Commit Graph

25102 Commits

Author SHA1 Message Date
Inshal Khan 4ba8cde41d
Add HostName to quadlet pod
update docs for hostname

Signed-off-by: Inshal Khan <kziaul123@gmail.com>
2025-04-19 08:51:45 +05:30
openshift-merge-bot[bot] cb41c3901b
Merge pull request #25875 from TomSweeneyRedHat/dev/tsweeney/fixgov1
[CI:DOCS] Add link to MAINTAINERS.md file in GOVERNANCE.md
2025-04-18 20:49:30 +00:00
openshift-merge-bot[bot] f9eac5deb0
Merge pull request #25908 from Honny1/fix-ulimits-compat-api-with-rootless
Fix: Compat API in rootless mode ignores ulimits
2025-04-18 20:46:46 +00:00
openshift-merge-bot[bot] 3803429abb
Merge pull request #25918 from ricardobranco777/test_runc_namespaces
test: Fix expected output for runc on namespaces
2025-04-18 19:26:56 +00:00
openshift-merge-bot[bot] 7d6c4f9a47
Merge pull request #25914 from ygalblum/quadlet-add-systemd-deps
Quadlet - support additional systemd unit relationship keys
2025-04-17 22:37:44 +00:00
Ricardo Branco a7a7304c6f
test: Fix expected output for runc on namespaces
Signed-off-by: Ricardo Branco <rbranco@suse.de>
2025-04-17 23:15:57 +02:00
Florent Benoit 1514e5cbcc feat: update vfkit binary to v0.6.1 in macOS installer
Signed-off-by: Florent Benoit <fbenoit@redhat.com>
2025-04-17 22:01:31 +02:00
renovate[bot] 05e7eeaff4
fix(deps): update module github.com/docker/docker to v28.1.0+incompatible
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-17 19:48:18 +00:00
Ygal Blum 6ac0a28564 Quadlet - support additional systemd unit relationship keys
Signed-off-by: Ygal Blum <ygal.blum@gmail.com>
2025-04-17 14:51:24 -04:00
Brent Baude fdfed9979f Add ability to set layer media type for artifacts
in #25884, it was pointed out that the standard detection used to
determine the artifact's file type can be wrong.  in those cases, it
would be handy for the user to be able to override the media type of the
layer.  as such, added a new option called `--file-type`, which is
optional, and allows users to do just that.

`podman artifact add --file-type text/yaml
quay.io/artifact/config:latest ./config.yaml `

Fixes: #25884

Signed-off-by: Brent Baude <bbaude@redhat.com>
2025-04-17 10:36:21 -05:00
tomsweeneyredhat be937a4e20 Bump c/storage v1.58.0, c/image v5.35.0, c/common v0.63.0
Bump:
c/storage v1.58.0
c/image v5.35.0
c/common v0.63.0

In preparation for Podman v5.5.0

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
2025-04-17 11:05:56 -04:00
Jan Rodák 3cbb718049
Fix compat API in rootless mode ignores ulimits
Fixes: https://github.com/containers/podman/issues/25881

Signed-off-by: Jan Rodák <hony.com@seznam.cz>
2025-04-17 16:11:34 +02:00
openshift-merge-bot[bot] 51c4df1316
Merge pull request #25789 from jankaluza/23292
Replace podman pause image with rootfs.
2025-04-17 08:47:30 +00:00
Jan Kaluza 224e791161 Replace podman pause image with rootfs.
This commit removes the code to build a local pause
image from the Containerfile. It is replaced with
code to find the catatonit binary and include it in
the Rootfs.

This removes the need to build a local pause container
image.

The same logic is also applied to createServiceContainer
which is originally also based on the pause image.

Fixes: #23292

Signed-off-by: Jan Kaluza <jkaluza@redhat.com>
2025-04-17 08:36:27 +02:00
openshift-merge-bot[bot] f22a0a9de0
Merge pull request #25883 from containers/renovate/golangci-golangci-lint-2.x
chore(deps): update dependency golangci/golangci-lint to v2.1.2
2025-04-17 00:40:02 +00:00
openshift-merge-bot[bot] edcac9e9de
Merge pull request #25901 from eulores/patch-1
Update podman-systemd.unit.5.md
2025-04-16 21:06:36 +00:00
openshift-merge-bot[bot] 17f3aed4fd
Merge pull request #25899 from ygalblum/quadlet-unit-deps
Quadlet - translate dependencies on other quadlet units
2025-04-16 21:03:52 +00:00
openshift-merge-bot[bot] fd5ac51c9a
Merge pull request #25898 from Honny1/fix-nolintlint
CI: Fix directive `//nolint:revive` is unused for linter "revive" on ARM
2025-04-16 20:11:15 +00:00
openshift-merge-bot[bot] 1143162e69
Merge pull request #25887 from fice-t/no-new-priv
docs: Expand description of no-new-privileges
2025-04-16 20:08:41 +00:00
Andreas bc9110c69f
Update podman-systemd.unit.5.md
Table header in Pod units section was referring to podman container... instead of podman pod...

