summaryrefslogtreecommitdiffstats
path: root/recipes-containers
Commit message (Collapse)AuthorAgeFilesLines
* containerd: update to 1.6.8Bruce Ashfield2022-08-251-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping containerd to version v1.6.8-8-g579a6380e, which comprises the following commits: 1efd8b947 ci: remove GOPROXY environment variable due to https://github.com/go-yaml/yaml/issues/887 0448673af Do not append []string{""} to command to preserve Docker compatibility 5c230ece0 Fix cleanup in critest ed9d3dc37 oci: WithDefaultUnixDevices(): remove tun/tap from the default devices 3364f411e Prepare release notes for v1.6.8 390920429 release workflow: remove Go setup action cf48ba6e8 release workflow: increase timeout to 30 minutes 57873e652 release: rollback Ubuntu to 18.04 (except for riscv64) eccb82f6d Update release build timeout to 20 minutes 6a854d4b5 Update mailmap 61612e1a2 Prepare release notes for 1.6.7 d199ee462 Update golang to 1.17.13 0578d20c5 Change os.Stderr reassign for Windows service 12cae4961 Update Vagrant CI to macos-12 bc4091aae chore: bump macos runner version cb73bd050 Windows HostProcess container CRI stats test ac388525a Add validations for Windows HostProcess CRI configs 0007f40fe [release/1.6] go.mod: Bump hcsshim to v0.9.4 c9607e78c Update Fedora version to 36 2952b66c0 CI: add riscv64 builds 6b2dc9a37 release/Dockerfile: update Ubuntu to 22.04 for supporting riscv64 745dc07c4 seccomp: support riscv64 c2f841f21 Create ppc64le release 86b55bd8d seccomp: allow clock_settime64 when CAP_SYS_TIME is added f3da3e51f allow ptrace(2) by default for kernel >= 4.8 aa1101068 [release/1.6] update golang to 1.17.12 37dfc5c9d [release/1.6] Fix WWW-Authenticate parsing Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* conmon: update to 2.1.3Bruce Ashfield2022-08-251-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | Bumping conmon to version v2.1.3-5-g19110c9, which comprises the following commits: 636e239 Use /usr/bin/env to locate bash d7625dc Cirrus: Add meta task to keep CI VM images alive ab52a59 VERSION: bump to 2.1.3 a627951 meson: build with seccomp if available 1750b2d Fix build on FreeBSD-13.0 0a2e0db Reduce the amount of duplicated code between Linux and FreeBSD 32816bd Port conmon to FreeBSD b1ca51f gh actions: bump versions 05163fd bump golang in gh action to 1.18 d91cc43 Stop using g_unix_signal_add() to avoid threads 2bc95ee [Fixup #342] `log-size-global-max` Should Be`log-global-size-max` 99eac3e bump to v2.1.2 143121b log_global_max: ignore if negative 98058b1 add log-global-size-max option to limit the total output conmon processes 65b6eaa bump to v2.1.1 81086b7 journald: print tag and name if both are specified c61367c logging: add missing static keyword 0c3412a drop some logs to debug level 4c41ec2 meson: Handle journald Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: update to 1.27Bruce Ashfield2022-08-251-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping buildah to version v1.25.0-411-gdb8d5921, which comprises the following commits: db8d5921 release: tag v1.27.0 50a4acb0 make,cross: ignore loong64 from target list 15b0a250 Allow chflags operations inside the container fb6da991 Don't try to call runLabelStdioPipes if spec.Linux is not set e8c7e3fe build(deps): bump github.com/golangci/golangci-lint in /tests/tools b7f51ea3 build: support filtering cache by duration using --cache-ttl b218fdf3 build: support building from commit when using git repo as build context 99488b06 build: clean up git repos correctly when using subdirs 8bbeed70 integration tests: quote "?" in shell scripts 5f34c5e2 Fix a copy/paste error f96bf7c5 build(deps): bump github.com/golangci/golangci-lint in /tests/tools 50183aa0 vendor c/common@v0.49.1 dfba70e9 test: manifest inspect should have OCIv1 annotation 873a9e1f vendor: bump to c/common@87fab4b7019a 81b4edfa Failure to determine a file or directory should print an error 5e3f7cea build(deps): bump github.com/containernetworking/cni from 1.1.1 to 1.1.2 ad4976d0 refactor: remove unused CommitOptions from generateBuildOutput dbd22863 stage_executor: generate output for cases with no commit adbd7ef5 stage_executor, commit: output only if last stage in build bb149ea6 Use errors.Is() instead of os.Is{Not,}Exist ac5d37c0 Minor test tweak for podman-remote compatibility a47dee2c Cirrus: Use the latest imgts container 239c06cf imagebuildah: complain about the right Dockerfile bef61d79 tests: don't try to wrap `nil` errors c9407334 cmd/buildah.commitCmd: don't shadow "err" 36006c9a cmd/buildah.pullCmd: complain about DecryptConfig/EncryptConfig 0ded0dca Fix a copy/paste error message aed3fdc7 Fix a typo in an error message 6f660bde build,cache: support pulling/pushing cache layers to/from remote sources 6c96dd95 Update vendor of containers/(common, storage, image) ac4b39a2 Rename chroot/run.go to chroot/run_linux.go 79bc4a38 Don't bother telling codespell to skip files that don't exist 62954c89 Set user namespace defaults correctly for the library c79f7272 imagebuildah: optimize cache hits for COPY and ADD instructions 6841f92e Cirrus: Update VM images w/ updated bats 6243a938 build(deps): bump github.com/onsi/gomega from 1.19.0 to 1.20.0 eb4ec4a9 docs, run: show SELinux label flag for cache and bind mounts a51011f4 build(deps): bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 05d48980 imagebuildah, build: remove undefined concurrent writes d0a675ed bump github.com/opencontainers/runtime-tools dc1bc10d Add FreeBSD support for 'buildah info' 80870d50 Vendor in latest containers/(storage, common, image) 4387e7e3 Add freebsd cross build targets d0ef62ae Make the jail package build on 32bit platforms 36d95b05 Cirrus: Ensure the build-push VM image is labeled e1f3468a GHA: Fix dynamic script filename 7c0f2253 Vendor in containers/(common, storage, image) 6fb7bb4b Run codespell 2c8436a7 Remove import of github.com/pkg/errors 34026835 Avoid using cgo in pkg/jail ad389b19 Rename footypes to fooTypes for naming consistency cdac8e1b Move cleanupTempVolumes and cleanupRunMounts to run_common.go 4b7c61d5 Make the various run mounts work for FreeBSD 57a73847 Move get{Bind,Tmpfs,Secret,SSH}Mount to run_common.go 0832ea2f Move runSetupRunMounts to run_common.go 9c808c76 Move cleanableDestinationListFromMounts to run_common.go c21f4bd2 Make setupMounts and runSetupBuiltinVolumes work on FreeBSD cf079d01 Move setupMounts and runSetupBuiltinVolumes to run_common.go 417c6018 Tidy up - runMakeStdioPipe can't be shared with linux 95a18737 Move runAcceptTerminal to run_common.go 1ab56715 Move stdio copying utilities to run_common.go ba5ff64d Move runUsingRuntime and runCollectOutput to run_common.go b290c861 Move fileCloser, waitForSync and contains to run_common.go bff1c193 Move checkAndOverrideIsolationOptions to run_common.go 75ae8040 Move DefaultNamespaceOptions to run_common.go acdf4777 Move getNetworkInterface to run_common.go 8e36f5fc Move configureEnvironment to run_common.go f68f1092 Don't crash in configureUIDGID if Process.Capabilities is nil 7ea97716 Move configureUIDGID to run_common.go a405d62c Move runLookupPath to run_common.go 4d9a035e Move setupTerminal to run_common.go 42010799 Move etc file generation utilities to run_common.go 1c0a08e3 Add run support for FreeBSD 3faa6984 Add a simple FreeBSD jail library 6bb4efdb Add FreeBSD support to pkg/chrootuser 76a0c821 Sync call signature for RunUsingChroot with chroot/run.go 8dca0a65 test: verify feature to resolve basename with args f146c718 vendor: bump openshift/imagebuilder to master@4151e43 d300c614 GHA: Remove required reserved-name use 35bfc66a buildah: set XDG_RUNTIME_DIR before setting default runroot 9d7ac758 imagebuildah: honor build output even if build container is not commited 9445aa12 chroot: honor DefaultErrnoRet 48c888a6 [CI:DOCS] improve pull-policy documentation 0e745d15 tests: retrofit test since --file does not supports dir ce384684 Switch to golang native error wrapping 825561b2 BuildDockerfiles: error out if path to containerfile is a directory 066b5448 define.downloadToDirectory: fail early if bad HTTP response fc9255f5 GHA: Allow re-use of Cirrus-Cron fail-mail workflow 7a22c40e add: fail on bad http response instead of writing to container dab6d12e build(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0 263f5adc [CI:DOCS] Update buildahimage comment 252bf17b lint: inspectable is never nil 869c705d vendor: c/common to common@7e1563b 5686018e build: support OCI hooks for ephemeral build containers c0be04e6 [CI:BUILD] Install latest buildah instead of compiling 1fd5d73f Add subid support with BuildRequires and BUILDTAG [NO NEW TESTS NEEDED] d6340b6c build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.7.5 ffce8b36 Make sure cpp is installed in buildah images 404852be demo: use unshare for rootless invocations 198b4c36 buildah.spec.rpkg: initial addition 74f2c9bd build: fix test for subid 4 d3eeea37 build(deps): bump github.com/spf13/cobra from 1.4.0 to 1.5.0 20c5c5c6 build, userns: add support for --userns=auto ecae0e2f Fix building upstream buildah image e54c9efa Remove redundant buildahimages-are-sane validation cf6b1bcf Docs: Update multi-arch buildah images readme 0a1d828d Cirrus: Migrate multiarch build off github actions 0d3246ff retrofit-tests: we skip unused stages so use stages 08bc5d91 stage_executor: dont rely on stage while looking for additional-context 25f9ff84 buildkit, multistage: skip computing unwanted stages dc07d9ff More test cleanup b23a20ee copier: work around freebsd bug for "mkdir /" f577fc4f Replace $BUILDAH_BINARY with buildah() function 0b7c5002 Fix up buildah images be3b9c36 Make util and copier build on FreeBSD 9042b86b Vendor in latest github.com/sirupsen/logrus 8bbe7a60 build(deps): bump github.com/opencontainers/runc from 1.1.2 to 1.1.3 8d9e9d6f Makefile: allow building without .git 2d4d2824 run_unix: don't return an error from getNetworkInterface 79bab77a run_unix: return a valid DefaultNamespaceOptions 39880517 Update vendor of containers/storage c06c6dbb chroot: use ActKillThread instead of ActKill ed4412b9 use resolvconf package from c/common/libnetwork ee3d131d update c/common to latest main 7cc5f198 copier: add `NoOverwriteNonDirDir` option 3aea4093 Sort buildoptions and move cli/build functions to internal d452494d build(deps): bump github.com/fsouza/go-dockerclient from 1.8.0 to 1.8.1 9c7ce03f build(deps): bump github.com/docker/docker f2dae989 build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2 2182e0af build(deps): bump github.com/containerd/containerd from 1.6.5 to 1.6.6 236c0bab Fix TODO: de-spaghettify run mounts 6225b23d Move options parsing out of build.go and into pkg/cli 7cf6dbd4 [CI:DOCS] Tutorial 04 - Include Debian/Ubuntu deps 495add93 build, multiarch: support splitting build logs for --platform 1ac1f035 build(deps): bump github.com/containerd/containerd from 1.6.4 to 1.6.5 be9ef3b6 [CI:BUILD] WIP Cleanup Image Dockerfiles 0bcc7c5e build(deps): bump github.com/fsouza/go-dockerclient from 1.7.11 to 1.8.0 60b625ce cli remove stutter e80fed06 docker-parity: ignore sanity check if baseImage history is null c61ecc69 build, commit: allow disabling image history with --omit-history 4cf93e3e Fix use generic/ambiguous DEBUG name 73a5ec42 build(deps): bump github.com/containernetworking/cni from 1.1.0 to 1.1.1 1a79fbed Cirrus: use Ubuntu 22.04 LTS 0986de40 Fix codespell errors 00d46292 Remove util.StringInSlice because it is defined in containers/common b3fbb598 buildah: add support for renaming a device in rootless setups 149880a1 squash: never use build cache when computing last step of last stage 7cc18838 Update vendor of containers/(common, storage, image) f7ea2d84 build(deps): bump github.com/golangci/golangci-lint in /tests/tools c2adbade buildkit: supports additionalBuildContext in builds via --build-context f4ad4faa test cleanup 73e0ad71 buildah source pull/push: show progress bar 45bd47b4 run: allow resuing secret twice in different RUN steps 7dbc5ce8 test helpers: default to being rootless-aware c80e6a31 Add --cpp-flag flag to buildah build e4d25d53 build(deps): bump github.com/golangci/golangci-lint in /tests/tools 784a8c4c build: accept branch and subdirectory when context is git repo 177141d4 build(deps): bump github.com/docker/docker 82e9c841 Vendor in latest containers/common 714fbed4 build(deps): bump github.com/opencontainers/runc from 1.1.1 to 1.1.2 8d57bff9 vendor: update c/storage and c/image 1c1ba51c build(deps): bump github.com/golangci/golangci-lint in /tests/tools 5e338aad Fix gentoo install docs f45fbf77 build(deps): bump github.com/docker/docker cf2bb5a1 copier: move NSS load to new process 063abf6f Add test for prevention of reusing encrypted layers fccc7895 Make `buildah build --label foo` create an empty "foo" label again 6750810f Bump to v1.27.0-dev 0a9d6e6e Bump to v1.26.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: update to 4.2Bruce Ashfield2022-08-253-131/+26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We refresh one patch, and drop another that is already part of the 4.2.x release series. Bumping libpod to version v4.2.0-8-g754ec89a8, which comprises the following commits: eb2496a77 Skip / update some tests under runc eba1f7749 Bump to v4.2.1-dev 7fe5a419c Bump to v4.2.0 754e32056 Final release notes for v4.2.0 4900394c8 Document behavior of --timestamp when only FROM is used b619c7a72 check memory test based on range a3778b051 specgen: use sandbox id instead of name for annotation fa1085ed0 cmd: refuse --userns if a mapping is specified 91a1f3022 e2e: Add rootless mount cleanup test 297c72238 [CI:COPR] podman.spec.rpkg: add python3 dependency for el8 a6ea3325a start filter flag changes a19c5a252 Cirrus: Run Cross builds in [CI:DOCS] mode e776425e5 podman info: hide `--debug` 53a631ca2 ISSUE TEMPLATE: remove `--debug` from `podman info` a7d932422 Cirrus: use dnf instead of rpm to install packages 8c36b8c52 Cirrus: Fix e2e tests for "mount_rootless_test" bd3e36040 podman generate systemd --new: allow -h hostname 5c17d1b14 test: verify manifest inspect must contain OCI annotations 6b2bbd2d1 podman-volume-import: Reword "precendence" 54ee42331 man podman-volume-import: Clarify that merge happens c5c0efc95 podman generate systemd: handle --sdnotify correctly 7e7951145 Bump google.golang.org/protobuf from 1.28.0 to 1.28.1 8b9e5fb08 Use 8k buffer to help clients w/ broken parsing 7efd81cb8 With --rm option remove container if podman run fails 346b22f07 Bump golang.org/x/tools from 0.1.11 to 0.1.12 in /test/tools 5b5e53d70 syncContainer: transition from `stopping` to `exited` b7feafcb0 Fix: manifest push --rm removes a correct manifest list 24f219efb Fix: Restore a container which name is equal to a image name 32848b95f When removing objects specifying --force,podman should exit with 0 312bef288 test: update apply-podman-deltas for new tests 9b0a1fa75 build: implement --cache-to,--cache-from and --cache-ttl a382bd329 vendor: bump buildah to v1.27.0 916d51bd0 test: update apply-podman-deltas for new tests 3a239947a build: implement --cache-to,--cache-from and --cache-ttl 6b2512f67 vendor: bump buildah to v1.27.0 6beb3f208 Fixes #15154 Change order when config and connections are written eab03100f Add support, and default to rootless w/WSL prompt f826ed584 Disable F36 service that is incompat with WSL kern d16b42f26 pkginstaller: use correct GOARCH value in case of arm build 0593ceb01 Cirrus: Update DEST_BRANCH to v4.2 fb8584332 Cirrus: Improve CI VM image updates for EC2 d5793db28 Bump back to v4.2.0-dev 7e1f3106f Bump to v4.2.0-rc3 1b7e16654 v4.2.0-rc3 release notes bf2a53a2e pkginstaller: use correct GOARCH while building podman binaries d4481a317 pkginstaller: makefile improvements to avoid redownloading 1b3844f65 pkginstaller: add makefile target to notarize the built pkg 64db955e0 pkginstaller: sign qemu-system-* binary for the pkg 9a820b480 Add support for building macOS pkg installer 5c95c0920 Add support for creating sigstore signatures, and providing passphrases 0aebdb687 Hide podman manifest push --sign-by on remote b2b3edaca Use signByFlagName instead of copy&pasting the string 49d40293b Remove libpod/common eacee60c8 Update c/common to an unreleased version 62cc871c6 Update the registry server we test against from 2.6 to 2.8 52db76373 Use existing REGISTRY_IMAGE variables in more places 230363225 Use httpasswd from the surrouding OS instead of the registry image 74155705e fix e2e sign tests 983cfb90e Final v4.2.0-RC2 release notes bf6f79630 Skip one failing test on Ubuntu 25efc9b2e Fix incorrect release note about regexp 4acc14b4e Bump to v4.2.0-dev 81005b8d8 Bump to v4.2.0-RC2 6fafe120c Final release notes for v4.2.0-RC2 990ef3cf6 [CI:DOCS] podman-generate-systemd.1.md: document --sdnotify c85722eb9 pod create --share none should not create infra c3e0f8ebe machine: Fix check which is always true e6ebfbd1e Set TLSVerify=true by default for API endpoints 64bc2ee97 Semiperiodoc cleanup of obsolete FIXMEs b339045db benchmarks: fix create test fd1f5f55a integration test: fix network backend option with remote c7fef7316 docs: remove CNI word where it is not applicable 976f818f1 libpod: do not lock all containers on pod rm 772e883f8 container wait: improve error message 206f11d4f Makefile: use order-only prereq for podman-remote c4616510a API: libpod/create use correct default umask ce8b6cebd compose test: remove cni config copy 553a70096 compat api: always turn on network isolation for networks aef8039d3 compat api: allow default bridge name for networks fa7e9f0f8 Compat API: unify pull/push and add missing progress info fde39edb9 remote push: show copy progress 1f48980af fix broken machine test cbcbde587 pkg/machine/e2e: do not import from cmd/podman 69fcf04c6 fix some pkg/machine/e2e test to read stderr ce790e61b enable linter for pkg/machine/e2e ff7259567 [CI:DOCS] Cirrus: Add prominent gitlab warning 3edaa174e libpod: create /etc/passwd if missing e41113dca e2e: show command and output when a timeout happens f6d18ed41 fix goroutine leaks in events and logs backend dc1dc4600 podman-remote pull: fix duplicate progress outputs 2350ef9dd Fix potential leak on mid-stream read error 7b28a1b7c vendor: remove unused deps 3aec669e9 Makefile: remove building pages for man5 ed49f9411 makefile: remove processing of pkg/docs 24bbd40ce rpkg: remove usage