Mirror of git.yoctoproject.org/meta-virtualization https://git.enea.com/cgit/linux/meta-virtualization.git/atom?h=nanbield 2023-11-09T14:00:59+00:00 2023-11-09T14:00:59+00:00 Bruce Ashfield bruce.ashfield@gmail.com 2023-11-09T05:12:32+00:00 urn:sha1:4484b8dea4bbbafd3d377f2d0fe4ac3f15645145 podman commit dfec510b41b5 [go-md2man: use vendored-in version, not system] removes the shell test for go-md2man, which means our native executable is not found. While we could export GOMD2MAN and point it to our sysroot version (${RECIPE_SYSROOT_NATIVE}/usr/bin/go-md2man), we could run into the issues with formatting that the podman commit is trying to avoid. If we pass our build host architecture to the build, it will be used and the executable created as part of the compilation. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> 2023-11-06T16:21:12+00:00 Bruce Ashfield bruce.ashfield@gmail.com 2023-10-23T13:21:49+00:00 urn:sha1:d9af8d1514360e21b9f911b6d1671eaf88587afa Bumping libpod to version v4.7.1-6-g85b5f5723, which comprises the following commits: d1cb93d79 rtd: implement v2 build file 8d045d4c9 Adjust to path name change for resolved unit eb5b5dbc8 Switch version to 4.7.2-dev ef83eeb9c New version: v4.7.1 cc5acabf0 Update RELEASE_NOTES.md for v4.7.1 456450438 compat API: speed up network list a2efda96d inspect: ignore ENOENT during device lookup f931f08a7 test/system: --env-file test fixes 297a66c30 Revert "feat(env): support multiline in env-file" 46a85e054 Revert "docs(env-file): improve document description" 6afddf430 Revert "fix(env): parsing --env incorrect in cli" c5ca7e5fc [CI:DOCS] update swagger version on docs.podman.io 51ee25d3f Fix locale issues with WSL version detection 4d15c88a9 switch version to 4.7.1-dev 073183fe1 Bump to v4.7.0 44f727fb0 [CI:DOCS] v4.7.0 RELEASE_NOTES update 2d32314d2 rpm: remove gvproxy subpackage a2697c028 packit: tag @containers/packit-build team on copr build failures 54ce0ca7c specgen, rootless: fix mount of cgroup without a netns d2f9af717 pass --syslog to the cleanup process 133e3a4f2 fix --authfile auto-update test 2c62815e1 version: switch back from -rc1 to -dev 7845dd175 New pre-release: v4.7.0-rc1 49f76e95e [CI:DOCS] Update release notes for v4.7.0-rc1 fa6f94001 Cirrus: Update operating branch 0728a10c6 Move podman build opts to common file 8a9f778e2 Add ability for machine rm -f for WSL 919dce131 Plumbing to run machine tests with hyperv ade0c4932 CI: trace setup and runner scripts c37443e8b Bump to Buildah v1.32.0 9b36f334d [CI:DOCS] bump release notes on main with the latest release cae110f8b fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc5 4a2a423df Add --filter pod= autocompletion 075cf2254 e2e: ExitCleanly(): manual test fixes db5adca73 e2e: continuing ExitCleanly(): just the replacements c689fb4a5 Fix some spelling and formatting 522e0f43f Add support for Ulimit in quadlet b1e3e8d97 Run codespell on code 6b7f718b4 wire in new buildah build options f9aba28ca make golangci-lint happy c1b6effac add !remote tag to pkg/specgen/generate 3acee29cf pkg/specgen: do not depend on libimage for remote 2c2299ad8 bump buildah to latest bf86ed72c [CI:DOCS] restart.md: migrate to container unit 304b22729 fix(deps): update module k8s.io/kubernetes to v1.28.2 4ed3273f6 Add support for PidsLimit in quadlet 70560f916 Add DNS fields to Container and Network unit groups 777b5efa4 [CI:DOCS] update API docs version list 7b9114023 Try to fix broken CI (gvisor-something) df011f437 e2e: more ExitCleanly(): manual test fixes cb1cb338c e2e: more ExitCleanly(): dumb string replacements 62ac96e12 e2e: create_test: use ExitCleanly() b0f77acd1 e2e: diff_test: use ExitCleanly() 5920bfa2e The `podman init` command cannot modify containers. 639a1a029 bump c/common to latest main 806c5de12 Podmansh: use podmansh_timeout eefaa512a e2e: more ExitCleanly(): low-hanging fruit 9b17d6cb0 vendor: update checkpointctl to v1.1.0 cdcf18b86 kube: add DaemonSet support for generate 75b4679a7 vendor of containers/(common, storage, image) 19bd9b33d libpod: move oom_score_adj clamp to init 4f017236e e2e: commit_test: use ExitCleanly() 3a4be5e90 e2e: container_clone_test.go: use ExitCleanly() 8cb14e54a e2e: use ExitCleanly() in cleanup_test.go 925794c6a Ensure HC events fire after logs are written 65a64da27 [CI:DOCS] podman-systemd.unit: fix equivalents d9a85466a Add support for kube TerminationGracePeriodSeconds 5eb0a53a0 Update podman-kube-play.1.md.in c2cd93cdc Split up alt binaries to speed up build 7bf9f302a Switch installer task to EC2 fbbad0439 pod: fix duplicate volumes from containers.conf 0c75eac63 tests: add test for pod cgroups b8f6a12d0 libpod: create the cgroup pod before containers 331b3c216 cmd, specgen: allow cgroup resources without --infra 83334fb4e specgen: allow --share-parent with --infra=false 5de8f4aba libpod: allow cgroup path without infra container 5121c9eb0 libpod: check if cgroup exists before creating it 38209ef49 libpod: refactor platformMakePod signature 627ac1c96 libpod: destroy pod cgroup on pod stop 9a347619d utils: export MoveUnderCgroup 556db46a6 libpod: refactor code to new function 65bddfcd2 e2e: use ExitCleanly() in checkpoint tests 479680232 [CI:DOCS]Remove use of --latest|-l from tutorial afeab39d1 CI test runner: upgrade tests rely on system tests 59bd6a74a run --rmi: "cannot remove" is a warning, not an error 70cf9740f StopContainer: display signal num when name unknown 6f913f5f3 URGENT: fix broken CI b83485022 Add support for kube securityContext\.procMount 589867d71 podman: don't restart after kill 2d7d8d1d1 Tmpfs should not be mounted noexec c2575f726 sys tests: run_podman: check for unwanted warnings/errors 1211518e8 chore(deps): update dependency setuptools to ~=68.2.0 465150f10 e2e: use ExitCleanly() in attach & build tests 27495981c Some distros do not default to docker.io for shortname searches 30abd7f1a security: accept empty capabilities list c32cfb1d0 systests: random_free_port: fix EADDRINUSE flake a5798e9f5 fix(deps): update module github.com/cyphar/filepath-securejoin to v0.2.4 dbfc3e7e0 Restrict fcos_test to amd64, arm64 7b2fc5f8d fix(deps): update github.com/containers/libhvee digest to 56fb235 0a913d578 fix(deps): update module github.com/docker/docker to v24.0.6+incompatible f9fd40221 fix(deps): update module golang.org/x/tools to v0.13.0 71549c642 Ignore spurious container-removal errors e5bf0f96d fix(deps): update module golang.org/x/net to v0.15.0 fdf694fcf systests: manifest zstd test: lots of tiny cleanups 9730c0373 vendor: update github.com/opencontainers/runc to main e825bd5d5 [skip-ci] Update actions/checkout action to v4 8b4a79a74 linux, rootless: clamp oom_score_adj if it is too low 681b6db3f machine: increase max number of inotify instances 302d15334 fix(deps): update module golang.org/x/term to v0.12.0 f094884c1 Remove redundant nil checks in system connection remove 17037af48 fix(deps): update module golang.org/x/text to v0.13.0 1d51cd14a fix(deps): update module golang.org/x/sys to v0.12.0 f542d21a7 fix(deps): update github.com/containers/libhvee digest to 2bf7930 d4fedb288 docs(readme): fix a broken link 50cd072bf [CI:BUILD] Podman FCOS image from main 58a0b7ac8 Update golang.org/x/exp digest to d852ddb fe7bafb83 Add port forwarding and gvproxy machine test 702709a91 libpod: do not parse --hostuser in base 8 13342e503 fix: default typo 3a6fc8d2b Add Japanese locale and translation of index 39c5b7fac remove rh.container.bot@gmail.com a62abfe3d Tweaks and cleanups to prepare hyperv for CI a0738e7e6 system tests: housekeeping: various small fixes 4082b67f6 CI: e2e: first use of new ExitCleanly() matcher 6cbd17c0f CI: e2e: new ginkgo matcher, ExitCleanly() da1246d58 CI: e2e: fetch the standard system-test image d20b5869f kube play: fix pull policy 18d35b612 Fix gidmap command in example e66c04c1f vendor containers/common@12405381ff45 b95ae3b4a manifest,push: support add_compression from containers.conf 1085177fe hyperv ignition: use gvforwarder instead of vm 2a8e6acec Set remote username earlier for hyperv 26cefcbf9 Added an additional troubleshooting problem and solution a3c2d6ad2 Remove a dependency on libimage from pkg/bindings f1c24df4f Rename parameter in pkg/bindings 259ab8594 Remove a dependency on libimage from pkg/api/handlers 4cac1d3bc Don't re-inspect an image 99834947d Cirrus: Remove multi-arch podman image builds 91b8bc7f1 uid/gid mapping flags 18c2a2be8 [DOC] Clarify default behaviour on uidmap 60e3b5ef1 Update containers/common to latest fe3c4562f update libhvee 1b45fd723 /_ping handler: return OSType http header 2dbb0b096 e2e: fix race condition (kube play + logs) fe11db1e8 Update module github.com/vbauerster/mpb/v8 to v8.6.0 7ef97fa49 Kube - support List documents 346e5e52e kube down/play --replace: handle absent objects 0938ee189 push, manifest-push: --force-compression must be true with --compression-format 4b347609d oci: print stderr only after checking state 461230c49 Updated docs to reflect pod spec sysctls support added in v4.6 b8146a8a2 [CI:BUILD] Packit: Disable unexpected journal message check for cockpit-podman a6f2f5854 [CI:BUILD] Packit: Restrict cockpit tests to recent Fedoras b6b300c79 Update machine init/set tests da81bc13a Add rootful status to machine inspect d3618719b Dedup and refactor image acquisition adf34cbd7 Share podman sock bindings with other WSL distros db95e678a Fix user-mode validation check d898ae7f9 system tests: try to fix sdnotify flakes ecf9f9fd8 Cirrus: Disable only hello multiarch build f32e954b8 Set StopTimeout for service-container started under podman kube play d2ec127c1 Set StopTimeout for compat API if not set by client 6f284dbd4 podman exec should set umask to match container 2c5c2d213 [CI:BUILD] Packit: run cockpit-podman tests in PRs 52ed7fce2 Add infra-name annotations to kube gen/play a5f6a4a3b kube: notifyproxy: close once 7a94f8c12 system service: unset NOTIFY_SOCKET 638f994c2 Update module k8s.io/kubernetes to v1.28.1 7c9c96981 API attach: return vnd.docker.multiplexed-stream header 60e58f059 test/apiv2/60-auth.at: use `doesnotexists.podman.io` 61dd7f80c e2e tests: use registry:2.8.2 (was 2.8) 243f365aa create apiutils package c5b4eb943 api docs: document stream format 70f77efef Revert "Remove `hello` multi-arch image build" 82bd56be7 manifest-push: add support for --force-compression 469ace091 push: add support for --force-compression 202cc433a Update module github.com/onsi/ginkgo/v2 to v2.12.0 7e0130f75 Remove `hello` multi-arch image build 1b0e64a10 hack/perf/system-df.sh: add `df` benchmarks 148d95d8d Expand env variables for cmds/entrypoint with format $(ENV) e092f887f vendor c/storage@6902c2d c416e4576 Ignore the resource limits on cgroups V1 rootless systems 9e680cbc6 Fixups for stopping gvproxy 21c9517b5 Revert "GHA: Closed issue/PR comment-lock test" f0e8e79c9 GHA: Closed issue/PR comment-lock test 5477fd38a GHA: Add workflow to lock closed issues/PRs 75ce47347 [CI:DOCS] update auto-update docs 85d0df330 chore(deps): update dependency containers/automation_images to v20230816 bc35e28c0 fix(deps): update module github.com/google/uuid to v1.3.1 3d00744d2 libpod: sum per-interface network stats for FreeBSD 5eee8825e Set default Umask for `podman kube play` ef8f4db81 [CI:BUILD] rpm: spdx compatible license field e9539768c chore(deps): update dependency golangci/golangci-lint to v1.54.2 63a8926e9 Implement automatic port reassignment on Windows 45ce4834a Add support for ramfs as well as tmpfs in volume mounts bdc304058 Validate current generation of WSL2 with user-mode-networking 67756ac60 use container restart policy if user specifies one 0772d8ddb Stop gvproxy on hyperv machine stop 50136ea86 [CI:BUILD] rpm: depend on man-db 36e09f18b Update machine list test 8b2990131 Update machine start tests c3dbfa9a1 Update machine rm tests c726cf810 libpod: improve conmon error handling ed1f514d5 cirrus setup: install en_US.UTF-8 locale 8f85aaf07 fixup "podman logs with non ASCII log tag" tests 27b41f087 libpod: use /var/run instead of /run on FreeBSD 9b4f1cdb9 cirrus/lib.sh: extend env to passthrough at start for locale work ff66f31dd libpod: correctly pass env so alternative locales work 29c298856 cgroups_linux: use SessionBusPrivateNoAutoStartup 362747cfa podmansh man page UID=$(id -u lockedu) is not allowed e38cf33a6 CI: systests: remove pasta ICMP tests 7103fdb3f podman.1.md: Fix formatting of exit code 127, clarify wording of `exit code` example. 