summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* Bump to v3.2.3v3.2.3Ashley Cui2021-07-16
| | | | Signed-off-by: Ashley Cui <acui@redhat.com>
* Merge pull request #10966 from mheon/release_notes_323OpenShift Merge Robot2021-07-16
|\ | | | | [CI:DOCS] Release notes for v3.2.3
| * Update release notes for v3.2.3Matthew Heon2021-07-16
|/ | | | Signed-off-by: Matthew Heon <mheon@redhat.com>
* Merge pull request #10964 from vrothberg/3.2-backportsOpenShift Merge Robot2021-07-16
|\ | | | | [v3.2] vendor containers/common@v0.38.16
| * vendor containers/common@v0.38.16Valentin Rothberg2021-07-16
|/ | | | Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
* Merge pull request #10957 from vrothberg/3.2-backportsOpenShift Merge Robot2021-07-16
|\ | | | | [3.2] vendor containers/buildah@v1.21.3
| * vendor containers/buildah@v1.21.3Valentin Rothberg2021-07-16
|/ | | | Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
* Merge pull request #10945 from Luap99/rootless-cni-v3.2OpenShift Merge Robot2021-07-15
|\ | | | | [v3.2] Backport rootless cni fixes
| * Fix race conditions in rootless cni setupPaul Holzinger2021-07-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | There was an race condition when calling `GetRootlessCNINetNs()`. It created the rootless cni directory before it got locked. Therefore another process could have called cleanup and removed this directory before it was used resulting in errors. The lockfile got moved into the XDG_RUNTIME_DIR directory to prevent a panic when the parent dir was removed by cleanup. Fixes #10930 Fixes #10922 To make this even more robust `GetRootlessCNINetNs()` will now return locked. This guarantees that we can run `Do()` after `GetRootlessCNINetNs()` before another process could have called `Cleanup()` in between. [NO TESTS NEEDED] CI is flaking, hopefully this will fix it. Signed-off-by: Paul Holzinger <pholzing@redhat.com>
| * CNI-in-slirp4netns: fix bind-mount for /run/systemd/resolve/stub-resolv.confAkihiro Suda2021-07-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix issue 10929 : `[Regression in 3.2.0] CNI-in-slirp4netns DNS gets broken when running a rootful container after running a rootless container` When /etc/resolv.conf on the host is a symlink to /run/systemd/resolve/stub-resolv.conf, we have to mount an empty filesystem on /run/systemd/resolve in the child namespace, so as to isolate the directory from the host mount namespace. Otherwise our bind-mount for /run/systemd/resolve/stub-resolv.conf is unmounted when systemd-resolved unlinks and recreates /run/systemd/resolve/stub-resolv.conf on the host. [NO TESTS NEEDED] Signed-off-by: Akihiro Suda <akihiro.suda.cz@hco.ntt.co.jp>
| * Make rootless-cni setup more robustPaul Holzinger2021-07-15
|/ | | | | | | | | | | | | | | | | | | The rootless cni namespace needs a valid /etc/resolv.conf file. On some distros is a symlink to somewhere under /run. Because the kernel will follow the symlink before mounting, it is not possible to mount a file at exactly /etc/resolv.conf. We have to ensure that the link target will be available in the rootless cni mount ns. Fixes #10855 Also fixed a bug in the /var/lib/cni directory lookup logic. It used `filepath.Base` instead of `filepath.Dir` and thus looping infinitely. Fixes #10857 [NO TESTS NEEDED] Signed-off-by: Paul Holzinger <pholzing@redhat.com>
* Merge pull request #10915 from ashley-cui/backportOpenShift Merge Robot2021-07-13
|\ | | | | [3.2] Backport: Support uid,gid,mode options for secrets
| * Support uid,gid,mode options for secretsAshley Cui2021-07-12
|/ | | | | | | Support UID, GID, Mode options for mount type secrets. Also, change default secret permissions to 444 so all users can read secret. Signed-off-by: Ashley Cui <acui@redhat.com>
* Merge pull request #10871 from vrothberg/3.2-vendor-commonOpenShift Merge Robot2021-07-09
|\ | | | | [3.2] vendor containers/common@v0.38.15
| * vendor containers/common@v0.38.15Valentin Rothberg2021-07-08
|/ | | | | | | | | * libimage: import: fix tags * Don't use systemd defaults if /proc/1/comm != systemd BZ: https://bugzilla.redhat.com/show_bug.cgi?id=1979497 Fixes: containers/podman/issues/10854 Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
* Merge pull request #10869 from vrothberg/3.2-backportsOpenShift Merge Robot2021-07-08
|\ | | | | [CI:DOCS] [3.2] podman search: clarify that results depend on implementation
| * [CI:DOCS] podman search: clarify that results depend on implementationValentin Rothberg2021-07-07
|/ | | | | | | | | | | Clarify in the man page that podman-search is not generally realiable way of determining the presence/existence of an image. The results of the v1 and the v2 endpoints depend on the implementation of each registry; the semantics are not really specified. Some registries may not support search at all as it's not part of the OCI dist spec. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1978556 Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
