summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* Merge pull request #12642 from Luap99/libnetworkOpenShift Merge Robot2022-01-13
|\ | | | | use libnetwork from c/common
| * Manual fixes for PR #12642:Ed Santiago2022-01-13
| | | | | | | | | | | | | | | | | | | | - reenable git:// tests - git command fails with (EVIL) status 128. Deal with it. - skip a bunch more podman-remote tests. Filed an issue for one of them (#12838), the others may not be fixable. Signed-off-by: Ed Santiago <santiago@redhat.com> Signed-off-by: Paul Holzinger <pholzing@redhat.com>
| * podman build enable --all-platforms and --unsetenvPaul Holzinger2022-01-13
| | | | | | | | | | | | | | Make sure we add support for allplatforms and unsetenv to both local and remote podman. Signed-off-by: Paul Holzinger <pholzing@redhat.com>
| * fix buildah-bud test diffPaul Holzinger2022-01-12
| | | | | | | | Signed-off-by: Paul Holzinger <pholzing@redhat.com>
| * upgrade test: check that network backend is cniPaul Holzinger2022-01-12
| | | | | | | | | | | | | | Since we test an update from an older version we should check the the network backend is correctly set to CNI. Signed-off-by: Paul Holzinger <pholzing@redhat.com>
| * use netns package from c/commonPaul Holzinger2022-01-12
| | | | | | | | | | | | | | The netns package was moved to c/common so we should use this and remove the package from podman. Signed-off-by: Paul Holzinger <pholzing@redhat.com>
| * update buildah to latest and use new network stackPaul Holzinger2022-01-12
| | | | | | | | | | | | Make sure buildah uses the new network stack. Signed-off-by: Paul Holzinger <pholzing@redhat.com>
| * use libnetwork from c/commonPaul Holzinger2022-01-12
| | | | | | | | | | | | | | | | The libpod/network packages were moved to c/common so that buildah can use it as well. To prevent duplication use it in podman as well and remove it from here. Signed-off-by: Paul Holzinger <pholzing@redhat.com>
* | Merge pull request #12836 from cdoern/podSysCtlOpenShift Merge Robot2022-01-13
|\ \ | | | | | | Podman Pod Create --sysctl support
| * | Podman Pod Create --sysctl supportcdoern2022-01-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | added support for pod wide sysctls. The sysctls supported are the same as the continer run controls. These controls are only valid if the proper namespaces are shared within the pod, otherwise only the infra ctr gets the sysctl resolves #12747 Signed-off-by: cdoern <cdoern@redhat.com>
* | | Merge pull request #12837 from rhatdan/eventsOpenShift Merge Robot2022-01-13
|\ \ \ | | | | | | | | use events_logfile_path from containers.conf for events log.
| * | | use events_logfile_path from containers.conf for events log.Daniel J Walsh2022-01-13
| | | | | | | | | | | | | | | | Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* | | | Merge pull request #12644 from leahneukirchen/events-timestampOpenShift Merge Robot2022-01-13
|\ \ \ \ | |/ / / |/| | | remote events: convert TimeNano properly
| * | | remote events: convert TimeNano properlyLeah Neukirchen2022-01-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | e.TimeNano contains nanoseconds since epoch, not just the nanoseconds after e.Time. time.Unix supports nanoseconds > 999999999 and converts them to seconds, so just passing e.TimeNano is enough. Signed-off-by: Leah Neukirchen <leah@vuxu.org>
* | | | Merge pull request #12835 from baude/issue12815OpenShift Merge Robot2022-01-13
|\ \ \ \ | | | | | | | | | | Wait for podman stop to complete
| * | | | Wait for podman stop to completeBrent Baude2022-01-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | if users run podman machine stop && podman machine ls, the status of the machine in the subsequent ls command would running. now we wait for everything to complete for stop so that scripting is more accurate. Fixes: #12815 [NO NEW TESTS NEEDED] Signed-off-by: Brent Baude <bbaude@redhat.com>
* | | | | Merge pull request #12834 from giuseppe/fix-systemd-session-warningOpenShift Merge Robot2022-01-12
|\ \ \ \ \ | | | | | | | | | | | | libpod: fix check for systemd session
| * | | | | libpod: fix check for systemd sessionGiuseppe Scrivano2022-01-12
|/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | move the check after the cgroup manager is set, so to correctly detect --cgroup-manager=cgroupfs and do not raise a warning about dbus not being present. Closes: https://github.com/containers/podman/issues/12802 Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
* | | | | Merge pull request #12151 from rhatdan/nooutOpenShift Merge Robot2022-01-12
|\ \ \ \ \ | | | | | | | | | | | | Add --noout option to prevent the output of ids