896cab612 document available secret drivers 53dd37cc4 pkg/specgen: add support for read-only root on FreeBSD d5841ed52 add --module flag 6a3f09e8a Update dependency setuptools to ~=68.1.0 1d5890bcd Add riscv64 architecture to the cross build target 252f51de8 GetFcosArch add `riscv64` arch 98e7d7af0 Update WSL backend to be compat with FCOS defaults 9e14e3ebe enabled hyperv image downloads 3e2e360b9 fix(deps): update module github.com/containers/ocicrypt to v1.1.8 abd35d4d3 [CI:DOCS] Fix git build example in build page 0c52d1004 CI: e2e manifest_test: use image from quay 31dc42224 Cirrus: Remove EC2 experimental flag 4c7546cb3 sphinx: skip options include dir 345b9b029 Update rootfs.md: Fix formatting and wording of idmap option f33b01b73 fix: Docker API compatible bool deserialization 4cb2d48ca Revert "compat,build: pull must accept string" 68bd81470 Add missing verb in machinectl example 78d6cd4c9 [CI:DOCS] Update Release Notes and Release Process b6349017a chore(deps): update dependency golangci/golangci-lint to v1.54.1 4b80492bd fix podman top missing output flake 5908999e6 New partial-line test is flaking 555b4f930 [CI:BUILD] Packit: add back fedora-eln targets f0dac3677 Cirrus: Prune defunct job + fix noop alias 1947f035c Bump bundled gvproxy to 0.7.0 df28df1ae systests: tests for --env and --env-file bcebcad1f Update system connection add & remove 310f971fc Add tests for podman farm dce3ef3c4 Add podman farm update command 44a704dfc Add podman farm remove command 59a8140f1 Add podman farm list command 6fcdf1a19 Add podman farm create command 1d5ef29f0 Add podman farm subcommand 23d5b5008 CI: e2e: add delay before podman logs or journalctl 2951316b2 Add completion for Farms b672ddc79 Vendor c/common changes 3963c5639 chore(deps): update dependency golangci/golangci-lint to v1.54.0 a55c2636d file logger: fix podman logs --tail with partial lines 7ce654fea fix(env): parsing --env incorrect in cli 4c4bc0922 Update docker.io/library/golang Docker tag to v1.21 f55c48ad3 podman stop --cidfile missing --ignore 7ef03517f Skip podman exec cannot be invoked on Debian 95ceacefb Re-enable checkpoint test on Debian SID c193dbd94 Require a non-generic reason for non-Fedora skip d79e3a23d CI FIXME removal/update. 5ec856652 Update dependency containers/automation_images to v20230807 7988dd82c [skip-ci] Update dawidd6/action-send-mail action to v3.8.0 8a410784b [CI:DOCS] fixed couple typos in build docs 282594e58 Stop timer in function waitPidStop 7c0bccaf7 packit: Build PRs into default packit COPRs afaeedef7 Add support for host-gateway 2de22ebf0 Ensure volumes-from mounts override image volumes 03d7a5120 Minor: Include shasums in GHA workflow artifacts d63ac0652 Minor: Add important comment to windows GHA workflow 9d7fe4e90 Minor: Update/fix dry-run input descriptions 518daef72 [CI:DOCS] Quadlet - provide more information about network files 819129b0d man-page xref: check for duplicate entries 39641482c cp: close temporary file on error path 018fdb48e Makefile: work around the lack of 'man -l' on FreeBSD 0b7769fda Update module golang.org/x/net to v0.14.0 ec5a9b9cc libpod: fix a crash in 'kube generate' on FreeBSD 23c5890f2 remove temporary files when copy [NO NEW TESTS NEEDED] fab62f816 Update module golang.org/x/sys to v0.11.0 b46d72fec [ci] Remove the podman socket in remove_packaged_podman_files() 706c51b52 [ci] Correct the podman systemd file names dd4f47dd9 Always show RemoteSocket.Exists in json fc7c6efd3 Fail if ssh key exists 69e883493 Fix regression for hyperv 803a49da4 [CI:BUILD] Makefile: rpm target generates correct version 1a63c1b23 Fix nits in #19480 1e5453943 Add support for passing container stop timeout as -1 (infinite) d50054f1e pkg/specgen: Add device support for FreeBSD f5058f148 [CI:DOCS] man: remove duplicate entry .LastUp a8974d4a3 CI: e2e: remove useless test 53d44a65e Check tty flag to set default terminal in Env 62a22c5d6 Run codespell on code 44f159ed3 Deprecate podman generate systemd 346f9cb4e manifest/push: add support for --add-compression 8ccda1ee8 [CI:DOCS]Update Release Notes b91599742 CI: sys: quadlet %T test: do not rely on journal 4d69f0146 GHA: Support testing build/sign workflows 15f35d354 Remove unnecessary backslashes 18e75daa5 [docs] Use code blocks for commands in podman-completion f3ebd798c Make podman run --rmi automatically set --rm 8b7701f52 machine: QEMU: recover from failed start 49b8b971a vendor: bump c/image to v5.26.1-0.20230801083106-fcf7f0e1712a bfd2a8cad secret: add support for `--ignore` with rm 21ebe0e90 Move `writeConfig` logic to shared function 597ccff0b Move some logic of `setRootful` to a common file 98cf8462a move `removeFilesAndConnections` to a common file 75a8f13c4 Move `waitAPIAndPrintInfo` to common file 55c7b5cec Move `addSSHConnectionsToPodmanSocket` code to shared file 0489d3aa6 Update module golang.org/x/net to v0.13.0 d74c225f4 chore(deps): update dependency containers/automation_images to v20230726 27d79e1fc Skip pasta local forwarder test on debian SID b69cd8d84 Skip broken/flaky blkio-weight test 822f2f495 Skip tarball re-inport test in rawhide for CI 851cd9cca Cleanup CIDFile on podman-remote run --rm command a237c3f46 CI: e2e: remove workaround for missing login file 42ad0c6e7 vendor: bump c/image and c/common 5b7dce8a3 Add support for confined users 78b850c48 Cirrus: Temp. disable rawhide validation task def70012b Limit git-validation to 'short-subject' 33b8c451e Fix up man page and add test on globs 850482b31 Move alternate image acquisition to separate function 906af5bbc Move `getDevNullFiles` into a common file 89f1fdc7f Update github.com/digitalocean/go-qemu digest to 2e3d018 d6847b19c Convert QEMU functions to methods with documentation 6930f39a6 Update docs/source/markdown/podman-build.1.md.in e1114f03c do not redefine gobuild for eln 39341f283 Set default userns from containers.conf file 4f1f88d7c Mention TimeoutStartSec in quadlet man page ada71889c inspect with network=none show SandboxKey netns path 93f4cc1b5 [CI:DOCS] GHA: Use stable go for Mac/Win builds ff7d287fc Breakup AppleHV machine funcs 64873e322 Codespell fixups acbe7703f Update docs/source/markdown/podman-stats.1.md.in 0b7157e3b CI: e2e: reenable containerized checkpoint tests c67ef7c1a docs(env-file): improve document description 4ee31dc37 Don't log EOF error when using podman --remote build with an empty context directory. f2794f9a8 API: kill: return 409 on invalid state 170a78631 feat(env): support multiline in env-file 19deb6a34 Adds documentation to new functions that were added 481143e58 `startHostNetworking`: get DevNull files 13da82466 `Remove`: remove network and ready sockets from registry d896431b2 `Remove`: remove files and connections 32265e1f6 `Remove`: collect files to destroy 381b103dd `Init`: read and split ign file aa6827a67 `Init`: write ign config cc30639d7 `Init`: add network and registry socks to registry 78d3b549c `Init`: add SSH conns to podman sock 630e7ba39 Improve the description of fields in podman-stats man page 22a8b6886 make /dev & /dev/shm read/only when --read-only --read-only-tmpfs=false 663fe9446 Mention no comment lines in Containerfile.in podman-build man page e973d15c3 [CI:BUILD] RPM: define gobuild macro for rhel/centos stream 837bc2568 Fix HyperV loadMachineFromJSON function name 416a471ee machine: QEMU: lock VM on stop/rm/set bb57c1631 libpod: add 'pod top' support on FreeBSD f592c33fb [CI:DOCS] Build and Sign Mac Pkginstaller f540bbffa Make sure users changes --authfile before checking 8757fe88a github: add issue type as link to podman github discussions 3523b9b05 Break QEMU `config.go` code into its own functions c341a0ffe machine: QEMU: lock VM on start afe8d5d84 libpod: fix 'podman kube generate' on FreeBSD 0fefcf8a4 Add glob support to podman run/create --mount d6815da8c kube: add DaemonSet support 239a5b64a Fix artifacts script after removal of msitools msi build e335a66a9 System tests: quadlet: fix race in %T test d6a32a3da If quadlets have same name, only use first db0ba9b25 Add support for mounts listed in containers.conf 6dda21984 Update vendor of containers/common 33891e8e9 System tests: add test tags 5ba055937 [CI:DOCS] socket_activation.md: increase socat timeout dfec510b4 go-md2man: use vendored-in version, not system a92bb3219 CI: use different TMPDIR on prior-fedora 6894e2031 system tests: authfile-exists: minor cleanup d70f15cc0 start(): don't defer event de122bb44 Fix: use --all in podman stats to get all containers stats 349d775de Verify authfile exists if user specifies it e0ef23955 libpod: don't generate errors for createTimer etc. 0cfd12786 add "healthy" sdnotify policy cbc96a7b4 Remove LICENSE and general doc files that are installed by the main package 37f0e9620 Add missing ` 2f21df7b3 Remove legacy msitools based msi installer ac212605c Remove any quotes around distribution id e596b17fb add a podman-compose command eee2817de pkg/specgen: Don't crash for device spec with... d2796c6c1 fix(deps): update module github.com/docker/docker to v24.0.5+incompatible f4fbd6fd0 Update vendor of containers/(storage,image) d4fc66af9 Clean up /var/tmp/ when using oci-archives when creating containers 49257a3c5 [CI:BUILD] RPM: separate out gvproxy for copr and rawhide b57091ac9 Reduce qemu machine function sizes baf30e612 [CI:DOCS] migrate socket_activation.md to quadlet 7314569cb [CI:DOCS] Update kube play volume support b5ce0ab2d Fix language, typos and markdown layout cb5450af7 [CI:DOCS] Add note about QUADLET_UNIT_DIRS to simplify quadlet debug 0bb73bf55 Add note on debugging quadlet unit files d4cfc498d Remove unnecessary use of the word "please". a6a207673 libpod: fix FreeBSD 'podman-remote top' default behaviour 709beb6c0 fix(deps): update module github.com/onsi/gomega to v1.27.9 3e534eff9 Add support for ShmSize to quadlet 4b9f670ca Quadlet system test - force journald log driver for short lived containers 731bd7d94 fix(deps): update module github.com/containers/libhvee to v0.4.0 