Commit Graph

795 Commits

Author SHA1 Message Date
OpenShift Merge Robot e32d0ae37f Merge pull request #403 from rhatdan/retry
Rename internal functions to make them easier to understand
2021-01-11 05:01:09 -05:00
Daniel J Walsh 72b45df084 Rename internal functions to make them easier to understand
Currently the difference between isRetryable and shouldRestart
is not clear in the function names, this simply makes them
more understandable.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-01-10 05:48:03 -05:00
Daniel J Walsh 6a0bdb1173 Merge pull request #402 from rhatdan/master
Move to v0.34.0-dev
2021-01-08 09:21:14 -05:00
Daniel J Walsh f5d66bfb38 Move to v0.34.0-dev
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-01-08 09:18:45 -05:00
Daniel J Walsh ed1c0cfbf2 Merge pull request #401 from rhatdan/VERSION
Bump to v0.33.0
2021-01-08 09:15:20 -05:00
Daniel J Walsh e85c24768a Move to v0.33.1-dev
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-01-08 09:14:12 -05:00
Daniel J Walsh a08eba1eb0 Bump to v0.33.0
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-01-08 09:13:41 -05:00
OpenShift Merge Robot 5398857622 Merge pull request #400 from rhatdan/VERSION
Update vendor of containers/storage
2021-01-08 09:08:32 -05:00
Daniel J Walsh d6d2fd11b4 Update vendor of containers/storage
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-01-08 08:52:21 -05:00
OpenShift Merge Robot 563ca57891 Merge pull request #399 from giuseppe/block-vmsplice
seccomp: drop 'vmsplice' from the allowed list
2021-01-08 08:44:50 -05:00
Giuseppe Scrivano 10e862731c seccomp: drop 'vmsplice' from the allowed list
More details: https://lore.kernel.org/linux-mm/X+PoXCizo392PBX7@redhat.com/

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2021-01-08 13:43:54 +01:00
OpenShift Merge Robot 5fab021a65 Merge pull request #398 from rhatdan/VERSION
Add new function to setup default environment
2021-01-07 16:08:51 -05:00
Daniel J Walsh 2694f2c7dc Add new function to setup default environment
Need to be able to getdefault container environment
based on use provided functions on httpProxy and use
the environment from the host.

This way users can modify the environment from podman

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-01-07 15:48:11 -05:00
OpenShift Merge Robot e6e15542ec Merge pull request #375 from ashley-cui/secrets
Implement secrets pkg: backend and filedriver
2021-01-06 11:07:46 -05:00
Daniel J Walsh df306144b8 Merge pull request #397 from rhatdan/VERSION
Bump to v0.32.1
2021-01-06 05:46:59 -05:00
Daniel J Walsh 9b118648e5 Move to v0.32.2-dev
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-01-06 05:46:01 -05:00
Daniel J Walsh 8ae21423c6 Bump to v0.32.1
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-01-06 05:45:41 -05:00
OpenShift Merge Robot 5b556f05a9 Merge pull request #396 from rhatdan/VERSION
Current code fails to compile on Darwin no syscall.ERESTART
2021-01-05 15:16:30 -05:00
Daniel J Walsh 79e8da1cbf Current code fails to compile on Darwin
syscall.ERESTART is not defined on Darwin, so move to
an unsupported package. While this would work on Windows
this code most likey never will, so rather then complicate
code, I just left ERESTART on Windows as not supported.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-01-05 13:46:11 -05:00
Ashley Cui 46550afb85 Implement secrets pkg: backend and filedriver
This is the implementation of the backend of secrets. pkg/secrets takes a secret name and data and does these operations on that secret data:  store, delete, lookup, and list, using a secretsmanager.

The first driver implemented here is a filedriver - where the data is stored unencrypted on disk in a file.

The secrets package can be easily expanded to use more drivers as the package implements an interface to accept different drivers

Signed-off-by: Ashley Cui <acui@redhat.com>
2021-01-05 09:38:35 -05:00
Daniel J Walsh 10382ba516 Merge pull request #394 from rhatdan/VERSION
Bump to v0.32.0
2021-01-04 13:00:18 -05:00
Daniel J Walsh baaf5adc4c Move to v0.32.1-dev 2021-01-04 12:58:55 -05:00
Daniel J Walsh cc77e99ac6 Bump to v0.32.0 2021-01-04 12:58:33 -05:00
OpenShift Merge Robot 5a4c3fcfa7 Merge pull request #392 from rhatdan/retry
Do not retry on most syscall failures
2021-01-04 11:37:07 -05:00
OpenShift Merge Robot 6345892d1b Merge pull request #393 from rhatdan/completions
http_proxy is supposed to default to true.
2021-01-04 10:41:26 +01:00
Daniel J Walsh 0332d42d57 Do not retry on most syscall failures
Also we now log at Warning level, so we should see the warnings on retries.

The current code retries on all failures except ECONNREFUSED.  We believe
this was a mistake, and should have been retrying on ECONNREFUSED, since this
could change on a retry.  On the other hand there are many other errno that
should not be ignored. This PR attempts to use the ERNNO that we assume might
be retryable and not retry on the others.

Fixes: https://github.com/containers/podman/issues/7963

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-12-30 06:40:52 -05:00
Daniel J Walsh 58231b6407 http_proxy is supposed to default to true.
In the containers.conf we default to true, but in code and man page
it is defaulted to false. Since Podman wants it defaulted to true
we need to change default and man page to match.

