255f .github: revert to the old template 4243ca93a oci: configure the devices cgroup with default devices 3b6510da6 kill: fix output 5392ff51c e2e: search flake: skip test on registry.redhat.io 7b51acd4c APIv2 tests: fail on syntax/logic errors 51a4bef2e Show --external containers even without --all option 0a2eb7b18 apiv2 tests: refactor complicated curls 888c778ee fix network id handling afdb4dc22 Update Windows Install Doc 52b12fe98 Fixes #12063 Add docker compatible output after image build. 65d5a2b68 pause scope: don't use the global math/rand RNG ef325bc8c specgen: check that networks are only set with bridge 094e1d70d container restore/import: store networks from db 3e9af2029 play kube add support for multiple networks 535818414 support advanced network configuration via cli d072167fe Add new networks format to spegecen 46938bbf8 fix incorrect swagger doc for network dis/connect 4791595b5 network connect allow ip, ipv6 and mac address 9ce6b6413 network db: add new strucutre to container create 4e8ad039c remove unneeded return value from c.Networks() 5490be67b network db rewrite: migrate existing settings 5f1f62f0b network ls: show networks in deterministic order 5a071d9f5 Bump github.com/docker/docker 1fff76c3c pprof flakes: bump timeout to 20 seconds 50501f49a Add secret list --filter to cli 8cb93ac10 Cirrus: Temp. ignore gitlab task failures 81a0a7984 compat build: adhere to q/quiet 5bbcfaf4a Make XRegistryAuthHeader and XRegistryConfigHeader private 3cfefa124 Remove the authfile parameter of MakeXRegistryAuthHeader d79414c54 Simplify the header decision in pkg/bindings/images.Build a bit f9be32627 Remove the authfile parameter of MakeXRegistryConfigHeader 935dcbb00 Remove no-longer-useful name variables 0e29b8975 Consolidate creation of SystemContext with auth.json into a helper fe1230ef7 Remove pkg/auth.Header 3725a34cb Call MakeXRegistryAuthHeader instead of Header(..., XRegistryAuthHeader) 78dd79752 Turn headerAuth into MakeXRegistryAuthHeader d073b1275 Call MakeXRegistryConfigHeader instead of Header(..., XRegistryConfigHeader) 8155fb565 Turn headerConfig into MakeXRegistryConfigHeader 29f408871 Move the auth file creation to GetCredentials 9d56ebb61 Consolidate the error handling path in GetCredentials da86a2328 Only look up HTTP header values once in GetCredentials 1589d70bc Use Header.Values in GetCredentials.has 2946e8349 Beautify GetCredentials.has a bit 1ecc6ba72 Pass a header value directly to parseSingleAuthHeader and parseMultiAuthHeader 6f1a26b04 Simplify parseSingleAuthHeader 7674f2f76 Simplify the interface of parseSingleAuthHeader 2aeb690d3 Don't return a header name from auth.GetCredentials 491951d66 Fix normalizeAuthFileKey to use the correct semantics 1b6bf9713 Rename normalize and a few variables d29a4a6d1 Add TestHeaderGetCredentialsRoundtrip ad7e5e34f Add tests for auth.Header 5a5aa6009 Improve TestAuthConfigsToAuthFile ff003928b Add unit tests for singleAuthHeader b162d8868 Add unit tests for multiAuthHeader bc191ca7d fix e2e test missing network cleanup 99bc00421 pprof CI flakes: enforce 5 seconds grace period 1d781ccbe [NO NEW TESTS NEEDED] rootless: declare TEMP_FAILURE_RETRY before usage (Fixes: #12563) 593d0907c --hostname should be set when using --pod new:foobar a63035be2 Cirrus: Use cached swagger binary 6d19ecadc inotify: make sure to remove files 18854f566 System tests: remove rm_pause_image() b526a0ccd specgen: honor empty args for entrypoint 2d517b687 generate systemd: support entrypoint JSON strings 6c05961ba Bump github.com/uber/jaeger-client-go d7f6f4e88 remove runlabel test for global opts 0999245e4 utils: reintroduce moveToCgroup 99e9fcdb6 autocopr: distro conditionals for containers-common d87a9b788 vendor c/image/v5@main 2130d1853 Update vendor or containers/common moving pkg/cgroups there 7d0fd175f volume: apply exact permission of target directory without adding extra 0111 851349345 Cirrus: Remove remnants of nix-based static build d35aa3f29 Refactor podman pods to report.Formatter 3753347d6 rootless netns: resolve all path components for resolv.conf eee3a42b7 tests: clean up FIXMEs and noise 207065ce9 fix remote run/start flake 6d7e6d744 e2e: fix pprof flakes c91fb244c Bump github.com/opencontainers/runc from 1.0.2 to 1.0.3 76f5100be vendor c/common@main 527fd3c0f Escape trailing slash in install directory location so the closing quote is not escaped e89a62602 centos 9 stream cannot use %autochangelog 7d22cc88e Refactor podman system to report.Formatter [NO NEW TESTS NEEDED] 8e0532623 add spec file for automated copr builds c9ad1da51 Add restart-sec option to systemd generate 2e132d1d4 Fix documentation of (podman image save --compress --uncompressed) 952046ffd Improve documentation of (podman image save --format) 7d331d35d Add support for configmap volumes to play kube bd9f8815e cmd, push: use the configured compression format aafbaa497 [CI:DOCS] logformatter: fix corner case with links ecd48325f UPdate vendor of image-spec and containers/storage fe1cdab59 vendor: update containers/common babc69367 Update doc to explictly mention using ed25519 in ssh keys 61792de36 Refactor podman image command output 6cb25b3d1 Manual fixes eb1212bed Same thing, with BeNumerically("==", x) c0a8814fb Use HaveLen(x) instead of Expect(len(y)).To(Equal(x)) 92f9e1176 Same thing, for BeNumerically("==", 0) 7c6123f8e Use BeEmpty() instead of len(x).To(Equal(0)) c67649546 Same as previous, for assertions other than Equal() 478f2da5d e2e tests: a little more minor cleanup 8d6d9df40 compat API: push: report size of manifest 2683ecbbc compat: images/json a0e696411 Add ashley-cui, lsm5 and floutoc to owners 65109494b remove ARTIFACT_DIR and ArtifactPath 3ac1b9bc0 Image caches: allow overriding cache dir 5ac66e2aa Rename CrioRoot as just Root 3ff47748d Fix possible rootless netns cleanup race db3a4c070 [NO NEW TESTS NEEDED] Refactor podman container command output 4e63f9192 Hostname in `spec.hostname` should be passed to infra ctr init opt 0afaf7837 container, cgroup: detect pid termination e2b344728 top: parse ps(1) args correctly 6673ff78d podman, push: expose --compression-format 9ce7ade8c e2e: yet more cleanup of BeTrue/BeFalse f415b3055 Ensure the generated NodePort values are unique a948ecbb9 Allow containerPortsToServicePorts to fail ec686d68d Don't use the global math/rand RNG for service ports d48c00418 Move a comment to the relevant place 8eb0be0a2 a few more manual BeTrue cleanups f7cbb1d84 Convert strings.Contains() to Expect(ContainSubstring) 12787963b e2e tests: more cleanup of BeTrue()s 5a56f4094 Implement 'podman run --blkio-weight-device' 9a10e2124 systemd: replace multi-user with default.target 5bdd571b1 compat API: allow enforcing short-names resolution to Docker Hub 0ddb09448 Fixed the containerfile not found during remote build. c80a2e449 podman-remote: prevent leaking secret into image e7204178e podman-remote: copy secret to contextdir is absolute path on host bfcaf538b api: allow build api to accept secrets 931c08157 Only open save output file with WRONLY f330c197b List /etc/containers/certs.d as default for --cert-path b63d69640 e2e tests: enable golint 697ff213d fix: parsing of HostConfig.Mounts for container create 2e50514ad Move the chown to after the ADDs cbda62d1b fix: error reporting for archive endpoint d5c3cc949 Bindings test: emit GIT_COMMIT, for links in logs bc3c5be2f checkpoint do not modify XDG_RUNTIME_DIR e648122b2 libpod: improve heuristic to detect cgroup a66f40b4d libpod, inspect: export cgroup path b25b33030 stats: get the memory limit from the spec 84e81252f compat: Add compatiblity with Docker/Moby API for scenarios where build fails c7ebaeee0 libpod: leave thread locked on errors eb3708a52 Find and fix empty Expect()s df6aa6730 Unset SocketLabel after system finishes checkpointing c034147fe Remove StringInSlice(), part 2 2fcb39586 Remove StringInSlice(), part 1 cd59721de e2e test cleanup, continued 533636395 Update basic_networking.md 5cf2683bf Warn on failing to update container status a4e4b8d92 oci: ack crun output when container is not there 08558b27f oci: exit gracefully if container is already dead dd80635df Support env variables based on ConfigMaps sent in payload 0d1aaf080 image lookup: do not match *any* tags 566b78dd0 generate systemd: add --start-timeout flag 49d63ad5c Oops! Manual edits to broken tests 97ab9176f e2e tests: clean up antihelpful BeTrue()s aa301225a Cirrus: Strip out static nix build 9c8fb5cc0 Rename pod on generate of container 2ab28140d [CI:DOCS] Update notes on java TZ in man page 73e95d1c3 Bump github.com/containers/image/v5 from 5.16.1 to 5.17.0 044edbb9c Fix netavark error handling and teardown issue 13ee1788f swagger: add layers to build api docs 022273c19 compat: add layer caching compatiblity for non podman clients f564c9a34 Bump github.com/opencontainers/selinux from 1.9.1 to 1.10.0 a8b3c67b9 Add note about volume with unprivileged container d173ebc06 Add EXPOSE e2e test 02be831ce Support EXPOSE with port ranges ab56a7c4b compat: Add subnet mask behind IP address to match Docker API d06899769 [CI:DOCS] Add java TZ note to run manpage 44b240470 Bump github.com/rootless-containers/rootlesskit from 0.14.5 to 0.14.6 21629b050 podman-remote does not support signature-policy ced0ffbe8 Add tests for restore runtime verification c76caba36 Use same runtime to restore a container as during checkpointing 8198e96f3 Force iptables driver for netavark tests 501643c8b Make sure netavark output is logged to the syslog 6011149ca filter: use filepath.Match to maintain consistency with other pattern matching in podman c03b6b54f Semiperiodic cleanup of obsolete Skip()s a3664269b [CI:DOCS]upload a translation file b2623ceb4 api/handlers: Add checkpoint/restore FileLocks 84021cfdc test: Update error string for --file-locks test 22ef7b620 fix duplicated logs command 19400ec0d Bump github.com/docker/docker 7f96a8d2d Bump k8s.io/api from 0.22.3 to 0.22.4 0dae50f1d Do not store the exit command in container config 7098463e7 Add test for checkpoint/restore with --file-locks 6d23ea60d Add --file-locks checkpoint/restore option 7f52bd843 Cirrus: Bump Fedora to release 35 3ee2d2367 Cirrus: Partially revert catatonit --force install 226be65bd Revert "Cirrus: Temp. disable prior-fedora testing" 5bd43fbea Cirrus: Workaround log_driver=journald setting f3021f3f6 Cirrus: Fix bindings test hang b/c logging config mismatch 155a443a9 Cirrus: Timeout bindings test after 30m 3aa7076ff Cirrus: Log more things in bindings and unit tests d6d1ce980 Minor Makefile fix 62d6b6bf7 rootless netns, one netns per libpod tmp dir 2e5d3e8fb Introduce Address type to be used in secondary IPv4 and IPv6 inspect data structure. e83d36665 volumes: add new option idmap fceecc3a5 remote checkpoint/restore: more fixes 6f6a6925b fix CI 010bee04c fix: take absolute path for dd on apple silicon d6c18902e System tests: new checkpoint tests 3073543fd rootless: use catatonit to maintain user+mnt namespace cb9de1007 rootless: drop strerror(errno) calls 084e32336 rootless: reuse existing open_namespace function 277d52686 rootless: use auto cleanup functions ee6271113 utils: use podman-pause-$RANDOM.scope name e367f4614 hack/bats: deal with new bin helpers 422dc5e69 Change error message for compatibility with docker 97c6403a1 rename libpod nettypes fields 8ca300ae9 podman machine start wait for ssh 33ec8c669 fix remote checkpoint/restore 44d1618dd Add --unsetenv & --unsetenv-all to remove def environment variables 364b242b7 Set config environment variables early in Podman init 63ef7135d journald logs: keep reading until the journal's end 014cc4b9d secret: honor custom target for secrets with run 5df883e87 bindings: reuse context for API requests 295d87bb0 podman machine improve port forwarding c21259bf8 Network test: fix podman-remote-rootless corner case c050f05cc filter: add basic pattern matching for label keys c8790bfbb cirrus: force-install catatonit 5934e4c9b infra container: replace pause with catatonit 58cf0d462 Revert "add kubernetes pause" d28b39a90 Added test for checkpoint/restore --print-stats 914f4c890 Update man pages for checkpoint/restore --print-stats 80e56fa12 Added optional container restore statistics 6202e8102 Added optional container checkpointing statistics 062c88771 Error logs --follow if events-backend != journald, event-logger=journald 9226ccb59 Enable 'podman run --memory-swappiness=0' 164c42b48 Fix network mode in play kube b1c002342 Always create working directory when using compat API f517510bc play kube: don't force-pull infra image ac38eca3f Podman Image SCP transfer patch 6762d5e23 --authfile command line argument for image sign command. f35d7f4dc Cirrus: Temp. disable prior-fedora testing 0b60b191d Cirrus: Update to Ubuntu 21.10 3af19917a Add failing run test for netavark fe90a45e0 Add flag to overwrite network backend from config 9f4d63f91 libpod: create /etc/mtab safely 8041d44c9 Add network backend to podman info b2f7430b6 Add more netavark tests 1c88f741a select network backend based on config 3fe0c4917 Fix RUST_LOG envar for netavark 4febe5576 netavark IPAM assignment eaae29462 netavark network interface 12c62b92f Make networking code reusable c43b81f9a Fix flake in upgrade tests 73e1cdfe9 export adding id-specifier code to setContainerNameForTemplate 980c47aaa VOLUME must be declared after RUN chown command 3690532b3 network reload return error if we cannot reload ports 27de152b5 network reload without ports should not reload ports a55fdbb49 Print headers for system connection ls 6236be4ff [CI:DOCS] Add CI check for SEE ALSO in man pages 1ef66d6d7 podman load: support downloading files 2720156fa Add links to all SEE ALSO sections df0666436 pod create: read infra image from containers.conf 9877280f5 rootless: adjust error message 216e2cb36 Fix rootless networking with userns and ports faf450ea1 support health checks from image configs 6ee3b33d3 change from run to create in 250-systemd.bats d0b502fce Exclude already built sources for static build 72cf38968 shm_lock: Handle ENOSPC better in AllocateSemaphore 8a9da7698 Fix Zsh completion command documentation 555e21557 Match .c files in Makefile 65609f338 Add Static Build download instructions to README 7225ddb5b Add links to podman build,run, create see also 2ed31f9f1 Minor test tweaks 8b7b0b7ca pod create: read network mode from config 5fbc67f20 Bump Catatonit up to v0.1.7 e907f095b test connection add 338eb9d75 system: Adds support for removing all named destination via --all 6444f2402 pod/container create: resolve conflicts of generated names f3fab1e17 podman-generate-kube - remove empty structs from YAML 4e8bf8be4 Add some information about disabling SELinux when using system volumes 02f67181a Fix swagger definition for the new mac address type 5c0351cc6 Log Apache access_log-like entries at Info level [NO NEW TESTS NEEDED] 3e1940a8e Test to check for presence of 'stats-dump' in exported checkpoints 6b8fc3bd1 Add 'stats-dump' file to exported checkpoint ffa5ed0e0 Podman Image SCP rootful to rootless transfer 7f433df7e rename rootless cni ns to rootless netns 58f8c3d74 mount full XDG_RUNTIME_DIR in rootless cni ns 6fee827c7 Bump github.com/checkpoint-restore/go-criu/v5 from 5.1.0 to 5.2.0 756dda298 Keep error semantics intact 614c6f597 Fix rootless cni netns cleanup logic b85e3764a tweak a couple of flag descriptions in help output ff92d7371 Update swagger doc make filed optional ba8eba83e Fix bindings container log test 0234b153c test: run --cgroups=split in new