of pkg/hooks 73ecc5a4b pkg,libpod: remove pkg/hooks and use hooks from c/common d151edeea Fix machine test 86159e39b document isolate option for network create c3c07ed09 Update init ctr default for play kube 6057db75d Remove return error from "containers.pause" de8d2cc94 "pod pause/unpause/stop" append "report.Errs" to "reports" 409fbeaab system tests: new system-service bats file d2e2756a4 Print rootfs download as a specific version on Win 244055030 [CI:DOCS] Fix typo in manifest manpage 76fa80447 Vendor in latests containers/storage and opencontainers/runtime-tools e89550bcd buildah vendor treadmill 9c1de040b Vendor in containers/(storage,image, common, buildah) 03eaea8bb Run codespell e4b82c77f Add --host and -H as equivalent options to --url 183fdea5f Use SafeChown rather then chown for volumes on NFS 17dbce2fb Clean up cached machine images e473c5e4b Machine init: create .ssh dir if not exist 53edd9b65 Podman pull --all-tags shorthand option f07d2bac4 Cirrus: Trigger podman-machine task by label 3bd248ae7 GHA: Fix dumb error check 6d84a9952 Podman stop --filter flag a78be890e Switch to `github.com/blang/semver/v4` 52850ce70 man page checker: enforce stricter options format a5827e13c Fixes #14698 Use prepared image for WSL2 machine init a4bae330a Add podman events -f to be alias for --filter d560c7897 [CI:DOCS] man pages: replace -c with --cpu-shares 5f5379deb [CI:DOCS] podman-create.md: replace -c with --cpu-shares f7707c81a Fix last machine test 35dc17bfe abi: create new cgroup when running in a container 7b4ebfa65 podman: always call into SetupRootless 3b37095b2 utils: call MaybeMoveToSubCgroup once edfe80027 podman: move MaybeMoveToSubCgroup to utils/ b29a52a48 Docker uses "-c" to mean "--cpu-shares" in create and run ffd2e6df9 test,manifest-run: declare TARGETPLATFORM before using it ca4630ede CI: sanity check for desired runtime bf269e634 podman machine: do not commit proxies into config file b2f3b28c6 logformatter: link by *task ID*, not build ID cfb768a36 fix wrong log message on Trace level 557b65e09 [CI:DOCS] Improve language. Fix spelling and typos. a363b3a65 Initial release notes for v4.2.0-RC1 f22af2bf8 Bump to v4.2.0-dev 74aa681e5 Bump to v4.2.0-rc1 aa29bd6de Update CI base branch 87793b633 [CI:DOCS] Rewrite the --gidmap option docs 3bb4cf8ee libpod: read exit code when cleaning up the runtime 62cdc387d podman wait: return 0 if container never ran 25d74db45 [CI:DOCS] podman-info.1.md: Update examples b41e42f42 test/system/130-kill.bats: use $IMAGE 81a19a568 Add ports and hostname correctly in kube yaml 6b9abe69d improve pull-policy documentation 76d887c77 Fix machine tests 1e7686df6 Manifest test cleanup: use defer() 96dd57ca5 podman wait can take multiple conditions a46f79883 pkg: switch to golang native error wrapping d1754bdd4 Refactored networkPrune function 1161e8bd5 manifest_test: safer registry setup and teardown 61a67a07b pkg/machine/qemu: start VM check if qemu is alive a26cf638e machine: qemu fix chardev id starting with letter 4374038cc pkg/machine/e2e: do not import from cmd/podman 4cfa8ccb2 machine test: fix endless loop in test 3adda62d2 [minor] fix duplicate test name e8d2d70ee port forward range test: fix many oopses 0424084b3 fix namespace reporting 03ee8204d podman machine: make 9p security model configurable; adjust docs 44bd166b3 test-apiv2: streamed response testing based on response duration a5898129c Fix qemu machine startHostNetworking always failing cc6faddfa use c/common code for resize and CopyDetachable 1267515e1 Update play kube docs 791dbf823 golangci install: explicitly set BINDIR 4fd5fb97a e2e tests: cleanup: capitalize CONSTANTS 72aa00aca Fix streaming for libpod/pods/stats endpoint ee05bc031 Fix network inspect compat API discrepancy 9d6efb344 Podman machine info 65d511c6d Fix podman pod unpaue TODO 251d91699 libpod: switch to golang native error wrapping 8f2d9e7a7 podman pod create --uts support 5633ef1d1 Docker-compose disable healthcheck properly handled 488eb3b74 (rootful) docker-compose now updates network MTU 4fe7b8baf Podman system df JSON format outputs `Size` and `Reclaimable` b9aa47555 Sync: handle exit file 49cb288df hack/test/utils: switch to golang native error wrapping 2da731a7e test: reduce sleep interval c02f793ba test: return immediately on connect efe1176dd specgen,run: support running container from valid manifest list 8601ab6b0 Silence setlocale warnings from `podman machine ssh` 33a474286 pkg/machine: add missing build tags to tests 5b1867923 TestEnvVarValue: fix assertion 3fbe93371 envVarValueResourceFieldRef: use int64 for value 4c5b058e8 fix flake in aardvark tests 597de7a08 libpod/runtime: switch to golang native error wrapping 8106568ca test: drop pod-create --device-read-bps test 5491123c2 [CI:DOCS] troubleshooting: document --tty and CR fe559287c docs: Remove -s from systemctl enable --now sshd 24fcfb5d9 Fix spelling "read only" -> "read-only" 2f1075dfb Implement proxy support for Windows b92149e2a podman pod create --memory 8cff1c2bf Cirrus: Add podman-machine integration test f58d7dbda Cirrus: Fix elevator workaround multi-cloud support 7131c8472 fix build d6678adc9 overlay,mount: convert lowerdir to absolute path for overlay mounts of path 891dfd3a8 specgen: fix parsing of cgroup devices rule 5262f7e01 Fix podman machine on Windows 9c658f490 docs: mention the podman-kube template c6fb533ca podman-play-kube template: rename to podman-kube bd51410b8 service: do not run under the root cgroup 5c3979762 utils: move the cgroup if root on cgroupv2 e8adec5f4 cmd/podman: switch to golang native error wrapping 7bbfb3eb0 api,images: add support for LookupManifest to Image remove API 64ec894c5 [CI:DOCS] Update podmanimage comment. d9ff0fd15 Only allow Rootless runs of Podman Machine 6904b1a61 build(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0 5790caaef bindings: Add support for Delete in pkg/bingings/manifest 1affceb29 runtime: unpause the container before killing it 7f994a80d only create crgoup when not rootless if using cgroupfs 59a7ac210 Make `podman machine stop` wait for qemu to exit 2ee9fe4cb vendor containers/common 79a38a2c6 Add test for restore runtime verification using non-default runtime 8e3a46a87 Fix runtime check during restore 6c4c050d3 fix volume reporting in system df cc4914633 Docker compat returning unknown "initialized" for `status.status` 6d3520e8b podman image scp remote support & podman image scp tagging dc58a7306 Makefile: don't try to build rootlessport on FreeBSD c55feb7bf Makefile: don't use '-t' to specify the directory to install manpages af16edf49 Makefile: use GNU sed to convert manpages on FreeBSD 94a634fcf Makefile: use bash to evaluate tool paths 0e03a64f9 pod: ps does not race with rm 0cabd8006 pods: move code to a new function 3b10c1b78 Use Regexp in volume ls --filter name aada13f24 volume: new options [no]copy a4094530b volume: drop TODO comment 443a2afdb volumes: switch order of checks 28e2a604b vendor: update containers/common 99f68898c reveal machine error, ignore false state 9cb93c6f9 go.sum: run make vendor 0c1a3b70f Show Health Status events 386ea49cf Show starting state when machine is starting 66c62eb96 Implement CatchAll and StopCatch in signal_common.go 345778ece Fix "podman run port forward range" flake 4c5788bac Fix spelling of GetCriuVersion 590290597 Add missing criu symbols to criu_unsupported.go 2792e598c podman cgroup enhancement 09754d21d [CI:DOCS] Minor update to podmanimage upstream docs 041947b11 Bump github.com/stretchr/testify from 1.7.4 to 1.7.5 3619f0be9 Fix: Prevent OCI runtime directory remain a4ae22df8 Workaround for bug 14653 (checkpoint flake) 491857a88 Use HaveLen instead of len in podman machine list e2e tests f0b9e56e9 Fix machine list: --format implies --noheading 2fab7d169 add podman volume reload to sync volume plugins 6e8953abf test/testvol: rework testvol binary fcc25afa5 test/testvol: update container image golang to 1.18 472f79f08 test/testvol: move Containerfile into testvol dir 0d3aa61be libpod: volume plugin sendRequest remove body bool ad78d239d fix system connection and scp testing 3a810b8d2 Two fixes for DB exit code handling 30e7cbccc libpod: fix wait and exit-code logic 15188dce0 conmon: silence json-file error 2eda547dc podman run/create -v relative filepath support ef563c5a1 logformatter: link to logs using Cirrus API aa4279ae1 Fix spelling "setup" -> "set up" and similar 0320ce37d Fix system prune output message 7ef282d64 Remove lorgus.Infof on bindings start and attach 132393d15 Update basic_networking.md 4a981c490 allow filter networks by dangling status 050693b2e bump github.com/spf13/cobra from 1.4.0 to 1.5.0 ecf225019 rootless: attempt to join all specified paths 9afd5e31c rootless: improve error messages 99258703a rootless: do not ignore reexec_in_user_namespace_wait errors cfba09f68 Bump github.com/stretchr/testify from 1.7.2 to 1.7.4 1f539a264 api: show the memory limit specified for the container 7f82c4323 Fix typos f451b68df podman pod create --shm-size 46da7bc78 podman machine init --now: respect proxy envs bb5bd09ea API: containers/json always set application/json content type 282714090 [CI:DOCS] "setup" -> "set up" in source code comments dda68201a [CI:DOCS] Rewrite --env docs 948866e8a Update to use gopkg.in/yaml.v3 075c9ac45 .cirrus.yml: fix matrix expansion by properly merging YAML mappings 809044576 vendor in latests containers/image ce3d0954a Open Windows tutorial after MSI installation a3b3f1723 linter fix from #14299 065302bd5 Cirrus: Fix build. dep. missed in #14521 3af047b63 Vendor in latest containers/storage 09c462d73 fix "podman -h" help output 6c5e1420e Make it clear the REST API could be a security issue 28a38617e [CI:DOCS] fix typos in prerequisites for Fedora and make binaries sections b3f094a61 test/system/410-selinux: fix for newer runc e69691c27 Fix interrupting machine start leaves the machine unstartable 0a202a9f0 system test image: bump to 20220615 21819254d golangci-lint: update to v1.46.2 c6b9baa6c system tests: avoid rmi -a ... plus cleanup 693d439ac Update release notes and README on Main for v4.1.1 751ba07a7 libpod: improve check to create conmon cgroup 90a669594 fix CI: golangci-lint is broken on main 20b3fbe6d systemd socker activation: check listener to prevent panic 43e12c135 Fix #14416: Use absolute path to WSL binary to create ssh keys for `machine init` bfc446eea buildah-bud tests: reenable skipped 'bud' tests 455f4c782 CI: APIv2 tests: add rootless 232b3e342 buildah-bud tests: add arg sanity check 41528739c golangci-lint: enable nolintlint 1b62e4543 golangci-lint: add systemd build tag fcfcd4cdb container: do not create .containerenv with -v SRC:/run 4811cb110 podman system prune support prune unused networks 5e9d20448 Update vendor of containers/buildah 608ad7d11 Non-running containers now report statistics via the `podman stats` command 958759a71 podman pod clone 8d3e6577a Fix M1 QEMU flags b7c283759 Bump golang.org/x/tools from 0.1.10 to 0.1.11 in /test/tools 48cf1d258 podman-remote push --remove-signatures support d4272bed5 podman cp: do not overwrite non-dirs with dirs and vice versa 46c8da7d9 vendor buildah@main 7b3e43c1f podman volume create --opt=o=timeout... 80d5a00bb Fix Remote filtering embedded directory test 2b97795c1 APIv2 tests: (try to) fix flaky registry panic 81153ffa2 Introduce 'Starting' status for machines b13fc1bf9 patch for pod host networking & other host namespace handling 5614c29ce compat api: fix regressions from "Swagger refactor/cleanup" eed0e6671 Pass '--file-locks' to OCI runtime at restoring c77691f06 Do not error on signalling a just-stopped container 7e9767502 Bump github.com/opencontainers/runc from 1.1.2 to 1.1.3 549bffe58 shell completion: fix problems with container path completion bce97a3b5 apiv2 tests: clean up 700248bfe Update remote_client.md 254048e17 Cirrus: Fix artifact passing when dep. skipped f0516a014 --userns=keep-id,nomap are not allowed in rootful mode 126686f3d Podman images generated with empty /etc/containers/storage.conf 20aaaa382 Minor: Fix podmanimage README links dc4a01ec6 Add docs of changing default netavark networks ed1e4f94f Infra Inheritance patch 5fc3d871a Cirrus: Simplify only_if/skip + optimize multiarch a69a48b0d test/e2e: network dis-/connect test remove unhelpful assertions 90d80cf81 use resolvconf package from c/common/libnetwork ddf1d2cb3 update c/common to latest 811cce5a8 libpod: store network status when userns is used 0f424e90d Bump github.com/docker/docker e41d4a247 Add missing tests for manifests API 2a0d896b3 runtime: make error clearer 2c12f7bd1 Add some Readme updates around machine 8533ea000 Privileged containers can now restart if the host devices change 335925f47 Minor: Remove useless addition of storage.conf aadae49ad overlay-volumes: add support for non-volatile upperdir,workdir for anonymous volumes 5c508cb4e Bump github.com/stretchr/testify from 1.7.1 to 1.7.2 67ea5fdad Cleanup the leftovers used with ginkgo focus option 1fc5a107a [CI:DOCS] PodmanImage Readme touchup 22e442ee2 tests: buildah-bud fix reason for skip 9de092ec0 Fix secret-verify-leak flake: set build context to subdir 259c79963 Improve robustness of `podman system reset` 87b05b6a6 Prevent simultaneous machine starts 3c9b75c21 Using logDriver instead of query.LogDriver for podman play kube 241458666 podman logs k8s-file: do not reassemble partial log lines 2b0cb3002 test/e2e/save_test.go: fix flake b8de285a4 Stop machine before force removing files 1b6505d74 Update test output expectation 9a34b88c9 changed megabyte to mebibyte 831d6534f fix pod network handling with a host network 5023ce585 Align docker load and podman load output f2bbbd20d shell completion for paths inside the image/container 69e44bbcc bindings: add manifest should follow es_model while marshalling OSVersion and OSFeatures 5b9729c47 Document protocol usage for --publish 6dffa453a Bump github.com/containernetworking/cni from 1.1.0 to 1.1.1 44f11ec2c podman-remote: enable support for additional build-context on macOS, remote 3fa09e9db Makefile: Handle unexpected empty var. values fc95f832a Podman image: Mass cleanup + fix missing storage.conf f728b7b5a podman pod create --uidmap patch 8291b51ce expose podman.sock in machine inspect dbdc26a4c Removed `imageStream` hardcoded value 2805c7353 pkg/specgen: parse default network mode on server 78d1f5d7d fix "tail 800 lines: journald" flake 193397290 Add ExecStop and dependencies to fix shutdown f91c852fa Makefile: force podman-remote-static to linux cef044d85 Bump gopkg.in/yaml.v3 to v3.0.1 205c8c071 fix podman container restore without CreateNetNS 16e8b2f32 podman stats: work with network connect/disconnect ec576a549 podman volume export/import: give better error 4a8346551 podman machine ssh: do not print warning everytime 7e69e2b53 Podman no-new-privileges format 0e58636c3 podman machine ssh: set correct exit code a6f8cad54 fix bad import path for cmd/podman/utils c0ad9a43e Mount propagation works with named volumes f23ae4d66 healthcheck: wait for systemd operations 8efdbf5c4 Add API support for NoOverwriteDirNonDir e13c5f3a9 Refactor populating uptime 3a32d60e5 [CI:DOCS] Quick typo for troubleshooting ea1a8e243 Move Attach under the OCI Runtime interface fb163976f Support setting image_volume_mode in containers.conf d730f2b25 Add Authorixation field to Plugins for Info ab0728421 docs: note regarding version compatablity between server and client for bug fixes 87ad46060 Remove TODO comment 66a56ce05 vendor: bump buildah to v1.26.1-0.20220524184833-5500333c2e06 6124b5199 build: allow using cache explicitly with --squash-all using --layers 8c1128db4 Cirrus: Fix several TODOs 426a07e70 Combine the CheckAllLatest CID and PodID functions c9f6639ec Fix TODO in parse/net.go 32aa12a28 Remove TODO from pods/ps.go 8c781416b Fix swagger model of `InspectPodResponse` de54d33d2 Fix test block bypass instructions b730e7328 cmd, build: remove redundant squash processing logic 66c846616 Support remote deadlock errors in rm badf76e17 Remove more FIXMEs 9fcfea764 First batch of resolutions to FIXMEs 02c437405 [CI:DOCS] Add play kube support docs 338f01237 Remove unused archive flag from diff commands cb76d1523 fix f35 integration test network flake c3677f515 test/system/250-systemd.bats: clean up outdated TODO c9279d4d9 pkg/bindings/play/play.go: drop TODO message 462cb3370 pkg/bindings/containers/archive.go: drop TODO 60e31d87d pkg/auth: drop the TODO 09ae060a7 pkg/api/handlers/compat/images.go: drop TODO message c04ec104d libpod/pod_top_linux.go: s/TODO/NOTE/ b19e2d6f8 events: drop TODO comment 429b1f768 Fix codespell errors 4a447a213 work queue: simplify and use a wait group 2ce475576 Allow podman pod create --share +pid df394b521 Allow podman pod create to accept name argument 70f147d01 cmd/podman/common/completion.go: fix FIXMEs 2be4589b5 Remove TODO re: storage-driver 8de3e9102 help-message system test: catch more cases 33628003c Put current product first and historical product second 2400d1d52 go format previosly touched files b3e2324f5 test/e2e/search_test.go: re-enable registry.redhat.io test 956e2e1b8 pkg/domain/infra/abi/images_test.go: remove commented code fbeef1d70 image list: remove unused ConfigDigest 90a6f39d0 pkg/inspect: remove unused ImageResult type 5268314e5 podman image mount: print pretty table d3d3a207d pkg/bindings/images/rm.go: remove redundant FIXME 6c6e97018 pkg/bindings/images: remove TODOs re: system context d924c46da autocomplete `podman search --filter` f98a7d140 build(deps): bump github.com/vbauerster/mpb/v7 from 7.4.1 to 7.4.2 8af98b342 contain_top_linux.go: s/TODO/NOTE/ f5450b1e8 system tests: fix flake waiting for container to run 2133edb2c compat, build: suppress step errors when quiet is set 8fbb933f5 look for firmware based on the path of qemu binary 5d37d80ff Use containers/common/pkg/util.StringToSlice d29dec967 Cirrus: Fix building multiarch images dde428642 Bump Compat API maximum version to v1.41 b7dbc505b Instead of erroring, clean up after dangling IDs in DB e22611baf fix typo ac154425d Update _play kube_ doc following PR #14266 merged c984956f9 fix compat image resolution d66288315 auto update: create an event 633d5f1f8 fix --init with /dev bind mount 4960a17a5 fix tests by randomize the device folder name 94e82121b Support running podman under a root v2 cgroup a0d0207a2 fix podman-for-windows.md 5b79cf15a