| * | | | | Add --noout option to prevent the output of idsDaniel J Walsh2022-01-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes: https://github.com/containers/podman/issues/11515 Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* | | | | | Merge pull request #12827 from edsantiago/image_scp_quietOpenShift Merge Robot2022-01-12
|\ \ \ \ \ \ | |_|_|_|_|/ |/| | | | | podman image scp: implement --quiet
| * | | | | podman image scp: implement --quietEd Santiago2022-01-12
|/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Relay --quiet to save & load commands, in both Rootless and Rootful transfer functions. Also, a little cleanup: - remove unuseful SOURCE/DEST printfs - refactor duplication in execMachine() - fix Debug("Executing") statements to include the actual command they're executing [NO NEW TESTS NEEDED] : Tests are being slowly implemented in #12797 Signed-off-by: Charlie Doern <cdoern@redhat.com> Signed-off-by: Ed Santiago <santiago@redhat.com>
* | | | | Merge pull request #12824 from ↵OpenShift Merge Robot2022-01-12
|\ \ \ \ \ | |/ / / / |/| | | | | | | | | | | | | | containers/dependabot/go_modules/github.com/BurntSushi/toml-1.0.0 Bump github.com/BurntSushi/toml from 0.4.1 to 1.0.0
| * | | | Bump github.com/BurntSushi/toml from 0.4.1 to 1.0.0dependabot[bot]2022-01-12
| | |/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [github.com/BurntSushi/toml](https://github.com/BurntSushi/toml) from 0.4.1 to 1.0.0. - [Release notes](https://github.com/BurntSushi/toml/releases) - [Commits](https://github.com/BurntSushi/toml/compare/v0.4.1...v1.0.0) --- updated-dependencies: - dependency-name: github.com/BurntSushi/toml dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
* | | | Merge pull request #12821 from vrothberg/vendor-commonOpenShift Merge Robot2022-01-12
|\ \ \ \ | |/ / / |/| | | vendor latest c/common
| * | | vendor latest c/commonValentin Rothberg2022-01-12
| | | | | | | | | | | | | | | | Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
* | | | Merge pull request #12819 from rhatdan/machineDaniel J Walsh2022-01-12
|\ \ \ \ | |/ / / |/| | | add additional fields to podman machine ls --json
| * | | add additional fields to podman machine ls --jsonDaniel J Walsh2022-01-11
| | | | | | | | | | | | | | | | | | | | | | | | [NO NEW TESTS NEEDED] Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* | | | Merge pull request #12813 from rhatdan/secretsOpenShift Merge Robot2022-01-12
|\ \ \ \ | | | | | | | | | | Fix permission on secrets directory
| * | | | Fix permission on secrets directoryDaniel J Walsh2022-01-11
| |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This directory needs to be world searchable so users can access it from different user namespaces. Fixes: https://github.com/containers/podman/issues/12779 Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* | | | Merge pull request #12818 from edsantiago/emergency_buildah_skipsOpenShift Merge Robot2022-01-12
|\ \ \ \ | |/ / / |/| | | buildah bud tests: skip failing tests
| * | | buildah bud tests: skip failing testsEd Santiago2022-01-11
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Emergency workaround for github's deprecation of git:// https://github.blog/2021-09-01-improving-git-protocol-security-github/ Two buildah tests rely on 'git://' URLs. These now fail. They have been fixed in the buildah repo[1] but it will take time to vendor that in. ITM, we need to get CI passing. Skip those two failing tests. [1] https://github.com/containers/buildah/pull/3701 Signed-off-by: Ed Santiago <santiago@redhat.com>
* | | Merge pull request #12694 from rhatdan/dependDaniel J Walsh2022-01-11
|\ \ \ | | | | | | | | Add podman rm --depend
| * | | Add podman rm --dependDaniel J Walsh2022-01-11
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This option causes Podman to not only remove the specified containers but all of the containers that depend on the specified containers. Fixes: https://github.com/containers/podman/issues/10360 Also ran codespell on the code Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* | | Merge pull request #12807 from Luap99/macvlan-hostipDaniel J Walsh2022-01-11
|\ \ \ | |/ / |/| | fix host.containers.internal entry for macvlan networks
| * | fix host.containers.internal entry for macvlan networksPaul Holzinger2022-01-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For ip/macvlan networks we cannot use the gateway as address for this hostname. In this case the gateway is normally not on the host so we just try to use a local ip instead. [NO NEW TESTS NEEDED] We cannot run macvlan networks in CI. Fixes #11351 Signed-off-by: Paul Holzinger <pholzing@redhat.com>
* | | Merge pull request #12748 from flouthoc/ign_add_proxy_varsOpenShift Merge Robot2022-01-11
|\ \ \ | | | | | | | | ignition: set `HTTP` proxy variable and `SSL_CERT_FILE` from `host` -> `machine`.
