linux/meta-virtualization.git/recipes-containers/podman/podman_git.bb, branch honister

global: convert github SRC_URIs to use https protocol

2021-11-03T13:56:50+00:00

github is removing git:// access, and fetches will start experiencing interruptions in service, and eventually will fail completely. bitbake will also begin to warn on github src_uri's that don't use https. So we convert the meta-virt instances to use protocol=https (done using the oe-core contrib conversion script) Signed-off-by: Bruce Ashfield

podman: check for ipv6 in DISTRO_FEATURES

2021-10-18T17:35:22+00:00

When setting up networking, podman is looking for the ipv6tables executable. We have iptables in our rdepnds, but the ipv6 variant won't be available unless ipv6 is in DISTRO_FEATURES. We can use our distro feature check to detect the issue and alert the developer. Signed-off-by: Bruce Ashfield

podman: upate to v3.4.o

2021-10-04T12:48:30+00:00

We adjust the LICENSE checksum due to: commit 84694170402ff699065382ba2d2fb172c3b6c88f Author: Daniel J Walsh Date: Thu Aug 26 13:15:23 2021 -0400 Globally replace http:// with https:// [NO TESTS NEEDED] Hopefully existing tests will find issues. Signed-off-by: Daniel J Walsh and import the following changes: 6e8de00bb Bump to v3.4.0 3c93afbf4 Final release notes update for v3.4.0 128e168be Support selinux options with bind mounts play/gen 855746cc9 Fix release notes 09b353081 Release notes for v3.4.0 final release 2247d5f1b Disable docker and alias to podman in FCOS ignition 7d72e8324 [NO TESTS NEEDED] Add port configuration to first regular container 4fc40c82f Remind user to check connection or use podman machine 5064fd519 Ensure pod ID bucket is properly updated on rename ba74d6e6e libpod: do not call (*container).Config() a1199dbaf [CI:DOCS] cmd/podman: no dot for short descriptions ddc2b9bbe System tests: speed up. They've gotten too slow. b3af5a92c stop: Do nothing if container was never created in runtime 7bfc5250d remote build: EvalSymlinks() the context directory 7395459c7 podman machine: do not join userns 5e9aa13dc added healthcheck to ps command 6638a91e8 Fix english on prune prompt 31df5b78f rootful: do not set XDG_RUNTIME_DIR for cni plugins 8c944274f Revert "rootful: unset XDG_RUNTIME_DIR" 6ef2d3bd8 shell completion: do not show images without tag 063ba47d7 Update docs for --platform in podman-build.1 0f87cfd28 podman generate kube should not include images command da67c7199 Also show the (initial) disk size 2c5382ba9 Show cpus and memory in machine list 57c055f61 Ignore mount errors except ErrContainerUnknown when cleaningup container 8084c5ef2 Allow machine options to be set from containers.conf c0efa0dba Vendor in containers/buildah v1.23.1 6c7445d2b Vendor in containers/common v0.44.2 d6f6767a5 Set context dir for play kube build f2c676e99 [3.4] podman save: enforce signature removal 8ee18bde1 Use a new markdown converter for sphinx 9dd75d311 Bump to v3.4.0-dev e343b5368 Bump to v3.4.0-rc2 5bc648762 Release notes for v3.4.0-RC2 72e19cf51 Generate kube should'd add podman default environment vars 909cbfe21 sync container state before reading the healthcheck 897150946 Eighty-six eighty-eighty e06abee1d vendor c/psgo@v1.7.1 d45cbbda3 Add a backoff and retries to retrieving exited event 70da2e858 [CI:DOCS] Add network alias note in man pages a98e0371e Remove references to kube being development 70a428662 Support --format tables in ps output 45f8b01f6 Add podman image/container inspect man pages 863ea75c4 compat API: /images/json prefix image id with sha256 c66db2b70 [CI:DOCS] Add link to skopeo delete in podman rmi 7bfe9ca3d remote untag: support digests 7e6921170 System tests: cleanup, and remove obsolete skips 8784c1dd6 Remove unused code from libpod 79966def8 [CI:DOCS] markdown cleanup be15a01c5 Only add 127.0.0.1 entry to /etc/hosts with --net=none d27fcbdc2 container runlabel remove image tag from name 1a25a90a4 Fix /auth compat endpoint c8fd65ea6 fix inverted condition 3bd3c6213 Fix machine image 331ce0f7e utils: return error message from StartTransientUnit 046fa2740 utils: raise warning only on cgroupv2 6001cd02a test/apiv2: set main version back to 3 4406ebb46 [3.4] vendor c/common@v0.44.1 40eeb7d3b runtime: move pause process to scope e6fe5d631 system: move MovePauseProcessToScope to utils ae5a5b51b system: always move pause process when running on systemd 34c9ce2ec system: avoid reading pause pid file 41cd360dc Bump to v3.4.0-dev bd47b9eff Bump to v3.4.0-rc1 29edeaa89 Fix buildah-bud tests by using main's diff file 66eb69224 Fix podman-build manpages by using version from main a647e1d18 Fix release notes 0d43151c2 Remove Pod CPU tests fd56c8386 Set DEST_BRANCH in cirrus to fix CI 4841ec5c6 Final release notes for v3.4.0 RC1 5532cd488 libpod: honor --cgroups=split also with pods e07dccc3a build: take advantage of --platform lists c7c4cb886 build.bats: fix copy tests after containers/buildah#3486 c407813d6 build: mirror --authfile to filesystem if pointing to FD instead of file 69e327378 Bump to Buildah v1.23.0 331d4c5c7 Further release notes updates 901cf71a6 Show variant and codename of the distribution 507000a30 api: handle nil pointer dereference in rest endpoints 702e524ff Fix example in podman machine init man page c8cbd87fd Document `all` query parameter for /libpod/images/prune 939db105c tests: enable --cgroups=disabled test for rootless e0881fd5e tests: simplify --cgroups=disabled test 74bc365eb Enhance bindings for IDE hints e37883f13 Cirrus: NM/CNI workaround + Remove prior-Ubuntu 0ca62196a libpod: rootful close binded ports b6789c3d5 fix restart always with rootlessport ffc8e57d3 remove rootlessport socket to prevent EADDRINUSE fd8d332a4 test: enable --cgroup-parent test 33591c3ef Search gvproxy with config.FindHelperBinary() 1af0f8934 