summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* Add mask and unmask option to --security-optUrvashi Mohnani2020-12-02
| | | | | | | | | Add the mask and unmask option to the --security-opt flag to allow users to specify paths to mask and unmask in the container. If unmask=ALL, this will unmask all the paths we mask by default. Signed-off-by: Urvashi Mohnani <umohnani@redhat.com>
* Merge pull request #8400 from rhatdan/varlinkOpenShift Merge Robot2020-12-01
|\ | | | | Remove varlink support from podman
| * Remove varlink support from PodmanDaniel J Walsh2020-11-26
| | | | | | | | Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* | Merge pull request #8519 from rhatdan/manOpenShift Merge Robot2020-12-01
|\ \ | | | | | | [CI:DOCS] Document volume mounts of source directories do NOT get created
| * | Document volume mounts of source directories do NOT get createdDaniel J Walsh2020-12-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We differ from Docker, in that we do not create the source directory in a --volume mount if it does not exists. We return an error. We do not believe that a `typo` from the user should cause a directory to be created and silently ignored by Podman. Fixes: https://github.com/containers/podman/issues/8513 Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* | | Merge pull request #8427 from rhatdan/psOpenShift Merge Robot2020-12-01
|\ \ \ | | | | | | | | Handle ps container created field as a time.Time
| * | | Handle ps container created field as a time.TimeDaniel J Walsh2020-11-20
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In the current code we were translating the created time from a time.Time to a unix epoch, this was leading to a loss of precession, and some unexpected results where the sorting order of containers was misordered because of the precession loss. If we pass around created as time.Time, we do not loose the precission. Fixes: https://github.com/containers/podman/issues/8414 Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* | | | Merge pull request #8475 from rhatdan/subscriptionsOpenShift Merge Robot2020-12-01
|\ \ \ \ | |_|/ / |/| | | Switch from pkg/secrets to pkg/subscriptions
| * | | Switch from pkg/secrets to pkg/subscriptionsDaniel J Walsh2020-11-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The buildah/pkg/secrts package was move to containers/common/pkg/subscriptions. Switch to using this by default. Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* | | | Merge pull request #8523 from mheon/bump_30_devOpenShift Merge Robot2020-12-01
|\ \ \ \ | | | | | | | | | | Bump master to v3.0.0-dev
| * | | | Bump master to v3.0.0-devMatthew Heon2020-11-30
|/ / / / | | | | | | | | | | | | Signed-off-by: Matthew Heon <mheon@redhat.com>
* | | | Merge pull request #8520 from mheon/release_notes_220_finalOpenShift Merge Robot2020-11-30
|\ \ \ \ | | | | | | | | | | [CI:DOCS] Update release notes for v2.2.0
| * | | | Update release notes for v2.2.0Matthew Heon2020-11-30
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Matthew Heon <mheon@redhat.com>
* | | | | Merge pull request #8517 from rhatdan/manOpenShift Merge Robot2020-11-30
|\ \ \ \ \ | | | | | | | | | | | | [CI:DOCS] Fix option names --subuidname and --subgidname
| * | | | | Fix option names --subuidname and --subgidnameDaniel J Walsh2020-11-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Options --subuid and --subgid does not exists Fixes: https://github.com/containers/podman/issues/8510 Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* | | | | | Merge pull request #8518 from mheon/fix_extra_quoteOpenShift Merge Robot2020-11-30
|\ \ \ \ \ \ | |_|/ / / / |/| | | | | [CI:DOCS] Fix extra quotation mark in manpages.
