linux/meta-virtualization.git/recipes-containers/podman, branch master

podman: switch from CNI to netavark as sole network backend

2026-06-04T03:31:56+00:00

Podman's vendored containers/common library removed CNI support entirely in commit 8d1f636e40 (March 2026). The NetworkBackend() function now unconditionally rejects any backend other than netavark, making network_backend = "cni" in containers.conf a runtime error. The vpdmn rootfs originally used CNI because netavark's dependency chain (nmap -> libpcap -> bluez5 -> cairo) was too heavy for the vruntime BBMASK environment. That dependency chain no longer exists — netavark v1.16.0+ uses a built-in Rust connection tester and has no heavyweight runtime dependencies. Recipe changes: - Clear BUILDTAGS_EXTRA default (was CNI build tag, now a no-op) - Set VIRTUAL-RUNTIME_container_networking and _container_dns with strong assignments so podman always RDEPENDS on netavark and aardvark-dns regardless of distro config - Remove ${sysconfdir}/cni from FILES vpdmn rootfs changes: - Replace cni with netavark + aardvark-dns in IMAGE_INSTALL - Update containers.conf network_backend from cni to netavark Signed-off-by: Bruce Ashfield

podman: update to v6.0.0-dev

2026-05-31T14:30:57+00:00

Bumping podman to version v5.4.0-rc1-3067-g62111c7e9d, which comprises the following commits: 33f0ed3fda Update module golang.org/x/net to v0.55.0 8d036cea7c Skip a number of failing tests e03516f6d4 Add compression-level/format and force-compression links in docs 8b1e46170b Adjust API calls for compression 6b02641f73 Bump Buildah to v1.44.0 40a9e21644 Update release ID in win-installer-main.ps1 7c7d56a0fb Use GH token to download Podman release in utils.ps1 4ec95b5de1 cmd/podman: don't warn on `podman run -ti -d` from not a tty 2e7178f428 hack/golangci-lint.sh: fix binary lookup order 13c6b5d786 pkg/bindings/generator: fall back to golangci-lint from $PATH c4c2778776 test/system: fix "podman kill - concurrent stop" ea51ae7305 test/system: use DISABLE_HC_SYSTEMD for 2 tests a2581cc82f test/e2e: deduplicate some network subnets d1d0c84a56 test/system: bump "unlock while waiting for timeout" timeout 1e0be4dec5 Improvements for newConmonOCIRuntime() in libpod/oci_conmon_common.go daaf8b62ba podman: Add support for blackhole routes 0ef5366c6d Update module golang.org/x/crypto to v0.52.0 e59b9dae8f api/libpod: fix r_limits cleared on update b498cefd5c test/system: do not run "podman pause/unpause" in parallel 90ba6562d5 test/system: fix "stop container when healthcheck runs" flake 34137c40f6 test/system: fix "podman stop - unlock while waiting for timeout" 472c53b122 test/e2e: fix static port assignment 0dbe00d272 test/system: skip one new pasta flake 97d0279e94 test/e2e: fix some duplciated network subnets 07e257e7f6 test/e2e: skip "podman run --shm-size-systemd" as root 1de60ebf7b test/e2e: skip "sshd and API services required" 39ee9baf66 test/system: fix "add username to /etc/passwd if --userns=keep-id" 9aca6010ee test/system: skip "IPv6 default address assignment" c22f67e729 .cirrus.yml: do not run golangci-lint for freebsd and mac 41a99a651f Bump c/common 0.68.0, c/image 5.40.0, c/storage 1.63.0 eede8790a0 Add Axoflow to ADOPTERS.md e9ec0ecef5 Makefile: run golangci-lint for all supported OSes cf021c4ba9 hack: reuse already installed golangci-lint ffb05a0921 Update krunkit.entitlements 3f427f4535 Skip pasta forwarder tests pending passt SELinux fix 2162404eaf Clarify inspect example in basic setup tutorial 6e98a49e03 inspect: use per-machine provider for GetMachineDirs f96cbda1b0 hyperv: propagate detailed error from Hyper-V permission checks d8fd8afad1 contrib/cirrus/prebuild.sh: drop unused get_env_key d4f60b5826 libpod: some modernize fixes for freebsd and darwin 329ce86835 test/e2e: modernize bf78f80b00 Replace strings.Split(..)[0] with strings.Cut 63166293c8 cmd/podman: replace strings.Split with strings.Cut b4d0747baa pkg/systemd/parser: use slices.Backward 7797dcb2ab pkg/domain/infra/abi: modernize 121948d69e pkg/rootless: modernize f45b4c506a ci: replace git-validation with a small shell script a4b755e1e6 Update module github.com/hugelgupf/p9 to v0.4.1 5c5389dddd .editorconfig: add indentation rule for shell files b2b552749d ci: rm contrib/cirrus/check_go_changes.sh 730934bd86 .golangci.yml: deny using obsoleted os.Is... checks 7f7b35356f Replace os.Is* error checks with errors.Is a7886d1fe8 Remove unused nolint annotations baf8fa6223 Document pasta forwarding mode for rootless bridge networks e598657244 Add pasta-based port forwarding for rootless bridge networks 0ff6ac85f0 Vendor storage@main, image/v5@main, common@main a53c10ced0 compat API: populate HostConfig in container list response 250e5f9914 use constant for timesync port and update mac_env.sh to print krunkit version f6d6365090 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.12.1 cd78329c3f ci: pin all github actions aa2e532f64 tmt: archive audit and journal logs after test execution f2a51888f3 docs(api): drop trailing slash on podman.io/community contact URL e5bef8b124 machine: add vfkit timesync device for Apple VMs 6f048e6500 inspect: do not show as gateway 8842191d6e fix(deps): update module github.com/onsi/gomega to v1.41.0 e9df466ae3 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.29.0 b50b9c0dbc events: support artifact events with refactored event forwarding 846d1a1b05 Close leaked file handles in container config, CRIU stats, and playbook read 39e5a0a0b9 Add unit tests for loadAndMergeConfig 72af655040 pkg/trust: fix directory handle leak in loadAndMergeConfig e36e2c97d2 bindings/artifacts: remove redundant nameOrID parameter from Remove for 6.0 e6c50d769f vendor: update container-libs to latest 3d899a8c25 volume prune: add dry-run support fb75774a43 Document tmpcopyup default behavior for tmpfs mounts 8ae6f02b3f docs: clarify podman pod ps default output 2f17614d0e fix: duplicated words in decompress.go log message and annotations.go comment 6ad87d00e0 Add nightly release pipeline validation 3ac6501fdd API Handlers should not error on empty request bodies f33ef6a77f test/system: log socat output in retry loop b571943fe4 api: emit aux trailer with manifest digest on image push 6e089b421b completion: add artifact support to podman inspect e131ee6274 Remove deprecated release actions 879594a2f9 chore(deps): update dependency requests to ~=2.34.0 40e572f2ed Update oc/selinux to v1.14.1 a6e58ea101 wsl: remove custom registries.conf 93b615c1f2 machine: move marker file to /etc/podman-machine e34f3bce0c machine: remove SSL_CERT_DIR/SSL_CERT_FILE copy b14e833ef6 machine: add test to check config mount 5e193ce96a wsl: mount config home dir like on other providers 41adad8ce9 machine test: combine three test cases 49ab599855 vendor: update container-libs to latest ec583fa17f filters: add annotation filter for containers Fixes: #28562 3f0cdca48a Update module github.com/containers/gvisor-tap-vsock to v0.8.9 1a20d82edc libpod: replace listen with socket+bind for dual-stack port reservation 33db50ab24 troubleshooting: document setgroups requirement 11399b7229 Update module golang.org/x/net to v0.54.0 06ce73de61 Update module github.com/openshift/imagebuilder to v1.2.21 d9836ac255 troubleshooting: add tip about is transient 6cc0439b8f troubleshooting: add tip about could not connect a3ea76b6a3 troubleshooting: add tip about bind permission denied ec6415f7c6 troubleshooting: add tip about Connection reset by peer 644104a8b5 troubleshooting: add tip about pod uid/gid map d420fbfde3 Add migration code for BoltDB to SQLite 462b24479b Use tmp context dir when building with process substitution 89efbf1dce pkg/api/grpcpb: auto-format generated protobuf files d54f1eb6fe machine/wsl: remove some dead code d9e7eaac87 Update dependency golangci/golangci-lint to v2.12.2 056ad339de vendor: update container-libs to latest 2ea149d850 Update module github.com/hugelgupf/p9 to v0.4.0 abf885dfcc Re-add a minimal version of BoltDB for migrations d8df5c37ef specgen: memoize isMqueueSupported with sync.OnceValue f4389592f9 test: ensure complex --output values have correct behaviour a267230118 docs: fix incorrect page name b74c4a3ec7 fix(markdown-preprocess): preserve unknown tokens in render() 1bda61b840 specgen: skip /dev/mqueue mount if not supported by the kernel e84d7fe691 Vendor container-libs and Buildah at main 821e4d263e Update dependency golangci/golangci-lint to v2.12.1 d5b4685cc8 Fix lint issue with replace reflect.Ptr with reflect.Pointer 7612af4c0e Rewrite the Quadlet documentation afd4d3d71f Update module google.golang.org/grpc to v1.81.0 e880d0550d AGENTS.md: address review feedback from PR #28593 27fde9c84a AGENTS.md: add structured Persona section for AI assistants ec4b72082a Update common, image, and storage deps to 3ceb1b2 74ea692e8b Update dependency golangci/golangci-lint to v2.12.0 8a064651e8 troubleshooting: document keep-id size option ddb3f8ec44 Update module github.com/shirou/gopsutil/v4 to v4.26.4 b197c3324f Core maintainer meeting minutes 3f883706ba Import local certificates to machines on macOS and Linux c7ed32c266 libpod: limit splitting of cgroup fields 4a3b214e3f Sort network ls labels dc4495ec64 volume ls: format labels as comma-separated key=value strings f460bc0ae5 ps: format labels as comma separated key=value for Docker compatibility 46b45de563 Packit: Only create dist-git PRs for rawhide 336601535a [skip-ci] Update r-lib/actions action to v2.12.0 456f75b975 vendor latest common, image, storage 15c9ca130f Add command `podman system hyperv-prep` 92d186f20d Hyperv machine init/rm: skip win registry operations