Commit Graph

5328 Commits

Author SHA1 Message Date
Matthew Heon 8d5387eccd Bump to v1.6.0-dev
Signed-off-by: Matthew Heon <matthew.heon@pm.me>
2019-09-24 16:40:22 -04:00
Matthew Heon 9181c65b5d Bump to v1.6.0-rc2
Signed-off-by: Matthew Heon <matthew.heon@pm.me>
2019-09-24 16:39:59 -04:00
OpenShift Merge Robot 0000afc1af
Merge pull request #4098 from mheon/release_notes_1.6.0_rc2
Add release notes for new-in-RC2 changes
2019-09-24 21:34:29 +02:00
OpenShift Merge Robot 1dfac0e776
Merge pull request #4094 from haircommander/play-only-pod
play kube: Only support pod kind in k8s yaml
2019-09-24 20:41:43 +02:00
OpenShift Merge Robot b300b981e7
Merge pull request #3756 from gabibeyer/rootlessOrdering
rootless: Rearrange setup of rootless containers
2019-09-24 18:47:18 +02:00
OpenShift Merge Robot 079dc576de
Merge pull request #4097 from edsantiago/bats
system tests: run test: reenable and fix
2019-09-24 18:32:59 +02:00
Matthew Heon bb350b2bbf Add release notes for new-in-RC2 changes
Signed-off-by: Matthew Heon <matthew.heon@pm.me>
2019-09-24 11:20:16 -04:00
Ed Santiago c146f8d7d2 system tests: run test: reenable and fix
Test had incorrectly been disabled for all podman; it
should've been disabled only for podman-remote. Fixed
that, and fixed the problem that was causing failures:
podman-remote is gobbling up stdin (#4095), so no
tests were actually being run at all, or only one.
Fixed by redirecting input on the run_podman invocation.
Added, as backup, a confirmation mechanism to ensure
that all expected tests are being run.

Note that test is reenabled, but the output check is
disabled for podman-remote due to #4096; this at least
lets us check exit status.

Signed-off-by: Ed Santiago <santiago@redhat.com>
2019-09-24 08:46:40 -06:00
Peter Hunt e3a84b9487 play kube: Only support pod kind in k8s yaml
Since we only really support playing pods, and no other kubernetes types

Signed-off-by: Peter Hunt <pehunt@redhat.com>
2019-09-24 09:54:55 -04:00
OpenShift Merge Robot 83b2348313
Merge pull request #4089 from vrothberg/fix-4005
runtime: fix logic to disable SDNotify
2019-09-24 15:12:27 +02:00
Valentin Rothberg 3b90f1c765 runtime: fix logic to disable SDNotify
Fix the logic when getting the runtime for varlink to actually disable
SDNotify support.

Fixes: #4005
Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
2019-09-24 12:11:59 +02:00
gabi beyer 65d5a9823e add list mount tests
Add two unit tests to determine whether mounts are being listed
correctly. One tests that a created container is not listed
until mounted. The second checks that running containers are
mounted, and then no longer listed as mounted when they stop
running. The final test creates three containers, mounts two,
and checks that mount correctly only lists the two mounted.

Signed-off-by: gabi beyer <gabrielle.n.beyer@intel.com>
2019-09-24 11:01:28 +02:00
gabi beyer 0115be19f5 Make netns bind mount shared
To 'avoid unknown FS magic on "/run/user/1000/netns/...": 1021994'
make the network namespace bind-mount recursively shared, so the
mount is back-propogated to the host.

Signed-off-by: gabi beyer <gabrielle.n.beyer@intel.com>
2019-09-24 11:01:28 +02:00
gabi beyer f50ba201c4 Add Kata Containers support
Update documentation to show Kata Containers support is no longer
a limitation with merging of commit 486a5b9

Signed-off-by: gabi beyer <gabrielle.n.beyer@intel.com>
2019-09-24 11:01:28 +02:00
Gabi Beyer 5813c8246e rootless: Rearrange setup of rootless containers
In order to run Podman with VM-based runtimes unprivileged, the
network must be set up prior to the container creation. Therefore
this commit modifies Podman to run rootless containers by:
  1. create a network namespace
  2. pass the netns persistent mount path to the slirp4netns
     to create the tap inferface
  3. pass the netns path to the OCI spec, so the runtime can
     enter the netns

