Commit Graph

193 Commits

Author SHA1 Message Date
Paul Holzinger cf53f13527 docs: update network description
The current docs are confusing and partly wrong even.

Fixes containers/podman#25377

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-03-03 18:31:37 +01:00
George Joseph be77cc4e2d Allow Podman to send the container's hostname to Netavark
* Added ContainerHostname to NetworkOptions. Podman will set this
  and Netavark will read it.

* Added the `container_name_as_hostname` option to the
  CONTAINERS table in containers.conf.  Currently, if you don't
  explicitly set a hostname when creating a container, podman will
  set it to the short ID. If this option set to `true` and a
  hostname isn't explicitly set, podman will use the container's
  name, with characters not in the set `[0-9a-zA-Z.-]` removed,
  as the hostname instead of the short ID. Set to false by default
  to preserve existing behavior.

Signed-off-by: George Joseph <g.devel@wxy78.net>
2024-11-28 13:35:36 -07:00
Ron Green 94c308e905 docs(container.conf): command typo
Signed-off-by: Ron Green <11993626+georgettica@users.noreply.github.com>
2024-11-05 21:52:13 +02:00
Daniel J Walsh bda34022a5 Document krunkit for AI Workloads
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2024-10-14 08:05:25 -04:00
Daniel Rudolf f686a8f440 Update docs of `containers.conf` configs affecting /etc/hosts
Signed-off-by: Daniel Rudolf <github.com@daniel-rudolf.de>
2024-10-04 19:03:58 +02:00
Miloslav Trmač f061354cec Document that zstd:chunked is downgraded to zstd when encrypting
Partially resolves https://github.com/containers/common/issues/2117 .

Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2024-09-26 20:48:35 +02:00
Dominic fbc5d7baea doc: fix typo in Containerfile.5.md
A missing leading '*' in '*FROM**' caused FROM to be rendered as italic rather
than bold in markdown/html and as '*FROM**' (i.e. no styling) in the man page.

Signed-off-by: Dominic <4678790+dweiller@users.noreply.github.com>
2024-07-25 18:28:03 +10:00
Chris Evich b3b87370b6 Docs: Semiautomatic platform ARGs
Available for quite some time, but often useful and undocumented.
Fix that and a minor whitespace problem.

Signed-off-by: Chris Evich <cevich@redhat.com>
2024-07-11 10:57:47 -04:00
Chris Evich 588c8e9802 Docs: Fix GL/LT character masking
All/most markdown renderers will mask any naked `<` and `>` characters
that appear in the plain text.  This was making the documented syntax
of the `ARG` command unintelligible.  Fix this.

Signed-off-by: Chris Evich <cevich@redhat.com>
2024-07-11 10:44:41 -04:00
Chris Evich f241a3b420 Docs: rename buildah bud to build
The `bud` sub-command has been a hidden alias to `build` for quite a
while.  Fix the documentation accordingly.

Signed-off-by: Chris Evich <cevich@redhat.com>
2024-07-10 14:02:36 -04:00
chrisnestrud 3a52e0dd04 Fix typos
Repeated "to"s.

Signed-off-by: chrisnestrud <ccn@chrisnestrud.com>
2024-06-22 14:19:33 -05:00
Daniel J Walsh a9adf207a1 add relabel documentation to Containerfile man page
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2024-06-05 17:19:00 -04:00
Paul Holzinger f2386e3521 fix outdated firewall_driver docs
nftables was implemented for netavark v1.10

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2024-05-31 12:23:23 +02:00
phoenix 3ca51acd6e Add configuration for podmansh
Adds a new configuration section `podmansh` to configure the shell,
container and the timeout for podmansh.

Signed-off-by: phoenix <felix.niederwanger@suse.com>
2024-05-22 13:32:15 +02:00
Paul Holzinger 37be881563 pkg/config: add new healthcheck_events field
Some users wish to turn of healthcheck events in Podman so add a config
option to allow that. The actual logic must live in Podman.

Link: https://issues.redhat.com/browse/RHEL-18987

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2024-04-17 16:23:45 +02:00
Micah Chambers (eos) acddeb0689 feat: add a config to set in cdi directories
Adds config to pass CDI spec directory, so that it can be overridden.
The enables rootless containers since otherwise users have to write to
one of the shared, usually only root writeable paths at in /etc or /var.

Signed-off-by: Micah Chambers <micahc.vt@gmail.com>
Signed-off-by: Micah Chambers (minerva) <mchambers@anduril.com>
2024-03-28 09:45:07 -07:00
Lokesh Mandvekar ec70a4238c mention default runtimes correctly
Signed-off-by: Lokesh Mandvekar <lsm5@redhat.com>
2024-03-27 18:33:46 +05:30
openshift-merge-bot[bot] 2eb18e07c7 Merge pull request #1846 from mheon/allow_rootless_netns_pasta
Allow creation of a rootless netns backed by Pasta
2024-02-29 16:55:07 +00:00
Shion Tanaka 2f0a04c6ee Add Rosetta support for applehv(arm64)
Signed-off-by: Shion Tanaka <shtanaka@redhat.com>
2024-02-29 17:23:30 +09:00
Ashley Cui 2a2e8de528 Adjust machine image default
We no longer use `testing` as the default image from fcos for machine.
Adjust default to "" temporarily, as we're still stablizing the location and images for machine images, but still allow the user to specify a custom image via containers.conf.

