summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* Merge pull request #13821 from eriksjolund/fix_userns_auto_docsOpenShift Merge Robot2022-04-12
|\ | | | | [CI:DOCS] Rewrite rootless --userns=auto docs
| * [CI:DOCS] Rewrite rootless --userns=auto docsErik Sjölund2022-04-12
| | | | | | | | | | | | | | | | | | | | * Remove the statement that rootless --userns=auto does not work. * Mention that --userns=keep-id consumes all subuids and subgids. Co-authored-by: Tom Sweeney <tsweeney@redhat.com> Signed-off-by: Erik Sjölund <erik.sjolund@gmail.com>
* | Merge pull request #13093 from 0xC0ncord/selinux-conmon-agnosticOpenShift Merge Robot2022-04-12
|\ \ | | | | | | selinux: remove explicit range transition when starting conmon
| * | selinux: remove explicit range transition when starting conmonKenton Groombridge2022-03-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Do not explicitly transition to s0 when starting conmon. Instead, the policy should implement this behavior. [NO NEW TESTS NEEDED] This is dependent on the SELinux policy to implement the desired behavior. Additionally, entirely custom SELinux policies may choose to implement the behavior differently. Signed-off-by: Kenton Groombridge <me@concord.sh>
* | | Merge pull request #13826 from stevekuznetsov/skuznets/update-docOpenShift Merge Robot2022-04-11
|\ \ \ | | | | | | | | [CI:DOCS] pkg/bindings: document requirements for use
| * | | pkg/bindings: document requirements for useSteve Kuznetsov2022-04-11
|/ / / | | | | | | | | | Signed-off-by: Steve Kuznetsov <skuznets@redhat.com>
* | | Merge pull request #13804 from cevich/auto_update_bpOpenShift Merge Robot2022-04-11
|\ \ \ | | | | | | | | Cirrus: Multi-arch build auto-update + tagging update
| * | | Cirrus: Multi-arch build auto-update + tagging updateChris Evich2022-04-07
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This new VM image brings in two important updates to multi-arch image build operations: 1. Future operational changes will no-longer require also updating VM images. Updates to build-push made in `containers/automation_images` will automatically be picked up at runtime. ref: https://github.com/containers/automation_images/pull/123 2. On the next run, both `vX` and `vX.Y` tagged manifest-lists will be pushed. This is now also reflected in the README. ref: https://github.com/containers/automation_images/pull/125 Signed-off-by: Chris Evich <cevich@redhat.com>
* | | | Merge pull request #13822 from edsantiago/buildah_3544_fixedOpenShift Merge Robot2022-04-11
|\ \ \ \ | | | | | | | | | | System tests: reenable ps --external test
| * | | | System tests: reenable ps --external testEd Santiago2022-04-11
| | |_|/ | |/| | | | | | | | | | | | | | | | | | | | | | Buildah issue 3544 has been fixed and vendored into podman. We can reenable a long-skipped test. Signed-off-by: Ed Santiago <santiago@redhat.com>
* | | | Merge pull request #13701 from Luap99/ipam-noneOpenShift Merge Robot2022-04-11
|\ \ \ \ | |/ / / |/| | | network create: add support for ipam-driver none
| * | | network create: add support for ipam-driver nonePaul Holzinger2022-04-11
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | Add a new flag to set the ipam-driver. Also adds a new ipam driver none mode which only creates interfaces but does not assign addresses. Fixes #13521 Signed-off-by: Paul Holzinger <pholzing@redhat.com>
* | | Merge pull request #13794 from rhatdan/newuidmapOpenShift Merge Robot2022-04-08
|\ \ \ | | | | | | | | If newuidmap or newgidmap fail, then check their permissions
| * | | If newuidmap or newgidmap fail, then check their permissionsDaniel J Walsh2022-04-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Often distributions to not have newuidmap and netgidmap configured to be setuid. If Podman fails to setup the user namespace, check to see if these files doe not have the proper protection and tell the user. [NO NEW TESTS NEEDED] Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* | | | Merge pull request #13811 from flouthoc/container_inspect_entrypointOpenShift Merge Robot2022-04-08
|\ \ \ \ | |/ / / |/| | | container,inspect: convert `Entrypoint` to an array instead of a string
