Commit Graph

26209 Commits

Author SHA1 Message Date
Paul Holzinger
09cf145f39 test/system: merge artifact tests into single file
There is no need for several files here, it just means the setup and
helpers get duplicated.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-07 19:02:55 +01:00
Paul Holzinger
348617fba6 test/system: rework artifact created test
- use nanoseconds, so we don't need to sleep a full second do put the
  time forward.
- use the --format option instead of jq
- run test via remote as well
- don't use static file content

Fixes: #27265

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-07 19:02:55 +01:00
Paul Holzinger
9eba688ffa test/system: remove 701-artifact-created.bats
The tests there are a duplicate compared to the 702 file.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-07 19:02:55 +01:00
Paul Holzinger
ad34a695de test/system: do not run artifact test in parallel
They do not seem safe to use concurrently, see #27264.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-07 19:02:55 +01:00
Paul Holzinger
f89e2d3ac8 test/system: skip flaky restore test on debian
Somehow this only flakes on debian as it seem the /etc/hosts file on the
host system changes and thus causes a false postive with the
before/after restore comparison.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-07 19:02:55 +01:00
Paul Holzinger
b63a210dd9 test/e2e: try to fix clean up after terminated build flake
It is failing with:
replacing mount point ".../root/overlay/xxx/merged": directory not empty

First, the build does not need network so ensure we don't leak network
allocations by killing it. Second, kill is always async so ensure to
wait for the actul build process exit.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-07 19:02:54 +01:00
openshift-merge-bot[bot]
6a2f1cfecc Merge pull request #27467 from Luap99/new-images
CI: update VM images 06-11-2025
2025-11-07 15:36:16 +00:00
Paul Holzinger
1c3daa7c81 CI: update VM images 06-11-2025
from https://github.com/containers/automation_images/pull/417

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-07 14:07:38 +01:00
openshift-merge-bot[bot]
fc5c29d2ae Merge pull request #27463 from ricardobranco777/runc_133
test/system: Update test to handle new error message from runc 1.3.3
2025-11-07 12:48:53 +00:00
openshift-merge-bot[bot]
711c7dfbe4 Merge pull request #27361 from containers/renovate/major-github-artifact-actions
[skip-ci] Update GitHub Artifact Actions (major)
2025-11-07 11:39:56 +00:00
Ricardo Branco
14cb9d2a6c test/system: Update test to handle new error message from runc 1.3.3
Signed-off-by: Ricardo Branco <rbranco@suse.de>
2025-11-07 11:54:06 +01:00
openshift-merge-bot[bot]
905721cae5 Merge pull request #27458 from alessandro-verzicco/ignore-auth-json-empty
Fix authentication fallback when X-Registry-Auth header contains empty JSON object
2025-11-06 21:27:16 +00:00
openshift-merge-bot[bot]
75135e190c Merge pull request #27456 from Luap99/securejoin
update github.com/cyphar/filepath-securejoin to v0.5.1
2025-11-06 20:48:12 +00:00
Alessandro Verzicco
ac58beed26 Ignore auth header with empty JSON object
Signed-off-by: Alessandro Verzicco <152161683+alessandro-verzicco@users.noreply.github.com>
2025-11-06 17:39:56 +01:00
Paul Holzinger
a6f1c63c19 fix lint issues with github.com/cyphar/filepath-securejoin
The old location is deprecated and has been removed in v0.6.0 even. I
did this as extra commit to make cherry-picking easier.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-06 16:33:19 +01:00
Paul Holzinger
e0ef8362c0 update github.com/cyphar/filepath-securejoin to v0.5.1
Since this will be required by the runc security update I bump it hare
already to make the runc bump easier. Note while there is 0.6.0 out we
use 0.5.1 intentionally as 0.6 comes with breaking changes that won't
build in our dependencies.

Also note the lib now contains code licensed under MPL-2 which is not
yet approved by the CNCF[1] but because the runc fix requires it we were
advised to just go ahead and update it for now.

