summaryrefslogtreecommitdiff
path: root/contrib
Commit message (Collapse)AuthorAge
* Merge pull request #3892 from cevich/google_vpcOpenShift Merge Robot2019-08-28
|\ | | | | Cirrus: Block CNI use of google VPCs
| * Cirrus: Block CNI use of google VPCsChris Evich2019-08-28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Specifically pertaining to executing tests in google cloud, there are default, pre-allocated class-a subnetworks for each region (data-center). Each includes a gateway using a `.1` LSB and all are routable from other regions in google cloud via these gateways. Because the default CNI configuration also utilizes class-a subnetworks, this creates the possibility for IPv4 address-space clashes. Since the default regional cloud subnets are pre-defined/known, preventing clashes can be accomplished by seeding these subnets in a dummy CNI configuration. The default behavior of podman is to grab the highest priority CNI configuration. Name the dummy config. appropriate so it always loads last. Also name the bridge itself with an obvious name `do-not-use`, such that any related testing errors should be easier to debug. Also: * Minor cleanup of `install_test_configs()` * Move install_test_configs in `setup_environment.sh` to after possible run of `remove_packaged_podman_files()` because that also strips out `/etc/cni/net.d/87-podman-bridge.conflist`. Signed-off-by: Chris Evich <cevich@redhat.com>
* | Merge pull request #3728 from mheon/systemd_container_testOpenShift Merge Robot2019-08-28
|\ \ | | | | | | Add an integration test for systemd in a container
| * | Add an integration test for systemd in a containerMatthew Heon2019-08-28
| |/ | | | | | | Signed-off-by: Matthew Heon <matthew.heon@pm.me>
* / Cirrus: Enable VM image housekeepingChris Evich2019-08-26
|/ | | | | | | Also do some minor cleanup and add additional safety-checks to pruning script (container image). Signed-off-by: Chris Evich <cevich@redhat.com>
* Merge pull request #3824 from baude/varlinkendpointtestOpenShift Merge Robot2019-08-26
|\ | | | | Create framework for varlink endpoint integration tests
| * Create framework for varlink endpoint integration testsbaude2019-08-16
| | | | | | | | | | | | | | add the ability to write integration tests similar to our e2e tests for the varlink endpoints. Signed-off-by: baude <bbaude@redhat.com>
* | Merge pull request #3617 from QiWang19/create_pullOpenShift Merge Robot2019-08-17
|\ \ | | | | | | add --pull flag for podman create&run
| * | add --pull flag for podman create&runQi Wang2019-08-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Requirement from https://github.com/containers/libpod/issues/3575#issuecomment-512238393 Added --pull for podman create and pull to match the newly added flag in docker CLI. `missing`: default value, podman will pull the image if it does not exist in the local. `always`: podman will always pull the image. `never`: podman will never pull the image. Signed-off-by: Qi Wang <qiwan@redhat.com>
* | | Merge pull request #3822 from cevich/simplify_crun_taskOpenShift Merge Robot2019-08-17
|\ \ \ | | | | | | | | Cirrus: Minor: Simplify crun test task
| * | | Cirrus: Minor: Simplify crun test taskChris Evich2019-08-16
| | |/ | |/| | | | | | | Signed-off-by: Chris Evich <cevich@redhat.com>
* | | Cirrus: Confirm networking moreChris Evich2019-08-16
| | | | | | | | | | | | Signed-off-by: Chris Evich <cevich@redhat.com>
* | | Merge pull request #3796 from giuseppe/enable-cgroupsv2-crunOpenShift Merge Robot2019-08-16
|\ \ \ | | | | | | | | cirrus: enable cgroups v2 tests with crun
| * | | cirrus: enable cgroups v2 tests with crunGiuseppe Scrivano2019-08-13
| |/ / | | | | | | | | | Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
* / / Bump to v1.5.2-devMatthew Heon2019-08-15
|/ / | | | | | | Signed-off-by: Matthew Heon <matthew.heon@pm.me>
* | Merge pull request #3772 from haircommander/snapcraftOpenShift Merge Robot2019-08-13
|\ \ | | | | | | fork https://github.com/abitrolly/podman
