summaryrefslogtreecommitdiff
path: root/contrib
Commit message (Collapse)AuthorAge
* Merge pull request #3998 from cevich/idiot_proof_systemd_unitOpenShift Merge Robot2019-09-12
|\ | | | | Prevent podman varlink socket fight
| * Prevent podman varlink socket fightChris Evich2019-09-12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | When enabled, it's desired for the podman-varlink process to startup on boot or upon socket-activation, whichever happens first. However, with `KillMode=none` systemd will never kill any podman-varlink processes. This makes it easily possible for multiple podman-varlink processes to be running, and fight each other to service a single socket. --- For example: Prior to this commit, this will result in four podman-varlink processes being run: ``` systemctl enable io.podman.socket systemctl enable io.podman.service systemctl start io.podman.socket systemctl start io.podman.service systemctl start io.podman.service ``` Fix this by setting `KillMode=process` and `TimeoutStopSec=30` (default is 90). This results in podman-varlink exiting on its own after a minute of being idle (--timeout=60000). Alternatively, systemd will manage the service stop by sending a SIGTERM, then if podman-varlink has not exited within `TimeoutStopSec`, a SIGKILL will be sent. Signed-off-by: Chris Evich <cevich@redhat.com>
* | Merge pull request #3999 from jwhonce/wip/msiOpenShift Merge Robot2019-09-12
|\ \ | |/ |/| Support building Windows msi file
| * Add podman icon to installerJhon Honce2019-09-12
| | | | | | | | | | | | Update Makefile per review comments Signed-off-by: Jhon Honce <jhonce@redhat.com>
| * Support building Windows msi fileJhon Honce2019-09-11
| | | | | | | | | | | | | | | | | | | | * Update Makefile to build msi * Add podman.wxs to define podman.msi * Version information provided by Makefile * Add podman.bat wrapper for podman-remote-windows.exe to ensure environment * Add wix xml schemas for reference Signed-off-by: Jhon Honce <jhonce@redhat.com>
* | Cirrus: Fix unnecessary setseboolChris Evich2019-09-11
|/ | | | | | | By mistake this was added to run for the image-building-VM and is not supported. Kill it. Signed-off-by: Chris Evich <cevich@redhat.com>
* Merge pull request #3581 from mheon/no_cgroupsOpenShift Merge Robot2019-09-11
|\ | | | | Support running containers without CGroups
| * Add support for launching containers without CGroupsMatthew Heon2019-09-10
| | | | | | | | | | | | | | This is mostly used with Systemd, which really wants to manage CGroups itself when managing containers via unit file. Signed-off-by: Matthew Heon <matthew.heon@pm.me>
* | Merge pull request #3817 from xcffl/masterOpenShift Merge Robot2019-09-10
|\ \ | | | | | | Add explanation mounting named volumes for `podman run`
| * | Replace "podman" with "Podman"xcffl2019-09-07
| |/ | | | | | | Signed-off-by: xcffl <xcffl@outlook.com>
* / Turn off journald in podmanimages on quay.ioTomSweeneyRedHat2019-09-06
|/ | | | | | | | | In the Dockerfiles that are used to build the podman images on quay.io, we were changing the events_logger from journald to file in libpod.conf, but we weren't enabling it as we didn't remove the comment. This corrects that and addresses: #3464 Signed-off-by: TomSweeneyRedHat <tsweeney@redhat.com>
* Cirrus: Update e-mail -> IRC Nick tableChris Evich2019-09-03
| | | | | | | | Also add fixes to help prevent 'fatal: Invalid revision range' error. Should obtaining all authors from the range still fail, only grab the HEAD commit author as a fallback. Signed-off-by: Chris Evich <cevich@redhat.com>
* Merge pull request #3904 from cevich/fix_img_pruneOpenShift Merge Robot2019-09-03
|\ | | | | Cirrus: imgprune fixes
| * Cirrus: Load base-image names indirectlyChris Evich2019-08-30
| | | | | | | | | | | | | | | | | | Rather than hard-coding all four base-image env. var name, load the values based on the shared variable name suffix. Thanks to Ed Santiago <santiago@redhat.com> for the suggestion. Signed-off-by: Chris Evich <cevich@redhat.com>
