summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* Merge pull request #13205 from jwhonce/wip/network_versionOpenShift Merge Robot2022-02-11
|\ | | | | Add 409 response to swagger godoc
| * Add 409 response to swagger godocJhon Honce2022-02-10
| | | | | | | | | | | | | | | | | | When attempting to create a network with a name that already exists, a 409 status code will be returned [NO NEW TESTS NEEDED] Signed-off-by: Jhon Honce <jhonce@redhat.com>
* | Merge pull request #13202 from TomSweeneyRedHat/dev/tsweeney/newhelloOpenShift Merge Robot2022-02-10
|\ \ | |/ |/| Make the hello image leaner
| * Make the hello image leanertomsweeneyredhat2022-02-10
|/ | | | | | | | | | | | | | [NO TESTS NEEDED] Change from using a bash script to a c file for running the image. With thanks to discussions with @afbjorklund, the Containerfile was rigged up to make the final image be only KB's in size. Also add USER 1000 to make the image test/run as non-root, and update the README.md Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
* Merge pull request #13197 from giuseppe/doc-cannot-write-loginuidOpenShift Merge Robot2022-02-10
|\ | | | | [CI:DOCS] troubleshooting: add doc for ssh into a container
| * troubleshooting: add doc for ssh into a containerGiuseppe Scrivano2022-02-10
| | | | | | | | Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
* | Merge pull request #13191 from mheon/resolvconf_fixesOpenShift Merge Robot2022-02-10
|\ \ | | | | | | Modify /etc/resolv.conf when connecting/disconnecting
| * | Modify /etc/resolv.conf when connecting/disconnectingMatthew Heon2022-02-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The `podman network connect` and `podman network disconnect` commands give containers access to different networks than the ones they were created with; these networks can also have DNS servers associated with them. Until now, however, we did not modify resolv.conf as network membership changed. With this PR, `podman network connect` will add any new nameservers supported by the new network to the container's /etc/resolv.conf, and `podman network disconnect` command will do the opposite, removing the network's nameservers from `/etc/resolv.conf`. Fixes #9603 Signed-off-by: Matthew Heon <matthew.heon@pm.me>
* | | Merge pull request #13178 from vrothberg/sym-helloOpenShift Merge Robot2022-02-10
|\ \ \ | | | | | | | | helloimage: header symmetry
| * | | helloimage: header symmetryValentin Rothberg2022-02-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Make the header symmetric by adding a whitespace before the `!` on the righthand side. Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
* | | | Merge pull request #13189 from jwhonce/wip/network_versionOpenShift Merge Robot2022-02-10
|\ \ \ \ | | | | | | | | | | Add version guard to libpod API endpoints
| * | | | Add version guard to libpod API endpointsJhon Honce2022-02-09
| |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Ensure meaningful behaviour when called with /v3.x.x semantics * Change return code to 409 from 500 when client attempts to use an existing network name * Update API bats test runner to support /v4.0.0 endpoints by default Signed-off-by: Jhon Honce <jhonce@redhat.com>
* | | | Merge pull request #13192 from TomSweeneyRedHat/dev/tsweeney/bumpcommonOpenShift Merge Robot2022-02-10
|\ \ \ \ | |_|_|/ |/| | | Bump c/common to v0.47.4
| * | | Bump c/common to v0.47.4tomsweeneyredhat2022-02-09
|/ / / | | | | | | | | | | | | | | | As the title says. Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
* | | Merge pull request #13184 from Luap99/cni-dirOpenShift Merge Robot2022-02-09
|\ \ \ | | | | | | | | Do not set the network config dir to cni plugin dir
| * | | Do not set the network config dir to cni plugin dirPaul Holzinger2022-02-09
| |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | I do not know why this code was added but it is wrong. We should never use a plugin dir as config dir. Also this will fail for netavark. The correct default will be set in c/common so podman should not touch it. [NO NEW TESTS NEEDED] Ref #13183 Signed-off-by: Paul Holzinger <pholzing@redhat.com>
* | | Merge pull request #13182 from Luap99/api-docOpenShift Merge Robot2022-02-09
|\ \ \ | |/ / |/| | [CI:DOCS] Show API doc for several versions
| * | Show API doc for several versionsPaul Holzinger2022-02-09
|/ / | | | | | | | | | | | | | | | | | | | | Right now it is not possible to look at the API version for a specific version. docs.podman.io always show the latest version from the main branch. This is not want many users want so they now have the ability to select a different version. Fixes #12796 Signed-off-by: Paul Holzinger <pholzing@redhat.com>
* | Merge pull request #13142 from tmds/ImageCreate_200_schemaOpenShift Merge Robot2022-02-09
|\ \ | | | | | | [CI:DOCS] Add schema for ImageCreate 200 response.