when possible f6b6bce745 Minor hyperv stubber.go and vsock.go refactoring 86d0edfbc3 RUN-3620: Document dropped support 4e19b8e6a9 Update module github.com/mattn/go-sqlite3 to v1.14.44 fdd8cc17fa Fix filtering with negated labels efc6ddfcc4 cleanup: run go fix on pkg/machine for windows 91af36106c Update module github.com/onsi/ginkgo/v2 to v2.28.3 12d40777f0 test/system: fix quadlet - rootfs on kernel 7.1 bb02e49080 Adjust error messages for new netavark create 09103756cc Vendor container-libs main 50bf7db0d9 test/e2e: fix broken checkpoint tests c1d4e1491a test/e2e: port some checkpoint tests to PodmanExitCleanly 09b7f59f99 Improve docs on passing multiple --filter flags 7812e9d814 [skip-ci] Update dawidd6/action-send-mail action to v17 f68103d3ad Packit/TMT: Use podman-next for tmt-revdeps test 455367165c Update dependency openapi-schema-validator to ~=0.9.0 f275c72090 Packit: mention tmt_plan for cockpit revdep tests b0f1889de7 contrib/packit-tmt: Rename script for clarity of intent 61792bd9cd TMT: Remove test/tmt/tmt.fmf 9b253ab347 Update stale comments referencing slirp4netns f493ef0734 test/system: re-enable module command line completion test 6d2e083446 vendor: update latest common, image, storage 1b99ae56b0 New images 2026-04-24 94b56a82e3 Remove OWNERS file 2de618b13d Review MAINTAINERS.md 24130e2a0c keep pod hostname when a container is stopped d01cd46830 test/system: skip podman checkpoint --export, with volumes on aarch64 46aa8b83a4 test: remove outdated checkpoint skip 56a24d5183 fix container inspect output to not escape html chars e74582fcd5 remove CONTAINERS_REGISTRIES_CONF parsing code 5504338c36 vendor: update common, image, storage to latest bf76b9133f move old registries.conf v1 files to v2 f2994dc695 move the python API tests to the cache registry c4a4c7e117 API: Add Health field to compat ListContainers and restrict to v1.52+ d44655537e fix: ensure infra image is set from infra container spec in PodConfigToSpec 2cc3be7332 RUN-4539: Change podman module paths 6df67e0e19 Fix LegacyNetworks comments and add deprecation notice 9762b6b8dd Add lstocchi as Podman reviewer 103d059904 Reuse found network in NetworkDisconnect 2adfe1d4d9 Verify that a Volume config was actually deleted 57eeb47143 auto-add user to Hyper-V Administrators group a1734fb02b [skip-ci] Update dawidd6/action-send-mail action to v16 2e6f29a2df RUN-4538: Fix buildah vendoring d1ef890bd6 Update module github.com/moby/moby/api to v1.54.2 69ae4645c1 Add a process for adding and removing subprojects cae4c40323 compat: limit `err` scope in CommitContainer. 03afb7403d trust: fail on policy path resolution errors, remove fallback logic 54d61c2f02 trust: switch policy.json lookup to configfile ecf493dea0 Fix Docker compat /wait hanging on fast-exiting containers 64f9059d2e Fixes: #28531 Clean up temporary file for CreateImageFromSrc efba9996f6 Implement `--save-stages`/`--stage-labels` for build 5e94c95ad0 Move to deterministic network setup order d92cc360f1 Add Pod to quadlet list f15b8e1b2b Sort cliOpts fields alphabetically in Compat Create 41b785af5e remove isolate option from docker compat API d2d508bd89 Update module github.com/docker/go-connections to v0.7.0 f7dd6156d3 Import host certificates at machine startup on Windows 8e78ca8ee6 [skip-ci] Update actions/github-script action to v9 53fc1d902e Install WiX v5.0.2 to build the Windows installer 9598b30ac2 Fix healthcheck failing silently with --transient-store 111b4cf3f5 Fix docs --mount source not mandatory for type=volume 30cfafe39c Clarify specific pasta parameters passed by default 698c483b7c fix: Ensure OCIRuntime Field is not ignored with HTTP Rest Api (#28454) a73686120d Update module github.com/containers/libhvee to v0.11.0 3082e88d2e [skip-ci] Update zizmorcore/zizmor-action action to v0.5.3 8059539425 Quadlet - Support empty source for Mount key f374f2c95b Fix Docker API DeviceMapping for CDI devices b140b5d15d Update module github.com/mattn/go-shellwords to v1.0.13 571c842bd3 hyperV: fix powershell path escape a61147184d Remove misleading configurable reference in podman-network docs 3c79df31a4 Fix pasta_opts compose test to verify MTU option 9ff3f4cb1e Clean up outdated slirp4netns references in comments 3f85c7df43 FreeBSD: add lint exclusion for rootlessPortSync fields c23da53456 Remove unused slirp4netns imports and Slirp4NetNS field 8d6c23dad1 RPM/TMT: drop slirp4netns dependency 6859a9e512 Remove slirp4netns from documentation 42a98a5a82 Remove slirp4netns from CLI and completions cefb944647 Remove slirp4netns setup functions (preserve RLK) e81328e2a2 Remove Slirp network mode constant and error on usage 3317eb9abb Set pasta as default when default_rootless_network_cmd is unset a172d25f86 Add slirp4netns to pasta migration 22054b5180 test: Remove slirp4netns-specific test cases abd25c09e0 test/tools: update swagger to v0.33.2 eb9f39acff chore(deps): update module golang.org/x/crypto to v0.45.0 [security] b95a1b0af4 Update module golang.org/x/net to v0.53.0 3e9e9f3833 Update module golang.org/x/term to v0.42.0 12bec19426 bindings: artifact extract reject invalid names 25aee24cbd use chrootarchive over plain archive package abb5120624 fix symlink handling in checkpoint restore 92d0392ca2 Makefile: fail early with a clear message on darwin/amd64 8dd7ac5756 Fix: set Swappiness when no mem limits f0d1b54fad fix(deps): update module golang.org/x/sys to v0.43.0 4f252be4a0 Fix inconsistencies between --all and --filter=all in volume prune 5b60355fee docs: fix parameter name for podman-network-create 3ca47bf897 chore(deps): update dependency pytest to v9.0.3 23f0386587 Revert "fix(artifact): show :latest tag in ls output when no explicit tag given" af4f2be43b Revert "test(artifact): add e2e test for untagged artifact default tag" 98abcdcb19 Use AND to combine different volume filter keys 2d5f5395c2 test/system: Fix 260-sdnotify being silently skipped 85f300ef44 chore(deps): update module github.com/go-jose/go-jose/v4 to v4.1.4 [security] 5ff106da75 fix(deps): update module github.com/moby/moby/client to v0.4.0 a9a9eda883 rename ErrRelaunchAttempt to ErrRelaunchSucceeded and fix elevated error handling 8e5fde01c6 propose running init/rm command on hyperv machine in elevated mode 5b0ec91c54 move wsl' util_windows to windows package so it can be reused by hyperv d10a858cb6 fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.39 2e66f1c38e Update quiet.md d20933df02 add missing O_CLOEXEC to open calls 1bf1c95f95 Docs: improve readability of quadlet documentation c57f9f49a3 Fix .containerignore patterns with leading/trailing slashes 24ee5aec48 Add new flag `--import-native-ca` for `machine init/set` 4bba8c267a Extract function LocalhostSSHCopy to make it visible from other packages too 8babd48d59 Fix IsPathAvailableOnMachine when Windows drive isn't C: e8ab721d59 fix(deps): update module google.golang.org/grpc to v1.80.0 ee83454a00 fix(deps): update module github.com/shirou/gopsutil/v4 to v4.26.3 e6b93ed936 fix(deps): update github.com/opencontainers/runtime-tools digest to 8a4db57 51175b7e17 fix(deps): update github.com/hugelgupf/p9 digest to ba5af0b cf6404f387 Fix Quadlet `Lookup()` stripping unmatched quotes 8b905613b5 Add e2e test for shell driver DriverOpts cross-contamination fix e76f70bb13 chore(deps): update module github.com/moby/moby/v2 to v2.0.0-beta.8 [security] 667f55c2ce Fix shell driver DriverOpts cross-contamination in secret creation 19e70b00fe fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.38 1d4465abf7 test(artifact): add e2e test for untagged artifact default tag 3bd376401e fix(artifact): show :latest tag in ls output when no explicit tag given fdf663b079 compat: map internal states to Docker equivalents in LibpodToContainer 497185c14b libpod: fix data race on deferredErr in attachExecHTTP 04935fe867 Add a Status filter to podman quadlet list 6f286ef52f #28374 de-duplicated --quiet option from docs 0cb862ec35 feat: add list as ls alias for artifact command. Resolved ##28372 d2ff809c66 Fixes: #27620 replace dots by hyphens in kubectl volume names generation e58ec4dc07 Address seccomp profile todo: 047aae4116 feat: remove reference to `--help` from artifact man pages. Resolves: #28373 200cb42296 fix(deps): update module golang.org/x/net to v0.52.0 765ffb9a2e Consolidate build secret tests and assert no podman-build-secret leak e50974edc9 chore(deps): update dependency requests to ~=2.33.0 218f94785f Add Avassa Edge Platform to adopters list e18bb9ea8b Remote build: `nTar` secrets with relative paths and ignore bypass 1413923c13 Change `localapi.IsPathAvailableOnMachine` visibility 29d80a26af api: fix missing return after error in SystemCheck handler ef7d9aa672 fix(deps): update common, image, and storage deps to 7e1f14c c722f2f6e7 Validate memory on every init, not only with --memory bb4dda4855 Reject --cpus above host CPU count on podman machine init and set 48d36932e2 Error on WSL machine os apply|upgrade 427aded546 cirrus: do not remove /usr/share/containers/storage.conf 91bae6f6e4 test/system: drop outdated comment d6dd82bf24 winmake: fix typos in comments and warning messages 13022e739d chore(deps): update dependency golangci/golangci-lint to v2.11.4 b77531879b test: relax rootless runc pid namespace assertion f3f36d176d ci: add riscv64 cross-compilation to Cirrus CI alt-arch matrix acd5f94d84 specgenutil: remove special handling of `0.0.0.0` for netavark 9565002257 feat: add support for changing default host IPs via containers.conf a33114f248 test/upgrade: remove storage.conf mount ac49a4b416 cirrus: setup composefs in rootful storage.conf bb5f759ba8 