22072 Commits

Author SHA1 Message Date
1dfd3d3d12 pkg/machine: refresh config after we hold lock
Currently we first read the conf and then lock, this is racy because
while we wait for the lock another process might change the state so
the only way to have the actual current state is to read the file
while holding the lock.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2024-03-14 11:06:04 +01:00
be25514b5f Merge pull request #22035 from containers/renovate/setuptools-69.x
Update dependency setuptools to ~=69.2.0
2024-03-14 08:27:51 +00:00
d5e0ecc619 Update dependency setuptools to ~=69.2.0
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-14 02:36:50 +00:00
8d02d8a96b Merge pull request #22018 from containers/renovate/github.com-containers-ocicrypt-1.x
fix(deps): update module github.com/containers/ocicrypt to v1.1.10
2024-03-14 02:35:09 +00:00
075bf503ec Merge pull request #22033 from Luap99/validate-test-included
Makefile: drop tests-included from validate target
2024-03-13 19:39:41 +00:00
358ac20a1e Merge pull request #22028 from n1hility/fix-api-socket
Change API socket to be machine name isolated
2024-03-13 19:36:56 +00:00
87896d3f43 Merge pull request #21963 from mheon/release_notes_500
[CI:DOCS] Add release notes for v5.0.0
2024-03-13 18:36:28 +00:00
e58cb97de1 Change API socket to be machine name isolated
- Fixes conflicts such as removal of second machine deleting a socket of a
  the first machine while it's running
- Move API socket into runtime directory for consistency
- Add API and gvproxy sockets to removal list
- Cleanup related logic

Signed-off-by: Jason T. Greene <jason.greene@redhat.com>
2024-03-13 13:28:14 -05:00
dbf38779bd Makefile: drop tests-included from validate target
make validate should work locally, this check makes no sense in a local
context as it checks for a github label.
To fix this remove this check from the validate target and only use it
as part of the CI validate run.

While at it remove old dnf install step, the issue has been closed for a
long time and it should already be part of our base images.

Fixes #22031

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2024-03-13 18:17:43 +01:00
c25bfe1c8c Merge pull request #21864 from l0rd/compress-refactoring-v5-plus-plus
Machine decompress.go refactoring follow-up
2024-03-13 16:49:17 +00:00
cc495a9fac Merge pull request #22014 from baude/norqdpolicy
do not require policy.json
2024-03-13 15:21:12 +00:00
0fdd83173f Add release notes for v5.0.0
Signed-off-by: Matt Heon <mheon@redhat.com>
2024-03-13 10:23:06 -04:00
469fd84688 Merge pull request #21883 from l0rd/winmake-win-gvproxy-target
Add target win-gvproxy in winmake.ps1
2024-03-13 14:17:57 +00:00
d7bc7b7b41 do not require policy.json
we are having second thoughts about *requiring* a policy.json on podman
machine hosts.  we are concerned that we need to work out some more use
cases to be sure we do not make choices now that limit us in the near
term future. for example, should the policy files be the same for
container images and machine images? And should one live on the host
machine and the other live in the machine?

therefore, if a policy.json *is* present in the correct location, we will use and honor it; however, if it does not, we will allow the machine image to be pulled without a policy.

Signed-off-by: Brent Baude <baude@redhat.com>
Co-authored-by: Paul Holzinger <45212748+Luap99@users.noreply.github.com>
Signed-off-by: Brent Baude <bbaude@redhat.com>
2024-03-13 09:07:51 -05:00
82597144b6 Machine decompress.go refactoring follow-up
1. Added the xz decompression unit tests

2. Removed the xz implementation to use the one from c/images

3. Removed the specific macos gzip, zstd compressor and use
   the generic compressor but with SparseWriter if GOOS == darwin

Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>
2024-03-13 00:58:50 +01:00
abaa179aa0 Add target win-gvproxy in winmake.ps1
For consistency with linux/osx makefile
I have added the win-gvproxy target as
an alias of win-sshproxy

[NO NEW TESTS NEEDED]

Signed-off-by: Mario Loriedo <mario.loriedo@gmail.com>
2024-03-13 00:45:10 +01:00
c2695fc9d2 Merge pull request #22026 from baude/finalmachineimageref
Add final machine endpoint
2024-03-12 16:50:59 +00:00
a7d38c6ea2 Merge pull request #22020 from Luap99/api-doc-version
[CI:DOCS] update API doc version to 5.0.0
2024-03-12 15:58:49 +00:00
4c5d26f6f9 Add final machine endpoint
Adding the final machine endpoint as quay.io/podman/machine-os in the
Podman code.  As a reminder, we decided we would set this in containers
conf once things settle down and this code would then be removed.

Signed-off-by: Brent Baude <bbaude@redhat.com>
2024-03-12 09:37:57 -05:00
068ddfd19f update API doc version to 5.0.0
Also update the website to display the correct swagger doc for the right
version, the 5.0 swagger file will not exist until we branch but I added
it anyway so we do not forget it.

Signed-off-by: Paul Holzinger <pholzing@redhat.com>
2024-03-12 12:06:15 +01:00
83e671a2c5 fix(deps): update module github.com/containers/ocicrypt to v1.1.10
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-12 03:55:46 +00:00
38e22d443c Merge pull request #21950 from cevich/move_podmanimage
[CI:DOCS] Migrate podman container image
2024-03-11 17:28:28 +00:00
1ed976ef2d Merge pull request #22012 from ashley-cui/rc6
Bump to 5.0.0-rc6
2024-03-11 16:41:26 +00:00
f2af295e44 Bump to 5.0.0-dev
Signed-off-by: Ashley Cui <acui@redhat.com>
2024-03-11 10:48:53 -04:00
d26113ca81 Bump to 5.0.0-rc6
Signed-off-by: Ashley Cui <acui@redhat.com>
v5.0.0-rc6
2024-03-11 10:48:18 -04:00
1cf9eb5db3 Merge pull request #21999 from eriksjolund/performance-guide-fix-URL
[CI:DOCS] performance: fix URL
2024-03-11 10:36:21 +00:00
6e0a9cbd47 Merge pull request #22007 from vrothberg/quadlet-docs
Quadlet docs
2024-03-11 10:24:45 +00:00
52ed774c23 docs: generate-systemd: add clarification statement
Based on user feedback, I think it's time to clarify that there are no
plans to remove generate-systemd.  Deprecation here means that the
command will not receive new features but only urgent bug fixes.

Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
2024-03-11 09:03:36 +01:00
3d6758a61d docs: quadlet: improve docs on root/rootless dirs
Make the docs more explicit on which directories are read for root and
rootless users to avoid confusion [1].

[1] https://github.com/containers/podman/discussions/20218#discussioncomment-8721351

Signed-off-by: Valentin Rothberg <vrothberg@redhat.com>
2024-03-11 09:00:43 +01:00
885dd2addf [CI:DOCS] performance: fix URL and kernel version requirement
Fix broken URL.

Fix kernel version requirement for native overlay rootless support.
Reference: https://www.redhat.com/sysadmin/podman-rootless-overlay

Signed-off-by: Erik Sjölund <erik.sjolund@gmail.com>
2024-03-09 16:29:43 +01:00
76578e1b53 Merge pull request #21994 from cevich/rm_buildpush
[CI:DOCS] Remove outdated references
2024-03-08 19:03:58 +00:00
e6ac569a14 [CI:DOCS] Remove outdated references
The container image build automation no longer lives here, it was moved
to containers/image_build.

Also strip out a few lingering comments referencing gitleaks, which was
removed from automation use.

Signed-off-by: Chris Evich <cevich@redhat.com>
2024-03-08 08:59:28 -05:00
642a8f13a5 Merge pull request #21992 from jesseborden/patch-1
Add note to performance.md for RHEL 8.5 overlayfs support
2024-03-08 13:13:34 +00:00
364813da65 Add note for RHEL 8.5
Add note for RHEL 8.5

Signed-off-by: Jesse Borden <40326854+jesseborden@users.noreply.github.com>
2024-03-08 07:02:24 -05:00
3c20e38cec Merge pull request #21989 from containers/renovate/go-gopkg.in/go-jose/go-jose.v2-vulnerability
Update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [SECURITY]
2024-03-08 10:01:05 +00:00
d7b2fc8f43 Merge pull request #21988 from containers/renovate/go-github.com/go-jose/go-jose/v3-vulnerability
Update module github.com/go-jose/go-jose/v3 to v3.0.3 [SECURITY]
2024-03-08 09:58:17 +00:00
e220d1ce62 Update module gopkg.in/go-jose/go-jose.v2 to v2.6.3 [SECURITY]
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-08 02:14:11 +00:00
f91b8e77b7 Update module github.com/go-jose/go-jose/v3 to v3.0.3 [SECURITY]
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-03-08 02:13:56 +00:00
1cbedfb7d5 Merge pull request #21986 from ashley-cui/500rc5
Bump to 5.0.0-rc5
2024-03-08 02:10:41 +00:00
9b21a5b795 Bump to v5.0.0-dev
Signed-off-by: Ashley Cui <acui@redhat.com>
2024-03-07 18:42:58 -05:00
bbad09bb0e Bump to v5.0.0-rc5
Signed-off-by: Ashley Cui <acui@redhat.com>
v5.0.0-rc5
2024-03-07 18:42:46 -05:00
432f4fbf99 Fix Mac CI
Building arm podman needs to be the last thing built in the OSX cross task. The Mac tests rely this Podman binary to run, and the CI Mac is ARM-based

Signed-off-by: Ashley Cui <acui@redhat.com>
2024-03-07 18:42:29 -05:00
45068124f0 Merge pull request #21985 from n1hility/fin-policy-json
Complete policy.json inclusion (Also add to win installer)
2024-03-07 21:13:38 +00:00
d54a373996 Complete policy.json inclusion
- Sets default search location to always be the peer directory
  + make podman-remote now creates binaries that work the same as release zips
- Updates release zip to match expected search location
- Updates win installer to include the file if present in the repo cross-build
  archive

[NO NEW TESTS NEEDED]

Signed-off-by: Jason T. Greene <jason.greene@redhat.com>
2024-03-07 14:05:22 -06:00
2e52b4fa78 Merge pull request #21982 from Luap99/machine-compose
podman compose: enable machine socket connection
2024-03-07 18:42:24 +00:00
9a888de557 Merge pull request #21973 from TomSweeneyRedHat/dev/tsweeney/buildahv1350
Bump Buildah to v1.35.0
2024-03-07 18:14:54 +00:00
4541f0c4ed Merge pull request #21980 from Luap99/machine-locking-fixes
more machine locking fixes
2024-03-07 16:51:37 +00:00
b234bb55e4 Bump Buildah to v1.35.0
As the title says.  This is the last step in the vendor dance for
Podman v5.0.

[NO NEW TESTS NEEDED]

Signed-off-by: tomsweeneyredhat <tsweeney@redhat.com>
2024-03-07 11:51:09 -05:00
f3dd5f132a Merge pull request #21978 from ashley-cui/fatbin
[CI:BUILD] Build universal Podman binary for Mac installer
2024-03-07 16:46:29 +00:00
15e508a639 Merge pull request #21936 from l0rd/vmfile-peek
Don't read full VM File before decompressing
2024-03-07 16:40:09 +00:00