cgroup 001d48929 MAC address json unmarshal should allow strings 6e6388eac Make stop message more similar to start 449cc7a5c Implement top streaming for containers and pods f2115471d Handle HTTP 409 error messages properly for Pod actions d0dfc5e22 Add tests 48d0d2b4a Fix swagger definitions 48e1cca9f More conforming libpod API and swagger types 62ee24bb7 More conforming libpod API and swagger types a845613d0 Better emptiness test for custom JSON serializer 7b2531c13 System tests: enhance volume test, add debug prints 15eb01601 add unit test to containers_test 120ad2d3c Use correct swagger type in doc-comment 9c34bd52f Cirrus: Authorize rootless user self-ssh 218d91d76 Fix libpod API conformance to swagger e69eae645 Fix help message case for `podman version` 9fc98f265 Fix pause usage example 749487600 Use systemctl in local system test 98506c961 Allow label and labels when creating volumes c5f0a5d78 volumes: be more tolerant and fix infinite loop 3c79202fb Add information on how podman machine is updated 4e9e6f21f volumes: allow more options for devpts e6286fbac volumes: do not pass mount opt as formatter string feebf1bd8 Bump k8s.io/api from 0.22.2 to 0.22.3 960831f9c runtime: change PID existence check 9e5cd3205 oci: rename sub-cgroup to runtime instead of supervisor 0136a66a8 libpod: deduplicate ports in db e68fbf03a Set flags to test 'logs -f' with journald driver dcbf5cae1 Set Checkpointed state to false after restore ff31f2264 container create: fix --tls-verify parsing 6b3b0a17c runtime: check for pause pid existence 825889cc7 utils: do not overwrite the err variable d53789068 Fix systemd PID1 test 864748df5 Record the image stream along with the path 55397de93 cgroups: use SessionBusPrivateNoAutoStartup 8163d38c6 vendor: update godbus to v5.0.6 008075ce5 Slirp4netns with ipv6 set net.ipv6.conf.default.accept_dad=0 c723e6b97 Fix a few problems in 'podman logs --tail' with journald driver bf8fd943e Allow 'container restore' with '--ipc host' efd1c080b Document to not set K8S envars for CNI 773caf293 Bump github.com/docker/docker 75f478c08 pod create: remove need for pause image 9d2b8d279 add kubernetes pause e86549b18 cirrus: containers: mount directory in /var/tmp to /tmp 2e3611d61 overlay root fs: create mount on runtime dir a42c131c8 Update vendor github.com/opencontainers/runtime-tools d6296c918 If Dockerfile exists in same directory as service, we should not use it. adee084d6 Fix tests of podman image trust --raw and --json 53ff49237 Tighten the expected output of the "podman image trust show" test c872788e4 Use INTEGRATION_ROOT instead of current directory acd8b4900 Add support to play kube for --log-opt d7662edf6 [NO NEW TESTS NEEDED] Fix off-by-one index comparision (reported by LGTM) 24c83980e Fix some typos in documentation and comments (found by codespell) 22270fb84 Replace 'an user' => 'a user' 936ab158c [CI:DOCS] Fix typo keep_id -> keep-id 38c78381c Set DOCKER_HOST in the VM ce4ed7d13 fuse-overlay probably means fuse-overlayfs. ece0c7e5d Support template unit files in podman generate systemd 8e3760c29 Remove --kernel-memory options f4f96962c tag: Support tagging manifest list instead of resolving to images 30245f584 Remove infra ID from DB before removing containers 70a5d8cd1 System tests: confirm that -a and -l clash 12d0a8509 systemd: compatible with rootless mode 960a55c09 system tests: CONTAINER_* and --help: cleanup 20b5a8599 podman run --memory=0 ... should not set memory limit c3801f0fa Add information on how to discover default log driver d24ce0a33 Add test for system connection 517b56b02 Generate Kube should not print default structs 9500e11a8 libpod: change mountpoint ownership c.Root when using overlay on top of external rootfs 34dcbc949 Change podman connection list to use default field 087f8fc73 Allow API to specify size and inode quota db7a98de4 Use exponential backoff when waiting for a journal entry 4f7a431da Pod Rm Infra Improvements c8cffe1b3 system tests: socket activation: clean up d0f7b99c6 rootfs-overlay: fix overlaybase path for cleanups 468e7c689 Move CONTAINER_HOST and _CONNECTION to IsRemote Function 207abc4a9 We should only be relabeling when on first run 4f857bc10 If CONTAINER_HOST env variable is set default podman --remote=true 8db62d04f Set targetPort to the port value in the kube yaml 16e7cc8bf Do not add TCP to protocol in generated kube yaml ab4c9a894 Use CGO_ENABLED=1 when building natively on darwin c1497cf44 Test-hang fix: Wait for ready + timeout on connect. 8439a6d5e Checkpoint/Restore test fixes f9ff0525c Don't include ctr.log if not using file logging 50b9d82f2 Don't use docker/pkg/archive, use containers/storage/pkg/archive 7112a4159 Fix codespell errors 184de3955 Adjust tests to verify all subcommands show the help message 8cae2978e Fix panic in container create compat api 5d18fb923 Don't add image entrypoint to the generate kube yaml cc875fd26 Display help text on empty subcommand by default 14bfee31f podman search: display only name and description by default 8600bce53 codespell code 7b1e386f7 Add information about .containerignore to podman build man page cead18537 CNI: fix network create --ip-range 4631f5b28 Kube Gen run as user/group issues 3ba69dccf rootlessport: reduce memory usage of the process ab0e6630f No space in kube annotations for bind mounts 0459484bd Fix CI flake on time of shutdown for API service b28a8bc19 Refactor podman search to be more code friendly 69b665996 Unit files: Use actual installed path for podman 1e81787e3 Bump github.com/onsi/ginkgo from 1.16.4 to 1.16.5 9042520cf cgroups: use cgroup.controllers to read controllers ab8fb3876 builder: Add support for builder prune 7580c2273 Remove a volume with --force if container is running 6b2939884 Use SplitN(2) when copying env variables e57b32c59 podman stats: move cgroup validation to server 54471acba fix test dd5975f3d Support readonly rootfs contains colon 90b5318b8 [CI:DOCS] oci-hooks.5.md: fixup section in header 8d3aec9d0 Enable /debug/pprof API service endpoints 5caf6b94e Not all fields in machine list were set properly fad14dafe faster image inspection 48d26a893 Warn if podman stop timeout expires that sigkill was sent 6fc73ea4e [CI:DOCS] introduce --replace flag for play kube 0479fd8d6 [CI:DOCS] Include manifest example usage a487a6382 Change podman.1 man page to show corret log-level default da8e4cdeb Bump github.com/opencontainers/selinux from 1.8.5 to 1.9.1 6f9e9ee9e Fixes #11668 fbce7584d libpod: fix race when closing STDIN 8bd9f58d1 Ensure `podman ps --sync` functions e1089e89d Allow `podman stop` to be run on Stopping containers 675d2d0c1 Bump github.com/containers/image/v5 from 5.16.0 to 5.16.1 033a662b9 Bump github.com/docker/docker 521c0cbd1 It really should be no **NEW** tests needed fb118b852 README.md: Point to Podman's channels 8e80f4d24 Add podman-plugins to upstream image a726043d0 CNI networks: reload networks if needed 8156df5b7 bump c/common to latest and c/storage to 1.37.0 21c9dc3c4 Add --time out for podman * rm -f commands d6b9451b4 Cirrus: Fix defunct package metadata breaking cache 163d81cc0 Pod Events Logging Fix c67593df1 [NO TESTS NEEDED] Ignore removed containers 6da97c863 Pod Volumes From Support 4ea5d6971 Add note about empty fields and null values for API responses 97bf6331f Bump github.com/containers/buildah from 1.23.0 to 1.23.1 641f0ccc4 Add podman play kube --no-hosts options fb2355adb Gating tests: fix permissions error 686b7ef7b pkg/specgen: cache image in generator 0b5a2b746 cirrus: gitlab: download packages 648882bf6 Add guard for BuildOptions.CommonBuildOpts bf94ebf42 System tests: tighten 'is' operator 7e81d78ed Update README and release notes for v3.4.0 cc4232169 sdnotify test: accept MAINPID anywhere 642d68299 machine: silently cleanup dangling sockets before rm if possible a1dce3a0d Add expose type map[uint16]string to description 0a156211d [NO TESTS NEEDED] Fix typo in storage.conf file exists message 1ff6a5082 Support selinux options with bind mounts play/gen 9c6c98192 kube: fix conversion from milliCPU to period/quota 5090920cc Bump github.com/mattn/go-isatty from 0.0.12 to 0.0.14 5c1b3e8d7 test: use new helper 788106dad test: skip test on rootless cgroupsv1 5a33b7aef machine: Info on successfully stopping qemu machine c25cc7230 Allow a value of -1 to set unlimited pids limit 1805ed360 Vendor in latest containers/storage c9ea2cae1 Storage can remove ErrNotAContainer as well ccff77025 libpod: container create: init variable: do not deep copy spec 5ea369ade libpod: add GetConfigNoCopy() 30bf31010 libpod: add execSessionNoCopy 98176f001 libpod: do not call (*container).Spec() 2d8605189 Pod Device-Read-BPS support 97f755f87 Remind user to check connection or use podman machine 678b554b1 Ensure pod ID bucket is properly updated on rename 60824c613 Fix contributor make targets on Ubuntu and Debian 0d4fa7bc9 Implement PR template to assist review & release 5d6ea90e7 libpod: do not call (*container).Config() a3cdee979 [NO TESTS NEEDED] Add port configuration to first regular container d14f66972 [CI:DOCS] cmd/podman: no dot for short descriptions 1c8926285 move network alias validation to container create d0950f3ef set --cni-config-dir for exit command 05614ee13 always add short container id as net alias a9a54eefa image prune: support removing external containers 86083c580 System tests: speed up. They've gotten too slow. 344ba32c8 Add dockerfile.5 as man link to containerfile man page 87559b020 Set MSI to be 64-bit only. ca3c08bf9 fix podman network prune integration test flakes f76fa3475 Cirrus: Add gitlab podman runner test 1df0646b0 CNI: network remove do not error for ENOENT 464fec260 remote build: EvalSymlinks() the context directory 8fca626e3 stop: Do nothing if container was never created in runtime 3ce98a5ec logging: new mode -l passthrough 3600054d1 Allow machine options to be set from containers.conf 5a2ca77b9 Vendor in containers/common v0.46.0 c668ca859 podman machine: do not join userns b3307bc9c Disable docker and alias to podman in FCOS ignition 1e0039a83 added healthcheck to ps command a97551eb2 Fix english on prune prompt 3d8dec982 Document missing /images/search query parameters 6095c4fac rootful: do not set XDG_RUNTIME_DIR for cni plugins 1cf66f514 Revert "rootful: unset XDG_RUNTIME_DIR" ba46613a6 Add completion for machine list format 2df0685cb Set context dir for play kube build ce080d25c Makefile: use -ldflags/-gccgoflags depending on the go implemenatiton 82818caff Update docs for --platform in podman-build.1 b6e5a4909 shell completion: do not show images without tag 119973375 podman inspect add State.Health field for docker compat 01bf8a668 podman save: enforce signature removal 4ecaf85d9 Add JSON version of the machine list ed3c4a89d Add support for :U flag with --mount option 2d5d98c04 [CI:DOCS] Add link to running ctrimage on enablesysadm b6fecbb75 Ignore mount errors except ErrContainerUnknown when cleaningup container 1c4e6d862 standardize logrus messages to upper case 45ee5c5db podman generate kube should not include images command f5f95d722 Fix machine image db44addf9 sync container state before reading the healthcheck 0baee2cc3 Also show the (initial) disk size 911298252 Show cpus and memory in machine list 5acf8ae12 Eighty-six eighty-eighty 68d21b6ff net types: remove omitempty from required fields 49c5688a3 podman save: add `--uncompressed` af49810a6 Bump CNI to v1.0.1 5875e409e vendor c/psgo@v1.7.1 738f2b36e [CI:DOCS] Add network alias note in man pages 4ecbc7caa Add a backoff and retries to retrieving exited event 319fcf52f Cross-build release-archives w/ arch in filename 34043bd81 Fix Error, empty output for info: 'VERSION' 185294cb8 Generate kube should'd add podman default environment vars ae5de8b39 volume: Add support for overlay on named volumes 8fac34b8f Pod Device Support 8453c8ce6 Support --format tables in ps output 61217f3ba Remove references to kube being development b74edfb0a Add support for retrieving system service --timeout 3221f50a4 Add podman image/container inspect man pages 665b451e5 [CI:DOCS] Add link to skopeo delete in podman rmi 509812457 vendor c/common@main 92ee2f372 remote untag: support digests cb077c968 Created MapOptions for PodCreate a1861c570 Bump k8s.io/api from 0.22.1 to 0.22.2 5242030ac compat API: /images/json prefix image id with sha256 cf28dab9f podman machine: use gvproxy for host.containers.internal eea5d2512 utils: return error message from StartTransientUnit 4caca0969 utils: raise warning only on cgroupv2 74ad05396 Add podman machine init --now option 22df773f7 System tests: cleanup, and remove obsolete skips e3e9e5175 Add username flag for machine ssh c692f7a18 Remove unused code from libpod 62350fed6 [CI:DOCS] markdown cleanup 613ef220f Fix up build the docs site 7ca666f47 Use a new markdown converter for sphinx a2c8b5d9d runtime: move pause process to scope 72534a74b system: move MovePauseProcessToScope to utils 9c1e27fdd system: always move pause process when running on systemd fa9728c55 system: avoid reading pause pid file f1ee23425 Only add 127.0.0.1 entry to /etc/hosts with --net=none 4216f7b7f Add no-trunc support to podman-events aee0ab98c CNI: add ipvlan driver c20f61148 CNI: network create support macvlan modes 5c7935057 Do not allow network modes to be used as network names 9c091e42d fix inverted condition 7c5d64b47 Fix /auth compat endpoint 5e8309464 Add Drivers method to the Network Interface 1bcd006c5 CI: load ipv6 kernel modules for rootless tests b906b9d85 Drop OCICNI dependency 85e8fbf7f Wire network interface into libpod 218f132fd cni network configs set ipv6 enables correctly 24bec9a76 default network: do not validate the used subnets aa7bc4e37 network create: validate the input subnet 3e77f960f Set default storage from containers.conf for temporary images 0b1c45bc5 container runlabel remove image tag from name 962675c14 build.bats: fix copy tests after containers/buildah#3486 d0c605cd3 build: mirror --authfile to filesystem if pointing to FD instead of file 5cafb6d18 Fix example in podman machine init man page 222b62e7b vendor: Bump github.com/containers/buildah from 1.22.3 to 1.23.0 9b04e1789 api: handle nil pointer dereference in rest endpoints 5dbf3ee7a build: take advantage of --platform lists 64de4f612 Document `all` query parameter for /libpod/images/prune 38c5f6721 Show variant and codename of the distribution 952fc4a6f Use new aarch64 fcos repos d7256be80 Enhance bindings for IDE hints 84005330a Pod Volumes Support b1768d3b0 test: enable --cgroup-parent test 44abc1797 libpod: honor --cgroups=split also with pods 65f3b16c6 tests: enable --cgroups=disabled test for rootless afe4d17be tests: simplify --cgroups=disabled test d3f0f09ad libpod: rootful close binded ports 072b061b4 Search gvproxy with config.FindHelperBinary() a55e2a00f rootfs: Add support for rootfs-overlay and bump to buildah v1.22.1-0.202108 6221f269a fix restart always with rootlessport d30facfda Cirrus: NM/CNI workaround + Remove prior-Ubuntu ba2130ff5 If container exits with 125 podman should exit with 125 9ae947654 Bump github.com/json-iterator/go from 1.1.11 to 1.1.12 b0cbcd1d0 bump c/common to v0.44.0 32424d9a9 remove rootlessport socket to prevent EADDRINUSE 3c77a98e4 Add deprecated fields for 1.22+ clients that still expect them 7a667c4ac Use default username for podman machine ssh Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-22podman: update to 3.4.2Bruce Ashfield
