Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
podman: Autospec creation for update from version 4.4.4 to version 4.5.0
Aditya R (9):
remote,build: error if containerignore is symlink
docs: specify order preference for FROM
vendor: bump buildah to v1.29.1-0.20230201192322-e56eb25575c7
system-reset: use CleanCacheMount to clear build cache
volume,container: chroot to source before exporting content
vendor: bump containers/(storage, common, buildah, image)
test/system: expect 12 char for short id
test: retrofit error message
build: pass env by reference
Adrian Reber (2):
Update checkpointctl v0.1.0
Use append() to add elements to a slice
Alex Jia (2):
Fix typos in comments
test: podman checkpoint/restore the latest container
Alex Willmer (1):
docs: minor grammar fix in `--volume` description
Alexander Gryanko (1):
The `--ulimit` option accepts the name with an `RLIMIT_` prefix both upper and lower case
Alexis Couvreur (1):
docs: add `starting` to `HealthCheckResults.Status`
Anjan Nath (1):
pkginstaller: bump Qemu to version 7.2.0
Arthur Sengileyev (5):
Add gvproxy to Windows packages
Making gvproxy.exe optional for building Windows installer
Support for Windows paths in the source position of the volume mounts
Expose Podman named pipe in Inspect output
Document building Podman remote on Windows hosts
Ashley Cui (7):
Update main to reflect v4.4.0 release
Bump to v4.5.0-dev
Introduce podman machine os apply
Update release notes from 4.4 branch
Bump to 4.5.0-rc1
Bump to v4.5.0-dev
[CI:DOCS] Release notes for 4.5.0 Part 1
Brent Baude (7):
WSL refactoring
machine refactoring preparations for hyperv
machine refactoring preparations for hyperv
Machine refactor for QEMU/AppleHV
basic hypverv machine implementation
hyperv: lookup machine on local filesystem first
implement podman machine set for hyperv
Cedric Staniewski (2):
quadlet: implement `Tmpfs` option
quadlet: add `UserNS` option key
Chris Evich (27):
Cirrus: Use versionable IMAGE_SUFFIX
Cirrus: Emergency fix to un-stuck PRs
Revert "Cirrus: Emergency fix to un-stuck PRs"
[CI:BUILD] Cirrus: Fix GraphQL ownerRepository:null error
Cirrus: Omit functions in env. file
Cirrus: Make benchmarks .env file easier to load
CI: Temporarily disable all AWS EC2-based tasks
Cirrus: Fix version-check to only run on `main` job
Revert "CI: Temporarily disable all AWS EC2-based tasks"
[CI:DOCS] Windows/Mac docs link update
Makefile: Define SHELL
Skip rootless CGv1 quadlet tests due to issue
Skip tests which fail with CGv1 & runc
Skip 'podman kube --network' test for rootless CGv1
Skip buildx test with VFS podman storage driver
Skip buildah-bud test
Skip all pasta tests
Cirrus: Support runc testing on debian VMs
Temporarily disable version-check
Cirrus: Fix bud tests failing to apply patches
Cirrus: Fix git config permission denied
[CI:DOCS] Fix docs/version-check always requesting updates
Cirrus: Run system & integration tests in parallel
Cirrus: Store podman machine benchmark data
Cirrus: Fix aarch64 clone_script 404 errors
Cirrus: Enable labeling of EC2 VMs
GHA: Use version instead of SHA for actions
Claudio Nave (1):
#17363 Fix contradicting documentation podman-commit
Dan Čermák (1):
Clarify that replicas are ignored in kubernetes deployment
Daniel J Walsh (34):
Allow --device-cgroup-rule to be passed in by docker API
Handle filetype field in kubernetes.yaml files
Install podman-systemd.unit man page, make quadlet discoverable
Cleanup podman-systemd.unit file
Add quadlet support for rootfs= containers
Add SELinux label types support to quadlet
Sort quadlet keys to make it easier to read
[CI:DOCS] Add tables to podman-systemd.unit man page
[CI:DOCS] Cleanup some man pages to display options with line breaks
Run codespell on codebase
Quadlet use crun specified in containers.conf
Allow specification of podman --remote build -f -
Vendor in latest containers/storage
Vendor in latest containers/(common, storage, image)
podman inspect list network when using --net=host or none
Must use mountlabel when creating builtin volumes
Support running nested SELinux container separation
Add format table to podman image inspect man page
Add format to podman machine info
