aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* make env handling os dependentBrent Baude2020-06-02
| | | | | | environment variables are handled differently on windows vs linux. here we split them to be handled but no actually processing of windows environment variables was done. it can be added for future. hoowever, now we dont get errors on windows about processing them. Signed-off-by: Brent Baude <bbaude@redhat.com>
* Merge pull request #6445 from ↵OpenShift Merge Robot2020-06-02
|\ | | | | | | | | containers/dependabot/go_modules/github.com/onsi/ginkgo-1.12.3 Bump github.com/onsi/ginkgo from 1.12.2 to 1.12.3
| * Bump github.com/onsi/ginkgo from 1.12.2 to 1.12.3dependabot-preview[bot]2020-06-02
| | | | | | | | | | | | | | | | | | | | Bumps [github.com/onsi/ginkgo](https://github.com/onsi/ginkgo) from 1.12.2 to 1.12.3. - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](https://github.com/onsi/ginkgo/compare/v1.12.2...v1.12.3) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* | Merge pull request #6463 from ↵OpenShift Merge Robot2020-06-02
|\ \ | | | | | | | | | | | | containers/dependabot/go_modules/github.com/coreos/go-systemd/v22-22.1.0 Bump github.com/coreos/go-systemd/v22 from 22.0.0 to 22.1.0
| * | Bump github.com/coreos/go-systemd/v22 from 22.0.0 to 22.1.0dependabot-preview[bot]2020-06-02
| | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [github.com/coreos/go-systemd/v22](https://github.com/coreos/go-systemd) from 22.0.0 to 22.1.0. - [Release notes](https://github.com/coreos/go-systemd/releases) - [Commits](https://github.com/coreos/go-systemd/compare/v22.0.0...v22.1.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* | | Merge pull request #6462 from ↵OpenShift Merge Robot2020-06-02
|\ \ \ | |_|/ |/| | | | | | | | containers/dependabot/go_modules/github.com/opencontainers/runc-1.0.0-rc90 Bump github.com/opencontainers/runc from 1.0.0-rc9 to 1.0.0-rc90
| * | Bump github.com/opencontainers/runc from 1.0.0-rc9 to 1.0.0-rc90dependabot-preview[bot]2020-06-02
| |/ | | | | | | | | | | | | | | | | Bumps [github.com/opencontainers/runc](https://github.com/opencontainers/runc) from 1.0.0-rc9 to 1.0.0-rc90. - [Release notes](https://github.com/opencontainers/runc/releases) - [Commits](https://github.com/opencontainers/runc/compare/v1.0.0-rc9...v1.0.0-rc90) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* | Merge pull request #6455 from rhatdan/detatchkeysOpenShift Merge Robot2020-06-02
|\ \ | | | | | | Add information on detach-keys
| * | Add information on detach-keysDaniel J Walsh2020-06-01
| | | | | | | | | | | | Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* | | Merge pull request #6411 from mheon/exec_bindingsOpenShift Merge Robot2020-06-02
|\ \ \ | | | | | | | | Add bindings for exec and enable attached remote exec
| * | | Add bindings for exec and enable attached remoteMatthew Heon2020-06-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This adds bindings for starting exec sessions, and then uses them to wire up detached exec. Code is heavily based on Attach code for containers, slightly modified to handle exec sessions. Bindings are presently attached-only, detached is pending on a Conmon update landing in CI. I'll probably get to that next. Signed-off-by: Matthew Heon <matthew.heon@pm.me>
* | | | Merge pull request #6443 from SCHEN2015/combine_ro_readonlyOpenShift Merge Robot2020-06-02
|\ \ \ \ | |_|_|/ |/| | | Combine the code of dealing with 'readonly' and 'ro'.