Signed-off-by: Andreas <43118918+eulores@users.noreply.github.com>
2025-04-16 21:52:11 +02:00
Ygal Blum e498c6526b Quadlet - translate dependencies on other quadlet units
Signed-off-by: Ygal Blum <ygal.blum@gmail.com>
2025-04-16 15:29:42 -04:00
Jan Rodák 69c2e68836
Fix directive `//nolint:revive` is unused for linter "revive" on ARM
Signed-off-by: Jan Rodák <hony.com@seznam.cz>
2025-04-16 16:17:28 +02:00
openshift-merge-bot[bot] ae63e2c932
Merge pull request #25876 from kolyshkin/golangci-v2-fup1
ci: fix two issues, remove unused exceptions
2025-04-16 13:21:24 +00:00
Kir Kolyshkin 8690b20732 .golangci.yml: rm legacy and common-false-positives
Those were originally added by golangci-lint migrate, but currently do
not result in any warnings being suppressed.

Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
2025-04-15 14:55:53 -07:00
Kir Kolyshkin 543a7ea062 pkg/bindings/containers: rm unused break
Reported by staticcheck linter:

> pkg/bindings/containers/term_windows.go:51:5: SA4011: ineffective break statement. Did you mean to break out of the outer loop? (staticcheck)
> 				break
> 				^

Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
2025-04-15 14:55:53 -07:00
Kir Kolyshkin 5f997a70bd cmd/podman/pods/create: fix break statement
This code was [somewhat messy but] correct until commit 51fbf3da9e
started to use switch instead of if, and since that time break is
breaking from the inner "switch" (rather than on the outer "for" as
originally intended).

This also fixes the following staticcheck warnings:

> cmd/podman/pods/create.go:242:5: SA4011: ineffective break statement. Did you mean to break out of the outer loop? (staticcheck)
> 				break
> 				^
> cmd/podman/pods/create.go:245:5: SA4011: ineffective break statement. Did you mean to break out of the outer loop? (staticcheck)
> 				break
> 				^

Signed-off-by: Kir Kolyshkin <kolyshkin@gmail.com>
2025-04-15 14:55:53 -07:00
Alexander Gramiak b615011b44 docs: Expand description of no-new-privileges
Fixes: #25853

Signed-off-by: Alexander Gramiak <agrambot@gmail.com>
2025-04-15 14:48:42 -06:00
openshift-merge-bot[bot] 2a9b1499db
Merge pull request #25879 from jankaluza/cloexec
Fix the fd leaking to aardvark-dns.
2025-04-15 19:52:18 +00:00
renovate[bot] 7b30f19535
chore(deps): update dependency golangci/golangci-lint to v2.1.2
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-04-15 15:53:06 +00:00
Jan Kaluza d9914ff27d Fix the fd leaking to aardvark-dns.
The openDirectory function is missing the unix.O_CLOEXEC flag.
As a result, this file descriptor can leak into the aardvark-dns
process which can then block the umount of rootfs - in this case,
the umount fails with "Device or Resource busy" error message.

This commits adds the unix.O_CLOEXEC to unix.Open call, resulting
in this fd to be closed on aardvark-dns exec.

Signed-off-by: Jan Kaluza <jkaluza@redhat.com>
2025-04-15 13:24:03 +02:00
Paul Holzinger 857b536507
test/system: add prefetch users to use cache image
When using a custom --root it will not have the image present and as
such cause a pull. We can however use our own local cache if present to
avoid the pull if we give the right podman options via
_PODMAN_TEST_OPTS.

I saw the volume quota test fail during the pull in openQA thus I
noticed this issue.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-04-15 12:36:40 +02:00
openshift-merge-bot[bot] f691fa7dc4
Merge pull request #25874 from Luap99/lint
update golangci-lint to v2.1.1
2025-04-15 10:30:45 +00:00
openshift-merge-bot[bot] fa8c2c856e
Merge pull request #25872 from mheon/governance_add_related_projects
Two small updates to the Governance model
2025-04-15 09:49:15 +00:00
tomsweeneyredhat 1a6431674f [CI:DOCS] Add link to MAINTAINERS.md file in GOVERNANCE.md
I noticed that the GOVERNANCE.md file did not have links to the
MAINTAINERS.md file.  Also added a link or two to the OWNERS file.