Swagger refactor/cleanup fb219a809 Update c/image 9c9fc96d2 shell completion: use more constants instead of duplicating strings 337f8b9d9 shell completion: podman save --format use all valid values 74f70315b shell completion: update podman inspect --type options 318e95fd2 shell completion: fix podman event --filter values b22143267 linter: enable unconvert linter 3b0844f99 shell completion --format: add help to function with args 3d8a1f917 shell completion --format: support maps and functions ecd6edb19 shell completion --format: fix embedded struct handling 11ff5ffd3 shell completion --format: only show usable methods eeeb88a66 shell completion --format: only show exported fields f5c8c0911 add tests and fix bug when char device pass the test as block device 653117087 ci: pr-should-include-tests: add more exceptions 40a1cd4ef Remove GO111MODULES use d49efde27 Makefile: rm gofmt target 9bf81814a Makefile: rm CHANGELOG_* and ISODATE vars d2070a39e Makefile: rm -mod=vendor 2b54bf3e6 Move GOPROXY from Makefile to cirrus.yml 11d3cf269 Makefile, podman.spec.rpkg: rm GOBIN and GOPATH c63bb6b9a Makefile,.gitignore: rm .install.goimports e2d2b537a Makefile: rm .gopathok d8c42de41 Makefile: rm .install.libseccomp.sudo target c632a2efc dependabot: add release-note-none label 0c9b0e2aa expose block and char devices with play kube 8684d41e3 k8systemd: run k8s workloads in systemd 6f9155cbb api: make no-op remote functional in /libpod/build 21a5ef859 Don't complain about XDG_RUNTIME_DIR, Closes #1424 dc435ecb2 Make errors on removing exec sessions nonfatal ee782fcb7 Deleting an n use image should return conflict not system error 977cd9bd1 Update WSL machine OS to enable user lingering 0961002d9 Update tutorial list to include Podman for Windows 5b2d5c365 Robust whitespace split of cpu utilization line from /proc/stat de4f76e7e Fix strange buildtag edit c45d51899 [BZ #2083997] pod: build pause image in custom user NS c058b828c Changed permission to 755 25f80941a build(deps): bump github.com/docker/docker 2b03a1088 Vendor in latest containers/common b8103640a Make sure tests are cleaned up when they complete 7804f4d29 Add support for machine events on Windows a4aa07a07 [CI:DOCS] Treadmill script: add --reset option b7ce98619 Fix broken pwd 1094d7553 build(deps): bump github.com/opencontainers/runc from 1.1.1 to 1.1.2 9df390655 shell completion --format: work with pointer functions 03af8213c sdnotify: send MAINPID only once 840c120c2 play kube: service container ecf0177a0 vendor c/common@main 16e22dbbe vendor: update c/storage and c/image 37e30bcb2 Fix hang in build-each-commit test e76a07087 [CI:DOCS] man pages: fix inconsistencies 60258925a test: update fedora toolbox image 1834afd3e [CI:DOCS] Benchmarks: new tool for parsing results 813f6a68f [CI:DOCS] fix `make localbenchmarks` 876b05cdb Add initial Windows guide c7c00ce55 Add more machine tests d0ca90b3e test: simplify cleanup code 0774a4ce1 kube: add support for --userns= 2b5778d41 Cirrus: Update images + new automation library 9ffc2a6ac Cirrus: Fix Makefile including 'hack' in $PATH abf4f77bc Cirrus: Simplify use of cache in automation 237f76126 Cirrus: Simplify rootless ssh setup c1656e2ee Cirrus: Guarantee $DEST_BRANCH is passed through 82f2b3edb bloat check: make more robust 9e1ee081f kube: honor pod security context IDs 82a4b8f01 kube: refactor setupSecurityContext to accept directly the security ctx be5abf03a fix: Container.cGroupPath() skip empty line to avoid false error logging c48657671 test skipper: check for $DEST_BRANCH 8ecd0b5bc fix broken CI test bb8f53a72 test: fix "podman search format json" b58e7e7f1 play kube log tag handling a1a299797 Update version to v4.2.0-dev bce014e19 Update release notes for Podman v4.1.0 9cd74a13c update podman version in readme 0dbfd376f Add 4.1 branch to API documentation 2a401b3ff Bump github.com/docker/docker ed8c1dfb4 libpod: add c.ConfigWithNetworks() d7f43e677 test: fix failing TestPostDeleteHooks cf35168f0 test: use `T.TempDir` to create temporary test directory 6ddccd94f e2e: pull_test: speed up --all-tags c38e7e5f6 build: disable --output for podman-remote clients 140fb3ae1 e2e: pull_test: squash --quiet test 669401c31 e2e: pull_test: move tests around 2fa906cca e2e: pull_test: remove redundant tests 6eaa9ca26 e2e: manifest_test: use cached registry ed159f864 Vendor in containers/buildah@v1.26.1 ebde52583 update rootless_tutorial.md 7c59f1d07 Fix usermod call in rootless_tutorial.md 5fa6f686d Report correct RemoteURI 386614367 exclude new tools vendor dir from validate f6b397bf1 add dependabot config for test/tools go.mod 3b9177995 vendor test tools in submodule 80744c644 podman system reset removed machines incorrectly 9974c90cc libpod: treat ECONNRESET as EOF 245151e62 Add more unit tests a5800c78f machine events: only open sockets when needed 36c5e6e0c Bump github.com/containers/storage from 1.40.0 to 1.40.2 ccd576504 play kube default log driver 8781a3635 benchmarks: push/pull 1585b175d pass networks to container clone 88015cf0d Implement --format for machine inspect 8da5f3f73 Add podman machine events 9166894c6 vendor test dependencies instead of installing via network 6e2e3a78e generate systemd: pods: set exit policy 5fac879ea vendor treadmill script: run 'git add vendor' 0bb484937 Additional stats for podman info e247f02a4 Vendor in containers/(common, storage, image) e74717f34 Treadmill script: revamp e17b56e0c CI: emergency fix for broken go get 4e44e5b5d Bump github.com/rootless-containers/rootlesskit from 1.0.0 to 1.0.1 4eff0c8cf pod: add exit policies cfca85356 libpod: unset networks before storing container conf 77d872ea3 vendor c/common@main 5b78f9576 Implement machine inspect for WSL 772ead253 Use simulated dual-stack binds when using WSL 23de3801d buildah-vendor-treadmill script: yet more checks 01acc2565 libpod: host netns keep same /etc/resolv.conf 519820926 fix incorrect permissions for /etc/resolv.conf in userns e6557bf0a pkg/api: do not register decoder in endpoint handler a48c37df3 fix broken hooks-dir test 69c479b16 enable errcheck linter 384c2359b libpod: unlock containers when removing pod 2902d32c4 Refactor machine inspect 64a368ba2 remove unused codepath for creating/running ctr in a pod 6b7fd318b image search --format: add completion for go template 0d9f19028 shell completion --format: use structs by reference cac2b7800 image --format: fix add completion for go template 7f28fd938 Report properly whether pod shares host network cb9a45630 shell completion --format: use anonymous struct field once 8be978158 network inspect --format: add completion for go template f93ba587c shell completion --format: work with nil structs 589e42c99 Bump github.com/containernetworking/cni from 1.0.1 to 1.1.0 a5aea8e50 Three manual fixes b3f38c31b Ginkgo: use HaveField() for better error checking 91ead1528 volume: add new option -o o=noquota ea1fcd7bc podman search: truncate by default c721acf08 podman machine starting test 3b8fa515f Emergency fix for new CI linter 83a75d2a3 Produce better test error messages 461b73f56 Github PR template: add release-note block 22b421dd7 Add CreatedSince & CreatedAt format fields to podman image history e7390f30b Allow changing of CPUs, Memory, and Disk Size 9c0c29f08 Cirrus: Fix ownership of repos. to keep git happy d4e30b33a Temporarily skip netavark/aardvark e2e test cf449e81a Cirrus: Temporarily update netavark/aardvark-dns cd7cff6bb Cirrus: Test w/ netavark/aardvark-dns in F36+ 3a07fc446 Cirrus: Update to F36 CI VM Images a73425a0b Revert "Cirrus: Disable F34 aka prior-fedora testing" Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker: ensure that sysvinit and systemd are exclusiveBruce Ashfield2022-08-252-4/+12
| | | | | | | | | | The sysvinit functionality conflicts with the docker daemon settings required for the systemd docker.socket. Ensure that the sysvinit capabilities are only enabled if systemd is not present. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* lxc: update to 5.x and mesonBruce Ashfield2022-08-257-173/+127
| | | | | | | | | | | | | | | | | This is a significant update to lxc as autotools has been replaced with meson. Not all existing autotools options have meson equivalents, so there may be differences in functionallity. As part of this update, and unused features have been dropped, mainly when the meson equivalent was not available. Basic / core functionality has been tested with systemd, sysvinit requires more work, and patches will be accepted to restore that capability. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* skopeo: Mark CVE-2019-10214 as fixedAndrei Gherzan2022-08-251-0/+6
| | | | | | | | | | | | | | | This CVE was fixed[1] in the container image go library skopeo is using (vendoring). The current version of the image go module is v5.20.0 while the fix landed since v3.0.0[2]. See RedHat's resolution[3] for more details. [1] https://github.com/containers/image/issues/654 [2] https://github.com/containers/image/pull/669/commits/a3d69a4a89244803d2f5350aca6dd0fcbe444551 [3] https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-10214 Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: Rename podman-rootless.conf sysctl file to aid overridesAndrei Gherzan2022-08-232-2/+2
| | | | | | | | | | Files are sorted in lexicographic order. Moving podman-rootless.conf to something greater then '00' would help with systems providing default values in other configuration files that can be overridden by podman-rootless.conf. Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* singularity: Drop explicit runtime dep glibcAndrei Gherzan2022-08-201-1/+1
| | | | | | | | There is no need we can see for this dependency to be provided as such - especially forcing this to using glibc. Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* nerdctl: update to 0.22.2Bruce Ashfield2022-08-094-455/+595
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping nerdctl to version v0.22.2-2-ge084a2d, which comprises the following commits: 013ebdc Bump github.com/containerd/nydus-snapshotter 37cb3fe Fix `can't get final child's PID from pipe` on rootless (v0.22.1 regression) fbbf10e Bump github.com/compose-spec/compose-go from 1.3.0 to 1.4.0 7f94a17 fix(hosts): extra-host params should be 'domain:ip' a4fd8fa go-ipfs (0.13.1) -> Kubo (0.14.0) f3001be doc: readme and help msg about firewall plugin 0e81051 ps_linux_test.go: improve variable names cae0f01 README.md: `nerdctl system prune` is now available 8f57e95 add label display support in ps subcommand 2dfa2a4 Bump github.com/compose-spec/compose-go from 1.2.9 to 1.3.0 d0fe7ab skip reconfig network when missing 83ce9a0 Add extra logging warning for log options 09bd981 Pass https://index.docker.io/v1/ to GetAuthConfig() for Docker Hub 17771d0 Refactor: Abstract the way to handle remote snapshotter 0ff788b Add the ability to inspect volume sizes 3676219 Bump github.com/containernetworking/cni from 1.1.1 to 1.1.2 8b6417c fix stats values bcedaae optimize tests of stop the sleep container 014525f support system prune 81a9a9b add labels in container inspect using dockercompat mode 81095fb fix yaml pkg vulnerability 1bb09dd support network prune bc68696 Add oom-score-adj option while running 3507d0b remove useless args from load d7ba334 rewrite test of run with init flag 1f7ec3f Bump github.com/compose-spec/compose-go from 1.2.8 to 1.2.9 5ecf242 Bump github.com/containerd/go-cni from 1.1.6 to 1.1.7 cccf19e test fluentd log driver without build image 1199ac5 small refactor for rmAction a4b51e2 bridge network use free subnet e027ce4 Bump github.com/sirupsen/logrus from 1.8.1 to 1.9.0 0818f7d Bump docker/build-push-action from 3.0.0 to 3.1.0 a78de9a support --network=container:<contaienr> for sharing network namespace df376b8 Remove duplicate host record when update the DNS 685371e TestRunWithJsonFileLogDriver: make log message more specific 357fdfd Fallback to Containerfile when Dockerfile is not present. de3d05a README.md: clean up e06e3a6 ignore force remove container error 4a7f6eb support force remove image f2cc696 fix stats for no-stream a7dd254 fix flaky test TestRunWithJsonFileLogDriver 663541c README.md: clean up ad0e42f infoutil: make runc version output consistent with Docker e016c55 infoutil: relax buildctl version format 2087827 fix found multiple IDs when container walker 0e07104 update buildg (0.3.0) bd78358 update IPFS (0.13.1) ddf5b5a update stargz-snapshotter (0.12.0) 8f5ac28 refactor container restart command 70826c7 update imgcrypt (1.1.6) 08f9f6b Display buildkit and runc version in nerdctl 2c5bd7f Log matches of log paths to understand TestRunWithJsonFileLogDriver flakiness 15decf3 wait for detached container running before exec fa392af Add document about overlaybd 41c63f3 fix json file logging filenames 9c63c61 container exit should terminate tail logs ff6e75f update unimplemented flags for run 28de2e3 support volume prune a74e852 add update flag blkio-weight eb3715a fix dockerfile local dir e20c145 support image prune 79ed9ca TestRunCgroupV1: fix cgroup version check d746ab9 fix broken deps for dbus 5e91753 add flag kernel-memory 9b4287e typo and return error 67e2ded remove failed container state efd3961 adjust ps header b35ae67 cli: implement -s/--size option for nerdctl ps command e8127e6 docs: add nydus snapshotter description f20cb34 Validate formats before ticking 8b5a0ec Bump github.com/containerd/nydus-snapshotter fb3eb33 fix error message 5f41b41 support container prune 4637c99 add TabReader for test 4f9c3ed fix some error 86056b8 Enable staticcheck in golangci-lint 34e3ad8 feat: makes nerdctl available to pull nydus images 76fbdbe Support multiple tags in nerdctl build. e56ac42 Fixed gosimple errors in issue #1134 afb0c57 bind-mounts: add rbind option defaultly 6a382f7 support stop-signal and stop-timeout f9522ae support dns-search and dns-option for compose 486100d volume: set fstype to bind if mount options contains bind or rbind eaf3354 remove invalid debug 50a8eaa show name for images 0b67272 support dns-search and dns-opt 2f79653 fix: using default resolver 2b5a45b add group-add flag for run a5b0d1d go mod tidy b1930a7 1117: specify needsLoading when output flag is specified. abaa167 Bump github.com/compose-spec/compose-go from 1.2.7 to 1.2.8 7954e19 Bump github.com/ipfs/go-ipfs-http-client from 0.3.1 to 0.4.0 12aae30 Bump github.com/multiformats/go-multiaddr from 0.5.0 to 0.6.0 8b34083 Fix typo in instructions on how to run docker compat tests. daea277 Bump github.com/spf13/cobra from 1.4.0 to 1.5.0 b1b226f Bump gotest.tools/v3 from 3.2.0 to 3.3.0 0bcefdc Update golangci-lint version to 1.46.2 063c025 fix stylecheck errors 75ff587 CI: unparallelize TestRunAddHost 1c191a1 add umask 676c5c3 Validation for nerdctl load to fail when stdin is empty. 1192a04 Fixed gosimple errors in issue #1134 02582d0 go.mod: golang.org/x/* master e86deda go.mod: github.com/containerd/containerd v1.6.6 (=> v1.6.1-0.20220616041926-9c6154bff158) c078e20 pkg/logging: refactor 92e3cc2 Initialize the log file to fix `nerdctl compose up` error 5c3aec6 add memory-reservation memory-swappiness 7fbafcb fix swap memory 261da0c Add GitLab Container Registry documentation 4f6b914 MAINTAINERS: add Zheao Li as a REVIEWER 04a8450 update IPFS (0.13.0) 8ac66ef update fuse-overlayfs (1.9) 21edc9d update runc (1.1.3) ffdc0aa fix log-driver name not check error 8717e4f Implement fluentd logging driver a817a8b add flag memory-swap 44c80db Adding tests for start and handling AkihiroSuda feedback db4a505 Adding --attach flag to start 0b9e9cb add flag oom-kill-disable 404c532 [#868] Update moby/sys to fix the FreeBSD build 3b1df0e Bump github.com/docker/cli d50fec4 Bump github.com/docker/docker cfe8ca0 Bump github.com/moby/sys/mount from 0.3.2 to 0.3.3 6386775 update buildg (0.2.0) 26639fd update containerd (1.6.6) 35f60d6 go.mod: github.com/containerd/containerd v1.6.1-0.20220606171923-c1bcabb45419 8a36c0d persist default network config bb3f9ee Bump github.com/vishvananda/netlink from 1.2.0-beta to 1.2.1-beta.2 eae4b2d Bump github.com/containernetworking/cni from 1.1.0 to 1.1.1 3007fc8 Bump github.com/containerd/go-cni from 1.1.5 to 1.1.6 b00fa84 fix squashes --add-host with the same ip dd8a0ff Implement journald logging driver f087279 Bump github.com/compose-spec/compose-go from 1.2.6 to 1.2.7 60b77c1 Bump github.com/containerd/cgroups from 1.0.3 to 1.0.4 96a3276 CI: TestRunCgroupV2: add --memory-swap=-1 for Docker with cgroup v2 5a47349 CI: skip TestRunCgroupConf for Docker e077b38 CI: use GHA ubuntu-22.04 for cgroup2 tests 08924b9 docs/compose.md: update the compatibility information 423600f Bump github.com/compose-spec/compose-go from 1.2.5 to 1.2.6 793a95d enbale entrypoint as stringArray feb1316 Bump github.com/compose-spec/compose-go from 1.2.4 to 1.2.5 193e8d6 Bump up buildg to v0.1.0 04f9b47 update BuildKit (0.10.3) 0aeed30 update runc (1.1.2) fc87586 go.mod: golang.org/x/* master f66b943 refactor TestRunIpcHost b7d9eee create/run: add ipc flag to create and run commands 998f457 Bump github.com/docker/cli 47e7eb7 Bump github.com/docker/docker 773a413 Support interactive debugging of Dockerfile d81dcf3 logging: ensure that MagicArgv1 is always argv1 004f2ff README.md: typo 70c90f1 Bump golangci/golangci-lint-action from 3.1.0 to 3.2.0 7c3fd8f add bind-nonrecursive for mount 47ff895 fix flaky test TestComposeConfigWithComposeFileEnv c5841dd pkg/taskutil: let StdinCloser implement io.Closer c9881fd supporting COMPOSE_FILE environment variable b4f2e5f Support logging in compose file 0fc816a Support for networks in compose files 0b9d48e Bump github.com/docker/docker e031d13 update containerd (1.6.4) abaa4d0 Support riscv64 49f6d78 Bump github.com/docker/cli 7e3dc43 Bump docker/build-push-action from 2.10.0 to 3.0.0 450486a Bump docker/login-action from 1.14.1 to 2.0.0 e11fb20 Bump docker/metadata-action from 3.8.0 to 4.0.1 d3e449a implement log opt with containerd logging driver 97ece6a enhancement restart policy 81528d5 support rename container 56b0f10 update BuildKit (0.10.2) e258cda update RootlessKit (1.0.1) 489a521 update slirp4netns (1.2.0) d73ef7a fix default driver capability for gpus ed10fec Bump docker/metadata-action from 3.7.0 to 3.8.0 f853dc4 Bump github.com/containerd/go-cni from 1.1.4 to 1.1.5 18ea81f Fix `flag -t needs -i to be specified together` restriction b2fa405 Makefile: avoid flattening `nerdctl-X.Y.Z-go-mod-vendor.tar.gz` ff1aec4 info: add --mode=native to show full plugin info a629145 update containerd (1.6.3) 62979d7 Bump gotest.tools/v3 from 3.1.0 to 3.2.0 6d1bfc6 fixes #1004 : Build image only when changes merged to master 10990ad Bump github.com/pelletier/go-toml from 1.9.4 to 1.9.5 dbc0ec5 Bump github.com/ipfs/go-ipfs-http-client from 0.3.0 to 0.3.1 c63982b Bump actions/checkout from 3.0.1 to 3.0.2 85ca787 [Carry 643] cp cmd 90a3a2c Bump github.com/tidwall/gjson from 1.14.0 to 1.14.1 8385be4 add test case for nerdctl inspect to check mounts field a766555 show mounts info for nerdctl inspect Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: update to 1.24.3Bruce Ashfield2022-08-093-737/+1118
