summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* Document `schema` values in the `--url` flagNalin Dahyabhai2022-02-03
| | | | | | | | | Document the recognized `schema` types that can be used in a value passed to the `--url` command line flag. [CI:DOCS] Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
* podman image scp syntax correctioncdoern2022-02-03
| | | | | | | | | [NO NEW TESTS NEEDED] image scp was reading the localhost syntax too loosely causing some errors with domains or hosts containing the word localhost. Fixed that and added a few lines to make sure the pure localhost connections do not touch sshd resolves #13021 Signed-off-by: cdoern <cdoern@redhat.com>
* system prune: remove all networksPaul Holzinger2022-02-03
| | | | | | | | | | | | | | | podman system prune should also remove all networks. When we want to users to migrate to the new network stack we recommend to run podman system reset. However this did not remove networks and if there were still networks around we would continue to use cni since this was considered an old system. There is one exception for the default network. It should not be removed since this could cause other issues when it no longer exists. The network backend detection logic ignores the default network so this is fine. Signed-off-by: Paul Holzinger <pholzing@redhat.com>
* Only change network fields if they were actually changed by the userDaniel J Walsh2022-02-03
| | | | | | Fixes: https://github.com/containers/podman/issues/13065 Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* docs: clarify rootless net statsGiuseppe Scrivano2022-02-03
| | | | | | | | follow-up for https://github.com/containers/podman/pull/13101 [CI:DOCS] Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
* Fix size to match Docker selectionDaniel J Walsh2022-02-03
| | | | | | Fixes: https://github.com/containers/podman/issues/13096 Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* libpod: enforce noexec,nosuid,nodev for /dev/shmGiuseppe Scrivano2022-02-03
| | | | | | | these mount flags are already used for the /dev/shm mount on the host, but they are not set for the bind mount itself. Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
* Clarify remote client means Mac and WindowsDaniel J Walsh2022-02-03
| | | | Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* libpod: report slirp4netns network statsGiuseppe Scrivano2022-02-03
| | | | | | | | | by default slirp4netns uses the tap0 device. When slirp4netns is used, use that device by default instead of eth0. Closes: https://github.com/containers/podman/issues/11695 Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
* Add notes to "--oom-kill-disable" not supported on cgroups V2Tsubasa Watanabe2022-02-03
| | | | | | | Clarify "--oom-kill-disable" is not supported on cgroups V2 in documentation. Signed-off-by: Tsubasa Watanabe <w.tsubasa@fujitsu.com>
* Fix use of infra image to clarify defaultDaniel J Walsh2022-02-03
| | | | Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* Adapt podman images ls filters docs to be aligned with prune filters docsPatrycja Guzik2022-02-03
| | | | Signed-off-by: Patrycja Guzik <patrycja.k.guzik@gmail.com>
* ignition, machine: delegate cpu,io cgroup controllers to machine's default usersAditya R2022-02-03
| | | | | | | | | | | | | | | | Makes sure that ignition setups up systemd config so cgroup controllers like `cpu, io` are also delegated to `non-root` along with `memory, pid`. This allows general users of `podman` on `macOS` and `podman-remote` to do operations which are dependent on `cpu, io` cgroup controllers. [NO TESTS NEEDED] [NO NEW TESTS NEEDED] We don't have a CI infra to test this, please pull the tree and run `podman info` inside the machine to confirm. Signed-off-by: Aditya R <arajan@redhat.com>
* Merge pull request #13130 from nalind/slashify-dockerfile-4.0OpenShift Merge Robot2022-02-03
|\ | | | | [v4.0] pkg/bindings/images.Build(): slashify "dockerfile" values, too
| * pkg/bindings/images.Build(): slashify "dockerfile" values, tooNalin Dahyabhai2022-02-03
|/ | | | | | | | | | | When the Dockerfile isn't in the root directory of the build context, the client supplies its pathname to the server, but it needs to do so using "/" as the path separator, not the client OS's path separator. CI can't test Windows clients, so [NO NEW TESTS NEEDED] Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
* Merge pull request #13068 from mheon/bump_400_rc3OpenShift Merge Robot2022-01-28
|\ | | | | [CI:DOCS] Bump to v4.0.0-RC3
| * Remove mention of IPv6 portfwd from release notesMatthew Heon2022-01-28