This change just adds links and does not change any wording.

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
2025-04-14 15:44:04 -04:00
openshift-merge-bot[bot] 09c2546b27
Merge pull request #25844 from ygalblum/quadlet-network-delete
Quadlet - allow deleting the network when stopping the service
2025-04-14 17:57:45 +00:00
Paul Holzinger f26765ceb0
update golangci-lint to v2.1.1
Fixes three new issues found by nilnesserr.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-04-14 19:33:42 +02:00
Matt Heon ae1e24f115 Two small updates to the Governance model
Firstly, include both subprojects in the model and link to them.
Ensures complete clarity on what is part of the Podman Project in
CNCF.

Secondly, add that Community Managers are expected to take notes
on Core Maintainer meetings and make those notes available to the
public.

Signed-off-by: Matt Heon <mheon@redhat.com>
2025-04-14 10:47:35 -04:00
openshift-merge-bot[bot] f64204f651
Merge pull request #25840 from Luap99/list-manifest
vendor: update to latest c/common
2025-04-14 13:43:59 +00:00
openshift-merge-bot[bot] 4b148e593f
Merge pull request #25856 from Luap99/flakes
Some minor flake cleanup/debugging/skips
2025-04-14 11:37:18 +00:00
openshift-merge-bot[bot] 18e20f8c34
Merge pull request #25837 from ninja-quokka/bump_precommit
Update pre-commit-hooks and Codespell hook
2025-04-14 10:11:40 +00:00
Lewis Roy 081629cf01
Update pre-commit-hooks and Codespell hook
pre-commit-hooks v3.4.0 -> v5.0.0
codespell 2.3.0 -> 3.4.1

Signed-off-by: Lewis Roy <lewis@redhat.com>
2025-04-13 14:26:34 +10:00
Paul Holzinger d3e2ca57e4
libpod: stats catch ErrStatCgroup
Stat() actually ignored ENOENT errors so there is no point in matching
them, instead of Stat() does not find a valid cgroup file it returns
ErrStatCgroup so match that instead.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-04-11 17:19:38 +02:00
Paul Holzinger 86d7da8b08
vendor: update to latest c/common
Fixes a flake in the system tests during image listing.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-04-11 17:17:23 +02:00
Paul Holzinger a4856a6224
test/system: add debug for /etc/hosts restore flake
Somehow the files do not match sometimes, I like to get data on the
/etc/hosts file on the host looks to see if this would explain anything.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-04-11 16:21:03 +02:00
Paul Holzinger 0849cbcf83
test/e2e: skip flaky restore into pod test
It is failing a lot, on the issue (#24571) there is a 100% reproducer
so we don't need to gather more data this is simply broken.

Reduce our flakes by skiping this until the main issue gets resolved.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-04-11 16:15:16 +02:00
Paul Holzinger 0fb78905c1
Revert "Instrument cleanup tracer to log weird volume removal flake"
This reverts commit d633824a95.

The issue has been fixed in commit 9a0c0b2eef and I have not seen it
since so remove this special case.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-04-11 15:12:33 +02:00
Paul Holzinger 0be44ccb20
test/system: add debug for healthcheck flake
Seen it a few times, the exit code differs but we didn't print the
command output so it hard to tell why podman errors out here.
This just adds the output and does not fix the flake.

https://api.cirrus-ci.com/v1/artifact/task/5368521426731008/html/sys-podman-fedora-41-rootless-host-boltdb.log.html

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-04-11 14:23:18 +02:00
openshift-merge-bot[bot] 48423a615d
Merge pull request #25701 from danegsta/danegsta/windowsCpPath
Fix windows path handling in `podman cp`
2025-04-10 16:53:23 +00:00
openshift-merge-bot[bot] ca0d7d7a57
Merge pull request #25827 from slp/update-krunkit-0.2.0
Bump bundled krunkit to 0.2.0
2025-04-10 14:54:47 +00:00
Ygal Blum 0d4a148ee6 Quadlet - allow deleting the network when stopping the service
Signed-off-by: Ygal Blum <ygal.blum@gmail.com>
2025-04-10 10:34:16 -04:00