Bumping libpod to version v3.4.2-4-g72031783c, which comprises the following commits: 25f35ac9e Use CGO_ENABLED=1 when building natively on darwin 7c98d542b Bump to v3.4.3-dev 2ad1fd355 Bump to v3.4.2 1d6397e5c Add release notes for v3.4.2 6d9b1e4b8 Fix partial log line handling with journald log driver 8b368b5e1 Fix Zsh completion command documentation c2fb170b8 Fix flake in upgrade tests 6770fede7 VOLUME must be declared after RUN chown command cedf1a3d4 podman-generate-kube - remove empty structs from YAML e456873c0 Exclude already built sources for static build e9f6e5194 Match .c files in Makefile de852ebd0 shm_lock: Handle ENOSPC better in AllocateSemaphore fc1707dfe Minor test tweaks c8b7ca2ba pod/container create: resolve conflicts of generated names 2dc8db773 Add some information about disabling SELinux when using system volumes 93a3e720d Log Apache access_log-like entries at Info level [NO NEW TESTS NEEDED] b1ac02dcb tweak a couple of flag descriptions in help output 718de67f3 Fix bindings container log test dd6551055 test: run --cgroups=split in new cgroup df9e0fdcb Fix tests of podman image trust --raw and --json df736396e Tighten the expected output of the "podman image trust show" test 18c322d1c Use INTEGRATION_ROOT instead of current directory 3bd80ac9a Handle HTTP 409 error messages properly for Pod actions a8332f694 Fix swagger definitions 5889c2c24 Cirrus: Authorize rootless user self-ssh 2a0aad6be Add information on how podman machine is updated 0ded340e6 Fix help message case for `podman version` fa29ca710 Fix pause usage example 6bf6d7237 Set Checkpointed state to false after restore 2d6252b98 runtime: change PID existence check a208bc24d Set DOCKER_HOST in the VM 246782133 runtime: check for pause pid existence 0519e7ef8 utils: do not overwrite the err variable 2b85684ad Fix systemd PID1 test 0e1f67b72 cgroups: use SessionBusPrivateNoAutoStartup 9707ff5d4 vendor: update godbus to v5.0.6 a67bf0f92 Slirp4netns with ipv6 set net.ipv6.conf.default.accept_dad=0 47afa6d96 Fix a few problems in 'podman logs --tail' with journald driver 729310a85 If Dockerfile exists in same directory as service, we should not use it. 7275d389b Document to not set K8S envars for CNI 955d01f5a [NO NEW TESTS NEEDED] Fix off-by-one index comparision (reported by LGTM) 2ff511798 Fix some typos in documentation and comments (found by codespell) eead06b9d [CI:DOCS] Fix typo keep_id -> keep-id 8887cc7e4 podman run --memory=0 ... should not set memory limit 6f779b230 systemd: compatible with rootless mode 465e27cf1 Use exponential backoff when waiting for a journal entry 3b67336b6 Pod Rm Infra Improvements f8ede7c5e System tests: confirm that -a and -l clash c3f3e6d3b Remove infra ID from DB before removing containers b3eaa08c5 Generate Kube should not print default structs d489abf26 fuse-overlay probably means fuse-overlayfs. 34739f441 Replace 'an user' => 'a user' 9c94530bb network reload without ports should not reload ports eca1b6c0b pod create: read network mode from config 9e78185e3 volumes: be more tolerant and fix infinite loop 5c2d17e1c [backport] tag: Support tagging manifest list instead of resolving to images 46f7d2af1 Bump to v3.4.2-dev a6493ae69 Bump to v3.4.1 56a4372c2 Update release notes for v3.4.1 f05e206bd Fix test failures from backports 437ec951d system tests: socket activation: clean up 5aa89c88f Checkpoint/Restore test fixes d39e41283 Set targetPort to the port value in the kube yaml 7923bfcb0 Test-hang fix: Wait for ready + timeout on connect. c135ff76d Don't include ctr.log if not using file logging 9168db8bc Do not add TCP to protocol in generated kube yaml b5dd62f31 Don't use docker/pkg/archive, use containers/storage/pkg/archive a213661ae Fix panic in container create compat api 92ed439d2 Don't add image entrypoint to the generate kube yaml 16fb4161a Kube Gen run as user/group issues 3082ba8b7 No space in kube annotations for bind mounts b470de05b cgroups: use cgroup.controllers to read controllers 8b87793d4 Use SplitN(2) when copying env variables d458bc304 [CI:DOCS] Include manifest example usage fbe94088f podman stats: move cgroup validation to server 338e01f04 [CI:DOCS] oci-hooks.5.md: fixup section in header de6a4af5a Change podman.1 man page to show corret log-level default 326eae3b7 Add podman-plugins to upstream image ca33df146 Ensure `podman ps --sync` functions 7bbf774e8 Allow `podman stop` to be run on Stopping containers 2cd206d0f libpod: fix race when closing STDIN 37347c321 It really should be no **NEW** tests needed 62d12a2ad Add guard for BuildOptions.CommonBuildOpts c6be71486 machine: silently cleanup dangling sockets before rm if possible 835d74ac6 sdnotify test: accept MAINPID anywhere 14509a92b Allow a value of -1 to set unlimited pids limit deb7517cc Gating tests: fix permissions error cd4e10fdf [v3.4] bump c/common to v0.44.3 91f9682c7 Bump to v3.4.1-dev 6e8de00bb Bump to v3.4.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-11-02global: convert github SRC_URIs to use https protocolBruce Ashfield
github is removing git:// access, and fetches will start experiencing interruptions in service, and eventually will fail completely. bitbake will also begin to warn on github src_uri's that don't use https. So we convert the meta-virt instances to use protocol=https (done using the oe-core contrib conversion script) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-10-21podman: add rdepend on nsenterBruce Ashfield
Podman requires nsenter (for obvious reasons) .. and while this dependency is normally satisfied on images (via busybox), it is possible to build a minimal container image that excludes busybox .. and hence will not have nsenter present. Rather than making this a hard rdepends on util-linux-nsenter, we use a variable: VIRTUAL-RUNTIME_base-utils-nsenter, which can either be set to busybox or util-linux-nsenter (the current default). The VIRTUAL-RUNTIME_base-utils- format follows similarly named OEcore providers and variables .. which the exception that there is no entry in the preferred providers file there, and there's no package created called busybox-nsenter (but perhaps there could be in the future). Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-10-15podman: check for ipv6 in DISTRO_FEATURESBruce Ashfield
When setting up networking, podman is looking for the ipv6tables executable. We have iptables in our rdepnds, but the ipv6 variant won't be available unless ipv6 is in DISTRO_FEATURES. We can use our distro feature check to detect the issue and alert the developer. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-10-04podman: upate to v3.4.oBruce Ashfield
We adjust the LICENSE checksum due to: commit 84694170402ff699065382ba2d2fb172c3b6c88f Author: Daniel J Walsh <dwalsh@redhat.com> Date: Thu Aug 26 13:15:23 2021 -0400 Globally replace http:// with https:// [NO TESTS NEEDED] Hopefully existing tests will find issues. Signed-off-by: Daniel J Walsh <dwalsh@redhat.com> and import the following changes: 6e8de00bb Bump to v3.4.0 3c93afbf4 Final release notes update for v3.4.0 128e168be Support selinux options with bind mounts play/gen 855746cc9 Fix release notes 09b353081 Release notes for v3.4.0 final release 2247d5f1b Disable docker and alias to podman in FCOS ignition 7d72e8324 [NO TESTS NEEDED] Add port configuration to first regular container 4fc40c82f Remind user to check connection or use podman machine 5064fd519 Ensure pod ID bucket is properly updated on rename ba74d6e6e libpod: do not call (*container).Config() a1199dbaf [CI:DOCS] cmd/podman: no dot for short descriptions ddc2b9bbe System tests: speed up. They've gotten too slow. b3af5a92c stop: Do nothing if container was never created in runtime 7bfc5250d remote build: EvalSymlinks() the context directory 7395459c7 podman machine: do not join userns 5e9aa13dc added healthcheck to ps command 6638a91e8 Fix english on prune prompt 31df5b78f rootful: do not set XDG_RUNTIME_DIR for cni plugins 8c944274f Revert "rootful: unset XDG_RUNTIME_DIR" 6ef2d3bd8 shell completion: do not show images without tag 063ba47d7 Update docs for --platform in podman-build.1 0f87cfd28 podman generate kube should not include images command da67c7199 Also show the (initial) disk size 2c5382ba9 Show cpus and memory in machine list 57c055f61 Ignore mount errors except ErrContainerUnknown when cleaningup container 8084c5ef2 Allow machine options to be set from containers.conf c0efa0dba Vendor in containers/buildah v1.23.1 6c7445d2b Vendor in containers/common v0.44.2 d6f6767a5 Set context dir for play kube build f2c676e99 [3.4] podman save: enforce signature removal 8ee18bde1 Use a new markdown converter for sphinx 9dd75d311 Bump to v3.4.0-dev e343b5368 Bump to v3.4.0-rc2 5bc648762 Release notes for v3.4.0-RC2 72e19cf51 Generate kube should'd add podman default environment vars 909cbfe21 sync container state before reading the healthcheck 897150946 Eighty-six eighty-eighty e06abee1d vendor c/psgo@v1.7.1 d45cbbda3 Add a backoff and retries to retrieving exited event 70da2e858 [CI:DOCS] Add network alias note in man pages a98e0371e Remove references to kube being development 70a428662 Support --format tables in ps output 45f8b01f6 Add podman image/container inspect man pages 863ea75c4 compat API: /images/json prefix image id with sha256 c66db2b70 [CI:DOCS] Add link to skopeo delete in podman rmi 7bfe9ca3d remote untag: support digests 7e6921170 System tests: cleanup, and remove obsolete skips 8784c1dd6 Remove unused code from libpod 79966def8 [CI:DOCS] markdown cleanup be15a01c5 Only add 127.0.0.1 entry to /etc/hosts with --net=none d27fcbdc2 container runlabel remove image tag from name 1a25a90a4 Fix /auth compat endpoint c8fd65ea6 fix inverted condition 3bd3c6213 Fix machine image 331ce0f7e utils: return error message from StartTransientUnit 046fa2740 utils: raise warning only on cgroupv2 6001cd02a test/apiv2: set main version back to 3 4406ebb46 [3.4] vendor c/common@v0.44.1 40eeb7d3b runtime: move pause process to scope e6fe5d631 system: move MovePauseProcessToScope to utils ae5a5b51b system: always move pause process when running on systemd 34c9ce2ec system: avoid reading pause pid file 41cd360dc Bump to v3.4.0-dev bd47b9eff Bump to v3.4.0-rc1 29edeaa89 Fix buildah-bud tests by using main's diff file 66eb69224 Fix podman-build manpages by using version from main a647e1d18 Fix release notes 0d43151c2 Remove Pod CPU tests fd56c8386 Set DEST_BRANCH in cirrus to fix CI 4841ec5c6 Final release notes for v3.4.0 RC1 5532cd488 libpod: honor --cgroups=split also with pods e07dccc3a build: take advantage of --platform lists c7c4cb886 build.bats: fix copy tests after containers/buildah#3486 c407813d6 build: mirror --authfile to filesystem if pointing to FD instead of file 69e327378 Bump to Buildah v1.23.0 331d4c5c7 Further release notes updates 901cf71a6 Show variant and codename of the distribution 507000a30 api: handle nil pointer dereference in rest endpoints 702e524ff Fix example in podman machine init man page c8cbd87fd Document `all` query parameter for /libpod/images/prune 939db105c tests: enable --cgroups=disabled test for rootless e0881fd5e tests: simplify --cgroups=disabled test 74bc365eb Enhance bindings for IDE hints e37883f13 Cirrus: NM/CNI workaround + Remove prior-Ubuntu 0ca62196a libpod: rootful close binded ports b6789c3d5 fix restart always with rootlessport ffc8e57d3 remove rootlessport socket to prevent EADDRINUSE fd8d332a4 test: enable --cgroup-parent test 33591c3ef Search gvproxy with config.FindHelperBinary() 1af0f8934 Add deprecated fields for 1.22+ clients that still expect them c6e4453f6 If container exits with 125 podman should exit with 125 5829d62ea Use default username for podman machine ssh c487389fa bump c/common to v0.44.0 069d90124 Initial release notes for v3.4.0 RC1 3c24d1fda Remove pod create options `--cpus` and `--cpuset-cpus` fceec6972 Use new aarch64 fcos repos 31604b43d Revert "logs: adjust handling around partial log messages" c23f81fab Fix #11444: remote breaks with stdout redirection a8875faca [CI:DOCS] Remove short 'a' option from all-tags eec59cea2 Bump github.com/containers/storage from 1.35.0 to 1.36.0 deaf96924 Refacter API server emphasis on logging 4fbc5b8fe Stop outputting 'healthy' on healthcheck 81751bebc Bump github.com/opencontainers/selinux from 1.8.4 to 1.8.5 f5e4ffb5e Add init containers to generate and play kube d2e10a71d podman unshare keep exit code 309d98971 Bump github.com/containers/psgo from 1.5.2 to 1.6.0 f87f27ddc Add /containers/stats response to API docs 8d638d502 try to create the runroot before we warn that it is not writable 5bf220144 machine: set filemodes in octal 6f36a47ac podman machine: enforce a single search registry 50688da29 stats: detect containers restart 2b85382ca api: correctly set the container stats 53dc99fa6 stats: allow to read stats for paused containers a4cc32c2c Fix missing args in name in example 5fdd0431b Cirrus: Run unit-tests rootless 4ccb4f81f Add a system test to modify and import an exported container. c65b43a0f Bump github.com/godbus/dbus/v5 from 5.0.4 to 5.0.5 7cf22279d Fix conmon attach socket buffer size e5468d404 test/e2e/search_test.go - relax tests 78c5a47fc vendor mpb@v7.1.4 6888b061d inspect: printTmpl must Flush writer 4d9dcab0c podman upgrade tests for networking bbdaf837b Normalize auth key before calling `SetAuthentication` 2f967b81c Add logDriver to podman info ab272d1e9 Add 'Machine %q started' message when podman machine start successful cee689af1 Fix spacing on --userns options in docs 1ff797e36 system tests: new random_free_port helper a1cab358c fix play kube can't use infra_image in config file 6aa666a27 container inspect: improve error handling aa412ccc4 test/testvol/main.go: Fix missing arguments to Errorf() f18ccbcc0 fix play kube --network options 748c2700b pkg/bindings/images.nTar(): set ownership of build context to 0:0 bfcd83ecd Add Checkpointed bool to Inspect 0d1ba0a58 Remove changelog.txt from the repository 8b4f99ac2 QEMU Apple Silicon: Find BIOS FD wherever 1150d1b0b Document default timeout for libpod API Container Restart d1573b95e generate systemd: handle --restart 1eaa44959 logs -f: file: fix dead lock 3d02cfb5e network create: add warning for deprecated macvlan flag bd6403927 cgroup-info: check if user.slice is valid before accessing value 57133bb33 Fix warning of unsupported feature on MacOS c01f7725a TCG Accel fallback for Apple Silicon. Iss #10577 ebd37ede9 Example says there is not IP then in the next command suggests to use it 11fc0e554 kube: Add support for podman pod logs ce5baa125 feat: add localhost into hosts if the networking mode is not host e151f4c9f Fix #11418 - Default TMPDIR to /tmp on OS X 5d31c4250 Bump release to 3.3.1 274a3bc80 Remove unused stubs intended to start a machine with libvirt 8d9e19b03 Spell "build linux darwin" as "build !windows". d346e6e73 Add filtering functionality to http api secrets list 90998176d machine: always check error of net.Dial, even after last try 02a0d4b7f auto-update systemd test: skip on RHEL b3bb7da72 [#11408] podman help machine init cba114dd3 manifest: rm should not remove referenced images. a077335ce make podman run --systemd case insensitive ddeaaa47c Drop dependency on iproute e3c7e02a0 System tests: add cleanup & debugging output abdedc31a rootlessport: allow socket paths with more than 108 chars a55f595fe podman stop always cleanup f9a689f3e generate systemd: clarify limitations of `--new` 1ed0a7209 Cirrus: Reduce APIv2 task timeout 1fb07c422 Make secret env var available to exec