Commit Graph

5904 Commits

Author SHA1 Message Date
Miloslav Trmač 5424d4659d
Merge pull request #2899 from TomSweeneyRedHat/dev/tsweeney/v5.36.0
Bump c/storage to v1.59.0, c/image to v5.36.0, then to v5.37.0-dev
2025-07-15 15:43:32 +02:00
tomsweeneyredhat 63e499f8bd Bump to v5.37.0-dev
Bumping main back to the next dev version.

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
2025-07-14 16:07:18 -04:00
tomsweeneyredhat 08ce6b4207 Bump to c/image v5.36.0
Bumping c/image to v5.36.0 in preparation for Podman v5.6

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
2025-07-14 15:58:20 -04:00
tomsweeneyredhat b5e2b66de1 Bump to c/storage v1.59.0
Bump to c/storage v1.59.0 in preparation for Podman v5.6

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
2025-07-14 15:55:27 -04:00
Miloslav Trmač 9e95082de6
Merge pull request #2898 from containers/renovate/golangci-golangci-lint-2.x
Update dependency golangci/golangci-lint to v2.2.2
2025-07-14 13:47:53 +02:00
renovate[bot] 70d266a90d
Update dependency golangci/golangci-lint to v2.2.2
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-11 20:11:36 +00:00
Miloslav Trmač ccfad4e90a
Merge pull request #2897 from containers/renovate/golang.org-x-crypto-0.x
Update module golang.org/x/crypto to v0.40.0
2025-07-11 14:54:51 +02:00
renovate[bot] 2b0ee9e199
Update module golang.org/x/crypto to v0.40.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-11 12:13:06 +00:00
Miloslav Trmač e41267885f
Merge pull request #2896 from mtrmac/simplesequoia-stub
Add a new Signer API for creating simple signing signatures with Sequoia-PGP
2025-07-11 14:12:07 +02:00
Miloslav Trmač 6b65ae3460 Add a new Signer API for creating simple signing signatures with Sequoia-PGP
This API is proven end-to-end in https://github.com/containers/image/pull/2876 and
https://github.com/containers/skopeo/pull/2645 , but it is not yet convenient to
use becahse the Rust dependency has to be compiled manually.

So, for now, add the API as a stub only; that allows building the CLIs
and tests on top, and they will light up once the backend is added.

Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2025-07-10 21:27:32 +02:00
Miloslav Trmač d9a97d88ab
Merge pull request #2894 from containers/renovate/github.com-docker-docker-28.x
Update module github.com/docker/docker to v28.3.2+incompatible
2025-07-10 19:37:54 +02:00
renovate[bot] 8a4cfcb468
Update module github.com/docker/docker to v28.3.2+incompatible
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-10 16:23:20 +00:00
Miloslav Trmač c30d2188c8
Merge pull request #2895 from containers/renovate/golang.org-x-term-0.x
Update module golang.org/x/term to v0.33.0
2025-07-10 18:21:38 +02:00
renovate[bot] 459d5ce80a
Update module golang.org/x/term to v0.33.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-10 13:30:15 +00:00
Miloslav Trmač 43d7bae0f7
Merge pull request #2893 from containers/renovate/github.com-docker-cli-28.x
Update module github.com/docker/cli to v28.3.2+incompatible
2025-07-10 15:29:02 +02:00
Miloslav Trmač f35440564f Use github.com/docker/cli/cli/config/configfile.DockerEnvConfigKey
Should not change behavior.

Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2025-07-10 00:04:09 +02:00
renovate[bot] 5e86ec4a9f
Update module github.com/docker/cli to v28.3.2+incompatible
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-09 21:22:39 +00:00
Miloslav Trmač d4dac81836
Merge pull request #2892 from containers/renovate/golang.org-x-sync-0.x
Update module golang.org/x/sync to v0.16.0
2025-07-09 23:21:30 +02:00
renovate[bot] b21f953ac4
Update module golang.org/x/sync to v0.16.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-09 19:50:18 +00:00
Miloslav Trmač 778317a885
Merge pull request #2891 from mtrmac/restrict-root-tests-storage
Restrict the root-only tests to ./storage
2025-07-07 20:08:19 +02:00
Miloslav Trmač f5c53d5e72 Restrict the root-only tests to ./storage
The filter already assumes that subpackage, by grepping
for a package-private function name, anyway.

Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2025-07-07 19:12:23 +02:00
Lokesh Mandvekar 8b4bc50986
Merge pull request #2890 from mtrmac/fedora-base
Run CI all on the Fedora images
2025-07-04 12:00:45 -04:00
Miloslav Trmač a353bd9a46 Run CI all on the Fedora images
... to simplify, and to allow using recent packages.

We were using Debian because previously we were using Ubuntu,
and that was because Ubuntu was the native distribution of
Travis even before we were running CI in any kind of container;
so there seems to have been no specific intent to use a non-Fedora OS,
at least originally.

Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2025-07-04 15:46:25 +02:00
Miloslav Trmač 35325479c8
Merge pull request #2888 from containers/renovate/github.com-docker-cli-28.x
Update module github.com/docker/cli to v28.3.1+incompatible
2025-07-03 18:37:16 +02:00
renovate[bot] 0c874369d6
Update module github.com/docker/cli to v28.3.1+incompatible
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-03 15:27:01 +00:00
Miloslav Trmač 1c5cd55029
Merge pull request #2889 from containers/renovate/github.com-docker-docker-28.x
Update module github.com/docker/docker to v28.3.1+incompatible
2025-07-03 17:25:47 +02:00
Miloslav Trmač ba5c193dfa Update indirect dependencies of docker/docker
Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2025-07-03 16:55:31 +02:00
renovate[bot] 2e5f43762d
Update module github.com/docker/docker to v28.3.1+incompatible
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-03 06:44:52 +00:00
Miloslav Trmač e3533743f6
Merge pull request #2886 from containers/renovate/github.com-containers-storage-digest
Update github.com/containers/storage digest to 83650ab
2025-07-01 16:56:51 +02:00
renovate[bot] 454f049a37
Update github.com/containers/storage digest to 83650ab
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-07-01 02:46:04 +00:00
Miloslav Trmač a7d5329d9f
Merge pull request #2885 from containers/renovate/golangci-golangci-lint-2.x
Update dependency golangci/golangci-lint to v2.2.1
2025-06-30 17:49:00 +02:00
renovate[bot] 1af2f78dd8
Update dependency golangci/golangci-lint to v2.2.1
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-06-29 21:45:25 +00:00
Miloslav Trmač d1b934afaf
Merge pull request #2884 from mtrmac/rekor-updates
Update the Rekor client to match Rekor 1.3.10
2025-06-27 18:49:40 +02:00
Miloslav Trmač 992eccabad Stop claiming that Rekor's HashedRekord only accepts SHA-256
Matches Rekor 1.3.5.

Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2025-06-27 18:06:18 +02:00
Miloslav Trmač 0fc7028e76 Do not enable connection pooling for rekorClient
We typically only use it for a single operation, so we
would leak connections + goroutines.

Matches Rekor 1.1.0.

Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2025-06-27 18:06:01 +02:00
Miloslav Trmač 84bfe041db
Merge pull request #2882 from containers/renovate/go.etcd.io-bbolt-1.x
Update module go.etcd.io/bbolt to v1.4.2
2025-06-27 15:26:50 +02:00
renovate[bot] 8811891740
Update module go.etcd.io/bbolt to v1.4.2
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-06-27 13:03:19 +00:00
Miloslav Trmač f942e09ebe
Merge pull request #2873 from Luap99/rektor
Replace sigstore/rekor/pkg/client with a manually-created client
2025-06-27 15:02:17 +02:00
Paul Holzinger e79f5a3cbe
signature/sigstore/rekor: add upload test again rekor server
Setup a local rekor server using podman to test against. With that we
can verify that our custom client code works against a real server.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-06-27 14:33:14 +02:00
Miloslav Trmač a3b0c1fae5
Replace sigstore/rekor/pkg/client with a manually-created client
This removes 4.728 MB from a macOS Skopeo binary and similar saving can
be seen in Podman and Buildah.

The costs are:

 - A few dozen lines of new code
 - A major loss of flexibility. All the removed layers had many options,
   this code hard-codes the choices we were making. Reintroducing the
   options could be pretty costly in extra code.
 - We lose the ability to debug Rekor API accesses via environment
   variables (something I had no idea exists; so there’s that.)
 - The previous code was able to decode responses in many formats, e.g.
   YAML, based on the Content-Type: header in the response. This one
   asks for JSON and expects JSON.

A proper test against a real rekor server is added in the next commit.

Signed-off-by: Miloslav Trmač <mitr@redhat.com>
Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-06-27 14:28:09 +02:00
Miloslav Trmač f86e886b59
Merge pull request #2881 from Luap99/buildtags
remove containers_image_{fulcio_stub,rekor_stub} build tags
2025-06-27 14:25:49 +02:00
Paul Holzinger d6dc9dd318 remove containers_image_rekor_stub build tag
It was added for debian so they could build without the deps but this is
no longer needed. Get rid of it to simplify the codebase.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-06-27 14:02:52 +02:00
Paul Holzinger 7d8f7bdc69 remove containers_image_fulcio_stub build tag
It was added for debian so they could build without the deps but this is
no longer needed, the tag is broken and fails to compile so just get rid
of it to simplify the codebase.

Fixes: #2877

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-06-27 14:02:52 +02:00
Miloslav Trmač fee667a061
Merge pull request #2878 from Luap99/test-root
CI: run tests that need root as root
2025-06-27 13:48:09 +02:00
Paul Holzinger d770ede2ac
CI: run go test with -v
For CI logs it is extremely useful to get the full output to see what
tests were run and skipped so one can verifiy CI is working as expected
and runs all out tests.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-06-26 16:01:10 +02:00
Paul Holzinger 8435a2d7d4
CI: run tests that need root as root
This is a quick and dirty fix but should get the job done and ensures
the tests are actually run by CI. The idea is simple to not waste
resources we just look for the test names using
ensureTestCanCreateImages() to skip as rootless.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-06-26 15:59:40 +02:00
Paul Holzinger 9849d43b5a
Makefile: add TESTFLAGS to pass flags to go test
For CI it would be useful if we can pass extra arguments to go test such
as -v or extra filters via -run.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-06-26 15:57:01 +02:00
Miloslav Trmač c0fdf1637f
Merge pull request #2879 from containers/renovate/github.com-docker-cli-28.x
fix(deps): update module github.com/docker/cli to v28.3.0+incompatible
2025-06-25 20:45:53 +02:00
Miloslav Trmač d1098021f1 Unset DOCKER_AUTH_CONFIG in tests
... to ensure the outside environment does not
interfere with the test.

Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2025-06-25 20:01:41 +02:00
renovate[bot] f45a84a8fb
fix(deps): update module github.com/docker/cli to v28.3.0+incompatible
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-06-25 17:24:46 +00:00