summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* varlink: fix usage message, URI is now optionalEd Santiago2019-05-13
| | | | | | | 38199f4c made the URI argument to podman-varlink optional. Fix the usage message to indicate this. Signed-off-by: Ed Santiago <santiago@redhat.com>
* Merge pull request #2705 from adrianreber/ci-testOpenShift Merge Robot2019-05-13
|\ | | | | Enabling checkpoint/restore testing on Fedora >= 29 again
| * Upgrade to latest criu and selinux-policyAdrian Reber2019-05-06
| | | | | | | | | | | | This fixes all the current errors concerning checkpoint/restore. Signed-off-by: Adrian Reber <areber@redhat.com>
| * Only run checkpoint/restore tests on Fedora >= 29Adrian Reber2019-05-06
| | | | | | | | | | | | | | | | | | | | Only Fedora 29 and newer has an updated container-selinux and selinux-policy new enough to support CRIU in restoring threaded processes in a container with SELinux enabled. Also skip checkpoint/restore tests if rootless. CRIU requires root. Signed-off-by: Adrian Reber <areber@redhat.com>
* | Merge pull request #3105 from mheon/use_ctr_remove_funcsOpenShift Merge Robot2019-05-12
|\ \ | | | | | | Use standard remove functions for removing pod ctrs
| * | When removing a pod with CGroupfs, set pids limit to 0Matthew Heon2019-05-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When using CGroupfs, we see races during pod removal between removing the CGroup and the cleanup process starting (in the CGroup, thus preventing removal). The simplest way to avoid this is to prevent the forking of the cleanup process. Conveniently, we can do this via the CGroup that we already created for Conmon - we just need to update the PID limit to 0, which completely inhibits new forks. Signed-off-by: Matthew Heon <matthew.heon@pm.me>
| * | Add fix for an issue breaking our CIMatthew Heon2019-05-10
| | | | | | | | | | | | | | | | | | | | | | | | Buildah no longer updates the create time of single-action images (e.g. `FROM ...` with no other instructions. This isn't a bug (it matches Docker's behavior), but it broke one of our tests. Signed-off-by: Matthew Heon <matthew.heon@pm.me>
| * | Use standard remove functions for removing pod ctrsMatthew Heon2019-05-10
| | | | | | | | | | | | | | | | | | | | | Instead of rewriting the logic, reuse the standard logic we use for removing containers, which is much better tested. Signed-off-by: Matthew Heon <matthew.heon@pm.me>
* | | Merge pull request #3068 from h-vetinari/masterOpenShift Merge Robot2019-05-11
|\ \ \ | | | | | | | | Update installation instructions
| * | | Update installation instructionsAxel Obermeier2019-05-07
| | | | | | | | | | | | | | | | Signed-off-by: h-vetinari <h.vetinari@gmx.com>
* | | | Merge pull request #3041 from QiWang19/cpdashOpenShift Merge Robot2019-05-09
|\ \ \ \ | | | | | | | | | | implement cp reads tar file from stdin/to stdout
| * | | | implement cp reads tar file from stdin/stdoutQi Wang2019-05-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | enables podman cp uses - to stream a tar archive from STDIN or to STDOUT. Signed-off-by: Qi Wang <qiwan@redhat.com>
* | | | | Merge pull request #3087 from jwhonce/wip/versionOpenShift Merge Robot2019-05-09
|\ \ \ \ \ | |_|_|/ / |/| | | | Add information when running `podman version` on client
| * | | | Add information when running podman version on clientJhon Honce2019-05-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Include service version information and headers Signed-off-by: Jhon Honce <jhonce@redhat.com>
* | | | | Merge pull request #3072 from mheon/no_rm_volumeOpenShift Merge Robot2019-05-08
|\ \ \ \ \ | | | | | | | | | | | | Do not remove volumes when --rm removes a container
| * | | | | Do not remove volumes when --rm removes a containerMatthew Heon2019-05-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This duplicates Docker behavior for the `--rm` flag. Fixes #3071 Signed-off-by: Matthew Heon <matthew.heon@pm.me>
