summaryrefslogtreecommitdiffstats
path: root/recipes-containers/buildah
Commit message (Collapse)AuthorAgeFilesLines
* buildah: update to 1.36Bruce Ashfield11 days1-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping buildah to version v1.36.0, which comprises the following commits: 6ceba8838 Bump to v1.36.0 c09e08b53 build: be more selective about specifying the default OS 3fa5531ca Bump to c/common v0.59.0 4d1690bc3 Fix buildah prune --help showing the same example twice 208b7111e fix(deps): update module github.com/onsi/ginkgo/v2 to v2.18.0 c7937cd1d fix(deps): update module github.com/containers/image/v5 to v5.31.0 183582f03 bud tests: fix breakage when vendoring into podman de8510c9d Integration tests: fake up a replacement for nixery.dev/shell d9191e17c copierWithSubprocess(): try to capture stderr on io.ErrClosedPipe 97382f928 Don't expand RUN heredocs ourselves, let the shell do it 864a40cbd Don't leak temp files on failures 97d44ab9c Add release note template to split dependency chores 4a524737f fix CentOS/RHEL build - no BATS there 420949a5a fix(deps): update module github.com/containers/luksy to v0.0.0-20240506205542-84b50f50f3ee bbab575ff Address CVE-2024-3727 6a48ae700 chore(deps): update module github.com/opencontainers/runtime-spec to v1.2.0 d5b2e3c41 Builder.cdiSetupDevicesInSpecdefConfig(): use configured CDI dirs da4e2d7ad Setting --arch should set the TARGETARCH build arg 6f1f687c3 fix(deps): update module golang.org/x/exp to v0.0.0-20240416160154-fe59bbe5cc7f cd1960725 [CI:DOCS] Add link to Buildah image page to README.md f6d49125a Don't set GOTOOLCHAIN=local a04741d9f fix(deps): update module github.com/cyphar/filepath-securejoin to v0.2.5 53f2dc231 Makefile: set GOTOOLCHAIN=local e0077e8c6 Integration tests: switch some base images fdfd2237d containerImageRef.NewImageSource: merge the tar filters f2825bf7b fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.2 2c1c73169 fix(deps): update module github.com/containers/luksy to v0.0.0-20240408185936-afd8e7619947 7688d880d Disable packit builds for centos-stream+epel-next-8 7425f6f8f Makefile: add missing files to $(SOURCES) fbd2b7db4 CI VMs: bump to new versions with tmpfs /tmp 89ee4f4b0 chore(deps): update module golang.org/x/net to v0.23.0 [security] c01061e47 integration test: handle new labels in "bud and test --unsetlabel" f86c2748e Switch packit configuration to use epel-9-$arch ... 14d964d92 Give unit tests a bit more time 8bb87aefa Integration tests: remove a couple of duplicated tests 3e756d507 Integration tests: whitespace tweaks 8ee7bebd7 Integration tests: don't remove images at start or end of test c7f088142 Integration tests: use cached images more b213c5e7a Integration tests _prefetch: use registry configs 8bdd6a66d internal: use fileutils.(Le|E)xists 441bdc927 pkg/parse: use fileutils.(Le|E)xists 705338379 buildah: use fileutils.(Le|E)xists 9dcd1cc9a chroot: use fileutils.(Le|E)xists 358814f69 vendor: update containers/(common|storage) be74b733f Fix issue/pr lock workflow a99fe1513 [CI:DOCS] Add golang 1.21 update warning 77400c4fc heredoc: honor inline COPY irrespective of ignorefiles ff13a08c9 Update install.md 5b414ad08 source-push: add support for --digestfile d9129b463 Fix caching when mounting a cached stage with COPY/ADD 58579ba65 fix(deps): update github.com/containers/luksy digest to 3d2cf0e 2cd31a069 Makefile: softcode `strip`, use it from env var f812c8949 Man page updates 5198af7d7 Add support for passing CDI specs to --device 14bf3db27 Update comments on some API objects 2a7ff9905 pkg/parse.DeviceFromPath(): dereference src symlinks c1b43b57b Makefile - instead of calling `as` directly, use it from env var 23b8d9767 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.1 c1119f886 CI: bump VMs 2c47fdccd fix(deps): update module github.com/docker/docker to v25.0.5+incompatible f95b7a188 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.17.0 9cf83d8f8 Change RUN to comment in bud.bats 5808b9603 Stop rebasing renovate PRs automatically 37994356f Update renovate validation image 4304d618f CVE-2024-1753 container escape fix 516f9e9a2 correctly configure /etc/hosts and resolv.conf when using network 9db5a16f7 buildah: refactor resolv/hosts setup. 8c1fee7e7 rename the hostFile var to reflect the value better f8a7841cc vendor latest c/common 26da74d54 [skip-ci] rpm: use go-rpm-macros supported vendoring 547d9bf0e Update docs/buildah-add.1.md 80f9f7cb0 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.16.0 5cf05ac08 fix(deps): update module github.com/docker/docker to v25.0.4+incompatible c355679d3 fix(deps): update module github.com/containers/ocicrypt to v1.1.10 550139916 chore(deps): update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [security] 1a6d3513f chore(deps): update module github.com/go-jose/go-jose/v3 to v3.0.3 [security] bf3263ec1 Bump google.golang.org/protobuf to v1.33.0 e635558d2 fix links to containerignore doc e53e50f7a [skip-ci] Makefile: update rpm target 87ef84d3a pr-should-include-tests: use GitHub label, not commit text d50122aeb tests: enable pasta tests 1bc5dd692 [CI:DOCS] Migrate buildah container image 7c88bb372 Update .gitignore da81d2e2b Bump to v1.36.0-dev fedbd7967 Bump v1.35.0 3164076e2 Bump c/common v0.58.0, c/image v5.30.0, c/storage v1.53.0 b2504c263 conformance tests: don't break on trailing zeroes in layer blobs a2f0ebef6 Add a conformance test for copying to a mounted prior stage e504df188 fix(deps): update module github.com/stretchr/testify to v1.9.0 951dccd3f cgroups: reuse version check from c/common bbea3eb54 Update vendor of containers/(common,image) 6474279ed fix(deps): update github.com/containers/storage digest to eadc620 f9d603608 fix(deps): update github.com/containers/luksy digest to ceb12d4 53f230e2b fix(deps): update github.com/containers/image/v5 digest to cdc6802 8a1bcd51c manifest add: complain if we get artifact flags without --artifact d0ffb9d37 Use retry logic from containers/common e9c3c1666 Vendor in containers/(storage,image,common) 5047a3566 Update module golang.org/x/crypto to v0.20.0 26d5b84b1 Add comment re: Total Success task name 4853c0042 tests: skip_if_no_unshare(): check for --setuid 63975b541 Properly handle build --pull=false 836b9384d [skip-ci] Update tim-actions/get-pr-commits action to v1.3.1 5748595ae Update module go.etcd.io/bbolt to v1.3.9 fee705081 Revert "Reduce official image size" aee02318a Update module github.com/opencontainers/image-spec to v1.1.0 cdb1a4ff8 Reduce official image size eb6269d8c Build with CNI support on FreeBSD 98f870753 build --all-platforms: skip some base "image" platforms d73e21120 Bump main to v1.35.0-dev 90c0d9794 Vendor in latest containers/(storage,image,common) 1def7d6de Split up error messages for missing --sbom related flags aca884a89 `buildah manifest`: add artifact-related options 07057917d cmd/buildah/manifest.go: lock lists before adding/annotating/pushing a0852e994 cmd/buildah/manifest.go: don't make struct declarations aliases 4f0b619dd Use golang.org/x/exp/slices.Contains e202d62cc Disable loong64 again e99960085 Fix a couple of typos in one-line comments 302a798ad egrep is obsolescent; use grep -E e6d179476 Try Cirrus with a newer VM version 04847f57f Set CONTAINERS_CONF in the chroot-mount-flags integration test 56e6ef854 Update to match dependency API update 5d58b88c7 Update github.com/openshift/imagebuilder and containers/common a20d5b2a5 docs: correct default authfile path 9d58d1382 fix(deps): update module github.com/containerd/containerd to v1.7.13 533aac2d4 tests: retrofit test for heredoc summary 1bfd3336f build, heredoc: show heredoc summary in build output 811ee6797 manifest, push: add support for --retry and --retry-delay 1a8cbc185 fix(deps): update github.com/openshift/imagebuilder digest to b767bc3 9d516e22e imagebuildah: fix crash with empty RUN e14f46f2e fix(deps): update github.com/containers/luksy digest to b62d551 a7aec1941 fix(deps): update module github.com/opencontainers/runc to v1.1.12 [security] f1f0d9d4d fix(deps): update module github.com/moby/buildkit to v0.12.5 [security] 79fb3c213 Make buildah match podman for handling of ulimits 13fd5bd2c docs: move footnotes to where