413552e10 quadlet recursively scan for unit files ce736413b Ensure that we appropriately warn that TCP is insecure 558a70262 systests: quadlet: fixes for RHEL8 8d190704a Quadlet - Allow setting Service WorkingDirectory for Kube units 24bf6fc24 Quadlet system test - do not rely on journalctl in kube file tests 3d6bc2f86 Fix markdown in docs for podman-network-create 11ffea313 Man pages: check for corrupt tables 1d14bb7a8 quadlet systest: fix broken tmpdir references e55e128fc Add `since` as valid filter option for `volume` subcommands 6df17332b Podmansh: Better error, increase timeout to 30s 96241159a Fix multiple filter options logic for `podman volume ls ` 00a5b0709 Add bash-completion for podman inspect 3b6343202 Fix windows installer d7e25e14a Add missing reserved annotation support to `play` d2862c7dd Avoid progress hang with empty files 5c0912b07 Revert the usage of `home.GetConfigHome()` 5aa52659b Fix bug report issue template README link 47997857f Replace error check for non-existent file 8febb6aa1 Emergency gating-test fixes for RHEL8 d8d600b1d Add progress bar for decompress image 46058cfed refactor: move progressbar to a function ca9874ab7 Use pkg/homedir to get the home config directory 7fb17ae78 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.2 a224ff731 Should be checking tmpfs versus type not source 9e60f3ec5 fix(deps): update module github.com/vbauerster/mpb/v8 to v8.5.1 b4ffbcdfd Enabled arm64 arch for podman applehv provider 4e4078dbb [CI:BUILD] Packit: remove pre-sync action d0602e8f7 Add `--podman-only` flag to `podman generate kube` 13a950016 Update vendor containers/(common, buildah, image, storage) f256f4f95 Use constants for mount types 310a8f103 libpod: use define.TypeBind when resolving container paths 1e9410094 Tests: remove/update obsolete skips a3bbc3a2c Fix trust not using local policy file 0997cf012 Fix `podman container prune` docs for `--filter` a8d8c9497 Add more tests for liveness probes with default hostname & named ports 383d683f8 docs: podman-build --network add slirp and pasta 5e64cbf35 docs: podman run --network mention comma separted names 1443e2918 Podman machine AppleHV pass number 3 315a7887a Makefile: `package` -> `rpm` 85d936133 network create: document --internal better e43127e0b pkg/specgen: fix support for --rootfs on FreeBSD 8c16322a8 machine start: qemu: wait for SSH readiness 12dc546fc [CI:BUILD] Packit: downstream task action fix 2b2c4453f Fix container errors not being sent via pod removal API 6ec261e7a Add missing return after utils.InternalServerError() d1950869a Update cmd/podman/login.go cce8501a5 [CI:DOCS] Reformat and reorder table with --userns options d497eb369 Add secret support to podman login 2a9b9bb53 netavark: macvlan networks keep custom nameservers c6b5b9a02 remote: fix podman-remote play kube --userns 441af003a fix(deps): update container-device-interface to v0.6.0 656ad760f go mod: no longer use 1.18 aeef403cd fix(deps): update module github.com/containers/libhvee to v0.3.0 6fd4ae6d2 chore(deps): update module github.com/gin-gonic/gin to v1.9.1 [security] 0dcfe6e06 Run codespell on code 3ad55f48b system service: unset listen fds on tcp f1c68b79e add hostname to network alias b6ec2127b libpod: set cid network alias in setupContainer() 4e96686e9 AppleHV enablement pass #2 72a1857e4 e2e: Fetch the correct user name 7b54fd84e Add `--no-trunc` flag to maintain original annotation length 600de05e3 Fix TCP probes when the optional host field is not given ac3a115c3 Add support for using port names in Kubernetes health probes 4494cefbc Fix: cgroup is not set: internal libpod error after os reboot 932fae402 Allow setting volume and network names in Quadlet 427b959a1 pasta tests: automatically determine test parameters 97fd03ccd test/e2e: wait for socket a69194b02 manifest inspect: support authentication 70428baef api: fix slow version endpoint f8213a6d5 libpod: don't make a broken symlink for /etc/mtab on FreeBSD 499b8d13c CI: remove build without cgo task 42ea0bf9c libpod: use io.Writer vs io.WriteCloser for attach streams 597ebeb60 top: do not depend on ps(1) in container 3f8ee70d0 make --syslog errors non fatal dbec2b5aa api: fix doc for default ps_args 1b7eb44d3 Fixes typo in the path where quadlet looks for files efefd8cf5 Add --replace flag to podman secret create eec438222 [CI:DOCS] uidmap man pages: fix corrupt italics 8d24e2838 [skip-ci] Update github/issue-labeler action to v3.2 f9077689e [CI:DOCS] podman-system-service.1.md: document systemd usage dd16661b1 fix(deps): update module github.com/docker/docker to v24.0.4+incompatible 65136521e fix(deps): update module github.com/docker/docker to v24.0.3+incompatible fa654e985 Use bytes size consistently instead of human size dee94ea69 bugfix: do not try to parse empty ranges 9e4045768 [CI:BUILD] Packit: fix pre-sync action for downstream tasks 531fb21d0 fix(deps): update module golang.org/x/tools to v0.11.0 ab2fa45ad fix(deps): update module golang.org/x/net to v0.12.0 459b1578c fix(deps): update module golang.org/x/term to v0.10.0 99f93d55c e2e: fix two toolbox flakes fc5aa9c9c test/e2e: use GinkgoT().TempDir() over MkdirTemp() ea8992cb4 test/e2e: use random ImageCacheDir 17a06d343 test/e2e: remove RHEL7 workaround bc22aefce test/e2e: remove unnecessary code in SynchronizedAfterSuite ff7790038 test/e2e: do not use /tmp for podman commands db7cb1dbf test/tools: vendor ginkgo v2.11 c20612bab test/e2e: write timings directly to file a0b765552 machine start: qemu: adjust backoffs d874790bc auto update: fix usage of --authfile ba1355b23 system tests: refactor registry code 94b321337 fix(deps): update module golang.org/x/text to v0.11.0 644f7cd9b pkg/specgen: properly identify image OS on FreeBSD a3a62275c libpod: use new libcontainer BlockIO constructors 2d68c3add [CI:BUILD] Minor: Don't confuse osx-debugging 5aabc5088 [CI:DOCS] Better document the default value of --userns e4644c3cb Cirrus: build FreeBSD binaries in a VM 92fc0f481 Makefile: add support for building freebsd release tarballs 4a5396b46 [CI:DOCS] uidmap man pages: fix corrupt tables 5a8e092a2 fix(deps): update github.com/crc-org/vfkit digest to c9a4b08 d0359fcca fix(deps): update module github.com/containers/buildah to v1.31.0 300eb36b4 fix(deps): update module github.com/opencontainers/image-spec to v1.1.0-rc4 94e59bd2f Use /proc/self/gid_map as intended, not uid_map a16488f89 fix(command): ignore `--format` in `podman search --list-tags` 9fb2f8e10 podman machine start: fix ready service 8408ad498 Makefile: don't rely on the non-standard -r flag for ln 39624473b pasta: Create /etc/hosts entries for pods using pasta networking fe0de8b9f fix(deps): update module github.com/containers/libhvee to v0.2.0 2393fe453 pasta tests: add sanity check for test name vs function 4da3e47b6 pasta tests: cleanup + 1 new test 43b9426fc cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD e3f2a97d1 cmd/podman/system: add API server support on FreeBSD 0d7da5c0b [CI:DOCS] Document support of pod security context IDs f64a1a1cc rootless: use default_rootless_network_cmd config e4efd709d Revert^3 "pasta: Use two connections instead of three in TCP range forward tests" 17cd5aecb pasta: Workaround occasional socat failures in CI 13c7d05cc pasta: Remove some leftover code from pasta bats tests bc58dae36 Bump c/image to v5.26.0, c/common 0.54.0 2cb549339 fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.3 bf60bb073 Display secret to user in inpspect 448e01566 [CI:BUILD] RPM: Fix koji and ELN issues 8fb719a9e e2e: systemd test: major fixes 865d77e94 pkg/specgen: add support for 'podman run --init' on FreeBSD 74b4615aa Bump version after v4.6 branch cut b6e636cbe Remove 'inspecting object' from inspect errors fe8355be7 pasta: Fix pasta tests to work on hosts with multiple interfaces d15cca024 [CI:DOCS] fix command incorrect in windows bcb89fc8b Fix readonly=false failure 609c47ae6 pkg/specgen: Add support for Linux emulation on FreeBSD cf9ebcddf Fix up podmansh man page 05eb3e6f1 Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs f5cc0487e Fixes for vendoring Buildah 0f4c86e26 vendor in latest buildah 6eaf8a271 tests: fix "Storing signatures" check b80fd54a5 update c/image and c/storage to latest eeb7aeb49 Kube quadlets can support autoupdate as well as containers 2160a114c debug tail 800 lines flake dd81f7ac6 Pass in correct cwd value for hooks exe 227c07aeb specgen: honor --device-cgroup-rule with a new user namespace 0220f3338 specgen, rootless: raise error with --device-cgroup-rule db37d66cd make image listing more resilient 17a18b16c Update module google.golang.org/protobuf to v1.31.0 bc5269f18 Trim whitespace from unit files while parsing 516034215 Re-organize hypervisor implementations ba3da15e0 play.go: remove volumes on down -f Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> 2023-09-28T01:25:29+00:00 Bruce Ashfield bruce.ashfield@gmail.com 2023-09-28T01:25:29+00:00 urn:sha1:77fc0a2613e6af1b9a3deed8cf33a130de78ac59 Some of the (current) rdepends for skopeo are not compatible with mips. To make this restriction more obvious, we also mark skopeo itself incompatible with mips. Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> 2023-08-24T01:38:21+00:00 Bruce Ashfield bruce.ashfield@gmail.com 2023-08-12T03:24:38+00:00 urn:sha1:08435d20b1259d2ef0c98638116fb881045ff512 bitbake has been enhanced such that SRCPV is no longer needed in PV to handle updating git hashes and task signatures. We can simplify our PV by dropping SRCPV Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> 2023-08-24T01:38:21+00:00 Bruce Ashfield bruce.ashfield@gmail.com 2023-08-12T03:17:41+00:00 urn:sha1:a03c4f584567d9733e601d16af80299ec48b492d Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> 2023-08-24T01:38:21+00:00 Bruce Ashfield bruce.ashfield@gmail.com 2023-08-03T16:50:21+00:00 urn:sha1:ba6e5e9db13fceb78775b6fcab3c1ebdc5b1a2d9 Bumping libpod to version v4.6.0-14-g2215847e6, which comprises the following commits: f05f00717 do not redefine gobuild for eln 45fd917fa [CI:BUILD] RPM: define gobuild macro for rhel/centos stream 8ee1f1197 [v4.6] [CI:BUILD] RPM: separate out gvproxy for copr and fedora >= 38 5831bd68b System tests: add test tags 954177e7e API: kill: return 409 on invalid state e4e983e7a Mention TimeoutStartSec in quadlet man page d68ee576e If quadlets have same name, only use first 94431182b Bump to v4.6.1-dev 38e6fab96 Bump to v4.6.0 8aec5997e Update release notes for v4.6.0 09b1da382 Ensure that we appropriately warn that TCP is insecure 0115a4800 CI: remove build without cgo task 598ebe8a1 libpod: use io.Writer vs io.WriteCloser for attach streams 574b78291 top: do not depend on ps(1) in container 255111269 api: fix doc for default ps_args 34274ce15 Add more tests for liveness probes with default hostname & named ports 48deafc64 Fix TCP probes when the optional host field is not given 6817e0ae3 Add support for using port names in Kubernetes health probes 5445bd6f0 [CI:DOCS] fix command incorrect in windows 50195c244 [CI:DOCS] Reformat and reorder table with --userns options 924bc7055 [CI:DOCS] Better document the default value of --userns e4c38e719 Add missing return after utils.InternalServerError() 7a4bd4c95 Fix