Add deprecated fields for 1.22+ clients that still expect them c6e4453f6 If container exits with 125 podman should exit with 125 5829d62ea Use default username for podman machine ssh c487389fa bump c/common to v0.44.0 069d90124 Initial release notes for v3.4.0 RC1 3c24d1fda Remove pod create options `--cpus` and `--cpuset-cpus` fceec6972 Use new aarch64 fcos repos 31604b43d Revert "logs: adjust handling around partial log messages" c23f81fab Fix #11444: remote breaks with stdout redirection a8875faca [CI:DOCS] Remove short 'a' option from all-tags eec59cea2 Bump github.com/containers/storage from 1.35.0 to 1.36.0 deaf96924 Refacter API server emphasis on logging 4fbc5b8fe Stop outputting 'healthy' on healthcheck 81751bebc Bump github.com/opencontainers/selinux from 1.8.4 to 1.8.5 f5e4ffb5e Add init containers to generate and play kube d2e10a71d podman unshare keep exit code 309d98971 Bump github.com/containers/psgo from 1.5.2 to 1.6.0 f87f27ddc Add /containers/stats response to API docs 8d638d502 try to create the runroot before we warn that it is not writable 5bf220144 machine: set filemodes in octal 6f36a47ac podman machine: enforce a single search registry 50688da29 stats: detect containers restart 2b85382ca api: correctly set the container stats 53dc99fa6 stats: allow to read stats for paused containers a4cc32c2c Fix missing args in name in example 5fdd0431b Cirrus: Run unit-tests rootless 4ccb4f81f Add a system test to modify and import an exported container. c65b43a0f Bump github.com/godbus/dbus/v5 from 5.0.4 to 5.0.5 7cf22279d Fix conmon attach socket buffer size e5468d404 test/e2e/search_test.go - relax tests 78c5a47fc vendor mpb@v7.1.4 6888b061d inspect: printTmpl must Flush writer 4d9dcab0c podman upgrade tests for networking bbdaf837b Normalize auth key before calling `SetAuthentication` 2f967b81c Add logDriver to podman info ab272d1e9 Add 'Machine %q started' message when podman machine start successful cee689af1 Fix spacing on --userns options in docs 1ff797e36 system tests: new random_free_port helper a1cab358c fix play kube can't use infra_image in config file 6aa666a27 container inspect: improve error handling aa412ccc4 test/testvol/main.go: Fix missing arguments to Errorf() f18ccbcc0 fix play kube --network options 748c2700b pkg/bindings/images.nTar(): set ownership of build context to 0:0 bfcd83ecd Add Checkpointed bool to Inspect 0d1ba0a58 Remove changelog.txt from the repository 8b4f99ac2 QEMU Apple Silicon: Find BIOS FD wherever 1150d1b0b Document default timeout for libpod API Container Restart d1573b95e generate systemd: handle --restart 1eaa44959 logs -f: file: fix dead lock 3d02cfb5e network create: add warning for deprecated macvlan flag bd6403927 cgroup-info: check if user.slice is valid before accessing value 57133bb33 Fix warning of unsupported feature on MacOS c01f7725a TCG Accel fallback for Apple Silicon. Iss #10577 ebd37ede9 Example says there is not IP then in the next command suggests to use it 11fc0e554 kube: Add support for podman pod logs ce5baa125 feat: add localhost into hosts if the networking mode is not host e151f4c9f Fix #11418 - Default TMPDIR to /tmp on OS X 5d31c4250 Bump release to 3.3.1 274a3bc80 Remove unused stubs intended to start a machine with libvirt 8d9e19b03 Spell "build linux darwin" as "build !windows". d346e6e73 Add filtering functionality to http api secrets list 90998176d machine: always check error of net.Dial, even after last try 02a0d4b7f auto-update systemd test: skip on RHEL b3bb7da72 [#11408] podman help machine init cba114dd3 manifest: rm should not remove referenced images. a077335ce make podman run --systemd case insensitive ddeaaa47c Drop dependency on iproute e3c7e02a0 System tests: add cleanup & debugging output abdedc31a rootlessport: allow socket paths with more than 108 chars a55f595fe podman stop always cleanup f9a689f3e generate systemd: clarify limitations of `--new` 1ed0a7209 Cirrus: Reduce APIv2 task timeout 1fb07c422 Make secret env var available to exec session d674eb41e [CI:DOCS] podman cp: highlight globbing and multi-file copy 10144b707 pass LISTEN_* environment into container 9f7bad7da Use UNMERGED vbauerster/mpb PR to fix a pull deadlock b3aee22bd Cirrus: Skip APIv2 tests for [CI:DOCS] 375c3a7b3 docs: fix indentation for userns modes 1122c66ce upgrade test: add new baseline a2a166345 clean up socket and pid files from podman machine 06f94dd09 rootless cni: resolve absolute symlinks correctly ec1f350ee container: resolve workdir after all the mounts happen. de3920c0e auto-update: fix authfile label 9b7ef3dad runtime: Warn if XDG_RUNTIME_DIR is set but is not writable. a5adc3d80 Add support for mount options to API db60a1e65 Add support for libsubid 846941704 Globally replace http:// with https:// ab6c43f3e Shell completion for --format with anonymous fields d28e85741 InfraContainer Rework 1e6d1e5c6 Add filter params description to volume list/prune docs f5ce02b22 Bump github.com/containers/image/v5 from 5.15.2 to 5.16.0 d5507704e volumes: Add volume import to allow importing contents on tar into volume e88b62b34 Fix swagger issue c6e12a2e4 Bump github.com/fsnotify/fsnotify from 1.4.9 to 1.5.1 1dc6d1473 Fix file descriptor leaks and add test 1e176923b teardown play kube 3f22e5296 Allow setting of machine stream and image path from containers.conf 274d6fa19 generate systemd: use --cidfile again 4b2dc48d0 podman inspect show exposed ports 74ab2aaf9 Revert "generate systemd: custom stop signal" c0b1edd6a Network interface 70801b3d7 generate systemd: custom stop signal 3007bd4a9 130-kill.bats: increase timeouts from 10s to 60s 21f396de6 logs: adjust handling around partial log messages b20a54705 330-corrupt-images: don't try to tag with a canonical name fc6a02033 bump github.com/containers/common 