Commit Graph

970 Commits

Author SHA1 Message Date
Qi Wang 1d57954f2c auth pkg supports login empty argument
Signed-off-by: Qi Wang <qiwan@redhat.com>
2020-05-06 12:16:50 -04:00
Daniel J Walsh 8816a082b9 Merge pull request #137 from rhatdan/policy
Specify default paths to policy.json file
2020-05-05 10:10:10 -04:00
Daniel J Walsh 92bf3877e9 Specify default paths to policy.json file
Currently if a rootless user runs podman in his homedir, and does
not have /etc/containers/policy.json on the system and does not
have ~/config/policy.json in his homedir, the command fails with
an error.

$ podman pull fedora
Error: error pulling image "fedora": unable to pull fedora: open /etc/containers/policy.json: no such file or directory

If the user has no root rights on the system, he can not create the file.
However the system would work fine if he created the file in his homedir.

With this change, we will force the default to be the file in his homedir if
BOTH files do not exist.  Now the error message for a rootless container would
be.

$ podman pull fedora
Error: unable to pull fedora: open /home/dwalsh/.config/containers/policy.json: no such file or directory

And the user has an idea how to fix this situation.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-05-05 10:01:09 -04:00
Daniel J Walsh 28d65993d5 Merge pull request #133 from containers/dependabot/go_modules/github.com/containers/storage-1.19.1
Bump github.com/containers/storage from 1.19.0 to 1.19.1
2020-05-05 09:55:22 -04:00
Daniel J Walsh 36a0cecccf Merge pull request #134 from containers/dependabot/go_modules/github.com/sirupsen/logrus-1.6.0
Bump github.com/sirupsen/logrus from 1.4.2 to 1.6.0
2020-05-05 09:55:05 -04:00
Daniel J Walsh f5f3ed00cf Merge pull request #136 from TomSweeneyRedHat/dev/tsweeney/sec1
Touch up Security title
2020-05-05 08:37:08 -04:00
TomSweeneyRedHat fd159278df Touch up Security title
Tweak the title slightly of the Security Policy.

Signed-off-by: TomSweeneyRedHat <tsweeney@redhat.com>
2020-05-04 17:47:51 -04:00
dependabot-preview[bot] 817373c77a Bump github.com/containers/storage from 1.19.0 to 1.19.1
Bumps [github.com/containers/storage](https://github.com/containers/storage) from 1.19.0 to 1.19.1.
- [Release notes](https://github.com/containers/storage/releases)
- [Changelog](https://github.com/containers/storage/blob/master/docs/containers-storage-changes.md)
- [Commits](https://github.com/containers/storage/compare/v1.19.0...v1.19.1)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-05-04 07:58:39 -04:00
dependabot-preview[bot] f129fa3ebf Bump github.com/sirupsen/logrus from 1.4.2 to 1.6.0
Bumps [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) from 1.4.2 to 1.6.0.
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](https://github.com/sirupsen/logrus/compare/v1.4.2...v1.6.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-05-04 07:58:14 -04:00
Daniel J Walsh dfbfdbfa85 Merge pull request #132 from rhatdan/version
Bump to v0.10.0
2020-05-01 09:42:38 -04:00
Daniel J Walsh 1fd53f8081 Move to v0.10.1-dev
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-05-01 09:41:58 -04:00
Daniel J Walsh 94154d17db Bump to v0.10.0
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-05-01 09:41:37 -04:00
Daniel J Walsh 4530e83c80 Merge pull request #131 from rhatdan/caps
Fix config.Capabilities function call
2020-05-01 09:40:34 -04:00
Daniel J Walsh f681e24f01 Fix config.Capabilities function call
We need to normalize the capadd and capdrop functions, and
we need to return errors if the caller gives us bad input.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-04-30 17:41:07 -04:00
Daniel J Walsh 436886731c Merge pull request #129 from rhatdan/master
Bump to v0.9.5
2020-04-23 10:21:24 -04:00
Daniel J Walsh b3d6be8164 Move to v0.9.5-dev
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-04-23 10:13:20 -04:00
Daniel J Walsh 866fcae845 Bump to v0.9.5
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-04-23 10:12:56 -04:00
Daniel J Walsh 12f969c734 Merge pull request #119 from containers/dependabot/go_modules/github.com/containers/storage-1.19.0
Bump github.com/containers/storage from 1.18.2 to 1.19.0
2020-04-23 10:07:07 -04:00
Daniel J Walsh ea7d7afb90 Merge pull request #127 from giuseppe/fix-cgroup-default
config: default to cgroupns="host" on cgroup v1
2020-04-23 09:57:05 -04:00
Giuseppe Scrivano 1f92b8cdcb config: default to cgroupns="host" on cgroup v1
cgroupns="private" should be used only on cgroup v2.