session d674eb41e [CI:DOCS] podman cp: highlight globbing and multi-file copy 10144b707 pass LISTEN_* environment into container 9f7bad7da Use UNMERGED vbauerster/mpb PR to fix a pull deadlock b3aee22bd Cirrus: Skip APIv2 tests for [CI:DOCS] 375c3a7b3 docs: fix indentation for userns modes 1122c66ce upgrade test: add new baseline a2a166345 clean up socket and pid files from podman machine 06f94dd09 rootless cni: resolve absolute symlinks correctly ec1f350ee container: resolve workdir after all the mounts happen. de3920c0e auto-update: fix authfile label 9b7ef3dad runtime: Warn if XDG_RUNTIME_DIR is set but is not writable. a5adc3d80 Add support for mount options to API db60a1e65 Add support for libsubid 846941704 Globally replace http:// with https:// ab6c43f3e Shell completion for --format with anonymous fields d28e85741 InfraContainer Rework 1e6d1e5c6 Add filter params description to volume list/prune docs f5ce02b22 Bump github.com/containers/image/v5 from 5.15.2 to 5.16.0 d5507704e volumes: Add volume import to allow importing contents on tar into volume e88b62b34 Fix swagger issue c6e12a2e4 Bump github.com/fsnotify/fsnotify from 1.4.9 to 1.5.1 1dc6d1473 Fix file descriptor leaks and add test 1e176923b teardown play kube 3f22e5296 Allow setting of machine stream and image path from containers.conf 274d6fa19 generate systemd: use --cidfile again 4b2dc48d0 podman inspect show exposed ports 74ab2aaf9 Revert "generate systemd: custom stop signal" c0b1edd6a Network interface 70801b3d7 generate systemd: custom stop signal 3007bd4a9 130-kill.bats: increase timeouts from 10s to 60s 21f396de6 logs: adjust handling around partial log messages b20a54705 330-corrupt-images: don't try to tag with a canonical name fc6a02033 bump github.com/containers/common 1411fa5f2 libpod/Container.readFromJournal(): don't skip the first entry 6b06e9b77 Switch eventlogger to journald by default 02e59c668 utils.RunUnderSystemdScope(): always close Conn d06d285e6 logFile until flag issue edddfe8c4 volumes: Add support for exporting volumes to external tar d24a5d9fd Bump github.com/opencontainers/runc from 1.0.1 to 1.0.2 7b54a5fbe profiling: higher memory sampling rate fe4dc452e Bump github.com/containers/buildah from 1.22.0 to 1.22.3 1493b86c7 Bump github.com/onsi/gomega from 1.15.0 to 1.16.0 feff0d3c4 Use pod netns with --pod-id-file 57a0ed182 Bump k8s.io/api from 0.22.0 to 0.22.1 319c85e89 Support for --tls-verify flag in podman run & podman create e5d8defc4 Update README for 3.3.0 release 33fee83de add flag to record memory profiles db7eaa98b Bump k8s.io/apimachinery from 0.22.0 to 0.22.1 c22f3e8b4 Implement SD-NOTIFY proxy in conmon 7f3f792e2 Fix network aliases with network id fd32c73e3 Update /version endpoint to add components 745f6d949 e2e tests: fix overlay: Unknown option vfs.imagestore 16dfce486 Podman info output plugin information 0897946f6 [NO TESTS NEEDED] Clean up swagger b19812b5a machine: compute sha256 as we read the image file 043457192 machine: check for file exists instead of listing directory 82bb999e3 Bump github.com/containers/image/v5 from 5.15.1 to 5.15.2 2d0a0c0d2 fix rootlessport flake 592fae422 Volumes: Only remove from DB if plugin removal succeeds 9dd088e55 Cirrus: Confirm CGv1 / CGv2 VM expectations 5c837fe5b Skip stats test in CGv1 container environments dc7038288 Fix AVC denials in tests of volume mounts 77f665200 Restore buildah-bud test requiring new images 14f3658da Revert ".cirrus.yml: use fresh images for all VMs" aeffdb05d pkg/bindings/images.nTar(): slashify hdr.Name values cd40c875a Add ability to build images in play kube f0247df89 Bump github.com/rootless-containers/rootlesskit from 0.14.4 to 0.14.5 970529b6a Documented ways to fix firewall rules that are lost when firewalld reloads c1b7787a2 Bump github.com/containers/image/v5 from 5.15.0 to 5.15.1 bfc936261 Cirrus: Resolve two upgrade-test FIXMEs 1f632f357 fix: unifiedOverlays should be assigned if no conflicts found. e9f4d8179 Bump github.com/containers/storage from 1.34.0 to 1.34.1 e7ee15f8c cgroup-manager-systemd:Fail early if user:rootless and relevent session is not present. 3cee85531 libpod/option.go remove error stutter from wrap/wraf fe2be7f88 make sure that signal buffers are sufficiently big f98569946 volume: move validating volume dest from client to server. 91e21bed4 rootful: unset XDG_RUNTIME_DIR 2a8c41448 Fix rootless cni dns without systemd stub resolver 257d5e8a7 Fixed healthcheck default values when container created via compat API d99756434 Add space trimming check in ValidateSysctls bef26f258 rename oneshot initcontainers to once 9fc946563 Set gvproxy path to /usr/libexec/podman/gvproxy 5a32946d6 For compatibility, ignore Content-Type 404488a08 Run codespell to fix spelling 643178c1e Revert "Use static path for gvproxy" 73a755eec Fix device tests using ls test files d0e3b3c3a Enhance priv. dev. check cfbbc38a5 Workaround host availability of /dev/kvm 2e3ba9cd9 Change connection error to be helpful for machine users ed30ae4a8 Add until filter to podman pod ps 800a65fb2 [CI:DOCS] Fix multi-arch image docs 4e4c4b62f Bump github.com/opencontainers/selinux from 1.8.3 to 1.8.4 af46a64a8 Document source ip for the rootlesskit port handler f7de8bc80 Bump github.com/containers/storage from 1.33.1 to 1.34.0 8b9b925e7 skip flaking auto-update test 27443660c Enable docker-py compat. testing w/ ignored result 221b1add7 Add support for pod inside of user namespace. 12ac4198c Libpod images pull changes e7b7c90ba Reproducible Builds: trim embedded cgo paths 170fb2572 Alias build to buildx, so it won't fail bb96da9f1 Skip cgroup-parent test due to frequent flakes a4bdc67c4 Added autocompletion for images and system connections 1adeb2b70 podman info show correct slirp4netns path 79e4baf4c Bump github.com/onsi/gomega from 1.14.0 to 1.15.0 541e83ffe personality: Add support for setting execution domain. 88b9cbd5e Bump k8s.io/api from 0.21.3 to 0.22.0 e52187e7f show podman machine ssh command line 30df551bd auto-update: simple rollback adee0ca59 Bump github.com/BurntSushi/toml from 0.3.1 to 0.4.1 eb2e99101 Bump k8s.io/apimachinery from 0.21.3 to 0.22.0 c9e2f2f60 [CI:DOCS] tests-expect-exit: include source line numbers 8cbbbe6ef Fix TS parsing for fractional values 3c3fa6fac implement init containers in podman f4dd22b31 Cirrus: Fix not uploading logformatter html ddc360fe1 Bump Buildah to v1.22.0 [NO TESTS NEEDED] 41f94a4dc Fix podman unpause,pause,kill --all to work like podman stop --all cfcd1e186 Do not add an entry to /etc/hosts with `--net=host` f40a0e7c8 Handle timezone on server containers.conf e78f3e8c4 Bump github.com/docker/docker bd29ec4c3 Bump github.com/rootless-containers/rootlesskit from 0.14.3 to 0.14.4 9cc974c96 Only support containers stats using cgroups v2 ecf103302 podman info: try qfile before equery cc43b5133 image scp: fix typo in output e88d8dbea fix rootless port forwarding with network dis-/connect 4acc1d685 Use static path for gvproxy a210a2292 Compat API: Fix healthcheck status and healthcheck config 0762c7e97 Bump github.com/opencontainers/selinux from 1.8.2 to 1.8.3 985c71708 Fix handling of user specified container labels 03ffba29a podman-registry: minor usability updates 0ab9d19ad Bump to v4.0.0-dev 34b28d959 e2e tests: re-enable and fix podman stats tests c0952c733 Support size and inode options on builtin volumes 1d10ca739 Created scp.go image_scp_test.go and podman-image-scp.1.md 8ccf2539e test: move container process to a sub-cgroup cdbbd7915 stats: add a interval parameter to cli and api stream mode Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-09-06podman: update to 3.3.1Bruce Ashfield
Bumping libpod to version v3.3.1-2-g364efce39, which comprises the following commits: 1b33f7675 Bump to v3.3.2-dev 4c5283fab Bump to v3.3.1 bea109608 clean up socket and pid files from podman machine 68a059d89 Update release notes for v3.3.1 0103a0459 rootless cni: resolve absolute symlinks correctly 77948c8b4 Add filter params description to volume list/prune docs aa754c7e2 logFile until flag issue f363b805c Fix file descriptor leaks and add test d1ea54549 utils.RunUnderSystemdScope(): always close Conn 17afae4eb Use pod netns with --pod-id-file c16daa07e e2e tests: fix overlay: Unknown option vfs.imagestore 85846b633 change error comparison for exec.ErrNotFound 822818287 generate systemd: use --cidfile again 8aeaf681d Bump to v3.3.1-dev 98f252a3a Bump to v3.3.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-09-06virtual/runc: don't rprovide virtual/Bruce Ashfield
Similar to the oe-core commit: commit 93ac180d8c389f16964bce8bd5538d9389e970e6 Author: Michael Opdenacker <michael.opdenacker@bootlin.com> Date: Wed Sep 1 11:20:20 2021 +0200 meta: stop using "virtual/" in RPROVIDES and RDEPENDS Fixes [YOCTO #14538] Recipes shouldn't use the "virtual/" string in RPROVIDES and RDEPENDS. That's confusing because "virtual/" has no special meaning in RPROVIDES and RDEPENDS (unlike in PROVIDES and DEPENDS). Instead, using "virtual-" instead of "virtual/" as already done in the glibc recipe. We stop rproviding virtual/runc to keep the namespace clean. There aren't many users of this virtual provides, but we keep it around (for now) to maintain compatibility. At the same time we convert the RPROVIDES to virtual-runc, to keep it available and consistent with oe-core use virtual-libc, etc. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-08-27podman: update to 3.3.0Bruce Ashfield
Bumping libpod to version v3.3.0-2-g8809aed56, which comprises the following commits: 8aeaf681d Bump to v3.3.1-dev 98f252a3a Bump to v3.3.0 2408247f4 Final release notes for v3.3.0 dd3a49703 Fix network aliases with network id b5e04ae11 machine: compute sha256 as we read the image file a52b6bf23 machine: check for file exists instead of listing directory b71ef443a pkg/bindings/images.nTar(): slashify hdr.Name values f0d0c48d2 Volumes: Only remove from DB if plugin removal succeeds 89818f72b For compatibility, ignore Content-Type 7fb7f15af [v3.3] Bump c/image 5.15.2, buildah v1.22.3 5fc7c880a Implement SD-NOTIFY proxy in conmon 15fff7d91 Fix rootless cni dns without systemd stub resolver 63e06acfe fix rootlessport flake a92441e1b Skip stats test in CGv1 container environments 37b22af33 Fix AVC denials in tests of volume mounts daa311db3 Restore buildah-bud test requiring new images 2757d868c Revert ".cirrus.yml: use fresh images for all VMs" cd0677d89 Fix device tests using ls test files ce7ed3359 Enhance priv. dev. check 1d54315b6 Workaround host availability of /dev/kvm c0d0d31c4 Skip cgroup-parent test due to frequent flakes 0c7f08805 Cirrus: Fix not uploading logformatter html a098eafce Bump to v3.3.0-dev 7aa18e0a6 Bump to v3.3.0-RC3 e200b07f5 Release notes for v3.3.0-RC3 204ac5d46 [v3.3] Bump c/storage to v1.34.1 and c/image to v5.15.1 440188f3b fix gvproxy path search for macos de67e990e Bump to v3.3.0-dev 88559c197 Bump to v3.3.0-rc2 1acbdf940 Set gvproxy path to /usr/libexec/podman/gvproxy 7442f0b85 Revert "Podman Pod Create --cpus and --cpuset-cpus flags" 61a5e9812 Address review comments e63753afd Final release notes for v3.3.0-RC2 f9f315c75 Document source ip for the rootlesskit port handler 66c0024a0 podman info show correct slirp4netns path d746a7e09 show podman machine ssh command line 4b42265b5 Fix TS parsing for fractional values 85d5c24ed Handle timezone on server containers.conf 67bf11e8c Fix podman unpause,pause,kill --all to work like podman stop --all a1afb2300 Do not add an entry to /etc/hosts with `--net=host` a82006160 Only support containers stats using cgroups v2 c836ffe5b Compat API: Fix healthcheck status and healthcheck config 04e59f11d podman info: try qfile before equery 870576b39 test: move container process to a sub-cgroup cb7f0a302 Fix handling of user specified container labels d749770fe Release notes for v3.3.0-RC2: Initial 0c82c6fa8 Bump github.com/rootless-containers/rootlesskit from 0.14.3 to 0.14.4 0eec16ce9 fix rootless port forwarding with network dis-/connect 50c6cc229 [v3.3] Bump to Buildah v1.22.0 [NO TESTS NEEDED] b1c9c5b5f Disable aarch64 support 489e0f075 Cirrus: CI Support for v3.3 Branch b347a3583 Bump to v3.3.0-dev ce0dee984 Bump to v3.3.0-rc1 c1156d48b Bump github.com/containers/storage from 1.33.0 to 1.33.1 58672847e Bump github.com/containers/image/v5 from 5.14.0 to 5.15.0 9d33abac6 Fix auto-update system test for older systemd 2a484e782 ps: support the container notation for ps --filter network=... 732ece6ae Add `--accept-repositories` integration tests d59391c04 system tests: fix race in stop test 2b5d9cd7d Fix: healthcheck tests use .Should() instead of .To() 872c442e6 Remove ReadHeaderTimeout 724d04823 rootless: avoid zombie process on first launch 1d34a2c4c Update transfer.md ec9dad7e4 buildah bud tests under podman-remote a9f6592af Fixed Healthcheck formatting, string to []string 4df6e31cc remote build: fix streaming and error handling e3b0ba928 [CI:DOCS] Update podman-cp manpage 013267006 cp: consolidate and simplify 67d439197 rootless: check that / is mounted as shared 32b589216 Multi-arch image build: Daily version-tag push 60b9e8c0d Added tests for out of and into pod checkpoint and restore support eb9446778 Support checkpoint/restore with pods 3375cbb19 Vendor in go-criu v5.1.0 for Pod checkpoint/restore support 92dce3e2f Prepare CRIU version check to work with multiple versions b09073832 Bump github.com/containers/storage from 1.32.6 to 1.33.0 0aec93edc cp system tests: reduce number of exec's 6fe03b25a support container to container copy 63ef5576e command: migrate doesn't move process to cgroup a0313ef92 rootless: do not overwrite err variable 7689783ae exec: fix cleanup fd1f57b3a Fixed Healthcheck formatting, string to []string 7fa4d2cb1 Add prune until filter test for podman volume cli 8d5d5face dual-stack network: fix duplicated subnet assignment 5473490c6 fix: podman manifest push respect --tls-verify flag c197d19fe play kube: support capitalized pull policy 1b6423e9f refine dangling checks 23a938fa2 Bump github.com/containers/image/v5 from 5.13.2 to 5.14.0 1a188f622 Add tests to verify CORS is enabled 2c9f18100 Fix handling of shadow-utils dcb5c92c0 import: write stdin to tmp file 8f9d33b7f Networking test: fix silent breakage 0f708efd8 Implemented --until flag for libpod's container logs 9c659b3bc docs: fix broken remote client link 2d8e837a9 Add until filter to volume ls filters list 12f4b14a1 Add notes to flags not supported on cgroups V2 3e79296a8 Support DeviceCgroupRules to actually get added. 