Commit Graph

25303 Commits

Author SHA1 Message Date
Paul Holzinger ac71bc6cf2
vendor: update buildah to latest main
Includes one breaking change for the flag as BuildOutputs now accept a
slice.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-06-05 12:19:59 +02:00
Paul Holzinger 96abeafc61
vendor: update c/{common,image,storage} to latest main
Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-06-05 12:19:59 +02:00
Paul Holzinger d44f0afa84
vendor: update github.com/docker/docker to v28.2.2
Two incomptable changes, they removed the BridgeNfIP6tables
and BridgeNfIptables fields so we must drop them. As they are not
important ones that should not cause problems.

Second, they moved to using DockerOCIImageConfig from another new module.
The json format did not chnage so this is not an external API break.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-06-05 12:19:58 +02:00
openshift-merge-bot[bot] 4871ad1dc6
Merge pull request #26278 from Luap99/quadlet-network-interface
quadlet: add InterfaceName option to network unit
2025-06-04 18:08:07 +00:00
Paul Holzinger a0f7db44e8
quadlet: add InterfaceName option to network unit
I noticed this was missing, its a simple 1 to 1 mapping to
--interface-name.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-06-04 16:46:39 +02:00
openshift-merge-bot[bot] badf6b8b17
Merge pull request #26111 from ninja-quokka/restful_art
feat: Add OCI Artifact support to the Podman REST API
2025-06-04 14:34:52 +00:00
openshift-merge-bot[bot] 2d234fab34
Merge pull request #26177 from Luap99/machine-linger
pkg/machine: setup lingering for custom username and remove unnecessary sleep service
2025-06-04 14:04:37 +00:00
openshift-merge-bot[bot] 4030ee62c8
Merge pull request #26221 from Luap99/resolv
libpod: don't force only network search domains
2025-06-04 08:56:08 +00:00
Lewis Roy 99cfdc04db
feat: Add OCI Artifact support to the Podman REST API
This patch adds a new endpoint to the REST API called "artifacts" with
the following methods:
- Add
- Extract
- Inspect
- List
- Pull
- Push
- Remove

This API will be utilised by the Podman bindings to add OCI Artifact
support to our remote clients.

Jira: https://issues.redhat.com/browse/RUN-2711

Signed-off-by: Lewis Roy <lewis@redhat.com>
2025-06-04 15:49:34 +10:00
openshift-merge-bot[bot] 6a39f37845
Merge pull request #26216 from flouthoc/reuse-excludes
build: reuse `parse.ContainerIgnoreFile` from buildah
2025-06-03 23:59:19 +00:00
flouthoc eadded9154
build: reuse parse.ContainerIgnoreFile from buildah
podman's logic to parse excludes from `--ignorefile` is not consistent
with buildah, use code directly from imagebuilder.

Closes: https://github.com/containers/podman/issues/25746

Signed-off-by: flouthoc <flouthoc.git@gmail.com>
2025-06-03 12:03:06 -07:00
openshift-merge-bot[bot] a3e65c7e55
Merge pull request #26256 from containers/renovate/github.com-shirou-gopsutil-v4-4.x
fix(deps): update module github.com/shirou/gopsutil/v4 to v4.25.5
2025-06-03 10:25:51 +00:00
openshift-merge-bot[bot] a9aec98395
Merge pull request #26265 from containers/renovate/pytest-8.x
chore(deps): update dependency pytest to v8.4.0
2025-06-02 21:01:07 +00:00
openshift-merge-bot[bot] 226155e7ef
Merge pull request #26252 from sonnysasaka/fix-error-check
podman system check: Fix error check logic
2025-06-02 18:29:32 +00:00
renovate[bot] 0719acbe7f
chore(deps): update dependency pytest to v8.4.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-06-02 18:27:42 +00:00
openshift-merge-bot[bot] 87eeb3cf38
Merge pull request #26264 from Luap99/kube-empty-alias
play kube: never add empty alias
2025-06-02 18:26:49 +00:00
Paul Holzinger 89b8e23385
test/system: check --dns-option behavior
We should fully replace the options, now that we vendored the
libnetwork/resolvconf changes into podman this just works.

Fixes: #22399

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-06-02 19:02:13 +02:00
Sonny Sasaka c87a761e05 podman system check: Fix error check logic
Previously there is a minor logic error, which causes podman system
check to do the check twice although there is no repair flag.

Signed-off-by: Sonny Sasaka <sonnysasaka@gmail.com>
2025-06-02 09:58:42 -07:00
Paul Holzinger 75dc508e98
libpod: don't force only network search domains
We like to append the host servers in that case so that we do not only
force dns.podman.