| * | [NO NEW TEST NEEDED] Add schema for ImageCreate 200 response.Tom Deseyn2022-02-09
| | | | | | | | | | | | Signed-off-by: Tom Deseyn <tom.deseyn@gmail.com>
* | | Merge pull request #13170 from rhatdan/idmapOpenShift Merge Robot2022-02-09
|\ \ \ | |_|/ |/| | idmap should be able to be specified along with other options
| * | idmap should be able to be specified along with other optionsDaniel J Walsh2022-02-08
|/ / | | | | | | | | | | | | | | [NO NEW TESTS NEEDED] crun is not available everywhere to test idmap. Kernel might not be recent enough and not all file systems support idmap option. Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* | Merge pull request #13164 from ↵OpenShift Merge Robot2022-02-08
|\ \ | | | | | | | | | | | | containers/dependabot/go_modules/github.com/docker/distribution-2.8.0incompatible Bump github.com/docker/distribution from 2.7.1+incompatible to 2.8.0+incompatible
| * | Bump github.com/docker/distributiondependabot[bot]2022-02-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [github.com/docker/distribution](https://github.com/docker/distribution) from 2.7.1+incompatible to 2.8.0+incompatible. - [Release notes](https://github.com/docker/distribution/releases) - [Commits](https://github.com/docker/distribution/compare/v2.7.1...v2.8.0) --- updated-dependencies: - dependency-name: github.com/docker/distribution dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
* | | Merge pull request #13163 from myml/myml/fix-durationOpenShift Merge Robot2022-02-08
|\ \ \ | | | | | | | | fix: Multiplication of durations
| * | | fix: Multiplication of durationsmyml2022-02-08
| |/ / | | | | | | | | | | | | | | | | | | 'killContainerTimeout' is already 5 second [NO NEW TESTS NEEDED] Signed-off-by: myml <wurongjie1@gmail.com>
* | | Merge pull request #13159 from Luap99/slirp4-scopeOpenShift Merge Robot2022-02-08
|\ \ \ | |/ / |/| | move rootless netns slirp4netns process to systemd user.slice
| * | move rootless netns slirp4netns process to systemd user.slicePaul Holzinger2022-02-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When running podman inside systemd user units, it is possible that systemd kills the rootless netns slirp4netns process because it was started in the default unit cgroup. When the unit is stopped all processes in that cgroup are killed. Since the slirp4netns process is run once for all containers it should not be killed. To make sure systemd will not kill the process we move it to the user.slice. Fixes #13153 Signed-off-by: Paul Holzinger <pholzing@redhat.com>
* | | Merge pull request #13156 from flouthoc/fix-compat-build-response-headerOpenShift Merge Robot2022-02-07
|\ \ \ | | | | | | | | compat: endpoint `/build` must set header `content type` as `application/json` in response header.
| * | | compat: endpoint /build must set header content type as application/json in ↵Aditya R2022-02-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | reponse Lot of clients are expecting proper `Content-type: application/json` configured in response headers of `/build` compat api. Following commit fixes that. Fixes issues where code is setting header field after writing header which is wrong. We must set `content-type` before we write and flush http header. Signed-off-by: Aditya R <arajan@redhat.com>
* | | | Merge pull request #13158 from edsantiago/batsOpenShift Merge Robot2022-02-07
|\ \ \ \ | | | | | | | | | | Cleanup: remove obsolete/misleading bug workaround
| * | | | Cleanup: remove obsolete/misleading bug workaroundEd Santiago2022-02-07
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | Followup to #13129: remove a no-longer-necessary workaround for a healthcheck bug. Signed-off-by: Ed Santiago <santiago@redhat.com>
* | | | Merge pull request #13129 from flouthoc/healthcheck-session-read-from-pipeOpenShift Merge Robot2022-02-07
|\ \ \ \ | |_|/ / |/| | | healthcheck, libpod: Read healthcheck event output from os pipe
| * | | tests: retrofit healthcheck system testsAditya R2022-02-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | All the healthcheck return output now but systems tests is written to expect empty output which seems wrong. Modify jq output to contain newline character rather than actual newline Signed-off-by: Aditya R <arajan@redhat.com>