Also fixed the testing for SELinux, which would never succeed on an SELinux box.

Helps fix: https://github.com/containers/podman/pull/8844

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-12-29 08:04:52 -05:00
OpenShift Merge Robot d47b4bad6d Merge pull request #391 from rhatdan/completions
Add completions for --arch and --os
2020-12-25 03:10:23 +01:00
OpenShift Merge Robot cfd16b788a Merge pull request #390 from containers/dependabot/go_modules/github.com/containers/storage-1.24.4
Bump github.com/containers/storage from 1.24.3 to 1.24.4
2020-12-25 03:05:07 +01:00
Daniel J Walsh 65d9929a4f Add completions for --arch and --os
--arch and --os have a limited number of options, and these
should be filled in automatically.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-12-24 06:33:25 -05:00
dependabot-preview[bot] 810202a46d Bump github.com/containers/storage from 1.24.3 to 1.24.4
Bumps [github.com/containers/storage](https://github.com/containers/storage) from 1.24.3 to 1.24.4.
- [Release notes](https://github.com/containers/storage/releases)
- [Changelog](https://github.com/containers/storage/blob/master/docs/containers-storage-changes.md)
- [Commits](https://github.com/containers/storage/compare/v1.24.3...v1.24.4)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-12-23 16:00:00 -05:00
OpenShift Merge Robot 57e9c853aa Merge pull request #388 from rhatdan/seccomp1
Add support for DOCKER_CONFIG
2020-12-22 11:02:10 -05:00
Daniel J Walsh 4a45b19f07 Merge pull request #389 from rhatdan/VERSION
Bump to v0.31.2
2020-12-22 08:06:03 -05:00
Daniel J Walsh cd0fdfbf43 Moce to v0.31.3-dev
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-12-22 08:05:08 -05:00
Daniel J Walsh ddf4af29c6 Bump to v0.31.2
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-12-22 08:04:42 -05:00
Daniel J Walsh 6172fd7db6 Add support for DOCKER_CONFIG
DOCKER_CONFIG environment variable is sometimes used to point
to the config.json.  The container engines use REGISTRY_AUTH_FILE
for similar functionality.  This PR causes programs that use
GetAuthFile to use DOCKER_CONFIG if it set and REGISTRY_AUTH_FILE
is not.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-12-21 17:07:24 -05:00
OpenShift Merge Robot eb61713f10 Merge pull request #387 from rhatdan/seccomp1
Fix building on non linux platforms
2020-12-21 15:24:57 -05:00
Daniel J Walsh 70d93c6deb Fix building on non linux platforms
Currently this code is not building correctly on darwin builds.
This PR handles non linux platforms correctly.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-12-21 13:33:12 -05:00
OpenShift Merge Robot afb2659b2a Merge pull request #386 from rhatdan/VERSION
Switch references of /var/run -> /run
2020-12-21 15:02:54 +00:00
Daniel J Walsh ec4a98a333 Switch references of /var/run -> /run
Systemd is now complaining or mentioning /var/run as a legacy directory.
It has been many years where /var/run is a symlink to /run on all
most distributions, make the change to the default.

Partial fix for https://github.com/containers/podman/issues/8369

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-12-18 06:27:41 -05:00
Daniel J Walsh 33bf5263bc Merge pull request #384 from rhatdan/VERSION
Bump to v0.31.1
2020-12-17 06:03:36 -05:00
Daniel J Walsh ba74110fcd Move to v1.31.2-dev
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-12-17 06:02:28 -05:00
Daniel J Walsh 72c68af81d Bump to v1.31.1
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-12-17 06:02:08 -05:00
OpenShift Merge Robot d5f97d9c96 Merge pull request #382 from rhatdan/master
Find ociruntime instead of hard coding default
2020-12-16 18:45:35 +00:00
OpenShift Merge Robot f4af6b1da8 Merge pull request #383 from containers/dependabot/go_modules/github.com/opencontainers/selinux-1.8.0
Bump github.com/opencontainers/selinux from 1.7.0 to 1.8.0
2020-12-16 18:40:47 +00:00
dependabot-preview[bot] 60f936e119 Bump github.com/opencontainers/selinux from 1.7.0 to 1.8.0
Bumps [github.com/opencontainers/selinux](https://github.com/opencontainers/selinux) from 1.7.0 to 1.8.0.
- [Release notes](https://github.com/opencontainers/selinux/releases)
- [Commits](https://github.com/opencontainers/selinux/compare/v1.7.0...v1.8.0)

Signed-off-by: dependabot-preview[bot] <support@dependabot.com>
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-12-16 09:14:28 -05:00
Tom Sweeney e999c045ac Merge pull request #381 from rhatdan/seccomp1
Add pidfd_open syscall by default
2020-12-15 09:55:31 -05:00
Daniel J Walsh 297a9ab8d6 Add pidfd_open syscall by default
This syscall will actually allow processes to be more secure,  Should be allowed by
default.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-12-15 05:46:02 -05:00
Daniel J Walsh 44e14b12b9 Find ociruntime instead of hard coding default
Users could have any one of the OCI runtimes installed,
code will search for default.  This way they do not need
to modify defaults if they have "crun" installed.

Search order will be crun, runc, kata

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2020-12-15 05:43:45 -05:00
OpenShift Merge Robot 31771c7c1a Merge pull request #379 from containers/dependabot/go_modules/github.com/onsi/gomega-1.10.4
Bump github.com/onsi/gomega from 1.10.3 to 1.10.4
2020-12-09 08:42:56 -05:00