1411fa5f2 libpod/Container.readFromJournal(): don't skip the first entry 6b06e9b77 Switch eventlogger to journald by default 02e59c668 utils.RunUnderSystemdScope(): always close Conn d06d285e6 logFile until flag issue edddfe8c4 volumes: Add support for exporting volumes to external tar d24a5d9fd Bump github.com/opencontainers/runc from 1.0.1 to 1.0.2 7b54a5fbe profiling: higher memory sampling rate fe4dc452e Bump github.com/containers/buildah from 1.22.0 to 1.22.3 1493b86c7 Bump github.com/onsi/gomega from 1.15.0 to 1.16.0 feff0d3c4 Use pod netns with --pod-id-file 57a0ed182 Bump k8s.io/api from 0.22.0 to 0.22.1 319c85e89 Support for --tls-verify flag in podman run & podman create e5d8defc4 Update README for 3.3.0 release 33fee83de add flag to record memory profiles db7eaa98b Bump k8s.io/apimachinery from 0.22.0 to 0.22.1 c22f3e8b4 Implement SD-NOTIFY proxy in conmon 7f3f792e2 Fix network aliases with network id fd32c73e3 Update /version endpoint to add components 745f6d949 e2e tests: fix overlay: Unknown option vfs.imagestore 16dfce486 Podman info output plugin information 0897946f6 [NO TESTS NEEDED] Clean up swagger b19812b5a machine: compute sha256 as we read the image file 043457192 machine: check for file exists instead of listing directory 82bb999e3 Bump github.com/containers/image/v5 from 5.15.1 to 5.15.2 2d0a0c0d2 fix rootlessport flake 592fae422 Volumes: Only remove from DB if plugin removal succeeds 9dd088e55 Cirrus: Confirm CGv1 / CGv2 VM expectations 5c837fe5b Skip stats test in CGv1 container environments dc7038288 Fix AVC denials in tests of volume mounts 77f665200 Restore buildah-bud test requiring new images 14f3658da Revert ".cirrus.yml: use fresh images for all VMs" aeffdb05d pkg/bindings/images.nTar(): slashify hdr.Name values cd40c875a Add ability to build images in play kube f0247df89 Bump github.com/rootless-containers/rootlesskit from 0.14.4 to 0.14.5 970529b6a Documented ways to fix firewall rules that are lost when firewalld reloads c1b7787a2 Bump github.com/containers/image/v5 from 5.15.0 to 5.15.1 bfc936261 Cirrus: Resolve two upgrade-test FIXMEs 1f632f357 fix: unifiedOverlays should be assigned if no conflicts found. e9f4d8179 Bump github.com/containers/storage from 1.34.0 to 1.34.1 e7ee15f8c cgroup-manager-systemd:Fail early if user:rootless and relevent session is not present. 3cee85531 libpod/option.go remove error stutter from wrap/wraf fe2be7f88 make sure that signal buffers are sufficiently big f98569946 volume: move validating volume dest from client to server. 91e21bed4 rootful: unset XDG_RUNTIME_DIR 2a8c41448 Fix rootless cni dns without systemd stub resolver 257d5e8a7 Fixed healthcheck default values when container created via compat API d99756434 Add space trimming check in ValidateSysctls bef26f258 rename oneshot initcontainers to once 9fc946563 Set gvproxy path to /usr/libexec/podman/gvproxy 5a32946d6 For compatibility, ignore Content-Type 404488a08 Run codespell to fix spelling 643178c1e Revert "Use static path for gvproxy" 73a755eec Fix device tests using ls test files d0e3b3c3a Enhance priv. dev. check cfbbc38a5 Workaround host availability of /dev/kvm 2e3ba9cd9 Change connection error to be helpful for machine users ed30ae4a8 Add until filter to podman pod ps 800a65fb2 [CI:DOCS] Fix multi-arch image docs 4e4c4b62f Bump github.com/opencontainers/selinux from 1.8.3 to 1.8.4 af46a64a8 Document source ip for the rootlesskit port handler f7de8bc80 Bump github.com/containers/storage from 1.33.1 to 1.34.0 8b9b925e7 skip flaking auto-update test 27443660c Enable docker-py compat. testing w/ ignored result 221b1add7 Add support for pod inside of user namespace. 12ac4198c Libpod images pull changes e7b7c90ba Reproducible Builds: trim embedded cgo paths 170fb2572 Alias build to buildx, so it won't fail bb96da9f1 Skip cgroup-parent test due to frequent flakes a4bdc67c4 Added autocompletion for images and system connections 1adeb2b70 podman info show correct slirp4netns path 79e4baf4c Bump github.com/onsi/gomega from 1.14.0 to 1.15.0 541e83ffe personality: Add support for setting execution domain. 88b9cbd5e Bump k8s.io/api from 0.21.3 to 0.22.0 e52187e7f show podman machine ssh command line 30df551bd auto-update: simple rollback adee0ca59 Bump github.com/BurntSushi/toml from 0.3.1 to 0.4.1 eb2e99101 Bump k8s.io/apimachinery from 0.21.3 to 0.22.0 c9e2f2f60 [CI:DOCS] tests-expect-exit: include source line numbers 8cbbbe6ef Fix TS parsing for fractional values 3c3fa6fac implement init containers in podman f4dd22b31 Cirrus: Fix not uploading logformatter html ddc360fe1 Bump Buildah to v1.22.0 [NO TESTS NEEDED] 41f94a4dc Fix podman unpause,pause,kill --all to work like podman stop --all cfcd1e186 Do not add an entry to /etc/hosts with `--net=host` f40a0e7c8 Handle timezone on server containers.conf e78f3e8c4 Bump github.com/docker/docker bd29ec4c3 Bump github.com/rootless-containers/rootlesskit from 0.14.3 to 0.14.4 9cc974c96 Only support containers stats using cgroups v2 ecf103302 podman info: try qfile before equery cc43b5133 image scp: fix typo in output e88d8dbea fix rootless port forwarding with network dis-/connect 4acc1d685 Use static path for gvproxy a210a2292 Compat API: Fix healthcheck status and healthcheck config 0762c7e97 Bump github.com/opencontainers/selinux from 1.8.2 to 1.8.3 985c71708 Fix handling of user specified container labels 03ffba29a podman-registry: minor usability updates 0ab9d19ad Bump to v4.0.0-dev 34b28d959 e2e tests: re-enable and fix podman stats tests c0952c733 Support size and inode options on builtin volumes 1d10ca739 Created scp.go image_scp_test.go and podman-image-scp.1.md 8ccf2539e test: move container process to a sub-cgroup cdbbd7915 stats: add a interval parameter to cli and api stream mode Signed-off-by: Bruce Ashfield