| * | | Combine the code of dealing with 'readonly' and 'ro'.Charles Shih2020-06-02
|/ / / | | | | | | | | | | | | | | | https://github.com/containers/libpod/pull/6380#discussion_r432391376 Signed-off-by: Charles Shih <schrht@gmail.com>
* | | Merge pull request #6456 from edsantiago/batsOpenShift Merge Robot2020-06-01
|\ \ \ | | | | | | | | system tests : more tests
| * | | system tests : more testsEd Santiago2020-06-01
| | |/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | - exec: add test for #5046, in which conmon swallowed chars on a large byte transfer - pod: add 'pod exists' tests, both positive and negative; consolidate tests; add '--label', and check in 'pod inspect' add 'pod ps' tests - networking: add test for #5466, in which detached run with --userns=keep-id would not forward a port Signed-off-by: Ed Santiago <santiago@redhat.com>
* | | Merge pull request #6350 from rhatdan/buildOpenShift Merge Robot2020-06-01
|\ \ \ | | | | | | | | Don't build code on remoteclient
| * | | Don't build code on remoteclientDaniel J Walsh2020-05-29
| | | | | | | | | | | | | | | | Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* | | | Merge pull request #6453 from jwhonce/wip/errorsOpenShift Merge Robot2020-06-01
|\ \ \ \ | | | | | | | | | | Add invalid value to error message
| * | | | Add invalid value to error messageJhon Honce2020-06-01
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Jhon Honce <jhonce@redhat.com>
* | | | | Merge pull request #6454 from rhatdan/remoteOpenShift Merge Robot2020-06-01
|\ \ \ \ \ | |_|_|/ / |/| | | | Remove skipifremote checks in images_test.go
| * | | | turn on remote testing for images. podman-remote build now works.Daniel J Walsh2020-06-01
| |/ / / | | | | | | | | | | | | Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* | | | Merge pull request #6449 from baude/v2podlabelsOpenShift Merge Robot2020-06-01
|\ \ \ \ | |/ / / |/| | / | | |/ | |/| Add support for format {{.Label}}
| * | Add support for format {{.Label}}Brent Baude2020-06-01
|/ / | | | | | | | | | | | | | | the pod ps man page says .Label is valid go template format. i dont think the function was actually ever implemented. Fixes #6448 Signed-off-by: Brent Baude <bbaude@redhat.com>
* | Merge pull request #6447 from baude/v2apitarleakOpenShift Merge Robot2020-06-01
|\ \ | | | | | | Fix leak of empty tarball
| * | Fix leak of empty tarballBrent Baude2020-06-01
| | | | | | | | | | | | | | | | | | | | | | | | In cases of trying to export an image, if the image was not found, we leaked an empty tarball or directory depending on the format. Fixes: #6409 Signed-off-by: Brent Baude <bbaude@redhat.com>
* | | Merge pull request #6438 from rhatdan/manOpenShift Merge Robot2020-06-01
|\ \ \ | |/ / |/| | [CI:DOCS] Update man pages for --ip with CNI networks
| * | Update man pages for --ip with CNI networksMatthew Heon2020-05-31
| | | | | | | | | | | | | | | | | | | | | | | | | | | Originally, we did not allow this, and the manpage reflects that. We added support with 1.7.0, but did not update the manpage. Fix the manpages so they are once again accurate. Signed-off-by: Matthew Heon <mheon@redhat.com> Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* | | Merge pull request #6353 from lsm5/build-without-varlinkOpenShift Merge Robot2020-06-01
|\ \ \ | | | | | | | | enable building without `varlink` tag
| * | | default build without `varlink` tagLokesh Mandvekar2020-05-29
| |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Issue gh#6286 was already fixed in a prior commit but the Makefile still ran some varlink steps by default. This commit makes any varlink build steps dependent on the varlink build tag and also makes the contrib rpm spec file independent of varlink. Endpoint tests will be run only if BUILDTAGS contains varlink. Signed-off-by: Lokesh Mandvekar <lsm5@fedoraproject.org>
* | | Merge pull request #6441 from TomSweeneyRedHat/dev/tsweeney/fixtuthttpdOpenShift Merge Robot2020-05-31
|\ \ \ | | | | | | | | [CI:DOCS] update httpd location in tutorial
| * | | [CI:DOCS] update httpd location in tutorialTomSweeneyRedHat2020-05-30
|/ / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Update the reference to the httpd in the Podman tutorial. This just bumps it to F29 for now to get things working, I'd prefer to get something set up in quay.io to make it more resistant to Fedora version changes. Fixes: #6439 Signed-off-by: TomSweeneyRedHat <tsweeney@redhat.com>
* | | Merge pull request #5594 from edsantiago/batsOpenShift Merge Robot2020-05-30
|\ \ \ | | | | | | | | system tests: enable skopeo REGISTRY_AUTH_FILE
| * | | system tests: enable skopeo REGISTRY_AUTH_FILEEd Santiago2020-04-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | skopeo pr #829 adds REGISTRY_AUTH_FILE support; this lets us enable the following test: podman login - shares credentials with skopeo - via envariable (I seriously doubt that the CI VMs have been updated with the new skopeo, but I can leave this PR in limbo until that happens. Otherwise I'll forget to enable the test). Signed-off-by: Ed Santiago <santiago@redhat.com>
* | | | Merge pull request #6165 from ↵OpenShift Merge Robot2020-05-30
|\ \ \ \ | | | | | | | | | | | | | | | | | | | | containers/dependabot/go_modules/github.com/rootless-containers/rootlesskit-0.9.5 Bump github.com/rootless-containers/rootlesskit from 0.9.4 to 0.9.5