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We bumping to 1.24.x, along with the k3s changes, we update our dependencies to allow a vendored build. Dependencies were gathered via: go list -m all | sort | uniq > mod.all And then processed to generate the SRC_URI fetches and relocations into the build. We also change our TAGS to avoid two different errors. btrfs build restrictions: package command-line-arguments imports github.com/k3s-io/k3s/pkg/cli/agent imports github.com/k3s-io/k3s/pkg/agent imports github.com/k3s-io/k3s/pkg/agent/config imports github.com/k3s-io/k3s/pkg/containerd imports github.com/containerd/containerd/snapshots/btrfs/plugin: build constraints exclude all Go files in github.com/k3s-io/containerd@v1.5.13-k3s1/snapshots/btrfs/plugin And ctrd, which leads to the following (which is also found on non Yocto / non-cross build k3s builds): # github.com/containerd/containerd/pkg/cri/server ../../go/pkg/mod/github.com/k3s-io/containerd@v1.5.13-k3s1/pkg/cri/server/instrumented_service.go:36:9: cannot use &instrumentedService{?} (value of type *instrumentedService) as type grpcServices in return statement: *instrumentedService does not implement grpcServices (missing ListPodSandboxStats method) ../../go/pkg/mod/github.com/k3s-io/containerd@v1.5.13-k3s1/pkg/cri/server/service.go:156:9: cannot use c (variable of type *criService) as type CRIService in return statement: *criService does not implement CRIService (missing ListPodSandboxStats method) Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* crun: update to 1.4.5Bruce Ashfield2022-08-091-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping crun to version 1.4.5-74-gba3cb60, which comprises the following commits: 5af21e2 linux: fix idmap annotation c75b58d wasm,wasmedge: drop support for experimental WasmEdgeProcess 22c6181 linux: fix creating devices in the rootfs 6f46ad5 chore(wasmedge): remove legacy option 0de6bb2 fix unknown type name 'uint64_t' 3a16555 linux: fallback to netlink to setup lo device 1a3f8f1 linux: use $PATH for newgidmap and newguidmap 74679c6 krun: use library soname in dlopen 0130f08 krun: limit the number of vCPUs to 8 2a4458d linux: fallback to tmpfs mount if umount fails fd33331 artifacts, centos9-build: add libprotobuf-c-dev for protobuf headers 77f5c99 linux: devices mounts should have NOEXEC and NOSUID c923cec tests: add wasmedge build test 33f900c fix(wasmedge): breaking changes in wasmedge c api 699757b test, podman: skip podman pod create --share-parent test eb4ff94 handler: move notifer for phase HANDLER_CONFIGURE_AFTER_MOUNTS just after finalizing mounts b02a68d linux: honor mount mappings 8d774c5 libocispec: sync from upstream 38f60b1 ci: re-enable and fix clang-format d21594a *.c: clang-format 9ed3c1b mono: remove incorrect wasm headings from mono docs c44937b tests: disable "podman kill paused container" 965129b test/check: fix wrong argument 17d1c16 cgroup: make target cgroup threaded if needed 77d2ac5 readme: show crun logo 2ebd7fc Adding crun logo SVG file ec9ab49 container, exec: honor process user's uid while setting HOME env d8a0c7f tests/podman/Dockerfile: build on fedora:35 and fedora:36 21de997 copy_recursive_fd_to_fd(): copy the whole file 3445f0f tests: add tests for covering '--pid-file' and '--no-new-privs' options e48db34 mono: add documentation and tryout example f8b85e8 windows/mono: bind mount windows dlls and runtime config from host 0df040d handler: add support for HANDLER_CONFIGURE_MOUNTS for handlers 6b3b4dc linux: add public api libcrun_container_do_bind_mount for adding ctr mounts 009430c windows: add mono based native dotnet handler eb48a65 cri-o: bump golang to 1.18.1 for capnproto.org/go/capnp 6cc7b03 test: set /crun as safe directory on containers running the tests 2f13875 linux: create missing cwd 1e30424 cgroup: remove tun/tap from the default allow list 6904cf4 cgroup: add support for cpu.idle 2824e92 libocispec: sync from upstream 70deaf0 podman-tests: change default log-driver to k8s-file instead of journald c381048 NEWS: tag 1.4.5 359e26d crun.1: regenerate f0cd1a7 .github: fix CI 9998f00 linux: hooks inherit env if not specified 9e361c8 tests: specify the user in the form UID[:GID] 4a61eb1 github: fix CI db77ef2 libcrun: fix typo 69289ce tests: add an environment variable 81ccd00 criu: add support for different manage cgroups modes 27b7fe5 tests: specify an additional capability to add to the process cdbc357 tests: delete multiple containers a39b07d podman: skip authenticated push 0ce2f2d exec: fix double free 5a528f4 docs: fix dependencies on RHEL/CentOS 8 section cd93941 git-version-gen: fix version comparison 38256da tests: disable failing CRI-O tests 6521fcc NEWS: tag 1.4.4 1aeeed2 exec: --cap do not set inheritable capabilities b847d14 spec: do not set inheritable capabilities ca75d1f feat(terminal-receiver): make terminal interactive ed6e424 remove duplicate "libtool" from install commands d10fe74 linux: resolve symlinks in bind mounts ba17004 tests, clang-check: install git 1a4fae9 rhcontainerbot/podman-next COPR autobuild 77df89b docs: update known issues with CRI and side-cars 164d753 wasm, kubernetes: support wasm for kubernetes infrastructure with side-cars Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> crun: update runtimespec Bumping runtime-spec to version v1.0.2-100-g8d0d6d4, which comprises the following commits: 0da1600 fix rfc link 9d1130d IDMapping field for mount point fc985aa config-linux: update type of LinuxCPU.Idle to *int64 bc545ec schema: add cpu idle 1fef707 Update Windows CPU comments 600a8bd cgroup ownership: clarify that some files may not exist b8dbce9 update idle type of LinuxCPU from *int64 to int64 9d363b3 config-linux: add idle option for container cgroup b05eb53 typo: seccompFD -> seccompFd 0608c1f Switch to GitHub Actions, CODEOWNERS, etc. f4ef391 specify cgroup ownership semantics 104385d config-linux: MAY reject an unfit cgroup 411082c add youki to implementations.md 6641127 alphabetize the implementation list. 84251a4 specs-go: export LinuxBlockIODevice 3f30167 schema: make with golang 1.16 34a7544 schema: update README.md Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* umoci: update to v0.4.7-latestBruce Ashfield2022-08-091-1/+1
| | | | | | | | | | Bumping umoci to version v0.4.7-101-g4270d5b, which comprises the following commits: d8f4f12 build(deps): bump github.com/opencontainers/runc from 1.1.1 to 1.1.2 2163223 *: improve io.Pipe CloseWithError usage aab35e4 *: implement EINTR-retry logic for io.Copy users Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* skopeo: update to v1.8.0Bruce Ashfield2022-08-092-38/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We drop our gpme patch, since it is no longer needed. Bumping skopeo to version v1.8.0-75-gb95e0811, which comprises the following commits: 61593fcc Revert "Change a repo used for sync tests" 62158a58 Vendor unreleased c/image with OCI artifact support 7900440a Use errors.As() instead of direct type checks c654871b Remove uses of pkg/errors 7abcca93 Modify error messages on failures to close f7df4a08 Introduce noteCloseFailure, use it for reporting of cleanup errors 33116235 Bump github.com/stretchr/testify from 1.7.5 to 1.8.0 89089f3a Update IRC information ba6af16e Use bytes.ReplaceAll instead of bytes.Replace(..., -1) 2024e2e2 Update & fix skopeo multiarch image Containerfiles 774ff9d1 Cirrus: Migrate multiarch build off github actions 899d3686 Bump github.com/stretchr/testify from 1.7.4 to 1.7.5 2f77d213 Bump github.com/stretchr/testify from 1.7.2 to 1.7.4 2009d1c6 Bump github.com/spf13/cobra from 1.4.0 to 1.5.0 fe022809 [CI:DOCS] skopeo.spec.rpkg: Fix syntax highlighting 71d450cb [CI:DOCS] Makefile: include cautionary note for rpm target 37388544 CoPR: Autobuild rpm on rhcontainerbot/podman-next 38f4b9d0 Enable schema1 support on the test registries 1b5fb465 Update for docker/distribution CLI change e9ed5e04 Use an updated CI image bbdabebd Change a repo used for sync tests 92c0d0c0 Use testing.T.Setenv instead of os.Setenv in tests a3a72342 Update go.mod to Go 1.17 e9379d15 Bump github.com/docker/docker 69840fd0 Bump github.com/stretchr/testify from 1.7.1 to 1.7.2 63622bc7 Bump github.com/containers/ocicrypt from 1.1.4 to 1.1.5 6b584598 Cirrus: use Ubuntu 22.04 LTS 00a58e48 Update to github.com/opencontainers/runc >= 1.1.2 263a5f01 fix make completions for all POSIX shells 0a3be734 Update to gopkg.in/yaml.v3 v3.0.0 0ad7ec24 Updated skopeo logo with new artwork 014d47f3 [CI:DOCS] Pin actions to a full length commit SHA d78bc827 shell completion: add completion for transports names 6c2a415f shell completion: add install instructions docs 9bed0a9e shell completion: add Makefile target ebc5573e Stop calling gpgme-config 1ebb2520 Update c/image 9b4c1f15 Remove cgo_pthread_ordering_workaround.go 6863fe2d add completion command to generate shell completion scripts 3eca480c Bump github.com/docker/docker 149dea8d Bump github.com/containers/storage from 1.40.2 to 1.41.0 804f7c24 Avoid hard-coding the location of bash e47765ed Config files live in /usr/local/etc on FreeBSD 13ceb93b Bump github.com/docker/docker cd4607f9 Move to v1.8.1-dev 37727a45 Bump to v1.8.0 75d94e79 Bump ocicrypt to v1.1.4 737ed9c2 Vendor in containers/storage v1.40.2 3c286dd1 Vendor in containers/(common, storage, image) b8b0e993 [CI:DOCS] install.md: include distro package info links d9035db6 [CI:DOCS] install.md: remove Kubic package info for Ubuntu 916a395d Cirrus: Update to F36 w/ netavark+aardvark-dns 8960ab3c Update vendor of containers/(common,storage,image) d9d3ceca Use filepath.WalkDir instead of filepath.Walk 23a46057 Extract four copies of the same loop into a function 4811c07d Update users of deprecated io/ioutil 4ef35a38 Add option to specify the identity for signing 38ae81fa Bump containers/image to include sign identity option 9b09b6eb delete non-existent option in the cmdline example c233a6dc Add dry-run mode to skopeo-sync e6802c4d Update skopeoimage/README.md that tags are v-prefixed 80871786 Bump to v1.7.1-dev f45ae950 Release 1.7.0 3bc06242 Bump github.com/prometheus/client_golang to v1.11.1 89cd1951 Bump github.com/containers/common from 0.47.4 to 0.47.5 7f6b0e39 Bump github.com/containers/storage from 1.38.2 to 1.39.0 f6bf5746 Bump github.com/docker/docker a9cc9b91 Improve the (skopeo delete) man page ac7edc7d Bump github.com/containers/ocicrypt from 1.1.2 to 1.1.3 c819bc17 Update the command to install golint 6a2f38d6 Formally record that we require Go 1.15 2019b79c Use check.C.MkDir() instead of manual ioutil.TempDir() calls f79cc8ae Update to Go 1.14 and revendor ac4c291f Use assert.ErrorContains 5aaf3a9e Bump github.com/stretchr/testify from 1.7.0 to 1.7.1 bd524670 Simplify the proxy server a bit 693de29e Add various missing error handling f44ee2f8 Remove assignments to an unused variable a7190099 Rename "self" receiver 7ba56f3f Add support for docker-archive: to skopeo list-tags ad3e8f40 Bump github.com/spf13/cobra from 1.3.0 to 1.4.0 0703ec6c Bump github.com/docker/docker 52002728 Update github.com/containerd/containerd Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-distribution: update to 2.8.1 -latestBruce Ashfield2022-08-091-1/+1
| | | | | | | | | | Bumping docker-distribution to version v2.8.1-2-gdc5b207f, which comprises the following commits: 38018aeb Fix CVE-2022-28391 by bumping alpine from 3.15 to 3.16 96cc1fdb FIx typo e744906f Update 2.8.1. release notes Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce: update to 20.10.17Bruce Ashfield2022-08-091-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping moby to version v20.10.17-2-g3949ff121e, which comprises the following commits: ff7feeac37 vendor: github.com/containerd/continuity v0.3.0 6f3f2b6d08 update containerd binary to v1.6.6 b3bcb15da8 update containerd binary to v1.6.5 f55b030fa0 system: unbreak build for darwin 63ab12cd3a Port pkg/system/mknod.go to FreeBSD 081e538fbd vendor: libnetwork f6ccccb1c082a432c2a5814aaedaca56af33d9ea 8e9d647c01 [20.10] update golang to 1.17.11 87ead7fd2a vendor: hcsshim a11a2c44e8a4aa9d66314b1d759ef582df5ab5e8 27f8322324 vendor: libnetwork 2dab5620d4462865c6151e573b3e7fa5d3b8458b 829951ec19 docs: api: /containers/{id}/attach/ws: remove unsupported query-args < v1.42 6cbe73bfc0 Rename Reservation to Reservations in the open API d9ed3d7e28 update runc binary to v1.1.2 a15acb4bd6 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5f2e0b79ad [20.10] update golang to 1.17.10 Bumping libnetwork to version v0.7.0-dev.3-1835-gf6ccccb1, which comprises the following commits: af0c46d8 Apply peformance tuning to new sandboxes also 23ffb31f Set ExternalPortReserved for dummy proxy 9b82e422 Bump hcsshim 9db86fb7 Only check if route overlaps routes with scope: LINK Bumping docker-cli to version v20.10.17, which comprises the following commits: 7502d7e56 Fix dead external link 308624c3b fix: remove asterisk from docker command suggestions de7d866b6 [20.10] update golang to 1.17.11 240e4b550 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5d4776bd9 [20.10] update golang to 1.17.10 49e9c2ae3 vendor: golang.org/x/sys 63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17) 87a3ce269 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456 1d8abed17 vendor: update x/sys to 134d130e 31dad66f9 [20.10] update golang to 1.17.9 80f673bf9 gofmt with go1.17 3d4cc8e69 [20.10] update remaining files to go1.17.8 30277a8f8 update go to 1.17.8 cfef3a7dc docs: deprecated: add entry for "fluent-async-connect" log-opt 53426025c [20.10] docs: reformat table for compatibility 573a66463 Describe privileged mode in terms of capabilities cf0ab7ac4 [20.10] vendor: github.com/docker/distribution v2.8.1 d05fd4ffc [20.10] vendor: github.com/opencontainers/image-spec v1.0.2 870f13825 [20.10] vendor: github.com/docker/docker v20.10.14 198d6b872 [20.10] circleci: update buildx to v0.8.2 55a14ec85 [20.10] update remaining Dockerfiles to go 1.16.15 1f9a0df05 e2e: update docker-compose to 1.29.2 4ae338b33 docs: reference: remove trailing space to fix yaml formatting 6380142dd docs: fix (table) formatting, fix some broken links 82f422fcf docs: build: fix minor markdown and syntax issues 80fd77903 Update the list of log drivers c3d4d623c Fix CMD --ignored-param1 example 2e82d11de docs: dockerd: fix broken link in blockquote area 738a6ee1c improve cp documentation with some illustration examples 246d96bb6 docs: unify "docker create" and "docker run" reference 2fd0f1705 docs: add missing documentation for --pull flag 5fa500000 Fix incorrect pointer inputs to `json.Unmarshal` 1e6a8ce2b Dockerfile: update xx to 1.1 6f7a931a2 [20.10] use GO_LDFLAGS instead of LDFLAGS to prevent inheriting unrelated options 91bab605f [20.10] vendor.conf: don't use git:// protocol a282e0c5d [20.10] update to go 1.16.15 to address CVE-2022-24921 700364e30 Fix mistake with env var example in docker run docs 62d27c32f Update WORKDIR command information c0e952cf0 Fix the (dead) link for docs for Dockerfile syntax reference 04104a04d Update dockerd.md b721998b7 Fixing typo (his --> its) 4065e1246 format create.md table f1002eb9f Fix typo e97c7b240 added missing closing parenthese aa7893763 Update stats.md add example json output 40fe0573a Update Ubuntu version number references in push.md c9737e1c3 docs/daemon: replace deprecated '-g' option for '--data-root' 5c6723d08 Correct device syntax to --gpus fd5fc61ec [20.10] Update Go to 1.16.14 3624019d8 [20.10] update Go to 1.16.13 f3ff8e6ad [20.10] vendor: compose-on-kubernetes v0.5.0 to remove github.com/golang/glog ee1ac1b31 fix innocuous data-race when config.Load called in parallel 38dd744a1 [20.10] Update Go to 1.16.12 4de40a825 Update Go to 1.16.11 03fa8f92c Update Go to 1.16.10 9989fdbc4 Update most links in docs to use https by default 0e20c1fd2 Update Go to 1.16.9 1c0927a04 Dockerfile: update tonistiigi/xx to 1.0.0-rc.2, add XX_VERSION arg 82f9d5921 info: skip client-side warning about seccomp profile on API >= 1.42 adb01ca79 docs: some minor touch-ups in checkpoint reference 8260476a0 docs: remove trailing space to fix generated YAML format bce2e1f95 docs: create.md: typo fix 44064f51c Fix typo in documentation - build.md 292779add Add doc for BUILDKIT_PROGRESS env var f2e79b826 docs: use "console" code-hint for shell examples fa46b9236 docs: rewrite reference docs for --stop-signal and --stop-timeout 400f81089 experimental: fix broken link to "checkpoint and restore" page c72057c8d docs: move checkpoint/restore doc from experimental into reference 77db97d59 Use private network address for default-address-pools setting in daemon.json example cbf0d2b7b docs: fix some broken anchors d0014a86b docs: fix description of restart-delay to mention max (1 minute) 6c1c8b55a docs: fix search results by filterd is-official 44fdac11f Update Go to 1.16.8 061051c24 docs: add missing redirect, and remove /go/experimental redirect 2012fbf11 Update Go to 1.16.7 42d1c0275 registry: ensure default auth config has address Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-moby: update to 20.10.17Bruce Ashfield2022-08-092-13/+10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping moby to version v20.10.17-2-g3949ff121e, which comprises the following commits: ff7feeac37 vendor: github.com/containerd/continuity v0.3.0 6f3f2b6d08 update containerd binary to v1.6.6 b3bcb15da8 update containerd binary to v1.6.5 f55b030fa0 system: unbreak build for darwin 63ab12cd3a Port pkg/system/mknod.go to FreeBSD 081e538fbd vendor: libnetwork f6ccccb1c082a432c2a5814aaedaca56af33d9ea 8e9d647c01 [20.10] update golang to 1.17.11 87ead7fd2a vendor: hcsshim a11a2c44e8a4aa9d66314b1d759ef582df5ab5e8 