summaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* Merge pull request #3639 from giuseppe/user-ns-containerOpenShift Merge Robot2019-07-26
|\ | | | | podman: support --userns=ns|container
| * podman: support --userns=ns|containerGiuseppe Scrivano2019-07-25
| | | | | | | | | | | | | | | | allow to join the user namespace of another container. Closes: https://github.com/containers/libpod/issues/3629 Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
| * pods: do not to join a userns if there is not anyGiuseppe Scrivano2019-07-25
| | | | | | | | | | | | | | do not attempt to join the user namespace if the pod is running in the host user namespace. Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
* | Merge pull request #3632 from cevich/small_cirrus_fixesOpenShift Merge Robot2019-07-26
|\ \ | | | | | | Small cirrus and image-build fixes
| * | Cirrus: Bypass release during image-buildingChris Evich2019-07-25
| | | | | | | | | | | | Signed-off-by: Chris Evich <cevich@redhat.com>
| * | Cirrus: Ubuntu: Set + Test for $RUNC_BINARYChris Evich2019-07-25
| | | | | | | | | | | | Signed-off-by: Chris Evich <cevich@redhat.com>
| * | Cirrus: Simplify evil-unit check in imageChris Evich2019-07-25
| | | | | | | | | | | | Signed-off-by: Chris Evich <cevich@redhat.com>
| * | Cirrus: Silence systemd-banish noiseChris Evich2019-07-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It's somewhat hard to predict which units are certinly present for any given base-image. Therefore, at image-build time, it's distracting and unhelpful to see all the errors about units that don't exist, on every platform. Simply ignore them and rely on the `check_image.sh` test to confirm none are enabled. Signed-off-by: Chris Evich <cevich@redhat.com>
| * | Cirrus: Fix image build metadata updateChris Evich2019-07-25
| | | | | | | | | | | | Signed-off-by: Chris Evich <cevich@redhat.com>
| * | Cirrus: Fix missing -n on CentOSChris Evich2019-07-25
| | | | | | | | | | | | Signed-off-by: Chris Evich <cevich@redhat.com>
| * | Cirrus: Remove disused COMMIT variablesChris Evich2019-07-25
| | | | | | | | | | | | Signed-off-by: Chris Evich <cevich@redhat.com>
* | | Merge pull request #3627 from ashley-cui/rmdocsOpenShift Merge Robot2019-07-26
|\ \ \ | | | | | | | | Documenation & make tar.gz for remote
| * | | Documenation & build automation for remote darwinAshley Cui2019-07-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Created shell script to automatically compile remote-only docs & rename Added make brew-pkg to automatically package files needed for homebrew Add missing docs Signed-off-by: Ashley Cui <ashleycui16@gmail.com>
* | | | Merge pull request #3645 from mheon/systemd_ubuntuOpenShift Merge Robot2019-07-26
|\ \ \ \ | | | | | | | | | | Use systemd cgroups for Ubuntu
| * | | | Use systemd cgroups for UbuntuMatthew Heon2019-07-25
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It seems like our VM images now support systemd CGroups with the Ubuntu LTS images. No reason to keep testing CGroupfs as such, systemd is much less racy (and CGroupfs on systemd-enabled systems can be iffy). Signed-off-by: Matthew Heon <mheon@redhat.com>
* | | | | Merge pull request #3580 from samc24/hookOpenShift Merge Robot2019-07-26
|\ \ \ \ \ | |_|_|/ / |/| | | | Improved hooks monitoring
| * | | | Improved hooks monitoringsamc242019-07-25
| | |_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ...to work for specific edge cases with a simpler solution. Re-reads hooks directories after any changes are detected by the watchers. Added monitoring test for adding a different invalid hook to primary directory. Some issues with prior code: - ReadDir would stop when it encounters an invalid hook, rather than registering an error but continuing to read the valid hook. - Wouldn’t account for Rename and Chmod events. - After doing a mv of the hooks file instead of rm, it would still think the hooks file is in the directory, but it has been moved to another location. - If a hook file was renamed, it would register the renamed file as a separate hook and not delete the original, so it would then execute the hook twice - once for the renamed file, and once for the original name which it did not delete. Signed-off-by: samc24 <sam.chaturvedi24@gmail.com>
* | | | Merge pull request #3643 from openSUSE/history-panicOpenShift Merge Robot2019-07-25
|\ \ \ \ | |_|/ / |/| | | Fix possible runtime panic if image history len is zero
| * | | Fix possible runtime panic if image history len is zeroSascha Grunert2019-07-25
| |/ / | | | | | | | | | | | | | | | | | | We now return an empty string for the `Comment` field if an OCI v1 image contains no history. Signed-off-by: Sascha Grunert <sgrunert@suse.com>
* | | Merge pull request #3631 from TristanCacqueray/masterOpenShift Merge Robot2019-07-25
|\ \ \ | | | | | | | | Document SELinux label requirements for the rootfs argument
| * | | Document SELinux label requirements for the rootfs argumentTristan Cacqueray2019-07-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When using the rootfs argument, SELinux systems fails silently when the files are not properly labeled. Related #3628 Signed-off-by: Tristan Cacqueray <tdecacqu@redhat.com>
* | | | Merge pull request #3622 from QiWang19/checkurlOpenShift Merge Robot2019-07-25
|\ \ \ \ | |_|/ / |/| | | fix import not ignoring url path
| * | | fix import not ignoring url pathQi Wang2019-07-24
| | | | | | | | | | | | | | | | | | | | | | | | | | | | fix #3609 Podman import used to check filename to only allow tarball path as a file. It should also allow an url as the doc mentioned. This PR allows the program to continue if the input is a valid URL Signed-off-by: Qi Wang <qiwan@redhat.com>