Fixes: #24713
Fixes: https://issues.redhat.com/browse/RHEL-83787

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-06-02 18:45:11 +02:00
renovate[bot] 04a1a39a69
fix(deps): update module github.com/shirou/gopsutil/v4 to v4.25.5
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-06-02 16:21:25 +00:00
Paul Holzinger 869fceb0fd
update c/common to latest main
Contains the resolv.conf setup changes.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-06-02 18:13:25 +02:00
Paul Holzinger da95bbdd5d
play kube: never add empty alias
Netavark v1.15 added new warnings on some invalid names and that
triggerd a new test failure in podman e2e test.

The "Podman kube play with disabled cgroup" case now complains about an
empty name:
podman [options] kube play /tmp/CI_aM20/podman-e2e-3156601197/subtest-3441376193/p/kube.yaml
[WARN  netavark::network::bridge] invalid network alias "": name is empty, ignoring this name

This is because this test does not set a container name thus the code
was adding an empty string so to fix it check if the name is not empty
first.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-06-02 17:58:30 +02:00
openshift-merge-bot[bot] 746cbf12c9
Merge pull request #26248 from mtrmac/ostree
Don't BuildRequires: ostree-devel
2025-06-02 12:50:03 +00:00
openshift-merge-bot[bot] 961807a254
Merge pull request #26253 from containers/renovate/github.com-opencontainers-runtime-tools-digest
fix(deps): update github.com/opencontainers/runtime-tools digest to 0ea5ed0
2025-06-02 12:00:30 +00:00
renovate[bot] b64817de40
fix(deps): update github.com/opencontainers/runtime-tools digest to 0ea5ed0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-06-01 01:58:59 +00:00
Miloslav Trmač 2c252a7614 Don't BuildRequires: ostree-devel
We are not opting into the ostree backend, and it doesn't
build: https://github.com/containers/image/pull/2821 .
So, stop referencing the dependency.

Should not change behavior.

Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2025-05-31 01:43:49 +02:00
openshift-merge-bot[bot] 27593b9e33
Merge pull request #26225 from Luap99/df-panic
system df --verbose don't crash
2025-05-30 22:04:53 +00:00
openshift-merge-bot[bot] 3b91669cd4
Merge pull request #26235 from mheon/fix_26101
Allow not specifying type with --mount flag
2025-05-30 20:50:20 +00:00
Matthew Heon 3837339e0e Allow not specifying type with --mount flag
Docker does not require `--type` to be passed, defaulting to
`type=volume` in cases where it's not passed. Do the same in our
volume parsing, and add a test to verify this works as expected.

Fixes #26101

Signed-off-by: Matthew Heon <matthew.heon@pm.me>
2025-05-30 14:47:13 -04:00
Matthew Heon 775a85004f Add "dest" as an alias for "destination" in `--mount`
Given I wrote this and I still mess it up on a regular basis, I
cannot be alone in forgetting whether "dst" or "dest" is the
correct short option for "destination". Let's just make both
valid, I don't see a reason not to.

Signed-off-by: Matthew Heon <matthew.heon@pm.me>
2025-05-30 14:47:13 -04:00
openshift-merge-bot[bot] 2f91c5c6c3
Merge pull request #26245 from Luap99/quadlet-docs
docs: quadlet can translate names now
2025-05-30 17:48:50 +00:00
Paul Holzinger f2d941b241
docs: quadlet can translate names now
Remove no longer correct statement that quadlet that does not translate
our own custom unit types

Fixes: e498c652 ("Quadlet - translate dependencies on other quadlet units")
Fixes: #26243

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-05-30 18:06:03 +02:00
openshift-merge-bot[bot] 5e4adb661c
Merge pull request #26174 from fpoirotte/kube_cpuset_cgroup
Support --cpuset-cpus and --cpuset-mems in podman kube play
2025-05-30 14:37:57 +00:00
openshift-merge-bot[bot] 48f22340a1
Merge pull request #26242 from lsm5/pre-checkpoint-skip-aarch64-followup
e2e: ref full URL for aarch64 criu precheckpoint issues
2025-05-30 13:27:13 +00:00
Lokesh Mandvekar db53f6240d
e2e: ref full URL for aarch64 criu precheckpoint issues
Followup on #26234.