27f8322324 vendor: libnetwork 2dab5620d4462865c6151e573b3e7fa5d3b8458b 829951ec19 docs: api: /containers/{id}/attach/ws: remove unsupported query-args < v1.42 6cbe73bfc0 Rename Reservation to Reservations in the open API d9ed3d7e28 update runc binary to v1.1.2 a15acb4bd6 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5f2e0b79ad [20.10] update golang to 1.17.10 Bumping libnetwork to version v0.7.0-dev.3-1835-gf6ccccb1, which comprises the following commits: af0c46d8 Apply peformance tuning to new sandboxes also 23ffb31f Set ExternalPortReserved for dummy proxy 9b82e422 Bump hcsshim 9db86fb7 Only check if route overlaps routes with scope: LINK Bumping docker-cli to version v20.10.17, which comprises the following commits: 7502d7e56 Fix dead external link 308624c3b fix: remove asterisk from docker command suggestions de7d866b6 [20.10] update golang to 1.17.11 240e4b550 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5d4776bd9 [20.10] update golang to 1.17.10 49e9c2ae3 vendor: golang.org/x/sys 63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17) 87a3ce269 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456 1d8abed17 vendor: update x/sys to 134d130e 31dad66f9 [20.10] update golang to 1.17.9 80f673bf9 gofmt with go1.17 3d4cc8e69 [20.10] update remaining files to go1.17.8 30277a8f8 update go to 1.17.8 cfef3a7dc docs: deprecated: add entry for "fluent-async-connect" log-opt 53426025c [20.10] docs: reformat table for compatibility 573a66463 Describe privileged mode in terms of capabilities cf0ab7ac4 [20.10] vendor: github.com/docker/distribution v2.8.1 d05fd4ffc [20.10] vendor: github.com/opencontainers/image-spec v1.0.2 870f13825 [20.10] vendor: github.com/docker/docker v20.10.14 198d6b872 [20.10] circleci: update buildx to v0.8.2 55a14ec85 [20.10] update remaining Dockerfiles to go 1.16.15 1f9a0df05 e2e: update docker-compose to 1.29.2 4ae338b33 docs: reference: remove trailing space to fix yaml formatting 6380142dd docs: fix (table) formatting, fix some broken links 82f422fcf docs: build: fix minor markdown and syntax issues 80fd77903 Update the list of log drivers c3d4d623c Fix CMD --ignored-param1 example 2e82d11de docs: dockerd: fix broken link in blockquote area 738a6ee1c improve cp documentation with some illustration examples 246d96bb6 docs: unify "docker create" and "docker run" reference 2fd0f1705 docs: add missing documentation for --pull flag 5fa500000 Fix incorrect pointer inputs to `json.Unmarshal` 1e6a8ce2b Dockerfile: update xx to 1.1 6f7a931a2 [20.10] use GO_LDFLAGS instead of LDFLAGS to prevent inheriting unrelated options 91bab605f [20.10] vendor.conf: don't use git:// protocol a282e0c5d [20.10] update to go 1.16.15 to address CVE-2022-24921 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o: update to 1.25Bruce Ashfield2022-08-091-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping cri-o to version v1.24.0-189-g78992d160, which comprises the following commits: 3e085ffc3 build(deps): bump github.com/containers/buildah from 1.26.1 to 1.26.2 4ca27d0b0 Remove enable_custom_shm_size 4149fa03e Add annotations to allow power management configuration 0f4d79209 Fix release notes pull behavior 44d42542f oci: unconditionally set as not stopping after a stop stops stopping 56b807510 container_server: drop StopContainerAndWait b4ddab0e7 server: take container server Stop method 7cda39bb4 container server: drop duplicated Remove function f03e563ec config: set version-file-persist to empty by default 935652c90 version: don't wipe if filename is empty 2e3b19475 bundle: always install runc c57d3b05c scripts: install runc if not found in get script 6d729cd4d remove Vagrantfile 87a4e8eb7 Fix a link in install.md building section about dependencies e8e523dda Retry release notes push if failed ee80a2b9e Bump version to 1.25.0 c00962a51 build(deps): bump github.com/stretchr/testify from 1.7.5 to 1.8.0 a2d1ca204 server: userns support 41f67c326 vendor, kubernetes: update to kubernetes-1.25.0-alpha.2 df5e39094 Fix release-notes tag determination b068d17cf Upload release notes for each tag 66d33db6b Fix unit test coverage f61332ed9 hostport: don't use unexported symbol 01a7c0276 server: use k8s.io/utils/clock 20ef6c73e update ubuntu releases 8a981fef4 Pin upstream node e2e test to latest `main` 7f0604ceb Verify SBOM for static binary bundle 489caa132 Use default token for stale bot 0a3bfc078 Switch to golang native error wrapping b86d8c343 build(deps): bump github.com/stretchr/testify from 1.7.4 to 1.7.5 80d1d7908 Run more stale operations da2dce1e1 chore: Set permissions for GitHub actions c800d043b build(deps): bump github.com/urfave/cli/v2 from 2.10.2 to 2.10.3 e30ae00a1 Add stale bot workflow 863d1a334 cgmgr/systemd: don't recalculate cgroup path d94e48924 build(deps): bump sigs.k8s.io/bom from 0.3.0-rc1 to 0.3.0-rc.2 8c7cc72e4 Generate SBOM for static binary bundle 26138ec52 build(deps): bump k8s.io/klog/v2 from 2.60.1 to 2.70.0 0cdf37c86 Verify signed artifacts via `get` script fdb6c3b30 server: unify logging in resourcecleaner 896456bc8 server: move cleanup funcs closer to function that provisioned resource 49ad4b0ad build(deps): bump github.com/urfave/cli/v2 from 2.10.1 to 2.10.2 7b2475303 build(deps): bump github.com/stretchr/testify from 1.7.3 to 1.7.4 0f46b58cb Fix container status for HostToContainer propagation 99d86536e Fix docs validation 9f105d8f0 build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.7.3 748fd5d2e build(deps): bump github.com/urfave/cli/v2 from 2.8.1 to 2.10.1 93fc6b72e build(deps): bump github.com/containers/podman/v4 from 4.1.0 to 4.1.1 491b03a30 Update cgroupfs cgroup manager de8672f7e contrib/test/int/build/runc: rm build tags 0b3153d7d Bump runc to v1.1.3 a3171b395 Sign static binary bundle via cosign 704f9aeb6 dependencies: update conmon 333cc8988 contrib/test/integration: skip installing conmon via ansible 4b120cbef Fix lint CI 40df9c9ae Bump `go.opentelemetry.io/*` dependencies 06b6e86b2 Bump `containers/*` dependencies 67c18103e Cleanup: remove BuildContainerdBinaryName as it is not called anymore. b480e8a3b Bump golang dependency on containerd 864733f77 build(deps): bump actions/checkout from 2 to 3 e2a32f36c bump ocicni to v0.4.0 63399460e build(deps): bump github.com/containers/ocicrypt from 1.1.3 to 1.1.5 e67e36753 build(deps): bump google.golang.org/grpc from 1.46.2 to 1.47.0 24d401919 Bump golang dependencies f72969022 Fix unit tests 37c1a01fe drop use of deprecated package io/ioutil 8bdadc77c security: add 2022 audit report 79e404fa5 conmonmgr: query help text to see if it supports log-global-size-max a4080bb34 add support for conmon log-global-size-max b7f15ac3d oci: cap exec sync length 1e277b836 utils/RunUnderSystemdScope: fix wrt channel deadlock 03e4aa482 Bump cri-tools to v1.24.2 2fbf71963 test: set cri stats more idiomatically efff3878c server: reduce object creation in List{Containers,PodSandboxes} 0cde0a6de update kubeadm init instructions e5bb0c600 docs: update for CNI package change 62a14cf91 oci: reuse helper function to reduce duplication 9fea6e219 oci: kill children of container if it is in the host pid namespace f6d963871 Add pause/unpause description to readme 35ca21623 Fix review issues fa435f79c Use a default umask of `0o022` 6293c07b9 Fix it case failed 5d75cc24a Fix review issues 26432e631 changesinREADME 908111147 move 1.23 to 1.24 in README 85bcbe8d1 OWNERS: remove fgiudici eb41d30e0 build(deps): bump actions/download-artifact from 2 to 3 c14faa62e build(deps): bump golangci/golangci-lint-action from 2 to 3 7fe39c7bc Add integration test for remove paused ctr 33997ae93 vendor: bump crypto package 8a090364d 1.When in paused state, stop contianer should unpause it 2.We should treat paused state as running, or kubelet will delete it and restart one 1e61f1318 build(deps): bump actions/setup-go from 2 to 3 c40fa5350 fix review issues 985c182a4 build(deps): bump google.golang.org/grpc from 1.43.0 to 1.46.2 cef56110d build(deps): bump actions/upload-artifact from 2 to 3 e932964fc build(deps): bump cachix/install-nix-action from 12 to 17 bf67bfd4f build(deps): bump actions/cache from 2 to 3 7db2b3b39 Try to force delete ctr when in paused state 0c1bf03fa chore: Included githubactions in the dependabot config c657f4623 Fix some uses of Atoi 54d7da638 typo fix 2b8a7055c Typo fix d4ec76bd4 Add CodeQL Github actions ed53fa23b Use go 1.18 buildinfo for version output 21c8f6bde Bump third party dependencies d68931ddb Run critest with conmonrs Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o: update to 1.24.1 -latestBruce Ashfield2022-08-091-1/+1
| | | | | | | | | | | | | | | | | | | | Bumping cri-o to version v1.24.1-18-gb0d2ef327, which comprises the following commits: 81ef20b38 Fix unit test coverage 7b4941478 Fix release-notes tag determination 0dde66a3c Upload release notes for each tag 29762438c Fix container status for HostToContainer propagation 2cf9cf9df bump ocicni to 0.4.0 5481d35e9 Fix unit tests b0040ddd9 test: set cri stats more idiomatically cf0037d1a utils/RunUnderSystemdScope: fix wrt channel deadlock 5b75a4763 oci: kill children of container if it is in the host pid namespace 489819e33 bump to v1.24.1 8acadd3f4 conmonmgr: query help text to see if it supports log-global-size-max fc852b402 add support for conmon log-global-size-max 77f0429d9 oci: cap exec sync length Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc-docker: update to 1.1.3Bruce Ashfield2022-08-091-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping runc to version v1.1.3-2-g1e7bb5b7, which comprises the following commits: eb1552a0 VERSION: back to development 6724737f VERSION: release 1.1.3 91fa032d ci: add basic checks for CHANGELOG.md 7219387e cgroups: systemd: skip adding device paths that don't exist 93d1807b libcontainer: relax getenv_int sanity check 8242c05d script/seccomp.sh: check tarball sha256 017cb29b Dockerfile,scripts/release: bump libseccomp to v2.5.4 51649a7d Allow mounting of /proc/sys/kernel/ns_last_pid 3a09da6b ci: drop docker layer caching from release job 8b93f9fb seccomp: enosys: always return -ENOSYS for setup(2) on s390(x) fc2a8fe1 libct/cg/sd: check dbus.ErrClosed instead of isDbusError d105e052 libct/seccomp/config: add missing KillThread, KillProcess e4474ef8 [1.1] vendor: bump seccomp/libseccomp-golang to f33da4d dc083b2b fix deprecated ActKill bf1cd884 ci: use golangci-lint-action v3, GO_VERSION 1feafc31 ci: bump golangci-lint to v1.44 89f79ff0 libct: StartInitialization: fix %w related warning 3b7f2605 Format sources using gofumpt 0.2.1 eeac4e77 build(deps): bump actions/checkout from 2 to 3 cd7fa00d Vagrantfile.fedora: fix build wrt new git Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc: update to 1.1.3Bruce Ashfield2022-08-091-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping runc to version v1.1.3-2-g1e7bb5b7, which comprises the following commits: eb1552a0 VERSION: back to development 6724737f VERSION: release 1.1.3 91fa032d ci: add basic checks for CHANGELOG.md 7219387e cgroups: systemd: skip adding device paths that don't exist 93d1807b libcontainer: relax getenv_int sanity check 8242c05d script/seccomp.sh: check tarball sha256 017cb29b Dockerfile,scripts/release: bump libseccomp to v2.5.4 51649a7d Allow mounting of /proc/sys/kernel/ns_last_pid 3a09da6b ci: drop docker layer caching from release job 8b93f9fb seccomp: enosys: always return -ENOSYS for setup(2) on s390(x) fc2a8fe1 libct/cg/sd: check dbus.ErrClosed instead of isDbusError d105e052 libct/seccomp/config: add missing KillThread, KillProcess e4474ef8 [1.1] vendor: bump seccomp/libseccomp-golang to f33da4d dc083b2b fix deprecated ActKill bf1cd884 ci: use golangci-lint-action v3, GO_VERSION 1feafc31 ci: bump golangci-lint to v1.44 89f79ff0 libct: StartInitialization: fix %w related warning 3b7f2605 Format sources using gofumpt 0.2.1 eeac4e77 build(deps): bump actions/checkout from 2 to 3 cd7fa00d Vagrantfile.fedora: fix build wrt new git Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: Use gcc-based toolchainAndrei Gherzan2022-08-031-0/+3
| | | | | | | | clang-based builds are still broken due to: https://github.com/llvm/llvm-project/issues/53999 Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: Backport patch to fix duplicate switch statementsAndrei Gherzan2022-08-032-0/+91
| | | | | | | This will fix clang-based builds. Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* containerd: update to 1.6.6Bruce Ashfield2022-08-031-4/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping containerd to version v1.6.6-10-g4e92d8e7e, which comprises the following commits: 37dfc5c9d [release/1.6] Fix WWW-Authenticate parsing fa2016d58 [release/1.6] Downgrade MinGW to version 10.2.0 99c56d217 ctr: fix label args used in NewContainer 51de785f8 [release/1.6] Make building static binaries simpler 2ea4e6348 update runc binary to v1.1.3 61213742a Prepare release notes for v1.6.6 f92068350 Implicitly discard the input to drain the reader 2eb67213b [release/1.6] Limit the response size of ExecSync 185e87275 Prepare release notes for v1.6.5 5c9c83d3e [release/1.6] update golang to 1.17.11 fdcdc27bc update go-cni/for cni update fixing plugins that don't respond with version e33b9e709 archive: add human-readable hint to Lchown error 3bb5a9d19 config: improve config v1 deprecation message 6eff5b6c0 [release/1.6] go.mod: Bump hcsshim to 0.9.3 f1d2d9260 [release/1.6] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 9f99be51b [release/1.6] update golang to 1.17.10 246a1b42e vendor: github.com/opencontainers/runc v1.1.2 43717e03a update runc binary to v1.1.2 82a77be2d reverts removal of parallel run from critest 06bdfeb67 Allow git commands in Vagrantfile 70839a344 Bug fix for mount path handling 1520bae0f update critools to v1.24 0d1d2953b Prepare release notes for 1.6.4 42d691fe6 Bump opencontainers/selinux from 1.10.0 to 1.10.1 e9f22e008 Update go-cni to v1.1.5 be4909e95 cri: close fifos when container is deleted baa386dc0 Prepare release notes for v1.6.3 e8da82adc tracing: fix panic on startup when configured 1764ea9a2 CRI: improve image pulling performance 9cd76d465 [release/1.6] update golang to 1.17.9 c09cc1242 check for duplicate nspath possibilities fe6ba62ce metrics/cgroups: fix deadlock issue in Add during Collect 8b81a7843 [release/1.6] go.mod: update image-spec to merge-commit of v1 into main f2ba2041b update runc binary to v1.1.1 b736b4dab go.mod: github.com/opencontainers/runc v1.1.1 72f1e58c7 CI: add Rocky Linux 8 7ede40c5c [release/1.6] vendor: github.com/containerd/imgcrypt v1.1.4 5538be6cf cgroup2: monitor OOMKill instead of OOM to prevent missing container OOM events da35c19da Test turning off golang CI lint cache a0213573b Add nolint:staticcheck to platform-specific calls ad0036ed6 Update prometheus client vendor c7bbf316f Mount devmapper xfs file system with "nouuid" option. a1de89c3e Make the temp mount as ready only in container WithVolumes 82a12edf2 moving up to go-cni v1.1.4 28b44826b native: fix deadlock from leaving transactions open 8461dd6e5 Prepare release notes for v1.6.2 91800c4e9 Add static checks to shim for Windows ca51d7f85 Update go.mod go version 765df6609 [release/1.6] remove empty go mod to allow building for go 1.18 e9af80859 Fix the Inheritable capability defaults. 7c929318a Update TestNormalize to only test Windows 06985e7d0 Upgrade golangci-lint and its GitHub Action b13d3e05c cri: relax test for system without hugetlb Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman; fix patch fuzz/failureBruce Ashfield2022-07-171-19/+17
| | | | | | | | | | patch a33188f [podman: Fix host contamination] appears to have introduced fuzz/failures. Which strangely wasn't picked up on merge testing. We refresh the patch to fix the issues. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: Add support for rootless modeAndrei Gherzan2022-07-152-1/+16
| | | | | | | This support is disabled by default and exposed via PACKAGECONFIG. Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: Silence docker emulation warningsAndrei Gherzan2022-07-151-0/+4
| | | | | | | | | Podman can run in via a docker symlink emulating docker commands. By default this generates a runtime warning. This change silences it via the provided interface. Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: Fix host contaminationAndrei Gherzan2022-07-052-0/+126
| | | | | | | | | | | | | | | | The project's internal Makefile uses BUILDFLAGS variable to pass arguments to `go build` while Yocto/OE defines it as GOBUILDFLAGS. Add a patch to align this and avoid using host headers in which case, a musl build will fail similarly to: | [...]ld: /tmp/go-link-3172010154/000015.o: in function `vfprintf': | /usr/include/x86_64-linux-gnu/bits/stdio2.h:130: undefined reference to `__vfprintf_chk' | [...]ld: /tmp/go-link-3172010154/000016.o: in function `fprintf': | /usr/include/x86_64-linux-gnu/bits/stdio2.h:100: undefined reference to `__fprintf_chk' | collect2: error: ld returned 1 exit status Signed-off-by: Andrei Gherzan <andrei.gherzan@huawei.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* buildah: add recipe for buildah v1.26sakib.sajal@windriver.com2022-06-201-0/+57
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | buildah is a command line tool, to be installed and run on target, that can be used to: - create a working container, either from scratch or using an image as a starting point - create an image, either from a working container or via the instructions in a Dockerfile - images can be built in either the OCI image format or the traditional upstream docker image format - mount a working container's root filesystem for manipulation - unmount a working container's root filesystem - use the updated contents of a container's root filesystem as a filesystem layer to create a new image - delete a working container or an image - rename a local container Testing: Setup the build directory: $ . oe-init-build-env <build_dir> Add to local.conf: IMAGE_INSTALL:append = " buildah kernel-modules" KERNEL_FEATURES += "features/overlayfs/overlayfs.cfgi \ features/netfilter/netfilter.scc \ features/lxc/lxc-enable.scc" IMAGE_ROOTFS_EXTRA_SPACE = "5242880" Build image: $ bitbake core-image-minimal Run the image: $ runqemu nographic kvm qemuparams="-m 4096" On target: Pull an image: > cnt=$(buildah from fedora) Or build from Dockerfile > buildah bud -t <image_name>:<tag> . Mount the image: > mnt=$(buildah mount ${cnt}) Install packages on the container rootfs: > dnf install --installroot $mnt <packages_to_install> -y Copy local files to the container: > buildah copy $cnt <local_file> <dest_on_container> Save the changes to an image > buildah commit --format docker $cnt <name>:<tag> Run the image using buildah: > buildah run $cnt /bin/sh Or using docker: > docker run -it <name>:<tag> Signed-off-by: Sakib Sajal <sakib.sajal@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* oci-image-tools: adjust GOROOT, CGO_CFLAGS and CGO_LDFALGSChen Qi2022-06-201-3/+3