Signed-off-by: Ashley Cui <acui@redhat.com>
2024-02-28 09:44:32 -05:00
Matt Heon e7b5e55c19 Allow creation of a rootless netns backed by Pasta
This makes the code for setting up rootless network namespaces
dependent on what the default rootless network provider is, and
allows Pasta to be used for traffic forwarding on the rootless
netns.

This also switches the default rootless network provider to Pasta

Signed-off-by: Matt Heon <mheon@redhat.com>
2024-02-27 08:17:09 -05:00
Daniel J Walsh 15ec5d8453 docker-archive/DockerV3Schema2MediaType only support Gzip compression
If user does not specify a compression format and transport is
docker-archive of manifesttype is DockerV2Schema2MediaType then we need
to force Gzip compression.

This is needed when we transition to zstd or zstd:chunked by default.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2024-02-24 21:16:28 -05:00
Daniel J Walsh c580f4054c Config for Retry and RetryDelay for pulling images
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2024-02-20 14:43:17 -05:00
Valentin Rothberg ea2e09ea34 containers.conf.5.md: fix append example
The fourth module had a copy-paste error and mistakenly claimed to be
number 3.

Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
2024-02-14 15:03:02 +01:00
Matt Heon e95b4d40c7 Update documentation to note that volumes use locks.
The existing documentation only describes containers and pods,
but volumes also consume locks as well (and have for years), so
update documentation to reflect that.

Fixes RHEL-24333

Signed-off-by: Matt Heon <mheon@redhat.com>
2024-02-09 11:39:28 -05:00
Paul Holzinger 8f0f7109e5 pkg/config: read user local config also as root
There is really no need to limit reading the config under
$XDG_CONFIG_HOME or $HOME to rootless users only. This poses two
problems, first on a multi user system any config that should be only
applied to root in /etc will also be read by all other users which makes
this impossible to use without having all user overwrite that option
with their local containers.conf. If we read the config from $HOME as
root as well then such changes are easy.
Second, because connections/farms are currently written by the cli it
means as root is tries to write under /etc which is not good as in some
envs /etc is mounted read only.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2024-01-29 16:28:07 +01:00
Vikas Goel 9b0147a1ae New global option interface_name in containers.conf
Add a new containers.conf attribute to define how to set interface name inside containers.

Relates to: containers/podman#21313

Signed-off-by: Vikas Goel <vikas.goel@gmail.com>
2024-01-25 07:11:33 -08:00
Lokesh Mandvekar af01fda323 containers.conf: add crun-vm as a runtime
Signed-off-by: Lokesh Mandvekar <lsm5@redhat.com>
2024-01-19 18:15:33 +05:30
Oleksandr Redko 3cc2a76ae9 Fix typos across repo; extend codespell config
Signed-off-by: Oleksandr Redko <Oleksandr_Redko@epam.com>
2024-01-03 23:38:47 +02:00
Chetan Giradkar 41f0492c7f Add configurability to Netavark firewall driver
closes #1338

Signed-off-by: Chetan Giradkar <cgiradka@redhat.com>
2023-11-28 12:51:21 +00:00
Valentin Rothberg c5e536c25b containers.conf: append to string arrays
Document how the overriding behavior during the loading sequence can be
changed to appending.

Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
2023-10-30 12:51:41 +01:00
Paul Holzinger 27b072610b pkg/config: lookup InitPath in HelperBinariesDir
Forcing a single upstream default for the init path is bad as some
distro use different install locations for various reasons.

To fix this use the existing helper_binaries_dir field to lookup in all
directories. To keep backwards compatibility we keep using the old
default and both Containers.InitPath and Engine.InitPath. Yes that is
right, somehow we ended up with the same config field under the
containers and engine section and they are both used in podman!
Thus we need to keep supporting both, only the field under the container
section was documented and now recommends the use of helper_binaries_dir.

To make the docs more clear also document what binaries are currently
looked up in helper_binaries_dir.

Note this needs further integration in podman.

Fixes #1110

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2023-10-18 12:55:29 +02:00
Paul Holzinger 6a79383d51 pkg/config: use empty default for db_backend
Podman should default to sqlite for new installs, however to not break
upgrades we should detect if a boltdb database exists and use that in
such case. Now in order to distinguish between an explicitly set
"sqlite" and "boltdb" and nothing set we use an empty default.

