summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* Support podman image trust commandQi Wang2018-12-19
| | | | | | Display the trust policy of the host system. The trust policy is stored in the /etc/containers/policy.json file and defines a scope of registries or repositories. Signed-off-by: Qi Wang <qiwan@redhat.com>
* Merge pull request #2010 from cevich/cirrus_editorsDaniel J Walsh2018-12-17
|\ | | | | Cirrus: Add text editors to cache-images
| * Cirrus: Add text editors to cache-imagesChris Evich2018-12-14
| | | | | | | | | | | | | | | | | | | | Occasionally people need to access the VM's for troubleshooting/debugging. Having an editor pre-installed makes life easier and doesn't cost any extra test-time. ***CIRRUS: REBUILD IMAGES*** Signed-off-by: Chris Evich <cevich@redhat.com>
* | Merge pull request #2018 from baude/rmiinfraOpenShift Merge Robot2018-12-17
|\ \ | | | | | | display proper error when rmi -fa with infra containers
| * | display proper error when rmi -fa with infra containersbaude2018-12-17
| | | | | | | | | | | | | | | | | | | | | | | | | | | when deleting infra containers, we were not checking the error of the image deletion and therefore resulting in not reporting the error. Fixes #1991 Signed-off-by: baude <bbaude@redhat.com>
* | | Merge pull request #2000 from TomSweeneyRedHat/dev/tsweeney/fiximageqOpenShift Merge Robot2018-12-17
|\ \ \ | | | | | | | | Show image only once with images -q
| * | | Show image only once with images -qTomSweeneyRedHat2018-12-17
|/ / / | | | | | | | | | Signed-off-by: TomSweeneyRedHat <tsweeney@redhat.com>
* | | Merge pull request #1986 from baude/varlinkendpointsOpenShift Merge Robot2018-12-17
|\ \ \ | |/ / |/| | Clean up some existing varlink endpoints
| * | Clean up some existing varlink endpointsbaude2018-12-12
| | | | | | | | | | | | | | | | | | | | | | | | Going through and adding options (like tls-verify, signature option, etc) to some varlink endpoints (like push/pull) many of which had not been updated since their original authoring. Signed-off-by: baude <bbaude@redhat.com>
* | | Merge pull request #2011 from cevich/cirrus_cliOpenShift Merge Robot2018-12-16
|\ \ \ | | | | | | | | Add script to create CI VMs for debugging
| * | | Add script to create CI VMs for debuggingChris Evich2018-12-14
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Frequently debugging of CI-related problems requires going hands-on within the environment. However, reproducing the environment by hand is very tedious and error prone. This script permits authorized users to produce VM's based on any available cache-image, and automatically remove them upon logout. Also: Bump up VM disk sizes to 200GB due to performance reasons Signed-off-by: Chris Evich <cevich@redhat.com>
* | | Merge pull request #1969 from cevich/two_fedoras_rhelsOpenShift Merge Robot2018-12-14
|\ \ \ | |_|/ |/| | Cirrus: Migrate PAPR testing of F28 to Cirrus
| * | Cirrus: Migrate PAPR testing of F28 to CirrusChris Evich2018-12-14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Since the most recent TWO versions of Fedora are officially supported upstream, both need to be tested. Implement the concept of a 'prior' Fedora release in both base-image and cache-image production. Utilize the produced cache-image to test libpod. Remove F28 testing from PAPR. Much thanks to @baude @giuseppe for help with this. Signed-off-by: Chris Evich <cevich@redhat.com>
| * | Skip checkpoint tests on Fedora <30Chris Evich2018-12-14
|/ / | | | | | | Signed-off-by: Chris Evich <cevich@redhat.com>