test/e2e: fix podman pull and run on split imagestore test 6be50cbb38 test/system: fix empty default test c7e51fa1c1 cirrus: make sure we do not test the fedora storage.conf file 78c28fc254 vendor: update container-libs to pick up storage.conf rework f2bc5b86de New images 2026-03-19 da3c4aa21a Add --format to image scp 2eb20b3dd9 test: skip build-conflicting-isolation-chroot-and-network on remote 9837656d26 docs: remove rootless CNI troubleshooting section 040e6784d8 Makefile: remove FreeBSD CNI build tag 7d50844922 test: remove CNI_CONFIG_DIR env var handling 61cb417c26 Remove CNI references from comments 8d1f636e40 vendor update without CNI in buildah and container-libs a2db18f35c rootless: detect and remove stale pause.pid with recycled PIDs d887a8146a Fix creating unnamed volumes as anonymous a63910314f Refactor volume_prune tests to use PodmanExitCleanly 339acf880c volume prune: match Docker default and add --all 9a10cefd18 libpod: Don't dereference ctrSpec.Linux if it is nil 6f497d2437 Extend libpod pull API to show pull progress 0b3190b3b5 fix(deps): update module google.golang.org/grpc to v1.79.3 9dcc73079f Bump bundled krunkit from 1.1.1 to 1.2.1 b69c62be04 fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.37 97691c8e1b chore(deps): update dependency containers/automation_images to v20260310 938d677ad9 cirrus: bump linux machine aarch64 test timeout 7326b862e3 Fix `unless-stopped` containers not restarting after `podman-restart.service` stop them acf6472f5b Ignore operational EndpointSettings.IPAddress for static IPs in compat API 68737b35cd Vendor: go.podman.io/storage@main, go.podman.io/image/v5@main, go.podman.io/common@main 1ccded76ce Use InspectNetwork helper in e2e tests 6acfd58026 Add multi-IP container support 71e0456b1b [skip-ci] Update actions/create-github-app-token action to v3 7ecac4a65e compat: return 409 Conflict when container name is already in use c7921b0049 feat: print client info from `podman version` when the server is unavailable 926f562bd5 quadlet: allow empty Entrypoint to clear image default 3edb22b509 [skip-ci] Update GitHub Artifact Actions 12d645ac20 fix(deps): update module google.golang.org/grpc to v1.79.2 67ccf4940c tests/e2e: Do not try to list /proc/acpi on non-amd64 07314bc606 fix(deps): update module golang.org/x/crypto to v0.49.0 1f3c344312 run modernize -fix ./... 9278b45424 bump go.mod to go 1.25 cd2f122fb4 test/e2e: Skip some tests on non-amd64 architectures a5dbe484d3 test/e2e: Introduce SkipIfNotAMD64 helper e5f61281ff test/e2e: skip LINUX32 personality check on non-amd64 architectures a4d0fd8853 test/e2e: Add linkat to seccomp profile 0904bab01e add trailing newline to subgid due to shadow-utils 4.19.0 regression e39781979e Improve mac_win_client tutorial structure and links 6637454464 Add tutorial for running podman machine on macOS startup a414460351 chore(api): add swagger docs for undocumented API parameters 791ade7c31 fix(deps): update module github.com/moby/moby/client to v0.3.0 1fe0238758 chore(deps): update dependency openapi-schema-validator to ~=0.8.1 ffeb0d103b Improve OOMKilled visibility in podman events and in podman inspect docs a57b1e72fd fix(deps): update module github.com/shirou/gopsutil/v4 to v4.26.2 89d4fcd791 [skip-ci] Update zizmorcore/zizmor-action action to v0.5.2 ed3d3688dc chore(deps): update dependency pytest to v9.0.2 1aadae04af Look for rootless quadlets in /usr/share/containers/systemd/users 4f1d4ae8a0 fix new lint issues from prealloc 1c21eed0fb update golangci-lint to v2.11.3 35f9d61fcb Improve relabel EPERM error for rootless 458fcaa1ba specgen: fix pod mount options leaking between mounts 8c4edb6121 libpod: include names-generator.go 76095dbadc Make libpod return error status code on failure to pull image 01688e7621 Deprecate Legacy structs and use port.String() c10f685b43 api/compat: Backport jsonmessage.JSONProgress.String() 65585e4338 compat/network: Remove temporary ipvAddress variables. 56e555bfc2 api/compat: switch to moby/moby c30fe73dfb Quadlet docs: clarify behaviour of `VolumeName` default 31b956e0f1 Fix CLI help example indentation for multi-line examples dd83595619 New images 2026-03-06 636eb1a401 libpod: Implement --log-opt label=LABEL=Value 047e178298 Quadlet docs: add section on referencing other template Quadlets 7fd3be8288 Add --tls-details support for (podman login) and (podman logout) 13e1d5af4b PARTIALLY TESTED: Add --tls-details, use it to affect libimage and the like 56ce3368be vendor: update container-libs to latest a2f0e0da47 artifact: do not set SystemContext in CopyOptions 9872cbd756 libpod: Validate that log tag requires journald driver b2d381c7a2 Inline createCommands into the caller a725f55ff1 Make CreateCommands and ScpCreateCommandsOptions private acdaa5372e Don't use strings.Split(fmt.Sprintf("--a b ...", ...), " ") b1837f8824 Rename the fedoraMinimal constant to FEDORA_MINIMAL cb9df63d63 Fix compilation of tests without CGo c42350a5a2 Fix compilation of tests on arm64 5c52f029f6 Add Danish Prakash as a reviewer 33a36bd56b fix(cmd/podman/quadlet): Behave like container ls a38a9b7d20 fix(quadlet): fix race condition, duplicates, and permissions 8b868f83af Governance: Make each role's GH permissions explicit 97a5e4ce01 Move Urvashi and Valentin to alumni a37bf83dfc Also set DestinationCtx in a copy e04b77e600 Consolidate the call to bindings.NewConnectionWithOptions fd86c3c25f Use pullOptions.systemContext in getDestArtifact 5946f7afcf Factor out pullOptions.systemContext from pull e807ae4350 Make ocipull.Pull and PullOptions private 2d4fb908a1 Pass all of Options to tcpClient d561f13d7c Simplify setting up Runtime.imageContext 2ac337dbd8 Behavior change: Don't change TMPDIR in WithRegistriesConf 2ab78a8d82 test/system: fix some teardown error logging 4bdc1d372a [Design Doc] New feature to import local CA certs f31ab04ec7 Update LLM_POLICY.md 6beca1cbeb Back New{Container,Image} engine with the remote implementation on macOS d06c4569f0 Make most of libpod, and everything that relies on it, non-darwin 4c3027c149 Make most of libpod, and everything that relies on it, non-darwin 30f067354f docs(podman-systemd.unit.5.md): document protocol support for PublishPort 84eff9ef3b Fix: Rootless Podman-in-Podman on WSL 6c41f55aa7 Quadlet Volume - allow setting mount option without a device f58c9dcbcb docs(podman-systemd.unit.5.md): add `ServiceName=` option to all Quadlet types 64ec31ac00 Add nocreate option for named volumes e914c30dd5 update swagger changes dc9adfeaff Add LLM (AI) Policy. 03d9de1528 Fix container clone with secret type=env 176bab3feb docs: update rootless default networking mode 9a1e5e8eeb cmd/podman-tetsing: fix incorrect error message 960165b8c5 test/system: fix pod inspect ordering test leak 35d088ff83 chore(deps): update dependency openapi-schema-validator to ~=0.7.1 02f0766a79 update golangci-lint to v2.10.1 8a0c777017 fix new staticcheck warnings 5e3719c81a fix two issues found by nilness 072018096d docs(podman-systemd.unit.5.md): Fix variable syntax fc089d7f1a docs: add examples for rm with --force and --time 476ca11994 test: Use yq for yaml2json when available 4fae160fcf Fix documentation inconsistency about labels 0d7f00b4c0 List all status values in status filter documentation 72a0a1179e test/buildah-bud: skip build-with-run-mount a3198235bf bindings: do not validate source policy on the client 474ff994b6 build: connect --source-policy-file, --mount for remote builds 8af2158a83 vendor: update go.podman.io/... and buildah to latest ed8eec6bbf using Debugf and removed wierd DEBUG logs 9b611b5380 docs(quadlet): Unify [Network] section on removal 64a3e31ab9 migrate to oidc 33e8abd637 Respect user-specified Restart= policy in pod units 1aefd06760 test: remove redundant test for restoring with --publish without --import 751d6f7953 updating pr review and approval process 901ac1b416 feat(cmd/podman/quadlet): Add 'ls' as 'list' alias b12c51e5a4 fix(cmd/podman/quadlet): Indent all examples 60cfb66d8f podman system reset: do not print storage.conf warning 0778bdaffe podman info: remove storage.conf path a1afa58e27 system service: remove config reload functionallity b45b826061 DESIGN DOC: update config-file-parsing 5a1a54424c fix: enforce --publish option usage with --import in podman restore de35ca847d fix(deps): update module github.com/kevinburke/ssh_config to v1.5.0 b584337bd6 compat/api: honor VolumeOptions.Subpath for HostConfig.Mounts e9ba515fcf Add debug logging for EnvSecrets to diagnose restart mapping issue ac7d6c3fc4 inspect: preserve secret target name in env masking 2369ed4b71 docs(podman-systemd.unit.5.md): remove false claim on Pods HostName key 24a04de921 libpod: fix build 243df78fb9 adding assign github action c69072edb1 update cherry pick with pr df0e3b6ec7 libpod: validate artifact volume on create 3d1dfe6540 fix(deps): update module google.golang.org/grpc to v1.79.0 d7a80dda1e Discover vendor from cdi spec before injecting CDI device for --gpu option 0ba42fe487 ci: bump golangci-lint to v2.9.0 94442ae44e pkg/machine/e2e: simplify runWslCommand f9002cfd31 Fix GOOS=windows prealloc linter warnings 3c3d32718f libpod: do not reuse names slice 2a99655120 machine: prepend LocalhostSSHArgs to args b046387979 Inline the initial slice into append 38f6bf07cc pkg/emulation: remove slice copying 030057aecd Preallocate a slice d316cbb362 Don't use append if not necessary 9727a43f5a Added setting UID and GID for volumes in quadlet d02c3d3b80 chore(deps): update docker.io/library/golang docker tag to v1.26 7713a75564 fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.34 73cede901f fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.8.8 1243b2baec Fix broken links in transfer.md cfc9510847 fix(deps): update module golang.org/x/net to v0.50.0 2828965a75 healthcheck_linux: avoid failing transient units 3856389fc9 podman-healthcheck-run: add --ignore-result flag 7cefd013ca chore(deps): update dependency setuptools to v82 460feba9c9 fix(deps): update module golang.org/x/sys to v0.41.0 e61ce8d6ea Added healthcheck documentation. Fixes: #27202 49cce3ec16 libpod: modernize state test a798f30849 fix(deps): update module github.com/shirou/gopsutil/v4 to v4.26.1 af7c36eae3 make curl error on non success status codes aec7f806b5 [skip-ci] Update zizmorcore/zizmor-action action to v0.5.0 2c4e9333ac fix(deps): update module github.com/openshift/imagebuilder to v1.2.20 246a4acde1 test/system: update module error messages bf7871fbcd vendor: update container-libs to main efdfece881 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.28.1 90cf2ec34d Revert "cherry pick bot github action" fc18d3229d [DOCS] Update references common -> container-libs/common 22b10abbf3 [DOCS] Fix reference to containers.conf 36e7b9f1c0 fix(deps): update module github.com/onsi/gomega to v1.39.1 82e04e8d7f fix: prevent race condition during database initialization by using INSERT OR IGNORE. fae93fe483 fix: use localhost for host.containers.internal in host network mode e1dfd455e7 cherry pick bot github action 1bfd4cb95b Fix healthcheck argument with spaces split in Docker API (#27818) 827ba37b3e build: handle `--iidfile-raw` and `--metadata-file` flags 40b2a585f9 Autocomplete machine fixes 1a5822dc91 rootless_tutorial: mention LDAP support for subid ranges f4138d3599 add bootc transports to os-apply 644bf2e04a Fix interfering escaping of commas and spaces in no_proxy variable a6167bdecc Write DefaultEnvironment proxy values to /etc/systemd/user.conf.d/default-env.conf e545f9ca61 Fix test proxyenv/env_test.go for systems that use proxy variables 9e530ca938 Update Lewis' affiliation 3b3cb1f958 vendor: update buildah to latest main 19aba793c0 remove dep on github.com/containers/conmon 7778b427eb Do an update pass on rootless.md to bring it up to date 5f19b25aaf Add cache volumes for validatepr builds 07ab42eed5 [skip-ci] Update GitHub Artifact Actions 1bff1ad004 fix(deps): update module google.golang.org/grpc to v1.78.0 d9b42515da fix(deps): update module golang.org/x/net to v0.49.0 3be0eb8b40 fix(deps): update module github.com/coreos/go-systemd/v22 to v22.7.0 27d0f5fff6 typo: resouceNames to resourceNames 568f9645c5 chore(deps): update dependency setuptools to ~=80.10.2 0c04f53374 [skip-ci] Update zizmorcore/zizmor-action action to v0.4.1 ce568f75dc chore(machine): remove unused EvalSymlinksOrClean function and tests 36d4c7c696 fix(deps): update module github.com/rootless-containers/rootlesskit/v2 to v2.3.6 eb0c4716d3 Add GET /quadlets/{name}/exists 7331ccbc16 [skip-ci] Update actions/checkout action to v6.0.2 f71465a025 Fix PowerShell `Write-Error` multi-line argument 721e889476 Update tutorial documentation to remove CNI references 7ebb95a3bf Update man page documentation to remove CNI references 454167efa9 Remove CNI-specific code paths from libpod f6bddc8af2 Remove CNI backend configuration from runtime 73ef7cfcdc Remove CNI backend from CLI options and completions 83ffeb1b26 Remove test infrastructure for CNI/Netavark backend selection 858cb58c90 Remove CNI-specific test cases 2d67bf3b0a Vendor common test for artifact digest lookup d04c84e783 fix: generate correct error message if Wix is not installed d8f5368428 fix: correct env/envFrom precedence in kube play cfa1b51775 fix hyperv ignition cleanup and error handling f172ff789b rootless: use nsfs file handles to persist namespaces ea01acf325 Set architecture for validatepr builds f0dd315bdf systemd: update podman-restart.service description 6c1d8f5d76 libpod: fix Volume.Mount() returning empty path for plugin volumes 1ebdd09ab3 Don't assume v1.41 is the default docker c9e20280ed Bump Compat API version to supported v1.44 aba2df7517 Add podman machine os upgrade command 87df3e4749 Update the Podman on Windows tutorial for 6.0.x 0d3c438803 Quadlet - do not link pod service units to quadlet templates 2e23fcc5a5 Add DELETE /libpod/quadlets f96e0a3fb2 Fix podman run equivalent for HealthStartPeriod 86a3b681d2 secrets/create: remove pipe check and allow interactive stdin 8bd92f52ab Update the Podman on Windows tutorial for 5.7.x 231dbdf5b3 Fix container export emitting incorrect event type. f6e3200f40 libpod: simplify unnecessary loops 1abe1942f8 Update module github.com/crc-org/vfkit to v0.6.3 ca44e3a4d7 Fix race condition in CleanupGVProxy when reading gvproxy PID file d2ea5a3fd0 prevent starting/stopping legacy Hyper-v machines when not elevated 76e14f79f7 use bootc for os apply 6d28009edb test/e2e: Skip privileged container test if NoNewPrivs is set 86799cb2cb Fixes #27651 - Fix health inspect/ps for rootfs containers with empty healthcheck 174e02ae55 test: Fix --hostuser octal UID test flakiness 6fd970afe0 design doc: config file parsing changes 90f45bca77 extract shared TTY handling code into helper function 40587205cf Add Dave Darrah as community manager 356e6a3ecf Governance: Community Managers can assist in triage 73135ff6f0 test/system: fix log timestamp work around 7a87456fdd Fix docs for Volume User= and Group= options 8d3ac1a1f6 test: Fix PODMAN_BATS_LEAK_CHECK 74043cf726 Remove legacy win installer files d9975a5390 Stop copying gvproxy in legacy installation dir 7f16628a50 Stop releasing the legacy windows installer 7bcf5e1de4 docs: correct 'abbrieviated' to 'abbreviated' in RELEASE_PROCESS.md 05ddbbcd34 docs: fix typos and standardize timezone in ISSUE.md 02c2babe84 docs: correct 'where as' to 'whereas' in Downloads.md 309f8c0747 Use non-destructive 'set --rootful' command e4bd3e6f20 Update rootless_tutorial.md - minor text correction e6c3e4f411 docs: fix misleading TimeoutStartSec information for oneshot services 74c0795a7c [play_kube] Add validation to container image field aa1d7b189a Remove network-cmd-path d54a053d0a Remove extra spaces from secrets cmd example eaf4d4ebc9 fix: remove unnecessary -t flag from podman run commands in documentation 3e6781f05a Add POST /libpod/quadlets 9a2c8b615e Fix missing newlines in stderr error messages 890a3a1faf docs: Update LFX insights badges in README c186a337ca Add /usr/libexec/podman/qemu-system-arch 20e61ba88e [skip-ci] Update dessant/lock-threads action to v6 15ae942a48 test/system: remove apk from build 811c818fc9 test/system: skip podman volumes with XFS quotas on fedora 7e3caaed84 cirrus: ensure NOTIFY_SOCKET is properly unset for all tests e78fb1ed27 fix(deps): update module google.golang.org/protobuf to v1.36.11 3f49b284f7 Update podman-for-windows.md 0e45e7003c fix(deps): update module tags.cncf.io/container-device-interface to v1.1.0 5d79adbd6a update fedoral base image to 43 and related tests e49992fef6 fix(deps): update module golang.org/x/net to v0.48.0 0a1f564289 fix(deps): update module github.com/checkpoint-restore/checkpointctl to v1.4.1 88bacfc133 fix: skip execution of probes when initialDelaySeconds is not elapsed b53159d0f2 renovate: remove old c/{common, image, storage} config f348a0717d Vendor latest mono repo for libartifact changes 22b10fa153 Use explicit download-artifact name and path for win-installer release 9fe88a5539 Finish review comments 84a2902d32 kube play: Fix fd leak when handling symlinks f095336456 Update to resolve most review comments 8d7e200f88 Initial draft of AGENTS.md f87cefc262 Remove Intel MacOS support e28d1e57fa fix(logs): enhance timestamp format to include timezone in logs 2bbf26de0c fix(logs): add tests for nanosecond precision in log timestamps 4043a4bb0c docs: Update filter options and add podman ps documentation 60a5a476d5 fix(logs): improve timestamp precision in container logs 3b080ce918 docs: Deduplicate --filter descriptions a8ecb80ac0 Deterministically order pod inspect fields d18e44e9ab libpod: simplify resolveWorkDir() 7b1be7f177 libpod: fix workdir MkdirAll() all check 2461ccd621 Add Repository and Tag fields to image list --format JSON output 1dbb897733 ci: add Zizmor workflow fdbb696731 bindings: fix handling of env secrets in remote builds b78f1cf986 vendor: update container-libs to df55d6c661e8 for cgv1 removal 1bddd38e0a Add perl to make validatepr d150051d7a add windows platform tests 85fe4de1ee fix failing windows platform tests 1bd51314ff prevent non hyper-v admin users to execute machine commands 4d3c6311a5 Fix `unless-stopped` restart policy to match Docker behavior 67c050bb8e ci: use env vars to avoid template expansion in code contexts 3f4af378f4 ci: use --sandbox for dynamically generated sed scripts b9736e8d11 ci: pass secrets explicitly to reusable workflow 64ddbfea12 ci: disable caching for actions/setup-go 0752c5327e ci: specify persist-credentials for actions/checkout 30495081b7 ci: specify workflow permissions per job 248d8f64a6 ci: pin 3rd-party action dependencies by commit hashes 5fa0327246 Update module github.com/shirou/gopsutil/v4 to v4.25.11 b56ddd03a6 Update github.com/sirupsen/logrus digest to b61f268 89ddae8b12 Update common, image, and storage deps to 94e31d2 2e26deea33 Add test for exposing default network name in podman info 129f7ae152 docs/podman.1: Fix leftover rootless mention ed6f63af10 libpod: fix healthchecks not executing every interval on linux ee0efb9fc6 Add GET /quadlets/{name}/file f71b9335f1 Replace FindExecutablePeer with FindHelperBinary 2613d73ab6 Vendor container-libs to get Windows defaultHelperBinaries fix 786012a670 