| * | | pkg: use PROXY_VARS from c/commonAditya Rajan2022-01-11
| | | | | | | | | | | | | | | | Signed-off-by: Aditya Rajan <arajan@redhat.com>
| * | | ignition: add support from setting SSL_CERT_FILEAditya Rajan2022-01-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Podman often has to run behind an http/https proxy, often in corporate environments. This proxy may or may not include SSL inspection capabilities, requiring a trusted SSL CA certificate to be added to a system's trust store. Copy the file referred to by SSL_CERT_FILE on the host into the podman machine's OS trust store, overriding the built-in single-file trust store certificate. Also set the `SSL_FILE_CERT` on remote machine [NO NEW TESTS NEEDED] Signed-off-by: Aditya Rajan <arajan@redhat.com>
| * | | ignition: propogate HTTP proxy variables from host to remoteAditya Rajan2022-01-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Podman often has to run behind an http/https proxy, often in corporate environments. This proxy may or may not include SSL inspection capabilities, requiring a trusted SSL CA certificate to be added to a system's trust store. Solve this by reading standard proxy variables (HTTP_PROXY HTTPS_PROXY NO_PROXY http_proxy https_proxy no_proxy) and injecting them into the machine at init. [NO NEW TESTS NEEDED] Signed-off-by: Aditya Rajan <arajan@redhat.com>
* | | | Merge pull request #12806 from rhatdan/machine1Daniel J Walsh2022-01-11
|\ \ \ \ | | | | | | | | | | It takes some time to start a VM
| * | | | It takes some time to start a VMDaniel J Walsh2022-01-11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We are seeing some issues with users not understanding which VM they are starting, and if the VM takes a long time to start, they do not know where to look. Moving the name to before the VM starts at least allows them to realize they are starting the wrong VM. [NO NEW TESTS NEEDED] Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* | | | | Merge pull request #12805 from rhatdan/machineDaniel J Walsh2022-01-11
|\ \ \ \ \ | |/ / / / |/| | | | Pretty Print output of podman machine ls --format json
| * | | | Pretty Print output of podman machine ls --format jsonDaniel J Walsh2022-01-11
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | Make JSON more prominent in podman machine ls --help and man page. [NO NEW TESTS NEEDED] Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* | | | Merge pull request #12780 from rhatdan/podOpenShift Merge Robot2022-01-11
|\ \ \ \ | | | | | | | | | | Use the InfraImage defined in containers.conf
| * | | | Use the InfraImage defined in containers.confDaniel J Walsh2022-01-10
| |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Remove hard code use of the DefaultInfraImage and rely on getting this from containers.conf. Fixes: https://github.com/containers/podman/issues/12771 Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* | | | Merge pull request #12793 from cevich/vmimg_updateOpenShift Merge Robot2022-01-10
|\ \ \ \ | | | | | | | | | | Enable gitlab runner unit testing + Freshen VM images w/ crun-1.4-1
| * | | | Cirrus: Freshen VM imagesChris Evich2022-01-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Specifically, this brings in `crun 1.4-1` allowing removal of a temporary workaround. Ref: https://github.com/containers/podman/pull/12759 Signed-off-by: Chris Evich <cevich@redhat.com>
| * | | | Revert "Cirrus: Temp. ignore gitlab task failures"Chris Evich2022-01-10
| |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | Ref: https://gitlab.com/gitlab-org/gitlab-runner/-/issues/28766 This reverts commit 8cb93ac1035b8966b03a87ea58366fe9f3fc7887. Signed-off-by: Chris Evich <cevich@redhat.com>
* | | | Merge pull request #12792 from mheon/bump_400_rc1OpenShift Merge Robot2022-01-10
|\ \ \ \ | | | | | | | | | | Bump to v4.0.0-RC1