22392 Commits

Author SHA1 Message Date
e6ac569a14 [CI:DOCS] Remove outdated references
The container image build automation no longer lives here, it was moved
to containers/image_build.

Also strip out a few lingering comments referencing gitleaks, which was
removed from automation use.

Signed-off-by: Chris Evich <cevich@redhat.com>
2024-03-08 08:59:28 -05:00
642a8f13a5 Merge pull request #21992 from jesseborden/patch-1
Add note to performance.md for RHEL 8.5 overlayfs support
2024-03-08 13:13:34 +00:00
364813da65 Add note for RHEL 8.5
Add note for RHEL 8.5

Signed-off-by: Jesse Borden <40326854+jesseborden@users.noreply.github.com>
2024-03-08 07:02:24 -05:00
3c20e38cec Merge pull request #21989 from containers/renovate/go-gopkg.in/go-jose/go-jose.v2-vulnerability
Update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [SECURITY]
2024-03-08 10:01:05 +00:00
d7b2fc8f43 Merge pull request #21988 from containers/renovate/go-github.com/go-jose/go-jose/v3-vulnerability
Update module github.com/go-jose/go-jose/v3 to v3.0.3 [SECURITY]
2024-03-08 09:58:17 +00:00
e220d1ce62 Update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [SECURITY]
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-08 02:14:11 +00:00
f91b8e77b7 Update module github.com/go-jose/go-jose/v3 to v3.0.3 [SECURITY]
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-08 02:13:56 +00:00
1cbedfb7d5 Merge pull request #21986 from ashley-cui/500rc5
Bump to 5.0.0-rc5
2024-03-08 02:10:41 +00:00
9b21a5b795 Bump to v5.0.0-dev
Signed-off-by: Ashley Cui <acui@redhat.com>
2024-03-07 18:42:58 -05:00
bbad09bb0e Bump to v5.0.0-rc5
Signed-off-by: Ashley Cui <acui@redhat.com>
v5.0.0-rc5
2024-03-07 18:42:46 -05:00
432f4fbf99 Fix Mac CI
Building arm podman needs to be the last thing built in the OSX cross task. The Mac tests rely this Podman binary to run, and the CI Mac is ARM-based

Signed-off-by: Ashley Cui <acui@redhat.com>
2024-03-07 18:42:29 -05:00
45068124f0 Merge pull request #21985 from n1hility/fin-policy-json
Complete policy.json inclusion (Also add to win installer)
2024-03-07 21:13:38 +00:00
d54a373996 Complete policy.json inclusion
- Sets default search location to always be the peer directory
  + make podman-remote now creates binaries that work the same as release zips
- Updates release zip to match expected search location
- Updates win installer to include the file if present in the repo cross-build
  archive

[NO NEW TESTS NEEDED]

Signed-off-by: Jason T. Greene <jason.greene@redhat.com>
2024-03-07 14:05:22 -06:00
2e52b4fa78 Merge pull request #21982 from Luap99/machine-compose
podman compose: enable machine socket connection
2024-03-07 18:42:24 +00:00
9a888de557 Merge pull request #21973 from TomSweeneyRedHat/dev/tsweeney/buildahv1350
Bump Buildah to v1.35.0
2024-03-07 18:14:54 +00:00
4541f0c4ed Merge pull request #21980 from Luap99/machine-locking-fixes
more machine locking fixes
2024-03-07 16:51:37 +00:00
b234bb55e4 Bump Buildah to v1.35.0
As the title says.  This is the last step in the vendor dance for
Podman v5.0.

[NO NEW TESTS NEEDED]

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
2024-03-07 11:51:09 -05:00
f3dd5f132a Merge pull request #21978 from ashley-cui/fatbin
[CI:BUILD] Build universal Podman binary for Mac installer
2024-03-07 16:46:29 +00:00
15e508a639 Merge pull request #21936 from l0rd/vmfile-peek
Don't read full VM File before decompressing
2024-03-07 16:40:09 +00:00
bff78a12d6 Merge pull request #21975 from baude/libhvee0.7.0
vendor libhvee-0.7.0
2024-03-07 16:37:07 +00:00
5d3a19f8d0 podman compose: enable machine socket connection
This can be enabled now.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2024-03-07 17:34:05 +01:00
0788b78633 Merge pull request #21981 from umohnani8/farm-doc
[CI:DOCS] Add farm command to commands list
2024-03-07 16:23:23 +00:00
49f290685f Merge pull request #21977 from mtrmac/close-error-handling
Close error handling
2024-03-07 15:36:36 +00:00
6f4ee16d94 [CI:DOCS] Add farm command to commands list
Add the farm command to the commands list so
that it is rendered correctly in readthedocs.

Signed-off-by: Urvashi Mohnani <umohnani@redhat.com>
2024-03-07 10:18:52 -05:00
25f3a8ce77 podman machine start/stop do not write config unlocked
Move the writes into the shim level to make sure they happen while we
hold the machine lock to prevent any race conditions reading/writing the
file.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2024-03-07 15:11:41 +01:00
75fa38d52e [CI:BUILD] Build universal Podman binary for Mac installer
Build universal Podman binary and installer for Mac. Update GitHub action to build it too.