Remove deprecated --macvlan flag from network create b9a1f87b9e rootless_linux.c: use shortcut for system commands aaadb4726d SetupRootless handle case where conmon pid are not valid 4833357c72 preallocate paths in SetupRootless ed9d298fb4 fix noMoveProcess in SetupRootless c3f3dd36c4 use return error handling in SetupRootless 200030914f pkg/machine: make mount units hook into local-fs 417430c451 fix: improve userns validation when joining pods 99a7f9f38d fix(deps): update common, image, and storage deps to 22d50c5 7b30d9cd3f docs: further tweaks d1c2afc941 docs: improve note about Quadlet TimeoutStartSec d163c38a26 vendor: update common, image, storage to main a331c51c05 [Fixes: #27571] Fix 'shouldResolveWinPaths' returning 'false' on Windows d31f4e782d fix(api/compat): typo in the remove secret handle a9dd858c49 Clamp rootless rlimits to host on format e0fc51eb68 Add ulimits to `podman update` API 343a196448 Remove iptables references in docs aa5361ac53 Remove iptables references in upgrade tests bd02d6fd74 Remove iptables from Podman prerequisites db9e0b97f6 Remove iptables references in system tests 9c2a738963 Stop enforcing iptables on WSL 7741e047dd podman-systemd.unit.5: document /sbin/nologin accounts a23b90b119 [skip-ci] Update actions/checkout action to v6 901bd69e05 remove legacy registry entry 23a297198e add test to verify init reuse hvsock entries for hyperv machines ab89922f4b hyperv should reuse hvsock registry entries when possible e70076f809 New images 2025-11-20 8411881ab2 avoid potential nil ptr deref in image rm b62c82bff6 move HasAdminRights to windows pkg fdc738b0df fix: check err returned by newGenericDecompressor f8b968246d fix(deps): update module golang.org/x/crypto to v0.45.0 [security] 3d566d85cf Ignore prompt if stdin not a tty on machine start 61cbc0c3ee feat(exec): Add --no-session flag for improved performance 28b125837b Add --network=host to validatepr container for GitHub access d889aeb6af artifact: Skip AddLocal optimization on WSL 2f7094c0de Require absolute path for local API 91af437471 Add local artifact add API endpoint d22e50eac9 test/system: remove deprecated cgroupsv1 skip check 1e5a789bef fix(deps): update module google.golang.org/grpc to v1.77.0 c22c3271bb quadlet install: multiple quadlets from single file should share app 453a45142f machine: change default macOS provider to libkrun b8f24004d0 Packit: Disable testing-farm dnf repo 91183a40b4 pkg/specgen/generate: Fix adding host devices on FreeBSD bfd51c2715 fix(deps): update module github.com/opencontainers/selinux to v1.13.1 c9d99dc98a fix(deps): update module github.com/godbus/dbus/v5 to v5.2.0 65411d53c9 Revert "Fix copyUIDGID parameter inversion in Docker compat API" 6f9bf07a34 swagger: fix for new docker/moby module conflict df4905d68b Remove hardcoded refs from ociartifact code 613ac5bd73 chore(deps): update dependency pytest to v9.0.1 f47f74cad6 pkg/specgen/generate/kube: nolint and FIXMEs for seccomp deprecations 96aba07d95 libpod/container_internal.go: util.SizeOfPath -> directory.Size f11392c719 Remove deprecated fields ctrConfig.[StaticIP,StaticMAC] 3842f4d4e5 pkg/specgen: Remove deprecated CNINetworks 5d46171b7d bump golangcilint to 2.6.0 a3fcf52a1c Fix deprecation notice to make gocritic happy. 145540fed4 Remove ContainerStats.PerCPU: CGV1 only bb3c8b9ecd docs: Remove Cgroups v1 036bf7b44f test/system: delete CgV1 skips and skipped CgV2 tests 4970fd26e4 test/e2e: delete CgV1 skips, delete tests skipped on Cgv2 5e02967fd7 pkg/api/handlers/compat/containers_create.go: Remove Cgroups v1 6f43a66629 cmd/podman/system/service_abi_linux.go: Remove Cgroups v1 5d7358d2bf pkg/api/handlers/libpod/containers_stats.go: Remove Cgroups v1 30d07aa0c8 pkg/domain/infra/abi/containers.go: Remove Cgroups v1 a994aef330 pkg/domain/infra/abi/pods_stats.go: Remove Cgroups v1 850bae519e pkg/specgen/namespaces.go: Remove Cgroups v1 c98c50ec76 libpod/pod_api.go: Remove Cgroups v1 06bc277ad8 libpod/util_linux.go: Remove Cgroups v1 a12b3e97d2 libpod/runtime.go: Remove Cgroups v1 faa551a921 libpod/runtime_ctr.go: Remove Cgroups v1 72f8a01d9d pkg/specgen/generate/validate_linux.go: Remove Cgroups v1 2e6a923f1e pkg/domain/infra/runtime_libpod.go: Remove Cgroups v1 cb91d90835 libpod/runtime_pod_linux.go: Remove Cgroups v1 5499b79c8e libpod/runtime_linux.go: Remove Cgroups v1 7c45f43a46 libpod/info_linux.go: Remove Cgroups v1 4d404f1f1d libpod/container_internal*.go: Remove Cgroups v1 f2c9fcd68f cmd/podman/containers/unpause: Remove cgroupv1 check e860773c0d cmd/podman.persistentRunE(): Fatal linux check if no Cgroups v2 fffb1b3ba8 Packit: move scripts to contrib/packit-tmt 07e4b253c6 Packit: Bump podman-next repo priority for cockpit tests d58dddee66 fake images: windows hyperv 57052a8cc7 Fix regression in podman machine ssh c134825013 TMT: Exclude podman packages from podman-next repo for tests 675182c2e9 fix gofumpt issues on main 5beb7badbf fix(deps): update module golang.org/x/crypto to v0.44.0 dc6428cbbb docs: update version e93040e1e3 docs: fix redoc swagger URL cd0293a277 CONTRIBUTING: add gofumpt formatter note 5c1ed12d8d enable gofumpt formatter 37c3a75ce0 Update dependency pytest to v9 98c398b666 new image sfx for debian 14 9cbb64c525 Use fake images for machine tests e787b4f503 quadlet: add support for multiple quadlets in a single file d0d10c4ccd Update module google.golang.org/grpc to v1.76.0 a1725914ca Update module github.com/vbauerster/mpb/v8 to v8.11.2 4e169dac8f chore: fix the inconsistent method names in the comments 9246307408 Update module golang.org/x/sys to v0.38.0 02e5dfbdaf docs: Add references to quadlet b458ba0d49 Update module github.com/containers/psgo to v1.10.0 3f87f0765d hack/bats: port it to use the new remote support 950db09587 test/system: fix broken podman_runtime c31104f84e test/system: fix artifact test cleanup 09cf145f39 test/system: merge artifact tests into single file 348617fba6 test/system: rework artifact created test 9eba688ffa test/system: remove 701-artifact-created.bats ad34a695de test/system: do not run artifact test in parallel f89e2d3ac8 test/system: skip flaky restore test on debian b63a210dd9 test/e2e: try to fix clean up after terminated build flake e059055aa5 Fix WSL machine start with --update-connection 871b008ddd Bump to runc v1.3.3 - CVE-2025-52881 1c3daa7c81 CI: update VM images 06-11-2025 14cb9d2a6c test/system: Update test to handle new error message from runc 1.3.3 6493343ddc Update module github.com/vbauerster/mpb/v8 to v8.11.1 ac58beed26 Ignore auth header with empty JSON object a6f1c63c19 fix lint issues with github.com/cyphar/filepath-securejoin e0ef8362c0 update github.com/cyphar/filepath-securejoin to v0.5.1 47ab0f1e94 update github.com/opencontainers/cgroups to v0.0.6 469a8af9bb Fixes: #27444, Fix tiny typos in some artifact docs c581e0b392 Fixes #27421 aritfact push and pull with authfile e7b50c33df Add AppArmor key to quadlet .container files 424c19b897 Update module github.com/docker/docker to v28.5.2+incompatible f09508ffa5 Update github.com/containers/psgo digest to 533b50b 58c2fcd2d4 Fix incorrect function call 2e84246ad5 Update docs for most recent Windows version 623cb5f539 Bumping timeout for aarch64 machine b4ec460ed4 Add `update-connection` to machine start and init f06f77468d rotate aws meta_task keys 01f1d1ecec Add tmt integration plan 7c51ad0ef8 Fix cache misses when pulling WSL machine image f2aceb829f Bump bundled krunkit from 1.1.0 to 1.1.1 c0ae1a9bac Fix remote client rejecting empty --detach-keys string be82989be3 Add a no-op GRPC responder service to the podman system service e0800b5a24 Add GRPC dependencies ac888c73ef Makefile: Drop dead CONTAINER_RUNTIME df7f14afb1 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.27.2 b309044006 fix(deps): update module github.com/shirou/gopsutil/v4 to v4.25.10 41ff61aba2 vendor neutral language, NIST database for known issues 46c428cd30 Update gh pull request template 553c4a16d5 Fix use of duplicate machine names ec5e40ae42 Allow RC Windows Installer to be built 57c7a026ea cncf: self-assessment doc eccffefe64 Allow failures on WSL machine tests 5e1c2f8d7d Machine init --provider 103788be2c Bump bundled krunkit from 0.2.2 to 1.1.0 f5bc2abe4c Remove BoltDB state support c872894615 Fixes #27378 Missing network type in events document a1ed779cd2 Update docs/source/markdown/podman-run.1.md.in 183ed100a6 Escape periods in path 601a072b51 Escape RequiresMountsFor value c8ba67f6b9 Introduce assert-has-key assertion 23057fd5ed Rename misleading assertion name 0f22c1c772 Provider obfuscation in command line dad3111a3d Fix Windows Installer GH release 2b848cca36 Fix copyUIDGID parameter inversion in Docker compat API 5551e90532 docs: expand --mount section with detailed type descriptions (#25888) f8ce377bb4 Fix tmpfs U/chown documentation 07a27f95d1 [skip-ci] Update GitHub Artifact Actions d71f383db1 add Honny1 as Maintainer af2d913f3d test: organize search tests with BeforeEach/AfterEach patterns 6b9310a0db test: refactor search_test.go to use helper functions and PodmanExitCleanly 91ff7801e6 test: Replace external registry deps with mock server in search tests 34166fc004 Bump Go version to v6 96ab027a3c Add CreatedAt format option to podman artifact ls 1cea51507b [CI:DOCS]Fix minor typo in buildah test ff6945a7dc fix(deps): update module github.com/onsi/ginkgo/v2 to v2.27.1 2cfd526ec8 rotate aws key 58e99d605c Add system test a19307f502 Fix podman build "newer" pull policy 18b5b2e2d6 test/e2e: fix 'block all syscalls' seccomp for runc b0bcb1269e Explain using `--subuidname` with `--uidmap` Signed-off-by: Bruce Ashfield