* Merge pull request #10845 from vrothberg/3.2-backportsOpenShift Merge Robot2021-07-02
|\ | | | | [3.2] vendor containers/common@v0.38.14
| * vendor containers/common@v0.38.14Valentin Rothberg2021-07-02
|/ | | | | | | Fix looking up images with other architectures. Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=1978556 Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
* Merge pull request #10830 from vrothberg/3.2-backportsOpenShift Merge Robot2021-07-01
|\ | | | | [3.2] vendor containers/common@v0.38.13
| * vendor containers/common@v0.38.13Valentin Rothberg2021-07-01
|/ | | | | | | * libimage: events: deferred write Fixes: bugzilla.redhat.com/show_bug.cgi?id=1977673 Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
* Merge pull request #10808 from vrothberg/3.2-backportsOpenShift Merge Robot2021-06-29
|\ | | | | [3.2] vendor containers/common@v0.38.12
| * [3.2] vendor containers/common@v0.38.12Valentin Rothberg2021-06-29
|/ | | | | | * pull: custom platform: do not use local image name Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
* Merge pull request #10784 from mheon/release_322OpenShift Merge Robot2021-06-25
|\ | | | | [CI:DOCS] Bump to v3.2.2
| * Bump README to v3.2.2Matthew Heon2021-06-25
| | | | | | | | Signed-off-by: Matthew Heon <mheon@redhat.com>
| * Bump to v3.2.3-devMatthew Heon2021-06-25
| | | | | | | | Signed-off-by: Matthew Heon <mheon@redhat.com>
| * Bump to v3.2.2v3.2.2Matthew Heon2021-06-25
|/ | | | Signed-off-by: Matthew Heon <mheon@redhat.com>
* Merge pull request #10778 from mheon/backports_322OpenShift Merge Robot2021-06-25
|\ | | | | Backports for v3.2.2
| * fix systemcontext to use correct TMPDIRDaniel J Walsh2021-06-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Users are complaining about read/only /var/tmp failing even if TMPDIR=/tmp is set. This PR Fixes: https://github.com/containers/podman/issues/10698 [NO TESTS NEEDED] No way to test this. Signed-off-by: Daniel J Walsh <dwalsh@redhat.com> <MH: Fixed cherry-pick conflicts> Signed-off-by: Matthew Heon <mheon@redhat.com>
| * Scrub podman commands to use report packageJhon Honce2021-06-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Refactor podman commands that have drifted from using c/common report pkg. Report pkg is needed to implement go template functions. Removed obsolete code from podman which exists in c/common. Latest template library added default newlines and method to remove them. Incorporated needed changes in c/common PR below. Depends on https://github.com/containers/common/pull/624 Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1855983 Signed-off-by: Jhon Honce <jhonce@redhat.com> <MH: Fixed cherry-pick conflicts> Signed-off-by: Matthew Heon <mheon@redhat.com>
| * Fix volumes with uid and gid optionsPaul Holzinger2021-06-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Podman uses the volume option map to check if it has to mount the volume or not when the container is started. Commit 28138dafcc39 added to uid and gid options to this map, however when only uid/gid is set we cannot mount this volume because there is no filesystem or device specified. Make sure we do not try to mount the volume when only the uid/gid option is set since this is a simple chown operation. Also when a uid/gid is explicity set, do not chown the volume based on the container user when the volume is used for the first time. Fixes #10620 Signed-off-by: Paul Holzinger <pholzing@redhat.com>
| * Vendor in c/common v0.38.11Matthew Heon2021-06-25
| | | | | | | | Signed-off-by: Matthew Heon <mheon@redhat.com>
| * Initial release notes for v3.2.2Matthew Heon2021-06-24
| | | | | | | | Signed-off-by: Matthew Heon <mheon@redhat.com>
| * Fix restoring of privileged containersAdrian Reber2021-06-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Checkpointed containers started with --privileged fail during restore with: Error: error creating container storage: ProcessLabel and Mountlabel must either not be specified or both specified This commit fixes it by not setting the labels when restoring a privileged container. [NO TESTS NEEDED] Signed-off-by: Adrian Reber <areber@redhat.com>
| * Fix handling of podman-remote build --deviceDaniel J Walsh2021-06-24
| | | | | | | | | | | | Fixes: https://github.com/containers/podman/issues/10614 Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
| * Add support for podman remote build -f - .Daniel J Walsh2021-06-24
| | | | | | | | | | | | Fixes: https://github.com/containers/podman/issues/10621 Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
| * Fix panic condition in cgroups.getAvailableControllerszhangguanzhang2021-06-24
| | | | | | | | Signed-off-by: zhangguanzhang <zhangguanzhang@qq.com>
| * Fix permissions on initially created named volumesDaniel J Walsh2021-06-24