* | Merge pull request #1994 from giuseppe/rootless-mount-allow-only-from-vfsOpenShift Merge Robot2018-12-13
|\ \ | | | | | | mount: allow mount only when using vfs
| * | mount: allow mount only when using vfsGiuseppe Scrivano2018-12-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | when using a driver different than vfs, the mount is probably in a different mount namespace thus not accessible from the host. Avoid the confusion by not allowing mount when a different driver is used. Closes: https://github.com/containers/libpod/issues/1964 Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
* | | Merge pull request #2005 from mheon/bump-0.12.1.2Matthew Heon2018-12-13
|\ \ \ | | | | | | | | Bump to v0.12.1.2
| * | | Bump gitvalidation epochMatthew Heon2018-12-13
| | | | | | | | | | | | | | | | Signed-off-by: Matthew Heon <matthew.heon@gmail.com>
| * | | Bump to v0.12.2-devMatthew Heon2018-12-13
| | | | | | | | | | | | | | | | Signed-off-by: Matthew Heon <matthew.heon@gmail.com>
| * | | Bump to v0.12.1.2v0.12.1.2Matthew Heon2018-12-13
|/ / / | | | | | | | | | Signed-off-by: Matthew Heon <matthew.heon@gmail.com>
* | | Merge pull request #2004 from mheon/release_notes_0.12.1.2Matthew Heon2018-12-13
|\ \ \ | | | | | | | | Add release notes for 0.12.1.2
| * | | Add release notes for 0.12.1.2Matthew Heon2018-12-13
|/ / / | | | | | | | | | Signed-off-by: Matthew Heon <matthew.heon@gmail.com>
* | | Merge pull request #2003 from baude/runlabelsubdockerMatthew Heon2018-12-13
|\ \ \ | | | | | | | | runlabel should sub podman for docker|/usr/bin/docker
| * | | runlabel should sub podman for docker|/usr/bin/dockerbaude2018-12-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Many RH images use a fully-qualified path to docker in their RUN labels. While initially we wanted an exact match for substituting commands, docker is a good exception. Bug #1623282 Signed-off-by: baude <bbaude@redhat.com>
* | | | Merge pull request #1988 from mheon/use_dependency_resolvOpenShift Merge Robot2018-12-13
|\ \ \ \ | |/ / / |/| | | Containers sharing a netns should share resolv/hosts
| * | | Add test for sharing resolv and hosts with netnsMatthew Heon2018-12-12
| | | | | | | | | | | | | | | | Signed-off-by: Matthew Heon <mheon@redhat.com>
| * | | Containers sharing a netns should share resolv/hostsMatthew Heon2018-12-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When sharing a network namespace, containers should also share resolv.conf and /etc/hosts in case a container process made changes to either (for example, if I set up a VPN client in container A and join container B to its network namespace, I expect container B to use the DNS servers from A to ensure it can see everything on the VPN). Resolves: #1546 Signed-off-by: Matthew Heon <mheon@redhat.com>
* | | | Merge pull request #1989 from baude/deletecontainerfailstartOpenShift Merge Robot2018-12-13
|\ \ \ \ | | | | | | | | | | failed containers with --rm should remove themselves
| * | | | failed containers with --rm should remove themselvesbaude2018-12-12
| | |_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | when starting or running a container that has --rm, if the starting container fails (like due to an invalid command), the container should get removed. Resolves: #1985 Signed-off-by: baude <bbaude@redhat.com>
* | | | Merge pull request #1990 from kunalkushwaha/bugfix-NamedVolumeCheckOpenShift Merge Robot2018-12-13
|\ \ \ \ | | | | | | | | | | condition fixed for adding volume to boltdb.