| * | Add missing stage-packages in snapcraft.yaml.Jindrich Novy2019-08-13
| | | | | | | | | | | | Signed-off-by: Jindrich Novy <jnovy@redhat.com>
| * | Add RHEL and SUSE to snap docPeter Hunt2019-08-13
| | | | | | | | | | | | Signed-off-by: Peter Hunt <pehunt@redhat.com>
| * | start groundwork for adding snapPeter Hunt2019-08-13
| | | | | | | | | | | | | | | | | | by forking https://github.com/abitrolly/podman Signed-off-by: Peter Hunt <pehunt@redhat.com>
* | | Merge pull request #3791 from cevich/install_libvarlinkOpenShift Merge Robot2019-08-13
|\ \ \ | | | | | | | | Cirrus: Install varlink in VM images
| * | | Cirrus: Install varlink on UbuntuChris Evich2019-08-13
| | | | | | | | | | | | | | | | Signed-off-by: Chris Evich <cevich@redhat.com>
| * | | Cirrus: Install varlink on FedoraChris Evich2019-08-13
| | | | | | | | | | | | | | | | Signed-off-by: Chris Evich <cevich@redhat.com>
* | | | Merge pull request #3662 from marusak/user_socket_serviceOpenShift Merge Robot2019-08-13
|\ \ \ \ | | | | | | | | | | Add user systemd service and socket
| * | | | Add user systemd service and socketMatej Marusak2019-08-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This enables user to interact with varlink and create/manage rootless containers through it. Using as: `varlink call unix:/run/user/1000/podman/io.podman/io.podman.ListContainers` Signed-off-by: Matej Marusak <mmarusak@redhat.com>
* | | | | Merge pull request #3649 from cevich/brent_is_backOpenShift Merge Robot2019-08-13
|\ \ \ \ \ | |_|/ / / |/| | | | Revert "Cirrus: Temp. workaround missing imgprune image"
| * | | | Revert "Cirrus: Temp. workaround missing imgprune image"Chris Evich2019-08-12
| |/ / / | | | | | | | | | | | | | | | | | | | | This reverts commit 9b2e98f1e872354f0708a86b59e16b8b86e9f8b2. Signed-off-by: Chris Evich <cevich@redhat.com>
* | | | Merge pull request #3607 from cevich/cgroup2_vmOpenShift Merge Robot2019-08-12
|\ \ \ \ | |/ / / |/| | | Add another Fedora VM with cgroups v2 enabled
| * | | Cirrus: Add verification for cgroupv2 imageChris Evich2019-08-12
| | | | | | | | | | | | | | | | Signed-off-by: Chris Evich <cevich@redhat.com>
| * | | Cirrus: Add experimental fedora VM image & testChris Evich2019-08-12
| | | | | | | | | | | | | | | | Signed-off-by: Chris Evich <cevich@redhat.com>
| * | | Cirrus: Minor, use newer Ubuntu base imageChris Evich2019-08-12
| |/ / | | | | | | | | | Signed-off-by: Chris Evich <cevich@redhat.com>
* / / cirrus: install crunGiuseppe Scrivano2019-08-12
|/ / | | | | | | Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
* | Merge pull request #3594 from cevich/second_partitionOpenShift Merge Robot2019-08-10
|\ \ | | | | | | Add Second partition for storage-drive testing
| * | Cirrus: Add Second partition for storage testingChris Evich2019-08-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is mainly/initially to support use of Cirrus-CI in https://github.com/containers/buildah since that setup re-uses the VM images from this project. However, it also opens doors here, if libpod ever needs/wants to do things with a dedicated storage device and/or storage-drivers. Signed-off-by: Chris Evich <cevich@redhat.com>
* | | Merge pull request #3770 from cevich/updates_testingOpenShift Merge Robot2019-08-10
|\ \ \ | | | | | | | | Cirrus: Enable updates-testing repo for Fedora
| * | | Cirrus: Enable updates-testing repo for FedoraChris Evich2019-08-09
| | |/ | |/| | | | | | | Signed-off-by: Chris Evich <cevich@redhat.com>
* | | Bump to v1.5.1-devMatthew Heon2019-08-09
| | | | | | | | | | | | Signed-off-by: Matthew Heon <matthew.heon@pm.me>
* | | Bump to v1.5.0v1.5.0Matthew Heon2019-08-09
|/ / | | | | | | Signed-off-by: Matthew Heon <matthew.heon@pm.me>
* / add make to make installsbaude2019-08-07
|/ | | | | | | | | | | | | as issue #2702 describes, we want to make podman and podman-remote as part of make install. Fixes: #2702 Signed-off-by: baude <bbaude@redhat.com> avoid `make` in `make install` in the rpmbuild process. Signed-off-by: Lokesh Mandvekar <lsm5@fedoraproject.org>
