aboutsummaryrefslogtreecommitdiff
Commit message (Collapse)AuthorAge
...
| * Do not set the network config dir to cni plugin dirPaul Holzinger2022-02-10
| | | | | | | | | | | | | | | | | | | | | | | | I do not know why this code was added but it is wrong. We should never use a plugin dir as config dir. Also this will fail for netavark. The correct default will be set in c/common so podman should not touch it. [NO NEW TESTS NEEDED] Ref #13183 Signed-off-by: Paul Holzinger <pholzing@redhat.com>
| * Show API doc for several versionsPaul Holzinger2022-02-10
| | | | | | | | | | | | | | | | | | | | | | Right now it is not possible to look at the API version for a specific version. docs.podman.io always show the latest version from the main branch. This is not want many users want so they now have the ability to select a different version. Fixes #12796 Signed-off-by: Paul Holzinger <pholzing@redhat.com>
| * [NO NEW TEST NEEDED] Add schema for ImageCreate 200 response.Tom Deseyn2022-02-10
| | | | | | | | Signed-off-by: Tom Deseyn <tom.deseyn@gmail.com>
| * fix: Multiplication of durationsmyml2022-02-10
| | | | | | | | | | | | | | 'killContainerTimeout' is already 5 second [NO NEW TESTS NEEDED] Signed-off-by: myml <wurongjie1@gmail.com>
| * move rootless netns slirp4netns process to systemd user.slicePaul Holzinger2022-02-10
| | | | | | | | | | | | | | | | | | | | | | | | | | When running podman inside systemd user units, it is possible that systemd kills the rootless netns slirp4netns process because it was started in the default unit cgroup. When the unit is stopped all processes in that cgroup are killed. Since the slirp4netns process is run once for all containers it should not be killed. To make sure systemd will not kill the process we move it to the user.slice. Fixes #13153 Signed-off-by: Paul Holzinger <pholzing@redhat.com>
| * compat: endpoint /build must set header content type as application/json in ↵Aditya R2022-02-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | reponse Lot of clients are expecting proper `Content-type: application/json` configured in response headers of `/build` compat api. Following commit fixes that. Fixes issues where code is setting header field after writing header which is wrong. We must set `content-type` before we write and flush http header. Signed-off-by: Aditya R <arajan@redhat.com>
| * Cleanup: remove obsolete/misleading bug workaroundEd Santiago2022-02-10
| | | | | | | | | | | | | | Followup to #13129: remove a no-longer-necessary workaround for a healthcheck bug. Signed-off-by: Ed Santiago <santiago@redhat.com>
| * tests: retrofit healthcheck system testsAditya R2022-02-10
| | | | | | | | | | | | | | | | | | All the healthcheck return output now but systems tests is written to expect empty output which seems wrong. Modify jq output to contain newline character rather than actual newline Signed-off-by: Aditya R <arajan@redhat.com>
| * healthcheck, libpod: Read healthcheck event output from os pipeAditya R2022-02-10
| | | | | | | | | | | | | | | | | | | | It seems we are ignoring output from healthcheck session. Open a valid pipe to healthcheck session in order read its output. Use common pipe for both `stdout/stderr` since that was the previous behviour as well. Signed-off-by: Aditya R <arajan@redhat.com>
| * Fix: Do not print error when parsing journald log failsmyml2022-02-10
| | | | | | | | | | | | | | foramtError was written as err [NO NEW TESTS NEEDED] Signed-off-by: myml <wurongjie1@gmail.com>
| * Bump github.com/buger/goterm from 1.0.1 to 1.0.4dependabot[bot]2022-02-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Bumps [github.com/buger/goterm](https://github.com/buger/goterm) from 1.0.1 to 1.0.4. - [Release notes](https://github.com/buger/goterm/releases) - [Commits](https://github.com/buger/goterm/compare/v1.0.1...v1.0.4) --- updated-dependencies: - dependency-name: github.com/buger/goterm dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
| * append podman dns search domainPaul Holzinger2022-02-10
| | | | | | | | | | | | | | | | | | | | Append the podman dns seach domain to the host search domains when we use the dnsname/aardvark server. Previously it would only use podman seach domains and discard the host domains. Fixes #13103 Signed-off-by: Paul Holzinger <pholzing@redhat.com>
| * Podman pod create --share-parent vs --share=cgroupcdoern2022-02-10