they're applicable 011736e12 Allow users to specify no-dereference 34dff20da Run codespell on code 86afc1ffd Fix FreeBSD version parsing 32b8ceeb6 Fix a build break on FreeBSD e3d043ebf Remove a bad FROM line f6f6da8f0 fix(deps): update module github.com/onsi/gomega to v1.31.1 4b5caebd7 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc6 f157be843 docs: use reversed logo for dark theme in README cf69e8a18 build,commit: add --sbom to scan and produce SBOMs when committing b3af07dab commit: force omitHistory if the parent has layers but no history de7c1e1f7 docs: fix a couple of typos 89f50af21 internal/mkcw.Archive(): handle extra image content 4cc811f4f stage_executor,heredoc: honor interpreter in heredoc 339839d4b stage_executor,layers: burst cache if heredoc content is changed dd186ee0f fix(deps): update module golang.org/x/crypto to v0.18.0 a42bfd019 Replace map[K]bool with map[K]struct{} where it makes sense 905551f51 fix(deps): update module golang.org/x/sync to v0.6.0 efe76552b fix(deps): update module golang.org/x/term to v0.16.0 d371fc7b9 Bump CI VMs 53c65dd36 Replace strings.SplitN with strings.Cut b5ee4fb34 fix(deps): update github.com/containers/storage digest to ef81e9b 114bb6f0c fix(deps): update github.com/containers/image/v5 digest to 1b221d4 fd0899f1f fix(deps): update module github.com/fsouza/go-dockerclient to v1.10.1 59ea8af1b Document use of containers-transports values in buildah b2c80f9a3 fix(deps): update module golang.org/x/crypto to v0.17.0 [security] b283c48db chore(deps): update dependency containers/automation_images to v20231208 4a9dba647 manifest: addCompression use default from containers.conf 041388f87 commit: add a --add-file flag 81435aadc mkcw: populate the rootfs using an overlay 5b9141887 chore(deps): update dependency containers/automation_images to v20230517 de0c3cdaf [skip-ci] Update actions/stale action to v9 2ab21c666 fix(deps): update module github.com/containernetworking/plugins to v1.4.0 29d945f38 fix(deps): update github.com/containers/image/v5 digest to 7a40fee 4276a735b Bump to v1.34.1-dev 471460018 Ignore errors if label.Relabel returns ENOSUP Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: adapt SRC_URI to include destsuffix=${GO_SRCURI_DESTSUFFIX}Bruce Ashfield11 days1-1/+1
| | | | | | | | As of commit cc4ec43a2b657fb4c58429ab14f1edc2473c1327 [go: Drop fork of unpack code, mandate GO_SRCURI_DESTSUFFIX] we require this variable in our go recipes. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: update to 1.34Bruce Ashfield2024-03-151-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping buildah to version v1.34.0-30-gdbeb097c6, which comprises the following commits: 30a9cd1c0 [release-1.34] Bump to v1.34.2-dev a2bab63fd [release-1.34] Bump to v1.34.1 b7a4562ad [release-1.34] Vendor bumps 83a136866 manifest: addCompression use default from containers.conf ae557ac9c Build with CNI support on FreeBSD cd59f7c16 tests: retrofit test for heredoc summary 2a399d67b build, heredoc: show heredoc summary in build output be6b9c3f0 docs: correct default authfile path 6a8e296ea Make buildah match podman for handling of ulimits 70fd07877 imagebuildah: fix crash with empty RUN aa729810a docs: move footnotes to where they're applicable 58820ffd1 Run codespell on code 638a825b1 Fix FreeBSD version parsing 78599048e Allow users to specify no-dereference 029063b9f Fix a build break on FreeBSD bb70cfc50 Remove a bad FROM line 6fe37a59b commit: force omitHistory if the parent has layers but no history b0fb0cacb docs: fix a couple of typos 6cacd1478 stage_executor,heredoc: honor interpreter in heredoc b8c0e21cf stage_executor,layers: burst cache if heredoc content is changed 702dfe84f Replace map[K]bool with map[K]struct{} where it makes sense f818763f3 Replace strings.SplitN with strings.Cut 47ecb727f Document use of containers-transports values in buildah d49e48412 commit: add a --add-file flag 27018aef5 mkcw: populate the rootfs using an overlay 413a35959 Ignore errors if label.Relabel returns ENOSUP 1b00f9e63 manifest: addCompression use default from containers.conf 21ec7aceb Bump to v1.34.0 6977c91e2 fix(deps): update module github.com/containerd/containerd to v1.7.11 b9852af08 fix(deps): update github.com/containers/storage digest to 15c3cb7 ad90fba16 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.13.2 669f19f6c fix(deps): update github.com/containers/common digest to 630c929 bdbd69e38 fix(deps): update module github.com/moby/buildkit to v0.12.4 ec76cbb60 fix(deps): update github.com/openshift/imagebuilder digest to ef2a5fe 7dfdcf33b [CI:DOCS] man pages: underscores, too-wide lines b7a0f6b13 fix(deps): update module github.com/containerd/containerd to v1.7.10 1f9103562 run.bats: use --quiet --pull=false when using a prefetched image 3b795dd4b internal/mkcw/embed/entrypoint.gz: rename to include the arch 7788160cb internal/mkcw/embed/entrypoint.gz: compress with -n9 76c9307ff fix(deps): update module golang.org/x/crypto to v0.16.0 d10b1e35b Integration tests: make skip_if_no_unshare check --map-users 028a3f9a3 fix(deps): update module golang.org/x/term to v0.15.0 3c23118f6 fix(deps): update module golang.org/x/sys to v0.15.0 d4f577b39 fix(deps): update module github.com/onsi/ginkgo to v2 c174e9162 vendor: update c/{common,image,storage} a23927ab5 run: Allow using just one jail per container on FreeBSD 12b205f69 Remove makefile targets entrypoint{,.gz} for non x86_64 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: update to 1.33.3Bruce Ashfield2024-01-191-2/+2
| | | | | | | | | | Bumping buildah to version v1.33.3-1-g5ca83472c, which comprises the following commits: 21e754fd3 [release-1.33.2] Bump Buildah to v1.33.3 b44d6bd56 [release-1.33.2] Bump c/common to 0.57.2 and c/image to 5.29.1 7fffb3366 [release-1.33.2] Bump to v1.33.2 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: fix branch nameChen Qi2024-01-191-1/+1
| | | | | | | | The branch 1.33.2 is not there any more. The correct branch for now is 1.33. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: update to 1.33.2Bruce Ashfield2024-01-041-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping buildah to version v1.33.2-1-g8be6786d5, which comprises the following commits: 7fffb3366 [release-1.33.2] Bump to v1.33.2 7add02a3b Update minimum to golang 1.20 b92ad028b fix(deps): update module github.com/fsouza/go-dockerclient to v1.10.0 20565e530 fix(deps): update module github.com/moby/buildkit to v0.12.3 bd0ae2aff Bump to v1.33.2-dev 38d6d5f11 Bump to v1.33.1 6d66008b6 Bump to v1.31.2-dev f18868d06 Bump to v1.31.1 f6cb3e474 fix(deps): update module github.com/moby/buildkit to v0.11.4 [security] 7aa395489 test,heredoc: use fedora instead of docker.io/library/python:latest 8fb826177 Bump to v1.33.1-dev 98da6c8d6 Bump to v1.33.0 2087848c3 Never omit layers for emptyLayer instructions when squashing/cwing 3a61cc099 Add OverrideChanges and OverrideConfig to CommitOptions bbb55b8b8 buildah: add heredoc support for RUN, COPY and ADD 69f52f805 vendor: bump imagebuilder to v1.2.6-0.20231110114814-35a50d57f722 fadc0ba08 conformance tests: archive the context directory as 0:0 (#5171) 3c61dfd4f blobcacheinfo,test: blobs must be resued when pushing across registry 19d9a6bc0 Bump c/storage v1.51.0, c/image v5.29.0, c/common v0.57.0 b2b761573 pkg/util.MirrorToTempFileIfPathIsDescriptor(): don't leak an fd 1fab39559 StageExecutor.Execute: force a commit for --unsetenv, too 4cf16730b Increase a copier+chroot test timeout 57d863dfd Add support for --compat-auth-file in login/logout dcfbe69a3 Update existing tests for error message change 5fc64afe1 Update c/image and c/common to latest eebecc94d fix(deps): update module github.com/containerd/containerd to v1.7.9 fe9bdce86 build: downgrade to go 1.20 4f3876d8e Add godoc for pkg/parse.GetTempDir 00e73de71 conformance tests: use go-dockerclient for BuildKit builds 0a85c0629 Make TEE types case-insensitive bc59f69c0 fix(deps): update module golang.org/x/crypto to v0.15.0 10c0222d4 Tweak some help descriptions 8df9b760b Stop using DefaultNetworkSysctl and use containers.conf only 99cad6ee1 Implement ADD checksum flag #5135 1d30520e8 vendor of openshift/imagebuilder #5135 