podman: update to 3.3.1

2021-09-06T14:57:40+00:00

Bumping libpod to version v3.3.1-2-g364efce39, which comprises the following commits: 1b33f7675 Bump to v3.3.2-dev 4c5283fab Bump to v3.3.1 bea109608 clean up socket and pid files from podman machine 68a059d89 Update release notes for v3.3.1 0103a0459 rootless cni: resolve absolute symlinks correctly 77948c8b4 Add filter params description to volume list/prune docs aa754c7e2 logFile until flag issue f363b805c Fix file descriptor leaks and add test d1ea54549 utils.RunUnderSystemdScope(): always close Conn 17afae4eb Use pod netns with --pod-id-file c16daa07e e2e tests: fix overlay: Unknown option vfs.imagestore 85846b633 change error comparison for exec.ErrNotFound 822818287 generate systemd: use --cidfile again 8aeaf681d Bump to v3.3.1-dev 98f252a3a Bump to v3.3.0 Signed-off-by: Bruce Ashfield

virtual/runc: don't rprovide virtual/

2021-09-06T14:57:17+00:00

Similar to the oe-core commit: commit 93ac180d8c389f16964bce8bd5538d9389e970e6 Author: Michael Opdenacker Date: Wed Sep 1 11:20:20 2021 +0200 meta: stop using "virtual/" in RPROVIDES and RDEPENDS Fixes [YOCTO #14538] Recipes shouldn't use the "virtual/" string in RPROVIDES and RDEPENDS. That's confusing because "virtual/" has no special meaning in RPROVIDES and RDEPENDS (unlike in PROVIDES and DEPENDS). Instead, using "virtual-" instead of "virtual/" as already done in the glibc recipe. We stop rproviding virtual/runc to keep the namespace clean. There aren't many users of this virtual provides, but we keep it around (for now) to maintain compatibility. At the same time we convert the RPROVIDES to virtual-runc, to keep it available and consistent with oe-core use virtual-libc, etc. Signed-off-by: Bruce Ashfield