| | | | | | | | | | | | | | | | | | | | | | | | | | | | separated cgroupNS sharing from setting the pod as the cgroup parent, made a new flag --share-parent which sets the pod as the cgroup parent for all containers entering the pod remove cgroup from the default kernel namespaces since we want the same default behavior as before which is just the cgroup parent. resolves #12765 Signed-off-by: cdoern <cdoern@redhat.com> Signed-off-by: cdoern <cbdoer23@g.holycross.edu> Signed-off-by: cdoern <cdoern@redhat.com>
| * System tests: revert emergency skip of checkpoint testsEd Santiago2022-02-10
|/ | | | | | | | | | | Revert #13049. criu-3.16.1-6.fc36 fixes the problem and is now in fc36 stable: https://bodhi.fedoraproject.org/updates/FEDORA-2022-183b337712 (Yes, I confirmed that tests pass on a rawhide vm) Signed-off-by: Ed Santiago <santiago@redhat.com>
* Merge pull request #13195 from jwhonce/wip/network_version_4.0OpenShift Merge Robot2022-02-10
|\ | | | | [4.0] Add version guard to libpod API endpoints
| * Add version guard to libpod API endpointsJhon Honce2022-02-09
| | | | | | | | | | | | | | | | | | * Ensure meaningful behaviour when called with /v3.x.x semantics * Change return code to 409 from 500 when client attempts to use an existing network name * Update API bats test runner to support /v4.0.0 endpoints by default Signed-off-by: Jhon Honce <jhonce@redhat.com>
* | Merge pull request #13193 from TomSweeneyRedHat/dev/tsweeney/bumpcommon4Daniel J Walsh2022-02-10
|\ \ | |/ |/| [v4.0] Bump c/common to v0.47.4
| * [v4.0] Bump c/common to v0.47.4tomsweeneyredhat2022-02-09
|/ | | | | | | As the title says. Bumping c/common in preparation of the v4.0 release. Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
* Merge pull request #13177 from rhatdan/v4.0OpenShift Merge Robot2022-02-09
|\ | | | | [4.0] idmap should be able to be specified along with other options
| * idmap should be able to be specified along with other optionsDaniel J Walsh2022-02-09
|/ | | | | | | | [NO NEW TESTS NEEDED] crun is not available everywhere to test idmap. Kernel might not be recent enough and not all file systems support idmap option. Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* Merge pull request #13137 from rhatdan/v4.0OpenShift Merge Robot2022-02-04
|\ | | | | Update containers/buildah v1.24.1
| * Vendor in containers/buildah v1.24.1Daniel J Walsh2022-02-04
|/ | | | Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
* Merge pull request #13133 from mheon/bump_400_rc4OpenShift Merge Robot2022-02-04
|\ | | | | Bump to v4.0.0-RC4
| * Bump to v4.0.0-devMatthew Heon2022-02-03
| | | | | | | | Signed-off-by: Matthew Heon <matthew.heon@pm.me>
| * Bump to v4.0.0-RC4v4.0.0-rc4Matthew Heon2022-02-03
| | | | | | | | Signed-off-by: Matthew Heon <matthew.heon@pm.me>
| * Disable failing E2E testMatthew Heon2022-02-03
| | | | | | | | Signed-off-by: Matthew Heon <matthew.heon@pm.me>
| * Revert "Move each search dns to its own line"Paul Holzinger2022-02-03
| | | | | | | | | | | | | | | | | | | | This reverts commit a1bc8cb52cefd49e8cc54ae14d1864b8a1ec216e. Please see resolv.conf(5) search domains must be on the same line. If you use multiple seach key words only the last one is used. I tested this with alpine and it works correctly when they are on the same line so I am not sure what issues Dan had with it but this is not correct. Signed-off-by: Paul Holzinger <pholzing@redhat.com>
| * Move each search dns to its own lineDaniel J Walsh2022-02-03
| | | | | | | | | | | | | | | | | | | | Alpine does not seem to use search correctly when there are multiple search domains on the same line. It only uses the first with the advent. When podman runs within a separate network we are appending on dns.podman as a search, if you add a search domain, then this causes the local search on network to fail. Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
| * Update release notes for v4.0.0-RC4Matthew Heon2022-02-03
| | | | | | | | Signed-off-by: Matthew Heon <matthew.heon@pm.me>
| * Document `schema` values in the `--url` flagNalin Dahyabhai2022-02-03
| | | | | | | | | | | | | | | | | | Document the recognized `schema` types that can be used in a value passed to the `--url` command line flag. [CI:DOCS] Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
| * podman image scp syntax correctioncdoern2022-02-03
| | | | | | | | | | | | | | | | | | [NO NEW TESTS NEEDED] image scp was reading the localhost syntax too loosely causing some errors with domains or hosts containing the word localhost. Fixed that and added a few lines to make sure the pure localhost connections do not touch sshd resolves #13021 Signed-off-by: cdoern <cdoern@redhat.com>
| * system prune: remove all networksPaul Holzinger2022-02-03