| | | | | | | | | | | Adjust the GOROOT setting as directory specified by the original one does not exist. The CGO_CFLAGS and CGO_LDFLAGS should use target flags instead of the nativesdk ones. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* riddler: adjust GOROOT, CGO_CFLAGS and CGO_LDFALGSChen Qi2022-06-201-3/+3
| | | | | | | | | | | Adjust the GOROOT setting as directory specified by the original one does not exist. The CGO_CFLAGS and CGO_LDFLAGS should use target flags instead of the nativesdk ones. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* oci-runtime-tools: adjust GOROOT, CGO_CFLAGS and CGO_LDFALGSChen Qi2022-06-201-3/+3
| | | | | | | | | | | Adjust the GOROOT setting as directory specified by the original one does not exist. The CGO_CFLAGS and CGO_LDFLAGS should use target flags instead of the nativesdk ones. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* umoci: adjust CGO_CFLAGS and CGO_LDFLAGS settingsChen Qi2022-06-201-2/+2
| | | | | | | | The CGO_CFLAGS and CGO_LDFLAGS should use target flags instead of the nativesdk ones. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* skopeo: clean up depends and fix CGO settingsChen Qi2022-06-201-3/+2
| | | | | | | | | | | According to https://github.com/containers/skopeo/blob/main/install.md#building-from-source, the ostree dependency is not needed. Also, adjust the CGO_CFLAGS and CGO_LDFALGS to use target flags instead of the SDK ones. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-distribution: upgrade to 2.8.1Chen Qi2022-06-201-3/+3
| | | | | | | v2.8.1 is the latest stable version. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-distribution: fix build error on new hostsChen Qi2022-06-201-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | Fix settings for GOROOT, CGO_CFLAGS and CGO_LDFLAGS. The previous setting for GOROOT is no longer valid as the directory does not exist for now. So adjust the GOROOT setting. Currently CGO_CFLAGS is set to use BUILDSDK_CFLAGS, and this is incorrect. We need target flags instead of SDK related flags. Such setting happens to work for some hosts. However, when building on newer hosts, we get QA error like below: ERROR: docker-distribution-v2.7.1-r0 do_package_qa: QA Issue: /usr/sbin/registry contained in package docker-registry requires libc.so.6(GLIBC_2.34)(64bit), but no providers found in RDEPENDS_docker-registry? [file-rdeps] The above error was found on hardknott on host Fedora 35. Tracking down the error and I found it's using host stuff which is likely to be caused by using incorrect CGO_CFLAGS. As the master branch is using the same settings, it has the same issue. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-distribution: fix the inehrit and systemd settingsChen Qi2022-06-201-2/+2
| | | | | | | | | | | | In order for systemd variables such as SYSTEMD_AUTO_ENABLE to have effect, we need to inherit the systemd class. We also need to specify the package which contains the service. As go.bbclass already inherits goarch.bbclass, we only need to inehrit go.bbclass. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* k3s: update recipe formatting and map googlesource to githubBruce Ashfield2022-06-202-2585/+3084
| | | | | | | | | | Reformat the k3s depedencies and src_uri into a more readible and maintainable format. We also map googlesoruce to github for better fetching, as suggested by Diego Sueiro <diego.sueiro@arm.com>. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* cri-o: update to 1.24.1Bruce Ashfield2022-06-073-55/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping cri-o to version v1.24.1 We refresh one patch, add add textrel to our QA check skip list. Which imports the following commits: 489819e33 bump to v1.24.1 8acadd3f4 conmonmgr: query help text to see if it supports log-global-size-max fc852b402 add support for conmon log-global-size-max 77f0429d9 oci: cap exec sync length 9441b6700 Fix review issues ee1a8519f Fix it case failed 027ab3f50 Fix review issues db4a4aa51 Add integration test for remove paused ctr 76d1a929e 1.When in paused state, stop contianer should unpause it 2.We should treat paused state as running, or kubelet will delete it and restart one 3b25e48e4 fix review issues eff3af248 Try to force delete ctr when in paused state 62d81d722 vendor: bump crypto package 3d516c53b oci: Move exec probe process to container cgroup, if enabled 8294126fa config: Add monitor_exec_cgroup config option 9a2723cb4 Reenable pod runtime in package spec ae024bd0a dependencies: Upversion conmon dependency to v2.0.27 1737a4702 Sanitize conmonrs log level and print used version 5658fd35a Wrap runtime pod errors b4bbd4d94 openshift test: use go 1.18 aa13dfb7b openshift test: add skip_pod_runtime to cri-o spec d6aff5b63 Bump nixpkgs and use go1.18 4864ffc60 Fix golangci-lint errors d0664581d add runtime pod c33e14fc1 vendor conmon-rs 3b80d009b oci: add IsInfra method 0f601939e oci: lock for runtime creation 1376307fb test: use go 1.18 for lint b98f15851 Move WillRunSystemd call after iterating the mounts 2a75c8307 Add sha256sum bundle files to uploaded artifacts 9f6a6724d crio:fix a bug about log container 901310bdd oci: use runtime handler level monitor fields 12758b2b3 config: assume default conmon cgroup if it's not specified 240de5f3f template: add comment to runtimes table 5a8223c75 config: replace Conmon specific fields with runtime handler versions de2105a17 main(): don't treat reexec.Init() == true as an error 1de3e5ed2 crio:try fix integration test failed, because unpause not on time 6dfc68de4 config: increase pids limit to unlimited and deprecate it and logSizeMax 9ff165b4e bump ocicni to 0.3.1 b447dff77 bump containernetworking cni to 1.1.0 3fa33fe48 crio: unpause ctr after test 8e9ddee87 crio:fix golint check warning 019c578fa fix(stats): incorrect id on zfs driver 153bb668c crio:fix crun it failed 87f7f00f3 crio:update status after pause/unpause container 54912d7c8 oci: cleanup log path if the container failed to create 7a65dc340 utils: remove unused io related packages 9b111b532 runtime_vm: use containerd deps for container io directly 2da7482db remove the external dependency on the conntrack binary 1955cc167 go.{mod,sum}: update CDI deps to v0.3.2. a8687861c server: no longer use hardcoded timeouts 64270ef91 fix builds by passing -buildvcs=false on 386 48230e006 test: bump to go 1.18.1 d41e3cbe6 Disable systemd-mode cgroup detection conditionally e10376810 crio: Fix review issues and make format shell file 78308acd4 Add bats test to ensure namespaces are cleaned up on pod stop ec1414424 pinns: Check calloc return value adfe57b5d bump to 4.11 image 5e72b4133 crio: Fix code style 270d195ec crio: implement extended interface for pause/unpause container 31c278301 seccomp: drop unshare syscall from default profile 1098cc9b9 Retry to set CPU load balancing before return the error 7ccafd559 build(deps): bump github.com/BurntSushi/toml from 0.4.1 to 1.1.0 9b735153b Fix integration tests 862b27b8c Switch to registry.k8s.io for the sandbox Image: 9ebdeef1e Change the mcs order in selinux.bats to test the canonization of selinux label 1a9a3fdae Canonize selinux label for comparison with filesystem label b106fcd71 oci: fix segfault in pod stop code 3e9d77257 capabilities: drop inheritable afe738b18 Bump ocicni to v0.3.0 7b5a67f51 Switch to ginkgo/v2 1999baa2f Add bats test for infra_ctr_cpuset taskset 9fada28f7 Add bats test for zombie conmon cleanup 15afd20ee Update golangci-lint and config 13d7b9738 Bump golang to 1.18.x 1af1f8af2 pinns: Pass sysctls as repeated '-s' arguments eb8715d30 Fix shell format c3095bf20 README: Update EOL & Version Skew links 05c443b06 config/sysctl: fail if there is a + in the value ea39e74f2 Fix critest 739379b0c Enable `--seccomp-use-default-when-empty` by default 98c18d1cb test: update to new runc behavior 4cb2407a2 Automatically chcon and restorecon on get script bef94e1f8 Pin `github.com/u-root/u-root` 3be4dba79 Switch to `main` for `get` script 09399e41f Bump nixpkgs 51a800af0 Pin nixos/nix version 97df87f71 test: allow state of failing tests to be kept intact. 32d682800 factory: take capabilities setup a643dad27 Add dedicated security information d65414758 test/crio-wipe.bats: don't nuke $TESTDIR too early. ff36ee6e0 test/cgroups.bats: fix incorrect setup order. 128165130 test/cdi.bat: add CDI integration tests. a0d3fd8aa config,cli: add configuration for CDI. f35fba448 pkg/container: implement CDI device injection. 572616137 go.{mod,sum}: update deps, vendor. 683baa221 contrib/test: force BATS symlink in place. 0be4d0611 contrib/test: always install BATS for integration. 2426bdb4c openshift e2e: bump cri-o version e337fa364 bump to 1.24.0 5cad5f287 test: avoid concurrent crictl config writes. bc240fd4c server: stop deleting pod from idIndex if already gone a4b5f0c15 CI: use kubernetes from git tip 03064f4ca test/e2e: update skipped test list 65f93912d contrib/test/int/build/kubernetes: rm deprecated RunAsGroup 2e7a4d375 server: use syncfs instead of fsync d9102e748 config/sysctls: validate against invalid spaces 230409570 [gitpod] use latest workspace full 6c3144af2 hack/build-rpms.sh: fix yum-builddep failures 52adfe025 ci: bump shellcheck to 0.8.0 92edea6dd test/apparmor: suppress bogus SC2031/2031 ca10da055 test/cni_plugin_helper: suppress shellcheck warning 0655dd213 test/test_runner: rm eval, fix comment 1acde4379 OWNERS: move rhatdan to emeritus approvers d280c71ce OWNERS: move runcom to emeritus approvers 4041adc55 utils: Sync: use f.Sync 14d742672 Deny empty `localhost/` AppArmor profiles bd02dac92 OWNERS: add first round of reviewers 626446e5c OWNERS: Move @sboeuf to emeritus approver 8aab1e8f2 int/storage: getReferences: fix gocritic warning f1ca25bc5 server: fix (rather than ignore) gocritic warning bc839156e server/streaming: specify the linter fa2fd247f ci: bump golangci-lint to 1.44.0 cc6ed292b scripts/release-notes: fix printf args f0e70901e scripts: fix a typo b1705dc28 int/version: fix forcetypeassert linter warning 851916f0d server/container_create_linux: fix forcetypeassert warning a2760072b utils: fix forcetypeassert linter warnings d295f8b24 server/streaming: fix nolintlint warning dd70c87ab int/storage: fix gosimple warning f26fafdc5 int/config/cgmgr: fix stylecheck warnings bc91cdb57 Format code using gofumpt 0.2.1 98d945cc9 Makefile: fix a comment bb96cd907 test/crio-wipe: fixups 107fe3853 ISSUE_TEMPLATE: fix grammatical error 1affa13d9 OWNERS: move @sameo to emeritus_approvers 4dc761f9f ISSUE_TEMPLATES: update membership form to be reviewer form 592aa5159 ISSUE_TEMPLATES: add a couple of more 238e4d009 image: use imageCache value for ImageStatus() 411e15058 contrib/bundle: remove deprecated kubelet option. 15048929c minor edit: removed dead link from TOC 0dd5d2d00 oci: drop WaitContainerStateStopped 6449ff0d3 oci: fix a leaked goroutine 40165cb5b internal/factory/container: initialize from pkg/container 0dabb91b3 internal/factory/sandbox: initialize from pkg/sandbox 6e2472c92 README: update branches a0f88d3a5 Updated format a53f1d221 Generate checksum files for artifacts 728731808 test: add test for skipped sysctls 1667b5a66 server: skip sysctls that would affect the host a7ac4683c deep copy List{PodSandbox,Container} structs 183ac018f GOVERNANCE: fix links 18dfcd273 oci: always have conmon log to syslog c424e85e7 README: add reference to governance 008b3541a add GOVERNANCE.md 33063001c issue templates: add membership request form aa8130f62 Add Debian_11 OS variable on installation instructions of Debian Signed-off-by: Wang Kai <persistence201306@gmail.com> e5dad09ee criocli: produce diff-friendlier zsh completions. b299c80c5 ci: use main branch for conmon bcf069b12 server: fix race with kubelet 0769411bb Fix runtime panic on pod sandbox stats retrieval ef1746095 update go to 1.17 in go.mod acde72556 Reuse createContainerIO in CreateContainer 0731a9b57 Fix vm containers couldn't restore after CRI-O restart 386d4a447 ci: use main version of runc 28585442e openshift e2e: bump ci image 35c02b56e server: fix a potential NULL-pointer dereference. 20370fa95 Documentation: expand on CNI CIDRs in the kubeadm tutorial 143a623ad test: update tests for allowed_devices 56929cdb9 config: add AllowedDevices option 2aceed0f0 pass the main mount point to fix crypto profiles binding 6b887e9c3 Add Nestybox to the CRI-O adopters list. 33e25b47b server: drop duplicate log message 25a2eec40 pkg/container: fix container device GID fallback. a68b239af bump crio commit for upstream k8s CI d7da8b2b0 adds config template linting 86e43fc28 adds comments to default values ff2a04e8b server: don't set memory swap when it's not enabled 5ebc4a407 Inherits storage configurations from storage.conf if crio config does not set d0d8fb3a7 use cmdrunner singleton 2237f2658 conmonmgr: refactor for new CommandRunner 878040d10 cmdrunner: update mocks and add target to makefile b3bb86659 config: prepend commands with taskset if InfraCtrCPUSet is configured e9f0bb6c8 cmdrunner: add tests for prepended commands 04e9c61e3 cmdrunner: create singleton fd2e2aeec Use timeout for conmon cgroup move 9af5e3363 build(deps): bump google.golang.org/grpc from 1.42.0 to 1.43.0 9a051dede Fixed a problem where metricImagePullsBytesTotal was getting updated twice and on second call getting incorrect labels 347f04161 test: add test ensuring a stopped pod is restored 86fd03b81 sandbox stop: remove namespaces e02d5bf15 restore: handle removed namespaces 334e925ac Partially revert "restore: restore stop before managing namespace" 948b92bd7 restore: ensure containers are wiped on reboot c3f75859b build(deps): bump go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc 78e1c80af build(deps): bump github.com/opencontainers/runc from 1.0.2 to 1.0.3 d8ea9f6ca vendor: bump c/image to 5.17.0 11c127f3d pinns: Add LDFLAGS to Makefile Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* criu: fix patch fuzz and remove unused patchChangqing Li2022-06-075-66/+27
| | | | | Signed-off-by: Changqing Li <changqing.li@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* criu: fix QA issue about shebang too longChen Qi2022-06-071-1/+1
| | | | | | | | | There's a QA issue about criu complaining the shebang of crit script is too long. We should replace it with '#!/usr/bin/env python3'. Signed-off-by: Chen Qi <Qi.Chen@windriver.com> Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* umoci: update to 0.4.7-tipBruce Ashfield2022-06-031-1/+1
| | | | | | | | | | | | | | | | | | | | | | Bumping umoci to version v0.4.7-98-gdb97609, which comprises the following commits: d8f4f12 build(deps): bump github.com/opencontainers/runc from 1.1.1 to 1.1.2 9db1db9 dependabot: ignore github.com/klauspost/compress for now c20d1ba build(deps): bump github.com/vbatts/go-mtree from 0.5.0 to 0.5.1 defa147 build(deps): bump actions/setup-go from 2 to 3 d7c6b89 build(deps): bump actions/cache from 2 to 3.0.1 e76ee78 build(deps): bump actions/checkout from 2 to 3 852bb73 build(deps): bump actions/download-artifact from 2 to 3 83706fc build(deps): bump actions/upload-artifact from 2 to 3 b93cb2a build(deps): bump codecov/codecov-action from 2 to 3 671fa10 build(deps): bump github.com/opencontainers/runc from 1.1.0 to 1.1.1 abd9d71 build(deps): bump google.golang.org/protobuf from 1.27.1 to 1.28.0 597a50e build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1 87f2e17 mutator: allow setting annotation data when generating a layer e14c6d5 README: s/anuvu/project-stacker c67586e build(deps): bump github.com/opencontainers/runc from 1.0.3 to 1.1.