On cgroup v1 it would be a breaking change, and also we'd need to
check whether the kernel supports cgroup namespaces.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2020-04-23 15:49:37 +02:00
Daniel J Walsh 2c9d0c5bb2 Merge pull request #125 from rhatdan/master
Bump to v0.9.4
2020-04-22 06:47:14 -04:00
Daniel J Walsh 420c965176 Move to v0.9.4-dev
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-04-22 06:42:48 -04:00
Daniel J Walsh 1f1871f5ba Bump to v0.9.4
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-04-22 06:42:14 -04:00
Daniel J Walsh 0d92eac007 Merge pull request #124 from rhatdan/version
Bump to V0.9.3
2020-04-22 06:28:31 -04:00
Daniel J Walsh c95067fc09 Move to v0.9.4-dev
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-04-22 06:27:09 -04:00
Daniel J Walsh 7f9fae7fec Bump to v0.9.3
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-04-22 06:27:09 -04:00
Daniel J Walsh 58db368dec Merge pull request #122 from giuseppe/default-no-userns
config: change default for userns to host
2020-04-22 06:24:44 -04:00
Giuseppe Scrivano dfde2a6744 config: change default for userns to host
by default do not create a user namespace.  A user namespace also
requires mappings to be specified and that is not possible with a
static setting.  We cannot default to "auto" as it requires additional
configuration for the root user.

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2020-04-22 10:11:02 +02:00
Daniel J Walsh 738da5c42c Merge pull request #121 from rhatdan/version
Bump to v0.9.2
2020-04-21 13:27:35 -04:00
Daniel J Walsh 9b082b94a4 Move to v0.9.3-dev
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-04-21 13:26:45 -04:00
Daniel J Walsh 466caa7e3d Bump to v0.9.2
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-04-21 13:26:23 -04:00
Daniel J Walsh 3a8f95185c Merge pull request #120 from rhatdan/events
Hard code libpod.conf EventsLogger to File
2020-04-21 13:24:39 -04:00
Daniel J Walsh a5646cdc17 Hard code libpod.conf EventsLogger to File
Previous versions of podman ignored the EventsLogger setting
in libpod.conf and defaulted to "file".  Containers.conf
should follow this for backwards compatibility.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-04-21 12:07:47 -04:00
dependabot-preview[bot] 788959de77 Bump github.com/containers/storage from 1.18.2 to 1.19.0
Bumps [github.com/containers/storage](https://github.com/containers/storage) from 1.18.2 to 1.19.0.
- [Release notes](https://github.com/containers/storage/releases)
- [Changelog](https://github.com/containers/storage/blob/master/docs/containers-storage-changes.md)
- [Commits](https://github.com/containers/storage/compare/v1.18.2...v1.19.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-04-20 09:52:08 -04:00
Daniel J Walsh c1586f6ea9 Merge pull request #118 from TomSweeneyRedHat/dev/tsweeney/secup
Update security policy per review comments
2020-04-18 07:37:56 -04:00
TomSweeneyRedHat aec314e13b Update security policy per review comments
After the original was merged, a few review
updates came in on the google doc.  This addresses
those updates.

Signed-off-by: TomSweeneyRedHat <tsweeney@redhat.com>
2020-04-17 19:50:27 -04:00
Daniel J Walsh da455007e0 Merge pull request #117 from TomSweeneyRedHat/dev/tsweeney/sec
Add security policy
2020-04-15 16:09:33 -04:00
TomSweeneyRedHat 187830d762 Add security policy
Add a security policy to the containers common repo
that will then be pointed to by the other containers/*
projects.

This was based off of the one in crun by @giuseppe,
information in libpod, and heavily from [Kubernetes](https://kubernetes.io/docs/reference/issues-security/security/)

Signed-off-by: TomSweeneyRedHat <tsweeney@redhat.com>
2020-04-15 13:24:40 -04:00
Daniel J Walsh d5c36994e7 Merge pull request #116 from rhatdan/version
Version
2020-04-13 16:37:57 -04:00
Daniel J Walsh 495958209f Move to v0.9.2-dev
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-04-13 15:53:20 -04:00
Daniel J Walsh 0145d5130a Bump to v0.9.1
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-04-13 15:53:03 -04:00
Tom Sweeney 881e2d620e Merge pull request #115 from rhatdan/version
Add support for cgroups configuration
2020-04-13 15:50:28 -04:00
Daniel J Walsh c58a215838 Add support for cgroups configuration
We need to be able to disable cgroups when running container engines inside of containers.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-04-13 13:56:16 -04:00
Daniel J Walsh f526e0a360 Merge pull request #114 from rhatdan/version
Bump to v0.9.0
2020-04-09 15:38:14 -04:00
Daniel J Walsh 0fb513573c Tag v0.9.1-dev
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-04-09 15:37:28 -04:00
Daniel J Walsh 65b29181d1 Bump v0.9.0
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-04-09 15:37:01 -04:00
Daniel J Walsh 478701ceb8 Merge pull request #106 from QiWang19/auth-pkg
Add pkg/auth common code for login/logout
2020-04-09 15:35:14 -04:00
Qi Wang 6b9441182d Add pkg/auth common code for login/logout
pkg/auth includes CLI options definitions and implementatoin of login/logout.

Signed-off-by: Qi Wang <qiwan@redhat.com>
2020-04-09 13:38:57 -04:00
Daniel J Walsh 6a315376cf Merge pull request #112 from mtrmac/make-vendor
Fix (make vendor)
2020-04-08 14:31:10 -04:00
Miloslav Trmač 37420a1b7c Run (make vendor)
... effectively actually running (go mod tidy) now.

Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2020-04-08 17:31:00 +02:00