| | | | | | | | | | | | | | | | Permission of volume should match the directory it is being mounted on. Fixes: https://github.com/containers/podman/issues/10188 Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
| * Fix building static podman-remoteChris Evich2021-06-24
| | | | | | | | | | | | | | | | | | | | As near as I can tell, sometime between `v1.6.4` and `v1.9` the definition of `LDFLAGS_PODMAN_STATIC` was both created and lost. Additionally, after a refactoring of the `Makefile` it was possible to enable CGO (which will cause a dynamic binary to be built). Fix both issues by adding the missing definition and forcing CGO to be disabled. Signed-off-by: Chris Evich <cevich@redhat.com>
| * add correct slirp ip to /etc/hostsPaul Holzinger2021-06-24
| | | | | | | | | | | | | | | | | | The container name should have the slirp interface ip set in /etc/hosts and not the gateway ip. Commit c8dfcce6db0a introduced this regression. Fixes https://bugzilla.redhat.com/show_bug.cgi?id=1972073 Signed-off-by: Paul Holzinger <pholzing@redhat.com>
| * disable tty-size exec checks in system testsValentin Rothberg2021-06-24
| | | | | | | | | | | | | | | | | | | | | | As discussed in #10710, the additional checks for podman-exec added by commit 666f555aa52b are extremely flaky and appear in nearly every PR I have see this week. Let's temporarily disable the checks and reenable them on #10710 is fixed. Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
| * Fix resize race with podman exec -itPaul Holzinger2021-06-24
| | | | | | | | | | | | | | | | | | | | | | When starting a process with `podman exec -it` the terminal is resized after the process is started. To fix this allow exec start to accept the terminal height and width as parameter and let it resize right before the process is started. Fixes #10560 Signed-off-by: Paul Holzinger <pholzing@redhat.com>
| * Fix documentation of the --format option of podman pushMiloslav Trmač2021-06-24
| | | | | | | | | | | | | | | | It affects all transports; and without --format, we try several manifest formats. [NO TESTS NEEDED] Signed-off-by: Miloslav Trmač <mitr@redhat.com>
| * Fix systemd-resolved detection.Max Goltzsche2021-06-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Previously podman failed when run in an environment where 127.0.0.53 is the only nameserver but systemd-resolved is not used directly. In practice this happened when podman was run within an alpine container that used the host's network and the host was running systemd-resolved. This fix makes podman ignore a file not found error when reading /run/systemd/resolve/resolv.conf. Closes #10733 [NO TESTS NEEDED] Signed-off-by: Max Goltzsche <max.goltzsche@gmail.com>
| * Health Check is not handled in the compat LibpodToContainerJSONcdoern2021-06-24
| | | | | | | | | | | | | | | | | | | | | | | | Added parsing and handling for the healthCheck status within containers.go. Also modified tests fixes #10457 Signed-off-by: cdoern <cbdoer23@g.holycross.edu> <MH: Fixed cherry-pick conflicts> Signed-off-by: Matthew Heon <mheon@redhat.com>
| * Do not use inotify for OCICNIPaul Holzinger2021-06-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Podman does not need to watch the cni config directory. If a network is not found in the cache, OCICNI will reload the networks anyway and thus even podman system service should work as expected. Also include a change to not mount a "new" /var by default in the rootless cni ns, instead try to use /var/lib/cni first and then the parent dir. This allows users to store cni configs under /var/... which is the case for the CI compose test. [NO TESTS NEEDED] Fixes #10686 Signed-off-by: Paul Holzinger <pholzing@redhat.com>
| * getContainerNetworkInfo: lock netNsCtr before syncPaul Holzinger2021-06-24
| | | | | | | | | | | | | | | | | | `syncContainer()` requires the container to be locked, otherwise we can end up with undefined behavior. [NO TESTS NEEDED] Signed-off-by: Paul Holzinger <pholzing@redhat.com>
| * [NO TESTS NEEDED] Create /etc/mtab with the correct ownershipUrvashi Mohnani2021-06-24
| | | | | | | | | | | | | | | | | | | | Create the /etc and /etc/mtab directories with the correct ownership based on what the UID and GID is for the container. This was causing issue when starting the infra container with userns as the /etc directory wasn't being created with the correct ownership. Signed-off-by: Urvashi Mohnani <umohnani@redhat.com>
| * Create the /etc/mtab file if does not existsDaniel J Walsh2021-06-24
|/ | | | | | | | | | | We should create the /etc/mtab->/proc/mountinfo link so that mount command will work within the container. Docker does this by default. Fixes: https://github.com/containers/podman/issues/10263 Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* Merge pull request #10775 from vrothberg/3.2-fix-cpOpenShift Merge Robot2021-06-24
|\ | | | | [v3.2] cp: do not allow dir->file copying
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2025-01-11 16:25:48 +0000