markdown in docs for podman-network-create 7cbe41212 Fix multiple filter options logic for `podman volume ls ` 5ea019419 Should be checking tmpfs versus type not source b4859d283 Use constants for mount types 39b7ac99d Fix `podman container prune` docs for `--filter` 7ba306ec6 docs: podman-build --network add slirp and pasta c810420c8 docs: podman run --network mention comma separted names 2c970dd01 network create: document --internal better 5106b7a38 pkg/specgen: fix support for --rootfs on FreeBSD 41f809e3e systests: quadlet: fixes for RHEL8 061841c0c Fix windows installer 8f05405db Podmansh: Better error, increase timeout to 30s 2b683a400 Emergency gating-test fixes for RHEL8 d0dee61e7 Packit: remove pre-sync action 70e30a2be [CI:DOCS] Update RELEASE_NOTES.md with Makefile change b8ef289e3 Bump to v4.6.0-dev bfe2e0fca Bump to v4.6.0-rc2 145748d1f Makefile: `package` -> `rpm` be21bc082 Update release notes 8fffcf4d6 system tests: refactor registry code 624bb8350 machine start: qemu: wait for SSH readiness 732a02c57 machine start: qemu: adjust backoffs afe48ba36 auto update: fix usage of --authfile 24439cdd2 [CI:BUILD] Packit: downstream task action fix 7b3d47c3b Fix container errors not being sent via pod removal API 9d0470f12 netavark: macvlan networks keep custom nameservers 5583358f6 add hostname to network alias 2aea98cab libpod: set cid network alias in setupContainer() d0b0c6285 Fix: cgroup is not set: internal libpod error after os reboot 258135221 test/e2e: wait for socket a3a62854f api: fix slow version endpoint 28e92b9de manifest inspect: support authentication e354514dc libpod: don't make a broken symlink for /etc/mtab on FreeBSD c81a00101 make --syslog errors non fatal edc51d9ff Fixes typo in the path where quadlet looks for files a673bb23e [CI:DOCS] uidmap man pages: fix corrupt italics dd7dbb826 [CI:DOCS] podman-system-service.1.md: document systemd usage a312553fc Use bytes size consistently instead of human size 2ef2a671e bugfix: do not try to parse empty ranges 662cca7cc pkg/specgen: properly identify image OS on FreeBSD cf5c4c9ee [CI:DOCS] Document support of pod security context IDs c8cfcc253 pkg/specgen: add support for 'podman run --init' on FreeBSD fc8f229bd Remove 'inspecting object' from inspect errors ee6329374 Fix readonly=false failure a3598ff61 pkg/specgen: Add support for Linux emulation on FreeBSD e30197e6f Fix up podmansh man page 47e6ce19c Pass in correct cwd value for hooks exe f654f7cc7 specgen: honor --device-cgroup-rule with a new user namespace fcf673d5d specgen, rootless: raise error with --device-cgroup-rule f70189991 make image listing more resilient 62fc35c07 Trim whitespace from unit files while parsing ed5618759 play.go: remove volumes on down -f 04897ee64 Vendor c/common v0.55.2 ff71df0e8 system service: unset listen fds on tcp 6960a8183 [CI:DOCS] [Release Notes]: add static routes e4cf2afbc [CI:DOCS] tag podmansh as tech preview in RELEASE_NOTES.md c422072b6 [CI:DOCS] uidmap man pages: fix corrupt tables Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> 2023-08-01T18:42:25+00:00 Bruce Ashfield bruce.ashfield@gmail.com 2023-07-08T03:00:26+00:00 urn:sha1:2a4b72b3a29f6e1df32537b2b7e6d26e3baa8834 Bumping libpod to version v4.6.0-rc1-6-g932b8a997, which comprises the following commits: c422072b6 [CI:DOCS] uidmap man pages: fix corrupt tables 7680e5013 libpod: use new libcontainer BlockIO constructors 829b3e9b3 Bump to v4.6.0-dev 4d59a0f5c Bump to v4.6.0-rc1 e4a7923ca Bump to v4.6.1-dev c756b24f4 Bump to v4.6.0 2e53a5083 Release notes for v4.6.0 727362bde Update Release Notes for v4.5.1 8f2b73b03 rootless: use default_rootless_network_cmd config 3bd4c6a10 tests: fix "Storing signatures" check d5e8cc1d1 Fixes for vendoring Buildah 2203f2aa9 Make Podman/Buildah use same DecryptConfig/EncryptConfig funcs a306eb5f6 Do not use deprecated hook functions from c/common bf36f1139 Bump c/storage to v1.48.0, c/image to v5.26.1, c/common to v0.55.1, buildah to v1.31.0 a64016e17 pasta: Remove some leftover code from pasta bats tests 6feb179f4 pasta: Fix pasta tests to work on hosts with multiple interfaces 9cc19b055 fix(command): ignore `--format` in `podman search --list-tags` 714c3fe72 Use /proc/self/gid_map as intended, not uid_map d29e33650 podman machine start: fix ready service 1a1602b72 Makefile: don't rely on the non-standard -r flag for ln db91ce788 cmd/podman, pkg/domain/infra: sockets should live in /var/run on FreeBSD 82a4b0816 cmd/podman/system: add API server support on FreeBSD 2f25372de pasta: Create /etc/hosts entries for pods using pasta networking 9555446d3 RPM: Fix koji and ELN issues 0749d685a Cirrus: Update operating branch dde6bcbca system tests: add and use _prefetch 0ee19f08c pkg/api: BufferedResponseWriter flush correctly d0505d6ba pkg/api: top return error to client 1398cbce8 container wait: support health states b680daa2d [CI:DOCS] Fix example on PublishPort 811867249 container wait API: use string slice instead of state slice 64153ace0 podman wait: update man page a699ed0eb StopContainer(): ignore one more conmon warning bd69b151f run,create: modify `--env-merge` behavior for non-existent vars 614c962c2 use libnetwork/slirp4netns from c/common 180cf0cf1 update c/common to latest d0af5df89 e2e: use parallel-safe /dev subdirectories aeff58e0b [CI:BUILD] Help Renovate manage the golangci-lint version 00292ae1c systests: test instrumentation 63dfe842b compat API create/pull: fix error handling d54541894 compat API push: fix error handling 26721b0a0 GetSafeIPAddress(): discourage its use 810c97bd8 libpod: write /etc/{hosts,resolv.conf} once 13db83a00 e2e: fix one of the many log flakes bb932cc84 cmd, push: expose --compression-level 459248337 vendor: bump containers/common f4c514bff compat API container create: handle platform parameter 04a1cdfa9 refactor(machine): remove hard code ae6e39076 vendor in latests containers/common 81e63227e fix(machine): throw `connect: connection refused` after set proxy ec0924c6d [CI:BUILD] Packit: cleanups 65e5d2773 Add console mode to podman machine ddcefc9b9 e2e: kube test: specify expected exit code 574e00d32 e2e --authfile test: fix test condition f8f337501 chore(deps): update dependency setuptools to v68 84e42877a make lint: re-enable revive aa453c4f1 make lint: re-enable ginkgolinter 2efa7c3fa make lint: enable rowserrcheck f07aa1bfd make lint: enable wastedassign 60a5a5947 make lint: enable mirror a35da3ad8 bump golangci-lint to v1.53.3 47e0557d5 auto update: restart instead of stop+start acb5f97f9 cmd/podman/root.go: fix help document issue of the image store e5399aaf3 vendor: bump c/storage to v1.46.2-0.20230616083707-cc0d208e5e1c 3829fbd35 podman: add support for splitting imagestore e29274853 network create --ip-range allow for custom range c2360800e fix(ssh): start machine failed to start with exit status 255 ed24f0b2c remote wait: fix "removed" condition 8d036906a [CI:DOCS] Fix service_destinations description in podman man page bfe61af6d quadlet should exit non zero on failures 91fc435cb fix(deps): update module golang.org/x/tools to v0.10.0 ef42f54ac e2e: GetSafeIPAddress() replaces GetRandomIPAddress 5ffbfd937 pasta: use code from c/common 479677cb6 Add support for setting autoupdate in quadlet 3efaffae4 New command: podmansh 67674b3a6 vendor: update c/common to latest bdc2e8165 Add quadlet container support for Mask,Umask options 13c2aca21 libpod: make conmon always log to syslog 0ecc0d9e1 Document how to get secret mounts working on RHEL8 c28a43efd Verify podman pull dup image only prints id once d464e1d4f Vendor in latests containers/common 741ad0b4f Apply suggestions from code review f31466e74 Revert "rootlessport: exclude storage drivers via build tags" 8a90765b9 filters: use new FilterID function from c/common de494eb05 logformatter: ignore 'TOP-LEVEL' headings 63f5116ad test/e2e: fix network ID test 8c48f97c9 update c/{common,image,storage} to latest 354b8e20b [CI:DOCS] clarify supported transports in manifest push aa7a4219e [CI:DOCS] podman-push: rm confusion on supported transports c0ab29313 container wait: indicate timeout in error af7555e0d network-create: document new bclim option 7d2f722ef fix(deps): update module golang.org/x/text to v0.10.0 6f821634a libpod: Podman info output more network information d0e2428fb fix(deps): update module golang.org/x/term to v0.9.0 ac0ba2c2c quadlet: adjust container unit documentation 837b47244 e2e: GetRandomIPAddress(): parallelize 676c4d4e8 Makefile: add support for 'make help' on FreeBSD ab502fc5c criu: return error when checking for min version 16092930c Update docs/source/markdown/podman-systemd.unit.5.md faa2689dc 250-systemd.bats: remove outdated comment 0714321de github: add issue type as link to podman-desktop a66bab340 Add WorkingDir support to quadlet ebf747474 rootlessport: exclude storage drivers via build tags 8bf168cc1 Add ability to set static routes 68183b07d test/upgrade: correctly share mounts between host and container 444f19cb2 Update common, image, and storage deps ec6b7dbd9 Fix system service manpage name in API Documentation d734fcbff style(specgen): omit nil check 53834ef0d fix(specgen): index out of range when unmask=[] 71cae3159 Makefile to force a shell when running command 02432fc69 cirrus,ci: default to overlay for debian env b37f74b73 Quadlet: Add support for --sysctl flag 44ec044c4 chore(deps): update dependency requests-mock to ~=1.11.0 2ebc9004f Ignore spurious warnings when killing containers 7832879bf Makefile: don't hard-code the path for bash de4b383ef fix(deps): update module github.com/burntsushi/toml to v1.3.2 a7271f9dd GHA: Fix bad job-names & links in monitoring emails 6a696cb8f podman-registry: simpler, safer invocations f1ecdca4b Ensure our mutexes handle recursive locking properly 310082444 Fix an expected error message from pod removal a750cd987 Fix a race removing multiple containers in the same pod 0e47465e4 Discard errors when a pod is already removed 398e48a24 Change Inherit to use a pointer to a container b65ba90df e2e: add ginkgo decorators to address flakes 992093ae9 filters: better handling of id= 7bdbbd0ce fix(deps): update module github.com/onsi/gomega to v1.27.8 c7a8d29f1 refactor: improve get ssh path duplicate code 137c8ef4d logformatter: better recognition of ginkgo test names 944673c88 Address review feedback and add manpage notes 3b79f241b Add support for SecurityLabelNested flag in quadlet a1c1d8d0a fix(deps): update module github.com/burntsushi/toml to v1.3.1 4fda7936c `system locks` now reports held locks 92309d917 fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17 0948c078c Add a new hidden command, podman system locks 1013696ad Add number of free locks to `podman info` 3b39eb133 Include lock number in pod/container/volume inspect 1ce53677a fix ignition config creation 4584350f6 Makefile binaries target adopted for Mac and Win e93b1f997 fix(deps): update github.com/crc-org/vfkit digest to 3d57f09 c51c6675e logformatter: proper status color for failed tests cf9bc25bb pasta: Test handling of unknown protocols b2c000670 pasta: Correct handling of unknown protocols 6611735ae Quadlet - add support for Pull key in .container 5b629e9c4 fix(deps): update module