podman: update to 3.3.0

2021-08-27T14:50:45+00:00

Bumping libpod to version v3.3.0-2-g8809aed56, which comprises the following commits: 8aeaf681d Bump to v3.3.1-dev 98f252a3a Bump to v3.3.0 2408247f4 Final release notes for v3.3.0 dd3a49703 Fix network aliases with network id b5e04ae11 machine: compute sha256 as we read the image file a52b6bf23 machine: check for file exists instead of listing directory b71ef443a pkg/bindings/images.nTar(): slashify hdr.Name values f0d0c48d2 Volumes: Only remove from DB if plugin removal succeeds 89818f72b For compatibility, ignore Content-Type 7fb7f15af [v3.3] Bump c/image 5.15.2, buildah v1.22.3 5fc7c880a Implement SD-NOTIFY proxy in conmon 15fff7d91 Fix rootless cni dns without systemd stub resolver 63e06acfe fix rootlessport flake a92441e1b Skip stats test in CGv1 container environments 37b22af33 Fix AVC denials in tests of volume mounts daa311db3 Restore buildah-bud test requiring new images 2757d868c Revert ".cirrus.yml: use fresh images for all VMs" cd0677d89 Fix device tests using ls test files ce7ed3359 Enhance priv. dev. check 1d54315b6 Workaround host availability of /dev/kvm c0d0d31c4 Skip cgroup-parent test due to frequent flakes 0c7f08805 Cirrus: Fix not uploading logformatter html a098eafce Bump to v3.3.0-dev 7aa18e0a6 Bump to v3.3.0-RC3 e200b07f5 Release notes for v3.3.0-RC3 204ac5d46 [v3.3] Bump c/storage to v1.34.1 and c/image to v5.15.1 440188f3b fix gvproxy path search for macos de67e990e Bump to v3.3.0-dev 88559c197 Bump to v3.3.0-rc2 1acbdf940 Set gvproxy path to /usr/libexec/podman/gvproxy 7442f0b85 Revert "Podman Pod Create --cpus and --cpuset-cpus flags" 61a5e9812 Address review comments e63753afd Final release notes for v3.3.0-RC2 f9f315c75 Document source ip for the rootlesskit port handler 66c0024a0 podman info show correct slirp4netns path d746a7e09 show podman machine ssh command line 4b42265b5 Fix TS parsing for fractional values 85d5c24ed Handle timezone on server containers.conf 67bf11e8c Fix podman unpause,pause,kill --all to work like podman stop --all a1afb2300 Do not add an entry to /etc/hosts with `--net=host` a82006160 Only support containers stats using cgroups v2 c836ffe5b Compat API: Fix healthcheck status and healthcheck config 04e59f11d podman info: try qfile before equery 870576b39 test: move container process to a sub-cgroup cb7f0a302 Fix handling of user specified container labels d749770fe Release notes for v3.3.0-RC2: Initial 0c82c6fa8 Bump github.com/rootless-containers/rootlesskit from 0.14.3 to 0.14.4 0eec16ce9 fix rootless port forwarding with network dis-/connect 50c6cc229 [v3.3] Bump to Buildah v1.22.0 [NO TESTS NEEDED] b1c9c5b5f Disable aarch64 support 489e0f075 Cirrus: CI Support for v3.3 Branch b347a3583 Bump to v3.3.0-dev ce0dee984 Bump to v3.3.0-rc1 c1156d48b Bump github.com/containers/storage from 1.33.0 to 1.33.1 58672847e Bump github.com/containers/image/v5 from 5.14.0 to 5.15.0 9d33abac6 Fix auto-update system test for older systemd 2a484e782 ps: support the container notation for ps --filter network=... 732ece6ae Add `--accept-repositories` integration tests d59391c04 system tests: fix race in stop test 2b5d9cd7d Fix: healthcheck tests use .Should() instead of .To() 872c442e6 Remove ReadHeaderTimeout 724d04823 rootless: avoid zombie process on first launch 1d34a2c4c Update transfer.md ec9dad7e4 buildah bud tests under podman-remote a9f6592af Fixed Healthcheck formatting, string to []string 4df6e31cc remote build: fix streaming and error handling e3b0ba928 [CI:DOCS] Update podman-cp manpage 013267006 cp: consolidate and simplify 67d439197 rootless: check that / is mounted as shared 32b589216 Multi-arch image build: Daily version-tag push 60b9e8c0d Added tests for out of and into pod checkpoint and restore support eb9446778 Support checkpoint/restore with pods 3375cbb19 Vendor in go-criu v5.1.0 for Pod checkpoint/restore support 92dce3e2f Prepare CRIU version check to work with multiple versions b09073832 Bump github.com/containers/storage from 1.32.6 to 1.33.0 0aec93edc cp system tests: reduce number of exec's 6fe03b25a support container to container copy 63ef5576e command: migrate doesn't move process to cgroup a0313ef92 rootless: do not overwrite err variable 7689783ae exec: fix cleanup fd1f57b3a Fixed Healthcheck formatting, string to []string 7fa4d2cb1 Add prune until filter test for podman volume cli 8d5d5face dual-stack network: fix duplicated subnet assignment 5473490c6 fix: podman manifest push respect --tls-verify flag c197d19fe play kube: support capitalized pull policy 1b6423e9f refine dangling checks 23a938fa2 Bump github.com/containers/image/v5 from 5.13.2 to 5.14.0 1a188f622 Add tests to verify CORS is enabled 2c9f18100 Fix handling of shadow-utils dcb5c92c0 import: write stdin to tmp file 8f9d33b7f Networking test: fix silent breakage 0f708efd8 Implemented --until flag for libpod's container logs 9c659b3bc docs: fix broken remote client link 2d8e837a9 Add until filter to volume ls filters list 12f4b14a1 Add notes to flags not supported on cgroups V2 3e79296a8 Support DeviceCgroupRules to actually get added. 4376f14c3 Ensure journald events tests only run where supported ac588c751 [CI:DOCS] Fix GitHub URL to Podman logo db2f47428 Drop podman create --storage-opt container flag 595227095 e2e tests: prevent 'Expect(ExitCode())' pattern 064bd9d19 Copy the content from the underlying image into the newly created volume. Fixes: #10262 313c7118e system tests: cleaner, safer use of systemd e64545004 [CI:DOCS] Multi-arch image workflow: Make steps generic 2b98a226b system test: auto-update: multiarch fixes caf03fd7a system test: auto-update: allow running as rootless 117850e6e Fix handling of selinux labels in podman play kube 6430c1316 [CI:DOCS] refine the runlabel man page eaaca4999 compat: image create: handle platform correctly 80e807a19 Flake Fix: Wait before connecting container port c622c7f2a (minor) typo fix: timeout variable 0784a5d04 Bump github.com/opencontainers/runc from 1.0.0 to 1.0.1 b92bbfd76 Just restore protections of shadow-utils 81e32b180 Kube: Add liveness probe for containers. b8accad0e Update Release Notes and README for 3.2.3 50fcb06e7 Bump k8s.io/api from 0.21.2 to 0.21.3 2e02942d4 vendor containers/common@main 6f1c7a0b6 systemd: require network*-online*.target e1ac0c303 vendor containers/common@main e3a09c51e Bump k8s.io/apimachinery from 0.21.2 to 0.21.3 be51173ed APIv2 (python) tests: fix flake 9924c57d4 podman start: remove