* | | | | | Merge pull request #3042 from baude/bridgeOpenShift Merge Robot2019-05-08
|\ \ \ \ \ \ | | | | | | | | | | | | | | add varlink bridge
| * | | | | | add varlink bridgebaude2019-05-08
| | |/ / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | allow the user to define a remote host and remote username for their remote podman sessions. this is then feed to the varlink "bridge" as the ssh credentials and endpoint. Signed-off-by: baude <bbaude@redhat.com>
* | | | | | Merge pull request #3082 from mheon/pod_removal_reliabilityOpenShift Merge Robot2019-05-08
|\ \ \ \ \ \ | |/ / / / / |/| | | | | Improve robustness of pod removal
| * | | | | Preserve errors returned by removing podsMatthew Heon2019-05-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Ensure that, if an error occurs somewhere along the way when we remove a pod, it's preserved until the end and returned, even as we continue to remove the pod. Signed-off-by: Matthew Heon <matthew.heon@pm.me>
| * | | | | Improve robustness of pod removalMatthew Heon2019-05-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Removing a pod must first removal all containers in the pod. Libpod requires the state to remain consistent at all times, so references to a deleted pod must all be cleansed first. Pods can have many containers in them. We presently iterate through all of them, and if an error occurs trying to clean up and remove any single container, we abort the entire operation (but cannot recover anything already removed - pod removal is not an atomic operation). Because of this, if a removal error occurs partway through, we can end up with a pod in an inconsistent state that is no longer usable. What's worse, if the error is in the infra container, and it's persistent, we get zombie pods - completely unable to be removed. When we saw some of these same issues with containers not in pods, we modified the removal code there to aggressively purge containers from the database, then try to clean up afterwards. Take the same approach here, and make cleanup errors nonfatal. Once we've gone ahead and removed containers, we need to see pod deletion through to the end - we'll log errors but keep going. Also, fix some other small things (most notably, we didn't make events for the containers removed). Signed-off-by: Matthew Heon <matthew.heon@pm.me>
* | | | | | Merge pull request #3085 from cevich/snuffleupagusOpenShift Merge Robot2019-05-08
|\ \ \ \ \ \ | |_|_|/ / / |/| | | | | Add simple test to confirm bad command-line arguments
| * | | | | Add negative command-line testChris Evich2019-05-08
|/ / / / / | | | | | | | | | | | | | | | Signed-off-by: Chris Evich <cevich@redhat.com>
* | | | | Merge pull request #3076 from baude/healthcheckmanOpenShift Merge Robot2019-05-07
|\ \ \ \ \ | | | | | | | | | | | | podman-run|create man updates
| * | | | | podman-run|create man updatesbaude2019-05-07
| | |_|/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | the healthcheck commands were not being specified in the man pages for run and create. Signed-off-by: baude <bbaude@redhat.com>
* | | | | Merge pull request #2977 from baude/makeitrainOpenShift Merge Robot2019-05-07
|\ \ \ \ \ | | | | | | | | | | | | enable integration tests for remote-client
| * | | | | enable integration tests for remote-clientbaude2019-05-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | first pass at enabling a swath of integration tests for the remote-client. Signed-off-by: baude <bbaude@redhat.com>
* | | | | | Merge pull request #3080 from baude/remotepsnamespaceOpenShift Merge Robot2019-05-07
|\ \ \ \ \ \ | |/ / / / / |/| | | | | fix podman-remote ps --ns
| * | | | | fix podman-remote ps --nsbaude2019-05-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | the namespace for the remote client was being incorrectly derived from the "remote" client. fixes: #2938 Signed-off-by: baude <bbaude@redhat.com>
