summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* Fix images since/after testsBrent Baude2022-02-18
| | | | | | | | For the since and after imagve filter tests, instead of using the read-only cache of images, we just use the empty r/w store. We then build three images that are strictly predictable. Signed-off-by: Brent Baude <bbaude@redhat.com>
* Merge pull request #13020 from zeha/12975-fix-12327OpenShift Merge Robot2022-01-26
|\ | | | | Makefile: fix darwin detection
| * Makefile: fix darwin detectionChris Hofstaedtler2022-01-26
|/ | | | | | | NATIVE_GOOS does not exist in the 3.4 branch, only on main. Fixes my backport #12327. Verified to fix #12975 (again) for me. Signed-off-by: Chris Hofstaedtler <chris.hofstaedtler@deduktiva.com>
* Merge pull request #12831 from edsantiago/emergency_buildah_skipsOpenShift Merge Robot2022-01-12
|\ | | | | [v3.4] buildah bud tests: skip failing tests
| * buildah bud tests: skip failing testsEd Santiago2022-01-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | [backport of #12818] Emergency workaround for github's deprecation of git:// https://github.blog/2021-09-01-improving-git-protocol-security-github/ Two buildah tests rely on 'git://' URLs. These now fail. They have been fixed in the buildah repo[1] but it will take time to vendor that in. ITM, we need to get CI passing. Skip those two failing tests. [1] https://github.com/containers/buildah/pull/3701 Signed-off-by: Ed Santiago <santiago@redhat.com>
* | Merge pull request #12795 from edsantiago/rhel8_gating_fixOpenShift Merge Robot2022-01-10
|\ \ | |/ |/| [v3.4] System tests: fix RHEL8 gating tests
| * System tests: fix RHEL8 gating testsEd Santiago2022-01-10
|/ | | | | | | Add a fix for RHEL8 gating tests. This resolves yet another journald/file events/logger mismatch bug. Signed-off-by: Ed Santiago <santiago@redhat.com>
* Merge pull request #12592 from ashley-cui/backportsDaniel J Walsh2021-12-16
|\ | | | | [3.4] Backport podman machine ls
| * Record the image stream along with the pathAnders F Björklund2021-12-15
| | | | | | | | | | | | [NO NEW TESTS NEEDED] Signed-off-by: Anders F Björklund <anders.f.bjorklund@gmail.com>
| * Not all fields in machine list were set properlyAnders F Björklund2021-12-15
| | | | | | | | | | | | | | | | | | When using custom output formats like table, some of the booleans introduced for json format were not initialized correctly (wrong). [NO NEW TESTS NEEDED] Signed-off-by: Anders F Björklund <anders.f.bjorklund@gmail.com>
| * Add completion for machine list formatAnders F Björklund2021-12-15
| | | | | | | | | | | | [NO NEW TESTS NEEDED] Signed-off-by: Anders F Björklund <anders.f.bjorklund@gmail.com>
| * Add JSON version of the machine listAnders F Björklund2021-12-15
|/ | | | | | [NO NEW TESTS NEEDED] Signed-off-by: Anders F Björklund <anders.f.bjorklund@gmail.com>
* Merge pull request #12549 from mheon/bump_344OpenShift Merge Robot2021-12-08
|\ | | | | Bump to v3.4.4
| * Bump to v3.4.5-devMatthew Heon2021-12-08
| | | | | | | | Signed-off-by: Matthew Heon <mheon@redhat.com>
| * Bump to v3.4.4v3.4.4Matthew Heon2021-12-08
| | | | | | | | Signed-off-by: Matthew Heon <mheon@redhat.com>
| * Update release notes for v3.4.4Matthew Heon2021-12-08
| | | | | | | | Signed-off-by: Matthew Heon <mheon@redhat.com>
| * specgen: honor empty args for entrypointAditya Rajan2021-12-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Users should be able to override containers entrypoint using `--entrypoint ""` following works fine for podman but not for podman remote. Specgen ignores empty argument for entrypoint so make specgen honor empty arguments. Signed-off-by: Aditya Rajan <arajan@redhat.com> <MH: Fixed cherry-pick conflicts> Signed-off-by: Matthew Heon <mheon@redhat.com>
| * volume: apply exact permission of target directory without adding extra 0111Aditya Rajan2021-12-08
|/ | | | | | | | While trying to match permissions of target directory podman adds extra `0111` which should not be needed if target path does not have execute permission. Signed-off-by: Aditya Rajan <arajan@redhat.com>
* Merge pull request #12546 from edsantiago/fix_failing_testsOpenShift Merge Robot2021-12-08
|\ | | | | [3.4] Fix failing tests
| * fix remote run/start flakeValentin Rothberg2021-12-08