github.com/sirupsen/logrus to v1.9.3 d68121a60 Add default ulimit test for gen kube 81d64547f feat: add insecure registry troubleshooting solution 1768bf150 fix(deps): update module golang.org/x/tools to v0.9.3 7e550f78e fix(deps): update module github.com/coreos/stream-metadata-go to v0.4.2 28934897e e2e: GetPort(): safer allocation of random ports 2c9f18182 The removeContainer function now accepts a struct 4e6efbbbb Revert "test/e2e: fix "podman run ipcns ipcmk container test"" b75ff3a8f Add a test for removing dependencies with rm -fa bafb3d6cc Revert "ginkgo-v2 cleanup workaround for #18180" ef1a22cde Fix a deadlock when removing pods 8cb5d39d4 Pods now return what containers were removed with them bc1a31ce6 Make RemoveContainer return containers and pods removed e8d745627 Add an API for removing a container and dependencies 543b80949 systests: fixes for coping with extra systemd image 34c258b41 libpod: fix timezone handling 22424eb5d fix(deps): update github.com/godbus/dbus/v5 digest to 7623695 7987d2ee0 fix(deps): update module golang.org/x/tools to v0.9.2 4173f942f test/system: quadlet use correct systemd restart policy 0372bf4bd systests: minimize race-condition window 1a34e1f85 systests: fix improper backgrounding of run_podman f09772889 set max ulimits for rootless on each start 5c7d50f08 Fix: display online_cpus in compat REST API bd62119f3 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.6 72d4cede2 systests: fix race in quadlet tests f48fa1113 fix(deps): update module github.com/burntsushi/toml to v1.3.0 88e78456d e2e: make BuildImage parallel-safe 370e1132c completion: fix panic in simplePathJoinUnix() 46456f5f1 Update module github.com/stretchr/testify to v1.8.4 585d715bb authfile.md: add default path of file for Windows/macOS. 01012a080 Update module github.com/rootless-containers/rootlesskit to v1.1.1 e3240c2fb hack: fix typo in hack/podman-registry de92db0c8 man pages and command help: clean up descriptions e6bfc81a8 RPM: bump gvisor-tap-vsock subpackage and fix packit scripts dfba6ddd4 Man pages: fix broken tables 5b2d963c4 test/e2e: add regression testing for comma-containing labels 047a4bc83 fix: volume create filters 0be9887af fix: move filter flags from StringSliceVar to StringArrayVar 6bc52c9c5 pkg/rootless: correctly handle proxy signals on reexec 85b4c896b [CI:BUILD] Packit: set propose-downstream action type to pre-sync 8f94a4775 [CI:DOCS] fix Quadlet man page rendering 29f7c494e Quadlet: kube: use ExecStopPost 6487d9c11 Quadlet: kube: add ExitCodePropagation field 08b0d93ea kube play: exit-code propagation 6dbc13833 prune exit codes only when container doesn't exist 977b3cdbf podman: Add pasta to podman info 373919ca0 Revert "test/system/255-auto-update.bats: add debug logs" 901900530 Quadlet - add support for PodmanArgs to all groups 6003dca9c [CI:BUILD] Packit: add jobs for downstream Fedora package builds fb8a12490 In a concurrent removal test, don't remove concurrently with builds 032d4a95f Consolidate error handling in Runtime.removeContainer f556e58bb Consolidate error handling in Container.cleanupStorage 4969c552e Fix reporting errors on container unmount 94c65a659 TEMPORARY(?) instrumentation for unlinkat-ebusy d623670e1 pkginstaller: bump Qemu to version 8.0.0 4108b3711 Support podman --remote when Containerfile is not in context directory 9969374b6 chore(deps): update dependency requests to ~=2.31.0 5f29c7bf9 fix: podman event --filter volume=vol-name should compare the event name with volume name 6b48e9962 fix(deps): update module github.com/docker/docker to v24 1b9272a06 wait: look for exit code in stopped state 7d831d555 network create/update: allow dns servers comma separated 685c73618 source code comments and docs: fix typos, language, Markdown layout fe41077d4 Increase download progress to 80ch 8fbcf8bce chore(deps): update dependency setuptools to ~=67.8.0 29749362a podman: Added find slirp4netns binary file from helper_binaries_dir [NO NEW TESTS NEEDED] 2253f709b fix(deps): update module github.com/sirupsen/logrus to v1.9.2 7c53a463b stats: get mem limit from the cgroup 8e2e7a440 quadlet tests: enable device.volume test bb3f611ff quadlet tests: remove unused socketactivated.container 18c3de596 fix(deps): update module github.com/stretchr/testify to v1.8.3 5d522431c Correct markdown in docs 76595c7b9 fix(deps): update module github.com/onsi/gomega to v1.27.7 a99ad3b36 [CI:DOCS] Improve security in mysql examples 99cedae31 Cirrus: Record the buildah version for reference a54d4d7e1 test/e2e: do not call setenforce 458f2e8ed Fix discombobulated kubernetes support table 192ad70e9 run: ignore PODMAN_USERNS with --pod 5ff6fc559 Add --configmap to podman-remote kube play ad8d0e57d compat: accept tag in /images/create?fromSrc bf0cea76c fix HTMLSpan warnings a576fa3f1 generate systemd: error on init containers 32c2cea0f Remove future tense from man pages 5b148a0a6 compat,build: pull must accept string d1dcb0846 Cirrus: Add support for `[CI:NEXT]` eb4f0bc17 Cirrus: Remove support for `[CI:COPR]` magic 3360214a0 system tests: add precision timestamps 8b4987266 Makefile: add ginkgo FOCUS/FOCUS_FILE options 4bed2c285 e2e: refactor and document serialization ce07860a1 machine: fix default connection URL to use 127.0.0.1 a485ba505 e2e: serialize gpg tests b9aaafbe1 Document podman-machine-default behavior 7580b8ae4 e2e: fix more test races (missing "wait") 6d58f5bb0 fix(deps): update module github.com/openshift/imagebuilder to v1.2.5 520979ba2 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.5 ae5cbf37c Fix documentation of `--network-cmd-path` CLI option 71853319f Skip rhel-release branch unnecessary CI tasks ab29ff2f6 test/e2e: dedup Before/AfterEach nodes d01ae436e remote-save: fix permissions and dir formats 5a176f09c Set machine docker.sock according to rootful flag 13f787842 Fix handling of .containenv on tmpfs 2c0f40482 Do not include image annotations when building spec dd5d22cb3 build(deps): bump github.com/docker/distribution 26f1e95ab Kube Play - Support multi-doc YAML files for configmap argument c33ba70f9 system tests: instrument, to try to catch unlinkat-ebusy 74a5b92b3 test: check restart policy of init containers 3aa6a792e Update sigstore/rekor after https://github.com/sigstore/rekor/pull/1469 04707f62d issue template: mention `su` 14001ad48 e2e: logs test: fix flakes 6b329d8c9 fix(deps): update module github.com/containernetworking/plugins to v1.3.0 ff37615bf e2e: stop podman.service test: wait for server cb8e19677 logformatter: handle podman-machine test logs 58fd87959 fix(deps): update module golang.org/x/tools to v0.9.1 2d8929d95 [CI:DOCS] Disable Dependabot in favor of Renovate 01e20818c Ensure the consistent setting of the HOME env variable on container start 8aaa13acc Quadlet system tests - fix socket notification 1fb3cdf8a sqlite: disable WAL mode d24bec0d0 system tests: timeoutize quadlet, systemd 3d6894426 test: update README for integration tests c400cc7ea libpod/Container.rootFsSize(): use recorded image sizes b97be3406 quadlet: support `HostName` 9dc107e74 e2e: fix race in a play-kube test bdb3ed795 Fix preference of user quadlets directories 40b21fa7d fix(deps): update module golang.org/x/tools to v0.9.0 661a238a9 fix(deps): update module golang.org/x/net to v0.10.0 332b47fef Check on client side for Containerfile, if none specified 18cd174c9 build(deps): bump github.com/docker/docker 9ec630f30 Buildah treadmill: several fixes 11d92ea37 fix(deps): update github.com/containers/common digest to 3e93a76 1bf057e8c chore(deps): update dependency docker to ~=6.1.0 27891a664 Update docs/source/markdown/podman-systemd.unit.5.md 505e02e04 fix(deps): update github.com/containers/common digest to bc15b04 53220717e fix: initContainer restart policy overridden by pod c27cda7c9 fix(deps): update module golang.org/x/sync to v0.2.0 773b45704 chore(deps): update dependency requests to ~=2.30.0 0c070ebfb ginkgo json output: only in CI, not on laptop runs 73d3487cc Allow user quadlets to be stored under /etc 334adac74 fix(deps): update github.com/containers/common digest to ea87b34 95557a532 libpod: do not Cleanup() more than once df9344ac4 compat container create: match duplicate mounts correctly 42c822720 Update podman-completion.1.md 3d56e4f3a fix(deps): update github.com/containers/buildah digest to e925b58 75d92f41d Run generate.CompleteSpec() for initContainers as well d25356c30 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.4 df8cc7af3 remote: return better connect error 61985a610 Add missing man page links for Docker man pages f877d7dcd Replace egrep/fgrep with grep -E/-F 19aabf440 remote: exec inspect update exec session status 305bad184 fix(deps): update github.com/digitalocean/go-qemu digest to f035778 999c620d5 fix(deps): update github.com/godbus/dbus/v5 digest to 6cc540d 38f993543 fix(deps): update github.com/containers/buildah digest to f353690 1b2b0d031 fix(deps): update module github.com/onsi/ginkgo/v2 to v2.9.3 dc7515dc3 MVP for Podman Machine with AppleHV 54fd0d752 e2e tests: try writing & preserving ginkgo json artifacts 1c5ab9e7b vendor: bump buildah to v1.30.1-0.20230501124043-3908816d5310 e1e03a0e3 bindings, build: don't pass invalid platform in case of none ae5305134 Revert "logformatter: anchors: link to test summary, not name" fbe62f329 More cleanup: volumes: do not export to stdout 3050a6437 e2e test cleanup fa1ba17bc Update kube gen & play to use pod restart policy db4ad54f9 Add {{.Restarts}} to podman pod ps 0fef113a4 Add {{.Restarts}} to podman ps edbeee523 Add --restart flag to pod create 9e9bcec9e history: correctly set tags 073cd4bb4 fix(deps): update module github.com/moby/term to v0.5.0 3858a833b Makefile: do not run machine test in parallel 5af433923 pkg/machine/e2e: switch to GinkgoWriter 1720042d0 api: fix parsing filters c4b9f4b34 ginkgo-v2 cleanup workaround for #18180 5eb99a0ac test/e2e: fix custom timing reporting 1bff0108f logformatter: anchors: link to test summary, not name 914ff01f9 WIP: logformatter: handle ginkgo v2 logs b3424f370 test/e2e: unshare --rootless-netns cleanup slirp4netns 054154c77 test/e2e: run system reset test serial c5922cc6f test/e2e: fix CleanupVolume/Secrets() bc1ed07b5 ginkgo v2: fix new Skip() behavior cd46e7279 test/e2e: fix pause tests to unpause before cleanup() 2ce4e935b ginkgo v2: drop localbenchmarks fb7a96638 test/e2e: switch to GinkgoWriter cc19091e9 test/e2e: unset CONTAINERS_CONF before Cleanup() 8cc7a3618 ginkgo: run on all cores 9c1f713c7 test/e2e: fix Cleanup() 9bd833bcf test/e2e: fix "podman run ipcns ipcmk container test" 629a6a6e4 test/e2e: actually check for cleanup errors b9ba85044 Lower e2e timeout to not waste time when it hangs fbb7c980a test/e2e: containers.conf tests add missing Wait() c564d9d7a ginkgo v2: remove CurrentGinkgoTestDescription() 666e31447 ginkgo v2: remove deprecated flags 445815036 update to ginkgo v2 502654580 test/e2e: do not remove CNI directory 7b25f362e e2e: login_logout: use unique authfile for each test d06480d99 Fix clashing subuid 24be46a51 [CI:DOCS] troubleshooting: fix subuid example bab4217cd manifest, push: use source as destination if not specified 202701e65 Update github.com/moby/term digest to 0564e01 e8f34e457 