| * | | | | Fix extra quotation mark in manpages.Matthew Heon2020-11-30
|/ / / / / | | | | | | | | | | | | | | | Signed-off-by: Matthew Heon <mheon@redhat.com>
* | | | | Merge pull request #8465 from rhatdan/pullOpenShift Merge Robot2020-11-30
|\ \ \ \ \ | | | | | | | | | | | | Document docker transport is the only supported remote transport
| * | | | | Document docker transport is the only supported remote transportDaniel J Walsh2020-11-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The goal is to improve errors when users use the wrong transport in certain cases we stutter, in other cases we don't give enough information. Remove stutters when failing to pull remote images, because of lack of support. Fix errors returned by reference.Parse to wrap in image that was being checked. Fixes: https://github.com/containers/podman/issues/7116 Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* | | | | | Merge pull request #8514 from Luap99/revert-8410-fix-multiple-networksOpenShift Merge Robot2020-11-30
|\ \ \ \ \ \ | | | | | | | | | | | | | | Revert "Allow multiple --network flags for podman run/create"
| * | | | | | Revert "Allow multiple --network flags for podman run/create"Luap992020-11-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | As described in issue #8507 this commit contains a breaking change which is not wanted in v2.2. We can discuss later if we want this in 3.0 or not. Signed-off-by: Paul Holzinger <paul.holzinger@web.de>
* | | | | | | Merge pull request #8230 from mheon/port_net_host_conflictOpenShift Merge Robot2020-11-30
|\ \ \ \ \ \ \ | |_|_|/ / / / |/| | | | | | Ensure that --net=host/pod/container conflicts with -p
| * | | | | | Ensure that --net=host/pod/container/none warn with -pMatthew Heon2020-11-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Setting port mappings only works when CNI is configuring our network (or slirp4netns, in the rootless case). This is not the case with `--net=host`, `--net=container:`, and joining the network namespace of the pod we are part of. Instead of allowing users to do these things and then be confused why they do nothing, let's match Docker and return a warning that your port mappings will do nothing. Signed-off-by: Matthew Heon <mheon@redhat.com>
* | | | | | | Merge pull request #8420 from jortkoopmans/patch-1OpenShift Merge Robot2020-11-30
|\ \ \ \ \ \ \ | |_|/ / / / / |/| | | | | | [CI:DOCS] Update Tutorials.rst
| * | | | | | Merge branch 'master' into patch-1jortkoopmans2020-11-30
| |\ \ \ \ \ \ | |/ / / / / / |/| | | | | |
* | | | | | | Merge pull request #8511 from Edward5hen/kube-testOpenShift Merge Robot2020-11-30
|\ \ \ \ \ \ \ | |_|_|/ / / / |/| | | | | | Add APIv2 tests for kube generate
| * | | | | | Add APIv2 tests for kube generateEdward Shen2020-11-30
|/ / / / / / | | | | | | | | | | | | | | | | | | Signed-off-by: Edward Shen <weshen@redhat.com>
* | | | | | Merge pull request #8493 from Luap99/net-rm-macvlanOpenShift Merge Robot2020-11-28
|\ \ \ \ \ \ | | | | | | | | | | | | | | Fix problems with network remove
| * | | | | | Fix problems with network removePaul Holzinger2020-11-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | First, make sure we are only trying to remove the network interface if we are root. Second, if we cannot get the interface name (e.g macvlan config) then we should not fail. Just remove the config file. Signed-off-by: Paul Holzinger <paul.holzinger@web.de>
* | | | | | | Merge pull request #8497 from AlbanBedel/kube-volumeOpenShift Merge Robot2020-11-28
|\ \ \ \ \ \ \ | | | | | | | | | | | | | | | | Add support for persistent volume claims in kube files
| * | | | | | | Add support for persistent volume claims in kube filesAlban Bedel2020-11-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | In k8s a persistent volume claim (PVC) allow pods to define a volume by referencing the name of a PVC. The PVC basically contains criterias that k8s then use to select which storage source it will use for the volume. Podman only provide one abtracted storage, the named volumes, and create them if they don't exists yet. So this patch simply use a volume with the name of the PVC. Signed-off-by: Alban Bedel <albeu@free.fr>
| * | | | | | | Prepare support in kube play for other volume types than hostPathAlban Bedel2020-11-27
| | |_|_|_|_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Replace the simple map of names to paths with a map of names to a struct to allow passing more parameters. Also move the code to parse the volumes to its own file to avoid making the playKubePod() function overly complex. Finally rework the kube volumes test to also be ready to support more volume types. Signed-off-by: Alban Bedel <albeu@free.fr>