containers configured for auto removal af40dfc2b --infra-name command line argument 7996e2b82 Randomize the auto-update of podman containers e4dcb1004 System tests: fix a multiarch problem ec6150751 Correct a typo in documentation f7321681d podman pod create --pid flag 0007c98dd Fix race conditions in rootless cni setup 547fff270 e2e tests: use Should(Exit()) and ExitWithError() 59f31d86a auto-update: add --dry-run e73d48299 CNI-in-slirp4netns: fix bind-mount for /run/systemd/resolve/stub-resolv.conf c9970647b podman-remote build use .containerignore over .dockerignore 100c23dc5 Fix up documentation of the userns audit flag 48e6a8eed Return macvlan object in /network REST API response Fixes: #10266 6ced24d0b Fix broken volume and container tests 01cfb51fe auto-update: make output more user friendly 92c9def93 Update nix pin with `make nixpkgs` cbbb1a80f Perform a one-sided close of HTTP attach conn on EOF 7d6f3c4dc Bump github.com/google/uuid from 1.2.0 to 1.3.0 6fcf0b2f3 auto update: minor style nits a90a4ec7c auto update: pass through a context a8847c01f auto-update: use libimage for image checks eda8d1f58 auto update: fix authfile detection db26e1ef9 auto-update: make restarted unit more obvious 6ca574dc3 Update USE in order to fix tests fe044d51e Fix cirrus-cron failure notification GH workflow 6cac65c84 fix: uid/gid for volume mounted to existing dir 084dbeb56 Bump github.com/containers/storage from 1.32.5 to 1.32.6 00db5c6ea Manifest create subcommand should accept more than 2 arguments 48ff2ef5a Don't exclude Dockerfile, Containerfiles from tar content 6bdb990c9 Restore headers of optional information in 'podman pod ps' 4624142c2 Implemented Until Query Parameter for Containers/logs a2d15d981 Mention new hostname for loopback IP daebdf385 Add container config to compat image inspect 00ed696ed fix: logo not loading after barnch renaming 95c463785 Update docs/tutorials/rootless_tutorial.md: e5fcffc55 Remove GetStore function from Libpod 563532aef Bump github.com/onsi/gomega from 1.13.0 to 1.14.0 38863e764 Replace old RESTful tutorial with updated README 38bef70b3 manifest push --rm: use libimage for removal 2c7c67958 Make rootless-cni setup more robust 518457b35 Bump github.com/cyphar/filepath-securejoin from 0.2.2 to 0.2.3 59abb77fc multiple image pull support 4ea4a92c0 Fixed notation for macOS 0c9dc86de Create podman temp dir on machine start ed51e3f54 podman service reaper 84da70a0f update shell completion scripts 924cd37a3 Bump github.com/spf13/cobra to v1.2.1 8f6a0243f podman diff accept two images or containers 735be1248 force github.com/spf13/cobra@v1.1.3 7eb9ed975 vendor containers/common@main 8606ead91 [CI:DOCS] podman search: clarify that results depend on implementation 493786fba podman: ignore ESRCH from kill 86c601414 Implement --archive flag for podman cp 092902b45 Handle advanced --network options in podman play kube 40ef17ac2 Cirrus: Fixes due to master->main rename 8b52204ba vendor containers/common@7482cf851dcc 2243b6020 reset: remove external containers on podman system reset 2ce78aace Enhance system connection add URL input 6d37e0348 Add CNI rootless networking troubleshooting for v2.2.1 05f39af5b Bump github.com/containers/storage from 1.32.3 to 1.32.5 3e8c0e00d Make system connection ls deterministic fb5f70296 Bump github.com/containers/ocicrypt from 1.1.1 to 1.1.2 1edada477 Makefile: remove install.cni 3d0e08f04 prefix `ETCDIR` with `${PREFIX}/` f95b0995e remove `pkg/registries` e7507fe7c make DriverOpts name consistent. a7a701196 fix: swapped volume relabel option values 364e8a26d pkg/systemd: don't require LISTEN_FDNAMES for socket activation b39aacf32 add @mtrmac to OWNERS b1082696e cp: do not allow dir->file copying ee7a9d736 [NO TESTS NEEDED] suggestions for incorrect cmds b56b4b537 read secret config from config file if no user data. 15fbf950e [CI:DOCS] podman save: clarify formats and transports 9db534e53 [NO TESTS NEEDED] Create /etc/mtab with the correct ownership 7d83f9b6c [CI:DOCS] Follow-up to PR 10676 bbd085ad1 Podman Pod Create --cpus and --cpuset-cpus flags 6ecdf4c38 Health Check is not handled in the compat LibpodToContainerJSON f2dff41db Support log_tag defaults from containers.conf 525cb54e1 [CI:DOCS] push/pull docs: clarify supported transports 5fc622f94 create: support images with invalid platform f26fa5392 Podman Stats additional features 1aa9dcfad markdown/*: typos 'a image' d12027e0d disable tty-size exec checks in system tests a0b24de32 Add support for volume prune until filter to http api 1f388ede6 Add --format to connection list a84fa194b getContainerNetworkInfo: lock netNsCtr before sync e01460853 Do not use inotify for OCICNI 7f98d2ddb docs: podman-rmi removes dangling parent images ee4cab0e0 logs: k8s-file: restore poll sleep f4ba433b1 logs: k8s-file: fix spurious error logs 0fb165ed0 Fix systemd-resolved detection. 9cc3473b5 Bump k8s.io/api from 0.21.1 to 0.21.2 1e36be439 Add support for podman login --verbose 7864108ff fix systemcontext to use correct TMPDIR 9a02b5055 Add an entry for `/run/user-$UID/libpod` to tmpfiles b56d6c646 Bump github.com/containers/storage from 1.32.2 to 1.32.3 d39823085 Bump k8s.io/apimachinery from 0.21.1 to 0.21.2 2bd382c8c Fix documentation of the --format option of podman push b6662eed3 Vendor in containers/common v0.40.0 bd9987239 Scrub podman commands to use report package 6b230bc92 Fix multi-arch image build clone:failure 705b799af Cirrus: Prevent BZ1965743 workaround pruning e344a5899 [CI:DOCS] UPDATE manpages with MANPAGE_SYNTAX 666f555aa Fix resize race with podman exec -it 404d5edb1 .cirrus.yml: use c5521575421149184 for Ubuntu 769df3207 test: drop invalid test 969cc3237 utils: move message from warning to debug 517479731 utils: improve error message eb927dc84 Docs Switch from Query Param to Header 9c81b8cf7 add correct slirp ip to /etc/hosts fc9868e22 Fix panic condition in cgroups.getAvailableControllers 2a974e8b9 Create user storage dir with correct permissions 5f2c0f63a Fix building static podman-remote 81eb71fe3 Fix permissions on initially created named volumes 3ddadc532 Image import fromSrc now supports OS/Arch 302b3084e Restart all containers with restart-policy=always on boot e8006c797 Fix handling of podman-remote build --device 4bca1984a UPDATE manpages with MANPAGE_SYNTAX 8d860cfcd podman-run.1.md:detach-keys: spell the default value just once ded2f004f Fall back to string for dockerfile parameter 44d9c453d Fix network connect race with docker-compose ad3b56c62 Fix volumes with uid and gid options 3a65ba2fa Add support for podman remote build -f - . 