Add format to podman system df
Add format to podman secret ls
Add format to podman volume inspect
Add format to podman volume ls
Add information for secret inspect
Vendor in latest containers/(storage, common, image)
Use default_ulimits field in containers.conf
Add support for oom_score_adj value from containers.conf
Fix option --opts -> --opt
Run make codespell
Update docs/source/markdown/podman-network.1.md
Add support for cgroup_config from containers.conf
Capitalize all uid,gid and id words that are not options in docs
Fix up codespell errors
Return title fields as a list
Daniel Lublin (1):
fix: don't output "ago" when container is currently up and running
Dmitry Wagin (1):
podman image scp: added identity for ssh.Exec
Doug Rabson (1):
libpod: avoid nil pointer dereference in (*Container).Cleanup
Ed Santiago (32):
e2e tests: fix incorrect os.User.Name
system tests: minor fix for RHEL8 incompatibility
make hack/markdown-preprocess parallel-safe
[CI:DOCS] man-page checker: include --format (Go templates)
events + container inspect test: RHEL fixes
man page xref: validate displayed man page names
man page --format xref: tighten the autocompletion check
system tests: prevent leading tabs
Experimental workaround for cdn03.quay.io flake
quadlet system tests: add useful defaults, logging
System tests: assert(): friendlier failure messages
Emergency fix for man pages: check for broken includes
make docs: sanity check for broken man pages
Logs follow-until tests: loosen checks
CI: new rootless buildah-bud tests (cron only)
buildah-bud tests: don't sudo when rootless is desired
bud tests: rootless remote: use correct socket path
buildah treadmill: also run rootless tests
logformatter: futureproof output filename
CI: test and confirm DESIRED_DATABASE
logformatter: hide --db-backend, and friendlyize quadlet
New ulimit test: bump up minimum nfiles
quadlet tests: skip on RHEL8 rootless
system tests: fix racey sdnotify test
CI: retry the golangci install
system tests: use CONTAINERS_CONF_OVERRIDE
System tests: unverbosify a flake log
e2e: healthcheck on stopped container: fix flake
e2e: GinkgoParallelNode() -> ...Process()
e2e tests: fix racy flakes
CI: postbuild step: skip under nightly treadmill
Debian setup: workaround for runc /dev/char/10:200 bug
Eng Zer Jun (1):
chore: replace `github.com/ghodss/yaml` with `sigs.k8s.io/yaml`
Erik Sjölund (3):
Add missing return after errors
Fix typos. Improve language.
Fix typos
Fabian Holler (1):
Match VT device paths to be blocked from mounting exactly
Giuseppe Scrivano (18):
vendor: update containers/storage
libpod: use GraphRoot for overlay upper dir
utils: new conversion method
test: adapt test to work on cgroupv1
libpod: support idmap for --rootfs
libpod: allow userns=keep-id for root
oci: bind mount /sys with --userns=(auto|pod:)
libpod: support relative positions for idmaps
libpod: always use direct mapping
system: add warning when running rootless on cgroupv1
cmd: clarify meaning of ParentNSRequired
cmd: drop special handling for "scp"
cmd: do not require userns for "version"
test: reenable idmap test
libpod: remove error stutter
cgroupns: private cgroupns on cgroupv1 breaks --systemd
rootless: drop preexec hook error message
libpod: mount safely subpaths
Heniker (1):
docs: fix cmd `set DOCKER_HOST` suggestion
Ingo Becker (1):
quadlet: Add device support for .volume files
Jack Wearden (1):
Makefile: allow specifying /lib dir location
Jason T. Greene (7):
Fix default handling of pids-limit
Fix usage of absolute windows paths with --image-path
Add comment to clarify error handling intention
Fix package restore
Fix Win install task failures with large PR bodies
Don't error when removing non-existant env vars
Use atomic config writing strategy for podman machine config files
Jordan Christiansen (1):
podman machine: Adjust Chrony makestep config
Julio C. Galindo (1):
Update podman-for-windows.md
Lokesh Mandvekar (7):
Bump cirrus image with easier dependency management
[CI:BUILD] copr: podman.spec.rpkg cleanups
[CI:BUILD] spec.rpkg: trim dependency list
podman.spec.rpkg: distro conditionals for modulesloaddir
Copr: fix build deps for /usr/bin/envsubst