* Cirrus: Fix release dependenciesChris Evich2019-07-31
| | | | | | | | | | | | | | | | | | | | | The release-task ***must*** always execute last, in order to guarantee a consistent cache of release archives from dependent tasks. It accomplishes this by verifying it's task-number matches one-less than the total number of tasks. Previous to this commit, a YAML anchor/alias was used to avoid duplication of the dependency list between 'success' and 'release' However, it's been observed that this opens the possibility for 'release' and 'success' tasks to race when running on a PR. Because YAML anchor/aliases cannot be used to modify lists, duplication is required to make 'release' actually depend upon 'success'. This duplication will introduce an additional maintenance burden. Though when adding a new task, it's already very easy to forget to update the 'depends_on' list. Assist both cases by the addition unit-tests to verify ``.cirrus.yml`` dependency contents and structure. Signed-off-by: Chris Evich <cevich@redhat.com>
* Cirrus: Fix re-run of release task into no-op.Chris Evich2019-07-31
| | | | | | | | | | This task depends upon other tasks caching their binaries. If for whatever reason the `release` task is re-run and/or is out-of-order with it's dependents, the state of cache will be undefined. Previously this would result in an error, and failing of the release task. This commit alters this behavior to issue a warning instead. Signed-off-by: Chris Evich <cevich@redhat.com>
* Cirrus: Ubuntu: Set + Test for $RUNC_BINARYChris Evich2019-07-25
| | | | Signed-off-by: Chris Evich <cevich@redhat.com>
* Cirrus: Simplify evil-unit check in imageChris Evich2019-07-25
| | | | Signed-off-by: Chris Evich <cevich@redhat.com>
* Cirrus: Silence systemd-banish noiseChris Evich2019-07-25
| | | | | | | | | | It's somewhat hard to predict which units are certinly present for any given base-image. Therefore, at image-build time, it's distracting and unhelpful to see all the errors about units that don't exist, on every platform. Simply ignore them and rely on the `check_image.sh` test to confirm none are enabled. Signed-off-by: Chris Evich <cevich@redhat.com>
* Cirrus: Fix image build metadata updateChris Evich2019-07-25
| | | | Signed-off-by: Chris Evich <cevich@redhat.com>
* Cirrus: Fix missing -n on CentOSChris Evich2019-07-25
| | | | Signed-off-by: Chris Evich <cevich@redhat.com>
* Change wait to sleep in podmanimage readmeTomSweeneyRedHat2019-07-22
| | | | | | | Change wait to sleep 100000 as we've had some reports of problems with wait: https://github.com/containers/buildah/issues/1665 Signed-off-by: TomSweeneyRedHat <tsweeney@redhat.com>
* bump conmon to 1.0.0-rc2Peter Hunt2019-07-22
| | | | Signed-off-by: Peter Hunt <pehunt@redhat.com>
* Cirrus: Minor scripting typo fixChris Evich2019-07-18
| | | | Signed-off-by: Chris Evich <cevich@redhat.com>
* Merge pull request #3335 from cevich/imgpruneOpenShift Merge Robot2019-07-17
|\ | | | | Cirrus: Print images that should be pruned
| * Cirrus: Print images that should be prunedChris Evich2019-07-15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Over time unless they're removed, the project could grow quite a large collection of VM images. While generally cheap (less than a penny each, per month), these will become a significant cost item if not kept in-check. Add a specialized container for handling image-pruning, but limit it to only finding and printing (not actually deleting) images. Also update the image-building workflow so that base-images used to compose cache-images are also labeled with metadata. N/B: As an additional safeguard, the service account which executes the new container in production *DOES NOT* have access to delete images. This can be enabled by adding the GCE IAM role: CustomComputeImagePrune Signed-off-by: Chris Evich <cevich@redhat.com>