25961 Commits

Author SHA1 Message Date
c8c3ddd25b fix(deps): update module github.com/cyphar/filepath-securejoin to v0.5.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-25 18:44:05 +00:00
2102673283 Merge pull request #27155 from rhatdan/artifact
Add creation timestamp to podman artifacts
2025-09-25 15:31:16 +00:00
8b86d14cba Merge pull request #27135 from containers/renovate/golangci-golangci-lint-2.x
chore(deps): update dependency golangci/golangci-lint to v2.5.0
2025-09-25 15:28:21 +00:00
09b71d19d9 Merge pull request #27123 from jdnvn/main
docs: add Containerfile doc link
2025-09-25 12:54:13 +00:00
4764b0e403 Add creation timestamp to podman artifacts
This commit implements automatic creation timestamp functionality for artifacts
as requested in GitHub issue #27081, allowing users to see when artifacts were created.

Changes made:
- Add org.opencontainers.image.created annotation with Unix nanoseconds timestamp during artifact creation
- Preserve original creation timestamp when using --append option
- Update artifact inspect and add man pages to document the new functionality
- Add comprehensive e2e and system BATS tests to verify creation timestamp behavior
- Store timestamp as integer (Unix nanoseconds) for programmatic access

The creation timestamp helps users understand artifact freshness, particularly
useful for AI models and other time-sensitive artifacts managed by tools like RamaLama.

Usage examples:
  podman artifact add myartifact:latest /path/to/file     # Creates with timestamp
  podman artifact inspect myartifact:latest              # Shows created annotation as integer
  podman artifact add --append myartifact:latest /file2  # Preserves original timestamp

Fixes: https://github.com/containers/podman/issues/27081
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2025-09-25 08:39:28 -04:00
af65d46476 Merge pull request #27160 from dnlzro/main
docs: clarify that `--userns=keep-id` runs container as host UID
2025-09-25 11:30:47 +00:00
2edf4aee5c Merge pull request #27122 from nothiaki/feat-sysctl-completion
feat(completions): sysctl completion
2025-09-25 09:32:03 +00:00
4652f5c3c6 docs: clarify that --userns=keep-id runs container as host UID
Fixes: #24934

Signed-off-by: Daniel Lazaro <git@dlazaro.ca>
2025-09-24 19:05:34 -04:00
d58e496a5e Merge pull request #27152 from ricardobranco777/fix_030_run
test: Fix test race in 030-run
2025-09-24 19:44:34 +00:00
63c40feb8c test: Fix test race in 030-run
Signed-off-by: Ricardo Branco <rbranco@suse.de>
2025-09-24 18:30:40 +02:00
f0f05e22c6 cmd/podman: completion for --sysctl in create/run
Signed-off-by: Celso Henrique Souza Silva <celsohenrique367@gmail.com>
2025-09-24 13:27:10 -03:00
d7f33a79e0 Merge pull request #27138 from nimdrak/27116
test: remove hack workaround in 'use plugin in containers'
2025-09-24 08:47:01 +00:00
b223d14805 Merge pull request #27136 from nimdrak/27117
test: remove skip_if_remote from podman run - uidmapping has no /sys/kernel mounts
2025-09-24 08:41:25 +00:00
0cf567e021 Merge pull request #27098 from Webb321/feat/lowercase-cgroup
fix: lowercase cgroup
2025-09-24 08:23:34 +00:00
f26483ba7d fix: standardize casing for cgroups in documentation
Fixes: #27089

Signed-off-by: Tong Li <djfkvcing117@gmail.com>
2025-09-23 20:11:56 +08:00
15fdbe9442 test: remove hack workaround in 'use plugin in containers'
Signed-off-by: ByoungUk Lee <nimdrak@gmail.com>
2025-09-22 13:56:43 +09:00
51f4e614e9 test: remove skip_if_remote from podman run - uidmapping has no /sys/kernel mounts
Fixes: #27117