4376f14c3 Ensure journald events tests only run where supported ac588c751 [CI:DOCS] Fix GitHub URL to Podman logo db2f47428 Drop podman create --storage-opt container flag 595227095 e2e tests: prevent 'Expect(ExitCode())' pattern 064bd9d19 Copy the content from the underlying image into the newly created volume. Fixes: #10262 313c7118e system tests: cleaner, safer use of systemd e64545004 [CI:DOCS] Multi-arch image workflow: Make steps generic 2b98a226b system test: auto-update: multiarch fixes caf03fd7a system test: auto-update: allow running as rootless 117850e6e Fix handling of selinux labels in podman play kube 6430c1316 [CI:DOCS] refine the runlabel man page eaaca4999 compat: image create: handle platform correctly 80e807a19 Flake Fix: Wait before connecting container port c622c7f2a (minor) typo fix: timeout variable 0784a5d04 Bump github.com/opencontainers/runc from 1.0.0 to 1.0.1 b92bbfd76 Just restore protections of shadow-utils 81e32b180 Kube: Add liveness probe for containers. b8accad0e Update Release Notes and README for 3.2.3 50fcb06e7 Bump k8s.io/api from 0.21.2 to 0.21.3 2e02942d4 vendor containers/common@main 6f1c7a0b6 systemd: require network*-online*.target e1ac0c303 vendor containers/common@main e3a09c51e Bump k8s.io/apimachinery from 0.21.2 to 0.21.3 be51173ed APIv2 (python) tests: fix flake 9924c57d4 podman start: remove containers configured for auto removal af40dfc2b --infra-name command line argument 7996e2b82 Randomize the auto-update of podman containers e4dcb1004 System tests: fix a multiarch problem ec6150751 Correct a typo in documentation f7321681d podman pod create --pid flag 0007c98dd Fix race conditions in rootless cni setup 547fff270 e2e tests: use Should(Exit()) and ExitWithError() 59f31d86a auto-update: add --dry-run e73d48299 CNI-in-slirp4netns: fix bind-mount for /run/systemd/resolve/stub-resolv.conf c9970647b podman-remote build use .containerignore over .dockerignore 100c23dc5 Fix up documentation of the userns audit flag 48e6a8eed Return macvlan object in /network REST API response Fixes: #10266 6ced24d0b Fix broken volume and container tests 01cfb51fe auto-update: make output more user friendly 92c9def93 Update nix pin with `make nixpkgs` cbbb1a80f Perform a one-sided close of HTTP attach conn on EOF 7d6f3c4dc Bump github.com/google/uuid from 1.2.0 to 1.3.0 6fcf0b2f3 auto update: minor style nits a90a4ec7c auto update: pass through a context a8847c01f auto-update: use libimage for image checks eda8d1f58 auto update: fix authfile detection db26e1ef9 auto-update: make restarted unit more obvious 6ca574dc3 Update USE in order to fix tests fe044d51e Fix cirrus-cron failure notification GH workflow 6cac65c84 fix: uid/gid for volume mounted to existing dir 084dbeb56 Bump github.com/containers/storage from 1.32.5 to 1.32.6 00db5c6ea Manifest create subcommand should accept more than 2 arguments 48ff2ef5a Don't exclude Dockerfile, Containerfiles from tar content 6bdb990c9 Restore headers of optional information in 'podman pod ps' 4624142c2 Implemented Until Query Parameter for Containers/logs a2d15d981 Mention new hostname for loopback IP daebdf385 Add container config to compat image inspect 00ed696ed fix: logo not loading after barnch renaming 95c463785 Update docs/tutorials/rootless_tutorial.md: e5fcffc55 Remove GetStore function from Libpod 563532aef Bump github.com/onsi/gomega from 1.13.0 to 1.14.0 38863e764 Replace old RESTful tutorial with updated README 38bef70b3 manifest push --rm: use libimage for removal 2c7c67958 Make rootless-cni setup more robust 518457b35 Bump github.com/cyphar/filepath-securejoin from 0.2.2 to 0.2.3 59abb77fc multiple image pull support 4ea4a92c0 Fixed notation for macOS 0c9dc86de Create podman temp dir on machine start ed51e3f54 podman service reaper 84da70a0f update shell completion scripts 924cd37a3 Bump github.com/spf13/cobra to v1.2.1 8f6a0243f podman diff accept two images or containers 735be1248 force github.com/spf13/cobra@v1.1.3 7eb9ed975 vendor containers/common@main 8606ead91 [CI:DOCS] podman search: clarify that results depend on implementation 493786fba podman: ignore ESRCH from kill 86c601414 Implement --archive flag for podman cp 092902b45 Handle advanced --network options in podman play kube 40ef17ac2 Cirrus: Fixes due to master->main rename 8b52204ba vendor containers/common@7482cf851dcc 2243b6020 reset: remove external containers on podman system reset 2ce78aace Enhance system connection add URL input 6d37e0348 Add CNI rootless networking troubleshooting for v2.2.1 05f39af5b Bump github.com/containers/storage from 1.32.3 to 1.32.5 3e8c0e00d Make system connection ls deterministic fb5f70296 Bump github.com/containers/ocicrypt from 1.1.1 to 1.1.2 1edada477 Makefile: remove install.cni 3d0e08f04 prefix `ETCDIR` with `${PREFIX}/` f95b0995e remove `pkg/registries` e7507fe7c make DriverOpts name consistent. a7a701196 fix: swapped volume relabel option values 364e8a26d pkg/systemd: don't require LISTEN_FDNAMES for socket activation b39aacf32 add @mtrmac to OWNERS b1082696e cp: do not allow dir->file copying ee7a9d736 [NO TESTS NEEDED] suggestions for incorrect cmds b56b4b537 read secret config from config file if no user data. 15fbf950e [CI:DOCS] podman save: clarify formats and transports 9db534e53 [NO TESTS NEEDED] Create /etc/mtab with the correct ownership 7d83f9b6c [CI:DOCS] Follow-up to PR 10676 bbd085ad1 Podman Pod Create --cpus and --cpuset-cpus flags 6ecdf4c38 Health Check is not handled in the compat LibpodToContainerJSON f2dff41db Support log_tag defaults from containers.conf 525cb54e1 [CI:DOCS] push/pull docs: clarify supported transports 5fc622f94 create: support images with invalid platform f26fa5392 Podman Stats additional features 1aa9dcfad markdown/*: typos 'a image' d12027e0d disable tty-size exec checks in system tests a0b24de32 Add support for volume prune until filter to http api 1f388ede6 Add --format to connection list a84fa194b getContainerNetworkInfo: lock netNsCtr before sync e01460853 Do not use inotify for OCICNI 7f98d2ddb docs: podman-rmi removes dangling parent images ee4cab0e0 logs: k8s-file: restore poll sleep f4ba433b1 logs: k8s-file: fix spurious error logs 0fb165ed0 Fix systemd-resolved detection. 9cc3473b5 Bump k8s.io/api from 0.21.1 to 0.21.2 1e36be439 Add support for podman login --verbose 7864108ff fix systemcontext to use correct TMPDIR 9a02b5055 Add an entry for `/run/user-$UID/libpod` to tmpfiles b56d6c646 Bump github.com/containers/storage from 1.32.2 to 1.32.3 d39823085 Bump k8s.io/apimachinery from 0.21.1 to 0.21.2 2bd382c8c Fix documentation of the --format option of podman push b6662eed3 Vendor in containers/common v0.40.0 bd9987239 Scrub podman commands to use report package 6b230bc92 Fix multi-arch image build clone:failure 705b799af Cirrus: Prevent BZ1965743 workaround pruning e344a5899 [CI:DOCS] UPDATE manpages with MANPAGE_SYNTAX 666f555aa Fix resize race with podman exec -it 404d5edb1 .cirrus.yml: use c5521575421149184 for Ubuntu 769df3207 test: drop invalid test 969cc3237 utils: move message from warning to debug 517479731 utils: improve error message eb927dc84 Docs Switch from Query Param to Header 9c81b8cf7 add correct slirp ip to /etc/hosts fc9868e22 Fix panic condition in cgroups.getAvailableControllers 2a974e8b9 Create user storage dir with correct permissions 5f2c0f63a Fix building static podman-remote 81eb71fe3 Fix permissions on initially created named volumes 3ddadc532 Image import fromSrc now supports OS/Arch 302b3084e Restart all containers with restart-policy=always on boot e8006c797 Fix handling of podman-remote build --device 4bca1984a UPDATE manpages with MANPAGE_SYNTAX 8d860cfcd podman-run.1.md:detach-keys: spell the default value just once ded2f004f Fall back to string for dockerfile parameter 44d9c453d Fix network connect race with docker-compose ad3b56c62 Fix volumes with uid and gid options 3a65ba2fa Add support for podman remote build -f - . 991647c77 Add documentation on ignore_chown_errors 40d70334e System tests: the continuing multiarch saga 62f4b0a19 Add ExecDied event and use it to retrieve exit codes 341e6a162 Always spawn a cleanup process with exec 4a4fe48cc Fix docs links due to branch rename 240bbc3bf Fix pre-checkpointing 3b6cb8fab container: ignore named hierarchies d9a1c34e4 Fix restoring of privileged containers c3a14103f Fix build tags for pkg/machine... b5890fc86 Bump github.com/containers/storage from 1.32.1 to 1.32.2 e7e09bf2f Update nix pin with `make nixpkgs` d5527c330 System tests: deal with crun 0.20.1 11badab04 rootless: fix fast join userns path 8e89d7071 [CI:DOCS] Update swagger for inspect network a9cb82498 podman-remote build should handle -f option properly 5117deda0 fixed docs and schemas 18fa124df Improve systemd-resolved detection 84b55eec2 logs: k8s-file: fix race a5ad36c65 Fix image prune --filter cmd behavior 346c7fda6 Bump github.com/containers/buildah from 1.21.0 to 1.21.1 c60548279 remote pull: cancel pull when connection is closed 8378a9c4d Fix network prune api docs 5e7876089 auto-update tests: various fixes f6d9dbb62 [CI:DOCS]instructions for podman machine on macs 260192670 Fix compat create with NetworkMode=default 17193e468 System test: Add podman auto-update related test cases a2b842df4 Version bump: 3.3.0-dev 949374e58 Added tests for different checkpoint archive compressions 68070f1b2 Add --compress to podman-container-checkpoint.1.md 8aa5340ad Add parameter to specify checkpoint archive compression 10875a67e Order checkpoint options in man page alphabetically ab7e7f651 UPDATE MANPAGE_SYNTAX (commit,attach,auto-update) 13a807b86 fix go-bindings examples with v3 new parameters 8f89bc4e0 [CI:DOCS] Document which CNI fields are encoded 1f73374ac remote: always send resize before the container starts 9c5048544 remote events: support labels ce01b4f09 made requested changes, fixed api tests 2810c478a Add CORS support df7c3a703 [CI:DOCS] fix incorrect network remove api doc e23c5b25f Add restore --publish to the man page 837ba7ec3 Add test for restore --publish 1ac9198d7 Allow changing of port forward rules on restore 86610c785 remote events: fix --stream=false 9ac526759 systemd/generate: change type to notify 346c08225 Update main branch to reflect 3.2.0 release b928278e6 extend docs to include help for when pub/priv key is signed with an unsupported algo 735470ff2 Bump go.etcd.io/bbolt from 1.3.5 to 1.3.6 48ea142ca Bump github.com/docker/docker b36278c3e Bump github.com/opencontainers/selinux from 1.8.1 to 1.8.2 df2e7e00f add ipv6 nameservers only when the container has ipv6 enabled 366016fa8 Bump github.com/onsi/ginkgo from 1.16.3 to 1.16.4 433a5a8c7 Fix spacing in buildthedocs 37f39eefe events: support disjunctive filters b6167cedb System tests: add :Z to volume mounts ff79b2e5a Fix link error 433674918 Use secrets and machine rst file properly 2cc4535e1 added tests in python rest api 7ef3981ab Enable port forwarding on host ad182976b Use request context instead of background 1daaf34d7 [NO TESTS NEEDED] API list networks should return [] when used with no networks 249da1b93 [CI:DOCS] rm containers-mounts.conf.5.md ef8ba99ff Use request context instead of background context 3330f9876 Better error handing for images/create compat api d657a070d Bump github.com/uber/jaeger-client-go 761466dca Bump github.com/onsi/ginkgo from 1.16.2 to 1.16.3 fb4a0c572 support tag@digest notation 530721841 generate systemd: make mounts portable 699272ed2 add missing space 51a8e01f8 [CI:DOCS] point IRC to libera.chat 2addc0f90 rootless: fix SIGSEGV ,make LISTEN_FDNAMES optional [Closes #10435]. [NO TESTS NEEDED] 5bd1b7dfd Update a way out of date transfer document 6deb1bc2a Manpage syntax proposal 33944cefe [Techinal Debt] Cleanup ABI vs. Tunnel CLI commands c9609d820 Vendor in containers/storage v1.32.1 9822c3309 create libimage-events channel in main routine 8e5388e41 Add options to podman machine ssh 61167834f Bump github.com/onsi/gomega from 1.12.0 to 1.13.0 de293c980 Handle image user and exposed ports in podman play kube fad6e1d3e Ensure that container still exists when removing 533d88b65 Add the option of Rootless CNI networking by default 10569c988 journald logger: fix race condition d1c9e034f libimage-events channel: fix data race 568e911b8 Bump github.com/containers/common from 0.38.4 to 0.39.0 738a8fe63 Add podman run --gpus flag for compatibility e6a3d6aac Fix race on podman start --all 9ab3fd876 Fix race condition in running ls container in a pod 586af5c74 docs: --cert-dir: point to containers-certs.d(5) afe33573d Handle hard links in different directories 2f5552c32 Podman info add support for status of cgroup controllers f22791aec Handle hard links in remote builds 4c095aa7e Improve OCI Runtime error 3c82059c3 Sync. workflow across skopeo, buildah, and podman 8bf852d5f Match swagger to "as built" output 0766777d6 Document all transports for podman manifest add 6ca721ccc Drop container does not exist on removal to debugf 94665bdf0 Bump github.com/containers/storage from 1.31.1 to 1.31.2 7bcfae44b Downgrade API service routing table logging c553181fd Vendor in containers/buildah v1.21.0 5a0257d46 Fix network create macvlan with subnet option 8352e5bc3 add libimage events 26652111b Bump github.com/opencontainers/runc from 1.0.0-rc94 to 1.0.0-rc95 12aa71ab8 Use correct extension for example network config 898a8ad28 update c/common 2b89b2414 Add support for podman manifest rm command 55f00bac0 Clear the storage-options from the graphdriver if users specifies --root 44c493717 Bump k8s.io/api from 0.21.0 to 0.21.1 bc0e12a04 Fix problem copying files when container is in host pid namespace 379df7f2c docs: generate systemd: XDG_RUNTIME_DIR af748b94e Bump k8s.io/apimachinery from 0.21.0 to 0.21.1 6b187e445 Bump github.com/vbauerster/mpb/v6 from 6.0.3 to 6.0.4 92e858914 fix: response body of containers wait endpoint 98955bedb Break up python APIv2 tests 8f3605e7d Add script for identifying commits in release branches bab7caafe Fix formatting and indentation in network http api docs cf30f160a Support uid,gid,mode options for secrets 0d811b233 Several shell completion fixes 6efca0bba Ensure that :Z/:z/:U can be used with named volumes 4cc19f9e0 Support automatic labeling of kube volumes b75bb4665 Create the /etc/mtab file if does not exists Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-08-02global: overrides syntax conversionBruce Ashfield
OEcore/bitbake are moving to use the clearer ":" as an overrides separator. This is pass one of updating the meta-virt recipes to use that syntax. This has only been minimally build/runtime tested, more changes will be required for missed overrides, or incorrect conversions Note: A recent bitbake is required: commit 75fad23fc06c008a03414a1fc288a8614c6af9ca Author: Richard Purdie <richard.purdie@linuxfoundation.org> Date: Sun Jul 18 12:59:15 2021 +0100 bitbake: data_smart/parse: Allow ':' characters in variable/function names It is becomming increasingly clear we need to find a way to show what is/is not an override in our syntax. We need to do this in a way which is clear to users, readable and in a way we can transition to. The most effective way I've found to this is to use the ":" charater to directly replace "_" where an override is being specified. This includes "append", "prepend" and "remove" which are effectively special override directives. This patch simply adds the character to the parser so bitbake accepts the value but maps it back to "_" internally so there is no behaviour change. This change is simple enough it could potentially be backported to older version of bitbake meaning layers using the new syntax/markup could work with older releases. Even if other no other changes are accepted at this time and we don't backport, it does set us on a path where at some point in future we could require a more explict syntax. I've tested this patch by converting oe-core/meta-yocto to the new syntax for overrides (9000+ changes) and then seeing that builds continue to work with this patch. (Bitbake rev: 0dbbb4547cb2570d2ce607e9a53459df3c0ac284) Signed-off-by: Richard Purdie <richard.purdie@linuxfoundation.org> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-07-27podman: update to 3.2.3 latestBruce Ashfield
There's not much here, but we pickup the 3.2.4-dev parsing bump in preparation for that development stream. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-07-20podman: update to v3.2.3Bruce Ashfield