| * | | healthcheck, libpod: Read healthcheck event output from os pipeAditya R2022-02-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It seems we are ignoring output from healthcheck session. Open a valid pipe to healthcheck session in order read its output. Use common pipe for both `stdout/stderr` since that was the previous behviour as well. Signed-off-by: Aditya R <arajan@redhat.com>
* | | | Merge pull request #13155 from myml/mainOpenShift Merge Robot2022-02-07
|\ \ \ \ | |_|/ / |/| | | Fix: Do not print error when parsing journald log fails
| * | | Fix: Do not print error when parsing journald log failsmyml2022-02-07
|/ / / | | | | | | | | | | | | | | | | | | foramtError was written as err [NO NEW TESTS NEEDED] Signed-off-by: myml <wurongjie1@gmail.com>
* | | Merge pull request #13147 from cevich/more_netavarkOpenShift Merge Robot2022-02-04
|\ \ \ | | | | | | | | Cirrus: Expand netavark testing to include rootless
| * | | Cirrus: Expand netavark testing to include rootlessChris Evich2022-02-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The list of netavark/aardvark-dns tasks is likely to be ever-growing for the near-term. Consolidate them into a single task entry with a matrix attribute to make future expansions less YAML-duplicative. Also, re-arrange it to fall in-between the CNI integration and system task sections. Signed-off-by: Chris Evich <cevich@redhat.com>
* | | | Merge pull request #13146 from cevich/dependabot_gotermOpenShift Merge Robot2022-02-04
|\ \ \ \ | | | | | | | | | | Bump github.com/buger/goterm from 1.0.1 to 1.0.4
| * | | | Bump github.com/buger/goterm from 1.0.1 to 1.0.4dependabot[bot]2022-02-04
| | |_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [github.com/buger/goterm](https://github.com/buger/goterm) from 1.0.1 to 1.0.4. - [Release notes](https://github.com/buger/goterm/releases) - [Commits](https://github.com/buger/goterm/compare/v1.0.1...v1.0.4) --- updated-dependencies: - dependency-name: github.com/buger/goterm dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
* | | | Merge pull request #13143 from Luap99/dnsOpenShift Merge Robot2022-02-04
|\ \ \ \ | |_|/ / |/| | | append podman dns search domain
| * | | append podman dns search domainPaul Holzinger2022-02-04
| |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | Append the podman dns seach domain to the host search domains when we use the dnsname/aardvark server. Previously it would only use podman seach domains and discard the host domains. Fixes #13103 Signed-off-by: Paul Holzinger <pholzing@redhat.com>
* | | Merge pull request #12930 from cdoern/podCgroupOpenShift Merge Robot2022-02-04
|\ \ \ | | | | | | | | Podman pod create --share-parent vs --share=cgroup
| * | | Podman pod create --share-parent vs --share=cgroupcdoern2022-02-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | separated cgroupNS sharing from setting the pod as the cgroup parent, made a new flag --share-parent which sets the pod as the cgroup parent for all containers entering the pod remove cgroup from the default kernel namespaces since we want the same default behavior as before which is just the cgroup parent. resolves #12765 Signed-off-by: cdoern <cdoern@redhat.com> Signed-off-by: cdoern <cbdoer23@g.holycross.edu> Signed-off-by: cdoern <cdoern@redhat.com>
* | | | Merge pull request #13134 from edsantiago/batsOpenShift Merge Robot2022-02-04
|\ \ \ \ | | | | | | | | | | System tests: revert emergency skip of checkpoint tests
| * | | | System tests: revert emergency skip of checkpoint testsEd Santiago2022-02-03
| | |/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Revert #13049. criu-3.16.1-6.fc36 fixes the problem and is now in fc36 stable: https://bodhi.fedoraproject.org/updates/FEDORA-2022-183b337712 (Yes, I confirmed that tests pass on a rawhide vm) Signed-off-by: Ed Santiago <santiago@redhat.com>
* | | | Merge pull request #13136 from rhatdan/VENDOROpenShift Merge Robot2022-02-04
|\ \ \ \ | |/ / / |/| | | Update containers/buildah v1.24.1
| * | | Update containers/buildah v1.24.1Daniel J Walsh2022-02-03
|/ / / | | | | | | | | | Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* | | Merge pull request #13024 from cevich/netavark_systemOpenShift Merge Robot2022-02-03
|\ \ \ | | | | | | | | Cirrus: Add netavark/aardvark system test task