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | podman system prune should also remove all networks. When we want to users to migrate to the new network stack we recommend to run podman system reset. However this did not remove networks and if there were still networks around we would continue to use cni since this was considered an old system. There is one exception for the default network. It should not be removed since this could cause other issues when it no longer exists. The network backend detection logic ignores the default network so this is fine. Signed-off-by: Paul Holzinger <pholzing@redhat.com>
| * Only change network fields if they were actually changed by the userDaniel J Walsh2022-02-03
| | | | | | | | | | | | Fixes: https://github.com/containers/podman/issues/13065 Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
| * docs: clarify rootless net statsGiuseppe Scrivano2022-02-03
| | | | | | | | | | | | | | | | follow-up for https://github.com/containers/podman/pull/13101 [CI:DOCS] Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
| * Fix size to match Docker selectionDaniel J Walsh2022-02-03
| | | | | | | | | | | | Fixes: https://github.com/containers/podman/issues/13096 Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
| * libpod: enforce noexec,nosuid,nodev for /dev/shmGiuseppe Scrivano2022-02-03
| | | | | | | | | | | | | | these mount flags are already used for the /dev/shm mount on the host, but they are not set for the bind mount itself. Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
| * Clarify remote client means Mac and WindowsDaniel J Walsh2022-02-03
| | | | | | | | Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
| * libpod: report slirp4netns network statsGiuseppe Scrivano2022-02-03
| | | | | | | | | | | | | | | | | | by default slirp4netns uses the tap0 device. When slirp4netns is used, use that device by default instead of eth0. Closes: https://github.com/containers/podman/issues/11695 Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
| * Add notes to "--oom-kill-disable" not supported on cgroups V2Tsubasa Watanabe2022-02-03
| | | | | | | | | | | | | | Clarify "--oom-kill-disable" is not supported on cgroups V2 in documentation. Signed-off-by: Tsubasa Watanabe <w.tsubasa@fujitsu.com>
| * Fix use of infra image to clarify defaultDaniel J Walsh2022-02-03
| | | | | | | | Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
| * Adapt podman images ls filters docs to be aligned with prune filters docsPatrycja Guzik2022-02-03
| | | | | | | | Signed-off-by: Patrycja Guzik <patrycja.k.guzik@gmail.com>
| * ignition, machine: delegate cpu,io cgroup controllers to machine's default usersAditya R2022-02-03
|/ | | | | | | | | | | | | | | | Makes sure that ignition setups up systemd config so cgroup controllers like `cpu, io` are also delegated to `non-root` along with `memory, pid`. This allows general users of `podman` on `macOS` and `podman-remote` to do operations which are dependent on `cpu, io` cgroup controllers. [NO TESTS NEEDED] [NO NEW TESTS NEEDED] We don't have a CI infra to test this, please pull the tree and run `podman info` inside the machine to confirm. Signed-off-by: Aditya R <arajan@redhat.com>
* Merge pull request #13130 from nalind/slashify-dockerfile-4.0OpenShift Merge Robot2022-02-03
|\ | | | | [v4.0] pkg/bindings/images.Build(): slashify "dockerfile" values, too
| * pkg/bindings/images.Build(): slashify "dockerfile" values, tooNalin Dahyabhai2022-02-03
|/ | | | | | | | | | | When the Dockerfile isn't in the root directory of the build context, the client supplies its pathname to the server, but it needs to do so using "/" as the path separator, not the client OS's path separator. CI can't test Windows clients, so [NO NEW TESTS NEEDED] Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
* Merge pull request #13068 from mheon/bump_400_rc3OpenShift Merge Robot2022-01-28
|\ | | | | [CI:DOCS] Bump to v4.0.0-RC3
| * Remove mention of IPv6 portfwd from release notesMatthew Heon2022-01-28
| | | | | | | | Signed-off-by: Matthew Heon <mheon@redhat.com>
| * Bump to v4.0.0-devMatthew Heon2022-01-28
| | | | | | | | Signed-off-by: Matthew Heon <mheon@redhat.com>
| * Bump to v4.0.0-RC3v4.0.0-rc3Matthew Heon2022-01-28
| | | | | | | | Signed-off-by: Matthew Heon <mheon@redhat.com>
| * Update release notes for v4.0.0-RC3Matthew Heon2022-01-28
|/ | | | Signed-off-by: Matthew Heon <mheon@redhat.com>
* Merge pull request #13067 from mheon/fix_ci_40OpenShift Merge Robot2022-01-28
|\ | | | | Fix Cirrus destination branch