Signed-off-by: Ashley Cui <acui@redhat.com>
2024-03-07 09:09:32 -05:00
7a75914921 podman machine init: do not write config unlocked
First make sure we check that a given VM exist when holding the VM lock
for it. The check in cmd/podman/machine/init.go is a nice quick out but
not enough to ensure that 2 processes to not create the same VM at the
same time. The only way to ensure this is by holding the lock and
checking if the VM config file exists.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2024-03-07 14:58:25 +01:00
7bfe5e700f Fail on failures to close the file descriptors, and especially the SparseWriter
Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2024-03-07 14:46:17 +01:00
5e0b7e54c0 Avoid reliance on fs.ErrClosed in SparseWriter users
Neither of the SparseWriter users actually _wants_ the underlying
WriteSeeker to be closed; so, don't.

That makes it clear where the responsibility for closing the file
lies, and allows us to remove the reliance on the destinations
reliably returning ErrClosed.

Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2024-03-07 14:46:12 +01:00
54fac875e5 Merge pull request #21971 from Luap99/relative-policy
pkg/machine: fix relative DefaultPolicyJSONPath
2024-03-07 13:35:01 +00:00
4c6505be5f Fix the logic for detecting an unexpected close error
Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2024-03-07 14:32:43 +01:00
81906081ef vendor libhvee-0.7.0
[NO NEW TESTS NEEDED]

Signed-off-by: Brent Baude <bbaude@redhat.com>
2024-03-07 07:29:06 -06:00
3c9c5be7da podman machine set: change options only locked
Make sure we only update the machine config when we are locked.
While it doesn't make a functional differnce for cpu and memory it was a
problem for disk size. The disk size must be larger than the previous
one so we must have accurate data on the previous value.

Thus change the settings only while locked and refresh the config so we
have the current up to date values.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2024-03-07 14:19:06 +01:00
a65b546c61 Remove copySparseFile
It is unused, and it clearly doesn't work (it closes dest
before writing anything to it).

Just drop it, it can always be re-added.

Should not change behavior.

Signed-off-by: Miloslav Trmač <mitr@redhat.com>
2024-03-07 14:08:54 +01:00
2ba3a2d56d pkg/machine: fix relative DefaultPolicyJSONPath
When we set a relative path (i.e. ".") it should be resolved next to
binary so we need to get the base dir. If we join it directly like it
did before you get a path like .../podman/policy.json where podman is the
podman executable so it is not a directory and thus could not contain the
policy.json file.

ref #21964

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2024-03-07 12:22:48 +01:00
724c5a06ba Don't read full VM File before decompressing
While working on #21592 we figured out that the
the full VM File was loaded in memory when detecting
the file format, but only a few bytes are needed.
This commit address that.

[NO NEW TESTS NEEDED]

Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>
2024-03-07 10:11:11 +01:00
56e0f063bd Merge pull request #21960 from Luap99/machine-strongunits
machine: make more use of strongunits
2024-03-06 19:15:09 +00:00
f9da0053ad Merge pull request #21961 from ashley-cui/wininstaller
[CI:DOCS] Fix windows installer action
2024-03-06 17:13:55 +00:00
ff81cf7c74 [CI:DOCS] Fix windows installer action
For some reason, the Windows image now doesn't have wix installed by default. Make sure to install it.

Signed-off-by: Ashley Cui <acui@redhat.com>
2024-03-06 11:03:27 -05:00
4d2fc293c0 machine: make more use of strongunits
To make it very clear in the code what unit the uint represents.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2024-03-06 16:14:30 +01:00
35a8b03267 Merge pull request #21949 from edsantiago/more-flake-fixes
CI: try to fix more flakes
2024-03-06 14:04:06 +00:00
ef53c76b3b Merge pull request #21954 from containers/renovate/github.com-containers-libhvee-digest
fix(deps): update github.com/containers/libhvee digest to 7cee23c
2024-03-06 13:58:37 +00:00
5ad1f2e43b Merge pull request #21918 from tnk4on/fix-wrong-units-size-return
Fix problem with `podman machine list` returning wrong units for Memory and Disk size
2024-03-06 13:55:56 +00:00
22c6d04191 Merge pull request #21951 from containers/renovate/google.golang.org-protobuf-1.x
fix(deps): update module google.golang.org/protobuf to v1.33.0
2024-03-06 13:44:55 +00:00
92b67a69ae Fix wrong units size return
Signed-off-by: Shion Tanaka <shtanaka@redhat.com>
2024-03-06 19:41:11 +09:00
79012795a0 fix(deps): update github.com/containers/libhvee digest to 7cee23c
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-06 01:34:54 +00:00
4fb96e9d15 Merge pull request #21907 from debarshiray/wip/rishi/rpm-podman.spec-podmansh-manual-podmansh-package
[CI:BUILD] rpm: Put the podmansh(1) manual in the podmansh sub-package
2024-03-05 21:19:12 +00:00
15beef2a78 Merge pull request #21905 from cevich/remove_repo_artifact
Revert "Expose as-tested Mac/Windows repository state"
2024-03-05 21:16:27 +00:00
d6d2601742 [CI:DOCS] Migrate podman container image
Moved to: https://github.com/containers/image_build

Signed-off-by: Chris Evich <cevich@redhat.com>
2024-03-05 16:11:02 -05:00
9c73326e12 Merge pull request #21948 from edsantiago/fix-checkpoint-race
e2e: fix potential race in file-locks test
2024-03-05 21:10:56 +00:00