Add name-generation test b5ef9555a Implement machine provider selection 70870895b libpod: improve errors management in cleanupStorage 5592dc12f libpod: report unmount idmapped rootfs errors 2932208c2 test: do not wait 10 seconds before killing myyaml 891bc117e podman: simplify code with a switch bac57409f test: fix typo 5fefb54d2 build(deps): bump github.com/docker/docker 0a92b399d swagger: fix Info name conflict 20c42489e Nightly dependency treadmill: remove 33fa54580 Update short description for disconnect cmd aca993632 windows: podman save allow the use of stdout 512b39475 Update c/common and avoid setting umask 7ff2eaf96 Cirrus: Update CI VM Image to F38/37 0e1ddd3df Cirrus: Run code validation on rawhide 221e3023f Fix rand.Seed() deprecation in golang 1.20 edaf3b4d5 Add sha256: to images history id for docker compatibility d51911f7b Support systemd optional prefix '-' for devices. a0c7bb26a Fix a copy/paste error in an error message ba4586375 chore(deps): update dependency requests to ~=2.29.0 d905e412e Fix simple typo in podman-network-create.md a027bf102 e2e cleanup: push with auth: add error checks eeb210bc5 e2e: remove "-it" from podman run & exec 64959b744 pkg/machine: rework RemoveConnection() 2296e71e3 machine: qemu only remove connection after confirmation c8e423b55 Add file swith for pre-exec 6aaf6a284 system reset: show graphRoot/runRoot before removal e95e9be76 fix manifest annotate help bdf367958 Netavark userns test: give aardvark time to come up bbe9d61c4 sqlite: move first read into a transaction f3c3ef72d Recover from failed podman machine start d222a392c rootless: support joining contianers that use host ns 0e955bec7 auto-update: return errors when checking for updates fc8bd4521 [skip-ci] Update dawidd6/action-send-mail action to v3.7.2 ed6b19fef fix(deps): update github.com/containers/common digest to 46c4463 230ddbe0c Add user mode networking feature to Windows 3216110de system/reset.go: help: fix typo ae5ed6d85 e2e create same-IP: try to fix flake faeed14f6 system tests: safer container-stop signaling 6014f26c4 Revert "Resolve symlink path for qemu directory if possible" c5a928c5b ps: --format {{.State}} match docker output b4eecd908 test/system/260-sdnotify.bats: fix test flake 1361c6a33 [CI:DOCS] Quadlet: clarify overriding user/system services fb3b92b96 Eliminate transient container deps from wslkerninst dd217d8e0 Wording d16c880fb fix(deps): update github.com/containers/common digest to 5547996 70bd096e4 cmd/podman/pods: omit superfluous runtime.NumCPU call 1f1525f2e support `--digestfile` for remote push d640461ce e2e: skip journald test if journald is unavailable 5156ab996 Cirrus: Enable testing on Fedora rawhide 8a3265f65 [CI:BUILD] Cirrus: remove copr rpm build task 77f86f48e chore(deps): update dependency setuptools to ~=67.7.0 03a7c6a91 Cirrus: Drop benchmarks artifacts 15664b4b0 test/e2e: correctly reap service process c9d861023 test/e2e: add missing options to remote service 1f45c715d test/e2e: fix incorrect usage of CreateTempDirInTempDir() 601d228ca test/e2e: "podman-remote send correct path to copier" do not leak file 08c651016 test/e2e: fix network create flake due same subnet 525c27fe1 test/e2e: fix SkipIfNotActive() 01d518a97 test/e2e: do not try to use docker as rootless 6e97976ad test/e2e: do not leak "hello" file 750442d09 podman-remote logs: handle server error correctly 3aaa2793d test/e2e: use custom network config v2 00fdfa063 rename ImagePushReport to ImagePushStream 81621ce8a Specify format to buildah before commit 7382494ca Add eBPF snooper that traces the entire fork/exec graph of podman edb64f8a7 libpod: stop containers with --restart=always 0364aef1e test: fix race when listing cgroups b65ab52d8 compat: Translate `noprune` into ImageRemoveOptions.NoPrune 346483717 [CI:DOCS] Update RELEASE_PROCESS.md 8019dc9e6 hyperv: add podman socket mapping a089f1b5c e2e networking test: better way to get host IP bce38c1af Updated system test to be easier to read 5f5bea0d1 bindings tests: bail out early on image errors f2cec7348 libpod: fix TestPostDeleteHooks do not depend on version 8125bab9b chore(deps): update dependency setuptools to v67 a00ed20e0 fix(deps): update module github.com/containers/libhvee to v0.0.5 da83364eb e2e: quadlet uses PODMAN env for podman binary path 6e0cf9344 Fixes format inconsistencies with docker for certain history fields acb24f164 Makefile: do not prefix /etc 7e4cd22ac libpod: configureNetNS() tear down on errors 4f93a6eee libpod: rootlessNetNs.Cleanup() fix error message 4b8230119 HyperV: wait on stop 3cdaf85d6 build(deps): bump github.com/docker/docker 459f751ae Makefile: include `release-artifacts` target 3222545ad Enabled network over vsock aec7ce4a1 fix(deps): update module github.com/microsoft/go-winio to v0.6.1 64b26df60 fix(deps): update module github.com/opencontainers/runtime-spec to v1.1.0-rc.2 41d516412 fix remote start --filter 1cac53506 Update API reference to include v4.5 a0204f1dd Add missing security options to /info response de5fa9ce9 Add mention of redir to doc `rootless.md` 08f137aec fix(deps): update module github.com/vbauerster/mpb/v8 to v8.4.0 8e7f98ae6 docs(readme): add status badges and remove hardcoded release info e9356ba20 Don't use bytes.NewBuffer to read data f488d9890 Add support for HVSOCK on hyperv e7a323635 docs: update network tutorial with netavark DHCP support 32344952a bump main to v4.6.0-dev 54ba17f69 Remove disused test/install 1fa4e45a9 Return title fields as a list be148665c [CI:BUILD] Packit: Initial Enablement 4aced7e3e Quadlet - do not set log-driver by default 51b582d0e system tests: address COPY-hardlink flake 25d4ecf47 chore(deps): update registry.centos.org/centos/centos docker tag to v8 31420112c system tests: fix race in kube-play read-only f544971b7 chore(deps): update dependency docker to v6 f95276bfa CI: enable sqlite system tests d28656403 test: enable test_wait_next_exit f312c8533 Update dependency PyYAML to v6 f67d640b8 test/e2e/systemd_activate_test.go: simplify test 5315c0cc7 Update docker.io/library/golang Docker tag to v1.20 b4cfc727b api: auth: fix nil deref 176c329f9 Update dependency requests-mock to ~=1.10.0 b75ee05d3 Update dependency requests to ~=2.28.2 d38b22d50 fix: Document removing anonymous volumes at create fe22299f9 Use a sane polling interval in WaitContainerDocker bb2deef8e podman: added the --out option for capturing formatted output emitted by various commands 785c63c0f Renovate: Ensure release-note-none label is added 4bc4609d8 Renovate: Update ignore paths 64ea5971a *: migrate image registry to registry.k8s.io 4f5f89cf8 Do not display the resource limits warning message Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> 2023-08-01T18:41:46+00:00 Peter Marko peter.marko@siemens.com 2023-07-29T21:24:28+00:00 urn:sha1:07a578d49ca07aa2f09d67afa7581e54878e3c06 NVD shows only redhat links and does not mention fixed-in release se these CVEs will show-up in reports indefinitely. They are already fixed in current version, so ignore them. CVE-2022-2989 * https://github.com/advisories/GHSA-4wjj-jwc9-2x96 * https://github.com/containers/podman/pull/15618 * commit d82a41687e614d9ac8b2d169dee47fe226835e4c Add container GID to additional groups CVE-2023-0778 * https://github.com/advisories/GHSA-qwqv-rqgf-8qh8 * https://github.com/containers/podman/pull/17528 * commit 6ca857feb07a5fdc96fd947afef03916291673d8 volume,container: chroot to source before exporting content Signed-off-by: Peter Marko <peter.marko@siemens.com> 2023-07-25T18:54:20+00:00 Bruce Ashfield bruce.ashfield@gmail.com 2023-06-21T02:20:08+00:00 urn:sha1:f634a540c45a448cad0defb610b8a655b12bf119 Bumping libpod to version v4.5.1-6-gdae7df5a1, which comprises the following commits: 3d7aba056 completion: fix panic in simplePathJoinUnix() 9de891616 RPM: bump gvisor-tap-vsock subpackage and fix packit scripts 5933be9ba Bump to v4.5.2-dev 9eef30051 Release v4.5.1 777ddfc42 [CI:DOCS] Final release notes for v4.5.1 2b045de48 [CI:BUILD] Packit: set propose-downstream action type to pre-sync b1281ae46 Revert "Resolve symlink path for qemu directory if possible" 8b35bbab9 no need for podman-next rpm test on maint branch 6652633ce [CI:BUILD] Packit: add jobs for downstream Fedora package builds 97ec57da5 libpod: configureNetNS() tear down on errors d812087d1 libpod: rootlessNetNs.Cleanup() fix error message 083894a22 network create/update: allow dns servers comma separated 1575b3a7f machine: fix default connection URL to use 127.0.0.1 1e86d0a75 compat: accept tag in /images/create?fromSrc 7d0e4a644 compat container create: match duplicate mounts correctly dc21698d6 machine: qemu only remove connection after confirmation 02b9f4f5d windows: podman save allow the use of stdout 66fb7c9bb remote: exec inspect update exec session status 5b21c38c8 podman-remote logs: handle server error correctly 9558af2c4 libpod: stop containers with --restart=always 0f18a0144 Do not include image annotations when building spec bc2f0115d [v4.5] system tests: fix race in kube-play read-only Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com> 2023-06-07T20:40:21+00:00 Bruce Ashfield bruce.ashfield@gmail.com 2023-05-18T16:42:47+00:00 urn:sha1:86d7836cd429ab2f0bac2f88fa062a6c733aabf6 This version introduces envsubt in the install stage, so we add gettext-native to our build dependencies. Bumping libpod to version v4.5.0-14-gc926b12c5, which comprises the following commits: bc2f0115d [v4.5] system tests: fix race in kube-play read-only 696c2d40d api: fix parsing filters 1fa2eb53b Support systemd optional prefix '-' for devices. 