Signed-off-by: Lokesh Mandvekar <lsm5@fedoraproject.org>
2025-05-30 08:50:55 -04:00
openshift-merge-bot[bot] 398594ea5f
Merge pull request #26237 from p12tic/fix-log-tag-priority
specgen/generate: Fix log tag priority
2025-05-30 12:43:04 +00:00
openshift-merge-bot[bot] 39692c5648
Merge pull request #26230 from jankaluza/26078
Handle "Entrypoint":[] in compat containers/create API.
2025-05-30 10:38:54 +00:00
openshift-merge-bot[bot] 82fcf45103
Merge pull request #26234 from lsm5/pre-checkpoint-skip-aarch64
e2e: skip pre-checkpoint tests on aarch64
2025-05-30 10:16:20 +00:00
Povilas Kanapickas a17f8afbbc specgen/generate: Fix log tag priority
Currently setting log_tag from containers.conf will override any value
set via --log-opt tag=value option. This commit fixes this.

Fixes: https://github.com/containers/podman/issues/26236

Signed-off-by: Povilas Kanapickas <povilas@radix.lt>
2025-05-30 01:37:21 +03:00
Lokesh Mandvekar 5e7c0a66ce
e2e: skip pre-checkpoint tests on aarch64
Per Adrian Reber, the aarch64 kernel doesn't support the soft dirty bit
and support isn't expected anytime soon.

Ref: https://github.com/checkpoint-restore/criu/issues/2676

Signed-off-by: Lokesh Mandvekar <lsm5@fedoraproject.org>
2025-05-29 12:25:37 -04:00
Jan Kaluza 3a981915f0 Handle "Entrypoint":[] in compat containers/create API.
When using `docker compose run --entrypoint ''`, docker sends
`"Entrypoint": []` in the JSON. Podman currently treats that
as `nil` and fallback to default image entrypoint.

This is not what is expected by the user. Instead, it should
not use any entrypoint.

This commit fixes it by properly propagating the `[]` downstream
to libpod.

Fixes: #26078

Signed-off-by: Jan Kaluza <jkaluza@redhat.com>
2025-05-29 08:45:35 +02:00
openshift-merge-bot[bot] 23ded8bcee
Merge pull request #26207 from giuseppe/fix-flake-kmsg
test: fix race conditions in /dev/kmsg tests
2025-05-28 21:14:39 +00:00
Paul Holzinger 415668c802
system df --verbose don't crash
When a container has no image, i.e. using rootfs like our new infra
containers then the Image function crashed trying to show the first 12
image ID chars. If there is no image simply show nothing there.

Fixes: #26224

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-05-28 20:50:17 +02:00
openshift-merge-bot[bot] dad0b294d4
Merge pull request #26217 from mheon/fix_26168
Fix SQLite volume lookup queries matching too liberally
2025-05-28 18:42:06 +00:00
openshift-merge-bot[bot] 089547dba2
Merge pull request #26222 from Luap99/vendor
vendor: update c/{buildah,common,image,storage} to main
2025-05-28 18:00:10 +00:00
Matthew Heon b276e7ef21 Fix SQLite volume lookup queries matching too liberally
Specifically, this does two things:

1. Turn on case-sensitive LIKE queries. Technically, this is not
specific to volumes, as it will also affect container and pod
lookups - but there, it only affects IDs. So `podman rm abc123`
will not be the same as `podman rm ABC123` but I don't think
anyone was manually entering uppercase SHA256 hash IDs so it
shouldn't matter.

2. Escape the _ and % characters in volume lookup queries. These
are SQLite wildcards, and meant that `podman volume rm test_1`
would also match `podman volume rm testa2` (or any character in
place of the underscore). This isn't done with pod and container
lookups, but again those just use LIKE for IDs - so technically
`podman volume rm abc_123` probably works and removes containers
with an ID matching that pattern... I don't think that matters
though.

Fixes #26168

Signed-off-by: Matthew Heon <matthew.heon@pm.me>
2025-05-28 13:10:10 -04:00
openshift-merge-bot[bot] a484f78c44
Merge pull request #26209 from jankaluza/26190
Recreate the Rootfs in mountStorage for infra-container.
2025-05-28 14:35:04 +00:00
Paul Holzinger b551939be6
vendor: update c/{buildah,common,image,storage} to main
Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-05-28 14:53:37 +02:00
Jan Kaluza e0b08fcfa3 Recreate the Rootfs in mountStorage for infra-container.
After the system reboot, the Rootfs for infra-container can
be removed. This can happen when it is stored on tmpfs.

This commit recreates the infra-container directory which is
used for Rootfs for infra-container before mounting it.

Fixes: #26190

Signed-off-by: Jan Kaluza <jkaluza@redhat.com>
2025-05-27 16:31:44 +02:00
openshift-merge-bot[bot] e98e128012
Merge pull request #26200 from l0rd/win-overlay-vols
Fix overlay volumes on Windows
2025-05-27 14:20:12 +00:00