aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
* apparmor: allow receiving of signals from 'podman kill'Sascha Grunert2020-01-24
| | | | | | | | In newer kernels, AppArmor will reject attempts to send signals to a container because the signal originated from outside of that AppArmor profile. Correct this by allowing all unconfined signals to be received. Signed-off-by: Sascha Grunert <sgrunert@suse.com>
* Merge pull request #4953 from baude/reviewcorrections2OpenShift Merge Robot2020-01-23
|\ | | | | Review corrections pass #2
| * Review corrections pass #2Brent Baude2020-01-23
| | | | | | | | | | | | Add API review comments to correct documentation and endpoints. Also, add a libpode prune method to reduce code duplication. Only used right now for the API but when the remote client is wired, we will switch over there too. Signed-off-by: Brent Baude <bbaude@redhat.com>
* | Merge pull request #4948 from vrothberg/seccomp-labelOpenShift Merge Robot2020-01-23
|\ \ | | | | | | seccomp policy: expect profile in config label
| * | seccomp policy: expect profile in config labelValentin Rothberg2020-01-23
| | | | | | | | | | | | | | | | | | | | | | | | Move the seccomp profile from a manifest annotation to a config label. This way, we can support it for Docker images as well and provide an easy way to add that data via Dockerfiles. Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
* | | Merge pull request #4939 from ↵OpenShift Merge Robot2020-01-23
|\ \ \ | | | | | | | | | | | | | | | | containers/dependabot/go_modules/github.com/pkg/errors-0.9.1 build(deps): bump github.com/pkg/errors from 0.9.0 to 0.9.1
| * | | build(deps): bump github.com/pkg/errors from 0.9.0 to 0.9.1dependabot-preview[bot]2020-01-23
| |/ / | | | | | | | | | | | | | | | | | | | | | | | | Bumps [github.com/pkg/errors](https://github.com/pkg/errors) from 0.9.0 to 0.9.1. - [Release notes](https://github.com/pkg/errors/releases) - [Commits](https://github.com/pkg/errors/compare/v0.9.0...v0.9.1) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Signed-off-by: Matthew Heon <mheon@redhat.com>
* | | Merge pull request #4949 from ↵OpenShift Merge Robot2020-01-23
|\ \ \ | | | | | | | | | | | | | | | | containers/dependabot/go_modules/github.com/containers/conmon-2.0.10+incompatible build(deps): bump github.com/containers/conmon from 2.0.9+incompatible to 2.0.10+incompatible
| * | | build(deps): bump github.com/containers/conmondependabot-preview[bot]2020-01-23
| |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [github.com/containers/conmon](https://github.com/containers/conmon) from 2.0.9+incompatible to 2.0.10+incompatible. - [Release notes](https://github.com/containers/conmon/releases) - [Changelog](https://github.com/containers/conmon/blob/master/changelog.txt) - [Commits](https://github.com/containers/conmon/compare/v2.0.9...v2.0.10) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Signed-off-by: Matthew Heon <mheon@redhat.com>
* | | Merge pull request #4947 from ↵OpenShift Merge Robot2020-01-23
|\ \ \ | | | | | | | | | | | | | | | | containers/dependabot/go_modules/github.com/containers/storage-1.15.7 build(deps): bump github.com/containers/storage from 1.15.5 to 1.15.7
| * | | build(deps): bump github.com/containers/storage from 1.15.5 to 1.15.7dependabot-preview[bot]2020-01-23
| |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [github.com/containers/storage](https://github.com/containers/storage) from 1.15.5 to 1.15.7. - [Release notes](https://github.com/containers/storage/releases) - [Changelog](https://github.com/containers/storage/blob/master/docs/containers-storage-changes.md) - [Commits](https://github.com/containers/storage/compare/v1.15.5...v1.15.7) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Signed-off-by: Matthew Heon <mheon@redhat.com>
* | | Merge pull request #4946 from ↵OpenShift Merge Robot2020-01-23
|\ \ \ | | | | | | | | | | | | | | | | containers/dependabot/go_modules/github.com/vishvananda/netlink-1.1.0 build(deps): bump github.com/vishvananda/netlink from 1.0.0 to 1.1.0
| * | | build(deps): bump github.com/vishvananda/netlink from 1.0.0 to 1.1.0dependabot-preview[bot]2020-01-23
| |/ / | | | | | | | | | | | | | | | | | | | | | | | | Bumps [github.com/vishvananda/netlink](https://github.com/vishvananda/netlink) from 1.0.0 to 1.1.0. - [Release notes](https://github.com/vishvananda/netlink/releases) - [Commits](https://github.com/vishvananda/netlink/compare/v1.0.0...v1.1.0) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Signed-off-by: Matthew Heon <mheon@redhat.com>
* | | Merge pull request #4943 from ↵OpenShift Merge Robot2020-01-23