74634a46c *: migrate image registry to registry.k8s.io 0fb11cccd Makefile: include `release-artifacts` target 4d2cf293e [CI:BUILD] Packit: Initial Enablement da927a75c Bump to v4.5.1-dev 75e3c1257 Release v4.5.0 32a6892b6 [CI:DOCS] Final release notes for v4.5.0 5de2a13e0 Quadlet - do not set log-driver by default c5e704c82 Return title fields as a list bf6f58b02 Bump to v4.5.0-dev f3c365887 Bump to v4.5.0-RC2 15c302533 Final release notes for v4.5.0-RC2 af7c25811 test/e2e: remove unnecessary SkipIfNetavark() calls 80652cacf test/e2e: deduplicated network test b526839a4 docs: update podman-network-create.1 ed99a979c network create: add --interface-name 676486a85 test/system/252-quadlet.bats: fix flake 1bf5bdc68 Read kube_generate_type from containers.conf 11ac0d03e Debian setup: workaround for runc /dev/char/10:200 bug 38c217a0b pkg/rootless: use catatonit from /usr/libexec/podman bab95de9a rootless: make sure we only use a single pause process 3b2b1441e Use atomic config writing strategy for podman machine config files 67307603b Add remaining release notes for v4.5.0-RC2 d53871cf1 GHA: Use version instead of SHA for actions 25bc7d161 chore(deps): update dependency containers/automation_images to v20230405 944accffa build: pass env by reference 7edf73dfd test: retrofit error message b624ad757 test/system: expect 12 char for short id 260bc3ec4 vendor: bump containers/(storage, common, buildah, image) c5a0d8646 [skip-ci] Update actions/upload-artifact action to v3 d3cf8ccf8 [skip-ci] Update actions/stale action to v8 21fbd5c1a [skip-ci] Update actions/setup-go action to v4 f3971e412 [skip-ci] Update github/issue-labeler action to v2.6 c4e79fc16 Fix up codespell errors a5dd5c20e Capitalize all uid,gid and id words that are not options in docs 352a41e3a build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools 13135f924 Properly remove the service container during kube down f6a50311c quadlet: add `UserNS` option key 29aac4dfe [CI:DOCS] Release notes for 4.5.0 Part 1 358b46225 "podman pull by digest and list --all" test: untag instead of rmi f417861e0 build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0 43e6bc9d9 Add renovate.json configuration cf6f13704 CI: postbuild step: skip under nightly treadmill db9785ba5 The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case dc9a65e34 test/e2e: use custom network config dir where needed 35165df37 chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml` b858c7e7f update completion scripts for cobra v1.7.0 e4aad8f0f libpod.storageService.CreateContainerStorage(): retrieve ID maps d0ffb8792 Fix invalid pod name and hostname during kube generate 761eca9e7 e2e tests: fix racy flakes 56e7b511e Cirrus: Enable labeling of EC2 VMs 74f9fd8e6 Cirrus: Fix aarch64 clone_script 404 errors ce8a3a0c1 e2e: GinkgoParallelNode() -> ...Process() 45b1099ef build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0 34a5c7f15 build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0 10d2e9fde [CI:DOCS] --creds and registries 9b7fd3936 Copr: fix build deps for /usr/bin/envsubst 80f9f8077 Don't error when removing non-existant env vars ecce01e61 e2e: healthcheck on stopped container: fix flake cb7b8fb31 test/apiv2/80-kube.at e1be7d141 test/apiv2/80-kube.at 1f3ae8a4f system service: do not close Body bb70d60f1 rm `hack/release.sh` 704901d11 build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6 243ca7c28 add `quadlet -version` flag 7eb78f8a7 add version/rawversion package 53b16ccd2 quadlet: use `Flag` suffix for variables 443f8d89c quadlet: implement `Tmpfs` option 91ca15e96 Bump to v4.5.0-dev 3e48017d8 Bump to 4.5.0-rc1 b7175a366 Update release notes from 4.4 branch 2051e54e0 rootless netns: recover from invalid netns 99ace1908 System tests: unverbosify a flake log 68dbddd97 Add support for secret exists 78e7ade0d Fix Win install task failures with large PR bodies 21febcb5c docs: add `starting` to `HealthCheckResults.Status` d7051d745 Add support for cgroup_config from containers.conf 4d56292e7 libpod: mount safely subpaths 4f9019406 Support Deployment generation with kube generate 8b6a7c182 Use secret.items to create volume mounts if present 359f40869 [CI:DOCS] fix typo in --systemd option 266cc7882 rootless: drop preexec hook error message 3c9ce3e52 Edit the docker wrapper to use the install prefix 5643058c8 Update podman-for-windows.md d79519e70 Quadlet: RemapUsers documentation fixes 7f8d5e565 speed up image listing f0cfbbe2c vendor containers/common@e27c30ee9b1b 70abb4ae5 fix volume-plugin-test flake b3e8791f6 Document building Podman remote on Windows hosts c40eaa242 test/e2e: gpg keep stdout/err attached f131eaa74 auto-update: stop+start instead of restart sytemd units b7a8e1285 [CI:DOCS] Improve basic tutorial be7827c7e Update docs/source/markdown/podman-network.1.md c335ff241 Add debug to --wait test 81e5bffc3 fix slirp4netns resolv.conf ip with a userns 11e5c2d0f Quadlet: add support for keep-id with mapping values b5df38c23 Quadlet E2E test - run quadlet as user generator cdb5b3e99 sqlite: do not `Ping()` after connecting da96ff6cc Quadlet - treat paths starting with systemd specifiers as absolute dd8ee49f6 Update docs/source/markdown/podman-kube-play.1.md.in d85c8d7e8 system tests: use CONTAINERS_CONF_OVERRIDE 51d068ecc implement podman machine set for hyperv 46b826a90 [CI:DOCS] Add network subnets info to network man page dd8574022 CI: retry the golangci install 92e0efc5d system tests: fix racey sdnotify test 518eafaa3 hyperv: lookup machine on local filesystem first 4c72fc26b fix os.IsNotExist() CI check 7daab31f1 Ensure that SQLite state handles name-ID collisions 64ba82601 macos pkginstaller: do not fail when podman-mac-helper fails 4f3cbf15c podman-mac-helper: install: do not error if already installed ade46ae6a build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5 e061cb968 Fix a race around SQLite DB config validation c5fc44582 add CONTAINERS_CONF_OVERRIDE 5f86fae71 vendor containers/common@main 6825740fc docs: minor grammar fix in `--volume` description b31d9e15f sqlite: do not use shared cache 9be4a525f test: podman checkpoint/restore the latest container 5185e7e39 stats compat API: return "id" lowercase 5f274e45f Run make codespell 3925cd653 Drop SQLite max connections 0fbc32515 sqlite: set connection attributes on open 9f0e0e833 Fix database locked errors with SQLite cf5df5b80 quadlet tests: skip on RHEL8 rootless cb24d6c3d Kube Play Doc: Document the support for K8S Secret 6b2101bc7 New ulimit test: bump up minimum nfiles 5447e88b4 logformatter: hide --db-backend, and friendlyize quadlet 5382997e0 Quadlet - add support for relative path in Volume key in .container file 3e405a2fd Add service ctr cleanup to PlayKubeDown 956341543 fix --health-on-failure=restart in transient unit 26d5df77d Quadlet Doc: Suggest the kill operation for HealthOnFailure 5d1342fc5 Quadlet - Add support for health checks configuration in .container files 3ef707def Makefile: allow specifying /lib dir location a5abbdf1f Fix option --opts -> --opt 0dac214f5 basic hypverv machine implementation 94f905a50 Fix SQLite DB schema migration code 46d165040 Add support for oom_score_adj value from containers.conf 6046832f3 Use default_ulimits field in containers.conf e2d49fb65 CI: test and confirm DESIRED_DATABASE 1ea62f32f build(deps): bump github.com/openshift/imagebuilder 526dfb893 logformatter: futureproof output filename e21cf2d8d Vendor in latest containers/(storage, common, image) 686bdcc29 build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.30.0 ba141adce test/system/255-auto-update.bats: add debug logs c2a24abc0 Revert "Revert "pasta: Use two connections instead of three in TCP range forward tests"" 3a59af219 Add information for secret inspect 87e93a7b6 Add format to podman volume ls b424f8fb0 Add format to podman volume inspect 2555c8034 Add format to podman secret ls 1c4bd4a73 Add format to podman system df 71bcd9891 Add format to podman machine info 581611844 Add format table to podman image inspect man page e92955245 Cirrus: Store podman machine benchmark data b3035b9d6 Update Cirrus display names, and fix get-ci-vm script 6142c16a9 Ensure SQLite places uses the runroot in transient mode 2ec11b16a Fix various integration test issues with SQLite state 0f8530b1e Remove test for pod/container name global uniqueness 6e0f11da5 Improve handling of existing container names in SQLite 39fd9aa08 Add SQLite job to CI 7ed1c7fd9 buildah treadmill: also run rootless tests 2b4a27719 build(deps): bump github.com/vbatts/git-validation in /test/tools 3c51b61d7 auto update: return restart error ea2a0767a fix: Document removing anonymous volumes 408e764b9 events: no duplicates when streaming during a log rotation 82f2f8258 Add search --cert-dir, --creds bae07b6ea podman-mac-helper: exit 1 on error 7d8d3e810 system service --log-level=trace: support hijack eed389508 test/system: fix wait_for_port() to wait for bind 2d1f4a8bf cgroupns: private cgroupns on cgroupv1 breaks --systemd 01fd5bcc3 libpod: remove error stutter 4562e61d2 podman events: unhide --stream 7a7af735a test/system/255-auto-update.bats: multiple services 40d0d233e 255-auto-update.bats: turn off rollback where needed a9d70e9fe Use append() to add elements to a slice 1c08f2eda Revert "pasta: Use two connections instead of three in TCP range forward tests" ad8a96ab9 Support running nested SELinux container separation 159936a11 bud tests: rootless remote: use correct socket path 6f9f395b3 build(deps): bump github.com/vbauerster/mpb/v8 from 8.2.1 to 8.3.0 bad41f67e compat: /auth: parse server address correctly 6363fb08f docs: fix cmd `set DOCKER_HOST` suggestion fb4f6f95c test: reenable idmap test b5a99e081 Must use mountlabel when creating builtin volumes 8d952c01d podman.spec.rpkg: distro conditionals for modulesloaddir 9294b7350 build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0 21651706e podman inspect list network when using --net=host or none f928cf54a pasta: Re-enable "Local forwarder, IPv4" test, accept NXDOMAIN as response 829e910cd build(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 in /test/tools cc7a1e614 CI: Switch to c20230307t192532z-f37f36d12 images 799c20177 Cirrus: Run system & integration tests in parallel c03cb5718 Update checkpointctl v0.1.0 cb3cda55f Quadlet: add support for setting --ip and --ip6 af7a759e9 build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0 5d039ce22 build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0 34ff27b81 libpod: avoid nil pointer dereference in (*Container).Cleanup 25dd4d653 [CI:DOCS] Add image not found info to troubleshooting 0498ce3a5 cmd: do not require userns for "version" 2860d55c9 cmd: drop special handling for "scp" da04469f0 cmd: clarify meaning of ParentNSRequired 0ab4b2614 Fix package restore 0d219486f [CI:DOCS] Fix docs/version-check always requesting updates e77f370f8 sqlite: add a hidden --db-backend flag cca65db01 fix: update the default machine value when the previously set default machine is deleted 9ac0d4f1a podman machine: Adjust Chrony makestep config 2c67ff5d4 sqlite: add container short ID to network aliases 38acab832 sqlite: remove dead code 2342d1a31 sqlite: addContainer: add named volume only once 86d12520e sqlite: implement RewriteVolumeConfig df88f546b sqlite: LookupVolume: fix partial name match 01359457c sqlite: LookupVolume: wrap error 69ff04f73 sqlite: fix type rewriting container config e87014e44 sqlite: return correct error on pod-name conflict 84b5c6c71 sqlite: RewritePodConfig: update error message 51cf2dd36 test/system/255-auto-update.bats: wait 10 for update to finish b727f30ac auto-update test: wait for service to be ready 76056c670 Vendor in latest containers/(common, storage, image) 20a42d0e4 play kube: Add --wait option 6babef598 Cirrus: Fix git config permission denied ccc5aa59a Quadlet: Add support for the Mount key in .container files 6f09dbc2d build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2 77861d6af fix "podman logs --since --follow" flake 6d352dc0b Clarify that replicas are ignored in kubernetes deployment 42540a667 Revert "Skip all pasta tests" e804ddc5a CI: Switch to c20230223t153813z-f37f36d12 images 070572245 Fix user socket path 1e516e657 pkginstaller: bump Qemu to version 7.2.0 0f92e19e8 Cirrus: Fix bud tests failing to apply patches 1ef8a860c build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2 b00874c16 build(deps): bump github.com/coreos/stream-metadata-go 9d93486d2 Vendor in latest containers/storage d838c08b3 buildah-bud tests: don't sudo when rootless is desired 1f6f81f5d Temporarily disable version-check 5a08ddaec CI: new rootless buildah-bud tests (cron only) 5d2d609be sqlite: fix volume lookups with partial names 495314a16 sqlite: fix container lookups with partial IDs efe7aeb1d sqlite: fix LookupPod 19c2f37ba sqlite: fix pod