991647c77 Add documentation on ignore_chown_errors 40d70334e System tests: the continuing multiarch saga 62f4b0a19 Add ExecDied event and use it to retrieve exit codes 341e6a162 Always spawn a cleanup process with exec 4a4fe48cc Fix docs links due to branch rename 240bbc3bf Fix pre-checkpointing 3b6cb8fab container: ignore named hierarchies d9a1c34e4 Fix restoring of privileged containers c3a14103f Fix build tags for pkg/machine... b5890fc86 Bump github.com/containers/storage from 1.32.1 to 1.32.2 e7e09bf2f Update nix pin with `make nixpkgs` d5527c330 System tests: deal with crun 0.20.1 11badab04 rootless: fix fast join userns path 8e89d7071 [CI:DOCS] Update swagger for inspect network a9cb82498 podman-remote build should handle -f option properly 5117deda0 fixed docs and schemas 18fa124df Improve systemd-resolved detection 84b55eec2 logs: k8s-file: fix race a5ad36c65 Fix image prune --filter cmd behavior 346c7fda6 Bump github.com/containers/buildah from 1.21.0 to 1.21.1 c60548279 remote pull: cancel pull when connection is closed 8378a9c4d Fix network prune api docs 5e7876089 auto-update tests: various fixes f6d9dbb62 [CI:DOCS]instructions for podman machine on macs 260192670 Fix compat create with NetworkMode=default 17193e468 System test: Add podman auto-update related test cases a2b842df4 Version bump: 3.3.0-dev 949374e58 Added tests for different checkpoint archive compressions 68070f1b2 Add --compress to podman-container-checkpoint.1.md 8aa5340ad Add parameter to specify checkpoint archive compression 10875a67e Order checkpoint options in man page alphabetically ab7e7f651 UPDATE MANPAGE_SYNTAX (commit,attach,auto-update) 13a807b86 fix go-bindings examples with v3 new parameters 8f89bc4e0 [CI:DOCS] Document which CNI fields are encoded 1f73374ac remote: always send resize before the container starts 9c5048544 remote events: support labels ce01b4f09 made requested changes, fixed api tests 2810c478a Add CORS support df7c3a703 [CI:DOCS] fix incorrect network remove api doc e23c5b25f Add restore --publish to the man page 837ba7ec3 Add test for restore --publish 1ac9198d7 Allow changing of port forward rules on restore 86610c785 remote events: fix --stream=false 9ac526759 systemd/generate: change type to notify 346c08225 Update main branch to reflect 3.2.0 release b928278e6 extend docs to include help for when pub/priv key is signed with an unsupported algo 735470ff2 Bump go.etcd.io/bbolt from 1.3.5 to 1.3.6 48ea142ca Bump github.com/docker/docker b36278c3e Bump github.com/opencontainers/selinux from 1.8.1 to 1.8.2 df2e7e00f add ipv6 nameservers only when the container has ipv6 enabled 366016fa8 Bump github.com/onsi/ginkgo from 1.16.3 to 1.16.4 433a5a8c7 Fix spacing in buildthedocs 37f39eefe events: support disjunctive filters b6167cedb System tests: add :Z to volume mounts ff79b2e5a Fix link error 433674918 Use secrets and machine rst file properly 2cc4535e1 added tests in python rest api 7ef3981ab Enable port forwarding on host ad182976b Use request context instead of background 1daaf34d7 [NO TESTS NEEDED] API list networks should return [] when used with no networks 249da1b93 [CI:DOCS] rm containers-mounts.conf.5.md ef8ba99ff Use request context instead of background context 3330f9876 Better error handing for images/create compat api d657a070d Bump github.com/uber/jaeger-client-go 761466dca Bump github.com/onsi/ginkgo from 1.16.2 to 1.16.3 fb4a0c572 support tag@digest notation 530721841 generate systemd: make mounts portable 699272ed2 add missing space 51a8e01f8 [CI:DOCS] point IRC to libera.chat 2addc0f90 rootless: fix SIGSEGV ,make LISTEN_FDNAMES optional [Closes #10435]. [NO TESTS NEEDED] 5bd1b7dfd Update a way out of date transfer document 6deb1bc2a Manpage syntax proposal 33944cefe [Techinal Debt] Cleanup ABI vs. Tunnel CLI commands c9609d820 Vendor in containers/storage v1.32.1 9822c3309 create libimage-events channel in main routine 8e5388e41 Add options to podman machine ssh 61167834f Bump github.com/onsi/gomega from 1.12.0 to 1.13.0 de293c980 Handle image user and exposed ports in podman play kube fad6e1d3e Ensure that container still exists when removing 533d88b65 Add the option of Rootless CNI networking by default 10569c988 journald logger: fix race condition d1c9e034f libimage-events channel: fix data race 568e911b8 Bump github.com/containers/common from 0.38.4 to 0.39.0 738a8fe63 Add podman run --gpus flag for compatibility e6a3d6aac Fix race on podman start --all 9ab3fd876 Fix race condition in running ls container in a pod 586af5c74 docs: --cert-dir: point to containers-certs.d(5) afe33573d Handle hard links in different directories 2f5552c32 Podman info add support for status of cgroup controllers f22791aec Handle hard links in remote builds 4c095aa7e Improve OCI Runtime error 3c82059c3 Sync. workflow across skopeo, buildah, and podman 8bf852d5f Match swagger to "as built" output 0766777d6 Document all transports for podman manifest add 6ca721ccc Drop container does not exist on removal to debugf 94665bdf0 Bump github.com/containers/storage from 1.31.1 to 1.31.2 7bcfae44b Downgrade API service routing table logging c553181fd Vendor in containers/buildah v1.21.0 5a0257d46 Fix network create macvlan with subnet option 8352e5bc3 add libimage events 26652111b Bump github.com/opencontainers/runc from 1.0.0-rc94 to 1.0.0-rc95 12aa71ab8 Use correct extension for example network config 898a8ad28 update c/common 2b89b2414 Add support for podman manifest rm command 55f00bac0 Clear the storage-options from the graphdriver if users specifies --root 44c493717 Bump k8s.io/api from 0.21.0 to 0.21.1 bc0e12a04 Fix problem copying files when container is in host pid namespace 379df7f2c docs: generate systemd: XDG_RUNTIME_DIR af748b94e Bump k8s.io/apimachinery from 0.21.0 to 0.21.1 6b187e445 Bump github.com/vbauerster/mpb/v6 from 6.0.3 to 6.0.4 92e858914 fix: response body of containers wait endpoint 98955bedb Break up python APIv2 tests 8f3605e7d Add script for identifying commits in release branches bab7caafe Fix formatting and indentation in network http api docs cf30f160a Support uid,gid,mode options for secrets 0d811b233 Several shell completion fixes 6efca0bba Ensure that :Z/:z/:U can be used with named volumes 4cc19f9e0 Support automatic labeling of kube volumes b75bb4665 Create the /etc/mtab file if does not exists Signed-off-by: Bruce Ashfield

