Commit Graph

25161 Commits

Author SHA1 Message Date
renovate[bot] a5748206d1
fix(deps): update module github.com/vishvananda/netlink to v1.3.1
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-09 21:52:54 +00:00
openshift-merge-bot[bot] 811aabd3b0
Merge pull request #26079 from mvfc/main
Take WSL path from PATH instead of forcing it to WindowsApps
2025-05-09 13:05:03 +00:00
openshift-merge-bot[bot] e138304f33
Merge pull request #26089 from l0rd/release-win-arm64-artifacts
Release win arm64 artifacts
2025-05-08 20:44:29 +00:00
openshift-merge-bot[bot] ec9406af4c
Merge pull request #26076 from containers/renovate/golang.org-x-net-0.x
fix(deps): update module golang.org/x/net to v0.40.0
2025-05-08 15:36:35 +00:00
Matheus Vitório b6eeaea7f3 Take path for wsl instead of forcing through WindowsApps
Signed-off-by: Matheus Cunha <matheusvflor@hotmail.com>
2025-05-08 16:39:03 +02:00
openshift-merge-bot[bot] 58b2eae38c
Merge pull request #25906 from jankaluza/25104-pidfs
Verify the ExecSession pid before killing it.
2025-05-08 10:03:50 +00:00
renovate[bot] d12588f581
fix(deps): update module golang.org/x/net to v0.40.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-08 09:55:33 +00:00
Mario Loriedo 136f2e1ba4 Update win-installer github job for arm64
Adds the build of the arm64 windows installer as part of the release
GitHub workflow.

When a Windows installer is uploaded to the GitHub release, it is named
consistently with the macOS one:

   `podman-installer-windows-${GOARCH}.exe`

Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>
2025-05-07 18:50:04 +02:00
Mario Loriedo efc3b178bb Build windows arm64 artifacts
Includes the necessary changes so that the `Makefile` target
`release-artifacts` builds the `-windows_arm64.zip` too.

In particular the arm64 versions of gvproxy and win-sshproxy
are downloaded as part of the windows arm64 release zip file.

Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>
2025-05-07 18:43:59 +02:00
Mario Loriedo 35e1c2033a Fix windows arm64 installer build
This is a followup of https://github.com/containers/podman/pull/26048

It fixes `process-release.ps1` that was always looking for the amd64 release
zip file, even if `$env:PODMAN_ARCH` was set to arm64. With this fix it looks
for the right zip file.

It fixes `winmake.ps1` that, when the `-arch` param was not passed, set `$env:PODMAN_ARCH`
to the empty string instead of the local `$env:GOARCH`.

Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>
2025-05-07 18:33:32 +02:00
openshift-merge-bot[bot] 1b55e39487
Merge pull request #26083 from itoffshore/secret-create
Update podman-secret-create.1.md
2025-05-07 12:57:54 +00:00
openshift-merge-bot[bot] ce47c999a5
Merge pull request #26085 from containers/renovate/github.com-containers-gvisor-tap-vsock-0.x
fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.8.6
2025-05-07 10:17:30 +00:00
renovate[bot] 9dffc251fc
fix(deps): update module github.com/containers/gvisor-tap-vsock to v0.8.6
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-07 09:32:21 +00:00
Stuart Cardall d6239385fd
Update podman-secret-create.1.md
* Adds example showing secure secret generation / rotation & mounting
* fixes https://github.com/containers/podman/issues/26064

Signed-off-by: Stuart Cardall <itoffshore@users.noreply.github.com>
2025-05-06 22:41:49 +01:00
openshift-merge-bot[bot] ebbf90decc
Merge pull request #26082 from ygalblum/quadlet-pod-name
Quadlet - fix pod name to depend on the name of the generate service
2025-05-06 19:51:51 +00:00
openshift-merge-bot[bot] a2f486feb3
Merge pull request #26039 from containers/renovate/github.com-vishvananda-netlink-digest
fix(deps): update github.com/vishvananda/netlink digest to 9d88d83
2025-05-06 19:13:19 +00:00
openshift-merge-bot[bot] 857cfb9062
Merge pull request #25861 from cesargoncalves/main
update podman socket output to include also exposed ports
2025-05-06 19:10:36 +00:00
Ygal Blum 4f38c2fea2 Quadlet - fix pod name to depend on the name of the generate service
Signed-off-by: Ygal Blum <ygal.blum@gmail.com>
2025-05-06 12:02:01 -04:00
openshift-merge-bot[bot] 0ed3df8b41
Merge pull request #26075 from containers/renovate/golang.org-x-crypto-0.x
fix(deps): update module golang.org/x/crypto to v0.38.0
2025-05-06 14:56:10 +00:00
renovate[bot] 4a4b8dcfe9
fix(deps): update module golang.org/x/crypto to v0.38.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-06 10:09:13 +00:00
Jan Kaluza f825639ebc Verify the ExecSession pid before killing it.
When container is being removed, podman iterates
through its exec sessions and checks whether exec
session pid is still alive.