Bumping libpod to version v3.2.3-2-g09e8afe3a, which comprises the following commits: 1e6fd46e9 Bump to v3.2.3 1d7ddf511 Update release notes for v3.2.3 e4c45e759 vendor containers/common@v0.38.16 cb7016224 vendor containers/buildah@v1.21.3 1a8b2a037 Fix race conditions in rootless cni setup e54a513b9 CNI-in-slirp4netns: fix bind-mount for /run/systemd/resolve/stub-resolv.conf 1469af265 Make rootless-cni setup more robust 6f9d9636a Support uid,gid,mode options for secrets bed195bf8 vendor containers/common@v0.38.15 75431a455 [CI:DOCS] podman search: clarify that results depend on implementation 37570b7b7 vendor containers/common@v0.38.14 6ecedc161 vendor containers/common@v0.38.13 8a41bf3ee [3.2] vendor containers/common@v0.38.12 2c003d978 Bump README to v3.2.2 bb2cbf0d5 Bump to v3.2.3-dev d577c44e3 Bump to v3.2.2 9f4afa1ea fix systemcontext to use correct TMPDIR 5dabff27d Scrub podman commands to use report package 647c2024e Fix volumes with uid and gid options c2dcb3ee2 Vendor in c/common v0.38.11 ba70363f6 Initial release notes for v3.2.2 a9fd54775 Fix restoring of privileged containers d5f0729b2 Fix handling of podman-remote build --device 90805fa39 Add support for podman remote build -f - . 854c27c0a Fix panic condition in cgroups.getAvailableControllers b0dc157af Fix permissions on initially created named volumes f5cdb95ee Fix building static podman-remote 1c04cfe83 add correct slirp ip to /etc/hosts 6c4ee8535 disable tty-size exec checks in system tests 6ba9617be Fix resize race with podman exec -it eb6d4b0cf Fix documentation of the --format option of podman push e5c939183 Fix systemd-resolved detection. 613f427a0 Health Check is not handled in the compat LibpodToContainerJSON 949573c5a Do not use inotify for OCICNI ab5e770c4 getContainerNetworkInfo: lock netNsCtr before sync b957bff8b [NO TESTS NEEDED] Create /etc/mtab with the correct ownership 6d394f0e4 Create the /etc/mtab file if does not exists 879d66e7d [v3.2] cp: do not allow dir->file copying 6f769bc0e create: support images with invalid platform 19a89db66 vendor containers/common@v0.38.10 e5c070baf logs: k8s-file: restore poll sleep 4d9a9149d logs: k8s-file: fix spurious error logs dac2d31a2 utils: move message from warning to debug 60752b320 Bump to v3.2.2-dev Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-30podman: Add seccomp as REQUIRED_DISTRO_FEATURESDiego Sueiro
The libseccomp package is only available if seccomp is in DISTRO_FEATURES. Signed-off-by: Diego Sueiro <diego.sueiro@arm.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-15podman: update to 3.2.1Bruce Ashfield
Bumping libpod to version v3.2.1-2-gab4d0cf90, which comprises the following commits: 60752b320 Bump to v3.2.2-dev 152952fe6 Bump to v3.2.1 c5d9c0a6f Updated release notes for v3.2.1 4f56f7f13 Fix network connect race with docker-compose e42d727a9 Revert "Ensure minimum API version is set correctly in tests" f69789155 Fall back to string for dockerfile parameter 5a158563c remote events: fix --stream=false 38fbd2cb9 [CI:DOCS] fix incorrect network remove api doc 26eae3bf8 remote: always send resize before the container starts c751544fa remote events: support labels c28f442b2 remote pull: cancel pull when connection is closed 2993bdf1e Fix network prune api docs 8ba0c92e6 Improve systemd-resolved detection c3f6ef63a logs: k8s-file: fix race f1e7a0747 Fix image prune --filter cmd behavior 5ddd76edd Several shell completion fixes 2afb5eeab podman-remote build should handle -f option properly 6beae86f0 System tests: deal with crun 0.20.1 80362b34c Fix build tags for pkg/machine... c85b6b3fe Fix pre-checkpointing b61701acb container: ignore named hierarchies e0dcffa8d [v3.2] vendor containers/common@v0.38.9 d46deca8c rootless: fix fast join userns path f2b3da502 [v3.2] vendor containers/common@v0.38.7 78430ee1d [v3.2] vendor containers/common@v0.38.6 b6ef7cf21 Correct qemu options for Intel macs 9647d8844 Ensure minimum API version is set correctly in tests 72455ece4 Bump to v3.2.1-dev 0281ef262 Bump to v3.2.0 cff73766f Fix network create macvlan with subnet option 8688f54ea Final release notes updates for v3.2.0 f62c6bf6e add ipv6 nameservers only when the container has ipv6 enabled 4b8ca6303 Use request context instead of background ce5c3b554 [v.3.2] events: support disjunctive filters dd83f5c0c System tests: add :Z to volume mounts 32927f5d6 generate systemd: make mounts portable abb57e5cf vendor containers/storage@v1.31.3 1e4563182 vendor containers/common@v0.38.5 fbf8b78a3 Bump to v3.2.0-dev 684729482 Bump to v3.2.0-RC3 f49023031 Update release notes for v3.2.0-RC3 ee5dd0603 Fix race on podman start --all 6c9de9382 Fix race condition in running ls container in a pod 69bae4774 docs: --cert-dir: point to containers-certs.d(5) 934f36df5 Handle hard links in different directories 5eecc2761 Improve OCI Runtime error ba884865c Handle hard links in remote builds c53638e9f Podman info add support for status of cgroup controllers ac8b7ddd8 Drop container does not exist on removal to debugf 18e917cdc Downgrade API service routing table logging efa15b96c add libimage events a9108ab25 docs: generate systemd: XDG_RUNTIME_DIR bb589bec2 Fix problem copying files when container is in host pid namespace Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-06-04podman: bump to 3.2-rcXBruce Ashfield
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-04-26packages: drop libseccomp checks / package blacklistBruce Ashfield
libseccomp has moved to oe-core, so we can drop our checks and blacklisting of packages if meta-security is not in the layer configuration. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-04-18podman: Added kernel modules for iptables errorNathan Dunne
Added kernel modules kernel-module-xt-masquerade and kernel-module-xt-comment to RRECOMMENDS, to avoid iptables errors with podman Signed-off-by: Nathan Dunne <Nathan.Dunne@arm.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-04-15podman: update to v3.1Bruce Ashfield
Bumping to v3.1, which comprises the following commits: bce3e6c5f Fix tests ec1a512ac Bump to v3.1.1-dev 9f09fb62c Bump to v3.1.0 1386f9046 Fix test failure 38bb77c5b Update release notes for v3.1.0 final release 670e1ac67 [NO TESTS NEEDED] Turn on podman-remote build --isolation ac4bdd265 Fix long option format on docs.podman.io 96ffce219 Fix containers list/prune http api filter behaviour e772719bf [CI:DOCS] Add note to mappings for user/group userns in build 52cd3ce2d Validate passed in timezone from tz option 633ae014e Generate Kubernetes PersistentVolumeClaims from named volumes c9640bab7 libpod/image: unit tests: use a `registries.conf` for aliases 43c772aa2 libpod/image: unit tests: defer cleanup 396a59b02 libpod/image: unit tests: use `require.NoError` a01b387e8 Unification of until filter across list/prune endpoints 183a68a81 Unification of label filter across list/prune endpoints d1589f280 fixup 31351ad94 fix: build endpoint for compat API 7148544df [NO TESTS NEEDED] Remove /tmp/containers-users-* files on reboot 88672b58c Check if stdin is a term in --interactive --tty mode 23f3805df [NO TESTS NEEDED] Fix rootless volume plugins 5e3445e6e Ensure manually-created volumes have correct ownership 6b6989206 Support multi doc yaml for generate/play kube d560f168f Correct json field name 573ed9220 Fix filters in image http compat/libpod api endpoints 1b349d79a podman generate systemd --new do not duplicate params 1089f83a4 Fix podman build --pull-never be02c8581 man pages: correct seccomp-policy label 62b49e176 [NO TESTS NEEDED] Use same function podman-remote rmi as podman 3d1aaffdb Add problematic volume name to kube play error messages d498022fd Fix list pods filter handling in libpod api 66b1c2bd9 [NO TESTS NEEDED] Fix for kernel without CONFIG_USER_NS b55730180 Remove resize race condition e7dc66d83 [NO TESTS NEEDED] Vendor in containers/buildah v1.20.0 57e0d8f29 Use TMPDIR when commiting images 505f43c08 Add RequiresMountsFor= to systemd generate 15da607d1 Fix swapped dimensions from terminal.GetSize 0127cc184 Revert go-systemd to v2.22.0 4f11517c0 Cirrus: Update configuration for v3.1 branch 834f4caaa Bump to v3.1.0-dev 1b56ea2d9 Bump to v3.1.0-rc2 1ae87ff46 Update release notes for v3.1.0-RC2 3b609a706 Bump github.com/coreos/go-systemd/v22 from 22.1.0 to 22.3.0 1dfbdd5d9 Fix system prune cmd user message with options afce37671 System tests: reenable a bunch of skipped tests 417f36281 Cleanup /libpod/images/load handler adf652e2a vendor: drop replace for github.com/syndtr/gocapability e85cf8f4a security: use the bounding caps with --privileged f46b34ecd Bump github.com/containers/common from 0.35.0 to 0.35.3 5a18b5eb7 Bump k8s.io/apimachinery from 0.20.4 to 0.20.5 aa2d6e6e6 Fix volumes and networks list/prune filters in http api ec1651fbf Bump github.com/containers/storage from 1.25.0 to 1.28.0 1ca74b00d add a dependabot config to automate vendoring a596d1f5d Bump github.com/onsi/ginkgo from 1.15.1 to 1.15.2 8ea02d0b6 network prune filters for http compat and libpod api 8da5fd820 test: check for io.stat existence on cgroup v2 592aae4f9 test: fix test for last crun/runc 1c873c7da test: simplify cgroup path af3499db5 Latest crun/runc should handle blkio-weight test 82858a97c fix user message image prune --all 3d01d42f2 Docs: removing secrets is safe for in-use secrets 21f229a3d Downgrade github.com/coreos/go-systemd/v22 e8918ff10 pkg/bindings/images.Build(): fix a race condition in error reporting 310eae4ba Switch all builds to pull-never 963d19c75 System test cleanup f4b2d597a Fix for volumes prune in http compat api 8de560703 Fix remote client timezone test 57e8c6632 Do not leak libpod package into the remote client 762148deb Split libpod/network package 955aaccc5 fix use with localhost (testing) 9251b6c8c add /auth for docker compatibility 3803d0a4a create endpoint for querying libpod networks 12fb9e465 Bump github.com/sirupsen/logrus from 1.8.0 to 1.8.1 660a72993 sdnotify tests: try real hard to kill socat processes 7b0155cf7 Fix array instead of one elem network http api 92a8d69a7 Delete all containers and pods between tests 258749e43 apiv2 tests: finally fix POST as originally intended c9ef26071 Document CONTAINERS_CONF/CONTAINERS_STORAGE_CONF Env variables f1eb8e816 Removing a non existing container API should return 404 dc0c72a48 Docs: Add docs to access APIs inside container 6d4899745 options: append CLI graph driver options 930bec4d3 podman load: fix error handling 1f2f7e745 podman cp: evaluate symlink correctly when copying from container 2033fa4c7 rm pkg/api/handlers/libpod/copy.go 31b11b5cd podman cp: fix copying to a non-existent dir a61d70cf8 podman cp: fix ownership 2abfef380 podman cp: ignore EPERMs in rootless mode d175fbfdb vendor buildah@v1.19.8 e33f52390 apiv2 tests: add helpers to start/stop a local registry e926b5d73 Bump to v3.1.0-dev aa9616cd4 Bump to v3.1.0-rc1 e9db60492 allow the removal of storage images 9eac4a7f7 podman-remote build does not support volumes d1878cc67 Compat API: Avoid trying to create volumes if they already exist 7e289833e Bump github.com/onsi/gomega from 1.10.5 to 1.11.0 0e36e65ea Allow users to generate a kubernetes yaml off non running containers 80390dd18 Bump github.com/onsi/ginkgo from 1.15.0 to 1.15.1 d0d084dd8 turn hidden --trace into a NOP 320df8388 pkg/terminal: use c/storage/pkg/homedir cc7a7568a Update nix pin with `make nixpkgs` 9e75cafd5 build-arg 326f3eda3 Handle podman build --dns-search 01ffe2c30 podman build --build-arg should fall back to environment 2c500a814 Add support for podman build --ignorefile 1a33b7648 replace local mount consts with libpod/define e4da5096b separate file with mount consts in libpod/define 9fc29f63e Correct compat images/{name}/push response a910f74ea [NO TESTS NEEDED] Bump pre-commit-hooks version 3ae580b0e [ci skip] Bad formatting fix in build documentation 803e58b36 Bump github.com/containernetworking/plugins to v0.9.1 d107c3729 podman-remote stop -time 0 does not work 5bb8fa30b Do not return from c.stop() before re-locking 2bcc95257 Fix for podman network rm (-f) workflow 3396343d4 Bump github.com/coreos/go-systemd/v22 from 22.1.0 to 22.2.0 efc592fba Bump github.com/containers/buildah from 1.19.6 to 1.19.7 793c52dd5 Add tests for selinux kvm/init labels 8453424e2 Respect NanoCpus in Compat Create a090301bb podman cp: support copying on tmpfs mounts e43385eca image removal: ignore unknown-layer errors aa0a57f09 Fix cni teardown errors f86d64130 Use version package to track all versions 252aec1c9 Check for supportsKVM based on basename of the runtime 53d22c779 Compat API: create volume source dirs on the host 61e626c85 Makefile: add install.docker-docs-nobuild for packaging use 81a3f8a43 Add /sys/fs/cgroup as readonly path in docs 8f2192922 Add network summary to compat ps 4eed89aca Fix possible panic with podman build --iidfile 9391bfc52 Add version field to secret compat list/inspect api b19791c0b Tidy duplicate log tests 5df625140 Fix support for podman build --timestamp 43e899c2e Rewrite Rename backend in a more atomic fashion 91b2f07d5 Use functions and defines from checkpointctl bf92e2111 Move checkpoint/restore code to pkg/checkpoint/crutils bd819ef7d Vendor in checkpointctl 2c8c5393a Support label type dict on compat build ac992e4b0 Makefile: install systemd services conditionally 63a3b8a09 podman-system-service.1.md: fix timeout example 774aea45e swagger: update the libpodPutArchive operation verb 3908c0079 Makefile: split install.docker-docs from install.docker 2f0fc2911 Bump RootlessKit v0.14.0-beta.0 8b7caa6d0 Compat api containers/json Ports field is null 14d5bd164 Bump github.com/cri-o/ocicni to latest master 7927fe01f Refactor python tests to run against python3.9 9435e5b79 APIv2 tests: make more maintainable e9d94dc90 [CI:DOCS] Improve release process docs 375201633 podman rmi: handle corrupted storage better d9cb135b6 Enable cgroupsv2 rw mount via security-opt unmask cc679d952 podman-image-sign.1.md: typo fix f54ed7269 compat api network ls accept both format options 680dacaea Enable no_hosts from containers.conf fcce1da1b Correct compat images/create?fromImage response ba319e3ba [Compat API] Also print successfully tagging images in /build endpoint 43d010bd0 Fix parsing of Tmpfs field in compat create 24d9bda7f prune remotecommand dependency bee21f1e4 system test image: build it multiarch ef549235e Updated based on Jhonce comments ccbe4ff73 updated common to 0.35.0 836bfebb4 Refactored file 1aa96ed2e swagger: removes the schema type for PodSpecGenerator $ref 431f75519 podman-system-connection.1.md: fix copy/paste error 90050671b Add dns search domains from cni response to resolv.conf f152f9cf0 Network connect error if net mode is not bridge fc32ec768 Sort CapDrop in inspect to guarantee order 79eaadd3f podman upgrade tests 3947feb4b test: ignore named hierarchies for cgroups=split e5ac28f3b container removal: handle already removed containers a775c5920 Bump github.com/rootless-containers/rootlesskit from 0.13.1 to 0.13.2 0ab32d11d Bump k8s.io/apimachinery from 0.20.3 to 0.20.4 874f2327e Add U volume flag to chown source volumes fcf669fd9 Replace Labels and Options nulls with {} in NetworkResource 4875a8fb4 Cirrus: Temp. disable prior-fedora (F32) testing f3a8e3324 podman cp: test /dev/stdin correctly 8577be72e podman cp: treat /dev/stdout correctly e87c5b6c1 cgroup: change cgroup deletion logic on v1 9d818be73 Fix podman network IDs handling d9655b0f0 pr-should-include-tests: recognized "renamed" tests d2f3098c6 --no-header flag