podman: fix CNI build tag for non-netavark networking configurations

2026-04-29T16:57:14+00:00

BUILDTAGS_EXTRA was gated on VIRTUAL-RUNTIME_container_networking == "cni", which excluded the cni build tag in vruntime builds where that variable is intentionally blank (vpdmn-rootfs-image installs cni packages directly). This caused podman to be compiled with netavark-only support, failing at runtime with "cni support is not enabled in this build" when containers.conf sets network_backend = "cni". Include the cni build tag unless the distro explicitly selects netavark. This respects the podman profile's upstream preference for netavark-only while ensuring all other configurations (containerd, default, docker, k3s, vruntime) retain CNI support. Co-Authored-By: Claude Opus 4.6 (1M context)

podman: update version to match golangs version.go

2026-04-28T11:28:03+00:00

The update cycle used the git tags to update the PV version, but when you build podman, the version pulled into the executables is from: version/rawversion/version.go Which currently reports: 5.8.3-dev Bumping the PV to match. Signed-off-by: Bruce Ashfield

podman: update SRC_URI

2026-04-24T01:41:41+00:00

Podman is hosted under github as podman and not libpod. Accessing github.com/containers/libpod automatically forwards to github.com/containers/podman. This commit does not really fix a problem but reflects more the current repository name. Signed-off-by: Patrick Vogelaar Signed-off-by: Bruce Ashfield

podman: update to v5.8.2

2026-04-24T00:43:56+00:00

Bumping libpod to version v5.8.2-5-g88c5aaeec6, which comprises the following commits: 78da75528f Install WiX v5.0.2 to build the Windows installer 7a47175665 Bump Podman to v5.8.3-dev 5b263b5f5b Bump to v5.8.2 884cd28228 Release notes for v5.8.2 6cffe93d88 hyperV: fix powershell path escape f13de01b6d cirrus: bump linux machine aarch64 test timeout d1cf366b0f Remove iptables references in upgrade tests add385e31c bindings: artifact extract reject invalid names a49ad4be81 use chrootarchive over plain archive package 92cd24903f fix symlink handling in checkpoint restore 0fa3043415 add missing O_CLOEXEC to open calls 9c262736e4 Fix Quadlet `Lookup()` stripping unmatched quotes 75820ddac5 Add e2e test for shell driver DriverOpts cross-contamination fix e9fe245626 Fix shell driver DriverOpts cross-contamination in secret creation 7250b06e25 libpod: fix data race on deferredErr in attachExecHTTP 51b5c59310 Consolidate build secret tests and assert no podman-build-secret leak 15a2a7d605 Remote build: `nTar` secrets with relative paths and ignore bypass e5fe3fdf69 api: fix missing return after error in SystemCheck handler c91cd99291 test: relax rootless runc pid namespace assertion 26047f43b5 New images 2026-03-19 d49a9208bd cirrus: ensure NOTIFY_SOCKET is properly unset for all tests 1a9ae9dcba update fedoral base image to 43 and related tests 759df25a88 new image sfx for debian 14 28a39dd1ba libpod: Don't dereference ctrSpec.Linux if it is nil 7f37fbd6af quadlet: allow empty Entrypoint to clear image default 24fd9eb605 [v5.8] Bump Buildah to 1.43.1, c/common v0.67.1, c/image v5.39.2 42ac589e4d bump go-jose/go-jose to v4.1.4 fcc6ae217c [v5.8] Fix `unless-stopped` containers not restarting after ... 6a9ea849a0 Bump Podman to v5.8.2-dev c6077f6457 Bump to v5.8.1 dfe5dae2d6 Release notes for v5.8.1 Signed-off-by: Bruce Ashfield

podman: update to v5.8.1

2026-03-18T03:32:54+00:00

Bumping libpod to version v5.8.1-1-g9d66b48e1c, which comprises the following commits: c6077f6457 Bump to v5.8.1 dfe5dae2d6 Release notes for v5.8.1 cf0019e3ed docs: make the --migrate-db more clear 5dcc24d01d update boltdb migrating warning 13deb46d81 libpod: prefer sqlite in getDBState() 0c473eb570 libpod: fix parallel migration issue 9b810aed3a libpod: return full path in sqliteStatePath() 1e99e31575 migrate to oidc 935088fd14 Bump Podman to v5.8.1-dev 37bfeded1f Disable lint to fix CI 07efc23e05 Bump to v5.8.0 482462af7b Final release notes for v5.8.0 dafa2e722c update github.com/containers/gvisor-tap-vsock to v0.8.8 e3d9a7863f Bump Podman to v5.8.0-dev cf2514451d Bump to v5.8.0-RC1 b2325c1126 Extent timeout on Build Each Commit 72838c8458 Update release notes for v5.8.0-RC1 05135d35fe fix: remove unnecessary -t flag from podman run commands in documentation e330a9fd83 Add /usr/libexec/podman/qemu-system-arch 949d406ed1 test/system: skip podman volumes with XFS quotas on fedora 3235579b48 cirrus: ensure NOTIFY_SOCKET is properly unset for all tests faedb9c911 docs: Update filter options and add podman ps documentation e70bfff716 docs: Deduplicate --filter descriptions 63ea75a599 Deterministically order pod inspect fields 4e3dd47967 bindings: fix handling of env secrets in remote builds b17e90703c Add perl to make validatepr 86b6c75cef Fix `unless-stopped` restart policy to match Docker behavior 8e93487dcc docs/podman.1: Fix leftover rootless mention 35c602bfbb fix: improve userns validation when joining pods 371b3ecdc1 docs: further tweaks 36b11b43fd docs: improve note about Quadlet TimeoutStartSec d6c79580f8 [Fixes: #27571] Fix 'shouldResolveWinPaths' returning 'false' on Windows 243b623629 fix(api/compat): typo in the remove secret handle 8423b3bbd0 Clamp rootless rlimits to host on format 58a15f1500 Add ulimits to `podman update` API 0f5b913a7c podman-systemd.unit.5: document /sbin/nologin accounts 484858710c feat(exec): Add --no-session flag for improved performance 790f21d355 quadlet install: multiple quadlets from single file should share app ed79cdfd6a quadlet: add support for multiple quadlets in a single file e8c334f3cb chore: fix the inconsistent method names in the comments 2a0b5c3593 docs: Add references to quadlet 479b363020 test/system: Update test to handle new error message from runc 1.3.3 d45377c6c8 Ignore auth header with empty JSON object d36b61c211 Fixes: #27444, Fix tiny typos in some artifact docs f1dcf63a91 Fixes #27421 aritfact push and pull with authfile 60bf36386b Bumping timeout for aarch64 machine 87bb060531 Fix remote client rejecting empty --detach-keys string 49a704eb06 Makefile: Drop dead CONTAINER_RUNTIME 5a8dbd1dfb Fixes #27378 Missing network type in events document dcf7644cbc Update docs/source/markdown/podman-run.1.md.in 28b04a8604 Escape periods in path 8b8390522b Escape RequiresMountsFor value d5b72d973a Introduce assert-has-key assertion 62f1e1176e Rename misleading assertion name eeae782945 docs: expand --mount section with detailed type descriptions (#25888) 9d29245500 Fix tmpfs U/chown documentation 415e3fc4c8 [CI:DOCS]Fix minor typo in buildah test ee88292812 Add system test b866c3d49d Fix podman build "newer" pull policy 99136fbc4c test/e2e: fix 'block all syscalls' seccomp for runc f76be2a94d [play_kube] Add validation to container image field b4202348ad test: Fix PODMAN_BATS_LEAK_CHECK cc83ebbb3e Fix docs for Volume User= and Group= options 763b7b3821 test/system: fix log timestamp work around 6c1378be44 extract shared TTY handling code into helper function b847c344f6 test: Fix --hostuser octal UID test flakiness 10187a23af Fixes #27651 - Fix health inspect/ps for rootfs containers with empty healthcheck 2f348b3c19 test/e2e: Skip privileged container test if NoNewPrivs is set abc9a6ff29 Don't assume v1.41 is the default docker d93268f286 Bump Compat API version to supported v1.44 dc97c9af7e libpod: fix Volume.Mount() returning empty path for plugin volumes 8eacbd8464 fix: correct env/envFrom precedence in kube play 5ff402aa80 Fix PowerShell `Write-Error` multi-line argument 7036d09c5e fix: generate correct error message if Wix is not installed 9e965498aa Fix interfering escaping of commas and spaces in no_proxy variable 4ea22f1b29 Write DefaultEnvironment proxy values to /etc/systemd/user.conf.d/default-env.conf 0e4dc26c05 Fix test proxyenv/env_test.go for systems that use proxy variables eb118bafb4 Fix healthcheck argument with spaces split in Docker API (#27818) 3d02daa261 fix: prevent race condition during database initialization by using INSERT OR IGNORE. b41f2d3a3a Release notes for v5.8.0-RC1 (initial) 96dd0e1ad1 Fix podman run equivalent for HealthStartPeriod 7477ffa9c6 libpod: simplify unnecessary loops d941f62082 secrets/create: remove pipe check and allow interactive stdin e1408e5a35 Fix container export emitting incorrect event type. 0747179589 Add AppArmor key to quadlet .container files f111cedfce fix(logs): enhance timestamp format to include timezone in logs dac1e82710 fix(logs): add tests for nanosecond precision in log timestamps d3bda38309 fix(logs): improve timestamp precision in container logs 06fe9b21c1 Fix missing newlines in stderr error messages 17d7be80c9 test/system: remove apk from build ac22866156 libpod: fix healthchecks not executing every interval on linux fcaf1300d7 fix: skip execution of probes when initialDelaySeconds is not elapsed efff41698b test/buildah-bud: skip failed remote test 37e511d216 [v5.8] Bump Buildah to v1.43.0 b320fbcaff Add migration code for BoltDB to SQLite 4fdb90e02c Deterministically order pod inspect fields 7ae6813dfc [v5.8] artifact: Skip AddLocal optimization on WSL 3918d4ca75 [v5.8] Require absolute path for local API 6465c07d21 [v5.8] Add local artifact add API endpoint bae88e1e5e Add GET /quadlets/{name}/exists d6023e431f Add DELETE /libpod/quadlets f2fcc7f09c Add POST /libpod/quadlets 01e0db2931 Add GET /quadlets/{name}/file 36c405582a Bump Podman to v5.7.2-dev Signed-off-by: Bruce Ashfield