[1] https://github.com/cncf/foundation/issues/1154

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-06 16:33:18 +01:00
openshift-merge-bot[bot]
94c4951537 Merge pull request #27454 from Luap99/cgroup-bump
update github.com/opencontainers/cgroups to v0.0.6
2025-11-06 15:16:36 +00:00
Paul Holzinger
47ab0f1e94 update github.com/opencontainers/cgroups to v0.0.6
Includes one small fix for a breaking change in a type.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2025-11-06 14:39:04 +01:00
openshift-merge-bot[bot]
0405a470ef Merge pull request #27450 from nimdrak/27444
Fix tiny typos in some artifact docs
2025-11-06 13:28:09 +00:00
openshift-merge-bot[bot]
4609271590 Merge pull request #27420 from givensuman/T-27095-add-apparmor-quadlet-key
Add AppArmor key to quadlet containers
2025-11-06 11:23:35 +00:00
openshift-merge-bot[bot]
516ff3895a Merge pull request #27447 from containers/renovate/github.com-docker-docker-28.x
Update module github.com/docker/docker to v28.5.2+incompatible
2025-11-06 10:28:10 +00:00
openshift-merge-bot[bot]
ce561680bd Merge pull request #27431 from nimdrak/27421
Fixed #27421 aritfact push and pull with authfile
2025-11-06 10:08:39 +00:00
Byounguk Lee
469a8af9bb Fixes: #27444, Fix tiny typos in some artifact docs
Signed-off-by: Byounguk Lee <nimdrak@gmail.com>
2025-11-06 05:30:42 +00:00
Byounguk Lee
c581e0b392 Fixes #27421 aritfact push and pull with authfile
Signed-off-by: Byounguk Lee <nimdrak@gmail.com>
2025-11-06 05:26:36 +00:00
givensuman
e7b50c33df Add AppArmor key to quadlet .container files
Fixes: #27095
Signed-off-by: givensuman <givensuman@duck.com>
2025-11-05 18:15:52 -05:00
openshift-merge-bot[bot]
e603327974 Merge pull request #27441 from containers/renovate/github.com-containers-psgo-digest
Update github.com/containers/psgo digest to 533b50b
2025-11-05 21:00:03 +00:00
renovate[bot]
424c19b897 Update module github.com/docker/docker to v28.5.2+incompatible
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-11-05 19:53:12 +00:00
openshift-merge-bot[bot]
23e6a89d36 Merge pull request #27379 from Honny1/fix-copyuidguid
Fix copyUIDGID parameter inversion in Docker compat API
2025-11-05 08:04:30 +00:00
renovate[bot]
f09508ffa5 Update github.com/containers/psgo digest to 533b50b
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2025-11-05 03:58:41 +00:00
openshift-merge-bot[bot]
2b646e7cb7 Merge pull request #27438 from Mr-Bossman/dev/neurolag
Fixed Commands in `podman-for-windows` Guide
2025-11-04 22:26:57 +00:00
openshift-merge-bot[bot]
17beac160c Merge pull request #27405 from baude/setdefaultconnection
Add `update-connection` to machine start and init
2025-11-04 20:03:58 +00:00
Manuel Thalmann
58c2fcd2d4 Fix incorrect function call
Changes made in this commit will fix #16168

The current command in the docs expect a `docker.exe` file to exist in the current working directory.
As this is most likely a typo, changes made in this commit fix this issue.

Signed-off-by: Manuel Thalmann <m@nuth.ch>
2025-11-04 12:56:01 -05:00
Manuel Thalmann
2e84246ad5 Update docs for most recent Windows version
In more recent Windows 11 versions (not sure about Windows 10),
Windows now ships its own `curl.exe`,
so PowerShell's "curl"-alias no longer exists.

Changes made in this commit will replace the `curl` alias call with the actual `Invoke-WebRequest` function.

Signed-off-by: Manuel Thalmann <m@nuth.ch>
2025-11-04 12:55:51 -05:00
Brent Baude
623cb5f539 Bumping timeout for aarch64 machine
Bumping the timeout for aarch64 machine tests as I am getting a
consistent timeout where the tests are not completing in the given time.

Signed-off-by: Brent Baude <bbaude@redhat.com>
2025-11-04 10:35:51 -06:00
Brent Baude
b4ec460ed4 Add update-connection to machine start and init
This allows users to set the associated machine's system connection to the system default when running `podman machine init --now` or `podman machine start`.  It also changes the default bbehavior of these commands in that the user will be prompted and asked if they would like to switch the system connection.  It also introduces a command line switch called `--update-connection`.  If the switch is unset, then the user will be prmpted.  If the command value is explicitly set to `false`, the user will not be prompted and the system connection will not be altered.  If the value is set to `true`, the system connection will be made the default and the user will not be prompted.