| * | | | Bump github.com/rootless-containers/rootlesskit from 0.9.4 to 0.9.5Daniel J Walsh2020-05-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [github.com/rootless-containers/rootlesskit](https://github.com/rootless-containers/rootlesskit) from 0.9.4 to 0.9.5. - [Release notes](https://github.com/rootless-containers/rootlesskit/releases) - [Commits](rootless-containers/rootlesskit@v0.9.4...v0.9.5) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* | | | | Merge pull request #6356 from baude/v2copyendpointsOpenShift Merge Robot2020-05-30
|\ \ \ \ \ | |_|_|/ / |/| | | | v2 copy endpoints
| * | | | v2 copy endpointsBrent Baude2020-05-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | add copy endpoint inputs and outputs. these endpoints are not implemented yet, nor are any bindings. this allows us to update this later without having to change our api version. Signed-off-by: Brent Baude <bbaude@redhat.com>
* | | | | Merge pull request #6432 from mheon/bump-2.0.0-rc3OpenShift Merge Robot2020-05-29
|\ \ \ \ \ | | | | | | | | | | | | Bump to v2.0.0-RC3
| * | | | | Bump to v2.0.0-devMatthew Heon2020-05-29
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Matthew Heon <mheon@redhat.com>
| * | | | | Bump to v2.0.0-rc3v2.0.0-rc3Matthew Heon2020-05-29
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Matthew Heon <mheon@redhat.com>
* | | | | | Merge pull request #6207 from vrothberg/auth-headerOpenShift Merge Robot2020-05-29
|\ \ \ \ \ \ | |/ / / / / |/| | | | | add X-Registry-Auth header support
| * | | | | compat handlers: add X-Registry-Auth header supportValentin Rothberg2020-05-29
|/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Support the `X-Registry-Auth` http-request header. * The content of the header is a base64 encoded JSON payload which can either be a single auth config or a map of auth configs (user+pw or token) with the corresponding registries being the keys. Vanilla Docker, projectatomic Docker and the bindings are transparantly supported. * Add a hidden `--registries-conf` flag. Buildah exposes the same flag, mostly for testing purposes. * Do all credential parsing in the client (i.e., `cmd/podman`) pass the username and password in the backend instead of unparsed credentials. * Add a `pkg/auth` which handles most of the heavy lifting. * Go through the authentication-handling code of most commands, bindings and endpoints. Migrate them to the new code and fix issues as seen. A final evaluation and more tests is still required *after* this change. * The manifest-push endpoint is missing certain parameters and should use the ABI function instead. Adding auth-support isn't really possible without these parts working. * The container commands and endpoints (i.e., create and run) have not been changed yet. The APIs don't yet account for the authfile. * Add authentication tests to `pkg/bindings`. Fixes: #6384 Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
* | | | | Merge pull request #6380 from mheon/fix_mount_readonlyOpenShift Merge Robot2020-05-29
|\ \ \ \ \ | | | | | | | | | | | | Add support for `readonly` option to --mount
| * | | | | Add support for `readonly` option to --mountMatthew Heon2020-05-26
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is just an alias to the `ro` option, but it's already in the manpages (and Docker) so we might as well add support for it. Fixes #6379 Signed-off-by: Matthew Heon <matthew.heon@pm.me>
* | | | | | Merge pull request #6429 from ↵OpenShift Merge Robot2020-05-29
|\ \ \ \ \ \ | |_|_|_|_|/ |/| | | | | | | | | | | | | | | | | containers/dependabot/go_modules/github.com/stretchr/testify-1.6.0 Bump github.com/stretchr/testify from 1.5.1 to 1.6.0
| * | | | | Bump github.com/stretchr/testify from 1.5.1 to 1.6.0dependabot-preview[bot]2020-05-29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.5.1 to 1.6.0. - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](https://github.com/stretchr/testify/compare/v1.5.1...v1.6.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* | | | | | Merge pull request #6419 from mheon/signal_parse_windowsOpenShift Merge Robot2020-05-29
|\ \ \ \ \ \ | | | | | | | | | | | | | | Ensure that signal names can be parsed on Windows
| * | | | | | Ensure that signal names can be parsed on WindowsMatthew Heon2020-05-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | To ensure the Windows and OS X remote clients can properly parse container stop signal (when given as a name e.g. SIGTERM) and set it in SpecGen, we need access to a list of Linux signal names and the numbers they map to that is available on non-Linux OSes. Fortunately, these are ABI constants that are extremely unlikely to change, so we can just take the existing constant definitions from the library and use them. The signal numbers used here are sourced from AMD64, but should be the same for every architecture that is not Alpha, SPARC, MIPS, and PA-RISC. So `podman run --stop-signal SIGTTOU` from a Windows client to a Podman service on a SPARC host will set an incorrect stop signal, but I don't think this is a large problem. Signed-off-by: Matthew Heon <mheon@redhat.com>
* | | | | | | Merge pull request #6423 from rhatdan/VENDOROpenShift Merge Robot2020-05-29
|\ \ \ \ \ \ \ | |_|/ / / / / |/| | | | | | Vendor in containers/common v0.12.0
| * | | | | | Vendor in containers/common v0.12.0Daniel J Walsh2020-05-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>