global: overrides syntax conversion

2021-08-02T21:17:53+00:00

OEcore/bitbake are moving to use the clearer ":" as an overrides separator. This is pass one of updating the meta-virt recipes to use that syntax. This has only been minimally build/runtime tested, more changes will be required for missed overrides, or incorrect conversions Note: A recent bitbake is required: commit 75fad23fc06c008a03414a1fc288a8614c6af9ca Author: Richard Purdie Date: Sun Jul 18 12:59:15 2021 +0100 bitbake: data_smart/parse: Allow ':' characters in variable/function names It is becomming increasingly clear we need to find a way to show what is/is not an override in our syntax. We need to do this in a way which is clear to users, readable and in a way we can transition to. The most effective way I've found to this is to use the ":" charater to directly replace "_" where an override is being specified. This includes "append", "prepend" and "remove" which are effectively special override directives. This patch simply adds the character to the parser so bitbake accepts the value but maps it back to "_" internally so there is no behaviour change. This change is simple enough it could potentially be backported to older version of bitbake meaning layers using the new syntax/markup could work with older releases. Even if other no other changes are accepted at this time and we don't backport, it does set us on a path where at some point in future we could require a more explict syntax. I've tested this patch by converting oe-core/meta-yocto to the new syntax for overrides (9000+ changes) and then seeing that builds continue to work with this patch. (Bitbake rev: 0dbbb4547cb2570d2ce607e9a53459df3c0ac284) Signed-off-by: Richard Purdie Signed-off-by: Bruce Ashfield

podman: update to 3.2.3 latest

2021-07-27T13:02:20+00:00

There's not much here, but we pickup the 3.2.4-dev parsing bump in preparation for that development stream. Signed-off-by: Bruce Ashfield

podman: update to v3.2.3

2021-07-20T13:46:28+00:00

Bumping libpod to version v3.2.3-2-g09e8afe3a, which comprises the following commits: 1e6fd46e9 Bump to v3.2.3 1d7ddf511 Update release notes for v3.2.3 e4c45e759 vendor containers/common@v0.38.16 cb7016224 vendor containers/buildah@v1.21.3 1a8b2a037 Fix race conditions in rootless cni setup e54a513b9 CNI-in-slirp4netns: fix bind-mount for /run/systemd/resolve/stub-resolv.conf 1469af265 Make rootless-cni setup more robust 6f9d9636a Support uid,gid,mode options for secrets bed195bf8 vendor containers/common@v0.38.15 75431a455 [CI:DOCS] podman search: clarify that results depend on implementation 37570b7b7 vendor containers/common@v0.38.14 6ecedc161 vendor containers/common@v0.38.13 8a41bf3ee [3.2] vendor containers/common@v0.38.12 2c003d978 Bump README to v3.2.2 bb2cbf0d5 Bump to v3.2.3-dev d577c44e3 Bump to v3.2.2 9f4afa1ea fix systemcontext to use correct TMPDIR 5dabff27d Scrub podman commands to use report package 647c2024e Fix volumes with uid and gid options c2dcb3ee2 Vendor in c/common v0.38.11 ba70363f6 Initial release notes for v3.2.2 a9fd54775 Fix restoring of privileged containers d5f0729b2 Fix handling of podman-remote build --device 90805fa39 Add support for podman remote build -f - . 854c27c0a Fix panic condition in cgroups.getAvailableControllers b0dc157af Fix permissions on initially created named volumes f5cdb95ee Fix building static podman-remote 1c04cfe83 add correct slirp ip to /etc/hosts 6c4ee8535 disable tty-size exec checks in system tests 6ba9617be Fix resize race with podman exec -it eb6d4b0cf Fix documentation of the --format option of podman push e5c939183 Fix systemd-resolved detection. 613f427a0 Health Check is not handled in the compat LibpodToContainerJSON 949573c5a Do not use inotify for OCICNI ab5e770c4 getContainerNetworkInfo: lock netNsCtr before sync b957bff8b [NO TESTS NEEDED] Create /etc/mtab with the correct ownership 6d394f0e4 Create the /etc/mtab file if does not exists 879d66e7d [v3.2] cp: do not allow dir->file copying 6f769bc0e create: support images with invalid platform 19a89db66 vendor containers/common@v0.38.10 e5c070baf logs: k8s-file: restore poll sleep 4d9a9149d logs: k8s-file: fix spurious error logs dac2d31a2 utils: move message from warning to debug 60752b320 Bump to v3.2.2-dev Signed-off-by: Bruce Ashfield

podman: Add seccomp as REQUIRED_DISTRO_FEATURES

2021-06-30T15:19:21+00:00

The libseccomp package is only available if seccomp is in DISTRO_FEATURES. Signed-off-by: Diego Sueiro Signed-off-by: Bruce Ashfield