Closes #2897

Signed-off-by: Gabi Beyer <gabrielle.n.beyer@intel.com>
2019-09-24 11:01:28 +02:00
OpenShift Merge Robot 6ce8d05a5b
Merge pull request #3969 from abitrolly/patch-1
Cirrus: Push snap continuously
2019-09-23 21:42:05 +02:00
OpenShift Merge Robot f5951c7305
Merge pull request #4074 from giuseppe/override-etc-passwd-group
execuser: look at the source for /etc/{passwd,group} overrides
2019-09-23 21:15:26 +02:00
OpenShift Merge Robot a74dfdadd7
Merge pull request #4083 from mheon/document_system_events
Document the 'system' event types for 'podman events'
2019-09-23 20:03:34 +02:00
Matthew Heon 72e0339364 Document the 'system' event types for 'podman events'
Fixes: #4002

Signed-off-by: Matthew Heon <matthew.heon@pm.me>
2019-09-23 10:15:15 -04:00
Anatoli Babenia 387ffe7dd2 Cirrus: Add upload_snap to success dependencies
Signed-off-by: Anatoli Babenia <anatoli@rainforce.org>
2019-09-23 03:29:27 +03:00
Anatoli Babenia 6978f19779 Cirrus: Add snapcraft credentials
Signed-off-by: Anatoli Babenia <anatoli@rainforce.org>
2019-09-23 03:29:27 +03:00
Anatoli Babenia 0bae5bad1b Cirrus: Upload snap only on merges to master
Signed-off-by: Anatoli Babenia <anatoli@rainforce.org>
2019-09-23 03:29:27 +03:00
Anatoli Babenia 9fc6abf2a8 Cirrus: Push snap continuously
Signed-off-by: Anatoli Babenia <anatoli@rainforce.org>
2019-09-23 03:29:27 +03:00
OpenShift Merge Robot c0eff1a81c
Merge pull request #4071 from cevich/more_podbot
Cirrus: More podbot/success improvements
2019-09-22 16:57:54 +02:00
Giuseppe Scrivano 497678d9e3
exec: set HOME also with exec sessions
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2019-09-21 22:11:10 +02:00
Giuseppe Scrivano fb353f6f42
execuser: look at the source for /etc/{passwd,group} overrides
look if there are bind mounts that can shadow the /etc/passwd and
/etc/group files.  In that case, look at the bind mount source.

Closes: https://github.com/containers/libpod/pull/4068#issuecomment-533782941

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2019-09-21 22:11:09 +02:00
OpenShift Merge Robot 0d95e3aa06
Merge pull request #4029 from rhatdan/cgroup
We need to convert libpod.conf files in user homedir for cgroupv2
2019-09-21 20:19:48 +02:00
OpenShift Merge Robot e947d6354d
Merge pull request #3754 from cevich/latest_ubuntu
Add support for testing with the latest Ubuntu release
2019-09-21 11:00:00 +02:00
Daniel J Walsh e4e42e67e3
We need to convert libpod.conf files in user homedir for cgroupv2
If a user upgrades to a machine that defaults to a cgroups V2 machine
and has a libpod.conf file in their homedir that defaults to OCI Runtime runc,
then we want to change it one time to crun.

runc as of this point does not work on cgroupV2 systems.  This patch will
eventually be removed but is needed until runc has support.

Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2019-09-21 10:43:20 +02:00
OpenShift Merge Robot 819b63c8de
Merge pull request #4068 from giuseppe/always-set-home
container: make sure $HOME is always set
2019-09-21 10:15:32 +02:00
Chris Evich a6534a7c96
Cirrus: Temporarily disable testing on Ubuntu 19
The images build correctly but neither integration or remote client
tests pass.  Temporarily disable Ubuntu 19 testing until both are
ready to be supported.

Signed-off-by: Chris Evich <cevich@redhat.com>
2019-09-20 14:34:13 -04:00
Chris Evich 831a64393e
Cirrus: disable Evil Units in base-images
Also, minor update to prevent harmless 'Fatal: not a git repo' error.

Signed-off-by: Chris Evich <cevich@redhat.com>
2019-09-20 14:34:13 -04:00
Chris Evich 9a2ae2442d
Cirrus: Add latest ubuntu
Add the latest Ubuntu version into the testing matrix
and image-build workflow. This is also needed to support
other containers projects which share use of VM images
from this one.

Update package lists to include needs for contianers/storage
use of images.