[CI:DOCS] Final release notes for v4.5.0
Release v4.5.0
Marek Czernek (1):
fix: Document removing anonymous volumes
Martin Roukala (né Peres) (1):
Do not mount /dev/tty into rootless containers
Matt Heon (23):
Fix a potential UID/GID collision in unit tests
Add initial SQLite-backed state implementation
Remove concept of Namespaces from BoltDB
Some further work on SQLite state
Fix various lint issues
Implement Network Connect/Modify for SQLite state
Implement network disconnect for SQLite state
Get E2E tests to pass
Remove `--namespace` flag from Podman root
Various fixes from code review
Implement exec session handling in SQL database
Add support for volume operations to SQLite state
Add support for containers.conf database setting
Fix an incorrect comment on NewSqliteState
Add SQLite job to CI
Improve handling of existing container names in SQLite
Remove test for pod/container name global uniqueness
Fix various integration test issues with SQLite state
Ensure SQLite places uses the runroot in transient mode
Update Cirrus display names, and fix get-ci-vm script
Fix a race around SQLite DB config validation
Ensure that SQLite state handles name-ID collisions
Add remaining release notes for v4.5.0-RC2
Matthew Heon (6):
Fix SQLite DB schema migration code
Fix database locked errors with SQLite
Drop SQLite max connections
Final release notes for v4.5.0-RC2
Bump to v4.5.0-RC2
Bump to v4.5.0-dev
Michael Milton (1):
Edit the docker wrapper to use the install prefix
Miloslav Trmač (5):
Add (podman {image,manifest} push --sign-by-sigstore=param-file.yaml)
Log data that we failed to unmarshal
Update from /github.com/vbauerster/mpb/v7 to /v8
Vendor c/image after containers/image#1816
Vendor c/image after containers/image#1847
Nalin Dahyabhai (2):
libpod.storageService.CreateContainerStorage(): retrieve ID maps
"podman pull by digest and list --all" test: untag instead of rmi
Nathan Henrie (1):
Resolve symlink path for qemu directory if possible
Paul Holzinger (30):
journald: podman events only show events for current user
journald: podman logs only show logs for current user
update golangci-lint to version 1.51.1
golangci-lint: show all errors at once
github: remove prefix from bugs/features
journald: remove initializeJournal()
podman logs: read journald with passthrough
journald logs: simplify entry parsing
podman logs passthrough driver support --cgroups=split
netavark: only use aardvark ip as nameserver
compat API: network create return 409 for duplicate
fix "podman logs --since --follow" flake
test/system: fix wait_for_port() to wait for bind
system service --log-level=trace: support hijack
podman-mac-helper: exit 1 on error
stats compat API: return "id" lowercase
podman-mac-helper: install: do not error if already installed
macos pkginstaller: do not fail when podman-mac-helper fails
fix os.IsNotExist() CI check
fix slirp4netns resolv.conf ip with a userns
test/e2e: gpg keep stdout/err attached
rootless netns: recover from invalid netns
update completion scripts for cobra v1.7.0
test/e2e: use custom network config dir where needed
rootless: make sure we only use a single pause process
pkg/rootless: use catatonit from /usr/libexec/podman
network create: add --interface-name
docs: update podman-network-create.1
test/e2e: deduplicated network test
test/e2e: remove unnecessary SkipIfNetavark() calls
Rahil Bhimjiani (1):
Fix spacing typo that triggered OCD & indent units in podman-systemd.unit(5)
Stefano Brivio (9):
pasta: Use two connections instead of three in TCP range forward tests
pasta: Fix ICMP Echo Request (IPv4) test
pasta: Fix ICMPv6 Echo test, skip it for the moment
CI: Switch to c20230223t153813z-f37f36d12 images
Revert "Skip all pasta tests"
CI: Switch to c20230307t192532z-f37f36d12 images
pasta: Re-enable "Local forwarder, IPv4" test, accept NXDOMAIN as response
Revert "pasta: Use two connections instead of three in TCP range forward tests"
Revert "Revert "pasta: Use two connections instead of three in TCP range forward tests""
T K Chandra Hasan (2):
Support sysctl configs via podman kube play
Doc update for docker network options via CLI
Timothée Ravier (2):