| * | | | condition fixed for adding volume to boltdb.Kunal Kushwaha2018-12-13
| | |_|/ | |/| | | | | | | | | | Signed-off-by: Kunal Kushwaha <kushwaha_kunal_v7@lab.ntt.co.jp>
* | | | Merge pull request #1982 from cevich/ci_docs_linkOpenShift Merge Robot2018-12-13
|\ \ \ \ | | | | | | | | | | Cirrus: Add/fix documentation links
| * | | | Fix documentation links and flowChris Evich2018-12-12
| |/ / / | | | | | | | | | | | | Signed-off-by: Chris Evich <cevich@redhat.com>
* | | | Merge pull request #1987 from EmilienM/systemd/ciOpenShift Merge Robot2018-12-12
|\ \ \ \ | | | | | | | | | | e2e: add tests for systemd
| * | | | e2e: add tests for systemdEmilien Macchi2018-12-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add functional tests to start a container from systemd. This patch will: - create a systemd unit file to start redis container - create the container with `podman create` - enable the service - start the container with systemd - check that the service is actually running Signed-off-by: Emilien Macchi <emilien@redhat.com>
* | | | | Merge pull request #2001 from mheon/fix_make_shellOpenShift Merge Robot2018-12-12
|\ \ \ \ \ | |/ / / / |/| | | | Makefile tweaks to fix make shell
| * | | | Makefile tweaks to fix make shellMatthew Heon2018-12-12
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Also, bump the Dockerfile to use the latest Golang image, as most of our testing is now done on 1.11 Fixes: #1999 Signed-off-by: Matthew Heon <matthew.heon@gmail.com>
* | | | Merge pull request #1962 from rhatdan/criuOpenShift Merge Robot2018-12-12
|\ \ \ \ | |/ / / |/| | | Set Socket label for contianer
| * | | Set Socket label for contianerDaniel J Walsh2018-12-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | This will allow container processes to write to the CRIU socket that gets injected into the container. Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* | | | Merge pull request #1983 from baude/kubespellOpenShift Merge Robot2018-12-11
|\ \ \ \ | |_|_|/ |/| | | fix typo in kubernetes
| * | | fix typo in kubernetesbaude2018-12-11
| | |/ | |/| | | | | | | Signed-off-by: baude <bbaude@redhat.com>
* | | Merge pull request #1978 from mheon/only_one_execuserOpenShift Merge Robot2018-12-11
|\ \ \ | |/ / |/| | Prevent a second lookup of user for image volumes
| * | Prevent a second lookup of user for image volumesMatthew Heon2018-12-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Instead of forcing another user lookup when mounting image volumes, just use the information we looked up when we started generating the spec. This may resolve #1817 Signed-off-by: Matthew Heon <mheon@redhat.com>
* | | Merge pull request #1975 from giuseppe/fix-rootless-restartOpenShift Merge Robot2018-12-11
|\ \ \ | | | | | | | | rootless: fix restart when using fuse-overlayfs
| * | | rootless: fix restart when using fuse-overlayfsGiuseppe Scrivano2018-12-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | With rootless containers we cannot really restart an existing container as we would need to join the mount namespace as well to be able to reuse the storage, so ensure the container is stopped first. Closes: https://github.com/containers/libpod/issues/1965 Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
* | | | Merge pull request #1977 from vdemeester/no--i-go-buildOpenShift Merge Robot2018-12-11
|\ \ \ \ | | | | | | | | | | No need to use `-i` in go build (with go 1.10 and above)
| * | | | No need to use `-i` in go build (with go 1.10 and above)Vincent Demeester2018-12-11
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | > The go build command now maintains a cache of recently built packages, separate from the installed packages in $GOROOT/pkg or $GOPATH/pkg. The effect of the cache should be to speed builds that do not explicitly install packages or when switching between different copies of source code (for example, when changing back and forth between different branches in a version control system). The old advice to add the -i flag for speed, as in go build -i or go test -i, is no longer necessary: builds run just as fast without -i. This should also fix podman builds for NixOS, snap-installed go, … Signed-off-by: Vincent Demeester <vdemeest@redhat.com>
* | | | Merge pull request #1966 from mheon/ensure_storage_opts_initOpenShift Merge Robot2018-12-11
|\ \ \ \ | | | | | | | | | | Ensure storage options are properly initialized
| * | | | Ensure storage options are properly initializedMatthew Heon2018-12-10
| | |/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If one of storage GraphRoot or RunRoot are specified, but the other is not, c/storage will not use the default, and will throw an error instead. Ensure that in cases where this would happen, we populate the fields with the c/storage defaults ourselves. Signed-off-by: Matthew Heon <mheon@redhat.com>
* | | | Merge pull request #1970 from baude/kubecapaOpenShift Merge Robot2018-12-11
|\ \ \ \ | | | | | | | | | | Add capabilities to generate kube