22058 Commits

Author SHA1 Message Date
0fdd83173f Add release notes for v5.0.0
Signed-off-by: Matt Heon <mheon@redhat.com>
2024-03-13 10:23:06 -04:00
469fd84688 Merge pull request #21883 from l0rd/winmake-win-gvproxy-target
Add target win-gvproxy in winmake.ps1
2024-03-13 14:17:57 +00:00
abaa179aa0 Add target win-gvproxy in winmake.ps1
For consistency with linux/osx makefile
I have added the win-gvproxy target as
an alias of win-sshproxy

[NO NEW TESTS NEEDED]

Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>
2024-03-13 00:45:10 +01:00
c2695fc9d2 Merge pull request #22026 from baude/finalmachineimageref
Add final machine endpoint
2024-03-12 16:50:59 +00:00
a7d38c6ea2 Merge pull request #22020 from Luap99/api-doc-version
[CI:DOCS] update API doc version to 5.0.0
2024-03-12 15:58:49 +00:00
4c5d26f6f9 Add final machine endpoint
Adding the final machine endpoint as quay.io/podman/machine-os in the
Podman code.  As a reminder, we decided we would set this in containers
conf once things settle down and this code would then be removed.

Signed-off-by: Brent Baude <bbaude@redhat.com>
2024-03-12 09:37:57 -05:00
068ddfd19f update API doc version to 5.0.0
Also update the website to display the correct swagger doc for the right
version, the 5.0 swagger file will not exist until we branch but I added
it anyway so we do not forget it.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2024-03-12 12:06:15 +01:00
38e22d443c Merge pull request #21950 from cevich/move_podmanimage
[CI:DOCS] Migrate podman container image
2024-03-11 17:28:28 +00:00
1ed976ef2d Merge pull request #22012 from ashley-cui/rc6
Bump to 5.0.0-rc6
2024-03-11 16:41:26 +00:00
f2af295e44 Bump to 5.0.0-dev
Signed-off-by: Ashley Cui <acui@redhat.com>
2024-03-11 10:48:53 -04:00
d26113ca81 Bump to 5.0.0-rc6
Signed-off-by: Ashley Cui <acui@redhat.com>
v5.0.0-rc6
2024-03-11 10:48:18 -04:00
1cf9eb5db3 Merge pull request #21999 from eriksjolund/performance-guide-fix-URL
[CI:DOCS] performance: fix URL
2024-03-11 10:36:21 +00:00
6e0a9cbd47 Merge pull request #22007 from vrothberg/quadlet-docs
Quadlet docs
2024-03-11 10:24:45 +00:00
52ed774c23 docs: generate-systemd: add clarification statement
Based on user feedback, I think it's time to clarify that there are no
plans to remove generate-systemd.  Deprecation here means that the
command will not receive new features but only urgent bug fixes.

Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
2024-03-11 09:03:36 +01:00
3d6758a61d docs: quadlet: improve docs on root/rootless dirs
Make the docs more explicit on which directories are read for root and
rootless users to avoid confusion [1].

[1] https://github.com/containers/podman/discussions/20218#discussioncomment-8721351

Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
2024-03-11 09:00:43 +01:00
885dd2addf [CI:DOCS] performance: fix URL and kernel version requirement
Fix broken URL.

Fix kernel version requirement for native overlay rootless support.
Reference: https://www.redhat.com/sysadmin/podman-rootless-overlay

Signed-off-by: Erik Sjölund <erik.sjolund@gmail.com>
2024-03-09 16:29:43 +01:00
76578e1b53 Merge pull request #21994 from cevich/rm_buildpush
[CI:DOCS] Remove outdated references
2024-03-08 19:03:58 +00:00
e6ac569a14 [CI:DOCS] Remove outdated references
The container image build automation no longer lives here, it was moved
to containers/image_build.

Also strip out a few lingering comments referencing gitleaks, which was
removed from automation use.

Signed-off-by: Chris Evich <cevich@redhat.com>
2024-03-08 08:59:28 -05:00
642a8f13a5 Merge pull request #21992 from jesseborden/patch-1
Add note to performance.md for RHEL 8.5 overlayfs support
2024-03-08 13:13:34 +00:00
364813da65 Add note for RHEL 8.5
Add note for RHEL 8.5

Signed-off-by: Jesse Borden <40326854+jesseborden@users.noreply.github.com>
2024-03-08 07:02:24 -05:00
3c20e38cec Merge pull request #21989 from containers/renovate/go-gopkg.in/go-jose/go-jose.v2-vulnerability
Update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [SECURITY]
2024-03-08 10:01:05 +00:00
d7b2fc8f43 Merge pull request #21988 from containers/renovate/go-github.com/go-jose/go-jose/v3-vulnerability
Update module github.com/go-jose/go-jose/v3 to v3.0.3 [SECURITY]
2024-03-08 09:58:17 +00:00
e220d1ce62 Update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [SECURITY]
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-08 02:14:11 +00:00
f91b8e77b7 Update module github.com/go-jose/go-jose/v3 to v3.0.3 [SECURITY]
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-08 02:13:56 +00:00
1cbedfb7d5 Merge pull request #21986 from ashley-cui/500rc5
Bump to 5.0.0-rc5
2024-03-08 02:10:41 +00:00
9b21a5b795 Bump to v5.0.0-dev
Signed-off-by: Ashley Cui <acui@redhat.com>
2024-03-07 18:42:58 -05:00
bbad09bb0e Bump to v5.0.0-rc5
Signed-off-by: Ashley Cui <acui@redhat.com>
v5.0.0-rc5
2024-03-07 18:42:46 -05:00
432f4fbf99 Fix Mac CI
Building arm podman needs to be the last thing built in the OSX cross task. The Mac tests rely this Podman binary to run, and the CI Mac is ARM-based

