36a0cecccf
Merge pull request #134 from containers/dependabot/go_modules/github.com/sirupsen/logrus-1.6.0
...
Bump github.com/sirupsen/logrus from 1.4.2 to 1.6.0
2020-05-05 09:55:05 -04:00
f5f3ed00cf
Merge pull request #136 from TomSweeneyRedHat/dev/tsweeney/sec1
...
Touch up Security title
2020-05-05 08:37:08 -04:00
fd159278df
Touch up Security title
...
Tweak the title slightly of the Security Policy.
Signed-off-by: TomSweeneyRedHat <tsweeney@redhat.com>
2020-05-04 17:47:51 -04:00
f129fa3ebf
Bump github.com/sirupsen/logrus from 1.4.2 to 1.6.0
...
Bumps [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus ) from 1.4.2 to 1.6.0.
- [Release notes](https://github.com/sirupsen/logrus/releases )
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md )
- [Commits](https://github.com/sirupsen/logrus/compare/v1.4.2...v1.6.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-05-04 07:58:14 -04:00
dfbfdbfa85
Merge pull request #132 from rhatdan/version
...
Bump to v0.10.0
2020-05-01 09:42:38 -04:00
1fd53f8081
Move to v0.10.1-dev
...
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-05-01 09:41:58 -04:00
94154d17db
Bump to v0.10.0
...
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-05-01 09:41:37 -04:00
4530e83c80
Merge pull request #131 from rhatdan/caps
...
Fix config.Capabilities function call
2020-05-01 09:40:34 -04:00
f681e24f01
Fix config.Capabilities function call
...
We need to normalize the capadd and capdrop functions, and
we need to return errors if the caller gives us bad input.
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-04-30 17:41:07 -04:00
436886731c
Merge pull request #129 from rhatdan/master
...
Bump to v0.9.5
2020-04-23 10:21:24 -04:00
b3d6be8164
Move to v0.9.5-dev
...
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-04-23 10:13:20 -04:00
866fcae845
Bump to v0.9.5
...
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-04-23 10:12:56 -04:00
12f969c734
Merge pull request #119 from containers/dependabot/go_modules/github.com/containers/storage-1.19.0
...
Bump github.com/containers/storage from 1.18.2 to 1.19.0
2020-04-23 10:07:07 -04:00
ea7d7afb90
Merge pull request #127 from giuseppe/fix-cgroup-default
...
config: default to cgroupns="host" on cgroup v1
2020-04-23 09:57:05 -04:00
1f92b8cdcb
config: default to cgroupns="host" on cgroup v1
...
cgroupns="private" should be used only on cgroup v2.
On cgroup v1 it would be a breaking change, and also we'd need to
check whether the kernel supports cgroup namespaces.
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2020-04-23 15:49:37 +02:00
2c9d0c5bb2
Merge pull request #125 from rhatdan/master
...
Bump to v0.9.4
2020-04-22 06:47:14 -04:00
420c965176
Move to v0.9.4-dev
...
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-04-22 06:42:48 -04:00
1f1871f5ba
Bump to v0.9.4
...
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-04-22 06:42:14 -04:00
0d92eac007
Merge pull request #124 from rhatdan/version
...
Bump to V0.9.3
2020-04-22 06:28:31 -04:00
c95067fc09
Move to v0.9.4-dev
...
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-04-22 06:27:09 -04:00
7f9fae7fec
Bump to v0.9.3
...
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-04-22 06:27:09 -04:00
58db368dec
Merge pull request #122 from giuseppe/default-no-userns
...
config: change default for userns to host
2020-04-22 06:24:44 -04:00
dfde2a6744
config: change default for userns to host
...
by default do not create a user namespace. A user namespace also
requires mappings to be specified and that is not possible with a
static setting. We cannot default to "auto" as it requires additional
configuration for the root user.
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2020-04-22 10:11:02 +02:00
738da5c42c
Merge pull request #121 from rhatdan/version
...
Bump to v0.9.2
2020-04-21 13:27:35 -04:00
9b082b94a4
Move to v0.9.3-dev
...
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-04-21 13:26:45 -04:00
466caa7e3d
Bump to v0.9.2
...
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-04-21 13:26:23 -04:00
3a8f95185c
Merge pull request #120 from rhatdan/events
...
Hard code libpod.conf EventsLogger to File
2020-04-21 13:24:39 -04:00
a5646cdc17
Hard code libpod.conf EventsLogger to File
...
Previous versions of podman ignored the EventsLogger setting
in libpod.conf and defaulted to "file". Containers.conf
should follow this for backwards compatibility.