podman: update to v5.7.1

2026-02-10T21:04:20+00:00

Bumping libpod to version v5.7.1-5-gec1b7c989f, which comprises the following commits: 2b52342af9 Use explicit download-artifact name and path for win-installer release 36c405582a Bump Podman to v5.7.2-dev f845d14e94 Bump to v5.7.1 6ecc622841 Final release notes update for v5.7.1 d0558385ec kube play: Fix fd leak when handling symlinks 214f5b2fd9 Update release notes for v5.7.1 678d1b4bfd avoid potential nil ptr deref in image rm ba6e527289 fix: check err returned by newGenericDecompressor 68022802fc pkg/specgen/generate: Fix adding host devices on FreeBSD a27cc24f80 Replace FindExecutablePeer with FindHelperBinary dc7509fe38 [v5.7] Bump common to v0.66.1 7ce2e00ab1 libpod: simplify resolveWorkDir() e576e002e9 libpod: fix workdir MkdirAll() all check f348d1bd5b [v5.7] Bump Buildah to v1.42.2, runc to v1.3.4 9538a7d976 rootless_linux.c: use shortcut for system commands 0647387bfe SetupRootless handle case where conmon pid are not valid 118ec04065 preallocate paths in SetupRootless 6a9ce66e5c fix noMoveProcess in SetupRootless 973ab34078 use return error handling in SetupRootless 363665a456 pkg/machine: make mount units hook into local-fs db82b92d0a docs: fix redoc swagger URL 9257ac4822 Bump Podman to v5.7.1-dev 0370128fc8 Bump to v5.7.0 84c31b8fae Create release notes for v5.7.0 b6b8d23abd hack/bats: port it to use the new remote support 129c344b49 test/system: fix broken podman_runtime 708f7a14f3 test/system: fix artifact test cleanup e737d75b2f test/system: merge artifact tests into single file 58733d714a test/system: rework artifact created test 372e142252 test/system: remove 701-artifact-created.bats bfddcb3384 test/system: do not run artifact test in parallel 199254f039 test/system: skip flaky restore test on debian 0c99f623aa test/e2e: try to fix clean up after terminated build flake ec1efdbdac [v5.7] Packit/TMT: remove podman-next repos from release branches 97ad660c0c [v5.7] fix lint issues with github.com/cyphar/filepath-securejoin e6deadcc34 [v5.7] Bump to runc v1.3.3 - CVE-2025-52881 cbda92e6b3 rotate aws meta_task keys 3d23aa4a6b rotate aws key da8d069e6a Bump Podman to v5.7.0-dev 85a6e7f8d7 Bump to v5.7.0-rc3 b7d1f77147 Update release notes for v5.7.0-rc3 fb8644d551 Fix cache misses when pulling WSL machine image c4357e7112 test: organize search tests with BeforeEach/AfterEach patterns 64fbc2557e test: refactor search_test.go to use helper functions and PodmanExitCleanly d6f660076b test: Replace external registry deps with mock server in search tests a59eaccbe2 Add tmt integration plan bfae53709c Bump bundled krunkit from 1.1.0 to 1.1.1 f12c838fb7 Allow RC Windows Installer to be built d0b45ff1f0 Allow failures on WSL machine tests e68cecbb60 Bump Podman to v5.7.0-dev fa892f1df0 Bump to v5.7.0-rc2 e16a54c6bc Add release notes for v5.7.0-rc2 667757583b Bump bundled krunkit from 0.2.2 to 1.1.0 537a0233ae Fix Windows Installer GH release 829864ba74 Add CreatedAt format option to podman artifact ls 7f780d866b Bump Podman to v5.7.0-dev 03f8a02983 Bump to v5.7.0-rc1 9b5751089b Add release notes for v5.7.0-rc1 61291e8c70 quadlet: add `cat` alias for `print` c72102d1b2 Bump Buidah to v1.42.0 for Podman v5.7 f957852e4a fix: failing tests 8e013c0012 feat(quadlet: kube): support multiple Yaml entries 9ea18b78fa Warn on boltdb use 339a432dd9 fix artifact inspect issues 9bda788edf feat(cmd): podman kube play support multiple arguments 0ea4eaee70 cmd/podman: add replace flag to quadlet install ca106301f8 fix: typo in uidmap option doc 0b1e9a76a5 RPM: build with sequoia for F43+ 1fbf24b65b feat: add `--format` flag to artifact inspect 538229da90 artifact: added CREATED column to artifact ls Fixes: #27314 bb4fa066b3 fix remote command parameters 43ff7a4c13 Add a test for containers.conf runtime options f87c8b9cba docs: introduce custom version selector in api.html f6dd05d9c4 add test for container name without Pod name prefix feature a27fd9bd89 Allow artifact add to override org.opencontainers.image.title annotation bc571ae542 Vendor in latest go.podman.io/common 74788a3fe1 fileperms: newer Go 1.13+ octal literal format 1800b34b51 Quadlet build - add support for IgnoreFile key 0a20e22384 Add default runtime flags in config cfd4cc0932 remove libartifact from podman b394fe1a87 chore: remove repetitive word in cmd/podman/README.md 098d8efecc add option to remove Pod name prefix in resulting container name 9dbc33bb25 Add a new Windows installer supporting user scope fa5d6cc103 docs: initialize redoc via JS API 858150288f docs: generate Reference version list from json file 56fee79d3c fix: system prune JSON unmarshalling error in remote client 73e42b3c9c [skip-ci] Update actions/setup-node action to v6 b2aefd4cf9 docs: add missing manifest parameter to build API endpoints 1e713c1a5f Add BuildArg example into documentation 34254cd1d0 Add artifact quadlet unit type support 6d63d165ef Fix flaky sysctl completion by handling /proc/sys errors gracefully b4d81c0338 Run `make validatepr` c0a09e7f10 Update docs/source/markdown/podman-systemd.unit.5.md 1656c90c6e Iterate through all machine providers in FindMachineByPort a1e7e9a46d Add local build API for direct filesystem builds on MacOS and Windows (only WSL) 1f1354c2a4 fix(deps): update module golang.org/x/term to v0.36.0 e3c9fa6ddd Update docs for StopTimeOut 6786f59648 SECURITY.md: point to container-libs a696f8bccb Update documentation to include BuildArg key 196be4b813 Test for multiple key/val arguments 720e263767 Add BuildArg key to quadlets aaf957edf9 fix(deps): update module golang.org/x/sys to v0.37.0 d1c43e3ae8 Fixed #27120: Pod Quadlet can configure podman pod stop --time 928a50d228 fix(deps): update module golang.org/x/net to v0.45.0 79ecc1d56b Fix --userns=ns: conflicting with runc 1.1.11+ 98cb7b75d9 quadlet: standardize Convert function signatures b765c91580 Add --replace option to podman artifact add command 3e774ee285 test/system: actually wait for container removal fdb5ac5e8f test/system: run_podman ? needs quoting 09e535fb46 quadlet: remove unused 'name' parameter from ConvertNetwork and ConvertVolume 4bd6aff4b6 fix: #23915 podman build is not parsing sbom command line arguments 3a98b6dc0e test: Wait for killed container to avoid leak b415b0ad3e Update pkg/api/server/register_artifacts.go fb3eaf0c87 [DOCS] Add missing stable swagger API links 72ffd00c5a fix(deps): update module github.com/onsi/ginkgo/v2 to v2.26.0 00309d3955 secret ls: align docs, completion, and tests; fix formatting 6405925f79 Add artifact fallback to podman inspect command a724fce8aa pkg/api: api list quadlets resource 3c3b805ea7 cmd/podman: --ignore errors flag to artifact rm 090304a054 lint: reenable revive unused-parameter check 88bca78c6e stop service instances 004e6ced76 test: remove outdated skip in podman run check personality support test 3b509022cd fix(deps): update module github.com/shirou/gopsutil/v4 to v4.25.9 83e65f91a4 Quadlet - Support template dependency 87b4f842de test: fix "run healthcheck" bindings test ebde5d1563 cmd: add auto completion for network create --interface-name e667532110 docs: point Go Report Card badge to v5 module path ef0a7dd486 pkg/api/handlers/compat: use strings.CutPrefix f198fe6b13 pkg/machine/wsl: use any instead of interface{} 5824197774 pkg/machine/e2e: remove obsoleted comment 8e55b67410 docs: fix Go Report Card badge to reference current repository b5de5efb3e cmd/podman/system: fix error handling in renumber and migrate commands 571866775d [compat api] Remove ContainerConfig field c11941eadb [DOCS] Update volume mount docs for subpath support feb36e4fe6 Implement TLS API Support a27929aaaf test/e2e: fmt artifact list with virtual size 32c962a177 Add Podman 6 HLD 9bca0d01d2 Add a design document for Conmon v3 4764b0e403 Add creation timestamp to podman artifacts 4652f5c3c6 docs: clarify that --userns=keep-id runs container as host UID 5ae0e0de3d cmd/podman: added virtual size option in artifact ls 63c40feb8c test: Fix test race in 030-run f0f05e22c6 cmd/podman: completion for --sysctl in create/run f26483ba7d fix: standardize casing for cgroups in documentation 15fdbe9442 test: remove hack workaround in 'use plugin in containers' 51f4e614e9 test: remove skip_if_remote from podman run - uidmapping has no /sys/kernel mounts 4b9be9c218 chore(deps): update dependency golangci/golangci-lint to v2.5.0 7c9aa72c55 add containerfile doc link a0238fb19f libpod: Fill out OnlineCPUs in the FreeBSD stats handler 602ba415c6 libpod: Implement getOnlineCPUs() on FreeBSD 39750faab3 test/system: fix test race in exec leak check b8258a53dd Update github action to use pull_request_target b24220b0a2 Revert "test/e2e: try debug potential pasta issue" ab5e400a9a docs: remove remote limitation note for --build-context option 8d06a9e9f7 fix: Correct typo in chrootdirs option 2702156bd7 pkg/bindings: on terminal attach always wait for stdout to be done 7ff07b6e0c pkg/bindings: use HTTP 101 upgrade request for attach 9e2850d0a8 Add --sign-by-sq-fingerprint to push operations 2f005b67f4 Exercise containers_image_sequoia in CI 070d7c3ad3 Revert "Rewrite the Quadlet documentation." bb422c8372 Revert "Change the syntax to not depend on jinja2." fd60d63bf4 Revert "Deduplicate more options." 