Signed-off-by: ByoungUk Lee <nimdrak@gmail.com>
2025-09-22 13:52:10 +09:00
4b9be9c218 chore(deps): update dependency golangci/golangci-lint to v2.5.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-21 21:35:09 +00:00
7c9aa72c55 add containerfile doc link
Signed-off-by: Joe Donovan <jdonovan@tines.io>
2025-09-19 17:18:45 -04:00
1671029517 Merge pull request #27105 from markjdb/main
A couple of minor stats improvements for FreeBSD
2025-09-19 14:07:22 +00:00
a0238fb19f libpod: Fill out OnlineCPUs in the FreeBSD stats handler
Signed-off-by: Mark Johnston <mark.johnston@klarasystems.com>
2025-09-18 14:33:42 +00:00
602ba415c6 libpod: Implement getOnlineCPUs() on FreeBSD
Include an explicit container state check.  Otherwise the
containers/stats endpoint will return all-zero stats for a stopped
container even when in non-streaming mode, which breaks some consumers
of the API, particularly nomad's podman driver.

Implement the interface by just returning the number of host CPUs.  A
bit more sophisticated would be to fetch the jail's cpuset, but it's not
very important for now.

Signed-off-by: Mark Johnston <mark.johnston@klarasystems.com>
2025-09-18 14:24:35 +00:00
0215832852 Merge pull request #27087 from Luap99/system-test-fix
test/system: fix test race in exec leak check
2025-09-17 19:27:00 +00:00
54b51bbddf Merge pull request #27076 from Luap99/revert-debug
Revert "test/e2e: try debug potential pasta issue"
2025-09-17 14:38:46 +00:00
39750faab3 test/system: fix test race in exec leak check
On very slow systems it can be that it takes over 5s after the sleep
process was started and until the find_exec_pid_files function finds the
file. This was observed on a ppc64le machine by Red Hat QE.

Just making the sleep longer should fix that problem and it doesn't
really effect the total test time because we stop the container
afterwards so there is no extra delay added with this either.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-09-16 14:02:38 +02:00
9ac8845575 Merge pull request #27077 from mohanboddu/first_contrib_cert_update_action
Update github action to use pull_request_target
2025-09-16 11:49:31 +00:00
3381205ccb Merge pull request #27061 from Luap99/bindings-upgrade
pkg/bindings: use HTTP 101 upgrade request for attach
2025-09-16 08:40:54 +00:00
e95fd4f38e Merge pull request #27039 from Luap99/golangci-cache
cirrus: fix golangci-lint cache leak + update freebsd version
2025-09-16 07:30:48 +00:00
b8258a53dd Update github action to use pull_request_target
pull_request doesn't have access to the secret, pull_request_target
does have access to the secrets

Signed-off-by: Mohan Boddu <mboddu@redhat.com>
2025-09-15 17:12:10 -04:00
b24220b0a2 Revert "test/e2e: try debug potential pasta issue"
This reverts commit f517e5216763f9e51729fa277e8e0045a484d950.

The issue #24219 has been fixed a long time ago and this no longer
flakes so we do not need to run with debug logs all the time.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-09-15 19:28:41 +02:00
2e15251436 Merge pull request #27072 from Honny1/update-doc
docs: remove remote limitation note for --build-context option
2025-09-15 14:26:59 +00:00
ab5e400a9a docs: remove remote limitation note for --build-context option
- Removal of a note in the build-context documentation about remote Podman client limitations
- Removal of skip statements for build-context tests in the test suite

Pull request #26628 adds support for --build-context for the remote client.

Signed-off-by: Jan Rodák <hony.com@seznam.cz>
2025-09-15 15:50:02 +02:00
27c4fb6323 Merge pull request #27063 from vanou/fix_typo_in_chrootdirs_option_doc
fix: Correct typo in chrootdirs option
2025-09-15 07:07:18 +00:00
8d06a9e9f7 fix: Correct typo in chrootdirs option
In explanation of chrootdirs option, leading / is dropped
from podman managed file path (/etc/hostname). So this PR
adds leading /.