7e0d66483 Pass secrets from the host down to internal podman containers 8f86c5784 Update cirrus and version of golang 61de02b0f image: replace GetStoreImage with ResolveReference 1306a64cd vendor: bump c/image to 373c52a9466f af394a83d pkg/parse.Platform(): minor simplification d1bfccf22 createConfigsAndManifests: clear history before cw-specific logic 9f1c9a8ee Use a constant definition instead of "scratch" 6552b619c conformance: use require.NoErrorf() more acf60abbe fix(deps): update module golang.org/x/term to v0.14.0 4a470feec fix(deps): update module golang.org/x/sync to v0.5.0 e8ae12013 fix(deps): update module github.com/spf13/cobra to v1.8.0 fc74d5071 fix(deps): update module golang.org/x/sys to v0.14.0 892014df1 fix(deps): update github.com/containers/common digest to 8354404 2f118fe61 fix(deps): update module github.com/opencontainers/runc to v1.1.10 ef439b8ad fix(deps): update github.com/containers/luksy digest to b5a7f79 934c40e73 Log the platform for build errors during multi-platform builds 3b96b1caf Use mask definitions from containers/common 34ac2cc4f Vendor in latest containers/common 2779e7062 fix(deps): update module github.com/containerd/containerd to v1.7.8 52d48d720 fix(deps): update module go.etcd.io/bbolt to v1.3.8 02f781b35 container.conf: support attributed string slices 2b2a4bed8 fix(deps): update module sigs.k8s.io/yaml to v1.4.0 03b004224 Use cutil.StringInSlice rather then contains 48a9c4371 Add --no-hostname option to buildah containers c536048ca vendor c/common: appendable containers.conf strings, Part 1 a9e06a64d fix(deps): update module github.com/onsi/gomega to v1.28.1 2a3a956cb chroot.setupChrootBindMounts: pay more attention to flags a4f0d7dec chore(deps): update dependency containers/automation_images to v20231004 7c8b51068 Vendor containers/common 0f0ca0cfc chore(deps): update module golang.org/x/net to v0.17.0 [security] 9c99d7ca8 run: use internal.GetTempDir with os.MkdirTemp 7704ca6d3 fix(deps): update module github.com/containerd/containerd to v1.7.7 07d955f27 imagebuildah,multi-stage: do not remove base images 6fd4f0373 gitignore: add mkcw binary 9c57af8d1 mkcw: remove entrypoint binaries b97f887ca fix(deps): update module golang.org/x/crypto to v0.14.0 4e6c2b2cd fix(deps): update module golang.org/x/sys to v0.13.0 f99de537e fix(deps): update module golang.org/x/sync to v0.4.0 5bfc7d9a4 Update some comments related to confidential workload c48a459ea Use the parent's image ID in the config that we pass to imagebuilder 2d4896f6e fix(deps): update github.com/containers/common digest to 8892536 065c8d43e fix(deps): update github.com/containers/luksy digest to 6df88cb 249e30c98 bug: Ensure the mount type is always BindMount by default ad3211c26 Protocol can be specified with --port. Ex. --port 514/udp a3d2c3125 fix(deps): update module github.com/onsi/gomega to v1.28.0 8b63fa37b build,config: add support for --unsetlabel 91f54ed54 tests/bud: add tests 351012792 [CI:BUILD] Packit: tag @containers/packit-build on copr build failures ae5f11e45 stage_executor: allow images without layers 4c6255679 vendor of containers/common b3084b5f4 Removing selinux_tag.sh as no longer needed after 580356f [NO NEW TESTS NEEDED] 9dd66e4cb add/copy: make sure we handle relative path names correctly 68ffd1e97 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc5 abc57f8df Bump to v1.33.0-dev b574b806e imagebuildah: consider ignorefile with --build-context Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: drop statically linked x86 entrypointBruce Ashfield2023-11-091-0/+4
| | | | | | | | | | | | | | | | | | | commit e89fac6c9bf8d0b [Add `buildah mkcw`, add `--cw` to `buildah commit` and `buildah build`] added a statically linked x86 entrypoint binary This entrypoint is not currently used in the tested / supported worflows. To avoid packaging QA warnings on non-x86 architectures, we remove the binary during the compilation phase. If it does need to be rebuilt in the future, buildah's Makefiles will have to be changed to not test the host for architecture support, and use the OE defined target arch and cross compilers instead. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* umoci & buildah & podman-tui: mark incompatible with mipsKai Kang2023-11-061-0/+2
| | | | | | | | | | | Since the runtime dependency skopeo has been marked incompatible with mips, mark for umoci accordingly. buildah and podman-tui rdepends on podman which has been marked incompatible with mips, so mark for them too. Signed-off-by: Kai Kang <kai.kang@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: update to 1.32.0Bruce Ashfield2023-11-061-3/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The new version has an internally stripped binary, so we inhibit the QA warning. Bumping buildah to version v1.31.0-159-g4f3d7b0b6, which comprises the following commits: 5151ccff5 .cirrus.yml: run tests relative to the release-1.32 branch 2326d4929 Tag v1.32.0 e90b3502b GetTmpDir is not using ImageCopyTmpdir correctly ccac7ca0b Run codespell on code 6be719454 Bump vendor containers/(common, storage, image) 9545744e8 Cirrus: Remove multi-arch buildah image builds 206cda149 fix(deps): update module github.com/containerd/containerd to v1.7.6 0191bc671 Split GetTempDir from internal/util 6e6827b27 Move most of internal/parse to internal/volumes 292b429f6 copier: remove libimage dependency via util package 4f3abf936 Add some docs for `build --cw`, `commit --cw`, and `mkcw` e89fac6c9 Add `buildah mkcw`, add `--cw` to `buildah commit` and `buildah build` cc619c28d Make sure that pathnames picked up from the environment are absolute 4ee5f020a fix(deps): update module github.com/cyphar/filepath-securejoin to v0.2.4 fd72bbee2 fix(deps): update module github.com/docker/docker to v24.0.6+incompatible 754568580 Don't try to look up names when committing images d5b02e551 fix(deps): update module golang.org/x/crypto to v0.13.0 3fc5274d3 docs: use valid github repo f94689199 fix(deps): update module golang.org/x/sys to v0.12.0 6ec6f046f vendor containers/common@12405381ff45 df1bc3834 push: --force-compression should be true with --compression-format 9c5cde533 Update module github.com/containerd/containerd to v1.7.5 3ebeaa2dd [skip-ci] Update tim-actions/commit-message-checker-with-regex action to v0.3.2 cc9f15f09 docs: add reference to oci-hooks 3454d5b29 Support passing of ULimits as -1 to mean max f330c77be GHA: Attempt to fix discussion_lock workflow 4942cc908 Fixing the owner of the storage.conf. f4e43f0e8 pkg/chrootuser: Ignore comments when parsing /etc/group on FreeBSD 2b57cef2b Use buildah repo rather then podman repo a8bbc9f5f GHA: Closed issue/PR comment-lock test 82069390f fix(deps): update module github.com/containers/storage to v1.49.0 4c4ff3128 chore(deps): update dependency containers/automation_images to v20230816 af3891258 Replace troff code with markdown in buildah-{copy,add}.1.md e997a966f [CI:BUILD] rpm: spdx compatible license field a3f2aa3c7 executor: build-arg warnings must honor global args f6fb75d9d fix(deps): update module github.com/containers/ocicrypt to v1.1.8 5643a7fa8 chroot: `setSeccomp` add support for `ArchPARISC(64)` and `ArchRISCV64` 8428dee36 make,cross: restore loong64 e3cd4d790 Clear CommonBuildOpts when loading Builder status d68d9a237 buildah/push/manifest-push: add support for --force-compression 3445a775a vendor: bump c/common to v0.55.1-0.20230811093040-524b4d5c12f9 2d6e43071 chore(deps): update dependency containers/automation_images to v20230809 065b95599 [CI:BUILD] RPM: fix buildtags 3964ca9d6 fix(deps): update module github.com/opencontainers/runc to v1.1.9 591b5390d chore(deps): update dependency ubuntu to v22 204c5a1ce chore(deps): update dependency containers/automation_images to v20230807 9ab3b526d [CI:BUILD] Packit: add fedora-eln targets ed2a501c9 [CI:BUILD] RPM: build docs with vendored go-md2man 5bdb8c70d packit: Build PRs into default packit COPRs fc7329d7c Update install.md f6c4ead1b Update install.md changes current Debian stable version name 2254ca208 fix(deps): update module golang.org/x/term to v0.11.0 248f5a2b3 fix(deps): update module golang.org/x/crypto to v0.12.0 ae36f6542 tests: fix layer-label