* | | | | | | Merge pull request #8500 from giuseppe/set-xdg-dirsOpenShift Merge Robot2020-11-28
|\ \ \ \ \ \ \ | |/ / / / / / |/| | | | | | runtime: set XDG_* env variables if missing
| * | | | | | runtime: set XDG_* env variables if missingGiuseppe Scrivano2020-11-27
|/ / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | regression introduced when moving to Podman 2.0. Closes: https://bugzilla.redhat.com/show_bug.cgi?id=1877228 Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
* | | | | | Merge pull request #8487 from riyad/fix-ping-typoOpenShift Merge Robot2020-11-26
|\ \ \ \ \ \ | | | | | | | | | | | | | | REST API v2 - ping - fix typo in header
| * | | | | | REST API v2 - ping - fix typo in headerRiyad Preukschas2020-11-25
| | |_|_|/ / | |/| | | | | | | | | | | | | | | | Signed-off-by: Riyad Preukschas <riyad@informatik.uni-bremen.de>
* | | | | | Merge pull request #8486 from riyad/improve-ping-api-compatOpenShift Merge Robot2020-11-26
|\ \ \ \ \ \ | | | | | | | | | | | | | | REST API v2 - ping - remove newline from response to improve Docker compatibility
| * | | | | | REST API v2 - ping - remove newline from response to improve Docker ↵Riyad Preukschas2020-11-25
| |/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | compatibility Signed-off-by: Riyad Preukschas <riyad@informatik.uni-bremen.de>
* | | | | | Merge pull request #8481 from Luap99/fix-remote-volume-pathOpenShift Merge Robot2020-11-26
|\ \ \ \ \ \ | |/ / / / / |/| | | | | Do not validate the volume source path in specgen
| * | | | | Do not validate the volume source path in specgenPaul Holzinger2020-11-26
| |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The volume src path should not be validated in specgen since the remote client also uses that part and the path must only exists on the server. This now fails later and only on the server and not the client. I don't think I can add a test for this because the CI runs server and client always on the same vm. Fixes #8473 Signed-off-by: Paul Holzinger <paul.holzinger@web.de>
* | | | | Merge pull request #8470 from QiWang19/create-manfiestOpenShift Merge Robot2020-11-25
|\ \ \ \ \ | |/ / / / |/| | | | Not use local image create/add manifest
| * | | | Not use local image create/add manifestQi Wang2020-11-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Avoid using the image from load storage for `manifest create` and `manifest add` since the local image does not include other entries of the list from the registry. `--all` flag of `manifest create` and `manifest add` can not add all of the lists as expected. Signed-off-by: Qi Wang <qiwan@redhat.com>
* | | | | Merge pull request #8459 from QiWang19/doc-saveOpenShift Merge Robot2020-11-24
|\ \ \ \ \ | | | | | | | | | | | | [CI:DOCS] fix misleading save/load usage
| * | | | | [CI:DOCS] fix misleading save/load usageQi Wang2020-11-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix the container archive description in podman save/load docs that may lead to misusing the save/load instead of import/export for containers. Signed-off-by: Qi Wang <qiwan@redhat.com>
* | | | | | Merge pull request #8468 from lucendio/patch-1OpenShift Merge Robot2020-11-24
|\ \ \ \ \ \ | |_|/ / / / |/| | | | | [CI:DOCS] Tutorials:mac-win-client - Fix command ensuring sshd is enabled
| * | | | | [tutorials:mac-win-client] Fix command ensuring sshd is enabledLucendio2020-11-24
| |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | `-s, --signal` requires a value and is probably not intended to be here Signed-off-by: Lucendio <dev@lucend.io>
* | | | | Merge pull request #8467 from Luap99/fix-mac-custom-netOpenShift Merge Robot2020-11-24
|\ \ \ \ \ | |/ / / / |/| | | | Fix custom mac address with a custom cni network
| * | | | Fix custom mac address with a custom cni networkPaul Holzinger2020-11-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The cni plugin `tuning` is required to set a custom mac address. This plugin is configured in the default cni config file which is packaged with podman but was not included the generated config form `podman network create`. Fixes #8385 Signed-off-by: Paul Holzinger <paul.holzinger@web.de>
* | | | | Merge pull request #8458 from rhatdan/masterOpenShift Merge Robot2020-11-24
|\ \ \ \ \ | | | | | | | | | | | | [CI:DOCS] Bump to v2.2.0-rc2
| * | | | | Bump to v2.2.0-devDaniel J Walsh2020-11-24
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
generated by cgit v1.2.3-54-g00ecf (git 2.39.0) at 2024-09-30 12:25:12 +0000