| | | | | | | | Signed-off-by: Matthew Heon <mheon@redhat.com>
| * Bump to v4.0.0-devMatthew Heon2022-01-28
| | | | | | | | Signed-off-by: Matthew Heon <mheon@redhat.com>
| * Bump to v4.0.0-RC3v4.0.0-rc3Matthew Heon2022-01-28
| | | | | | | | Signed-off-by: Matthew Heon <mheon@redhat.com>
| * Update release notes for v4.0.0-RC3Matthew Heon2022-01-28
|/ | | | Signed-off-by: Matthew Heon <mheon@redhat.com>
* Merge pull request #13067 from mheon/fix_ci_40OpenShift Merge Robot2022-01-28
|\ | | | | Fix Cirrus destination branch
| * Fix Cirrus destination branchMatthew Heon2022-01-28
|/ | | | Signed-off-by: Matthew Heon <mheon@redhat.com>
* Merge pull request #12712 from flouthoc/volume_overlay_advancedOpenShift Merge Robot2022-01-28
|\ | | | | volume: add support for non-volatile `upperdir`,`workdir` for overlay volumes
| * volume: add support for non-volatile upperdir,workdir for overlay volumesAditya Rajan2022-01-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Often users want their overlayed volumes to be `non-volatile` in nature that means that same `upper` dir can be re-used by one or more containers but overall of nature of volumes still have to be `overlay` so work done is still on a overlay not on the actual volume. Following PR adds support for more advanced options i.e custom `workdir` and `upperdir` for overlayed volumes. So that users can re-use `workdir` and `upperdir` across new containers as well. Usage ```console $ podman run -it -v myvol:/data:O,upperdir=/path/persistant/upper,workdir=/path/persistant/work alpine sh ``` Signed-off-by: Aditya R <arajan@redhat.com>
* | Merge pull request #13048 from cevich/fix_get_ci_vmOpenShift Merge Robot2022-01-28
|\ \ | | | | | | [CI:DOCS] Cirrus: Fix get_ci_vm.sh initial setup
| * | Cirrus: Fix get_ci_vm.sh initial setupChris Evich2022-01-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Due to some recent changes in the Makefile, the setup part of the script is now breaking with the error: ``` install: cannot stat 'bin/rootlessport': No such file or directory make: *** [Makefile:767: install.bin] Error 1 ``` The root-cause seems to be the `install` targets not properly specifying their build dependencies. This may lead to other problems WRT automation, but for now I'm just patching this tool to workaround the issue. Signed-off-by: Chris Evich <cevich@redhat.com>
* | | Merge pull request #13052 from Luap99/issues2OpenShift Merge Robot2022-01-28
|\ \ \ | | | | | | | | [CI:DOCS] github: label issues based on os fix regex
| * | | github: label issues based on os fix regexPaul Holzinger2022-01-27
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | Good news the github action works, however I noticed that we cannot use a multiline regex so we have to use serviceIsRemote to detect if this is a remote client. Also change the os regex so that it matches both the output of podman version and podman info. Signed-off-by: Paul Holzinger <paul.holzinger@web.de>
* | | Merge pull request #13050 from Luap99/issuesOpenShift Merge Robot2022-01-27
|\ \ \ | | | | | | | | [CI:DOCS] github: label issues based on os
| * | | github: label issues based on osPaul Holzinger2022-01-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We get a lot of issues for podman-remote on macos. Since the fact that this is a remote client is often overlooked by us lets add windows, macos and remote label automatically based on a regex which should match the output of podman version. Signed-off-by: Paul Holzinger <pholzing@redhat.com>
* | | | Merge pull request #13049 from edsantiago/batsDaniel J Walsh2022-01-27
|\ \ \ \ | | | | | | | | | | System tests: emergency skip of checkpoint tests
| * | | | System tests: emergency skip of checkpoint testsEd Santiago2022-01-27
| | |/ / | |/| | | | | | | | | | | | | | | | | | ...on kernel 5.17, because it's broken Signed-off-by: Ed Santiago <santiago@redhat.com>
* | | | Merge pull request #13042 from Luap99/subnetsOpenShift Merge Robot2022-01-27
|\ \ \ \ | |/ / / |/| | | network create: allow multiple subnets
| * | | network create: allow multiple subnetsPaul Holzinger2022-01-27
| |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | podman network create --subnet, --gateway and --ip-range can now be specified multiple times to join the network to more than one subnet. This is very useful if you want to use a dual stack network and assign a fixed ipv4 and ipv6 subnet. The order of the options is important here, the first --gateway/--ip-range will be assigned to the first subnet and so on. Signed-off-by: Paul Holzinger <pholzing@redhat.com>