Signed-off-by: Vanou Ishii <ishii.vanou@fujitsu.com>
2025-09-13 14:09:04 +09:00
2702156bd7 pkg/bindings: on terminal attach always wait for stdout to be done
Do not exit early just because stdin copy was done.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-09-12 19:13:47 +02:00
7ff07b6e0c pkg/bindings: use HTTP 101 upgrade request for attach
For exec and attach use an upgrade request which the server responds
with HTTP 101 status. Since go 1.12 the Body can be casted to an
io.Writer and then use that to write to the server.

This does however not allow us to skip the ugly hack of overwriting
the default dialContext() because the ReadWriterCloser on the body
does not allow us to call CloseWrite() which is critical to correctly
close the stdin side. So we still have to extract the underlying
net.Conn for that.

Using the cast response.Body is important because the underlying http
lib reads from the socket to parse the header and response code of
course and it is possible that it read more content than needed that is
kept in its buffer but because we then only directly read from the
connection it was possible we miss the first few bytes of the message.

This should fix the issue and hopefully also some long standing
podman-remote missing output flakes in CI.

Fixes: #26951

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-09-12 19:13:34 +02:00
098f1eb534 Merge pull request #27055 from Luap99/revert-quadlet-docs
Revert quadlet docs rewrite
2025-09-11 17:33:50 +00:00
070d7c3ad3 Revert "Rewrite the Quadlet documentation."
This reverts commit c12b1b32bc165766c1aa229ca05432c75cc74c3b.

The content contains incorrect information and misses a lot of details
from the previous page that must be restored.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-09-11 19:00:19 +02:00
bb422c8372 Revert "Change the syntax to not depend on jinja2."
This reverts commit 9de737bf29eba1606c1aff560e2cbba4fa1576e4.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-09-11 19:00:17 +02:00
fd60d63bf4 Revert "Deduplicate more options."
This reverts commit 6756eb34129381707626ec45761799ac5623dc5c.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-09-11 19:00:02 +02:00
4ae8e386ef Revert "docs: restore podman-systemd.unit.5"
This reverts commit cab3c6de6d59fc51aff26591c24ffe2d5ee2a20e.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-09-11 18:59:11 +02:00
998c9d8f6a Merge pull request #27014 from SquallATF/patch-1
fix(emulation): avoid nil pointer dereference in registeredBinfmtMisc
2025-09-11 10:29:48 +00:00
1ea1958a2d Merge pull request #27048 from containers/renovate/actions-setup-node-5.x
[skip-ci] Update actions/setup-node action to v5
2025-09-11 10:10:39 +00:00
84cbe0bbb6 Merge pull request #27047 from containers/renovate/actions-github-script-8.x
[skip-ci] Update actions/github-script action to v8
2025-09-11 10:07:50 +00:00
04af9ae3fc fix(emulation): handle fs.ErrNotExist in registeredBinfmtMisc
When `/proc/sys/fs/binfmt_misc` is not mounted, filepath.WalkDir may return
fs.ErrNotExist errors. These should be handled gracefully and return nil
instead of causing a panic.

Signed-off-by: Peiyuan Song <squallatf@gmail.com>
2025-09-11 16:56:13 +08:00
80f1d48d44 [skip-ci] Update actions/setup-node action to v5
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-10 21:03:12 +00:00
da88a5b097 Merge pull request #27046 from eriksjolund/troubleshooting-lsetxattr
troubleshooting: document lsetxattr error
2025-09-10 19:45:49 +00:00
aa8bbbb1ff [skip-ci] Update actions/github-script action to v8
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-09-10 18:36:42 +00:00
796be1e4bf troubleshooting: document lsetxattr error
Signed-off-by: Erik Sjölund <erik.sjolund@gmail.com>
2025-09-10 20:32:34 +02:00
05ff9a561f Merge pull request #27045 from containers/renovate/actions-checkout-5.x
[skip-ci] Update actions/checkout action to v5
2025-09-10 17:46:43 +00:00