* | Cirrus: On success, add IRC nick mention to msgChris Evich2019-08-30
|/ | | | | | | | | | | Rather than spamming the podman channel with impersonal success messages referring to PR numbers, mention the author by nick name and include the PR title and link. Also avoid needless logging of all bot-script interactions with IRC when there is no error detected. Signed-off-by: Chris Evich <cevich@redhat.com>
* Merge pull request #3710 from cevich/release_redoOpenShift Merge Robot2019-08-29
|\ | | | | Release redo
| * Cirrus: Reimplement release archive + uploadChris Evich2019-08-28
| | | | | | | | | | | | | | | | The initial implementation was far more complicated than necessary. Strip out the complexities in favor of a simpler and more direct approach. Signed-off-by: Chris Evich <cevich@redhat.com>
* | Merge pull request #3892 from cevich/google_vpcOpenShift Merge Robot2019-08-28
|\ \ | | | | | | Cirrus: Block CNI use of google VPCs
| * | Cirrus: Block CNI use of google VPCsChris Evich2019-08-28
| |/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Specifically pertaining to executing tests in google cloud, there are default, pre-allocated class-a subnetworks for each region (data-center). Each includes a gateway using a `.1` LSB and all are routable from other regions in google cloud via these gateways. Because the default CNI configuration also utilizes class-a subnetworks, this creates the possibility for IPv4 address-space clashes. Since the default regional cloud subnets are pre-defined/known, preventing clashes can be accomplished by seeding these subnets in a dummy CNI configuration. The default behavior of podman is to grab the highest priority CNI configuration. Name the dummy config. appropriate so it always loads last. Also name the bridge itself with an obvious name `do-not-use`, such that any related testing errors should be easier to debug. Also: * Minor cleanup of `install_test_configs()` * Move install_test_configs in `setup_environment.sh` to after possible run of `remove_packaged_podman_files()` because that also strips out `/etc/cni/net.d/87-podman-bridge.conflist`. Signed-off-by: Chris Evich <cevich@redhat.com>
* | Merge pull request #3728 from mheon/systemd_container_testOpenShift Merge Robot2019-08-28
|\ \ | | | | | | Add an integration test for systemd in a container
| * | Add an integration test for systemd in a containerMatthew Heon2019-08-28
| |/ | | | | | | Signed-off-by: Matthew Heon <matthew.heon@pm.me>
* / Cirrus: Enable VM image housekeepingChris Evich2019-08-26
|/ | | | | | | Also do some minor cleanup and add additional safety-checks to pruning script (container image). Signed-off-by: Chris Evich <cevich@redhat.com>
* Merge pull request #3824 from baude/varlinkendpointtestOpenShift Merge Robot2019-08-26
|\ | | | | Create framework for varlink endpoint integration tests
| * Create framework for varlink endpoint integration testsbaude2019-08-16
| | | | | | | | | | | | | | add the ability to write integration tests similar to our e2e tests for the varlink endpoints. Signed-off-by: baude <bbaude@redhat.com>
* | Merge pull request #3617 from QiWang19/create_pullOpenShift Merge Robot2019-08-17
|\ \ | | | | | | add --pull flag for podman create&run
| * | add --pull flag for podman create&runQi Wang2019-08-09
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Requirement from https://github.com/containers/libpod/issues/3575#issuecomment-512238393 Added --pull for podman create and pull to match the newly added flag in docker CLI. `missing`: default value, podman will pull the image if it does not exist in the local. `always`: podman will always pull the image. `never`: podman will never pull the image. Signed-off-by: Qi Wang <qiwan@redhat.com>
* | | Merge pull request #3822 from cevich/simplify_crun_taskOpenShift Merge Robot2019-08-17
|\ \ \ | | | | | | | | Cirrus: Minor: Simplify crun test task
| * | | Cirrus: Minor: Simplify crun test taskChris Evich2019-08-16