Fixes: https://issues.redhat.com/browse/RUN-3632

Signed-off-by: Brent Baude <bbaude@redhat.com>
2025-11-04 10:35:28 -06:00
openshift-merge-bot[bot]
53ef23df38 Merge pull request #27435 from timcoding1988/rotate_aws_keys
rotate aws meta_task keys
2025-11-04 15:45:42 +00:00
openshift-merge-bot[bot]
eb63a1f38d Merge pull request #27005 from zifeitong/newer
Fix podman build "newer" pull policy
2025-11-04 15:17:37 +00:00
Tim Zhou
f06f77468d rotate aws meta_task keys
Signed-off-by: Tim Zhou <tizhou@redhat.com>
2025-11-04 09:05:45 -05:00
openshift-merge-bot[bot]
5d0458672a Merge pull request #27430 from l0rd/fix-wsl-image-cache-mismatch
Fix cache misses when pulling WSL machine image
2025-11-04 13:54:52 +00:00
openshift-merge-bot[bot]
14dee39b08 Merge pull request #27140 from LecrisUT/tmt-integration
Add tmt integration plan
2025-11-04 13:07:55 +00:00
openshift-merge-bot[bot]
d8a0852140 Merge pull request #27428 from slp/krunkit-1.1.1
Bump bundled krunkit from 1.1.0 to 1.1.1
2025-11-04 13:02:29 +00:00
Cristian Le
01f1d1ecec Add tmt integration plan
See:
- https://github.com/teemtee/tmt/issues/4047
- https://github.com/teemtee/tmt/pull/4026

Signed-off-by: Cristian Le <git@lecris.dev>
2025-11-04 12:33:00 +01:00
openshift-merge-bot[bot]
4bd8730063 Merge pull request #27425 from shiavm006/fix-remote-detach-keys-empty-string
Fix remote client rejecting empty --detach-keys string
2025-11-04 11:17:12 +00:00
Mario Loriedo
7c51ad0ef8 Fix cache misses when pulling WSL machine image
Fixes a regression introduced by b2e6d53 that made always failing the
match of the WSL image from the registry with the image in the local
cache. The result was that the WSL machine image was always pulled from
quay.io even if an identical image was in the local cache.

Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>
2025-11-04 12:12:10 +01:00
Sergio Lopez
f2aceb829f Bump bundled krunkit from 1.1.0 to 1.1.1
Bump bundled krunkit to 1.1.1. This is a minor, expedited release
to fix a library linking problem.

Fixes: #27427
Signed-off-by: Sergio Lopez <slp@redhat.com>
2025-11-04 10:09:09 +01:00
shiavm006
c0ae1a9bac Fix remote client rejecting empty --detach-keys string
The remote client (podman --remote) was incorrectly throwing an error
when --detach-keys="" was specified for attach, run, or start commands.
According to documentation and the v1.7.0 release notes, specifying an
empty string should disable detaching, not cause an error.

Fixes: #27414

Signed-off-by: shiavm006 <shivammittal42006@gmail.com>
2025-11-04 09:12:02 +05:30
openshift-merge-bot[bot]
020a59732a Merge pull request #27418 from cgwalters/drop-container-runtime
Makefile: Drop unused CONTAINER_RUNTIME
2025-11-03 19:53:19 +00:00
openshift-merge-bot[bot]
53d976bfee Merge pull request #27389 from containers/renovate/github.com-onsi-ginkgo-v2-2.x
fix(deps): update module github.com/onsi/ginkgo/v2 to v2.27.2
2025-11-03 19:22:43 +00:00
Colin Walters
ac888c73ef Makefile: Drop dead CONTAINER_RUNTIME
This variable is dead code as far as I can tell. I think it
got cargo culted from something similar in skopeo, where it *is*
used:
85598438ce/Makefile (L75)
etc.

(Instead it looks like there's a `PODMANCMD` here)

But I'm effectively using this PR as a way to suggest aligning
with what we're doing in bootc, where we have a core principle
that `Makefile` should *never* itself spawn containers (or VMs etc).
All the rules in Makefile are things that should work when e.g.
building RPMs or debs or the like.

Those tasks are things that are done via `Justfile`:
https://github.com/bootc-dev/bootc/blob/main/Justfile

So for example to align, we'd add a `Justfile` here and then
`make validatepr` would move to `just validatepr`.

Signed-off-by: Colin Walters <walters@verbum.org>
2025-11-03 10:27:14 -05:00
openshift-merge-bot[bot]
a7da73cef4 Merge pull request #27422 from containers/renovate/github.com-shirou-gopsutil-v4-4.x
fix(deps): update module github.com/shirou/gopsutil/v4 to v4.25.10
2025-11-03 14:41:03 +00:00