create/rm e32bea937 sqlite: LookupContainer: update error message 565bb5645 sqlite: AddContainerExitCode: allow to replace 4b3b94473 system: add warning when running rootless on cgroupv1 1b1cdfa35 sqlite: fix AllContainers with state 21fcc9070 sqlite: fix "UPDATE TABLE" typos 3f96b0ef2 sqlite: SaveVolume: fix syntax error updating the volumes table 7c11f7e17 sqlite: exit code: allow -1 e74f7bcaf sqlite: fix typo when removing exec sessions 560805ac4 sqlite: AllContainers: fix inner join 8c64c4370 sqlite: move migration after table creation eeabe975e sqlite: implement pod methods 0d75854c5 Quadlet - use the default runtime 49d560e1b docs: context is not optional for build 03aaa8d35 Fix an incorrect comment on NewSqliteState eb228f264 Add support for containers.conf database setting 59a54f32d Add support for volume operations to SQLite state c0b92bdbc Implement exec session handling in SQL database 627a5b73b Various fixes from code review c4fe0af2a Remove `--namespace` flag from Podman root 89d0ccd19 Get E2E tests to pass 97499a70a Implement network disconnect for SQLite state 939a4ccef Implement Network Connect/Modify for SQLite state 8ab18d848 Fix various lint issues b4c4f9c93 Some further work on SQLite state 5c2a0670f Remove concept of Namespaces from BoltDB 1b968c607 Add initial SQLite-backed state implementation 93e7cc119 Cirrus: Support runc testing on debian VMs 81f116c59 Skip all pasta tests 642e9ddb8 Skip buildah-bud test 10382d0bc Skip buildx test with VFS podman storage driver dd51b62b7 Skip 'podman kube --network' test for rootless CGv1 197529f08 Skip tests which fail with CGv1 & runc 5b4f248a8 Skip rootless CGv1 quadlet tests due to issue e19922d09 Makefile: Define SHELL 43eb35a77 Machine refactor for QEMU/AppleHV e838ad86b machine refactoring preparations for hyperv b4471c6ed [CI:BUILD] spec.rpkg: trim dependency list 12153da83 Logs follow-until tests: loosen checks 7d17ec07f [CI:DOCS] Windows/Mac docs link update 7f5fc04b4 Doc update for docker network options via CLI 4b4b423b6 compat API: network create return 409 for duplicate 40f21da0c Apply suggestions to man page adacd3b12 vendor c/common@852ca05a1fbb 6a3757b73 Quadlet: Add support for LogDriver key in container and kube units ebb45b5bd machine refactoring preparations for hyperv af8d649da libpod: always use direct mapping 9dc730d9f netavark: only use aardvark ip as nameserver e9942c61d build(deps): bump github.com/container-orchestrated-devices/container-device-interface 79a05ca2b podman logs passthrough driver support --cgroups=split d7e96536e journald logs: simplify entry parsing 1590c7bf4 podman logs: read journald with passthrough 5754df806 make docs: sanity check for broken man pages 5056bd45f build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.6 to 8.2.0 5fcd2c3fa build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1 2659a3228 kube: rm secret on down, print secret on play 9ce589a4a Fix spacing typo that triggered OCD & indent units in podman-systemd.unit(5) ad866fecb Update remote_client.md e74f60dee [CI:DOCS] Add restriction to option README 975b096bc Revert "CI: Temporarily disable all AWS EC2-based tasks" 22a207d45 build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0 c95978f60 kube play: only enforce passthrough in Quadlet 21cddd723 journald: remove initializeJournal() 6dd797844 auto-update: support pods 9622d25be Emergency fix for man pages: check for broken includes c81fbd5d0 System tests: assert(): friendlier failure messages 761da776a Cirrus: Fix version-check to only run on `main` job 7f8bc6f51 CI: Temporarily disable all AWS EC2-based tasks 6f5ca7318 build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18 6ca857feb volume,container: chroot to source before exporting content 94d4b5278 Support sysctl configs via podman kube play 510e44359 [CI:BUILD] copr: podman.spec.rpkg cleanups a4677405c quadlet system tests: add useful defaults, logging 96af9e4e0 libpod: support relative positions for idmaps c7ee65596 Experimental workaround for cdn03.quay.io flake 86e55d0ec system tests: prevent leading tabs 9abe8c785 Introduce podman machine os apply 828708bac create: add support for --group-entry 33a918711 fix != filter in volume prune 4c5b79120 Allow specification of podman --remote build -f - 3d8936642 Quadlet use crun specified in containers.conf 9f84b9b52 build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0 86a4c6b65 Vendor c/image after https://github.com/containers/image/pull/1847 c0f983db8 Don't set hostPort when generating a service 3a9d14d4e man page --format xref: tighten the autocompletion check 0999991b2 add support for limiting tmpfs size for systemd-specific mnts 9a1f47887 build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0 35d16ea02 Add ulimit annotation to kube gen & play 34d412e13 man page xref: validate displayed man page names 7c54d1423 quadlet: add ExecStop d2ac85f7a install sigproxy before start/attach 191e4ce40 build(deps): bump golang.org/x/tools from 0.5.0 to 0.6.0 in /test/tools a5ca73225 Fix typos 45fb353f4 Cirrus: Make benchmarks .env file easier to load a7db3e8d2 Cirrus: Omit functions in env. file 1541ce56c kube play: set service container as main PID when possible 08e13867a Fix typos. Improve language. 9cba0474b events + container inspect test: RHEL fixes 5a9074dab Add ctrName to network alias during kube play 586515976 Run codespell on codebase c7619c8ae podman image scp: added identity for ssh.Exec fb54be2e1 [CI:DOCS] Clarify nomap constrains 433413549 [CI:DOCS] man-page checker: include --format (Go templates) e308ba021 Vendor c/image after https://github.com/containers/image/pull/1816 ec4ab08c8 [CI:DOCS] Cleanup some man pages to display options with line breaks 5ed217409 [CI:DOCS] Add tables to podman-systemd.unit man page 3de409ad6 github: remove prefix from bugs/features d6dd17fdf Quadlet: Add support for the Secret key in Container group 08d28bfc2 [CI:DOCS] OWNERS: add @ygalblum and @alexlarsson 47df0ca25 build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0 ded44be16 build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.1.6 42c7c59dd Sort quadlet keys to make it easier to read 43b357068 e2e: fix some tests on remote 83367a6b3 kube play: do not teardown unconditionally on error ac71fa01c Fix typos in comments 6b6458916 Resolve symlink path for qemu directory if possible 90eb834e7 #17363 Fix contradicting documentation podman-commit 1916da596 Fix a potential UID/GID collision in unit tests 93c35a703 golangci-lint: show all errors at once 77e4b1939 update golangci-lint to version 1.51.1 1fd0ce71d [CI:DOCS] events: document journald identifiers f1352521f Quadlet: exit 0 when there are no files to process ced934284 network ls: handle removed container 315215020 e2e: adapt play kube test on remote rootless 4e8906c5e docs/podman-systemd.unit: Explicitely mention network & kube units c4f338eec docs/podman-systemd.unit: Update example to work out of the box 50f72fe7b [CI:BUILD] Cirrus: Fix GraphQL ownerRepository:null error 83a0e97ab Add missing return after errors 84c674fee Revert "Cirrus: Emergency fix to un-stuck PRs" af0f10a22 pasta: Fix ICMPv6 Echo test, skip it for the moment 859579b6b pasta: Fix ICMP Echo Request (IPv4) test e33f4e0bc pasta: Use two connections instead of three in TCP range forward tests acaab3fa7 Add SELinux label types support to quadlet 928d589b7 Add quadlet support for rootfs= containers 6b3073f53 Cirrus: Emergency fix to un-stuck PRs 8441f01be Move clean-binaries before podman-remote in podman-remote-docs target aa0d4b266 oci: bind mount /sys with --userns=(auto|pod:) e6904f6f8 Cleanup podman-systemd.unit file 3c3526e53 Install podman-systemd.unit man page, make quadlet discoverable de63ad704 libpod: allow userns=keep-id for root 9e7f1bea4 system-reset: use CleanCacheMount to clear build cache 5ca35d6de vendor: bump buildah to v1.29.1-0.20230201192322-e56eb25575c7 3ce07b556 system tests: fix noexistent labels test in the remote a909e2f2d Expose Podman named pipe in Inspect output 2bb4c7cdd libpod: support idmap for --rootfs ed1f76917 test: adapt test to work on cgroupv1 ed18cdd6e Bump to v4.5.0-dev b6d91ebfb Update main to reflect v4.4.0 release be47eeb85 Update from /github.com/vbauerster/mpb/v7 to /v8 8aa377698 hack/perf: cleanup after benchmarks cb5a9e9f4 hack/perf/bz-2162111.sh: use custom network a1436d8fb Update bug_report.yaml 02bcf0bac Handle filetype field in kubernetes.yaml files 1a786ea53 hack/perf/bz-2162111.sh: measure stop bd8937c50 make hack/markdown-preprocess parallel-safe 68371ff55 system tests: fix volume exec/noexec test f69efb6ee system tests: minor fix for RHEL8 incompatibility cf7afed05 Cirrus: Use versionable IMAGE_SUFFIX cbb45a6d4 utils: new conversion method 0e949bfd3 libpod: use GraphRoot for overlay upper dir 427d69cc3 vendor: update containers/storage d10860a32 Do not mount /dev/tty into rootless containers 5c059e3ed build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7 9272cabd3 e2e: fix run_staticip_test about no_proxy 2e397120d docs: specify order preference for FROM 15594e92e Fixes port collision issue on use of --publish-all 952049fe5 Support for Windows paths in the source position of the volume mounts 0e3524b8b e2e tests: fix incorrect os.User.Name 7c60a784c Log data that we failed to unmarshal 61db1d5aa [CI:DOCS] hack/perf: add script for BZ 216111 29b346dea container rm: save once for exec removal and state change 8f2a40d81 [DOCS:CI] podman-events: document verbose create events 7e80edd3a e2e: Avoid hard-coding included in quadlet test 2682d3ad9 e2e: Avoid hard-coding ImageCacheDir 387f0ea2f Making gvproxy.exe optional for building Windows installer 74c090973 Add gvproxy to Windows packages ab8e49d74 Add comment to clarify error handling intention 12d70446f fix #17244: use /etc/timezone where `timedatectl` is missing on Linux 063e273e9 Fix usage of absolute windows paths with --image-path b0b166b5b Match VT device paths to be blocked from mounting exactly 553e53d44 Fix default handling of pids-limit 069edc3ad Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml) e51991030 journald: podman logs only show logs for current user 2ab90f2ed journald: podman events only show events for current user 21b82bb68 e2e: Remove the cache with "podman unshare rm" when a rootless user 9db657f40 Clean up more language for inclusiveness 814f7c569 e2e: Remove some directories at SynchronizedAfterSuite 497be102a fix: don't output "ago" when container is currently up and running b28519fd9 fix: running check error when podman is default in wsl a745d99a8 fix CI: test fail due to merge f3d8f6c49 Bump Bulidah to v1.29.0 38d5319f1 e2e: reduce dependency on /tmp for e2e tests 0ffce8181 Bump cirrus image with easier dependency management e62e42bfa quadlet: Add device support for .volume files 70e8f6243 remote,build: error if containerignore is symlink c74bdae35 DB: make loading container states optional 6132c4d54 ps: do not sync container 958c94094 Set runAsNonRoot=true in gen kube 7aef3301d WSL refactoring 08186d7dd kube-play: add support for HostIPC in pod.Spec 8850db961 Allow --device-cgroup-rule to be passed in by docker API Signed-off-by: Bruce Ashfield <bruce.ashfield@gmail.com>