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman-tui: update to 0.3.x -tipBruce Ashfield2022-06-031-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping podman-tui to version v0.3.0-82-gcd51747, which comprises the following commits: da1eea3 new ui color theme 36230ca CI setup cb43be9 update vagrant box to Fedora 36 7ad72ce pre-commit configuration and fixes a6749cd Bump github.com/docker/docker 8cadc6f Bump github.com/containers/storage from 1.40.2 to 1.41.0 9070e74 doc update - install.md ef05222 pod/container top dialog ui update 91e73ee image history dialog ui update 097674e container stats dialog ui update fb11dc7 image search/pull dialog ui update b6bda1a sort categories for pod/containers create and image build dialogs 5dd3e38 code coverage for ui/dialogs package 5bde8a5 Bump github.com/containers/podman/v4 from 4.0.3 to 4.1.0 6ffb274 Bump github.com/docker/docker bd08f23 Bump github.com/containers/buildah from 1.25.1 to 1.26.1 697eb4f Bump github.com/containers/common from 0.47.5 to 0.48.0 ff98068 Bump github.com/containers/storage from 1.40.0 to 1.40.2 bc47ea7 Bump github.com/containers/storage from 1.39.0 to 1.40.0 1c46d42 exec terminal update (automatic resize and detach) 1ef0c11 adding image tree command 5db9ef8 adding security options fields to pod create dialog aeeba55 adding container create security options fields 5c90866 adding format and security options fields to image build dialog 3d0b91b doc update 0f9ead6 adding format and security options fields to image build dialog 1091a3f windows support 26134e7 removing unused connection dialog 206ac15 fixing golint 4ef15e4 removing image index from name field string search result d9ed9e3 activating left/right key to switch between different pages (#55) 06f342c adding image import command (#51) c986342 activate <delete> key for removing items (#50) 9a962a8 Bump github.com/BurntSushi/toml from 1.0.0 to 1.1.0 e29ce96 using utils pkg common variables and functions 61904de new feature: image save c9f132a doc update - fedora podman-tui rpm 372c71f Bump github.com/containers/buildah from 1.24.3 to 1.25.1 d592f1d error dialog ui update to separate the title from the error message 1b9045f new feature: image build c7f3032 Bump github.com/containers/podman/v4 from 4.0.2 to 4.0.3 0311f68 Bump github.com/containers/storage from 1.38.2 to 1.39.0 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* podman: update to v4.1.0Bruce Ashfield2022-06-031-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping libpod to version v4.1.0-8-gcedbbfa54, which comprises the following commits: 4ae7161c4 Fix strange buildtag edit 44d253b6c Add support for machine events on Windows 8e3a991ff test: fix "podman search format json" ab4d33e14 Update README for 4.1.0 release 3b4de8efc Bump to v4.1.1-dev e4b039020 Bump to v4.1.0 e87b07f7c Release notes for v4.1.0 final a8b55a3b9 pass networks to container clone b2025c64f Add more unit tests 7b64cd783 libpod: treat ECONNRESET as EOF 6d1d6cc0b play kube default log driver d57bbdb5c Cirrus: Fix ownership of repos. to keep git happy 4716b6b1b build: disable --output for podman-remote clients fbab06796 Vendor in containers/buildah@v1.26.1 ee4e0aa43 Temporarily skip netavark/aardvark e2e test 8b897a586 Cirrus: Temporarily update netavark/aardvark-dns b73bdcdb9 Cirrus: Test w/ netavark/aardvark-dns in F36+ 80cf4e31c Cirrus: Update to F36 CI VM Images 0d8ff6fa9 Add 4.1 branch to API documentation 6ea122f6e Report correct RemoteURI 2fd178ac0 Misc readme update to retrigger CI d3f406e9f podman system reset removed machines incorrectly 8cbe598fd Bump to v4.1.0-dev 0abf24320 Bump to v4.1.0-rc2 d45a68bce Update release notes for v4.1.0 RC2 9e83826d5 machine events: only open sockets when needed a21e11236 Add podman machine events bea8301a8 Implement --format for machine inspect 3ab8fa679 Release notes for more v4.1.0 backports 8842e9b7a Additional stats for podman info 642204821 libpod: unset networks before storing container conf 9d5158e94 Implement machine inspect for WSL b7e8b25d4 Bump github.com/rootless-containers/rootlesskit from 1.0.0 to 1.0.1 65108dede Use simulated dual-stack binds when using WSL 95633146e libpod: host netns keep same /etc/resolv.conf 1cdf18a86 fix incorrect permissions for /etc/resolv.conf in userns bbb10bb52 pkg/api: do not register decoder in endpoint handler c441a1756 fix broken hooks-dir test fb14171cb enable errcheck linter 724965132 libpod: unlock containers when removing pod 159d597cd remove unused codepath for creating/running ctr in a pod a9a70a949 Refactor machine inspect 1d2120412 image search --format: add completion for go template d4fe645ed shell completion --format: use structs by reference 524b53610 image --format: fix add completion for go template a9deb5c67 shell completion --format: use anonymous struct field once 835b89c60 network inspect --format: add completion for go template 68f7349bc shell completion --format: work with nil structs 07bc615b4 podman machine starting test 66500b82a Report properly whether pod shares host network 8627b5151 Bump github.com/containernetworking/cni from 1.0.1 to 1.1.0 9f6131e9c Three manual fixes ecc39b595 Ginkgo: use HaveField() for better error checking e5d6b6b0a volume: add new option -o o=noquota 77f147468 podman search: truncate by default b1089a23b Produce better test error messages 4ff6884fb Add CreatedSince & CreatedAt format fields to podman image history 3226561cf Allow changing of CPUs, Memory, and Disk Size cb399245b CI: emergency fix for broken go get 1593e75c6 Bump to v4.1.0-dev 146dcb28d Bump to v4.1.0-rc1 b2beb5a53 Add release notes for v4.1.0-RC1 3bcfd256b manifest endpoints fix ordering 4a4906b91 pkg/bindings: manifest remove 3.X API support conditional e9599fb1a fix manifest modify endpoint to respect tlsverify param 609b52f72 Bump version to v4.1.0-dev 652921119 Bump github.com/fsnotify/fsnotify from 1.5.3 to 1.5.4 70a2c0008 play kube respect hostNetwork 7259a6315 Truncate annotations when generating kubernetes yaml files 4f8ece76f play kube: do not skip containers by name 51fbf3da9 enable gocritic linter 1a9f110b5 Cirrus: Fix skipping all/most tests 7c914355d [CI:DOCS]Remove unnecesarry files c090931da remote: do not join user NS 49264c714 vendor in containers/(common,buildah,storage,image) facc009ca benchmarks: add more image benchmarks ee9d755c5 Robustify nginx tests ecd245d8f Unit tests for pkg/specgenutil pkg/signal c5e48f12e Cirrus: Re-fix build-cache miss on main eb4e53087 Revert "Cirrus: Fix cirrus cache race on bin/podman" b0d36f635 Implements Windows volume/mount support 3b6ffcd29 Update to use new common machine API d441a711e machine starting status 833456e07 Add podman machine test suite 3d1e40608 Pass --tls-verify option in podman -remote build 62f4ae98f fix staticcheck linter warning for deprecated function a615cb2fe Docs rootfull -> rootful 2f53259a8 Cirrus: Fix cirrus cache race on bin/podman 1260bf631 Revert "Switch all rootful to rootfull" c7b16645a enable unparam linter 94d043be8 Modify the pod name suffix '_pod' to '-pod' 0d83f4b76 Allow filtering of "removing", it is a valid status 13079abe3 Add support for passing --volumepath 44642bee8 libpod/networking_linux.go: switch to sha256 hashes ad249222d Fix hang in test_connect cafb76b63 Increase verbosity and sequencing of APIv2 testing 5b4af0584 replace golint with revive linter 454468e03 Update test to run network check in both rootless and rootfull mode 3e240c3ae Bump github.com/fsnotify/fsnotify from 1.5.2 to 1.5.3 104042e20 Bump github.com/container-orchestrated-devices/container-device-interface e0f5bf279 test/system: add containers.conf test for new /etc/hosts options e912f1b68 Improve /etc/hosts documentation e4ab8a5be shared netns and --add-host should conflict cf1b0c196 network dis-/connect: update /etc/hosts 128086639 libpod: fix c.Hostname() to respect the utsNsCtr 696bcd277 use etchosts package from c/common 1514d5c93 silence deprecated warnings for manifest functions 2a8e43567 enable staticcheck linter 56d6ee080 move golang.org/x/crypto/ssh/terminal to golang.org/x/term e39f4495e Run codespell on code f87f23e3b specgen-volumes: parse --mount using csv-reader instead of split by comma 93ecafcba Workaround criu re-linking output in system test cc3790f33 Switch all rootful to rootfull 566b6071d Cirrus: Fix missing git-enforced runtime identity 80c0fceb2 Add support for --userns=nomap 8080a5f8e Revert "container,inspect: convert Entrypoint to array instead of a string" 17105028e vendor in latest containers/(storage,common,image) 537540196 podman container clone -f d24507c1e Fix upgrade tests assuming storage.conf exists c67d6a52c Fix using --network-backend on podman-remote dc02e99d8 Fix size-check to display more context b7dcbfed0 Update release notes for v4.0.3 and v3.4.7 55a5bd8a0 Optimization: skip tests in some circumstances df156ab78 [CI:DOCS] podman build --pull=*missing* fa239f2ec Bump github.com/fsnotify/fsnotify from 1.5.1 to 1.5.2 eb7171262 systemd socker activation: check listener ff2e6291a vendor c/common 13c6fd067 system service: remove unnecessary pointer to listner 97ee41146 system tests: add assert(), and start using it 93b8ef627 Buildah Vendor Treadmill: the script d865fcc5e Fix e2e tests referencing generic env. var. bbe1063a5 Add checkpoint image tests 756ecd540 Add support for checkpoint image fca3397dc Update github.com/checkpoint-restore/checkpointctl 80d175279 slirp4netns: actually make ipv6 default 519535daa healthcheck: set default healthcheck Interval if not specified in image 0162f678c benchmarking Podman: proof of concept a2077e5ea Add missing events to podman-events man page be0da4a22 Translate Memory Limit to Swap in API 1b3dc899d manpage vs --help checker: better error messages 99bcd6595 Add --quiet to machine ls e716790af Fix typo in generate kube docs for selinux labeling 08d08f995 Correct play kube docs for selinux labeling b03466cb7 Update troubleshooting.md a4798ab4e Respect "Rootful" when starting WSL API Forwarding d68e9faee Update vendor of storage,common 900739d13 Add container.conf default volume to init f38b03d37 Fix Memory Swappiness passing in Container Clone 2a75164e2 add a regression test for CVE-2022-1227 3f2939c2e run, create: add --passwd-entry 97f93dc78 Revert "images --size" 3da3afa57 Add log rotation based on log size 2f4874eb0 Update containers/common to main branch 9ef745d54 System tests: Usage checks: better error messages 63c38b99f Fix --tail log on restart problem 02b7eeff6 Allow HTTP attach to stopped containers 970c8d472 compat api: use network mode bridge as default 6c878b7a5 docs: fix typo in podman-container-clone.1.md 20384b037 build(deps) bump CDI dependency from 0.3.0 to 0.3.2 8710197e8 Introduce machine inspect 3987c529f Add support for ipc namespace modes "none, private, sharable" 2c800a717 System tests: fix oops in start --filter tests 5e680d54e Bump golang.org/x/crypto to 7b82a4e 8fb9dbdb4 machine,rm: Ignore ENOENT while cleaning machine 857b36ca8 Update vendor of storage,common,image fb4fc03ec Pretty print systemd services file 81a95fade run, mount: allow setting driver specific option using volume-opt 923d454b2 [CI:DOCS] Rewrite rootless --userns=auto docs 61cf22288 Cirrus: Fix unsupported cirrus-cron build status ee4a583ed pkg/bindings: document requirements for use d8a902a16 API: use no_hosts from containers.conf 615099ddb System tests: reenable ps --external test 784a13f57 network create: add support for ipam-driver none 2508913a0 If newuidmap or newgidmap fail, then check their permissions 0cebd158b container,inspect: convert Entrypoint to array instead of a string dc17195bd Vendor in new opencontainers/selinux e133a06d2 images --size a95f7f9ca Cirrus: Multi-arch build auto-update + tagging update 356d53434 Fix docker socket handling 90ac1ba2a Prevent set command from updating a running instance db7d69950 Add Podman Hello to readme.md e73547a63 Unify examples section across several man pages: pod rm/start/unpause 9c72ea343 machine refactor 3: add symlinks for sockets bd4b9c3d5 build(deps): bump github.com/BurntSushi/toml from 1.0.0 to 1.1.0 dd9eec06a Unify examples section across several man pages: init/kill 164b64ea3 specgen: do not set OOMScoreAdj by default bf4318e60 Allow creating anonymous volumes with --mount 1cd529b22 specgen: permit --privileged and --cap-add d55c46f8c Cirrus: Allow manually running image-build task 5fcd2a7ac Cirrus: Upd VM images to fix multi-arch build bug f8c2df87c Add build test for .containerignore tar file e5745139a cli commands: better error for unsupported commands daeea48df kube: configmap volume should be reused if already exists 9cacc18c9 Set permissions for GitHub actions a06df4fc1 Machine refactor part 2 81632722e systemd: enable all cgroups when running as a service 23cdbf322 test/apiv2: support netavark 1f1cf7bd4 rootless netns: move process to scope only with systemd 1ffcc4a88 Add 'Os' to be queried via 'version' output b60854e8b Prefer registering both machine and global pipe 2a882b770 Upgrade tests: reexamine cross-testing matrix eedaaf33c fix slirp4netns port forwarding with ranges c185d8c0d Add option for pod logs to display different colors per container. 7a5342804 fix pod volume passing and alter infra inheritance c602084a5 size-check: display binary size and growth 61c518627 upgrade tests: fix networking problems 21502987b replace hpcloud/tail with nxadm/tail f6963cea1 Cirrus: Build multi-arch images + manifests cdf74f208 Set systemd mode if entrypoint begins with /bin/sh -c a8e6c639e Unify examples section across several man pages 6e0e1cbdd Migrate machine configs 1821eb383 Pin actions to a full length commit SHA 2ac897aa0 Machine refactor - part 1 38bd4010c network setup: fail if slirp4netns is not installed 82ed99b6a event: generate a valid event on container rename operation 798988050 Fixes errors from 'manifest push' being dropped in remote case d106b294b Switch all calls to filepath.Walk to filepath.WalkDir 446c35efd Vendor common Added patch provided by rhatdan to add support for shareable ab41037c8 Update filter docs with missing entries and add negation option. 3cc173937 Resolves #13629 Add RegistryAuthHeader to manifest push 7680211ed Remove error stutter 76614c461 build(deps): bump google.golang.org/protobuf from 1.27.1 to 1.28.0 ffbab30d7 Run codespell to cleanup typos 25345c087 build(deps): bump github.com/rootless-containers/rootlesskit 640c2d53a test: fix podman run test as rootless 4f73cf3fc Misc typo fixes c01d1f8e3 [CI:DOCS] docs: drop note about upcoming RHEL 7.7 d4bf6b4d7 clarifying "loginctl enable-linger" section in doc 61b2d8844 Bump github.com/prometheus/client_golang to v1.11.1 b469bf5c0 container: allow clone to an existing pod eb5b08f62 build(deps): bump github.com/docker/docker 7189b6f26 podman machine set: clarify --rootful option c0bbca8c4 podman machine: fix port forwarding with proxy 7ae52e86f readConmonPipeData: try to improve error 809f82bdb specgen: fix typo bf6430d18 Remove experimental warning from podman-remote rpm e90b35438 machine-set: fix example for setting rootful flag 752680366 play: kube: use in-memory kubefile and remove tempfile 9b0c8d23b man pages: sort flags, and keep them that way 346beec35 Remove nix packages, since no one is supporting this 5e28cbc5f When running systemd in a container set container_uuid da5891130 fix podman machine start log level detection 59dc70bb4 podman machine start: lookup qemu path again if not found 5669ffb35 document that using libpod package directly is not supported cdda1924a Explicitly use IPv4 to check if podman-machine VM is listening a6504963b Fix manifest 4.0 endpoints [NO NEW TESTS NEEDED] 5b2597d52 Fix a potential race around the exec cleanup process aafa80918 do not set the inheritable capabilities eedce31eb import: allow users to set os, arch and variant of imports 13b6ff652 docs: Fix links to Containerfile and containerignore 41a6dd36f Update swagger to improve compatibility [NO NEW TESTS NEEDED] 88d4db009 Binary growth check, part 2 of 2 3627dfc52 podman unshare: document that command cannot be used with remote 130bcc3a9 podman stats: improve cpu average calc 0edb3ddd3 podman stats: calc CPU percentage correctly 1a7f5b3d5 Cirrus: Publish binary artifacts on success 501355d4a Fix unreadable netavark logs 5e1e13c18 add contextDir to tar on remote c25213c8f fix compose test error in retry logic 84e7ce82d Binary growth check, part 1 of 2 06dd9136a fix a number of errcheck issues 07999b237 [CI:DOCS] troubleshooting: document rm in image stores 6c030cd57 fix a number of `godot` issues 68b94338b linter: enable makezero 0f12b6fe5 linter: enable nilerr 081e09143 linter: document nolintlint 7c047bfbe linter: document tagliatelle 9e8cca26a test/e2e/inspect_test.go: wait for sessions fb792f7ed linter: enable ineffassign f72a678f2 linter: enable errchkjson bb6b69b4a linter: enable wastedassign 070e40149 linter: enable interfacer 90f37e1a6 build(deps): bump github.com/containers/ocicrypt from 1.1.2 to 1.1.3 6d6bdabc8 healthcheck: stop showing wrong status when --no-healthcheck is set 8961dd345 Makefile: build podman-remote-static with cgo disabled 1b68c3826 libpod: drop warning for Fedora 31 63bf3991e vendor containers/storage with https://github.com/containers/storage/pull/1165 e3cc0717b podman system df: fix percent calculation 53e770566 pod system tests: clean up stray image 026bd9b20 bump golangci-lint to v1.45.0 2460261fb Fix documentation typo 36ff8f2b3 Add Windows installer support for upgrades 95dad4d8a podman rmi --ignore 4408db330 Updated dependabot to GitHub actions cc7b5974b Fix type-o and cleanup doc punctuation 54641f5f7 fix compose test flake 622d0068e fix dual stack network e2e flake 57cdc21b0 vendor c/common@0ededd18a1f9 ea08765f4 go fmt: use go 1.18 conditional-build syntax 3c968c3d2 Handle incompatible machines d3e3ea843 logformatter: link to bats sources on error 4b359e459 Set names in compose tests based on version bde3ca8c3 Add tests with Docker Compose v2 1fd76c901 podman machine: remove hostip from port 0793a5834 Deduplicate between Volumes and Mounts in compat API ff54aaa63 podman create: building local pause image: do not read ignore files 714e5a13d Separator is no longer prepended when prefix is empty on podman generate systemd 1387b5bd8 Add test for BZ #2052697 449f2fc0b Set rawimage for containers created via play kube c732adf2d build(deps): bump github.com/stretchr/testify from 1.7.0 to 1.7.1 ca7376bb1 Exit with 0 when receiving SIGTERM 29f24ff68 [CI:DOCS]: Mention netavark limitations for macvlan/ipvlan drivers 45df70ec1 fix empty newline in version output 33aa2f2d1 Fix windows win-sshproxy build 0db184fb0 fix breaking change in pkg/bindings 19d0c5a8a pkg/k8s.io: add small readme with copyright notice dd9e4dc72 pkg/k8s.io/api/core/v1: remove unneeded types f106867ac pkg/k8s.io/...: remove more unneeded files 0612f859b pkg/k8s.io/...: remove protobuf field tags f8577766d pkg/k8s.io/...: fix lint errors a0ad1f2ad remove unneeded k8s code 918fc88a9 move k8s deps into podman 3d82d17f8 Bump github.com/spf13/cobra from 1.3.0 to 1.4.0 439323cd2 Bump github.com/docker/docker daebf50b8 apply-podman-deltas: skip modified test case for --add-host which adds anomaly 3bb046a5e slirp: fix setup on ipv6 disabled systems 217197340 Fix typo e8968c867 Add support for --chrootdirs c845216fd docs: podman-build add --no-hosts 780d4b2d6 vendor: bump buildah, c/image and c/storage edc62b529 Fixes TTY & resizing on Mac and Windows 6e41d1f44 podman.spec.rpkg: enable rhel8 builds on copr c06460bea Bump golang to 1.17 in `vendor-in-container` 4ab24a068 Bump github.com/docker/docker 931477461 Bump github.com/spf13/cobra from 1.3.0 to 1.4.0 e6b64703f Bump github.com/containernetworking/plugins from 1.1.0 to 1.1.1 a5353207c Bump github.com/vbauerster/mpb/v7 from 7.3.2 to 7.4.1 e5a86d293 CI: fix golangci-lint installation feaa1a134 Add podman play kube --annotation 30bf065c3 Use github.com/vbauerster/mpb/v7 in pkg/machine 8f2f8d4ca use gopkg.in/yaml.v2 instead of v3 166edf00a Fix handling of tmpfs-mode for tmpfs creation in compat mode e56150264 Bump github.com/docker/distribution db3010279 [CI:DOCS] troubleshooting.md: mention "podman unshare chown 0:0 path" a7c4691bf Improve agent install message to add restart instructions 5b51b42cc machine rm -f stops and removes machine 8cfdddf50 test/e2e: add aardvark specific tests e66c46441 Skip flaky pprof tests bd0766e96 selinux: remove explicit range transition when starting conmon 9ce3c0a87 Move secret-verify-leak containerfile