| | | | | | | | | | | | | | | | | | | | | | Fix the flake reported in #9597 with a workaround to at least stop wasting energy until the root cause has been found and fixed. It seems that a remote run returns before the container has transitioned into the `exited` state which ultimately breaks a subsequent remote start with attach. Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
| * Disable stty system testEd Santiago2021-12-08
|/ | | | | | | It's failing pretty reliably now, so much so that gating tests will be unlikely to pass. Signed-off-by: Ed Santiago <santiago@redhat.com>
* Merge pull request #12540 from edsantiago/backport_movetocgroupOpenShift Merge Robot2021-12-08
|\ | | | | [v3.4] backport: utils: reintroduce moveToCgroup
| * utils: reintroduce moveToCgroupGiuseppe Scrivano2021-12-08
|/ | | | | | | | | | | | | | | commit ee62711136339c5daf38e38859227d85b06fc32a introduced the regression. It was mistakenly removed as part of a cleanup, but this code is needed by another code path, where we move conmon for the exec session to the same cgroup used by conmon for the process. Closes: https://github.com/containers/podman/issues/12535 [NO NEW TESTS NEEDED] it fixes a regression in the CI Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
* Merge pull request #12525 from mheon/bump_343OpenShift Merge Robot2021-12-06
|\ | | | | Backports for and bump to v3.4.3
| * Add library bumps to release notesMatthew Heon2021-12-06
| | | | | | | | Signed-off-by: Matthew Heon <mheon@redhat.com>
| * Bump to v3.4.4-devMatthew Heon2021-12-06
| | | | | | | | Signed-off-by: Matthew Heon <mheon@redhat.com>
| * Bump to v3.4.3v3.4.3Matthew Heon2021-12-06
| | | | | | | | Signed-off-by: Matthew Heon <mheon@redhat.com>
| * Final release notes for v3.2.3Matthew Heon2021-12-06
| | | | | | | | Signed-off-by: Matthew Heon <mheon@redhat.com>
| * Escape trailing slash in install directory location so the closing quote is ↵Jason T. Greene2021-12-06
| | | | | | | | | | | | | | | | not escaped Fixes #11416 [NO NEW TESTS NEEDED] Signed-off-by: Jason Greene <jason.greene@redhat.com>
| * Improve documentation of (podman image save --format)Miloslav Trmač2021-12-06
| | | | | | | | | | | | | | | | - Don't pointlessly repeat the names - Improve documentation of the formats - Use a table, per MANPAGE_SYNTAX.md Signed-off-by: Miloslav Trmač <mitr@redhat.com>
| * Ensure the generated NodePort values are uniqueMiloslav Trmač2021-12-06
| | | | | | | | | | | | | | | | | | | | | | ... at least within a single service. [NO NEW TESTS NEEDED] because testing RNGs is problematic. (We _could_ probably inject a mock RNG implementation that always returns the same value, or something like that.) Signed-off-by: Miloslav Trmač <mitr@redhat.com>
| * Allow containerPortsToServicePorts to failMiloslav Trmač2021-12-06
| | | | | | | | | | | | | | | | Add an error return to it and affected callers. Should not affect behavior, the function can't currently fail. Signed-off-by: Miloslav Trmač <mitr@redhat.com>
| * Don't use the global math/rand RNG for service portsMiloslav Trmač2021-12-06
| | | | | | | | | | | | | | | | | | | | Use a private RNG with the desired seed, don't interfere with the other uses. Introducing the servicePortState type is rather overkill for the single member, but we'll add another one immediately. Signed-off-by: Miloslav Trmač <mitr@redhat.com>
| * Move a comment to the relevant placeMiloslav Trmač2021-12-06
| | | | | | | | Signed-off-by: Miloslav Trmač <mitr@redhat.com>
| * compat: images/jsonValentin Rothberg2021-12-06
| | | | | | | | | | | | | | Do not list manifest lists. Docker doesn't either. Fixes: #12453 Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
| * Fixed the containerfile not found during remote build.Shion Tanaka2021-12-06
| | | | | | | | | | | | [NO NEW TESTS NEEDED] Signed-off-by: Shion Tanaka <shtanaka@redhat.com>
| * container, cgroup: detect pid terminationGiuseppe Scrivano2021-12-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | If the /proc/$PID/cgroup file doesn't exist, then it is likely the container was terminated in the meanwhile so report ErrCtrStopped that is already handled instead of ENOENT. commit a66f40b4df039e94572fa38c070207a435cfa466 introduced the regression. Closes: https://github.com/containers/podman/issues/12457 [NO NEW TESTS NEEDED] it solves a race in the CI that is difficult to reproduce. Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