|\ \ \ | | | | | | | | | | | | | | | | containers/dependabot/go_modules/github.com/uber/jaeger-client-go-2.22.1+incompatible build(deps): bump github.com/uber/jaeger-client-go from 2.20.1+incompatible to 2.22.1+incompatible
| * | | build(deps): bump github.com/uber/jaeger-client-godependabot-preview[bot]2020-01-23
| |/ / | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [github.com/uber/jaeger-client-go](https://github.com/uber/jaeger-client-go) from 2.20.1+incompatible to 2.22.1+incompatible. - [Release notes](https://github.com/uber/jaeger-client-go/releases) - [Changelog](https://github.com/jaegertracing/jaeger-client-go/blob/master/CHANGELOG.md) - [Commits](https://github.com/uber/jaeger-client-go/compare/v2.20.1...v2.22.1) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Signed-off-by: Matthew Heon <mheon@redhat.com>
* | | Merge pull request #4942 from ↵OpenShift Merge Robot2020-01-23
|\ \ \ | |_|/ |/| | | | | | | | containers/dependabot/go_modules/github.com/json-iterator/go-1.1.9 build(deps): bump github.com/json-iterator/go from 1.1.8 to 1.1.9
| * | build(deps): bump github.com/json-iterator/go from 1.1.8 to 1.1.9dependabot-preview[bot]2020-01-23
| |/ | | | | | | | | | | | | | | | | Bumps [github.com/json-iterator/go](https://github.com/json-iterator/go) from 1.1.8 to 1.1.9. - [Release notes](https://github.com/json-iterator/go/releases) - [Commits](https://github.com/json-iterator/go/compare/1.1.8...v1.1.9) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Signed-off-by: Matthew Heon <mheon@redhat.com>
* | Merge pull request #4945 from ↵OpenShift Merge Robot2020-01-23
|\ \ | | | | | | | | | | | | containers/dependabot/go_modules/github.com/containernetworking/plugins-0.8.5 build(deps): bump github.com/containernetworking/plugins from 0.8.2 to 0.8.5
| * | build(deps): bump github.com/containernetworking/pluginsdependabot-preview[bot]2020-01-23
| |/ | | | | | | | | | | | | | | | | Bumps [github.com/containernetworking/plugins](https://github.com/containernetworking/plugins) from 0.8.2 to 0.8.5. - [Release notes](https://github.com/containernetworking/plugins/releases) - [Commits](https://github.com/containernetworking/plugins/compare/v0.8.2...v0.8.5) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Signed-off-by: Matthew Heon <mheon@redhat.com>
* | Merge pull request #4940 from containers/dependabot/go_modules/k8s.io/api-0.17.2OpenShift Merge Robot2020-01-23
|\ \ | | | | | | build(deps): bump k8s.io/api from 0.17.0 to 0.17.2
| * | build(deps): bump k8s.io/api from 0.17.0 to 0.17.2dependabot-preview[bot]2020-01-23
| |/ | | | | | | | | | | | | | | | | Bumps [k8s.io/api](https://github.com/kubernetes/api) from 0.17.0 to 0.17.2. - [Release notes](https://github.com/kubernetes/api/releases) - [Commits](https://github.com/kubernetes/api/compare/v0.17.0...v0.17.2) Signed-off-by: dependabot-preview[bot] <support@dependabot.com> Signed-off-by: Matthew Heon <mheon@redhat.com>
* | Merge pull request #4938 from openSUSE/latest-versionOpenShift Merge Robot2020-01-23
|\ \ | |/ |/| Update README.md to reference latest version
| * Update README.md to reference latest versionSascha Grunert2020-01-23
| | | | | | | | Signed-off-by: Sascha Grunert <sgrunert@suse.com>
* | Merge pull request #4936 from jwhonce/wip/swagger2OpenShift Merge Robot2020-01-22
|\ \ | | | | | | [CI:DOCS] Enable swagger validation for each PR
| * | Enable swagger validation for each PRJhon Honce2020-01-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | * Update swagger:operation's to pass validation * 'name' path parameter now used throughout API * Added #/response/ok for 200 returns, TBD values have been replaced with legal values. Signed-off-by: Jhon Honce <jhonce@redhat.com>
* | | Merge pull request #4920 from openSUSE/cgroup2-super-magicOpenShift Merge Robot2020-01-22
|\ \ \ | | | | | | | | Use cgroupv2 super magic from golang.org/x/sys/unix
| * | | Use cgroupv2 super magic from golang.org/x/sys/unixSascha Grunert2020-01-21
| | |/ | |/| | | | | | | | | | | | | | | | We can use this constant from the already existing sys/unix package instead of defining it by our own. Signed-off-by: Sascha Grunert <sgrunert@suse.com>
* | | Merge pull request #4929 from rpjday/docs/migrateOpenShift Merge Robot2020-01-22
|\ \ \ | | | | | | | | markdown: remove erroneous spaces after '**'
| * | | markdown: fix formatting/content typos in migrate man pageRobert P. J. Day2020-01-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | 1) remove erroneous spaces after leading '**' 2) remove duplicate SYNOPSIS section Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca>
* | | | Merge pull request #4932 from lsm5/search-and-replace-correctOpenShift Merge Robot2020-01-22
|\ \ \ \ | | | | | | | | | | correct search-and-replace error
