aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
| * | | | | | secrets: fix fips-mode with user namespacesGiuseppe Scrivano2019-02-27
| | |/ / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When using a user namespace, we create the mount point under `mountPrefix` so that the uid != 0 can access that directory. Change the addFIPSModeSecret code to honor that, and also ensure we are creating the directories with the right ownership. Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
* | | | | | Merge pull request #2475 from edsantiago/podman_create_interspersedOpenShift Merge Robot2019-02-27
|\ \ \ \ \ \ | | | | | | | | | | | | | | podman create: disable interspersed opts
| * | | | | | podman create: disable interspersed optsEd Santiago2019-02-27
| |/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | With the change to cobra, the following command fails: # podman create alpine sh -c /bin/true Error: unknown shorthand flag: 'c' in -c (Correct behavior is to pass '-c' to the container command) This PR corrects that. Signed-off-by: Ed Santiago <santiago@redhat.com>
* | | | | | Merge pull request #2463 from edsantiago/missed_some_synopsesOpenShift Merge Robot2019-02-27
|\ \ \ \ \ \ | |_|_|_|_|/ |/| | | | | Followup to #2456: update examples, add trust
| * | | | | fixup! Incorporate review feedbackEd Santiago2019-02-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Per tsweeney, add back the original examples Signed-off-by: Ed Santiago <santiago@redhat.com>
| * | | | | fixup! missed some more:Ed Santiago2019-02-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - [flags] in generate-kube - optional [IMAGE] in images Signed-off-by: Ed Santiago <santiago@redhat.com>
| * | | | | fixup! Correction to 'checkpoint'Ed Santiago2019-02-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | ...it's a subcommand of 'podman container' Signed-off-by: Ed Santiago <santiago@redhat.com>
| * | | | | Followup to #2456: update examples, add trustEd Santiago2019-02-27
|/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - belatedly incorporate review feedback from baude - add usage synopsis for trust-set and trust-show Signed-off-by: Ed Santiago <santiago@redhat.com>
* | | | | Merge pull request #2471 from baude/clifixupsOpenShift Merge Robot2019-02-27
|\ \ \ \ \ | | | | | | | | | | | | fix up a number of misplace commands
| * | | | | fix up a number of misplace commandsbaude2019-02-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * ps now on main command * sign is no longer on main commmand * ls, list no longer are valid main aliases for images * ls, list does work for podman image Signed-off-by: baude <bbaude@redhat.com>
* | | | | | Merge pull request #2464 from mheon/build_test_no_varlinkOpenShift Merge Robot2019-02-27
|\ \ \ \ \ \ | |_|/ / / / |/| | | | | Add a task to Cirrus gating to build w/o Varlink
| * | | | | Add a task to Cirrus gating to build w/o VarlinkMatthew Heon2019-02-27
|/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We had a regression on master where we broke the build for non-Varlink builds. Catch this in CI in the future. Signed-off-by: Matthew Heon <matthew.heon@pm.me>
* | | | | Merge pull request #2465 from mheon/fix_build_varlinkOpenShift Merge Robot2019-02-27
|\ \ \ \ \ | |/ / / / |/| | | | Fix build for non-Varlink-tagged Podman
| * | | | Fix build for non-Varlink-tagged PodmanMatthew Heon2019-02-27
| |/ / / | | | | | | | | | | | | | | | | | | | | Fixes #2459 Signed-off-by: Matthew Heon <matthew.heon@pm.me>
* | | | Merge pull request #2431 from baude/remotereadmeOpenShift Merge Robot2019-02-27
|\ \ \ \ | |/ / / |/| | | podman remote-client readme
| * | | podman remote-client readmebaude2019-02-26
| | | | | | | | | | | | | | | | | | | | | | | | addition of a remote-client readme. Signed-off-by: baude <bbaude@redhat.com>
* | | | Merge pull request #2454 from mheon/all_your_defaults_belong_to_libpodOpenShift Merge Robot2019-02-27
|\ \ \ \ | | | | | | | | | | Move all storage configuration defaults into libpod