into its own Directory 611b45c51 Inspect network info of a joined network namespace d2f77c256 Set default rule at the head of device configuration cdb6deb14 MacOS improvements 6dfe63463 [CI:DOCS] DISTRO_PACKAGE.md: List the packaging changes for v4 639e6899b [CI:DOCS] RELEASE_PROCESS.md: cosmetic fix f13ca392c [CI:DOCS] Remove "(1)" from web tab text 01514f33b Fixes: #13301 ("machine rm removes the mounted socket file on macos") b20993393 [CI:DOCS] troubleshooting.md: Improve language and fix typos d302c08cf Throw an error if kube yaml has duplicate ctr names dca2e7924 Move all python tests to pytest 2fb6a8daf Add ExitCommandDelay configuration use in API exec handler 63f92d0a6 test: add a test to verify race free concurrent/parallel builds a3497cee9 RELEASE_PROCESS.md: build artifacts locally a901c919a libpod: pods do not use cgroups if --cgroups=disabled 0bd0ad594 container: workdir resolution must consider symlink if explicitly configured 410d28660 vendor: bump c/image to main/9a9cd9 08036e9af vendor: bump c/storage to main/d06b0f e71d497e7 libpod: drop warning if cgroup doesn't exist 22f331e54 Revert "use GetRuntimeDir() from c/common" 572e6464f Use storage that better supports rootless overlayfs 7729afe97 Refactor docker-py compatibility tests 675d775eb Add --context-dir option to podman play kube 40c6192e9 Add the names flag for pod logs 2e14c7270 Allow setting binarypath from Makefile 569319d39 Vendor in containers/common@main 3dc1b8e83 Add podman volume mount support dbf34bfe7 Clarify v2 API testing for podman vs docker clients 988190db5 copr packaging: use generic macros for tmpfiles and modules load dirs 6f71fa6d9 Show version of the deb package in info output a7fc8a146 Improve the error message for usused configMaps f3e883fb4 Bump github.com/containernetworking/plugins from 1.0.1 to 1.1.0 e1b298166 docs: generate-systemd: pod requires an infra container eab5a4cfb Load ip_tables modules at boot fbbcb957c container-commit: support --squash to squash layers into one ed73040b3 kube: honor mount propagation mode 5cba5cbfd play kube: set defaults to container resources 46b7c5bc6 Bump CDI go dependency to v0.3.0 6f7a803d0 Cleanup display of trust with transports 80c5962db Add containers-common spec and command to podman 4a60319ec Remove the runtime lock c4dfbd58f Don't log errors on removing volumes inuse, if container --volumes-from b19251242 system tests: cleanup networks on teardown ea01f8963 [CI:DOCS]Update networking tutorial for netavark 9ce61e3a4 kube: honor --build=false and make --build=true by default 44d037898 provide better error on invalid flag f018c07ed System tests: show one-line config overview f150f2921 troubleshooting.md: tweak subuid paragraph, encryption fc5cf812c use GetRuntimeDir() from c/common 94df70151 Implement Podman Container Clone 23a7f4e0d Option --url and --connection should imply --remote. d12489858 [CI:DOCS] troubleshooting: mention overlay option for --rootfs 8c9d37faf [CI:DOCS] troubleshooting: mention machinectl and systemd-run db4d15e85 Propagate $CONTAINERS_CONF to conmon d615ab81f tests: Remove inaccurate comment 7b55ab442 Cirrus: Disable F34 aka prior-fedora testing 632c089cc Cirrus: Use updated VM images aa1703037 Update release notes with v4.0.0 additions 1252f9dd3 Fix a potential flake in volume plugins tests 38811823c vendor: update c/storage to 26c561f9 095026c3d Bump github.com/containers/buildah from 1.24.1 to 1.24.2 90066af62 Calculate device major/minor using bitshift 13f6261f8 increase subuid and subgid in image 7a83d16f9 [CI:DOCS] logformatter: handle python logs a811acf74 pkg: support passing down options for idmap 50fbe52f4 Update to podman4 copr stream c74f8f04f Introduce podman machine init --root=t|f and podman machine set --root=t|f 8f5ba05ec Initial implementation of mac forwarding using a privileged docker sock claim helper b62816578 e2e: merge after/since image-filter tests 10580ec19 Unify ls --filter docs for networks and pods 6a8d29eea Changes of docker descriptions 5b98efe1d Fix images since/after tests 4a166c8b6 podman network: add documentation for netavark a0991c6f3 create: Fix key=value annotation in the flag output a8928a3ca ignition: propagate proxy settings from a host into a vm 3b5a3f4a7 [CI:DOCS] Add --userns=keep-id, --uidmap, --gidmap troubleshooting 73f35ff2a Temporarily pull machine images from side repo 6f9f78f7f enable netavark specific tests 4b90542d5 Fix checkpoint/restore pod tests 4966adddb Make sure building with relative paths work correctly. 3f28d697e Add 409 response to swagger godoc 40ba9f10e Make the hello image leaner [NO TESTS NEEDED] a0b38c071 troubleshooting: add doc for ssh into a container 87cca4e5e Modify /etc/resolv.conf when connecting/disconnecting c4676c571 Add version guard to libpod API endpoints 1512740e3 Bump c/common to v0.47.4 829f88d74 Show API doc for several versions 3762946e6 Do not set the network config dir to cni plugin dir 411fca0b3 helloimage: header symmetry e405fefb3 [NO NEW TEST NEEDED] Add schema for ImageCreate 200 response. 61f97083c idmap should be able to be specified along with other options 5bcd9134f Bump github.com/docker/distribution 58adf1a83 fix: Multiplication of durations 8d0fb0a4e move rootless netns slirp4netns process to systemd user.slice d0d1ffa43 Cleanup: remove obsolete/misleading bug workaround 3b561a468 compat: endpoint /build must set header content type as application/json in reponse 44fb431a3 Fix: Do not print error when parsing journald log fails f0826b3a4 Cirrus: Expand netavark testing to include rootless 3cf64a8e9 tests: retrofit healthcheck system tests 4f77331c9 healthcheck, libpod: Read healthcheck event output from os pipe d733c3baa append podman dns search domain 54cf0f05e Bump github.com/buger/goterm from 1.0.1 to 1.0.4 1d1b2b150 Update containers/buildah v1.24.1 7cfe4d3fe System tests: revert emergency skip of checkpoint tests 185dc5b2f Bump github.com/containers/common from 0.47.2 to 0.47.3 642a691cb Cirrus: Add netavark/aardvark system test task daf51eafe Bump github.com/containers/image/v5 from 5.19.0 to 5.19.1 ebbf10ae8 Cirrus: Log netavark/aardvark binary build info. 9eb88ea47 Podman pod create --share-parent vs --share=cgroup 55c4a1468 system prune: remove all networks fee76f6ab Document `schema` values in the `--url` flag 5468757ad play kube envVar.valueFrom.resourceFieldRef 725a6f893 pkg/bindings/images.Build(): slashify "dockerfile" values, too 7d3ad6081 netavark e2e tests 25e073492 Revert "Move each search dns to its own line" 3d3e8d8f8 hack/bats: fix broken usage message 903f9a3a2 Cirrus: Minor - limit release task applicability a1bc8cb52 Move each search dns to its own line 4ddc4e79d Only change network fields if they were actually changed by the user c4dfd004a libpod: enforce noexec,nosuid,nodev for /dev/shm b6fe7d119 Fix size to match Docker selection 012e24b79 [CI:DOCS] Add a hello world image to quay.io 852ca9a7a Cirrus: Add [CI:BUILD] magic that only builds cd8b30289 COPR: fix dependencies 85e8c1c9a docs: clarify rootless net stats 865f0a197 libpod: report slirp4netns network stats 6609bb73a Fix use of infra image to clarify default 2ceab1194 play kube envVar.valueFrom.fieldRef e7bdd1260 CI: fix nightly builds 009d9eb67 Add notes to "--oom-kill-disable" not supported on cgroups V2 a8fb8f52c Adapt podman images ls filters docs to be aligned with prune filters docs 636543787 Clarify remote client means Mac and Windows 6f2b027b3 ignition, machine: delegate cpu,io cgroup controllers to machine's default users 56d95172f podman image scp syntax correction 8842dab68 Cirrus: Also download aardvark-dns binary b381d7565 Cirrus: Add e2e task w/ upstream netavark Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc/docker: update to 1.1.2Bruce Ashfield2022-06-031-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping runc to version v1.1.2-9-gb507e2da, which comprises the following commits: bf1cd884 ci: use golangci-lint-action v3, GO_VERSION 1feafc31 ci: bump golangci-lint to v1.44 89f79ff0 libct: StartInitialization: fix %w related warning 3b7f2605 Format sources using gofumpt 0.2.1 eeac4e77 build(deps): bump actions/checkout from 2 to 3 cd7fa00d Vagrantfile.fedora: fix build wrt new git cdfdbe55 VERSION: back to development a916309f VERSION: release 1.1.2 364ec0f1 runc: do not set inheritable capabilities 8959e372 VERSION: back to development 52de29d7 VERSION: release 1.1.1 2636e1cb CHANGELOG.md: add 1.1.1 release notes 036cc348 CI/cirrus: add centos-stream-9 db953158 README.md: add cirrus-ci badge ea19181e README,libct/README: fix pkg.go.dev badges 8290c4cf libct/cg: IsCgroup2HybridMode: don't panic ee7ba6cb configs/validate: looser validation for RDT 96193422 libct/cg/sd/v2: fix ENOENT on cgroup delegation 35784a3e ensure the path is a sub-cgroup path 986e7c53 libct: fixStdioPermissions: ignore EROFS 5053a065 libct: fixStdioPermissions: skip chown if not needed d2939b6b libct: fixStdioPermissions: minor refactoring Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* runc: update to 1.1.2Bruce Ashfield2022-06-031-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping runc to version v1.1.2-9-gb507e2da, which comprises the following commits: bf1cd884 ci: use golangci-lint-action v3, GO_VERSION 1feafc31 ci: bump golangci-lint to v1.44 89f79ff0 libct: StartInitialization: fix %w related warning 3b7f2605 Format sources using gofumpt 0.2.1 eeac4e77 build(deps): bump actions/checkout from 2 to 3 cd7fa00d Vagrantfile.fedora: fix build wrt new git cdfdbe55 VERSION: back to development a916309f VERSION: release 1.1.2 364ec0f1 runc: do not set inheritable capabilities 8959e372 VERSION: back to development 52de29d7 VERSION: release 1.1.1 2636e1cb CHANGELOG.md: add 1.1.1 release notes 036cc348 CI/cirrus: add centos-stream-9 db953158 README.md: add cirrus-ci badge ea19181e README,libct/README: fix pkg.go.dev badges 8290c4cf libct/cg: IsCgroup2HybridMode: don't panic ee7ba6cb configs/validate: looser validation for RDT 96193422 libct/cg/sd/v2: fix ENOENT on cgroup delegation 35784a3e ensure the path is a sub-cgroup path 986e7c53 libct: fixStdioPermissions: ignore EROFS 5053a065 libct: fixStdioPermissions: skip chown if not needed d2939b6b libct: fixStdioPermissions: minor refactoring Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker-ce: update to 20.10.16Bruce Ashfield2022-06-031-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping moby to version v20.10.16, which comprises the following commits: a15acb4bd6 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5f2e0b79ad [20.10] update golang to 1.17.10 be7855fdbe vendor: update github.com/containerd/cgroups and github.com/cilium/ebpf 414a9e24a7 update containerd binary to v1.6.4 47b6a924b6 update containerd binary to v1.6.3 6d7c2b2d26 update containerd binary to v1.6.2 91708bf704 update containerd binary to v1.6.1 53ae17008e Revert "[20.10] update containerd binary to 1.5.11" 961b9a78d5 update runc binary to v1.1.1 97972dac5f update runc binary to v1.1.0 033a819714 [20.10] update golang to 1.17.9 a80884126b Jenkinsfile: add workaround for CVE-2022-24765 09d6fcdfec update to go 1.17.8 to address CVE-2022-24921 5957684b2c Update Go to 1.17.7 55b72c70ba Update Go to 1.17.6 fdf3020bd5 Update Go to 1.17.5 36e164ba80 Update Go to 1.17.4 ecfba8f588 Update Go to 1.17.3 4e14dcc125 Update Go to 1.17.2 c32b5ece31 Update Go to 1.17.1 7096508811 vendor: update archive/tar to match Go 1.17.0 a1150245cc Update to Go 1.17.0, and gofmt with Go 1.17 95cc7115fb hack/vendor.sh: allow go version to be specified with .0 949c33b1c5 vendor: golang.org/x/sys 63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17) 8392285876 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456 4e81bcf380 Makefile: update buildx to v0.8.2 74e699c8d3 Makefile: update buildx version to v0.6.0 bc3cc2e7ac Makefile: install buildx from binary release, instead of building 492fac20af api: docs: fix indentation of HostConfig.SecurityOpt (v1.39-v1.41) 3cba2682d8 api: docs: move ContainerWaitResponse to definitions (v1.39-v1.41) 55e71450ae api: docs: move VolumeCreateOptions to definitions (v1.39-v1.41) c54362cd64 api: docs: move Volume examples inline (v1.39-v1.41) c60ff9b296 doc: server API Correct ImagesCreate - platform parameter added in 1.32 7a45f7a8cc docs: cleanup swagger API with multiple examples (v1.25-v1.41) 29bb9204bf api: docs: add IPAMConfig on IPAM (v1.41) 77f6564369 api: docs: document MountPoint fields (v1.25-v1.41) 51ea235ab8 api: docs: remove deprecated RootFS.BaseLayer (API v1.25-v1.41) 3d6b4ae572 Correct type of Mounts in ContainerSummary in docs (v1.25-v1.40) 6e8b9809b7 Correct type of Mounts in ContainerSummary in docs 621a98dac0 api: docs: fix warning about comment indentation (API v1.40-v1.41) bb9ef98060 api: docs: update docs for /images/{name}/json (API v1.39-v1.41) 88ca5cec4e daemon: fix error-message for minimum allowed kernel-memory limit 3ea996abd7 docs: add missing KernelMemoryTCP to api v1.40 and v1.41 b475bc95cd docs/api: add missing 400 response for POST /containers/{id}/wait ae07b3cc96 docs/api: update /containers/{id}/wait "condition" parameter (v1.30-v1.41) 19555fa92d [20.10] vendor: github.com/docker/distribution v2.8.1 32fe0bbb91 daemon: use RWMutex for stateCounter ed8fb00b65 errdefs: move GetHTTPErrorStatusCode to api/server/httpstatus 3bd611d7a5 log error message when receiving an unexpected type error 7dfe7a1752 [20.10] update containerd binary to 1.5.11 af953d2f38 [20.10] vendor: containerd 7cfa023d95d37076d5ab035003d4839f4b6ba791 5f9753ae73 client: remove containerd "platform" dependency 4df345e65d client: remove unused Platform field from configWrapper dd38613d0c oci: inheritable capability set should be empty 2825bf7123 Only check if route overlaps routes with scope: LINK f5c56eaca8 [20.10] bump swarmkit for config size increase ce3b6d1ae9 distribution: retry downloading schema config on retryable error Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker/moby/libnetwork: update to -latestBruce Ashfield2022-06-031-1/+1
| | | | | | | | | Bumping libnetwork to version v0.7.0-dev.3-1830-g339b972b, which comprises the following commits: 9db86fb7 Only check if route overlaps routes with scope: LINK 7b9c2905 fix port forwarding with ipv6.disable=1 Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* docker/moby: update to 20.10.16Bruce Ashfield2022-06-031-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumping moby to version v20.10.16, which comprises the following commits: a15acb4bd6 [20.10] vendor: golang.org/x/sys v0.0.0-20220412211240-33da011f77ad 5f2e0b79ad [20.10] update golang to 1.17.10 be7855fdbe vendor: update github.com/containerd/cgroups and github.com/cilium/ebpf 414a9e24a7 update containerd binary to v1.6.4 47b6a924b6 update containerd binary to v1.6.3 6d7c2b2d26 update containerd binary to v1.6.2 91708bf704 update containerd binary to v1.6.1 53ae17008e Revert "[20.10] update containerd binary to 1.5.11" 961b9a78d5 update runc binary to v1.1.1 97972dac5f update runc binary to v1.1.0 033a819714 [20.10] update golang to 1.17.9 a80884126b Jenkinsfile: add workaround for CVE-2022-24765 09d6fcdfec update to go 1.17.8 to address CVE-2022-24921 5957684b2c Update Go to 1.17.7 55b72c70ba Update Go to 1.17.6 fdf3020bd5 Update Go to 1.17.5 36e164ba80 Update Go to 1.17.4 ecfba8f588 Update Go to 1.17.3 4e14dcc125 Update Go to 1.17.2 c32b5ece31 Update Go to 1.17.1 7096508811 vendor: update archive/tar to match Go 1.17.0 a1150245cc Update to Go 1.17.0, and gofmt with Go 1.17 95cc7115fb hack/vendor.sh: allow go version to be specified with .0 949c33b1c5 vendor: golang.org/x/sys 63515b42dcdf9544f4e6a02fd7632793fde2f72d (for Go 1.17) 8392285876 vendor: golang.org/x/sys d19ff857e887eacb631721f188c7d365c2331456 4e81bcf380 Makefile: update buildx to v0.8.2 74e699c8d3 Makefile: update buildx version to v0.6.0 bc3cc2e7ac Makefile: install buildx from binary release, instead of building 492fac20af api: docs: fix indentation of HostConfig.SecurityOpt (v1.39-v1.41) 3cba2682d8 api: docs: move ContainerWaitResponse to definitions (v1.39-v1.41) 55e71450ae api: docs: move VolumeCreateOptions to definitions (v1.39-v1.41) c54362cd64 api: docs: move Volume examples inline (v1.39-v1.41) c60ff9b296 doc: server API Correct ImagesCreate - platform parameter added in 1.32 7a45f7a8cc docs: cleanup swagger API with multiple examples (v1.25-v1.41) 29bb9204bf api: docs: add IPAMConfig on IPAM (v1.41) 77f6564369 api: docs: document MountPoint fields (v1.25-v1.41) 51ea235ab8 api: docs: remove deprecated RootFS.BaseLayer (API v1.25-v1.41) 3d6b4ae572 Correct type of Mounts in ContainerSummary in docs (v1.25-v1.40) 6e8b9809b7 Correct type of Mounts in ContainerSummary in docs 621a98dac0 api: docs: fix warning about comment indentation (API v1.40-v1.41) bb9ef98060 api: docs: update docs for /images/{name}/json (API v1.39-v1.41) 88ca5cec4e daemon: fix error-message for minimum allowed kernel-memory limit 3ea996abd7 docs: add missing KernelMemoryTCP to api v1.40 and v1.41 b475bc95cd docs/api: add missing 400 response for POST /containers/{id}/wait ae07b3cc96 docs/api: update /containers/{id}/wait "condition" parameter (v1.30-v1.41) 19555fa92d [20.10] vendor: github.com/docker/distribution v2.8.1 32fe0bbb91 daemon: use RWMutex for stateCounter ed8fb00b65 errdefs: move GetHTTPErrorStatusCode to api/server/httpstatus 3bd611d7a5 log error message when receiving an unexpected type error 7dfe7a1752 [20.10] update containerd binary to 1.5.11 af953d2f38 [20.10] vendor: containerd 7cfa023d95d37076d5ab035003d4839f4b6ba791 5f9753ae73 client: remove containerd "platform" dependency 4df345e65d client: remove unused Platform field from configWrapper dd38613d0c oci: inheritable capability set should be empty 2825bf7123 Only check if route overlaps routes with scope: LINK f5c56eaca8 [20.10] bump swarmkit for config size increase ce3b6d1ae9 distribution: retry downloading schema config on retryable error Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>
* kubernetes: update to 1.24 releaseBruce Ashfield2022-06-033-61/+12
| | | | | | | | | | | Bumping to the 1.24 kubernetes release from May 2022. We refresh one patch, and drop another as the build race looks to be different (since it is no longer installed seperately). Otherwise the build is the same, and smoke tests have passed. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>