docs/podman-systemd.unit: Update example to work out of the box
docs/podman-systemd.unit: Explicitely mention network & kube units
Toshiki Sonoda (11):
e2e: reduce dependency on /tmp for e2e tests
e2e: Remove some directories at SynchronizedAfterSuite
e2e: Remove the cache with "podman unshare rm" when a rootless user
e2e: Avoid hard-coding ImageCacheDir
e2e: Avoid hard-coding included in quadlet test
e2e: fix run_staticip_test about no_proxy
system tests: fix volume exec/noexec test
system tests: fix noexistent labels test in the remote
e2e: adapt play kube test on remote rootless
e2e: fix some tests on remote
Add search --cert-dir, --creds
Urvashi Mohnani (12):
Set runAsNonRoot=true in gen kube
Add ctrName to network alias during kube play
Add ulimit annotation to kube gen & play
Don't set hostPort when generating a service
play kube: Add --wait option
Add service ctr cleanup to PlayKubeDown
Add debug to --wait test
Use secret.items to create volume mounts if present
Support Deployment generation with kube generate
Fix invalid pod name and hostname during kube generate
Properly remove the service container during kube down
Read kube_generate_type from containers.conf
Vaclav Pavlin (1):
Fix user socket path
Valentin Rothberg (73):
ps: do not sync container
DB: make loading container states optional
fix CI: test fail due to merge
[DOCS:CI] podman-events: document verbose create events
container rm: save once for exec removal and state change
[CI:DOCS] hack/perf: add script for BZ 216111
hack/perf/bz-2162111.sh: measure stop
hack/perf/bz-2162111.sh: use custom network
hack/perf: cleanup after benchmarks
network ls: handle removed container
Quadlet: exit 0 when there are no files to process
[CI:DOCS] events: document journald identifiers
kube play: do not teardown unconditionally on error
[CI:DOCS] OWNERS: add @ygalblum and @alexlarsson
kube play: set service container as main PID when possible
install sigproxy before start/attach
quadlet: add ExecStop
auto-update: support pods
kube play: only enforce passthrough in Quadlet
vendor c/common@852ca05a1fbb
sqlite: implement pod methods
sqlite: move migration after table creation
sqlite: AllContainers: fix inner join
sqlite: fix typo when removing exec sessions
sqlite: exit code: allow -1
sqlite: SaveVolume: fix syntax error updating the volumes table
sqlite: fix "UPDATE TABLE" typos
sqlite: fix AllContainers with state
sqlite: AddContainerExitCode: allow to replace
sqlite: LookupContainer: update error message
sqlite: fix pod create/rm
sqlite: fix LookupPod
sqlite: fix container lookups with partial IDs
sqlite: fix volume lookups with partial names
auto-update test: wait for service to be ready
test/system/255-auto-update.bats: wait 10 for update to finish
sqlite: RewritePodConfig: update error message
sqlite: return correct error on pod-name conflict
sqlite: fix type rewriting container config
sqlite: LookupVolume: wrap error
sqlite: LookupVolume: fix partial name match
sqlite: implement RewriteVolumeConfig
sqlite: addContainer: add named volume only once
sqlite: remove dead code
sqlite: add container short ID to network aliases
sqlite: add a hidden --db-backend flag
compat: /auth: parse server address correctly
255-auto-update.bats: turn off rollback where needed
test/system/255-auto-update.bats: multiple services
podman events: unhide --stream
events: no duplicates when streaming during a log rotation
auto update: return restart error
test/system/255-auto-update.bats: add debug logs
fix --health-on-failure=restart in transient unit
sqlite: set connection attributes on open
sqlite: do not use shared cache
vendor containers/common@main
add CONTAINERS_CONF_OVERRIDE
sqlite: do not `Ping()` after connecting
auto-update: stop+start instead of restart sytemd units
fix volume-plugin-test flake
vendor containers/common@e27c30ee9b1b
speed up image listing
[CI:DOCS] fix typo in --systemd option
quadlet: use `Flag` suffix for variables
add version/rawversion package
add `quadlet -version` flag
rm `hack/release.sh`
system service: do not close Body
test/apiv2/80-kube.at
test/apiv2/80-kube.at
[CI:DOCS] --creds and registries