* | | | Merge pull request #3641 from mheon/no_fuzzy_volume_lookupOpenShift Merge Robot2019-07-25
|\ \ \ \ | |/ / / |/| | | When retrieving volumes, only use exact names
| * | | When retrieving volumes, only use exact namesMatthew Heon2019-07-24
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | We should not be fuzzy matching on volume names. Docker doesn't do it, and it doesn't make much sense. Everything requires exact matches for names - only IDs allow partial matches. Fixes #3635 Signed-off-by: Matthew Heon <matthew.heon@pm.me>
* | | Merge pull request #3626 from mheon/fix_ps_segfaultOpenShift Merge Robot2019-07-24
|\ \ \ | |/ / |/| | Fix a segfault on Podman no-store commands with refresh
| * | Fix a segfault on Podman no-store commands with refreshMatthew Heon2019-07-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When a command (like `ps`) requests no store be created, but also requires a refresh be performed, we have to ignore its request and initialize the store anyways to prevent segfaults. This work was done in #3532, but that missed one thing - initializing a storage service. Without the storage service, Podman will still segfault. Fix that oversight here. Fixes #3625 Signed-off-by: Matthew Heon <mheon@redhat.com>
* | | Merge pull request #3615 from vrothberg/build-tagsOpenShift Merge Robot2019-07-24
|\ \ \ | | | | | | | | install.md: mention all build tags
| * | | install.md: mention all build tagsValentin Rothberg2019-07-23
| | | | | | | | | | | | | | | | Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
* | | | Merge pull request #3624 from haircommander/conmon-exec-with-remote-execOpenShift Merge Robot2019-07-24
|\ \ \ \ | | | | | | | | | | Add remote exec
| * | | | refactor to reduce duplicated error parsingPeter Hunt2019-07-23
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Peter Hunt <pehunt@redhat.com>
| * | | | remove debug printsPeter Hunt2019-07-23
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Peter Hunt <pehunt@redhat.com>
| * | | | always send generic error in case io failsPeter Hunt2019-07-23
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Peter Hunt <pehunt@redhat.com>
| * | | | only use stdin if specifiedPeter Hunt2019-07-23
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Peter Hunt <pehunt@redhat.com>
| * | | | buffer errChanPeter Hunt2019-07-23
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Peter Hunt <pehunt@redhat.com>
| * | | | move handleTerminalAttach to generic buildPeter Hunt2019-07-23
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Peter Hunt <pehunt@redhat.com>
| * | | | remove unnecessary conversionsPeter Hunt2019-07-23
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Peter Hunt <pehunt@redhat.com>
| * | | | add detach keys support for remotePeter Hunt2019-07-23
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Peter Hunt <pehunt@redhat.com>
| * | | | move editing of exitCode to runtimePeter Hunt2019-07-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | There's no way to get the error if we successfully get an exit code (as it's just printed to stderr instead). instead of relying on the error to be passed to podman, and edit based on the error code, process it on the varlink side instead Also move error codes to define package Signed-off-by: Peter Hunt <pehunt@redhat.com>
| * | | | Update e2e tests for remote execPeter Hunt2019-07-23
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | including changing -l to the container id and separating a case of setting the env that remote can't handle Signed-off-by: Peter Hunt <pehunt@redhat.com>
| * | | | Finish up remote exec implementationPeter Hunt2019-07-23
| | |/ / | |/| | | | | | | | | | Signed-off-by: Peter Hunt <pehunt@redhat.com>
* | | | Merge pull request #3633 from QiWang19/networkOpenShift Merge Robot2019-07-24
|\ \ \ \ | | | | | | | | | | fix build --network=container
| * | | | fix build --network=containerQi Wang2019-07-23
| | |_|/ | |/| | | | | | | | | | Signed-off-by: Qi Wang <qiwan@redhat.com>
* | | | Merge pull request #3638 from hooksie1/issue-#3577OpenShift Merge Robot2019-07-24
|\ \ \ \ | | | | | | | | | | Fixes issue #3577.
| * | | | Fixes issue #3577.John Hooks2019-07-23
| |/ / / | | | | | | | | | | | | | | | | | | | | Fix punctuation and wording in some places. Signed-off-by: John Hooks <hooksie11@gmail.com>
* | | | Merge pull request #3634 from mheon/fix_32bitOpenShift Merge Robot2019-07-24
|\ \ \ \ | |/ / / |/| | | Re-add int64 casts for ctime to fix 32-bit build
| * | | Re-add int64 casts for ctimeMatthew Heon2019-07-23
| |/ / | | | | | | | | | | | | | | | | | | | | | | | | The variables here are 64-bit on 64-bit builds, so the linter recommends stripping them. Unfortunately, they're 32-bit on 32-bit builds, so stripping them breaks that. Readd with a nolint to convince it to not break. Signed-off-by: Matthew Heon <mheon@redhat.com>
* | | Merge pull request #3619 from cevich/workaround_missing_iamgeOpenShift Merge Robot2019-07-23
|\ \ \ | |/ / |/| | Cirrus: Temp. workaround missing imgprune image
| * | Cirrus: Temp. workaround missing imgprune imageChris Evich2019-07-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The 'image_prune' task only runs on master, post-merge and is currently failing for all builds. This is because it references a non-existent image. The person with access to add/enable this image is on PTO. Fix this by temporarily using a hand-built image until an automatic build can be added. Signed-off-by: Chris Evich <cevich@redhat.com>
* | | Merge pull request #3630 from baude/golangcilint5OpenShift Merge Robot2019-07-23
|\ \ \ | | | | | | | | golangci-lint cleanup