Signed-off-by: Ashley Cui <acui@redhat.com>
2024-03-07 18:42:29 -05:00
45068124f0 Merge pull request #21985 from n1hility/fin-policy-json
Complete policy.json inclusion (Also add to win installer)
2024-03-07 21:13:38 +00:00
d54a373996 Complete policy.json inclusion
- Sets default search location to always be the peer directory
  + make podman-remote now creates binaries that work the same as release zips
- Updates release zip to match expected search location
- Updates win installer to include the file if present in the repo cross-build
  archive

[NO NEW TESTS NEEDED]

Signed-off-by: Jason T. Greene <jason.greene@redhat.com>
2024-03-07 14:05:22 -06:00
2e52b4fa78 Merge pull request #21982 from Luap99/machine-compose
podman compose: enable machine socket connection
2024-03-07 18:42:24 +00:00
9a888de557 Merge pull request #21973 from TomSweeneyRedHat/dev/tsweeney/buildahv1350
Bump Buildah to v1.35.0
2024-03-07 18:14:54 +00:00
4541f0c4ed Merge pull request #21980 from Luap99/machine-locking-fixes
more machine locking fixes
2024-03-07 16:51:37 +00:00
b234bb55e4 Bump Buildah to v1.35.0
As the title says.  This is the last step in the vendor dance for
Podman v5.0.

[NO NEW TESTS NEEDED]

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
2024-03-07 11:51:09 -05:00
f3dd5f132a Merge pull request #21978 from ashley-cui/fatbin
[CI:BUILD] Build universal Podman binary for Mac installer
2024-03-07 16:46:29 +00:00
15e508a639 Merge pull request #21936 from l0rd/vmfile-peek
Don't read full VM File before decompressing
2024-03-07 16:40:09 +00:00
bff78a12d6 Merge pull request #21975 from baude/libhvee0.7.0
vendor libhvee-0.7.0
2024-03-07 16:37:07 +00:00
5d3a19f8d0 podman compose: enable machine socket connection
This can be enabled now.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2024-03-07 17:34:05 +01:00
0788b78633 Merge pull request #21981 from umohnani8/farm-doc
[CI:DOCS] Add farm command to commands list
2024-03-07 16:23:23 +00:00
49f290685f Merge pull request #21977 from mtrmac/close-error-handling
Close error handling
2024-03-07 15:36:36 +00:00
6f4ee16d94 [CI:DOCS] Add farm command to commands list
Add the farm command to the commands list so
that it is rendered correctly in readthedocs.

Signed-off-by: Urvashi Mohnani <umohnani@redhat.com>
2024-03-07 10:18:52 -05:00
25f3a8ce77 podman machine start/stop do not write config unlocked
Move the writes into the shim level to make sure they happen while we
hold the machine lock to prevent any race conditions reading/writing the
file.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2024-03-07 15:11:41 +01:00
75fa38d52e [CI:BUILD] Build universal Podman binary for Mac installer
Build universal Podman binary and installer for Mac. Update GitHub action to build it too.

Signed-off-by: Ashley Cui <acui@redhat.com>
2024-03-07 09:09:32 -05:00
7a75914921 podman machine init: do not write config unlocked
First make sure we check that a given VM exist when holding the VM lock
for it. The check in cmd/podman/machine/init.go is a nice quick out but
not enough to ensure that 2 processes to not create the same VM at the
same time. The only way to ensure this is by holding the lock and
checking if the VM config file exists.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2024-03-07 14:58:25 +01:00
7bfe5e700f Fail on failures to close the file descriptors, and especially the SparseWriter
Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2024-03-07 14:46:17 +01:00
5e0b7e54c0 Avoid reliance on fs.ErrClosed in SparseWriter users
Neither of the SparseWriter users actually _wants_ the underlying
WriteSeeker to be closed; so, don't.

That makes it clear where the responsibility for closing the file
lies, and allows us to remove the reliance on the destinations
reliably returning ErrClosed.

Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2024-03-07 14:46:12 +01:00
54fac875e5 Merge pull request #21971 from Luap99/relative-policy
pkg/machine: fix relative DefaultPolicyJSONPath
2024-03-07 13:35:01 +00:00
4c6505be5f Fix the logic for detecting an unexpected close error
Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2024-03-07 14:32:43 +01:00
81906081ef vendor libhvee-0.7.0
[NO NEW TESTS NEEDED]

Signed-off-by: Brent Baude <bbaude@redhat.com>
2024-03-07 07:29:06 -06:00
3c9c5be7da podman machine set: change options only locked
Make sure we only update the machine config when we are locked.
While it doesn't make a functional differnce for cpu and memory it was a
problem for disk size. The disk size must be larger than the previous
one so we must have accurate data on the previous value.

Thus change the settings only while locked and refresh the config so we
have the current up to date values.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2024-03-07 14:19:06 +01:00