| * top: parse ps(1) args correctlyValentin Rothberg2021-12-06
| | | | | | | | | | | | | | The arguments of ps(1) should be shlexed. Fixes: #12452 Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
| * Only open save output file with WRONLYDaniel J Walsh2021-12-06
| | | | | | | | | | | | | | | | | | | | The previous code fails on a MAC when opening /dev/stdout Fixes: https://github.com/containers/podman/issues/12402 [NO NEW TESTS NEEDED] No easy way to test this. Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
| * List /etc/containers/certs.d as default for --cert-pathDaniel J Walsh2021-12-06
| | | | | | | | | | | | Helps Document https://github.com/containers/podman/issues/10116 Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
| * Move the chown to after the ADDsDaniel J Walsh2021-12-06
| | | | | | | | | | | | | | | | I have noticed that the containers.conf file in the /home/podman directory is owned by root and not Podman. This change fixes the ownership. Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
| * compat: Add compatiblity with Docker/Moby API for scenarios where build failsAditya Rajan2021-12-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | In order to maintain compatiblity with `moby API` we must the field `errorDetail` which is primary error reporting field with stream. Currently podman is using `error` which is already deprecated by moby. Check: https://github.com/moby/moby/blob/master/pkg/jsonmessage/jsonmessage.go#L147 [NO NEW TESTS NEEDED] We can't test this in podman CI since we dont have a docker client. Signed-off-by: Aditya Rajan <arajan@redhat.com>
| * fix: parsing of HostConfig.Mounts for container createMatej Vasek2021-12-06
| | | | | | | | Signed-off-by: Matej Vasek <mvasek@redhat.com>
| * fix: error reporting for archive endpointMatej Vasek2021-12-06
| | | | | | | | | | | | Returning 500 when copying to read-only destination. Signed-off-by: Matej Vasek <mvasek@redhat.com>
| * libpod: improve heuristic to detect cgroupGiuseppe Scrivano2021-12-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | improve the heuristic to detect the scope that was created for the container. This is necessary with systemd running as PID 1, since it moves itself to a different sub-cgroup, thus stats would not account for other processes in the same container. Closes: https://github.com/containers/podman/issues/12400 Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com> <MH: Fixed cherry-pick conflicts> Signed-off-by: Matthew Heon <mheon@redhat.com>
| * libpod, inspect: export cgroup pathGiuseppe Scrivano2021-12-06
| | | | | | | | Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
| * stats: get the memory limit from the specGiuseppe Scrivano2021-12-06
| | | | | | | | | | | | | | | | | | | | OCI runtimes may set the memory limits in different ways, e.g., crun creates a sub-cgroup where the limits are applied, while runc applies them directly on the created cgroup. Since there is standardization on the cgroup path to use, just use the limit specified in the spec file. Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
| * oci: ack crun output when container is not thereAditya Rajan2021-12-06
| | | | | | | | | | | | | | | | | | `crun status ctrid` outputs `No such file or directory` when container is not there so podman much ack it. [NO NEW TESTS NEEDED] Signed-off-by: Aditya Rajan <arajan@redhat.com>
| * oci: exit gracefully if container is already deadAditya Rajan2021-12-06
| | | | | | | | | | | | | | | | | | | | While trying to kill a container with a `signal` we cant do anything if container is already dead so `exit` gracefully instead of trying to delete container again. Get container status from runtime. [ NO NEW TESTS NEEDED ] Signed-off-by: Aditya Rajan <arajan@redhat.com>
| * Add note about volume with unprivileged containerUrvashi Mohnani2021-12-06
| | | | | | | | | | | | | | | | | | | | | | | | | | Add a note to the generated kube yaml if we detect a volume is being mounted. The note lets the user know what needs to be done to avoid permission denied error when trying to access the volume for an unprivileged container. Add the same note to the man pages. NO NEW TESTS NEEDED Signed-off-by: Urvashi Mohnani <umohnani@redhat.com>