tests f888b3d84 buildah: add --layer-label for setting labels on layers 239b2a877 Cirrus: container/rootless env. var. passthrough 65c1c9327 Cirrus: Remove duplicate env. var. definitions 978be7796 fix(deps): update github.com/containers/storage digest to c3da76f 62d405771 Add a missing .Close() call on an ImageSource e588986fa Create only a reference when that's all we need fe947ed9c Add a missing .Close() call on an ImageDestination 597d30880 CI:BUILD] RPM: define gobuild macro for rhel/centos stream b9ac8d5e0 manifest/push: add support for --add-compression d27a82356 manifest/inspect: add support for tls-verify and authfile 071f851da vendor: bump c/common to v0.55.1-0.20230727095721-647ed1d4d79a 512273587 vendor: bump c/image to v5.26.1-0.20230726142307-8c387a14f4ac 3d8616537 fix(deps): update module github.com/containerd/containerd to v1.7.3 c20d0164f fix(deps): update module github.com/onsi/gomega to v1.27.10 2e7dcc143 fix(deps): update module github.com/docker/docker to v24.0.5+incompatible 6a236937a fix(deps): update module github.com/containers/image/v5 to v5.26.1 d78f6c2a2 fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0 dbc71b7cc Update vendor of containers/(storage,image,common) 331fac670 fix(deps): update module github.com/opencontainers/runc to v1.1.8 9cc5d5e8c [CI:BUILD] Packit: remove pre-sync action 09a1cd698 fix(deps): update module github.com/containers/common to v0.55.2 11cec8523 [CI:BUILD] Packit: downstream task script needs GOPATH 70cb4c7e0 Vendor in containers/(common, image, storage) 173ac7dc9 fix(deps): update module golang.org/x/term to v0.10.0 8b84d9b8a [CI:BUILD] Packit: fix pre-sync action for downstream tasks 97b84029a contrib/buildahimage: set config correctly for rootless build user cba7b9fae fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc4 e00845797 Bump to v1.32.0-dev f704a67a1 Update debian install instructions 4c72c25a2 pkg/overlay: add limited support for FreeBSD Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: update to 1.31.3Bruce Ashfield2023-09-151-2/+2
| | | | | | | | | | | | | | | | | | | | | | Bumping buildah to version v1.31.1-23-g0926e05c3, which comprises the following commits: f449589dd [release-1.31] Bump to v1.31.4-dev 3ae75d4a4 [release-1.31] Bump to v1.31.3 68fa52ca5 [release-1.31] Bump c/common 0.55.4, c/image 5.26.2, c/storage 1.48.1 140f028d6 rpm: spdx compatible license field 20b479ec4 RPM: fix buildtags d1e3a7bf3 [release-1.31] Bump to v1.31.3-dev d4d1d7513 [release-1.31] Bump to v1.31.2 4d9260cc3 [release-1.31] Bump to v1.31.2-dev 800b1549b [release-1.31] Bump to v1.31.1 0a63bc63d [release-1.31] Remove zstd:chunked from man, bump c/common to v0.55.3 98f684ff3 [CI:BUILD] Packit: add fedora-eln targets 708c07761 [CI:BUILD] RPM: build docs with vendored go-md2man 68fa9389a packit: Build PRs into default packit COPRs 95e1dfb3d [CI:BUILD] Packit: remove pre-sync action 806fcccee CI:BUILD] RPM: define gobuild macro for rhel/centos stream Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: update to 1.31.1Bruce Ashfield2023-08-241-3/+3
| | | | | | | | | | Bumping buildah to version v1.31.1-3-g0cc7680cc, which comprises the following commits: 806fcccee CI:BUILD] RPM: define gobuild macro for rhel/centos stream a3056cacd [release-1.31] Bump c/common d0de60bbf Bump 1.31.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: update to 1.31Bruce Ashfield2023-08-011-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping buildah to version v1.31.0, which comprises the following commits: d0de60bbf Bump 1.31.0 723ed8e18 Bump c/common to 0.55.1 and c/image to 5.26.1 b835631bf Update vendor of containers/common c4d2a8520 Run unit tests for copier and chroot without -cover 135b5a8f0 Fix transition test to work with latest selinux policy d8b06097d Bump c/image to 5.26.0 and c/common to 0.54.0 7a5a18334 chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml` a8f350fc5 rootless: use default_rootless_network_cmd config b3edcaa06 vendor: update c/{common,image,storage} to latest d22a5293b chore: pkg imported more than once 74b885b9e buildah: add pasta(1) support 11ba328e2 use slirp4netns package from c/common a5c0c8acf update c/common to latest 14cd28c26 add hostname to /etc/hosts when running with host network eb135b8d5 vendor: update c/common to latest 237ac533e [CI:BUILD] Packit: add jobs for downstream Fedora package builds eeaf80f95 fix(deps): update module golang.org/x/sync to v0.3.0 b064ad7f6 fix(deps): update module golang.org/x/crypto to v0.10.0 bdd27d393 Add smoke tests for encryption CLI helpers b090ae238 fix(deps): update module golang.org/x/term to v0.9.0 fefbd04e5 fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.3 bd32a04c3 Remove device mapper support 92582a75c Remove use of deprecated tar.TypeRegA 261a524b9 Update tooling to support newer golangci-lint 6714a79eb Make cli.EncryptConfig,DecryptConfig, GetFormat public b3e39dfd9 Don't decrypt images by default 14b74e7f8 fix(deps): update module github.com/onsi/gomega to v1.27.8 1d08bd9de fix(deps): update github.com/containers/storage digest to 3f3fb2f 0dac0dfa5 Renovate: Don't touch fragile test stuffs d9ecd7c59 [CI:DOCS] Update comment to remove ambiguity 232230cae fix(deps): update github.com/containers/image/v5 digest to abe5133 4247a3e47 fix(deps): update module github.com/sirupsen/logrus to v1.9.3 925ff0e62 fix(deps): update module github.com/containerd/containerd to v1.7.2 5a83012c9 Explicitly ref. quay images for CI 9b65b12ae At startup, log the effective capabilities for debugging 3a351f603 parse: use GetTempDir from internal utils 6adbfeeb4 GetTmpDir: honor image_copy_tmp_dir from containers.conf 5eb356bb8 docs/Makefile: don't show sed invocations a630e3513 CI: Support testing w/ podman-next COPR packages 90f7436ac intermediate-images inherit-label test: make it debuggable 08b9a5407 fix(deps): update github.com/containers/common digest to 462ccdd 7e327cf18 Add a warning to `--secret` docs 9cd28db91 vendor: bump c/storage to v1.46.2-0.20230526114421-55ee2d19292f 0766b004b executor: apply label to only final stage beae5647c remove registry.centos.org 68337bf9c Go back to setting SysProcAttr.Pdeathsig for child processes 371bc34fe Fix auth.json path (validated on Fedora 38) wq Signed-off-by: Andreas Mack <andreas.mack@gmail.com> c6e73322b fix(deps): update module github.com/stretchr/testify to v1.8.3 0b69f7029 CI: fix test broken by renovatebot a5ad7b047 chore(deps): update quay.io/libpod/testimage docker tag to v20221018 86470bfd9 fix(deps): update module github.com/onsi/gomega to v1.27.7 91ce0571d test: use debian instead of docker.io/library/debian:testing-slim 7d9447b2f vendor: bump logrus to 1.9.2 e2b751a0b [skip-ci] Update tim-actions/get-pr-commits action to v1.3.0 d58d3a14b Revert "Proof of concept: nightly dependency treadmill" 911c3b5e8 fix(deps): update module github.com/sirupsen/logrus to v1.9.1 797f03430 vendor in containers/(common,storage,image) ba8a1bd0e fix(deps): update module github.com/docker/distribution to v2.8.2+incompatible 0eb266a95 run: drop Pdeathsig e8d11201a chroot: lock thread before setPdeathsig 51c03212e tests: add a case for required=false 00581b806 fix(deps): update module github.com/openshift/imagebuilder to v1.2.5 be682de68 build: validate volumes on backend dcc7feb6f secret: accept required flag w/o value ba06158ab fix(deps): update module github.com/containerd/containerd to v1.7.1 cad25dd6b fix(deps): update module golang.org/x/crypto to v0.9.0 dffb148b3 Update the demos README file to fix minor typos efa0d69a2 fix(deps): update module golang.org/x/sync to v0.2.0 e0fe30e61 fix(deps): update module golang.org/x/term to v0.8.0 d5b32b0f0 manifest, push: use source as destination if not specified 2fed5fc91 run,mount: remove path only if they didnt pre-exist 4b1c5e3a9 Cirrus: Fix meta task failing to find commit a913dc56a parse: filter edge-case for podman-remote 9252470c4 fix(deps): update module github.com/opencontainers/runc to v1.1.7 0019256f2 fix(deps): update module github.com/docker/docker to v23.0.5+incompatible b37c4ee43 build: --platform must accept only arch 5e43f8c9d fix(deps): update module github.com/containers/common to v0.53.0 562172751 makefile: increase conformance timeout 4775b247b Cap suffixDigitsModulo to a 9-digits suffix. 