* | | | | | Merge pull request #3073 from mheon/force_lock_reallocOpenShift Merge Robot2019-05-07
|\ \ \ \ \ \ | |/ / / / / |/| | | | | When refreshing after a reboot, force lock allocation
| * | | | | Remove tests for deprecated podman-refresh commandMatthew Heon2019-05-06
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Matthew Heon <matthew.heon@pm.me>
| * | | | | When refreshing after a reboot, force lock allocationMatthew Heon2019-05-06
| | |/ / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | After a reboot, when we refresh Podman's state, we retrieved the lock from the fresh SHM instance, but we did not mark it as allocated to prevent it being handed out to other containers and pods. Provide a method for marking locks as in-use, and use it when we refresh Podman state after a reboot. Fixes #2900 Signed-off-by: Matthew Heon <matthew.heon@pm.me>
* | | | | Merge pull request #3074 from baude/checkoutpointmenuOpenShift Merge Robot2019-05-07
|\ \ \ \ \ | |_|/ / / |/| | | | remote-podman checkpoint and restore add to container submenu
| * | | | remote-podman checkpoint and restore add to container submenubaude2019-05-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | the remote-podman checkpoint and restore commands were done some time ago but for some reason not added to the container subcommand Signed-off-by: baude <bbaude@redhat.com>
* | | | | Merge pull request #3070 from baude/generatesystemdtestsOpenShift Merge Robot2019-05-06
|\ \ \ \ \ | |/ / / / |/| | | | add unit tests for generate systemd
| * | | | add unit tests for generate systemdbaude2019-05-06
| | |/ / | |/| | | | | | | | | | | | | | | | | | it looks like i forgot to add the unit tests for generate systemd Signed-off-by: baude <bbaude@redhat.com>
* | | | Merge pull request #3048 from cevich/varlink_api_checkOpenShift Merge Robot2019-05-06
|\ \ \ \ | |_|/ / |/| | | Cirrus: Add check for make varlink_api_generate
| * | | Fix API.mdChris Evich2019-05-03
| | | | | | | | | | | | | | | | Signed-off-by: Chris Evich <cevich@redhat.com>
| * | | Cirrus: Add missing task dependenciesChris Evich2019-05-03
| | | | | | | | | | | | | | | | Signed-off-by: Chris Evich <cevich@redhat.com>
| * | | Cirrus: Add check for make varlink_api_generateChris Evich2019-05-03
| | | | | | | | | | | | | | | | Signed-off-by: Chris Evich <cevich@redhat.com>
* | | | Merge pull request #3069 from mheon/bump-1.3.0OpenShift Merge Robot2019-05-06
|\ \ \ \ | |_|/ / |/| | | Bump to v1.3.0
| * | | Bump gitvalidation epochMatthew Heon2019-05-06
| | | | | | | | | | | | | | | | Signed-off-by: Matthew Heon <matthew.heon@pm.me>
| * | | Bump to v1.3.1-devMatthew Heon2019-05-06
| | | | | | | | | | | | | | | | Signed-off-by: Matthew Heon <matthew.heon@pm.me>
| * | | Bump to v1.3.0v1.3.0Matthew Heon2019-05-06
|/ / / | | | | | | | | | Signed-off-by: Matthew Heon <matthew.heon@pm.me>
* | | Merge pull request #3065 from mheon/release_notes_1.3.0OpenShift Merge Robot2019-05-06
|\ \ \ | |_|/ |/| | Update release notes for 1.3.0 release
| * | Update release notes for 1.3.0 releaseMatthew Heon2019-05-05
| |/ | | | | | | Signed-off-by: Matthew Heon <matthew.heon@pm.me>
* | Merge pull request #3067 from TomSweeneyRedHat/dev/tsweeney/buildah1.8.2OpenShift Merge Robot2019-05-04
|\ \ | | | | | | Bump to Buildah v1.8.2
| * | Bump to Buildah v1.8.2TomSweeneyRedHat2019-05-03
| | | | | | | | | | | | | | | | | | As the title suggests. Signed-off-by: TomSweeneyRedHat <tsweeney@redhat.com>
* | | Merge pull request #3066 from mheon/events_libpod_manpageOpenShift Merge Robot2019-05-04
|\ \ \ | |/ / |/| | Document events logger options in libpod.conf manpage
| * | Document events logger options in libpod.conf manpageMatthew Heon2019-05-03
| |/ | | | | | | Signed-off-by: Matthew Heon <matthew.heon@pm.me>