implementation for generate systemd af7a68fa8 [NO TESTS NEEDED] Make binding util internal c236aebb9 Two variations of --new flag added to e2e a2e1b3eab swagger: add missing schema properties 5dded6fae bump go module to v3 d333ef82b Fix 'storage.options' indent d886cd930 Bump github.com/sirupsen/logrus from 1.7.1 to 1.8.0 b40d778f4 Bump github.com/containers/buildah from 1.19.4 to 1.19.6 05eb06f56 Turn on journald and k8s file logging tests f06dd45e0 Allow podman play kube to read yaml file from stdin 43a581904 Log working dir when chdir fails d6b0b5412 Fix segfault in run with memory-swap e1ad50654 leak fix in rootless_linux.c fcn can_use_shortcut 612ba6aa8 Fix journald logs with more than 1 container 9016387bb Fix journald logs --follow f2d057c94 Fix journald logs --since fbc50e528 fix journald logs --tail 0 cf2a55189 [CI:DOCS]basic networking guide 71689052a cp: treat "." and "/." correctly caa0bc157 [CI:DOCS] [NO TESTS NEEDED] Update swagger doc for libpod container wait 31eca5c20 Bump k8s.io/apimachinery from 0.20.2 to 0.20.3 e022c1975 Don't switch on a single case 3e168b19f Quote URL b3f9559c8 bindings: support simple types that implement fmt.Stringer interface 9699e81a0 API: fix libpod's container wait endpoint condition conversion a9d548bf7 Change source path resolution for volume copy-up e2d5a1d05 podman ps --format '{{ .Size }}' requires --size option 12b6342c3 infra: downgrade warning to debug 12a577aea Ignore entrypoint=[\"\"] 684290725 Bump github.com/sirupsen/logrus from 1.7.0 to 1.7.1 68a8d397c Add missing early returns in compat API 5d1ec2960 Do not reset storage when running inside of a container 958f90143 podman kill should report rawInput not container id 759fc9334 Fix an issue where copyup could fail with ENOENT 2ec0e3b65 do not set empty $HOME 2a21ecafa images/create: always pull image f2f18768a Fix panic in pod creation 0fd480708 Bump github.com/rootless-containers/rootlesskit from 0.13.0 to 0.13.1 2845f7b83 podman build: pass runtime to buildah 39c1fdb15 correct startup error message 690c02f60 Add missing params for podman-remote build a532994f8 Fix typo podman run doc in flag -pid=mode "efault" 4a9bd7a18 When stopping a container, print rawInput 714acf326 fix create container: handle empty host port 3d50393f0 Don't chown workdir if it already exists bf083c185 Fix broken podman generate systemd --new with pods 227c54813 fix dns resolution on ubuntu 0ab5bfd31 e2e: fix network alias test 704fa8b55 fix failing image e2e test 9a24d5098 Update troubleshooting.md 6ffd05d0b [NO TESTS NEEDED] Refactor generated code 2c31f3839 Fix superfluous response.WriteHeader call in WaitContainerLibpod() 4067f3a4d change ps Created to unix 78b419909 Enable more golangci-lint linters adfcb7460 make layer-tree lookup errors non-fatal 78c8a8736 Enable whitespace linter 69ab67bf9 Enable golint linter ef2fc90f2 Enable stylecheck linter 40c3c972d Update Master to reflect the 3.0 release 660a06f2f utils: takes the longest path on cgroup v1 5f999b6bc container ps json format miscue 8e2fae186 Bump github.com/spf13/cobra from 1.1.2 to 1.1.3 1b5f3ed24 utils: create parent cgroups 9196a5ce3 utils: ignore unified on cgroupv1 if not present f4fd25a00 utils: skip empty lines f28b08fe9 Correct compat network prune response 5ccb1596b Display correct value for unlimited ulimit fdf39e169 apiv2: handle docker-java clients pulling ea910fc53 Rewrite copy-up to use buildah Copier 31b2b2cc2 bump to v3.1.0-dev 68133414f [NO TESTS NEEDED] Update linter 46b014bad Bump github.com/spf13/cobra from 1.1.1 to 1.1.2 1cc387bf7 Add shell completion tests for secrets f4ece018b Docker APIv2 push sends digest in response body f2a856203 Fix compat networks endpoint for a empty result 21deafba8 hardening flags for fedora rpmbuilds e15e170ac [CI:DOCS]First pass at release process 46385dd60 Restart service when CONTAINERS_CONF changes cc846a8cd Support annotations from containers.conf 68414537c vendor github.com/containers/image v5.10.2 ea704da72 APIv2 tests: lots of cleanup 721a1e104 Fix Docker APIv2 push endpoint 48c612cf6 generate kube: support --privileged 08d8290f1 Bump github.com/containers/ocicrypt from 1.0.3 to 1.1.0 832a69b0b Implement Secrets 45981ba29 Bump containers/buildah to v1.19.4 1caace8f4 Allow path completion for podman create/run --rootfs 6c75419a8 Cirrus: Send cirrus-cron report e-mail to list. feecdf919 make `podman rmi` more robust 407e86dcd Implement missing arguments for podman build 3c3e644c1 vendor latest containers/common 91ea3fabd add network prune 821ef6486 fix logic when not creating a workdir 002f2aca7 Bump remote API version to 3.0.0 6c713984e play kube selinux test case 5c6ab3075 Fix podman network disconnect wrong NetworkStatus number 05444cb2c Fix per review request c995b5460 generate kube: handle entrypoint 96adf0e2a play kube selinux test case 2b8d6ca09 Increase timeouts in some tests 3c57bc845 Add test for Docker APIv2 wait 4a219aa23 Implement Docker wait conditions fc385806d Improve ContainerEngine.ContainerWait() 570e1587d Improve container libpod.Wait*() functions 6a6e86829 Cirrus: Collect ginkgo node logs artifacts ebc42f508 Bump github.com/containers/storage from 1.24.5 to 1.25.0 9dc795191 Bump github.com/containernetworking/cni from 0.8.0 to 0.8.1 bc149a4dd bindings: attach: warn correct error d87f54fbb Fix invalid wait condition on kill dfa9a340a Makefile: make bin/* real targets! 3d105015f typo c40cd1be9 Bump github.com/onsi/gomega from 1.10.4 to 1.10.5 bda95bdb6 Update nix pin with `make nixpkgs` 1c50e09b0 System test for #9096 (truncated stdout) 432ee04c5 play kube selinux label test case e0bc8ffb5 Gating tests: diff test: workaround for RHEL8 failure bde23a021 [NO TESTS NEEDED] style: indendation 89df89b5f [NO TESTS NEEDED] fixup: remove debug code 7e4d696d9 Report StatusConflict on Pod opt partial failures bd0e22ed1 Honor network options for macvlan networks 095919680 Make slirp MTU configurable (network_cmd_options) ac3bd4c33 [NO TESTS NEEDED] Generated files 5a746c08f [NO TESTS NEEDED] Improve generator c68b59f97 play kube selinux label issue e9f936a29 Makefile: refactor ginkgo * ginkgo-remote 931ea939a Allow pods to use --net=none 323ab314e Bump github.com/onsi/ginkgo from 1.14.2 to 1.15.0 077fd670b Update release notes for v3.0.0 ee8ee651d New 'make completions' target e11d8f15e add macvlan as a supported network driver 5352df226 Fix podman generate systemd --new special char handling eaafd975a Bump github.com/rootless-containers/rootlesskit from 0.12.0 to 0.13.0 51c11fea8 Endpoint that lists containers does not return correct Status value 3cfd4ce45 Fix --network parsing for podman pod create 9b5b03d1e list volumes before pruning 4a6d042c2 Docker ignores mount flags that begin with constency cdbbc6120 podman generate kube ignores --network=host 073f76c13 Switch podman stop/kill/wait handlers to use abi b842d97f5 [CI:DOCS]build instructions for macOS 280f332bd Vendor in containers/buildah v1.19.3 ca0dd76bf Honor custom DNS in play|generate kube d7c356552 Podman-remote push can support --format b74f939fb Bump github.com/containers/image/v5 from 5.10.0 to 5.10.1 8d979e093 Cirrus: Build static podman-remote c0bf0ba9e podman build --pull: refine help message and docs c450092fd Revert "podman build --pull: use correct policy" 75c3b3389 Bump github.com/containers/image/v5 from 5.9.0 to 5.10.0 59076888d Cleanup bindings for image pull 89bb8a9b3 Don't fail if one of the cgroups is not setup 1fac43654 Add support for rootless network-aliases c717b3cac Allow static ip and mac with rootless cni network 15caebfe5 podman build --pull: use correct policy bfc1b66be Cirrus: Fix running Validate task on branches f8bf509d1 Fix static build cache by using cachix 84f7bdc4d Switch podman image push handlers to use abi fee2fadc3 e2e tests: synchronize test results 21cb3043f podman-remote ps --external --pod --sort do not work. f79d68eea Fix podman history --no-trunc for the CREATED BY field c63599d36 remote exec: write conmon error on hijacked connection e9f4fb975 Fix #9100 Change console mode message to debug 02ec5299f Add default net info in container inspect 1ae410d19 Ensure the Volumes field in Compat Create is honored 35c89ccc5 [CI:DOCS]update state of restful service 0f668aa08 workdir presence checks 7b186dcb9 libpod: add (*Container).ResolvePath() 74a63df05 Fixup search 97f5e9458 Pass DefaultMountsFile to podman build 5350254f0 Ensure shutdown handler access is syncronized 33179c281 System tests: cover gaps from the last month 5623cb9d3 Fix --arch and --os flags to work correctly a86d23c75 Bump github.com/google/uuid from 1.1.5 to 1.2.0 75698b4b7 Fix typo 393a8f026 disable dnsname when --internal ef76b92b8 swagger.go: Fix compilation error 8c1768e38 Fix fish completion issue if the command is prefixed with a space a457c5c92 Bump golang.org/x/crypto 0ba1942f2 networking: lookup child IP in networks c182091b0 Small API test improvement for compatibility search endpoint 6e6a38b41 podman manifest exists c9baa6b93 Accept and ignore 'null' as value for X-Registry-Auth 4b8df5903 Turn on some remote test 94f96c78a Add a notice to remove pod before starting service ef654941d libpod: move slirp magic IPs to consts 5e65f0ba3 rootlessport: set source IP to slirp4netns device 37319dec1 vendor: update rootlesskit to v0.12.0 2fa67fe4b api: fix import image swagger definition 9d31fed5f podman volume exists 4e4d318b7 Cirrus: Upload swagger YAML in every context dbb99433d [CI:DOCS] Cirrus: Skip smoke task on branch-push 836fa4c49 Move the cni lock file into the cni config dir c1cd512cb Use random network names in the e2e tests 3fedb2b6d [CI:DOCS] Update project name in Code of Conduct f43046745 Set log driver for compatability containers c3cbaa355 Make generate systemd --new robust against double curly braces 6518391e8 Fix man page for fuse-overlayfs config in rootless mode a3621a7cf Cirrus: add bindings checks e7df73efa Fix handling of container remove 41a7e11c7 make bindings generation explicit f302ce578 make bindings generation more robuts 175fc3867 Revert "ginkgo: install on demand via `go get -u`" 37abec240 [CI:DOCS] fix go-md2man HTMLSpan warnings 9f6bb3563 CI: smoke test: insist on adding tests on PRs a45d22a1d podman network exists de05e5816 ginkgo: install on demand via `go get -u` d2ee3d815 runner.sh : deal with bash 'set -e' 4ccb0729b Add binding options for container|pod exists 683bab03f [CI:DOCS]Do not run compose tests with CI:DOCS 2df59829e simplify bindings generation 462994268 make: generate bindings: use vendor caaaa2c5e hack/install_golangci.sh: smarter install f38b7f48c golangci-lint: install to ./bin Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-04-06cri-o, podman, packagegroup-container: replace anonymous python function ↵Martin Jansa
calling bb.parse.SkipRecipe with conditional PNBLACKLISTs * PNBLACKLISTs are IMHO a bit easier to read and easier to override from distro which e.g. provides own recipe for libseccomp Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2021-02-06podman: update to 3.x release seriesBruce Ashfield
Bumping to the 3.x release series, to pickup new functionality for the release. As part of this update we drop the build of iopodman.go, since varlink support has been dropped in favour of a ReST API. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-09-01podman: update to 2.0.7Bruce Ashfield
Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-06-30podman: uprev 1.8.1 > 2.0.1Ming Liu
Updating to 2.0.1 to pickup bugfixes and security changes. The following commits comprise this update: a11c4ead1 Bump to v2.0.1 6a541f680 Merge pull request #6780 from mheon/even_more_201_backports f7b16d017 Update release notes with further v2.0.1 changes 8bb986137 Fix inspect to display multiple label: changes 2ad9dcc07 Set syslog for exit commands on log-level=debug 723a9e308 Friendly amendment for pr 6751 68543bbec podman run/create: support all transports c69ce171a systemd generate: allow manual restart of container units in pods 9de1581e9 Revert sending --remote flag to containers dc22350be Print port mappings in `ps` for ctrs sharing network 48ce67fb5 Merge pull request #6776 from vrothberg/2.0-vendor-common 6eefff647 vendor github.com/containers/common@v0.14.3 0b9143df8 Merge pull request #6758 from mheon/v2.0.1_backports 915f8698f Update release notes for v2.0.1 8e428fa4e utils: drop default mapping when running uid!=0 eb9fd40d2 Set stop signal to 15 when not explicitly set 6594d5d65 podman untag: error if tag doesn't exist 639b809c8 Reformat inspect network settings 01bc6bdda APIv2: Return `StatusCreated` from volume creation 1cc603c1f APIv2:fix: Remove `/json` from compat network EPs d26662484 Fix ssh-agent support d94644d35 libpod: specify mappings to the storage f425aede4 APIv2:doc: Fix swagger doc to refer to volumes ddf78b2ba Add podman network to bash command completions bfd303e16 Fix typo in manpage for `podman auto update`. 9a4517b37 Add JSON output field for ps 61bd64573 V2 podman system connection f81ad0058 wip cd0b18c24 image load: no args required 8fbfffc08 Re-add PODMAN_USERNS environment variable 0b4dcc7a3 Fix conflicts between privileged and other flags 7ea37dfe1 Bump required go version to 1.13 36d8b6979 Add explicit command to alpine container in test case. 03f952cfa Use POLL_DURATION for timer 07f535d8b Stop following logs using timers dbce3468e "pod" was being truncated to "po" in the names of the generated systemd unit files. 