| * | | | Centralize setting default volume pathMatthew Heon2019-02-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | No reason to do it in util/ anymore. It's always going to be a subdirectory of c/storage graph root by default, so we can just set it after the return. Signed-off-by: Matthew Heon <matthew.heon@pm.me>
| * | | | Ensure volume path is set appropriately by defaultMatthew Heon2019-02-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | There are some cases where we might not be properly adjusting the volume path after setting the storage graph root. Ensure that we always set volume path to be a child of graph root. Signed-off-by: Matthew Heon <matthew.heon@pm.me>
| * | | | Move all storage configuration defaults into libpodMatthew Heon2019-02-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Instead of passing in defaults via WithStorageConfig after computing them in cmd/podman/libpodruntime, do all defaults in libpod itself. This can alleviate ordering issues which caused settings in the libpod config (most notably, volume path) to be ignored. Signed-off-by: Matthew Heon <matthew.heon@pm.me>
* | | | | Merge pull request #2456 from edsantiago/better_synopsesOpenShift Merge Robot2019-02-27
|\ \ \ \ \ | | | | | | | | | | | | Better usage synopses for subcommands
| * | | | | Better usage synopses for subcommandsEd Santiago2019-02-26
| |/ / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conceptually simple: include, where applicable, a brief description of command-line options for each subcommand. Signed-off-by: Ed Santiago <santiago@redhat.com>
* | | | | Merge pull request #2460 from adrianreber/restoreOpenShift Merge Robot2019-02-27
|\ \ \ \ \ | |_|_|/ / |/| | | | Remove restore as podman subcommand
| * | | | Remove restore as podman subcommandAdrian Reber2019-02-27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The commands checkpoint and restore should only be available under 'podman container'. This is probably a result of the recent cobra migration. Signed-off-by: Adrian Reber <areber@redhat.com>
* | | | | Merge pull request #2458 from mheon/bump-1.1.0OpenShift Merge Robot2019-02-27
|\ \ \ \ \ | | | | | | | | | | | | Bump to 1.1.0
| * | | | | Bump gitvalidation epochMatthew Heon2019-02-26
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Matthew Heon <matthew.heon@pm.me>
| * | | | | Bump to v1.2.0-devMatthew Heon2019-02-26
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Matthew Heon <matthew.heon@pm.me>
| * | | | | Bump to v1.1.0v1.1.0Matthew Heon2019-02-26
|/ / / / / | | | | | | | | | | | | | | | Signed-off-by: Matthew Heon <matthew.heon@pm.me>
* | | | | Merge pull request #2434 from mheon/release_notes_v1.1OpenShift Merge Robot2019-02-26
|\ \ \ \ \ | | | | | | | | | | | | Update release notes for v1.1.0
| * | | | | Update release notes for v1.1.0Matthew Heon2019-02-26
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Matthew Heon <matthew.heon@pm.me>
* | | | | | Merge pull request #2440 from rhatdan/buildahOpenShift Merge Robot2019-02-26
|\ \ \ \ \ \ | |_|_|/ / / |/| | | | | Vendor in buildah v1.7.1
| * | | | | Vendor in latest buildah 1.7.1Daniel J Walsh2019-02-26
|/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This release updates buildah to use containers/image v1.5 Which fixes a crash issue when pulling container images. Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* | | | | Merge pull request #2448 from giuseppe/volumes-skip-user-bindsOpenShift Merge Robot2019-02-26
|\ \ \ \ \ | | | | | | | | | | | | volume: do not create a volume if there is a bind
| * | | | | volume: do not create a volume if there is a bindGiuseppe Scrivano2019-02-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | if there is already a bind mount specified for the target, do not create a new volume. Regression introduced by 52df1fa7e054d577e8416d1d46db1741ad324d4a Closes: https://github.com/containers/libpod/issues/2441 Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
* | | | | | Merge pull request #2446 from mheon/add_image_volumeOpenShift Merge Robot2019-02-26