4ae8e386ef Revert "docs: restore podman-systemd.unit.5" 04af9ae3fc fix(emulation): handle fs.ErrNotExist in registeredBinfmtMisc 80f1d48d44 [skip-ci] Update actions/setup-node action to v5 aa8bbbb1ff [skip-ci] Update actions/github-script action to v8 796be1e4bf troubleshooting: document lsetxattr error e1c1961d48 [skip-ci] Update actions/checkout action to v5 43a294fa94 vendor: update golang.org/x packages 4417e6269c use maps.Clone() over Copy() when possible 637de6022f libpod/oci_conmon_linux.go: fix false postive in linter 9e4fad8d06 pkg/systemd/quadletL silence one lint warning 78e5a521b0 inline some conditionals 8631032556 run modernize -fix ./... dc5a791f58 use bytes.SplitSeq where possible b97525a78d use strings.SplitSeq where possible 4e3e9bfb70 update to go 1.24 8537afca66 test/e2e: fix podman run default mask test with crun 1.24 3bb32d846b test/system: skip noswap memory mounts correctly 52fcdcf64c test/system: skip idmapped mount correctly bd7aada776 cirrus: update to freebsd 14.3 710e216390 cirrus: fix golangci-lint cache leak a720139dd8 New VM images 2025-09-10 5b10b51788 Add a directory for design documents 936a01e088 Quadlet build - consider File path that starts with a systemd specifier as absolute d0be0e9659 Makefile: restore HELPER_BINARIES_DIR 2bed9a40bc fix(deps): update module google.golang.org/protobuf to v1.36.9 c70c0ac13e refactor: Modularize binding build functions c38babff57 Adding github action to generate a badge for first time contributor 8566ef71c0 fix: set header fields before response status code to prevent missing fields 50a3e3cf8a fix(deps): update module github.com/opencontainers/cgroups to v0.0.5 6c4b98c940 test/e2e: add CVE-2025-9566 regression test cab3c6de6d docs: restore podman-systemd.unit.5 6756eb3412 Deduplicate more options. fdeaf2905f Update module github.com/onsi/ginkgo/v2 to v2.25.3 163bdf2df8 quadlet: fix runtime error for invalid Mount value 792bbd2046 [skip-ci] Update actions/labeler action to v6 853dd36da3 Update dependency pytest to v8.4.2 43fbde4e66 kube play: don't follow volume symlinks onto the host 4b66e5a27b Add R! to systemd-tmpfiles script for all /tmp dirs c2506656c4 spf13/pflag: replace deprecated ParseErrorsWhitelist ca9c8d104e update module github.com/spf13/pflag to v1.0.10 889a5fd0ac [skip-ci] Update actions/stale action to v10 f22506b74f [skip-ci] Update actions/setup-go action to v6 310f196aea fix(deps): update module github.com/docker/docker to v28.4.0+incompatible faceb67782 test/buildah-bud: enable one skipped test dbfddb82cb vendor: update go.podman.io/{common,image,storage} 2c6dadd724 Fix a locking bug in that could cause a double-unlock 5c810ea1c8 Makefile: add SOURCES dep to bin/podman.cross.% target b62f887fbd Makefile: add proper docs for bin/podman.cross.% 3633cd53e8 Revert "Remove bin/podman.cross Make target" 98072bfcea refactor: modularize build REST API with utility functions 2acf5c0119 libpod: Fix the jailName helper a250fee0ec libpod: Fix "top" support on FreeBSD 5ba23ccad5 compat: Deduplicate the Linux and FreeBSD containers/stats helpers a341a4ee24 compat: Add a stub container/stats handler for FreeBSD 9de737bf29 Change the syntax to not depend on jinja2. c12b1b32bc Rewrite the Quadlet documentation. 247a80db45 test/system: remove distro-integration bats tag ee45782079 test/system: fix podman load - from URL 20fb712872 test/system: do not connect to github server 59df0782f2 Handle SIGPIPE to prevent machine stuck in Starting state 9b8e785e3c fix(deps): update module github.com/spf13/cobra to v1.10.1 c65fd9a2c2 quadlet: add HttpProxy option for Container sections 26aafb21d2 fix(deps): update module github.com/checkpoint-restore/checkpointctl to v1.4.0 46d757501a do not pass [no]copy as bind mounts options to runtime 4e2a04dedc do not pass volume-opt as bind mounts options to runtime a98154a978 Switch common, storage and image to monorepo. c8681b6028 chore(deps): update module github.com/ulikunitz/xz to v0.5.15 [security] 0f477eaaa6 fix(deps): update module github.com/spf13/pflag to v1.0.9 573fd0d7eb fix(deps): update module github.com/shirou/gopsutil/v4 to v4.25.8 b9812e3d9e Mention zstandard tarball import support 80348a50d0 chore(deps): update module github.com/go-viper/mapstructure/v2 to v2.4.0 [security] 3d4f8153be fix(deps): update module github.com/onsi/ginkgo/v2 to v2.25.2 3effff42eb tests: Get rid of netcat on the host and use Bash's /dev/tcp 0ff079d320 tests: Replace ncat for socat 9c3652c188 Add support for criu's tcp-close functionality. e467439ab8 test/e2e: actually start container in startContainer 3a1ce1fb3d fix(deps): update module github.com/stretchr/testify to v1.11.1 8e59c948df test/buildah-bud: skip new failing test df80fbcab6 test/e2e: remove image diff test skips b172cf7475 vendor: update buildah to latest main e76b08394e vendor: update c/{common, image, storage} to latest main a5a00c1796 Add a release note for 5.6 Rosetta being disabled-by-default 413eea885b fix(deps): update module github.com/stretchr/testify to v1.11.0 2dd3111098 fix(libpod): truncate long hostnames to correct maximum length 18aa78a7e6 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.25.1 877e208820 fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.32 c51c6e58a7 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.25.0 4b835f36b9 fix(deps): update module github.com/coreos/go-systemd/v22 to v22.6.0 249fa21e8a Improve documentation wording 5a2098cf61 windows: do not convert unconfined seccomp path d267f8a3dd ci: log wsl --version output 40cd207437 Update module github.com/kevinburke/ssh_config to v1.4.0 fa5140771f Update module go.etcd.io/bbolt to v1.4.3 4b5ada39e4 Update release notes on main to reflect v5.6 release 514e686b4c podman events: show network create/remove event with journald 9d47477e82 cirrus: fix podman machine windows only_if condition 2c89069fa8 update tests duo to CRUN#1767 to support both values cfe4d46d89 Optimize image loading for Podman machines 0a9d5ca75d Skip JSON parsing for non-JSON error responses be0ad4a7aa [docs] Refactor Artifact API documentation 2e7d6135c6 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.24.0 96d9a00adb docs(run,create): note remote clients support only docker transport 10f9c9a7e8 Configurable GINKGOTIMEOUT in `winmake.ps1` e1d6dfd2c7 Fixes #26369 46ee62ca6a Fixes: #26353 4690bce8a8 2025 3Q Roadmap Update c33af3c8dd docs: add missing groups and hgroups descriptors to podman-top documentation fda74ee619 added system-connection-add options example 68ed0c08e6 fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.8.7 700351a813 test/buildah-bud/run-buildah-bud-tests: loosen the branch regexp 21f2128d79 added example for custom socket 599c635f9f chore(deps): update dependency golangci/golangci-lint to v2.4.0 6d54a298c9 chore(deps): update docker.io/library/golang docker tag to v1.25 3ca729a2fb fix: Correct small typo foce -> force f38e32760d feat: Add artifact remove --all option b0febf3336 Update ADOPTERS.md 5706d2a61e make machine --user-mode-networking docs more clear 4bb4cf62cb [skip-ci] Update actions/checkout action to v5 512e04946c remove outdated dependencies/analyses scripts 5f5519607b contrib: add script and docs to analyze dependency usage b6b8d05a52 Small changes suggested by markdown linter. a0e6396c43 Updated with Type descriptions. 9a2dccf4f4 Add a deprecation notice for users of BoltDB 9b62438ede test/buildah-bud: fix checkout to also handle go.mod replace 8633b5edeb Update module golang.org/x/net to v0.43.0 cc465e7227 Updated with badges for Type and no extra line. 930cd25739 Feat: Add log_path support in containers.conf e14b8acba8 Update vendor dependencies 1d6fda8eda New: initial ADOPTERS.md file. 7247d84fbe Fix typo a75f74b1d3 Fixes: #26691 2959d9f7ec fix: drop yearly contributor badge 8ef76a6933 [skip-ci] Update actions/download-artifact action to v5 b5fce87237 Manpages: Added --filter flag examples to all the relevant podman manpages 7c95ceae57 Manpages: podman container runlabel added example with --replace 67ec2037c0 Add support for configuring tls verification with machine init 69f8f26d98 pkg/machine/e2e: remove build context skip b8bba308b0 fix(deps): update common, image, and storage deps ca3347cc2b doc(podman-system.unit.5.md): clarify user/group 6c27165054 Packit: do not notify on podman-next failures 1001450d77 chore(deps): update dependency golangci/golangci-lint to v2.3.1 32ec523ef6 Makefile: Clarify different `binaries` targets f96eccb1ac docs: add examples with resource limits and mounts to podman pod create manpage b7b7839ad3 compat: remove deprecated VirtualSize a6fa3de870 fix(deps): update module github.com/shirou/gopsutil/v4 to v4.25.7 4a7974a7a8 [CI:DOCS] Remove Experimental from Artifacts man pages 0530a564a7 Fix: Improve error message for empty device modes in API requests 5ab92a7499 docs(kube play): clarify --annotation flag only affects containers, not pods 23ebb7d94c feat: add Podman artifact support to Go bindings and remote clients 0666b4ffbf events: add support for label filter with key only 610c4c7710 compat: GET /_ping return Builder-Version: 1 1963c6275e compat: remove GET /system/df BuilderSize b0e7a2ec9b compat: add shared-size par to GET /images/json e33d92ce9e docs: add LFX Insights badges b5d18e873f Fix ancestor filter to support Docker-compatible substring matching 924e03ac97 fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.30 88bb9daeab fix(deps): update module github.com/docker/docker to v28.3.3+incompatible [security] 0740b94fcd fix(deps): update module sigs.k8s.io/yaml to v1.6.0 003a4d44a1 docs: add resource limit examples to podman pod clone manpage 81d6d90195 Improve handling of --publish and incompatible NetNS modes df2862e72c Consolidate the definition and consumption of --sign* CLI options 426e787beb Fix (podman artifact push --creds) 67927715cf Remove unused CLI options dd8bc6ccb9 Bump main to v5.7.0-dev 7f2908afcf podman: add --creds and --cert-dir to create/run 31fafad0c1 Update module github.com/mattn/go-sqlite3 to v1.14.29 dcd187946d Skip rather than comment bad diff tests 4395ff1f25 Link to blog post 3ef33653ff compat: RepoTags and RepoDigest return [] and not null Signed-off-by: Bruce Ashfield

podman: improve reproducibility

2026-02-09T20:22:33+00:00

disable buildvcs to improve reproducibility Signed-off-by: Changqing Li Signed-off-by: Bruce Ashfield

recipes/golang: improve reproducibility

2026-02-09T20:22:07+00:00

Refer [1], cgo will embeded cgo_ldflags in the intermediary output, which make content ID will be incfluenced by cgo_ldflags. '--sysroot=xxx' includes build path, which will make the binary not reproducible, these recipes can build successfully without --sysroot, so remove it [1] https://git.openembedded.org/openembedded-core/commit/?id=1797741aad02b8bf429fac4b81e30cdda64b5448 Signed-off-by: Changqing Li Signed-off-by: Bruce Ashfield