| * | | | correct search-and-replace errorLokesh Mandvekar2020-01-22
| | | | | | | | | | | | | | | | | | | | Signed-off-by: Lokesh Mandvekar <lsm5@fedoraproject.org>
* | | | | Merge pull request #4930 from mheon/fix_release_scriptOpenShift Merge Robot2020-01-22
|\ \ \ \ \ | |_|_|_|/ |/| | | | Update release script to not manage epoch
| * | | | Update release script to not manage epochMatthew Heon2020-01-22
| | |/ / | |/| | | | | | | | | | | | | | | | | | | | | | We removed the Gitvalidation epoch in the Makefile. As such, we don't need to adjust it anymore when we tag releases. Signed-off-by: Matthew Heon <mheon@redhat.com>
* | | | Merge pull request #4934 from rpjday/docs/markdown/execOpenShift Merge Robot2020-01-22
|\ \ \ \ | | | | | | | | | | markdown: fix formatting of commands at bottom of podman-exec
| * | | | markdown: fix formatting of commands at bottom of podman-execRobert P. J. Day2020-01-22
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Current (lack of) formatting crunches first two lines together. Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca>
* | | | | Merge pull request #4912 from jwhonce/wip/swaggerOpenShift Merge Robot2020-01-22
|\ \ \ \ \ | | | | | | | | | | | | [CI:DOCS] Update build images
| * | | | | Update build imagesJhon Honce2020-01-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Add swagger annotations for all the query and response parameters for buildimages * Improve populating the BuildOptions struct * Improve swagger.json generation, removing tags.xml and move tag definiation into the swagger:meta block * Update Makefile to be more robust, added target for validation * TODO once validation passes add that step to the generation step Signed-off-by: Jhon Honce <jhonce@redhat.com>
* | | | | | Merge pull request #4861 from giuseppe/add-cgroups-disabled-conmonOpenShift Merge Robot2020-01-22
|\ \ \ \ \ \ | |_|/ / / / |/| | | | | oci_conmon: do not create a cgroup under systemd
| * | | | | oci_conmon: do not create a cgroup under systemdGiuseppe Scrivano2020-01-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Detect whether we are running under systemd (if the INVOCATION_ID is set). If Podman is running under a systemd service, we do not need to create a cgroup for conmon. Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
| * | | | | systemdgen: specify --cgroups=disabled-conmon for --newGiuseppe Scrivano2020-01-16
| | | | | | | | | | | | | | | | | | | | | | | | Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
| * | | | | podman: add new option --cgroups=no-conmonGiuseppe Scrivano2020-01-16
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | it allows to disable cgroups creation only for the conmon process. A new cgroup is created for the container payload. Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
* | | | | | Merge pull request #4928 from mheon/release_notes_171OpenShift Merge Robot2020-01-22
|\ \ \ \ \ \ | | | | | | | | | | | | | | Update RELEASE_NOTES for v1.7.1
| * | | | | | Update RELEASE_NOTES for v1.7.1Matthew Heon2020-01-22
| | |_|/ / / | |/| | | | | | | | | | | | | | | | Signed-off-by: Matthew Heon <mheon@redhat.com>
* | | | | | Merge pull request #4931 from rpjday/docs/rmi/backquotesOpenShift Merge Robot2020-01-22
|\ \ \ \ \ \ | | | | | | | | | | | | | | markdown: remove extraneous backquote from "podman rmi"
| * | | | | | markdown: remove extraneous backquote from "podman rmi"Robert P. J. Day2020-01-22
| |/ / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Extraneous backquote messes up rendering of "man podman-rmi". Signed-off-by: Robert P. J. Day <rpjday@crashcourse.ca>
* | | | | | Merge pull request #4911 from giuseppe/rootless-set-containers-envOpenShift Merge Robot2020-01-22
|\ \ \ \ \ \ | |/ / / / / |/| | | | | rootless: set C variables also on shortcut
| * | | | | rootless: set C variables also on shortcutGiuseppe Scrivano2020-01-20
| | |_|_|/ | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | make sure the rootless env variables are set also when we are joining directly the user+mount namespace without creating a new process. It is required by pkg/unshare in containers/common. Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
* | | | | Merge pull request #4919 from vrothberg/fix-modOpenShift Merge Robot2020-01-22
|\ \ \ \ \ | | | | | | | | | | | | go.mod: fix parse error
| * | | | | go.mod: fix parse errorValentin Rothberg2020-01-21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix the go.mod parsing error caused by updating openshift/api. Fixes: #4728 Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
* | | | | | Merge pull request #4899 from baude/apiv2serviceOpenShift Merge Robot2020-01-22
|\ \ \ \ \ \ | | | | | | | | | | | | | | Apiv2service