diff options
-rw-r--r-- | RELEASE_NOTES.md | 49 | ||||
-rw-r--r-- | changelog.txt | 118 |
2 files changed, 167 insertions, 0 deletions
diff --git a/RELEASE_NOTES.md b/RELEASE_NOTES.md index fc528d70f..f2381f7e3 100644 --- a/RELEASE_NOTES.md +++ b/RELEASE_NOTES.md @@ -1,5 +1,54 @@ # Release Notes +## 1.8.1 +### Features +- Many networking-related flags have been added to `podman pod create` to enable customization of pod networks, including `--add-host`, `--dns`, `--dns-opt`, `--dns-search`, `--ip`, `--mac-address`, `--network`, and `--no-hosts` +- The `podman ps --format=json` command now includes the ID of the image containers were created with +- The `podman create` and `podman run` commands now support the `--device-cgroup-rule` flag ([#4876](https://github.com/containers/libpod/issues/4876)) +- While the HTTP API remains in alpha, many fixes and additions have landed. These are documented in a separate subsection below + +### Bugfixes +- Fixed CVE-2020-1726, a security issue where volumes manually populated before first being mounted into a container could have those contents overwritten on first being mounted into a container +- Fixed a bug where Podman containers with user namespaces in CNI networks with the DNS plugin enabled would not have the DNS plugin's nameserver added to their `resolv.conf` ([#5256](https://github.com/containers/libpod/issues/5256)) +- Fixed a bug where trailing `/` characters in image volume definitions could cause them to not be overridden by a user-specified mount at the same location ([#5219](https://github.com/containers/libpod/issues/5219)) +- Fixed a bug where the `label` option in `libpod.conf`, used to disable SELinux by default, was not being respected ([#5087](https://github.com/containers/libpod/issues/5087)) +- Fixed a bug where the `podman login` and `podman logout` commands required the registry to log into be specified ([#5146](https://github.com/containers/libpod/issues/5146)) +- Fixed a bug where detached rootless Podman containers could not forward ports ([#5167](https://github.com/containers/libpod/issues/5167)) +- Fixed a bug where rootless Podman could fail to run if the pause process had died +- Fixed a bug where Podman ignored labels that were specified with only a key and no value ([#3854](https://github.com/containers/libpod/issues/3854)) +- Fixed a bug where Podman would fail to create named volumes when the backing filesystem did not support SELinux labelling ([#5200](https://github.com/containers/libpod/issues/5200)) +- Fixed a bug where `--detach-keys=""` would not disable detaching from a container ([#5166](https://github.com/containers/libpod/issues/5166)) +- Fixed a bug where the `podman ps` command was too aggressive when filtering containers and would force `--all` on in too many situations +- Fixed a bug where the `podman play kube` command was ignoring image configuration, including volumes, working directory, labels, and stop signal ([#5174](https://github.com/containers/libpod/issues/5174)) +- Fixed a bug where the `Created` and `CreatedTime` fields in `podman images --format=json` were misnamed, which also broke Go template output for those fields ([#5110](https://github.com/containers/libpod/issues/5110)) +- Fixed a bug where rootless Podman containers with ports forwarded could hang when started ([#5182](https://github.com/containers/libpod/issues/5182)) +- Fixed a bug where `podman pull` could fail to parse registry names including port numbers +- Fixed a bug where Podman would incorrectly attempt to validate image OS and architecture when starting containers +- Fixed a bug where Bash completion for `podman build -f` would not list available files that could be built ([#3878](https://github.com/containers/libpod/issues/3878)) +- Fixed a bug where `podman commit --change` would perform incorrect validation, resulting in valid changes being rejected ([#5148](https://github.com/containers/libpod/issues/5148)) +- Fixed a bug where `podman logs --tail` could take large amounts of memory when the log file for a container was large ([#5131](https://github.com/containers/libpod/issues/5131)) +- Fixed a bug where Podman would sometimes incorrectly generate firewall rules on systems using `firewalld` + +### HTTP API +- Initial support for secure connections to servers via SSH tunneling has been added +- Initial support for the libpod `create` and `logs` endpoints for containers has been added +- Added a `/swagger/` endpoint to serve API documentation +- The `json` endpoint for containers has received many fixes +- Filtering images and containers has been greatly improved, with many bugs fixed and documentation improved +- Image creation endpoints (commit, pull, etc) have seen many fixes +- Server timeout has been fixed so that long operations will no longer trigger the timeout and shut the server down +- The `stats` endpoint for containers has seen major fixes and now provides accurate output +- Handling the HTTP 304 status code has been fixed for all endpoints +- Many fixes have been made to API documentation to ensure it matches the code + +### Misc +- Updated vendored Buildah to v1.14.1 +- Updated vendored containers/storage to v1.16.0 +- The `Created` field to `podman images --format=json` has been renamed to `CreatedSince` as part of the fix for ([#5110](https://github.com/containers/libpod/issues/5110)). Go templates using the old name should still work +- The `CreatedTime` field to `podman images --format=json` has been renamed to `CreatedAt` as part of the fix for ([#5110](https://github.com/containers/libpod/issues/5110)). Go templates using the old name should still work +- The `before` filter to `podman images` has been renamed to `since` for Docker compatibility. Using `before` will still work, but documentation has been changed to use the new `since` filter +- Using the `--password` flag to `podman login` now warns that passwords are being passed in plaintext + ## 1.8.0 ### Features - The `podman system service` command has been added, providing a preview of Podman's new Docker-compatible API. This API is still very new, and not yet ready for production use, but is available for early testing diff --git a/changelog.txt b/changelog.txt index 320526596..0dac716d0 100644 --- a/changelog.txt +++ b/changelog.txt @@ -1,3 +1,121 @@ +- Changelog for v1.8.1-rc1 (2020-02-21) + * Update release notes for v1.8.1 + * disable generation of cni firewall plugin + * search endpoint failure correction + * Remove ImageVolumes from database + * Upgrade make package-install for fedora31 + * Flake fix: race condition in same-IP test + * Add support for ssh:// and unix:// podman clients + * search test on fedora registry: retry 5 times + * Swagger: yet more fixes + * Login test: use --password-stdin + * implement reverse reader for log reads + * podman images: add --filter=since=XX + * populate resolv.conf with dnsname responses when in usernamespace + * Beautify podman bridge CNI config + * build(deps): bump github.com/spf13/cobra from 0.0.5 to 0.0.6 + * Warn user about --password cli option in login + * build(deps): bump github.com/stretchr/testify from 1.5.0 to 1.5.1 + * Swagger: fix one incorrect comment + * apiv2 container create using specgen + * Add test to validate the pod bindings api + * Update to the latest version of buildah + * New login and push tests + * Add network options to podman pod create + * Fixed syscall.Signal not convertable by decoder + * Fixed typo in KillContainer + * build(deps): bump github.com/containers/storage from 1.15.8 to 1.16.0 + * build(deps): bump github.com/stretchr/testify from 1.4.0 to 1.5.0 + * libpod.conf: clarify `label` description + * set process labels in pkg/spec + * libpod/config: use built-in TOML instead of manually merging + * Fixed CreateImageFromImage not respecting supplied Tag parameter + * Add installation of pre-commit to Makefile + * fix mandatory parameter in login/logout + * adds missing query struct tags and exports the fields + * Swagger: fix inconsistencies (try #2) + * Update mux rules to allow slashes in image names + * rootless: fix a regression when using -d + * Misc typo fixes + * Use cleaned destination path for indexing image volumes + * Add ability for pods to use the host network + * stats: Expose CPU usage in API + * rootless: check if the conmon process is valid + * apiv2: Fixup /containers/json filters documentation + * apiv2: Enable filtering images by ID + * Fix handler and systemd activation errors + * podman-ps: support image IDs + * Refactor image tree for API usage + * Update documentation of commit command to show image reference is optional + * Rework label parsing + * add caching for binding tests + * apiv2 libpod container logs + * add pkg/signal + * add pkg/capabilities + * build(deps): bump github.com/rootless-containers/rootlesskit + * Fix SELinux labels of volumes + * podman(1): fixes + * fix bug "" disable detach keys + * Fixed a bug about bash automatically complete + * Enhance fuse-overlayfs instructions. + * README: fix docs links + * Fix up play kube to use image data + * build(deps): bump k8s.io/api from 0.17.2 to 0.17.3 + * Only set --all when a status filter is given to ps + * use quay.io/libpod/fedora-minimal for reliability + * filtering behavior correction + * support device-cgroup-rule + * rootlessport: drop Pdeathsig in favor of Kill + * rootlessport: fix potential hang + * add pkg/seccomp + * Do not copy up when volume is not empty + * api: pull: fix reference parsing + * cmd/podman/pull: refactor code + * stats: add SystemUsage + * build(deps): bump k8s.io/apimachinery from 0.17.2 to 0.17.3 + * build(deps): bump github.com/gorilla/mux from 1.7.3 to 1.7.4 + * HTTP 304 (NotModified) is not an error! + * API v2 tests: catch up to moving target + * api: fix the CPU stats reported + * apiv2 stream events + * Fix container filters + * API v2: pods: fix two incorrect return codes + * Rewire ListContainers for APIv2 libpod + * podman build -f completions + * swagger: fix /libpod/images/{import,load,pull} + * Make: s/uname -o/uname -s/ + * container create: relax os/arch checks + * replace prow images test + * Remove incorrect validation of --change for commit + * [CI:DOCS] Update Code of Conduct to Containers variant + * Add test cases to validate remove and list images api. + * images --format compatible with docker + * bash-completions: Add missing subcommands in 'podman system' + * doc: Fix examples for 'podman system service' + * v2 api: /libpod/images/import + * v2 api: /libpod/images/load + * v2 api: /libpod/images/pull + * docs: add workaround for --device with rootless containers (II) + * Fix varlink code generation target. + * Modify Runtime.getImage to return a storage.Image + * Document an aspect of newFromStorage behavior + * Introduce a Runtime.newImage constructor + * Move Image.getLocalImage to Runtime.getLocalImage + * Remove the getLocalImage() call from Image.Size + * Use Runtime.NewFromLocal instead of open-coded copies + * Trivial simplification + * Create two separate newImage instances in Runtime.New + * Call NewImageRuntimeFromStore from NewImageRuntimeFromOptions + * Update readme to 1.8.0 release + * Refactor runtime functions to pass options structure + * build(deps): bump github.com/containers/image/v5 from 5.2.0 to 5.2.1 + * LibpodAPI.BuildImage: don't require a name for the new image + * Bump to v1.8.1-dev + * Cirrus: Never run prune on other branches + * Add dockerfile to mirror fedora-minimal + * Add /swagger/ endpoint to serve swagger yaml to clients + * Add backend code for pod network options + - Changelog for v1.8.0 (2020-02-06) * [CI:DOCS]update contrib systemd user * [CI:DOCS]fix systemd files for apiv2 |