07fda81df Rename conflict to suffixDigitsModulo 4bb28899e fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2 411bdc968 fix(deps): update module github.com/opencontainers/runc to v1.1.6 d27c59f85 chore(deps): update centos docker tag to v8 43440ec6e Clarify the need for qemu-user-static package c34fbea7c chore(deps): update quay.io/centos/centos docker tag to v8 449fd3d2e Renovate: Ensure test/tools/go.mod is managed 6d877d89d Revert "buildah image should not enable fuse-overlayfs for rootful mode" e9884fc41 Bump to v1.31.0-dev 04965f119 Bump to v1.30.0 b5867198c fix(deps): update module github.com/containers/common to v0.52.0 41b760f97 fix(deps): update module golang.org/x/crypto to v0.8.0 9bd6ccf92 chore(deps): update dependency containers/automation_images to v20230405 d57638879 vendor c/common ff62cdebdd0e f847463ed vendor in latest containers/(storage, image) 45940016c fix(deps): update module github.com/opencontainers/runc to v1.1.5 0ff4746c4 fix(deps): update module github.com/fsouza/go-dockerclient to v1.9.7 2e25b156f buildah image should not enable fuse-overlayfs for rootful mode dcd7b789a stage_executor: inline network add default string c8c37c78f parse: add support for relabel bind mount option c95370cd3 build: pass process environment variables by reference 2ad68d816 run: pass process environment variables by reference d45916350 fix(deps): update module github.com/containers/common to v0.51.2 a92fe130e chore(deps): update dependency containers/automation_images to v20230330 e67bddded fix(deps): update module github.com/docker/docker to v23.0.2+incompatible 20861cd21 chore(deps): update dependency containers/automation_images to v20230320 73dc43c1d fix(deps): update module github.com/onsi/gomega to v1.27.6 e3a30b54a fix(deps): update github.com/opencontainers/runtime-tools digest to e931285 374133c95 [skip-ci] Update actions/stale action to v8 ce8c56780 test: don't allow to override io.buildah.version dfc9bb20e executor: only apply label on the final stage 946395494 Update docs/buildah-build.1.md 58a22053b update build instruction for Ubuntu aad1e994a code review 3afa5ca74 build: accept arguments from file with --build-arg-file 8e84bb709 run_linux: Update heuristic for mounting /sys 78416393f [CI:BUILD] Packit: Enable Copr builds on PR and commit to main e8dee4083 fix(deps): update module github.com/fsouza/go-dockerclient to v1.9.6 c0f0efada Update to Go 1.18 db0bafef3 Disable dependabot in favor of renovate 4055cc880 chore(deps): update dependency containers/automation_images to v20230314 2088f6bd7 Fix requiring tests on Makefile changes b85a38946 Vendor in latest containers/(storage, common, image) b6f32e576 imagebuildah: set len(short_image_id) to 12 499f1301f Re-enable conformance tests fa145b092 Skip conformance test failures with Docker 23.0.1 bc2423ebc Cirrus: Replace Ubuntu -> Debian SID 37afb5dbc run: add support for inline --network in RUN stmt e2210c3b7 vendor: bump imagebuilder to a3c3f8358ca31b1e4daa6 db509859d stage_executor: attempt to push cache only when cacheKey is valid a35dbb284 Add "ifnewer" as option in help message for pull command c1b82d195 build: document behaviour of buildah's distributed cache f444d6589 fix(deps): update module golang.org/x/term to v0.6.0 376eb73ab Add default list of capabilities required to run buildah in a container 46ffaf935 executor,copy: honor default ARG value while eval stage fd5db96c0 sshagent: use ExtendedAgent instead of Agent 9e6e15c31 tests/bud: remove unwated test 8a8f99e09 executor: do not warn on builtin default args b9e4e29e9 executor: don't warn about unused TARGETARCH,TARGETOS,TARGETPLATFORM 0ed9b4c8c Fix tutorial for rootless mode cf408f758 Vendor in latest containers/(common, storage, image) 0e707faa7 Ignore the base image's base image annotations 30f84c8ee fix(deps): update module github.com/fsouza/go-dockerclient to v1.9.5 05785ee57 build(deps): bump github.com/containers/storage from 1.45.3 to 1.45.4 21e6e91e4 Vendor in latest containers/common 0b7a7f80b docs/tutorials/04: add defaults for Run() 7baf73b2a imagebuildah.StageExecutor: suppress bogus "Pushing cache []:..." be10b8d20 executor: also add stage with no children to cleanupStages f9e51e744 [CI:BUILD] copr: fix el8 builds 8125e45a5 Fix documentation on which Capabilities are allowed by default a8ed3bb58 Skip subject-length validation for renovate PRs 956c5155d Temporarily hard-skip bud-multiple-platform-values test 3afa7e360 fix(deps): update github.com/openshift/imagebuilder digest to 86828bf 4875f1bc9 build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.17 36cade0c3 build(deps): bump tim-actions/get-pr-commits from 1.1.0 to 1.2.0 e0e43a419 build(deps): bump github.com/containers/image/v5 from 5.24.0 to 5.24.1 24b85d217 [skip-ci] Update tim-actions/get-pr-commits digest to 55b867b f96e1ad4d build(deps): bump github.com/opencontainers/selinux 2ef59fc2c build(deps): bump golang.org/x/crypto from 0.5.0 to 0.6.0 482bf4df4 Add renovate configuration 4dfb82890 Run codespell on codebase ae697555c login: support interspersed args for password 123ef1693 conformance: use scratch for minimal test 6a0367ff2 pkg/parse: expose public CleanCacheMount API 5d50a7320 build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7 6d53ec7a3 build(deps): bump github.com/containerd/containerd from 1.6.15 to 1.6.16 dbf1d43b3 docs: specify order preference for FROM 2008a5302 Bump to v1.30.0-dev Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: add seccomp and ipv6 to REQUIRED_DISTRO_FEATURESMartin Jansa2023-04-121-0/+4
| | | | | | | | | | | | | | | | * because it rdepends on podman with the same restriction * BTW: .gitignore has: build*/ which gets triggered for buildah as well: meta-virtualization $ git add ./recipes-containers/buildah/buildah_git.bb The following paths are ignored by one of your .gitignore files: recipes-containers/buildah I've adjusted it to /build*/ only. Signed-off-by: Martin Jansa <Martin.Jansa@gmail.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: update to 1.29.xBruce Ashfield2023-02-272-56/+5
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We drop our backported patch, since it is now part of the upstream project. We also drop {LINKSHARED} from the build, as with the updated buildah and golang version bumps in oe-core, we get the following build error: | # github.com/containers/buildah/cmd/buildah | type:*crypto/elliptic.nistCurve[*crypto/internal/nistec.P384Point]: unreachable sym in relocation: crypto/elliptic.(*nistCurve[*crypto/internal/nistec.P384Point]).Add | type:*crypto/elliptic.nistCurve[*crypto/internal/nistec.P384Point]: unreachable sym in relocation: crypto/elliptic.(*nistCurve[*crypto/internal/nistec.P384Point]).Add It is unclear what the linked shared flag was providing in our build, and we are generally ok with statically linked go applications. So we drop the flag until a compelling reason exists to debug the linking failure. Bumping buildah to version v1.29.1-1-g7fa17a842, which comprises the following commits: faf0d4fcb [release-1.29] Bump to Buildah v1.29.1 7d5ff3012 Update to c/image 5.24.1 94b723cb5 Bump to v1.29.0 c9cbc6d7d tests: improve build-with-network-test 5e3f26de2 Bump c/storagev1.45.3, c/imagev5.24.0, c/commonv0.51.0 b70fb1765 build(deps): bump github.com/onsi/gomega from 1.25.0 to 1.26.0 fe0256d38 Flake 3710 has been closed. Reenable the test. f9ef51cbb [CI:DOCS] Fix two diversity issues in a tutorial 3ef898e41 build(deps): bump github.com/fsouza/go-dockerclient from 1.9.2 to 1.9.3 0d87e38b6 vendor in latests containers/(storage, common, image) 15bdd2aad fix bud-multiple-platform-with-base-as-default-arg flake ac7458e70 stage_executor: while mounting stages use freshly built stage e1cfcb240 build(deps): bump github.com/fsouza/go-dockerclient from 1.9.0 to 1.9.2 d1c82c29a build(deps): bump github.com/onsi/gomega from 1.24.2 to 1.25.0 4dec25346 vendor in latests containers/(storage, common, image, ocicyrpt) c0f6c6b7a [Itests: change the runtime-flag test for crun 186b30168 [CI:DOCS] README: drop sudo 1950ab687 Fix multi-arch manifest-list build