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-04-21 12:07:47 -04:00
788959de77
Bump github.com/containers/storage from 1.18.2 to 1.19.0
...
Bumps [github.com/containers/storage](https://github.com/containers/storage ) from 1.18.2 to 1.19.0.
- [Release notes](https://github.com/containers/storage/releases )
- [Changelog](https://github.com/containers/storage/blob/master/docs/containers-storage-changes.md )
- [Commits](https://github.com/containers/storage/compare/v1.18.2...v1.19.0 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-04-20 09:52:08 -04:00
c1586f6ea9
Merge pull request #118 from TomSweeneyRedHat/dev/tsweeney/secup
...
Update security policy per review comments
2020-04-18 07:37:56 -04:00
aec314e13b
Update security policy per review comments
...
After the original was merged, a few review
updates came in on the google doc. This addresses
those updates.
Signed-off-by: TomSweeneyRedHat <tsweeney@redhat.com>
2020-04-17 19:50:27 -04:00
da455007e0
Merge pull request #117 from TomSweeneyRedHat/dev/tsweeney/sec
...
Add security policy
2020-04-15 16:09:33 -04:00
187830d762
Add security policy
...
Add a security policy to the containers common repo
that will then be pointed to by the other containers/*
projects.
This was based off of the one in crun by @giuseppe,
information in libpod, and heavily from [Kubernetes](https://kubernetes.io/docs/reference/issues-security/security/ )
Signed-off-by: TomSweeneyRedHat <tsweeney@redhat.com>
2020-04-15 13:24:40 -04:00
d5c36994e7
Merge pull request #116 from rhatdan/version
...
Version
2020-04-13 16:37:57 -04:00
495958209f
Move to v0.9.2-dev
...
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-04-13 15:53:20 -04:00
0145d5130a
Bump to v0.9.1
...
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-04-13 15:53:03 -04:00
881e2d620e
Merge pull request #115 from rhatdan/version
...
Add support for cgroups configuration
2020-04-13 15:50:28 -04:00
c58a215838
Add support for cgroups configuration
...
We need to be able to disable cgroups when running container engines inside of containers.
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-04-13 13:56:16 -04:00
f526e0a360
Merge pull request #114 from rhatdan/version
...
Bump to v0.9.0
2020-04-09 15:38:14 -04:00
0fb513573c
Tag v0.9.1-dev
...
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-04-09 15:37:28 -04:00
65b29181d1
Bump v0.9.0
...
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-04-09 15:37:01 -04:00
478701ceb8
Merge pull request #106 from QiWang19/auth-pkg
...
Add pkg/auth common code for login/logout
2020-04-09 15:35:14 -04:00
6b9441182d
Add pkg/auth common code for login/logout
...
pkg/auth includes CLI options definitions and implementatoin of login/logout.
Signed-off-by: Qi Wang <qiwan@redhat.com>
2020-04-09 13:38:57 -04:00
6a315376cf
Merge pull request #112 from mtrmac/make-vendor
...
Fix (make vendor)
2020-04-08 14:31:10 -04:00
37420a1b7c
Run (make vendor)
...
... effectively actually running (go mod tidy) now.
Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2020-04-08 17:31:00 +02:00
e624a2864a
Fix (make vendor)
...
(export a=b command args) does not run (command args) with a=b,
it sets $a to b, and marks variables $a $command $args as exported,
i.e. (command args) is not run.
So we were not actually running (go mod tidy).
Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2020-04-08 17:28:34 +02:00
4812c529b3
Merge pull request #111 from rhatdan/KVM
...
Add RuntimeSupportsKVM to config.Engine
2020-04-07 13:12:36 -04:00
c719975a94
Add RuntimeSupportsKVM to config.Engine
...
We need to identify the list of containers that support KVM separation, these
containers can run with a different SELinux label, and we might be able to
make different decisions in the container engines about how to launch these
containers.
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-04-07 10:11:59 -04:00
0b19129fed
Merge pull request #108 from containers/dependabot/go_modules/github.com/opencontainers/selinux-1.5.0
...
Bump github.com/opencontainers/selinux from 1.4.0 to 1.5.1
2020-04-07 09:49:29 -04:00
7d75decc27
Bump github.com/opencontainers/selinux from 1.4.0 to 1.5.1
...
Bumps [github.com/opencontainers/selinux](https://github.com/opencontainers/selinux ) from 1.4.0 to 1.5.1.
- [Release notes](https://github.com/opencontainers/selinux/releases )
- [Commits](https://github.com/opencontainers/selinux/compare/v1.4.0...v1.5.1 )
Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-04-06 17:19:53 -04:00
Daniel J Walsh