|\ \ \ \ \ \ | |_|_|_|_|/ |/| | | | | Only remove image volumes when removing containers
| * | | | | Only remove image volumes when removing containersMatthew Heon2019-02-26
| | |_|/ / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When removing volumes with rm --volumes we want to only remove volumes that were created with the container. Volumes created separately via 'podman volume create' should not be removed. Also ensure that --rm implies volumes will be removed. Fixes #2441 Signed-off-by: Matthew Heon <matthew.heon@pm.me>
* | | | | Merge pull request #2443 from baude/playstartrecursiveOpenShift Merge Robot2019-02-26
|\ \ \ \ \ | | | | | | | | | | | | start pod containers recursively
| * | | | | start pod containers recursivelybaude2019-02-26
| | |_|_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | when using the play kube command, we need to make sure that containers with dependancies are started in proper order. in this case, the infra container must be started first. Signed-off-by: baude <bbaude@redhat.com>
* | | | | Merge pull request #2444 from adrianreber/logsOpenShift Merge Robot2019-02-26
|\ \ \ \ \ | |_|/ / / |/| | | | Fix podman logs -l
| * | | | Fix podman logs -lAdrian Reber2019-02-26
|/ / / / | | | | | | | | | | | | | | | | | | | | | | | | 'podman logs -l' was no longer working. This fixes it by replacing &waitCommand.Latest with &logsCommand.Latest. Signed-off-by: Adrian Reber <areber@redhat.com>
* | | | Merge pull request #2439 from vrothberg/vendor-imageOpenShift Merge Robot2019-02-26
|\ \ \ \ | | | | | | | | | | vendor containers/image v1.5
| * | | | vendor containers/image v1.5Valentin Rothberg2019-02-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fixes are race condition in the blobinfocache when copying images leading to a panic(). Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
* | | | | Merge pull request #2397 from mheon/volume_path_fixesOpenShift Merge Robot2019-02-26
|\ \ \ \ \ | |_|/ / / |/| | | | Volume path fixes
| * | | | Record when volume path is explicitly set in configMatthew Heon2019-02-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This ensures we won't overwrite it when it's set in the config we load from disk. Signed-off-by: Matthew Heon <matthew.heon@pm.me>
| * | | | Add debug information when overriding paths with the DBMatthew Heon2019-02-26
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Matthew Heon <matthew.heon@pm.me>
| * | | | Add path for named volumes to `podman info`Matthew Heon2019-02-26
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Matthew Heon <matthew.heon@pm.me>
| * | | | Add volume path to default libpod.conf (and manpage)Matthew Heon2019-02-26
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Matthew Heon <matthew.heon@pm.me>
| * | | | Validate VolumePath against DB configurationMatthew Heon2019-02-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | If this doesn't match, we end up not being able to access named volumes mounted into containers, which is bad. Use the same validation that we use for other critical paths to ensure this one also matches. Signed-off-by: Matthew Heon <matthew.heon@pm.me>
| * | | | When location of c/storage root changes, set VolumePathMatthew Heon2019-02-26
| |/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | We want named volumes to be created in a subdirectory of the c/storage graph root, the same as the libpod root directory is now. As such, we need to adjust its location when the graph root changes location. Also, make a change to how we set the default. There's no need to explicitly set it every time we initialize via an option - that might conflict with WithStorageConfig setting it based on graph root changes. Instead, just initialize it in the default config like our other settings. Signed-off-by: Matthew Heon <matthew.heon@pm.me>
* | | | Merge pull request #2289 from 4383/improve-hackingDaniel J Walsh2019-02-26
|\ \ \ \ | |/ / / |/| | | [skip ci]Introduce how to start to hack on libpod.