timeouts d106e425a Cirrus: Update VM Images 67ab55bbb bud: Consolidate multiple synthetic LABEL instructions 9fced965e build, secret: allow realtive mountpoints wrt to work dir 938c03556 fixed squash documentation 59da1a7f7 build(deps): bump github.com/containerd/containerd from 1.6.14 to 1.6.15 4952862a2 Correct minor comment 820fafc88 Vendor in latest containers/(common, image, storage) a75b263f7 system tests: remove unhelpful assertions 356668389 buildah: add prune command and expose CleanCacheMount API a5e177586 vendor: bump c/storage to a747b27 60be7f250 Add support for --group-add to buildah from 00d8d94cb build(deps): bump actions/stale from 6 to 7 e33bb8678 Add documentation for buildah build --pull=missing 5828918bc build(deps): bump github.com/containerd/containerd from 1.6.12 to 1.6.14 4aa28f6a7 build(deps): bump github.com/docker/docker 7a4702ae2 parse: default ignorefile must not point to symlink outside context 67c2e4de5 buildah: wrap network setup errors d9578d32c build, mount: allow realtive mountpoints wrt to work dir 57a77073a Update to F37 CI VM Images, re-enable prior-fedora 798a250d4 Update vendor or containers/(image, storage, common) ca96c3678 build(deps): bump golang.org/x/crypto from 0.3.0 to 0.4.0 e0054a03d Update contact information e5cc78c43 build(deps): bump golang.org/x/term from 0.2.0 to 0.3.0 46eea3158 Replace io/ioutil calls with os calls 0183471b9 [skip-ci] GHA/Cirrus-cron: Fix execution order 8428bc87b Vendor in containers/common e60c4d7e5 build(deps): bump golang.org/x/sys from 0.2.0 to 0.3.0 ffed85036 remote-cache: support multiple sources and destinations a1698cde6 Update c/storage after https://github.com/containers/storage/pull/1436 025a8df51 util.SortMounts(): make the returned order more stable 5e792e97b version: Bump to 1.29.0-dev 498b45770 [CI:BUILD] Cirrus: Migrate OSX task to M1 94560581d Update vendor of containers/(common, storage, image) e6eb05f75 mount=type=cache: seperate cache parent on host for each user 20dd347b9 Fix installation instructions for Gentoo Linux e162302df build(deps): bump github.com/containerd/containerd from 1.6.9 to 1.6.10 1cfb5eafb GHA: Reuse both cirrus rerun and check workflows 5bd5a4f9d Vendor in latest containers/(common,image,storage) 8e4979e81 build(deps): bump github.com/onsi/gomega from 1.24.0 to 1.24.1 3d755b5eb copier.Put(): clear up os/syscall mode bit confusion 1a18ab341 build(deps): bump golang.org/x/sys from 0.1.0 to 0.2.0 646c28290 Use TypeBind consistently to name bind/nullfs mounts d4c661a77 Add no-new-privileges flag 1f372c08a Update vendor of containers/(common, image, storage) b2054360a imagebuildah:build with --all-platforms must honor args for base images a17238891 codespell code 217b2d524 Expand args and env when using --all-platforms c554e5330 build(deps): bump github.com/onsi/gomega from 1.23.0 to 1.24.0 ed3707765 GHA: Simplify Cirrus-Cron check slightly 1091222b2 Stop using ubi8 cec864147 remove unnecessary (hence misleading) rmi ffb00243f chroot: fix mounting of ro bind mounts a237085fe executor: honor default ARG value while eval base name 481b3cc95 userns: add arbitrary steps/stage to --userns=auto test dc733f1d2 Don't set allow.mount in the vnet jail on Freebsd e867db39b copier: Preserve file flags when copying archives on FreeBSD bf4420f25 Remove quiet flag, so that it works in podman-remote 8b1a490bd test: fix preserve rootfs with --mount for podman-remote b24449990 test: fix prune logic for cache-from after adding content summary 4290ab5af vendor in latest containers/(storage, common, image) 1d0dd78c3 Fix RUN --mount=type=bind,from=<stage> not preserving rootfs of stage 7aa34b86f Define and use a safe, reliable test image 87e379d5b Fix word missing in Container Tools Guide 57f370d9d Makefile: Use $(MAKE) to start sub-makes in install.tools 3223610ff imagebuildah: pull cache from remote repo after adding content summary f9693d0a5 Makefile: Fix install on FreeBSD 835668715 Ensure the cache volume locks are unlocked on all paths 0d7414703 Vendor in latest containers/(common,storage) 60382209e Simplify the interface of GetCacheMount and getCacheMount 8f955f801 Fix cache locks with multiple mounts bdd62ef87 Remove calls to Lockfile.Locked() cfa10d16c Maintain cache mount locks as lock objects instead of paths ffb2f27a8 test: cleaning cache must not clean lockfiles 6838cbc81 run: honor lockfiles for multiple --mount instruction f2e0af5c4 mount,cache: lockfiles must not be part of users cache content 6fa774ddc Update vendor containers/(common,image,storage) bdb549478 [CI:BUILD] copr: buildah rpm should depend on containers-common-extra eb9f3648b pr-should-include-tests: allow specfile, golangci da214d6d4 build(deps): bump dawidd6/action-send-mail from 3.7.0 to 3.7.1 5baed90cd build(deps): bump github.com/docker/docker 82431441a build(deps): bump github.com/fsouza/go-dockerclient from 1.8.3 to 1.9.0 9226bd312 Update vendor containers/(common,image,storage) 26a29674a build(deps): bump actions/upload-artifact from 2 to 3 cadd801fc build(deps): bump actions/checkout from 2 to 3 8ec69a9ad build(deps): bump actions/stale from 1 to 6 356ab96d7 build(deps): bump dawidd6/action-send-mail from 2.2.2 to 3.7.0 27032ea0f build(deps): bump tim-actions/get-pr-commits from 1.1.0 to 1.2.0 5038a0dae sshagent: LockOSThread before setting SocketLabel 4f272ee49 Update tests for error message changes 788fddb1d Update c/image after https://github.com/containers/image/pull/1299 f232da006 Fix ident for dependabot gha block acc230dc3 build(deps): bump github.com/containers/ocicrypt from 1.1.5 to 1.1.6 dc81652ff Fix man pages to match latest cobra settings 7260a4b0d build(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0 fba8daf13 build(deps): bump github.com/onsi/gomega from 1.20.2 to 1.22.1 df8f0fa88 test: retrofit 'bud with undefined build arg directory' 9d43eb95e imagebuildah: warnOnUnsetBuildArgs while processing stages from executor 1a2af6864 Update contrib/buildahimage/Containerfile e1c7a5df1 Cirrus CI add flavor parameter b5c86a8e0 Correction - `FLAVOR` not `FLAVOUR` f5fc96e79 Changed build argument from `RELEASE` to `FLAVOUR` 36afa3530 Combine buildahimage Containerfiles 472c46f98 bud.bats refactoring: $TEST_SCRATCH_DIR, part 2 of 2 ca65736da bud.bats refactoring: $TEST_SCRATCH_DIR, part 1 of 2 2adbe2a58 System test cleanup: document, clarify, fix bf0a6e073 test: removing unneeded/expensive COPY 94ea37767 test: warning behaviour for unset/set TARGETOS,TARGETARCH,TARGETPLATFORM eae3415b1 Bump to v1.28.1-dev Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* treewide: bulk update patches with status fieldBruce Ashfield2023-01-271-0/+2
| | | | | | | | | | | | | | | While the insane.bbclass upstream-status check hasn't been made default, users of meta-virtualization may have it enabled in their distros .. so the effect is the same. We must have this tracking tag in out patches. This is a bulk update to add the tag and silence the QA message. As packages get updated, the normal/routine process of checking the patches will continue, and the status fields may (or may not) get more useful. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: fix build with btrfs-tools 6.1Bruce Ashfield2023-01-102-1/+47