Signed-off-by: Chris Evich <cevich@redhat.com>
2019-09-20 14:34:13 -04:00
Chris Evich 33b3d2914f
Cirrus: More podbot/success improvements
* Fix one disused and two missing required env. vars.
* Slightly optomize processing of commit-author names
* Fix problem of printing duplicate author names when there are multiple
commits.
* Fix bot's IRC connection timeout too short.
* Add a single retry of IRC connection after 5-second delay.

Signed-off-by: Chris Evich <cevich@redhat.com>
2019-09-20 14:03:54 -04:00
OpenShift Merge Robot 66f4bc7638
Merge pull request #4070 from cevich/podbot_creds
Cirrus: Update podbot credentials
2019-09-20 19:34:43 +02:00
Chris Evich babe201dae
Cirrus: Fix success script
Fixed a typo.

Also script was grabbing quotes and other non-email-address junk
while looping. Filter before and after to make sure we get 'em all.

Signed-off-by: Chris Evich <cevich@redhat.com>
2019-09-20 12:31:56 -04:00
Chris Evich 93869eb500
Cirrus: Update podbot credentials
Signed-off-by: Chris Evich <cevich@redhat.com>
2019-09-20 11:38:46 -04:00
Giuseppe Scrivano e42e1c45ae
container: make sure $HOME is always set
If the HOME environment variable is not set, make sure it is set to
the configuration found in the container /etc/passwd file.

It was previously depending on a runc behavior that always set HOME
when it is not set.  The OCI runtime specifications do not require
HOME to be set so move the logic to libpod.

Closes: https://github.com/debarshiray/toolbox/issues/266

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2019-09-20 16:01:38 +02:00
OpenShift Merge Robot 7ed1816900
Merge pull request #4051 from giuseppe/use-crun-pkg
tests: use crun package
2019-09-20 09:00:22 +02:00
OpenShift Merge Robot 9dc764c197
Merge pull request #4063 from baude/tomltypo
fix trivial type for event logger
2019-09-20 06:32:19 +02:00
OpenShift Merge Robot 45b0725102
Merge pull request #4064 from TomSweeneyRedHat/dev/tsweeney/tutfix
Move rootless and Mac to Tutorials page
2019-09-20 05:56:10 +02:00
OpenShift Merge Robot e155162e45
Merge pull request #4042 from jwhonce/wip/msi
Support podman-remote help on windows
2019-09-20 05:43:24 +02:00
TomSweeneyRedHat 9f84d2ee27 Move rootless and Mac to Tutorials page
As the title says.

Signed-off-by: TomSweeneyRedHat <tsweeney@redhat.com>
2019-09-19 19:26:32 -04:00
baude 4f0e095b23 fix trivial type for event logger
Fixes: #4062

Signed-off-by: baude <bbaude@redhat.com>
2019-09-19 18:20:01 -05:00
Jhon Honce 96bcf8cecc Support podman-remote help on windows
* Update scipts to produce darwin and windows output
* Update batch file to re-direct help requests to browser
* Add pandoc filter for markdown to html links

Signed-off-by: Jhon Honce <jhonce@redhat.com>
2019-09-19 14:14:38 -07:00
OpenShift Merge Robot c38844f5a9
Merge pull request #4060 from mheon/clean_paths
Clean destination paths during mount generation
2019-09-19 22:24:31 +02:00
Matthew Heon 720d8c9e3f Clean destination paths during mount generation
We identify and resolve conflicts in paths using destination path
matches. We require exact matches, largely for performance
reasons (we use maps to efficiently access, keyed by
destination). This usually works fine, until you get mounts that
are targetted at /output and /output/ - the same path, but not
the same string.

Use filepath.Clean() aggressively to try and solve this.

Signed-off-by: Matthew Heon <matthew.heon@pm.me>
2019-09-19 11:09:59 -04:00
Giuseppe Scrivano 6e35886dc2
tests: use crun package
Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2019-09-19 13:58:56 +02:00
OpenShift Merge Robot 408f2780a1
Merge pull request #3985 from cevich/verify_no_podman
Cirrus: Prevent resident pollution
2019-09-19 04:00:54 +02:00
OpenShift Merge Robot 6789428265
Merge pull request #4040 from mheon/mac_tutorial_links
Add links to the Mac tutorial in the main tutorial
2019-09-19 03:50:11 +02:00