The problem is that the pid can be reused for other processes,
so that it may not belong to exec session.
In this scenario podman may kill another process

This commit prevents it by doing following changes:

- Adds the PIDData string to ExecSession struct. This string
  is used to store additional context for a PID to later verify
  that the PID killed by the podman is really the one started by
  it.
- Adds new package called pidhandle which implements the methods
  generating the PIDData, and killing the PID with the PIDData
  ensuring the right PID is killed by verifying the metadata.

The new code uses pidfd_open and name_to_handle_at when available.
It fallbacks to process start-time get using the gopsutil package.

Fixes: #25104

Signed-off-by: Jan Kaluza <jkaluza@redhat.com>
2025-05-06 06:24:13 +02:00
openshift-merge-bot[bot] cd4a7b1f3a
Merge pull request #26074 from containers/renovate/golang.org-x-term-0.x
fix(deps): update module golang.org/x/term to v0.32.0
2025-05-05 21:03:20 +00:00
openshift-merge-bot[bot] e3df077f0a
Merge pull request #26029 from Luap99/machine-tz
pkg/machine: more timezone fixes
2025-05-05 21:00:35 +00:00
renovate[bot] 32d389a19c
fix(deps): update module golang.org/x/term to v0.32.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-05 18:53:33 +00:00
openshift-merge-bot[bot] 344796ae6b
Merge pull request #26038 from containers/renovate/github.com-hugelgupf-p9-digest
fix(deps): update github.com/hugelgupf/p9 digest to abc96d2
2025-05-05 18:51:58 +00:00
openshift-merge-bot[bot] 6fe66afaa7
Merge pull request #26072 from containers/renovate/golang.org-x-sys-0.x
fix(deps): update module golang.org/x/sys to v0.33.0
2025-05-05 18:29:44 +00:00
renovate[bot] 1f7d8e2273
fix(deps): update github.com/vishvananda/netlink digest to 9d88d83
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-05 18:28:00 +00:00
renovate[bot] fbdeff2b88
fix(deps): update module golang.org/x/sys to v0.33.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-05 17:33:37 +00:00
openshift-merge-bot[bot] 865c2c2b91
Merge pull request #26059 from ashley-cui/devbump
Automatically bump to -dev after tag
2025-05-05 15:10:13 +00:00
openshift-merge-bot[bot] e34185feea
Merge pull request #26065 from containers/renovate/golangci-golangci-lint-2.x
chore(deps): update dependency golangci/golangci-lint to v2.1.6
2025-05-05 14:56:28 +00:00
openshift-merge-bot[bot] 45c03c9dec
Merge pull request #26070 from containers/renovate/golang.org-x-sync-0.x
fix(deps): update module golang.org/x/sync to v0.14.0
2025-05-05 14:22:41 +00:00
openshift-merge-bot[bot] 65352aa6cf
Merge pull request #26048 from l0rd/winmake-arm64-support
Update winmake.ps1 to build arm64 artifacts
2025-05-05 14:11:36 +00:00
renovate[bot] 0b1623e2e4
fix(deps): update module golang.org/x/sync to v0.14.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-05 13:31:53 +00:00
openshift-merge-bot[bot] 401d1708fc
Merge pull request #26068 from giuseppe/fix-md-example
docs: fix markdown format
2025-05-05 13:30:08 +00:00
openshift-merge-bot[bot] 5b1eb7b1d6
Merge pull request #26061 from containers/renovate/setuptools-80.x
chore(deps): update dependency setuptools to ~=80.2.0
2025-05-05 10:36:09 +00:00
Giuseppe Scrivano 5d6c784252
docs: fix markdown format
Closes: https://github.com/containers/podman/issues/26063

Signed-off-by: Giuseppe Scrivano <gscrivan@redhat.com>
2025-05-05 10:15:12 +02:00
renovate[bot] ec6423e73b
chore(deps): update dependency golangci/golangci-lint to v2.1.6
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-04 17:48:26 +00:00
renovate[bot] 78065fd8c7
chore(deps): update dependency setuptools to ~=80.2.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-03 03:22:47 +00:00
Ashley Cui 3448ba5091 Automatically bump to -dev after tag
Create GitHub action to automatically bump to a -dev version after a release is tagged.