| * | | container,inspect: convert Entrypoint to array instead of a stringAditya R2022-04-08
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Convert container entrypoint from string to an array inorder to make sure there is parity between `podman inspect` and `docker inspect` Signed-off-by: Aditya R <arajan@redhat.com>
* | | | Merge pull request #13687 from rhatdan/VENDOROpenShift Merge Robot2022-04-08
|\ \ \ \ | |/ / / |/| | | Vendor in new opencontainers/selinux
| * | | Vendor in new opencontainers/selinuxDaniel J Walsh2022-04-08
| |/ / | | | | | | | | | | | | | | | | | | | | | Also update vendor of containers/common,buildah,storage,image Fixes: https://bugzilla.redhat.com/show_bug.cgi?id=2069586 Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* | | Merge pull request #13810 from vrothberg/images-sizeOpenShift Merge Robot2022-04-08
|\ \ \ | | | | | | | | images --size
| * | | images --sizeValentin Rothberg2022-04-08
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | Add a --size option to podman images to allow for disabling computing the size of listed images. If listing images is critical to performance, user may chose to turn off size computation to speed things up. Context: #13755 Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
* | | Merge pull request #13773 from TomSweeneyRedHat/dev/tsweeney/helloOpenShift Merge Robot2022-04-07
|\ \ \ | |/ / |/| | [CI:DOCS] Add Podman Hello to readme.md
| * | Add Podman Hello to readme.mdtomsweeneyredhat2022-04-06
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | As the title says. Adds a Podman hello image to the home page. I ran it on windows, so had to have a blue screen to honor that! [NO NEW TESTS NEEDED] Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
* | | Merge pull request #13798 from n1hility/fix-docker-sockOpenShift Merge Robot2022-04-07
|\ \ \ | | | | | | | | Fix mac docker socket handling
| * | | Fix docker socket handlingJason T. Greene2022-04-06
| |/ / | | | | | | | | | Signed-off-by: Jason T. Greene <jason.greene@redhat.com>
* | | Merge pull request #13796 from n1hility/no-live-setOpenShift Merge Robot2022-04-07
|\ \ \ | |/ / |/| | Prevent set command from updating a running instance
| * | Prevent set command from updating a running instanceJason T. Greene2022-04-06
|/ / | | | | | | Signed-off-by: Jason T. Greene <jason.greene@redhat.com>
* | Merge pull request #13776 from ↵OpenShift Merge Robot2022-04-06
|\ \ | | | | | | | | | | | | containers/dependabot/go_modules/github.com/BurntSushi/toml-1.1.0 build(deps): bump github.com/BurntSushi/toml from 1.0.0 to 1.1.0
| * | build(deps): bump github.com/BurntSushi/toml from 1.0.0 to 1.1.0dependabot[bot]2022-04-05
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [github.com/BurntSushi/toml](https://github.com/BurntSushi/toml) from 1.0.0 to 1.1.0. - [Release notes](https://github.com/BurntSushi/toml/releases) - [Commits](https://github.com/BurntSushi/toml/compare/v1.0.0...v1.1.0) --- updated-dependencies: - dependency-name: github.com/BurntSushi/toml dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
* | | Merge pull request #13786 from patrycja-guzik/docu3OpenShift Merge Robot2022-04-06
|\ \ \ | | | | | | | | [CI:DOCS] Unify examples section across several man pages: pod rm/start/unpause
| * | | Unify examples section across several man pages: pod rm/start/unpausePatrycja Guzik2022-04-05
| | | | | | | | | | | | | | | | Signed-off-by: Patrycja Guzik <patrycja.k.guzik@gmail.com>
* | | | Merge pull request #13750 from baude/refactor3OpenShift Merge Robot2022-04-06
|\ \ \ \ | |_|/ / |/| | | machine refactor 3: add symlinks for sockets
| * | | machine refactor 3: add symlinks for socketsBrent Baude2022-04-05
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | to avoid errors on macos, we use symlinks to long socket names. Fixes: #12751 Fixes: #13609 Signed-off-by: Brent Baude <bbaude@redhat.com> [NO NEW TESTS NEEDED] Signed-off-by: Brent Baude <bbaude@redhat.com>
* | | Merge pull request #13771 from patrycja-guzik/docu3OpenShift Merge Robot2022-04-05
|\| | | | | | | | [CI:DOCS] Unify examples section across several man pages: init/kill
| * | Unify examples section across several man pages: init/killPatrycja Guzik2022-04-04