With that podman can know if we really should use the default or if it
was configured for a db explicitly. The actual detection logic must be
implemented in podman as we only know the file locations there.

This commit also drops the unused StateType as this was not used at all.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2023-10-10 15:57:52 +02:00
Valentin Rothberg ac851d5930 containers.conf: add `privileged` field to containers table
As requested in containers/podman/issues/20000, add a `privileged` field
to the containers table in containers.conf.  I was hesitant to add such
a field at first (for security reasons) but I understand that such a
field can come in handy when using modules - certain workloads require a
privileged container.

Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
2023-10-05 13:22:35 +02:00
Valentin Rothberg 6923f768c2 URGENT: heal CI: fix codespell
Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
2023-10-03 11:15:37 +02:00
Daniel J Walsh 744d68db46 Fix specification of unix:///run
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2023-09-17 07:40:14 -04:00
Aditya R 359ff162d0 containers.conf: add field for AddCompression to Engine table
Allows users to set default value of `AddCompression` to Engine table so
users can use https://github.com/containers/buildah/pull/4912 by
default.

Closes: https://github.com/containers/buildah/pull/4912#issuecomment-1661105029

Signed-off-by: Aditya R <arajan@redhat.com>
2023-08-24 17:10:06 +05:30
Valentin Rothberg 6847ea48a2 containers.conf: implement modules
Add a new concept to containers.conf called "modules".  A "module" is
a containers.conf file located at a specific directory.  More than one
module can be loaded in the specified order, following existing
override semantics.

There are three directories to load modules from:
 - $CONFIG_HOME/containers/containers.conf.modules
 - /etc/containers/containers.conf.modules
 - /usr/share/containers/containers.conf.modules

With CONFIG_HOME pointing to $HOME/.config or, if set, $XDG_CONFIG_HOME.
Absolute paths will be loaded as is, relative paths will be resolved
relative to the three directories above allowing for admin configs
(/etc/) to override system configs (/usr/share/) and user configs
($CONFIG_HOME) to override admin configs.

Also move some functions from config.go for locality.

Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
2023-08-14 09:40:27 +02:00
OpenShift Merge Robot 8694484524 Merge pull request #1586 from umohnani8/farms
Add Farms to config
2023-08-05 04:34:23 +02:00
Urvashi Mohnani 42a36d1ba1 Add Farms TOML table
Add two new fields Farms and DefaultFarm to the Config
to be used by the new podman buildfarm command.

Signed-off-by: Urvashi Mohnani <umohnani@redhat.com>
2023-08-03 09:53:48 -04:00
Daniel J Walsh cdb801ec18 We don't want TERM environment turned on by default
This should only be done in container-engines that are using a
terminal.

Reverts: https://github.com/containers/common/pull/267

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2023-07-31 11:33:28 -04:00
Daniel J Walsh 19a6a187a9 Allow mounts to be specified in containers.conf
We want to allow HPC Customers and others to specify mounts
inside of containers.conf, so that they can have a default
list of mounts into all of thier containers.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2023-07-25 15:06:08 -04:00
Valentin Rothberg 0ce0a1367c containers.conf: add new `compose_providers` option
Specify one or more external providers for the compose command.  The
first found provider is used for execution. Can be an absolute path or a
(file) name. Relative names are invalid.  File names are evaluated via
$PATH look ups.

Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
2023-07-24 15:53:17 +02:00
Valentin Rothberg dc08c0598b containers.conf: add new `compose_warnings_logs` option
Emit logs on each invocation of the compose command indicating that an
external compose provider is being executed.

Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
2023-07-24 10:06:41 +02:00
Valentin Rothberg aa35cb9756 containers.conf: document compat_api_enforce_docker_hub
Mention it in the man page.

Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
2023-07-24 10:06:41 +02:00
Lokesh Mandvekar 4bb9e26054 containers.conf: Add `podmansh_timeout`
Ref: https://github.com/containers/podman/pull/19140#discussion_r1254435823

Signed-off-by: Lokesh Mandvekar <lsm5@fedoraproject.org>
2023-07-14 15:19:11 -04:00
Martin Skøtt c40eb18238 Document --chown and --chmod
Signed-off-by: Martin Skøtt <mskoett@redhat.com>
2023-07-07 15:39:02 +02:00
Martin Skøtt b09bccaba9 Add FROM ... AS and COPY --from
Signed-off-by: Martin Skøtt <mskoett@redhat.com>
2023-07-07 14:44:47 +02:00
Giuseppe Scrivano 518758c4c7 config: add CompressionLevel to containers.conf
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2023-06-21 12:05:52 +02:00
Toshiki Sonoda 8cc8aafc07 Fix some containers.conf comments and docs
- Fix the type of the options.
- service_destinations should be engine.service_destinations

Related: https://github.com/containers/podman/issues/15615

Signed-off-by: Toshiki Sonoda <sonoda.toshiki@fujitsu.com>
2023-06-16 14:05:43 +09:00