On a branch:
- The bump will always be a z bump on branches
- If the bump is to an RC, then the bump will be back down to dev (ie, 9.9.0-rc1 to 9.9.0-dev)
- If the bump is not an RC, the bump wil be up to dev (ie, 9.9.0 to 9.9.1-dev)

On main:
- If the X.Y version on main is smaller than the X.Y on the release tag, this action will open a PR to bump the version on main to the release tag's X.Y+1
- Major version (X) dev bumps will still need to be manual

Signed-off-by: Ashley Cui <acui@redhat.com>
2025-05-02 17:32:35 -04:00
Mario Loriedo 7fddbd4d4d Update winmake.ps1 to build arm64 artifacts
Winmake could only build amd64 artifacts (podman-remote, gvproxy,
win-sshproxy, podman.msi and podman-setup.exe).

This commit makes the necessary change to winmake so that it:
1) builds arm64 artifacts when executed on arm64
2) cross-compiles to arm64/amd64 with the  `-architecture` parameter

It depends on https://github.com/containers/podman/pull/26023 that
removes the need to build `check.c` code (that is not used anyway).

Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>
2025-05-02 20:22:28 +02:00
openshift-merge-bot[bot] 400a9a528b
Merge pull request #25722 from l0rd/fix-hyperv-volumes-with-space
Fix machines failing to start when a volume's path contains spaces
2025-05-02 14:03:15 +00:00
openshift-merge-bot[bot] 5e8e829d7b
Merge pull request #25945 from ninja-quokka/podman_machine_swap
feat: Add support for configuring swap in Podman machine
2025-05-02 13:21:48 +00:00
openshift-merge-bot[bot] b5befcd514
Merge pull request #26046 from containers/renovate/github.com-vbauerster-mpb-v8-8.x
fix(deps): update module github.com/vbauerster/mpb/v8 to v8.10.0
2025-05-02 11:14:46 +00:00
Paul Holzinger ac6080bea9
pkg/machinie: use TZ env for reading local timezone
The TZ var can be commonly used to overwrite the timezone so we should
honour that one as well.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-05-02 11:56:47 +02:00
Paul Holzinger a90fad3fc8
pkg/machine: rework getLocalTimeZone on linux
Get the timezone off the localtime symlink like systemd does it.
It is more efficient then fork/exec another command for it that may or
may not exits and the /etc/timezone files doesn't exist on most distros
so that is not a great fallback.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-05-02 11:56:47 +02:00
Paul Holzinger 193d7b8202
pkg/machine: properly setup zoneinfo symlink
If you run timedatectl inside it will not show the correct timezone, it
seems systemd really wants a relative link which is also documented by
coreos[1]. Also we can just use path.Join() directly and don't have to
convert the path again on windows.

[1] https://docs.fedoraproject.org/en-US/fedora-coreos/time-zone/#_setting_the_time_zone_via_ignition

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-05-02 11:56:46 +02:00
Paul Holzinger b431f06e64
pkg/machine: do not add broken localtime symlink
The timezone might be empty so the zoneinfo link would then be invalid.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-05-02 11:56:46 +02:00
openshift-merge-bot[bot] 804ad4e491
Merge pull request #26023 from l0rd/win-installer-remove-provider-check
Remove providers checks from the Windows Installer
2025-05-02 09:49:13 +00:00
renovate[bot] 039679d0ae
fix(deps): update module github.com/vbauerster/mpb/v8 to v8.10.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-05-02 06:13:38 +00:00
openshift-merge-bot[bot] 7800db68a9
Merge pull request #26040 from containers/renovate/github.com-shirou-gopsutil-v4-4.x
fix(deps): update module github.com/shirou/gopsutil/v4 to v4.25.4
2025-05-01 19:22:59 +00:00