| | | | | | | | | | | | | We'd really prefer to bump the vendor SRCREV and allow the fetcher to bring in the pending change without needing a patch, but there are other API changes that trickle through the code. So we extract just the patch we need, and leave the SRCREV info in the recipe, to document the source. When the upstream updates its vendor/ directory, we can drop this (as the patch will no longer apply) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: update to 1.28.xBruce Ashfield2023-01-101-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping buildah to version v1.25.0-547-gcfefbb64, which comprises the following commits: ea9b705a [release-1.28] Bump to c/storage v1.43.1 for s390x sigsegv fix 6eb52c6b [release-1.28] Bump c/image to v5.23.1 5fb010fe version: bump to 1.28.2 69d3fcd8 Stop using ubi8 9fa3c167 Define and use a safe, reliable test image 9136e86e version: bump to v1.28.1 ff08605b copier.Put(): clear up os/syscall mode bit confusion 6bc044dc retrofit, test: ubi8 changed architecture string 79f41e32 Bump to v1.28.0 1deec7ce No longer modify buildah.spec a53f342f Update for https://github.com/klauspost/pgzip/pull/50 3c5f9886 Update vendor containers/(common,image) 88615e98 [CI:DOCS] Add quay-description update reminder 95bb0250 vendor: bump c/common to v0.49.2-0.20220929111928-2d1b45ae2423 aaba84ff build(deps): bump github.com/opencontainers/selinux 675a7332 Vendor in latest containers/storage 28195ac9 Changing shell list operators from `;` to `&&` fc458032 Fix buildahimage container.conf permissions regression 9ae09bf7 Set sysctls from containers.conf e67bb090 refactor: stop using Normalize directly from containerd package 3cd0fa2b config,builder: process variant while populating image spec 899ecaaf Proof of concept: nightly dependency treadmill 31dc089c Run codespell on code 07ab5a5c Check for unset build args after TARGET args ea81614a pkg/cli: improve completion test bb285e53 vendor in latest containers/(common,storage,image) f3a73b70 copier: work around freebsd bug for "mkdir /" 16a4eee2 vendor: update c/image 02d4a6b5 test: run in the host cgroup namespace 5cde04cd vendor: update c/storage e3d48600 vendor: update c/common 94ab98d6 cmd: check for user UID instead of privileges 4c9fc47f run,build: conflict --isolation=chroot and --network de9c3841 Fix broken dns test (from merge collision) 8d5d7632 Fix stutters b4135818 Fix broken command completion fc3ae53b buildah bud --network=none should have no network 3c092e5e build: support --skip-unused-stages for multi-stage builds 87d4ae88 Prevent use of --dns* options with --net=none fd14bfe5 buildah: make --cache-ttl=0s equivalent to --no-cache ac30ed23 parse: make processing flags in --mount order agnostic deb2d903 Minor test fix for podman-remote a30b71db build: honor <Containerfile>.containerignore as ignore file 46db0211 Update install.md: Debian 11 (Bullseye) is stable 4e5be719 build(deps): bump github.com/docker/docker 4407875a Use constants from containers/common for finding seccomp.json 4808f3b7 Don't call os.Exit(1) from manifest exist 9f435de8 manifest: add support for buildah manifest exists 0bdbd1a8 Buildah should ignore /etc/crio/seccomp.json 9c147ab8 chroot: Fix cross build break 309f714b chroot: Move isDevNull to run_common.go 363bf9c5 chroot: Fix setRlimit build on FreeBSD dc49c3cb chroot: Move parseRLimits and setRlimits to run_common.go b64d8143 chroot: Fix runUsingChrootExecMain on FreeBSD 4d963eb5 chroot: Move runUsingChrootExecMain to run_common.go 0a61e4b2 chroot: Factor out Linux-specific unshare options from runUsingChroot 3b42b515 chroot: Move runUsingChroot to run_common.go 350c509e chroot: Move RunUsingChroot and runUsingChrootMain to run_common.go 188dcc36 chroot: Factor out /dev/ptmx pty implementation f9814601 chroot: Add FreeBSD support for run with chroot isolation b9db9574 build(deps): bump github.com/docker/go-units from 0.4.0 to 0.5.0 64534a88 Replace k8s.gcr.io/pause in tests with registry.k8s.io/pause 168a39dd build(deps): bump github.com/onsi/gomega from 1.20.0 to 1.20.1 514ff3dc Cirrus: use image with fewer downloaded dependencies a96eb0b0 build(deps): bump github.com/opencontainers/runc from 1.1.3 to 1.1.4 9934b173 run: add container gid to additional groups f46ef3b2 buildah: support for --retry and --retry-delay for push/pull failures 811741fe Makefile: always call $(GO) instead of `go` 010ac5e0 build(deps): bump github.com/fsouza/go-dockerclient from 1.8.2 to 1.8.3 0c4b19ba test: use `T.TempDir` to create temporary test directory 90cf4fc0 mount,cache: enable SElinux shared content label option by default 354f96f6 commit: use race-free RemoveNames instead of SetNames 491ad027 Drop util/util.Cause() 9637a244 cmd/buildah: add "manifest create --amend" 7533aa56 build(deps): bump github.com/fsouza/go-dockerclient from 1.8.1 to 1.8.2 17e6fe01 docs: specify git protocol is not supported for github hosted repo da4647bd Scrub user and group names from layer diffs 2eb519fb build(deps): bump github.com/containerd/containerd from 1.6.6 to 1.6.8 3a6919b5 version: bump to 1.28.0-dev Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: update to 1.27.2Bruce Ashfield2022-09-281-1/+1
| | | | | | | | | | | | | Bumping buildah to version v1.25.0-420-g13622b14, which comprises the following commits: 9c640b00 tag v1.27.2 264c825f Fix broken command completion be919817 build: support --skip-unused-stages for multi-stage builds 40cd1053 release: bump to v1.27.1 4a8bf740 run: add container gid to additional groups db8d5921 release: tag v1.27.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: update to 1.27Bruce Ashfield2022-08-251-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping buildah to version v1.25.0-411-gdb8d5921, which comprises the following commits: db8d5921 release: tag v1.27.0 50a4acb0 make,cross: ignore loong64 from target list 15b0a250 Allow chflags operations inside the container fb6da991 Don't try to call runLabelStdioPipes if spec.Linux is not set e8c7e3fe build(deps): bump github.com/golangci/golangci-lint in /tests/tools b7f51ea3 build: support filtering cache by duration using --cache-ttl b218fdf3 build: support building from commit when using git repo as build context 99488b06 build: clean up git repos correctly when using subdirs 8bbeed70 integration tests: quote "?" in shell scripts 5f34c5e2 Fix a copy/paste error f96bf7c5 build(deps): bump github.com/golangci/golangci-lint in /tests/tools 50183aa0 vendor c/common@v0.49.1 dfba70e9 test: manifest inspect should have OCIv1 annotation 873a9e1f vendor: bump to c/common@87fab4b7019a 81b4edfa Failure to determine a file or directory should print an error 5e3f7cea build(deps): bump github.com/containernetworking/cni from 1.1.1 to 1.1.2 ad4976d0 refactor: remove unused CommitOptions from generateBuildOutput dbd22863 stage_executor: generate output for cases with no commit adbd7ef5 stage_executor, commit: output only if last stage in build bb149ea6 Use errors.Is() instead of os.Is{Not,}Exist ac5d37c0 Minor test tweak for podman-remote compatibility a47dee2c Cirrus: Use the latest imgts container 239c06cf imagebuildah: complain about the right Dockerfile bef61d79 tests: don't try to wrap `nil` errors c9407334 cmd/buildah.commitCmd: don't shadow "err" 36006c9a cmd/buildah.pullCmd: complain about DecryptConfig/EncryptConfig 0ded0dca Fix a copy/paste error message aed3fdc7 Fix a typo in an error message 6f660bde build,cache: support pulling/pushing cache layers to/from remote sources 6c96dd95 Update vendor of containers/(common, storage, image) ac4b39a2 Rename chroot/run.go to chroot/run_linux.go 79bc4a38 Don't bother telling codespell to skip files that don't exist 62954c89 Set user namespace defaults correctly for the library c79f7272 imagebuildah: optimize cache hits for COPY and ADD instructions 6841f92e Cirrus: Update VM images w/ updated bats 6243a938 build(deps): bump github.com/onsi/gomega from 1.19.0 to 1.20.0 eb4ec4a9 docs, run: show SELinux label flag for cache and bind mounts a51011f4 build(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 05d48980 imagebuildah, build: remove undefined concurrent writes d0a675ed bump github.com/opencontainers/runtime-tools dc1bc10d Add FreeBSD support for 'buildah info' 80870d50 Vendor in latest containers/(storage, common, image) 4387e7e3 Add freebsd cross build targets d0ef62ae Make the jail package build on 32bit platforms 36d95b05 Cirrus: Ensure the build-push VM image is labeled e1f3468a GHA: Fix dynamic script filename 7c0f2253 Vendor in containers/(common, storage, image) 6fb7bb4b Run codespell 2c8436a7 Remove import of github.com/pkg/errors 34026835 Avoid using cgo in pkg/jail ad389b19 Rename footypes to fooTypes for naming consistency cdac8e1b Move cleanupTempVolumes and cleanupRunMounts to run_common.go 4b7c61d5 Make the various run mounts work for FreeBSD 57a73847 Move get{Bind,Tmpfs,Secret,SSH}Mount to run_common.go 0832ea2f Move runSetupRunMounts to run_common.go 9c808c76 Move cleanableDestinationListFromMounts to run_common.go c21f4bd2 Make setupMounts and runSetupBuiltinVolumes work on FreeBSD cf079d01 Move setupMounts and runSetupBuiltinVolumes