|/ / | | | | | | Signed-off-by: Patrycja Guzik <patrycja.k.guzik@gmail.com>
* | Merge pull request #13696 from Luap99/apiv2-netavarkOpenShift Merge Robot2022-04-04
|\ \ | | | | | | test/apiv2: support netavark
| * | test/apiv2: support netavarkPaul Holzinger2022-03-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Since netavark does not support dhcp yet we have to create a macvlan network with a static subnet. Since we do not use the network to run containers the actual subnet does not matter. Also stop hard coding the network id. Unlike the cni backend the netavark backend creates random ids that are not predictable. Signed-off-by: Paul Holzinger <pholzing@redhat.com>
* | | Merge pull request #13490 from gcalin/13266OpenShift Merge Robot2022-04-04
|\ \ \ | | | | | | | | pod logs enhancements: option to color logs
| * | | Add option for pod logs to display different colors per container.gcalin2022-03-29
| |/ / | | | | | | | | | | | | Signed-off-by: Krzysztof Baran <krysbaran@gmail.com> Signed-off-by: gcalin <caling@protonmail.com>
* | | Merge pull request #13765 from giuseppe/do-not-set-oom-score-adjOpenShift Merge Robot2022-04-04
|\ \ \ | | | | | | | | specgen: do not set OOMScoreAdj by default
| * | | specgen: do not set OOMScoreAdj by defaultGiuseppe Scrivano2022-04-04
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | do not force a value of OOMScoreAdj=0 if it is wasn't specified by the user. Closes: https://github.com/containers/podman/issues/13731 Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
* | | | Merge pull request #13724 from naveensrinivasan/naveen/feat/set-perms-actionsOpenShift Merge Robot2022-04-04
|\ \ \ \ | | | | | | | | | | [CI:DOCS] Set permissions for GitHub actions
| * \ \ \ Merge branch 'containers:main' into naveen/feat/set-perms-actionsNaveen2022-04-02
| |\ \ \ \
| * | | | | Set permissions for GitHub actionsnaveensrinivasan2022-03-30
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - Included permissions for the action. https://github.com/ossf/scorecard/blob/main/docs/checks.md#token-permissions https://docs.github.com/en/actions/using-jobs/assigning-permissions-to-jobs Signed-off-by: naveensrinivasan <172697+naveensrinivasan@users.noreply.github.com>
* | | | | | Merge pull request #13757 from andrewaylett/anonymous_volumesOpenShift Merge Robot2022-04-04
|\ \ \ \ \ \ | | | | | | | | | | | | | | Allow creating anonymous volumes with --mount
| * | | | | | Allow creating anonymous volumes with --mountAndrew Aylett2022-04-02
| | |/ / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes #13756. All the mechanics to create anonymous volumes is already present, but there's still a validation preventing that path from being taken. We remove the validation, which allows the volume to be created successfully. Signed-off-by: Andrew Aylett <andrew@aylett.co.uk>
* | | | | | Merge pull request #13655 from n1hility/dual-pipesOpenShift Merge Robot2022-04-04
|\ \ \ \ \ \ | | | | | | | | | | | | | | Prefer registering both machine and global pipe on Win
| * | | | | | Prefer registering both machine and global pipeJason T. Greene2022-03-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Jason T. Greene <jason.greene@redhat.com>
* | | | | | | Merge pull request #13739 from cevich/fix_build_pushOpenShift Merge Robot2022-04-04
|\ \ \ \ \ \ \ | |_|/ / / / / |/| | | | | | Fix multi-arch image build version-tag + allow testing in PRs
| * | | | | | Cirrus: Allow manually running image-build taskChris Evich2022-03-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Building multi-arch images in a standardized way is complex. Some of the builds themselves can take a really long time to run (over an hour). Make changes easier to test inside a PR by adding manually-triggered image-build tasks. These mirror most of the real cron-triggered task, without actually pushing the final images. Signed-off-by: Chris Evich <cevich@redhat.com>
| * | | | | | Cirrus: Upd VM images to fix multi-arch build bugChris Evich2022-03-31
| | |_|/ / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | Ref: https://github.com/containers/automation_images/pull/122 Signed-off-by: Chris Evich <cevich@redhat.com>