test/system/252-quadlet.bats: fix flake
Ygal Blum (16):
Quadlet: Add support for the Secret key in Container group
Quadlet: Add support for LogDriver key in container and kube units
Apply suggestions to man page
Quadlet - use the default runtime
Quadlet: Add support for the Mount key in .container files
Quadlet - Add support for health checks configuration in .container files
Quadlet Doc: Suggest the kill operation for HealthOnFailure
Quadlet - add support for relative path in Volume key in .container file
Kube Play Doc: Document the support for K8S Secret
Update docs/source/markdown/podman-kube-play.1.md.in
Quadlet - treat paths starting with systemd specifiers as absolute
Quadlet E2E test - run quadlet as user generator
Quadlet: add support for keep-id with mapping values
Quadlet: RemapUsers documentation fixes
Add support for secret exists
Quadlet - do not set log-driver by default
danishprakash (4):
kube-play: add support for HostIPC in pod.Spec
add support for limiting tmpfs size for systemd-specific mnts
create: add support for --group-entry
kube: rm secret on down, print secret on play
dependabot[bot] (28):
build(deps): bump go.etcd.io/bbolt from 1.3.6 to 1.3.7
build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.4 to 8.1.6
build(deps): bump golang.org/x/term from 0.4.0 to 0.5.0
build(deps): bump golang.org/x/tools from 0.5.0 to 0.6.0 in /test/tools
build(deps): bump golang.org/x/text from 0.6.0 to 0.7.0
build(deps): bump golang.org/x/net from 0.6.0 to 0.7.0
build(deps): bump github.com/containerd/containerd from 1.6.16 to 1.6.18
build(deps): bump github.com/onsi/gomega from 1.26.0 to 1.27.0
build(deps): bump github.com/onsi/gomega from 1.27.0 to 1.27.1
build(deps): bump github.com/vbauerster/mpb/v8 from 8.1.6 to 8.2.0
build(deps): bump github.com/container-orchestrated-devices/container-device-interface
build(deps): bump github.com/coreos/stream-metadata-go
build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2
build(deps): bump github.com/onsi/gomega from 1.27.1 to 1.27.2
build(deps): bump golang.org/x/sys from 0.5.0 to 0.6.0
build(deps): bump golang.org/x/net from 0.7.0 to 0.8.0
build(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 in /test/tools
build(deps): bump google.golang.org/protobuf from 1.28.1 to 1.29.0
build(deps): bump github.com/vbauerster/mpb/v8 from 8.2.1 to 8.3.0
build(deps): bump github.com/vbatts/git-validation in /test/tools
build(deps): bump google.golang.org/protobuf from 1.29.0 to 1.30.0
build(deps): bump github.com/openshift/imagebuilder
build(deps): bump github.com/onsi/gomega from 1.27.4 to 1.27.5
build(deps): bump github.com/onsi/gomega from 1.27.5 to 1.27.6
build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0
build(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0
build(deps): bump golang.org/x/text from 0.8.0 to 0.9.0
build(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 in /test/tools
lioutall (1):
Update remote_client.md
nabbisen (1):
fix #17244: use /etc/timezone where `timedatectl` is missing on Linux
renovate[bot] (6):
Add renovate.json configuration
[skip-ci] Update github/issue-labeler action to v2.6
[skip-ci] Update actions/setup-go action to v4
[skip-ci] Update actions/stale action to v8
[skip-ci] Update actions/upload-artifact action to v3
chore(deps): update dependency containers/automation_images to v20230405
restitux (1):
Quadlet: add support for setting --ip and --ip6
salevdns (2):
Update bug_report.yaml
[CI:DOCS] Clarify nomap constrains
shblue21 (1):
fix: running check error when podman is default in wsl
telday (1):
Fixes port collision issue on use of --publish-all
tomsweeneyredhat (6):
Bump Bulidah to v1.29.0
Clean up more language for inclusiveness
[CI:DOCS] Add restriction to option README
[CI:DOCS] Add image not found info to troubleshooting
[CI:DOCS] Add network subnets info to network man page
[CI:DOCS] Improve basic tutorial
vyasgun (3):
fix != filter in volume prune
docs: context is not optional for build
fix: update the default machine value when the previously set default machine is deleted
xxyzz (1):
Move clean-binaries before podman-remote in podman-remote-docs target- Loading branch information