5d9ec1ce7 rootless_linux: improve error message 37abb88aa Fix podman build handling of --http-proxy flag 27120bfba correct the absolute path of `rm` executable 4af208142 Merge pull request #6711 from lsm5/v2.0-custom-GO_BUILD-backport 0ac4061bd Makefile: allow customizable GO_BUILD 13924bac1 Merge pull request #6695 from cevich/update_v2.0 bade38c32 Merge pull request #6697 from mheon/bump_v2.0.0 c866e584d Update release notes to reflect we are now v2.0 f458c5968 Bump to v2.0.1-dev eec482cae Bump to v2.0.0 64ba72363 Merge pull request #6694 from mheon/release_notes_2.0 5bda75cfd Update release notes for v2.0.0 89dbd1a91 Merge pull request #6674 from jwhonce/issues/6670 ed91524ae Merge pull request #6637 from jwhonce/issues/6574 ea8e61e4e Fixes #6670 bda4a6982 Correct logic for demux'ing channels 1a2eb3e61 Merge pull request #6677 from baude/pollOnEvents 33a602761 Merge pull request #6690 from vrothberg/fix-6687 f46664546 Poll on events for file reading bba433ed9 podman images --format json: pretty print 5ec29f8d4 Merge pull request #6684 from vrothberg/fix-ci 334d3b1ef CI: force registry:2.6 a2661b1c2 Merge pull request #6673 from ashley-cui/master 4dc934080 Fix remote docs e6b9b3ab2 Merge pull request #6656 from mheon/recursive_init 2e621aece Merge pull request #6662 from containers/dependabot/go_modules/k8s.io/apimachinery-0.18.4 1099ad6ac Merge pull request #6669 from vrothberg/unflake-rmi b20619e5b Allow recursive dependency start with Init() ec7822795 Bump k8s.io/apimachinery from 0.18.3 to 0.18.4 59cd8a0cf unflake rmi tests 3eb0ad04a Merge pull request #6663 from containers/dependabot/go_modules/k8s.io/api-0.18.4 ad33b2363 Merge pull request #6661 from containers/dependabot/go_modules/go.etcd.io/bbolt-1.3.5 b5f7afd04 Merge pull request #6658 from mheon/experimental_no_more d0b3035c3 Merge pull request #6611 from lsm5/fix-Makefile-for-varlink 5d161c8ca Bump k8s.io/api from 0.18.3 to 0.18.4 16dbc160c Bump go.etcd.io/bbolt from 1.3.4 to 1.3.5 6472b44c3 Merge pull request #6654 from rhatdan/keepid 6e410ede7 Merge pull request #6647 from rhatdan/caps 43ead88e8 Podman system service is no longer experimental fe69aa9ba Handle dropping capabilties correctly when running as non root user 7b00e49f6 Merge pull request #6560 from mheon/fix_exec_logdriver daabbc1a1 Merge pull request #6657 from mheon/bump-2.0.0-rc7 c385e6d36 Don't ignore --user flag in rootless --userns keepid 4b08d9ea5 Bump to v2.0.0-dev 5460ea87d Bump to v2.0.0-rc7 7b5073b46 Merge pull request #6655 from TomSweeneyRedHat/dev/tsweeney/b1_15_0 30c0fc9f1 Makefile: install.varlink needs to create dirs a76bf114d Merge pull request #6620 from jgallucci32/api-logs-separate 70f6cf7ff Merge pull request #6634 from baude/v2buildfixes fde8040fa Bump Buildah to v1.15.0 fd184fa4a Merge pull request #6522 from mheon/unless-stopped 585b14a9f Move logs functionality to separate file for APIv2 5694104c2 Merge pull request #6644 from jgallucci32/revert-log-follow d97b5b04a Merge pull request #6630 from ashley-cui/master 96b442172 Merge pull request #6641 from vrothberg/harden-units 6645e0d6f Merge pull request #6648 from vrothberg/vendor-image e5c343294 generate systemd: `ExecStopPost` for all units f29360648 Merge pull request #6631 from rhatdan/hooks 03e99c9b4 Revert #6591 to fix issue with failed tests ac4f4b148 vendor github.com/containers/image/v5@v5.5.1 6f1440a3e Add support for the unless-stopped restart policy 0e171b7b3 Do not share container log driver for exec 1acd2adcc Merge pull request #6640 from edsantiago/fix_flaky_logs_test 78ad57ebd Merge pull request #6636 from mheon/add_warnings 200afe7a9 Merge pull request #6583 from mheon/inspect_ctr_before_img 65c3a5660 fix misc remote build issues 38391ed25 Merge pull request #6622 from goochjj/podman_fix_init 6d5a432c2 "streaming output" logs test: fix flake 0d2b5532c Merge pull request #5852 from baude/v1prune 241326a9a Podman V2 birth 88c6fd06c Merge pull request #5837 from vrothberg/ignore 57f389728 Merge pull request #5848 from jwhonce/wip/options 8b178f12c Merge pull request #5839 from rhatdan/troubleshoot 1d93d2125 V2 Enable rootless 5def21140 Merge pull request #5842 from baude/v2bloat2 a8a61d976 Add SELinux volume information to troubleshoot.md 8c4d4b58e Merge pull request #5597 from sujil02/systemd-updates ba430bfe5 podman v2 remove bloat v2 c1bafb8b5 Merge pull request #5844 from baude/apiv2filteridfix e154249b4 allow filters to work when listing containers 8857ba20a Merge pull request #5835 from containers/dependabot/go_modules/github.com/containers/common-0.9.1 a037d9cd4 Update podman-generate-systemd man page 155a7d661 Merge pull request #5826 from cevich/gate_pip 09e821a8e Merge pull request #5690 from rhatdan/selinux 04e83f63a .gitignore: ignore v2 remote 084cfb81d Merge pull request #5834 from rhatdan/version 897847ccc Bump github.com/containers/common from 0.9.0 to 0.9.1 62803f8d3 Add version to podman info command d6b3bc18f Merge pull request #5752 from mheon/pod_inspect_structs c7d17613e Merge pull request #5827 from baude/v2bloat 0f7162d79 Merge pull request #5817 from rhatdan/selinux1 82ce9703e Add basic structure of output for APIv2 pod inspect 30d2964ff v2 bloat pruning phase 2 3500a8bc3 Merge pull request #5830 from baude/v2runtime c4ca3c71f Add support for selecting kvm and systemd labels 6e9622aa9 Merge pull request #5775 from sujil02/v2-container-prune ac94a96a7 Fix up SELinux labeling 195cb1127 Merge pull request #5671 from edsantiago/swagger-check 693a8039c Merge pull request #5776 from vrothberg/au bbc0c4a97 podmanv2 fix runtime assignment 97bded830 Merge pull request #5823 from mheon/update_readme_19 337e8d6d2 Merge pull request #5786 from containers/dependabot/go_modules/github.com/containers/common-0.9.0 e394ff407 Cirrus: Fix gate container build failure 2aca1b7f9 logformat: handle apiv2 results, add anchor links ef297d466 Merge pull request #5767 from edsantiago/logformat_add_anchors_and_apiv2 9b78bf929 Merge pull request #5770 from baude/v2events d522755b5 Update README to reflect that latest version is v1.9.0 cc9b78f07 Merge pull request #5820 from mheon/bump-1.9.0 ec4060aef Ability to prune container in api V2 4489440aa Bump to v2.0.0-dev d98572350 Bump to v1.9.0 37ed662f3 Merge pull request #5814 from baude/v2specgenprunelibpod 165aef776 podmanv2 events a756161e8 Merge pull request #5813 from baude/v2edtests2 ffcb99d83 Merge pull request #5818 from vrothberg/fix-nil-deref 123158e83 podmanV2: fix nil deref d83213634 test case added for image prune cache image 1e8e4bb33 note for skipping cache image added. 9dc9f5cf4 image prune skips images with child images. 714718794 v2specgen prune libpod 60dde457f More system test fixes on regressions f0b6cdede Merge pull request #5812 from jwhonce/wip/options d51727642 Add support for the global flags and config files ba26c763c swagger-check: new CI tool to cross-check swagger 0d01f09bf Merge pull request #5811 from mheon/bump-1.9.0-rc2 bf97e803d Bump to v1.9.0-dev 443aab15e Bump to v1.9.0-rc2 a6caae0b5 Merge pull request #5808 from baude/v2psformat2 01c5915a5 Merge pull request #5809 from mheon/release_notes_1.9.0_rc2 246ee9320 Merge pull request #5801 from baude/v2mount 548645e75 Update release notes for v1.9.0-RC2 1be617891 Merge pull request #5445 from sujil02/podFilter-new d1c26af14 apiv2 add bindings for logs|events e87fe4dbb Merge pull request #5550 from giuseppe/rootless-hidepid fea5f913e Don't include SUBDIR in windows.zip 1091440e5 rootless: fix usage with hidepid=1 68a5a85cc Bump github.com/containers/common from 0.5.0 to 0.6.1 fbe743501 V2 podman command bd9386dda Merge pull request #5542 from rhatdan/vendor 464a1cd48 Merge pull request #5540 from jwhonce/issues/5531 d66d54282 Merge pull request #5544 from baude/apiv2serveswagger c9c95a7e0 Merge pull request #5543 from edsantiago/swagger_fixes 52c835053 serve swagger when present f557cf91d swagger: more consistency fixes 67d0d1e50 Vendor in containers/buildah v1.14.3 45e7cbfef Merge pull request #5480 from vrothberg/auto-updates 651ddd356 Reduce CPU usage when --timeout=0 81005f463 New test: man page cross-ref against --help e89c6382a Add inspect for exec sessions 118e78c5d Add structure for new exec session tracking to DB f138405b4 Populate ExecSession with all required fields d9eb078e2 Merge pull request #5532 from baude/filetimeoutflake de43a00b5 Merge pull request #5533 from mheon/bump-1.8.2-rc1 f08b992f3 Merge pull request #5536 from giuseppe/avoid-conmon-zombie a6f5b6a48 podman: avoid conmon zombie on exec 15326f051 Filter pods through pod list api e9846b962 Bump to v1.8.2-dev c617484c1 Bump to v1.8.2-rc1 f3a28de32 Merge pull request #5528 from mheon/fix_master_vendor d47dc63cf Fix vendoring on master 14186ca28 fix timeout file flake bcdcfeb3e Merge pull request #5529 from mheon/release_notes_182_rc1 7c5ffe377 Update release notes for v1.8.2-rc1 83d2686f4 Fix vendoring on master 8f1ce4bdd Merge pull request #5524 from rhatdan/vendor f4e873c4e auto updates 68ef7aa4f Fix path of tmp_dir 9ef5d2875 Merge pull request #5449 from baude/manifests c4a62733a Merge pull request #5520 from giuseppe/make-warning-clearer 8081d9c74 Update containers/storage to v1.16.5 a255d7986 pkg/systemd: add dbus support cc57b88f7 config: make warning clearer 2b2996d09 Merge pull request #5515 from edsantiago/ci_sundry_small_fixes da17fbaad Merge pull request #5490 from containers/dependabot/go_modules/k8s.io/api-0.17.4 83c037c58 Merge pull request #5489 from containers/dependabot/go_modules/github.com/containers/common-0.5.0 300338478 Four small CI fixes: 67a985ddb Merge pull request #5514 from vrothberg/fix-ci bfa1ba588 fix systemd generate tests abbbeacd6 apiv2 addition of manifests 412a114d3 Merge pull request #5439 from ttys3/fixup-systemdgen-with-new-param 5288d112b Merge pull request #5252 from QiWang19/not-reset-tempdir 759ffb0a2 Merge pull request #5505 from tonybenoy/tony_typo 4e13ef58c Merge pull request #5476 from edsantiago/run_rmi_test_fix af1ac85da Merge pull request #5508 from baude/buildaddarchos 9ca4b6c6f add os|arch attributes when building 9128ef85c Missing double quotes in troubleshooting guide. 194723f31 force run container detached if container CreateCommand missing the detach param 8b07ad113 Merge pull request #5496 from baude/preemptive 16536af11 Merge pull request #5491 from containers/dependabot/go_modules/github.com/fsnotify/fsnotify-1.4.9 4f497991b Merge pull request #5327 from baude/apiv2hc c4a62733a Merge pull request #5520 from giuseppe/make-warning-clearer 8081d9c74 Update containers/storage to v1.16.5 a255d7986 pkg/systemd: add dbus support cc57b88f7 config: make warning clearer 2b2996d09 Merge pull request #5515 from edsantiago/ci_sundry_small_fixes da17fbaad Merge pull request #5490 from containers/dependabot/go_modules/k8s.io/api-0.17.4 83c037c58 Merge pull request #5489 from containers/dependabot/go_modules/github.com/containers/common-0.5.0 300338478 Four small CI fixes: 67a985ddb Merge pull request #5514 from vrothberg/fix-ci bfa1ba588 fix systemd generate tests abbbeacd6 apiv2 addition of manifests 412a114d3 Merge pull request #5439 from ttys3/fixup-systemdgen-with-new-param 5288d112b Merge pull request #5252 from QiWang19/not-reset-tempdir 759ffb0a2 Merge pull request #5505 from tonybenoy/tony_typo 4e13ef58c Merge pull request #5476 from edsantiago/run_rmi_test_fix af1ac85da Merge pull request #5508 from baude/buildaddarchos 9ca4b6c6f add os|arch attributes when building 9128ef85c Missing double quotes in troubleshooting guide. 194723f31 force run container detached if container CreateCommand missing the detach param 8b07ad113 Merge pull request #5496 from baude/preemptive 16536af11 Merge pull request #5491 from containers/dependabot/go_modules/github.com/fsnotify/fsnotify-1.4.9 4f497991b Merge pull request #5327 from baude/apiv2hc a95e9e5b4 Bump github.com/containers/common from 0.4.2 to 0.5.0 40ac4779e Bump k8s.io/api from 0.17.3 to 0.17.4 e7e5d125f Bump github.com/fsnotify/fsnotify from 1.4.7 to 1.4.9 e6fba1e44 eat signal 23 in signal proxy 2099643aa add apiv2 healthcheck code c9f148fb1 Merge pull request #5470 from containers/dependabot/go_modules/github.com/containers/storage-1.16.3 d586e16ad Merge pull request #5484 from baude/bindingsnocolor ac6c8fb68 Merge pull request #5482 from baude/removeimagefilter 9215eb033 Cirrus: Disable non-docs release processing 194759b96 turn off color-mode for bindings 3aa58ccd0 remove imagefilter for varlink remote client 925da7411 Bump github.com/containers/storage from 1.16.2 to 1.16.3 9c7481dbd Merge pull request #5474 from giuseppe/detect-containers-rootlessport-child-exit 235f36786 Merge pull request #5469 from giuseppe/no-size-create-container 358578087 run --rmi test: make it work 19f5d557b Merge pull request #5468 from Akasurde/5244_follow_up 647dc33e1 rootlessport: detect rootless-child exit 8741eb8a9 create: do not calculate image size eb2d0a228 Follow up changes from #5244 78e090092 Merge pull request #5458 from baude/apiv2eventslibpod 9cfcf5692 Merge pull request #5460 from edsantiago/man_page_xref 9bc27118b Merge pull request #5372 from sujil02/podstatus dbb3de990 Merge pull request #5459 from mheon/bump_readme_181 3d1bff6db man page cross-reference fixes: part 2 29c071d4f Update version in README to v1.8.1 da9d21635 Merge pull request #5457 from mheon/bump-1.8.1 216a6091d [CI:DOCS]Add libpod event endpoint 8877fed86 Bump to v1.8.2-dev Testing has been performed across x86-64/arm/arm64 via cli and podman-compose. Signed-off-by: Ming Liu <ming.liu@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-03-13podman: add system service for podmanStefan Agner
Add system service for podman which starts a podman instance allow to access the new HTTP based API (apiv2). Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-03-13podman: bump to the latest version 1.8.1Stefan Agner
Bump to the newest podman release 1.8.1. Many new networking features and a new HTTP API has been added since 1.6.1. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2020-01-17podman: bump to latest release 1.7.0Stefan Agner
Bump to latest podman release 1.7.0. It features improvements to networking, podman play kube, and systemd unit file integration. They have also added the podman system reset command, to remove all existing containers, pods, images, and volumes and reset the system to its initial state. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-12-18podman: upgrade 1.6.1 -> 1.6.2Tim Orling
Lateest upstream is 1.6.4, but neither 1.6.3 nor 1.6.4 build cleanly. Release notes: https://github.com/containers/libpod/releases/tag/v1.6.2 Signed-off-by: Tim Orling <timothy.t.orling@linux.intel.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-10-13podman: bump to latest release 1.6.1Stefan Agner
Bump to latest podman release 1.6.1. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-10-13podman: remove comment about runcStefan Agner
It seems that docker uses nowadays a rather vanilla version of runc, at the time of writing 1.0.0-rc8. This version has successfully tested with podman, hence remove the obsolete comment. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-10-07podman: fix layer check cut & paste errorsBruce Ashfield
The layer check for podman was copied from cri-o .. and some non podman elements came over as part of that copy. We drop selinux as a check, and fix some comments. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-10-03podman: make docker wrapper configurable via packageconfigBruce Ashfield
podman can behave as transparent drop in replacement for docker via a wrapper 'docker' script that simply calls podman when any docker command is issues. While this is an interesting feature, we want it to be optional .. since it is possible that podman and docker might want to be installed at the same time. So we introduce a 'podman' PACKAGECONFIG, that controls whether or not this wrapper is installed, and if it is installed it marks the podman package as conflicting with docker (which gets us a better message than a failed image assembly provides). Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-10-02podman: add build flexibility to dependenciesBruce Ashfield
In a similar manner to cri-o, we don't want to make meta-selinux or meta-security a hard dependency to meta-virtualization. So we implement a similar anonymous python check that allows the recipe to be skipped if the dependent layers are not present (and hence we are yocto compatible). If we get more than two recipes doing layer checks (this is the 2nd), we can move the functionality to a class. We also make the runc dependency be virtual/runc versus picking a specific provider (even if only runc-opencontainers has been tested). Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
2019-10-02podman: add the Pod Manager toolStefan Agner
Podman is a daemonless container engine for developing, managing, and running OCI Containers on your Linux System. Containers can either be run as root or in rootless mode. This patch adds the initial recipe for podman. Currently the build tags systemd (if in DISTRO_FEATURES), seccomp, varlink and remoteclient are enabled which allows to run podman with overlayfs as root and vfs in rootless mode. The storage drivers btrfs and device-mapper have not been tested and are disabled at the moment. It seems that seccomp is mandatory, which makes meta-security which provides libseccomp a mandatory dependency for this recipe. Signed-off-by: Stefan Agner <stefan.agner@toradex.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>