to run_common.go 417c6018 Tidy up - runMakeStdioPipe can't be shared with linux 95a18737 Move runAcceptTerminal to run_common.go 1ab56715 Move stdio copying utilities to run_common.go ba5ff64d Move runUsingRuntime and runCollectOutput to run_common.go b290c861 Move fileCloser, waitForSync and contains to run_common.go bff1c193 Move checkAndOverrideIsolationOptions to run_common.go 75ae8040 Move DefaultNamespaceOptions to run_common.go acdf4777 Move getNetworkInterface to run_common.go 8e36f5fc Move configureEnvironment to run_common.go f68f1092 Don't crash in configureUIDGID if Process.Capabilities is nil 7ea97716 Move configureUIDGID to run_common.go a405d62c Move runLookupPath to run_common.go 4d9a035e Move setupTerminal to run_common.go 42010799 Move etc file generation utilities to run_common.go 1c0a08e3 Add run support for FreeBSD 3faa6984 Add a simple FreeBSD jail library 6bb4efdb Add FreeBSD support to pkg/chrootuser 76a0c821 Sync call signature for RunUsingChroot with chroot/run.go 8dca0a65 test: verify feature to resolve basename with args f146c718 vendor: bump openshift/imagebuilder to master@4151e43 d300c614 GHA: Remove required reserved-name use 35bfc66a buildah: set XDG_RUNTIME_DIR before setting default runroot 9d7ac758 imagebuildah: honor build output even if build container is not commited 9445aa12 chroot: honor DefaultErrnoRet 48c888a6 [CI:DOCS] improve pull-policy documentation 0e745d15 tests: retrofit test since --file does not supports dir ce384684 Switch to golang native error wrapping 825561b2 BuildDockerfiles: error out if path to containerfile is a directory 066b5448 define.downloadToDirectory: fail early if bad HTTP response fc9255f5 GHA: Allow re-use of Cirrus-Cron fail-mail workflow 7a22c40e add: fail on bad http response instead of writing to container dab6d12e build(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0 263f5adc [CI:DOCS] Update buildahimage comment 252bf17b lint: inspectable is never nil 869c705d vendor: c/common to common@7e1563b 5686018e build: support OCI hooks for ephemeral build containers c0be04e6 [CI:BUILD] Install latest buildah instead of compiling 1fd5d73f Add subid support with BuildRequires and BUILDTAG [NO NEW TESTS NEEDED] d6340b6c build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.7.5 ffce8b36 Make sure cpp is installed in buildah images 404852be demo: use unshare for rootless invocations 198b4c36 buildah.spec.rpkg: initial addition 74f2c9bd build: fix test for subid 4 d3eeea37 build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0 20c5c5c6 build, userns: add support for --userns=auto ecae0e2f Fix building upstream buildah image e54c9efa Remove redundant buildahimages-are-sane validation cf6b1bcf Docs: Update multi-arch buildah images readme 0a1d828d Cirrus: Migrate multiarch build off github actions 0d3246ff retrofit-tests: we skip unused stages so use stages 08bc5d91 stage_executor: dont rely on stage while looking for additional-context 25f9ff84 buildkit, multistage: skip computing unwanted stages dc07d9ff More test cleanup b23a20ee copier: work around freebsd bug for "mkdir /" f577fc4f Replace $BUILDAH_BINARY with buildah() function 0b7c5002 Fix up buildah images be3b9c36 Make util and copier build on FreeBSD 9042b86b Vendor in latest github.com/sirupsen/logrus 8bbe7a60 build(deps): bump github.com/opencontainers/runc from 1.1.2 to 1.1.3 8d9e9d6f Makefile: allow building without .git 2d4d2824 run_unix: don't return an error from getNetworkInterface 79bab77a run_unix: return a valid DefaultNamespaceOptions 39880517 Update vendor of containers/storage c06c6dbb chroot: use ActKillThread instead of ActKill ed4412b9 use resolvconf package from c/common/libnetwork ee3d131d update c/common to latest main 7cc5f198 copier: add `NoOverwriteNonDirDir` option 3aea4093 Sort buildoptions and move cli/build functions to internal d452494d build(deps): bump github.com/fsouza/go-dockerclient from 1.8.0 to 1.8.1 9c7ce03f build(deps): bump github.com/docker/docker f2dae989 build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2 2182e0af build(deps): bump github.com/containerd/containerd from 1.6.5 to 1.6.6 236c0bab Fix TODO: de-spaghettify run mounts 6225b23d Move options parsing out of build.go and into pkg/cli 7cf6dbd4 [CI:DOCS] Tutorial 04 - Include Debian/Ubuntu deps 495add93 build, multiarch: support splitting build logs for --platform 1ac1f035 build(deps): bump github.com/containerd/containerd from 1.6.4 to 1.6.5 be9ef3b6 [CI:BUILD] WIP Cleanup Image Dockerfiles 0bcc7c5e build(deps): bump github.com/fsouza/go-dockerclient from 1.7.11 to 1.8.0 60b625ce cli remove stutter e80fed06 docker-parity: ignore sanity check if baseImage history is null c61ecc69 build, commit: allow disabling image history with --omit-history 4cf93e3e Fix use generic/ambiguous DEBUG name 73a5ec42 build(deps): bump github.com/containernetworking/cni from 1.1.0 to 1.1.1 1a79fbed Cirrus: use Ubuntu 22.04 LTS 0986de40 Fix codespell errors 00d46292 Remove util.StringInSlice because it is defined in containers/common b3fbb598 buildah: add support for renaming a device in rootless setups 149880a1 squash: never use build cache when computing last step of last stage 7cc18838 Update vendor of containers/(common, storage, image) f7ea2d84 build(deps): bump github.com/golangci/golangci-lint in /tests/tools c2adbade buildkit: supports additionalBuildContext in builds via --build-context f4ad4faa test cleanup 73e0ad71 buildah source pull/push: show progress bar 45bd47b4 run: allow resuing secret twice in different RUN steps 7dbc5ce8 test helpers: default to being rootless-aware c80e6a31 Add --cpp-flag flag to buildah build e4d25d53 build(deps): bump github.com/golangci/golangci-lint in /tests/tools 784a8c4c build: accept branch and subdirectory when context is git repo 177141d4 build(deps): bump github.com/docker/docker 82e9c841 Vendor in latest containers/common 714fbed4 build(deps): bump github.com/opencontainers/runc from 1.1.1 to 1.1.2 8d57bff9 vendor: update c/storage and c/image 1c1ba51c build(deps): bump github.com/golangci/golangci-lint in /tests/tools 5e338aad Fix gentoo install docs f45fbf77 build(deps): bump github.com/docker/docker cf2bb5a1 copier: move NSS load to new process 063abf6f Add test for prevention of reusing encrypted layers fccc7895 Make `buildah build --label foo` create an empty "foo" label again 6750810f Bump to v1.27.0-dev 0a9d6e6e Bump to v1.26.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: add recipe for buildah v1.26sakib.sajal@windriver.com2022-06-201-0/+57
buildah is a command line tool, to be installed and run on target, that can be used to: - create a working container, either from scratch or using an image as a starting point - create an image, either from a working container or via the instructions in a Dockerfile - images can be built in either the OCI image format or the traditional upstream docker image format - mount a working container's root filesystem for manipulation - unmount a working container's root filesystem - use the updated contents of a container's root filesystem as a filesystem layer to create a new image - delete a working container or an image - rename a local container Testing: Setup the build directory: $ . oe-init-build-env <build_dir> Add to local.conf: IMAGE_INSTALL:append = " buildah kernel-modules" KERNEL_FEATURES += "features/overlayfs/overlayfs.cfgi \ features/netfilter/netfilter.scc \ features/lxc/lxc-enable.scc" IMAGE_ROOTFS_EXTRA_SPACE = "5242880" Build image: $ bitbake core-image-minimal Run the image: $ runqemu nographic kvm qemuparams="-m 4096" On target: Pull an image: > cnt=$(buildah from fedora) Or build from Dockerfile > buildah bud -t <image_name>:<tag> . Mount the image: > mnt=$(buildah mount ${cnt}) Install packages on the container rootfs: > dnf install --installroot $mnt <packages_to_install> -y Copy local files to the container: > buildah copy $cnt <local_file> <dest_on_container> Save the changes to an image > buildah commit --format docker $cnt <name>:<tag> Run the image using buildah: > buildah run $cnt /bin/sh Or using docker: > docker run -it <name>:<tag> Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>