| | |/ | |/| | | | | | | Signed-off-by: Chris Evich <cevich@redhat.com>
* | | Cirrus: Confirm networking moreChris Evich2019-08-16
| | | | | | | | | | | | Signed-off-by: Chris Evich <cevich@redhat.com>
* | | Merge pull request #3796 from giuseppe/enable-cgroupsv2-crunOpenShift Merge Robot2019-08-16
|\ \ \ | | | | | | | | cirrus: enable cgroups v2 tests with crun
| * | | cirrus: enable cgroups v2 tests with crunGiuseppe Scrivano2019-08-13
| |/ / | | | | | | | | | Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
* / / Bump to v1.5.2-devMatthew Heon2019-08-15
|/ / | | | | | | Signed-off-by: Matthew Heon <matthew.heon@pm.me>
* | Merge pull request #3772 from haircommander/snapcraftOpenShift Merge Robot2019-08-13
|\ \ | | | | | | fork https://github.com/abitrolly/podman
| * | Add missing stage-packages in snapcraft.yaml.Jindrich Novy2019-08-13
| | | | | | | | | | | | Signed-off-by: Jindrich Novy <jnovy@redhat.com>
| * | Add RHEL and SUSE to snap docPeter Hunt2019-08-13
| | | | | | | | | | | | Signed-off-by: Peter Hunt <pehunt@redhat.com>
| * | start groundwork for adding snapPeter Hunt2019-08-13
| | | | | | | | | | | | | | | | | | by forking https://github.com/abitrolly/podman Signed-off-by: Peter Hunt <pehunt@redhat.com>
* | | Merge pull request #3791 from cevich/install_libvarlinkOpenShift Merge Robot2019-08-13
|\ \ \ | | | | | | | | Cirrus: Install varlink in VM images
| * | | Cirrus: Install varlink on UbuntuChris Evich2019-08-13
| | | | | | | | | | | | | | | | Signed-off-by: Chris Evich <cevich@redhat.com>
| * | | Cirrus: Install varlink on FedoraChris Evich2019-08-13
| | | | | | | | | | | | | | | | Signed-off-by: Chris Evich <cevich@redhat.com>
* | | | Merge pull request #3662 from marusak/user_socket_serviceOpenShift Merge Robot2019-08-13
|\ \ \ \ | | | | | | | | | | Add user systemd service and socket
| * | | | Add user systemd service and socketMatej Marusak2019-08-13
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This enables user to interact with varlink and create/manage rootless containers through it. Using as: `varlink call unix:/run/user/1000/podman/io.podman/io.podman.ListContainers` Signed-off-by: Matej Marusak <mmarusak@redhat.com>
* | | | | Merge pull request #3649 from cevich/brent_is_backOpenShift Merge Robot2019-08-13
|\ \ \ \ \ | |_|/ / / |/| | | | Revert "Cirrus: Temp. workaround missing imgprune image"
| * | | | Revert "Cirrus: Temp. workaround missing imgprune image"Chris Evich2019-08-12
| |/ / / | | | | | | | | | | | | | | | | | | | | This reverts commit 9b2e98f1e872354f0708a86b59e16b8b86e9f8b2. Signed-off-by: Chris Evich <cevich@redhat.com>
* | | | Merge pull request #3607 from cevich/cgroup2_vmOpenShift Merge Robot2019-08-12
|\ \ \ \ | |/ / / |/| | | Add another Fedora VM with cgroups v2 enabled
| * | | Cirrus: Add verification for cgroupv2 imageChris Evich2019-08-12
| | | | | | | | | | | | | | | | Signed-off-by: Chris Evich <cevich@redhat.com>
| * | | Cirrus: Add experimental fedora VM image & testChris Evich2019-08-12
| | | | | | | | | | | | | | | | Signed-off-by: Chris Evich <cevich@redhat.com>
| * | | Cirrus: Minor, use newer Ubuntu base imageChris Evich2019-08-12
| |/ / | | | | | | | | | Signed-off-by: Chris Evich <cevich@redhat.com>
* / / cirrus: install crunGiuseppe Scrivano2019-08-12
|/ / | | | | | | Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
* | Merge pull request #3594 from cevich/second_partitionOpenShift Merge Robot2019-08-10
|\ \ | | | | | | Add Second partition for storage-drive testing
| * | Cirrus: Add Second partition for storage testingChris Evich2019-08-01
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is mainly/initially to support use of Cirrus-CI in https://github.com/containers/buildah since that setup re-uses the VM images from this project. However, it also opens doors here, if libpod ever needs/wants to do things with a dedicated storage device and/or storage-drivers. Signed-off-by: Chris Evich <cevich@redhat.com>