* | | Merge pull request #13035 from rhatdan/docs1OpenShift Merge Robot2022-01-27
|\ \ \ | | | | | | | | CI:DOCS: Add troublshooting info on podman machine remove followed by podman machine init
| * | | Update troubleshooting.mdbazhang872022-01-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Bart Zhang bazhang@redhat.com Co-authored-by: Erik Sjölund <erik.sjolund@gmail.com> Co-authored-by: Tom Sweeney <tsweeney@redhat.com> Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* | | | Merge pull request #13034 from rhatdan/docsOpenShift Merge Robot2022-01-27
|\ \ \ \ | |_|_|/ |/| | | CI:DOCS: Unify podman prune filter description: volumes, networks, system
| * | | Fix sort ordering of filtersDaniel J Walsh2022-01-27
| | | | | | | | | | | | | | | | Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
| * | | Unify podman prune filter description: volumes, networks, systemPatrycja Guzik2022-01-27
| | | | | | | | | | | | | | | | | | | | | | | | follow up of #12976 Signed-off-by: Patrycja Guzik <patrycja.k.guzik@gmail.com>
* | | | Merge pull request #13029 from TomSweeneyRedHat/dev/tsweeney/mergepull2OpenShift Merge Robot2022-01-27
|\ \ \ \ | |_|_|/ |/| | | Bump Buildah to v1.24.0
| * | | Bump Buildah to v1.24.0tomsweeneyredhat2022-01-27
| |/ / | | | | | | | | | | | | | | | | | | | | | | | | Bumps Buildah to v1.24.0 and adopts the new values for pull: true, false, never, and always. The pull-never and pull-always options for the build command are still usable, but they have been removed from the man page documentation with this change. Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
* | | Merge pull request #12867 from cdoern/scpOpenShift Merge Robot2022-01-27
|\ \ \ | |_|/ |/| | switch podman image scp from depending on machinectl to just os/exec
| * | switch podman image scp from depending on machinectl to just os/execcdoern2022-01-26
| |/ | | | | | | | | | | | | | | | | machinectl does not propogate error messages and adds extra lines in the output, exec.Cmd is able to clear the env besides PATH and TERM, and use the given UID and GID to execute the command properly. machinectl is still used to create a user session. Ubuntu support is limited by this. Signed-off-by: cdoern <cdoern@redhat.com>
* | Merge pull request #13031 from ↵OpenShift Merge Robot2022-01-27
|\ \ | |/ |/| | | | | giuseppe/drop-permission-check-privileged-rootless-devices rootless: drop permission check for devices
| * rootless: drop permission check for devicesGiuseppe Scrivano2022-01-27
|/ | | | | | | | | | | | | commit 350ede1eeb6ab33bce2918d7768b940c255e63c6 added the feature. Do not check whether the device is usable by the rootless user before adding to the container. Closes: https://github.com/containers/podman/issues/12704 [NO NEW TESTS NEEDED] it requires changes on the host to test it Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
* Merge pull request #13017 from ↵OpenShift Merge Robot2022-01-26
|\ | | | | | | | | containers/dependabot/go_modules/github.com/containers/image/v5-5.19.0 Bump github.com/containers/image/v5 from 5.18.0 to 5.19.0
| * Bump github.com/containers/image/v5 from 5.18.0 to 5.19.0dependabot[bot]2022-01-26
|/ | | | | | | | | | | | | | Bumps [github.com/containers/image/v5](https://github.com/containers/image) from 5.18.0 to 5.19.0. - [Release notes](https://github.com/containers/image/releases) - [Commits](https://github.com/containers/image/compare/v5.18.0...v5.19.0) --- updated-dependencies: - dependency-name: github.com/containers/image/v5 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
* Merge pull request #13016 from ↵OpenShift Merge Robot2022-01-26
|\ | | | | | | | | containers/dependabot/go_modules/github.com/containers/storage-1.38.1 Bump github.com/containers/storage from 1.38.0 to 1.38.1
| * Bump github.com/containers/storage from 1.38.0 to 1.38.1dependabot[bot]2022-01-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [github.com/containers/storage](https://github.com/containers/storage) from 1.38.0 to 1.38.1. - [Release notes](https://github.com/containers/storage/releases) - [Changelog](https://github.com/containers/storage/blob/main/docs/containers-storage-changes.md) - [Commits](https://github.com/containers/storage/compare/v1.38.0...v1.38.1) --- updated-dependencies: - dependency-name: github.com/containers/storage dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
* | Merge pull request #13013 from danielhelfand/osx-build-docsOpenShift Merge Robot2022-01-26
|\ \ | |/ |/| [CI:DOCS] change location of where make outputs podman binary on osx